last executing test programs: 2m27.421567824s ago: executing program 32 (id=1009): r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0), &(0x7f0000000380)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000800)={{'\x00', 0x2}, {0x524}, 0x80, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)="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", 0x106, 0x0, &(0x7f0000000680)={0x2, 0x147, {0x1, 0xc, 0xcd, "1d9c96f78b0f6f82832d5d7128bfa9026fe2386819366b7c7f62be3918f6dd0757e7281d73f03931e8a7ee565255f7e5f399db5cdb669c6bb11568dd1ba4c47a97010af40feac853a21d966730e99cbe224166c8b26470235555e065597d72db8cbba0ddbde0da07c15cdb77991981d097a8c48bb37ee850bbd7c8423c482259c8672e2a1d257705665af9828991330c7c272e90b0288d608d4290ce5084cf70e91b1c5a8d327f04331a42d9742b8cfaf3a34267bdd78a5e982c013d60ba06efbdd354d1913efaf7a846624460", 0x6d, "5a02526191937303cd1c06d089ab966e959e8df63fb26ffbf1c2ed83a40cb5b7c59bf4d786b869dbfdf08f5c89922cab87fd398ad455e8c8a3d7a819cefe32cbd03f0ad4c35f69ce16294f9a4f9ab2fdeb2206107de77102e0c4feb42f4d5ef0651e6efd253e6fbd0106ffa05f"}, 0x2a, "d01c08471047826113073c3d2d126552ce69f22871cff71e483506b91f7a84544e6a1b117445af625523"}, 0x17d}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000001900)={{}, "9f5e437e227c1d5c85eff5672e23dba4d906efbe40682321dad0d10b17dedc2d93b762a9820b8a9bd0071100202f3cf810b30609b815b9ae47a99ec8e2deafe09befeb50010143dade36705f15fbcd2f5fef5b97fd7634699c9c9048e6e4a7a8a7bc4db10ba8044590a3576f4432c5f59715e05e17f2e43a7f7941d24e03af086672389d0d799081a8d03f2d8cd3cb800e64355d8aa9b9a30314b125ed1c3f084d8ef51d5a69724cf323005018e541b7304493492269608ad946688344199b45fa5e014125db8fed1b48412800271bbec7fba0a9643a8af66cc161bff3be22e07105c096318fdec61677a890dabec3385452495c35ce286957abf4d181d9a9db6d1b8d09f2aa39e10648ad9d7b64db9c8af7682bc3aad55e13936e52780485c08a83e420c9b3288a82b48be223397650548ad09e5b52250a24ed488b56a03a81378a66ba86491d2ef15ba97901308055edacd19f8d26c488a8c10ee5a9bf135c75686c0369fdc8f5aaa3fb6a90a2c7e91c630641c7cb711e0dc75d60a2ce1f74032c9a76c39f5e6434e6ac1dd70ab5cf6c66b4794f898dfcf13e3290f789120ed7b0a72e40a162ea440a98717f69f6a60e4fce871bcc5a831ceded8264ef9805698a56cce595f824d235a99c2ae0dd705ffacc7c5b42a77651c0246bff5ff11fd2f92b92d758dc8236e794dca866ad957ebb145a7193656bd2c0bf1d2992e9f27e187040df9c15f5530a44d8a343181dcfae0572c31ffb4421613204da5a036bd15dd80db2d498c0c01e0c98e002fa4e188e771cd165d09bce1ade04131084e147bd0b85c754ff208c029671e0a116fdb94f314cd01f2f89b76c2d81ff6c571fb3302af31baa824a789d283c098464ed626527ad6c8c1fa2c67baf12496cd05ba07e0c884c516641251fc87e8fdfc630270a35528b7c4ea60ed2af8efc86eb50be58b7b67a93636c33629e478cc4b872fd3247a5a4750afe86d5527f5626129d635b01d9302012ea27735c31b52ae52f1a4ae86ebec9d0789e1408f89fdae943e29897daf5ebc3504790edb13fcadf00830857b63b90fcdf97e80d82f9e76efa2474d86fc4e3e0598ed211d8026b4a1a37116192aa3f27ef3bbc8d89f23e88137cd0ef2b4d520d178d628a332bf619cb6671063d473cca048121dd005602e26c54d825a8acb02be61377abb9c3d749d934911a4054f0be57cc80d3184a8a7d8419465824f7090136d26509a8e5da09e1171b5cee9df10996dde6f0a1418e45ee704685f1609417a257515dd24cc0bc24e5711d67db725c8a2f6daa1e1eca60febb8ec4bc9ba9ab3f02b84cb0be7cdbd8fc90f844dc3f1b0b2e424747069f202edb6a36b1a36c6bb4a18240e2211d102e01699cc9a5a13e1fb285d4fe00d59ee85cb4c0ac0d1c2e045f4b31df0254a955aa9611e76483e8b58f7921e43a51d8b7b12b3698579d7b40e9305a8cecef8d7d4af2fbf43c1e67fc467b5476c89b70b4a58edd4728a364f924e558b86acfafe80e494d4a6ef5c95ed7b1cd89921d15ecc49204de9623bf01ec16fd8566039861276933963c111bfda6d394d54badcac7f2a4d2fadc69e512611159765b63a74d321fb91b43f34e22970469e403e945da3ef0290fc336b1c9b4ea7fd0a33bdd5d7de86357563030e5bd355671e3d1a204e2f0f6e5bcdb92e98cc6df8bc035c71a4decdb95dccb3363ac2f394b1d169c8e09278313ef5e8994a9567f50cb6a8d82930317a23dc20e312f5195894ef278b0ad0df2e91a0ce3633e7a0364dec705c6f291074b285cc33dd70ed92d65eda567ae614d8c7ac8f01c172dc0ada8f3c4d6eaf8d1db0d619c01163cafb0b2fe8df0d84ccc2b144e088f70a3ad0aa0adca8afe8efc9b11f91b030d2cddf89253139181a6244236324510efc4630d53721e99f51c49406f920356eaf998f76dd5febcd5ffd8f77a1c6baacfb8ab974096c702d853377c3a035921ceef9a4cb5e477241d224a076e510adc85213795da1db4ac4c452d704b8e3a33ea91ead5d386a73236a2900f078117445c68ee1a482caad695fd314bd57a325f6a60de29153eb9e160a511d29fdd0105c8b6d71f2527f7b4aa66162105f8f4667b9af8c0df1159fec919f47837546466828d23e1490b175e22cb75cd5b779613d0e999222e3ec5c055b74da2f5d49cc5f623bf98aa40c5a2f7a6a629cb96d41e5e5f75c74dc822a04120a9744778163e84561ed1cdc22d8e5a751571cd526dba1445a2aedf3f95273fbe3a0ab83ffd7a4e3f0ce04d3ba9be28928d88c61fe7d48a10a89d5e2c29cfc52cb5a0ddead2ed87448585e6fb5348aed1f41416e219b126242e7432b14a6d90b69b60209ffd7e0626a8041c64cc866d6a6db9fc37afe18e52abcab2ef0a793e5024c3940a902749e81751d96be8cf9c6939cc21237fbe17f03d3ac713f49c7b67f70eb4ba8d9470c3d73a8dbd8bec001ac154c6ee009809329adb096a0136a4d375d957b7c1a951fa6a9bfbbd6fd6e62c704aa9673a219bd9fe07b2eb0ff94e19b032a8ee6023d9af755957f65812ad304c296e283748f42f6eddae47cfcfca7bba9588542b7d75ddaf4132da4bb6a358c3e73756a9468f19e06dc34673db9c4c5f307db1b6ac3518a98075e50688b8460a63667b7dd489286c71cdf2a35720751e0851b63bff024abe5190230314c89607c3027aece92937f5388474ec2b947bfd08621e718a55d42fce21fd3c48fb8c52ac593ca20babe41e3b582ff64d2c92ada4eb41479fa6f160fe3cd189ff968791935598617a20e2df8527d727bdcf7461b3e98cce4e76c3887dd08f15cdf0b3e431110edc5b830b108d1e05e1a80e4a212fa5d0ca85ba41c775f8bd164d7cd244c06792eaac3b3bd03d21a3f0a578763c78ccc0ab968a89f347335dc2a5f77f6486addb4eca83b7d98a9710d7b9b8be03eb076f2d00ffcc4f9304a6fb7a35e09dbf8e7dbba6176d9d8f528bd914cf97d1fa3c9bbc2cd3b3fb2a78dba495a6111abaa714c48796ce3ad7bf3aa65b3f06e9ff37024074f849c017b293949bfdc69eea9e25d59a5e77120b1ab2c34434720b4f3b19b8703f4708c3fab10346a1a9eccb5bcfd985cff8820f0eb6247b0736970bec56b7f04bb7c46b7701ed1ee0ba1b74c3d316d2af4e8fbf2b66a04e2c4b286e7e2885e9bfa668c6807a20d58fc3887795023ef473a437ba2f1afca6838b1305d00f8ce3822c102cf1eb8b4f137c041d6655b259d8650b7a650337559ea095d9cbf7b93494528caaa809728c0fb1435d9b4b7ec387c7c3ba5a27fa3e0dee8d19413a6fbf8e5bf2674723fdd7d37913c9d90708373299a758fe06dc9f4eaabaf57650260ca18208994cc161bf4140e27b6276bd5805d2baae1688d4f3ae5743c2a908389d370b2891ce184d538b8b3057286f4b35a366266f5e81635e17b75c263ecaa34a780eb844e66568679df85942a6e55f478a1fb5cc096e8c9f9300da6a7c117c0f9d7878f7f4143fddc11199fd876a2b4018b728925e1b580d94ffc26c2bffd3181d6ea020e22e7a68e4340f2be96a11af20b4deec3b6ca6b5508dcceb96078d94c8a27358b86b63f833d6386c41731b37c7a167685ce839b7e1c120f05faef4584b3864474bee02cedd2f34eb712d72da1674d8b382d0c7420071652cea699af5861045944a70f5eaf1f1209f271d95f3ca9fe8106c29cb0b22f5a8b99aa48dc378f90ea01614535971936b218860fc614771c02a3d3c66da367eb8ae3b0e0d47e1f819ed0cd82dcb7212ddf19df7d3bc551095c0a2a5d105128f7637c7556f4a01f3fa2b1659fc983fb477eba4fa70bbb8169d0ad0c07a38fe6ff396de631233fa85492da7ad0433b0adbb817e419812ddd85038329a707ee3ab11d100c8de2389d9cfda25f2b656d432e96191009a31902f79bad2a673afdaef834a44a1db51f62878d99d3eb2475e3d5828bb708c5c8c4bb1820fdde66a2ecae124c3f86366ee8c0cdf694a061a71fc35e3c37680a4a7daf78faeec3c2f1a059eb214f61632807e3a582ea2a6570589e8fb2f285e0d99becb74ae4617787605f7f1afb300181fdbcbdafcf879df8726120e0e4cfd6529837474a34d6af2f9076c3719419591b4d41b6933b0c8768c79dc54f9bad1950fa5b3741506163aba002b1e2b0db761174778dde39f7da57e2558503fd08ca2e4a94bf831f3f94a43f9aaed3bca06113dc1b0e9cc317fbc79e1ea560c9bbb1805b4345fb57ca0b28af46f648ab6dfcf1e06691f507feefc09140239414cfd828ab0492d5c8851ce0e3059282b354b1240487460203b0d10a734322a30a4e96571acf581472add454738a7d539377f2ad50542a6974ebaa87cc8c8688eef397c1e171f6bfac2579a19346960e3978e9d1247fadabe285521632930871c26a536e75e6b76c4d457f7e4d1747f02bcbc27b00d1683df113f4a4eaf713864caebc8b9874327c235af5ba0a81672bc03a4499d8dcbbf62a61c47212df3dd648c1bab058c889e39fbf2c9e7f1a6c6be93b058a55439fde50af1082cdba0533cc1008101ff58e507afab9f9a26dff2f4cc93049cf34a620d844c6bddaf1b324e382b4e83feebee26320cb63a328f26641ae39d101fa24038e34813c567e50d5c5d7234e0b4c70cc42285018b804cc98fb097ff7584db5f8758219083851bfd229bf00429dd5344209b740c7f9bca108d43d7e4eabbd99c2f4b5d8ef202ba2616d24a5d02263d754107cc9e538e9ac9306d13c355edf2455eb1182ccd0395fb617dc91fcd8c02cd8031d83011e7747529f7789c5f5f3709b4771bb6343cf92fef8f194972618f2660c67c6d142fd33531c831da55c666ad71c9502157d58bdae83da74b24951d79ab9ed5364dc0df07d47bbe9b2a40e4b640df52f852d0edd6ef1da1491670c9e744fc83680d23cc50073cd91f5cccd954dd808e33c6ad35ed3ff232bc881067eeb07777457349e63474e3c9df239f671f9eeea8982f168689e136aff242c493b8464f1d0214f186111b13bf8a7c5992abac41c80327e4d08c9a1b537ca9c17d0c5280a265892d7357c828ad2ec5d9c71f76a057edee6af1d7ac495bdd991f1b8f18d0fee783626745dcf5a268636c458ef53004d6b256c7db152eef9d749f1b4eceaf7f275d272bc030ac8f096741ec22098e4280644311a419125de94854e07e3392bd63efdc1233666eb9ef4eb50826741b6ef836dd9862256b444ff17431616fc9646955c0366e7177dab9931e6fdca200c0385f7e48fc2e79b1a6fa95b6a98b97d637cac64fef92ac4451572df4a9f98346d2177f5c311af20592a7a0f49c8a8cdb2fdbdc1ff2f0e33bd04a53d0c995ccbf997366274bc18f8fce6cab3da11a91b7908ad6dd451c918e55477bc179c3375849deb545c2d21b95c089d53e995a58e1632906d6c4582d20ef6ff4238a919eec8014a45fc28ff377312db0c7ed528356921f7d9056f28fe66cfd3c5f537260e4c44f6970c4a24f2a831c2a790ab07a318f57ff1f568cad2d64224ffea2a6ef4003ac79254d5c21b1b8e6bb860dbd7d9bc21b2f539fe8f1f648a422f110ca9120af66aa022806b1cbbc158b2a492e41b9c286d1a6c8cf382e9a3de3b98f1288f6316ceabc97eb3a96a84595ecf00e7a30d11fd3f371f4a6161105319e6a20a74e0b73c3f53f7facf5b6b3e753546f76f15b02eab58ef94ccc5a580d4d6665daae330467b7082f982f5f6567cc7b686b020d59526efbc6802bba0f51627e806d890a6077accc62bddba5"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000191c0)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="0000000002"], 0x48) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x7, r4, 0x7}, 0xc) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 2m17.908124155s ago: executing program 33 (id=1124): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async) unshare(0x62040200) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000d00), 0x4) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000001240)=@add_del={0x2, &(0x7f0000001200)='syzkaller0\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async, rerun: 64) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async, rerun: 64) setsockopt$inet_int(r3, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async, rerun: 32) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) (async, rerun: 32) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000012c0)={0x2, 'tunl0\x00', 0x3}, 0x18) setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r3, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, 0x0) (async) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) sendmmsg$sock(r5, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@txtime={{0x18, 0x1, 0x3d, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000980)="7a9cbfd59ed400dffc76ebc458b1c4e617e841d37368cf1269509d5498fd2da2d0354b6ac6cfe62c066a87dd1cb4368449", 0x31}, {&(0x7f00000009c0)="08352aec", 0x4}, {0x0}, {&(0x7f0000000b40)}, {&(0x7f0000000bc0)="a27a49c2980d0906da029a29f0e51df340a719d7d2247530cc3af11840e308427c3eb2efde4efb4bb9f5d7d5e064502c61ceb502f81d60c97546384de4cdf0", 0x3f}, {&(0x7f0000000000)="c046f9410591b86ea331a6d615b9c527790b1f7b6bfd922c", 0x18}, {0x0}], 0x7}}, {{0x0, 0x0, &(0x7f0000001080)}}], 0x3, 0x90) 2m3.875722129s ago: executing program 34 (id=1251): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@private=0xa010100, @in=@broadcast, 0x0, 0x0, 0x2, 0x400, 0xa, 0x20, 0x20, 0x1d}, {0xfffffffffffffffd}, {0x5, 0x1000000000402, 0x2be, 0x80000000000000}, 0x5, 0x0, 0x2, 0x0, 0x2, 0x1}, {{@in=@loopback, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x1, 0xff, 0x9a, 0x0, 0x20000000}}, 0xe8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x24, r2, 0xd2aa6461246a8139, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040084}, 0x4040000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d000000095"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000001580)="e0856497d56cf0f21a0000000010", 0x0, 0x20000700, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r7, 0x3b30b000) r8 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r8, 0x6180, 0x0) sendmmsg$inet6(r8, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000000080)="b826", 0x2}, {0x0}], 0x2}}], 0x1, 0xc0000) ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 2m1.411176589s ago: executing program 5 (id=1411): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) (async) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, 0x0, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) (async) close(0x3) (async) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@ssrr={0x89, 0x3, 0xa2}, @timestamp={0x44, 0x8, 0x5, 0x3, 0x0, [0x10000]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x4040001}], 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000240), &(0x7f0000000280)=0x8) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94) (async) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) unshare(0x62040200) (async) write$tun(0xffffffffffffffff, 0x0, 0x3e) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 1m46.327819055s ago: executing program 35 (id=1411): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) (async) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, 0x0, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) (async) close(0x3) (async) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@ssrr={0x89, 0x3, 0xa2}, @timestamp={0x44, 0x8, 0x5, 0x3, 0x0, [0x10000]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x4040001}], 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000240), &(0x7f0000000280)=0x8) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94) (async) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) unshare(0x62040200) (async) write$tun(0xffffffffffffffff, 0x0, 0x3e) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 1m39.188151501s ago: executing program 0 (id=1671): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x10080000, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="24000000000000002900000032000000fc010000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0ff3aea6963bd37c192fe13bd58611e669fcd40000"], 0x28}, 0x40c0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000000000001b0000002000018014000200626f6e645f736c6176655f300000000008000100cfb7ed8f8ada23e9bcb24393141bff38edce7987a1b082b96403ee3ecfea72ad303daac953a7f137c1e9c64a4629777dd6f01e276ab01c23c21bd6c1669982521af0b0afc43234f432635f4efad814d32a80808f7e8220c0288770c0a5b894cacd6dbccc3471565d95dd2c", @ANYRES32=r7, @ANYBLOB], 0x34}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f000079b000/0x4000)=nil, 0x4000, 0x3, 0x2010, r8, 0x76a92000) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r11, 0x1, 0x70bd28, 0x40, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4) mmap(&(0x7f00008df000/0xb000)=nil, 0xb000, 0x1000008, 0x13, r9, 0x7d7ea000) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r12, 0x1000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0xffffc000) 1m38.595712609s ago: executing program 0 (id=1676): r0 = socket$isdn(0x22, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1, 0x0, 0x5}, 0x18) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x4, 0x10}, 0xc) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x4, 0x10}, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000400)={@mcast2, 0x5d, r2}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0) write$rfkill(r3, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8) (async) write$rfkill(r3, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x3f8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c8, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x4, 0x4, 0x7, 0x0, 0x10, 0x2, 0x400f09, 0xfffffff8, 0x2542d461, 0xa000000, 0xa, 0x3, 0x9, 0xcc, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0xfffffe6c, 0x1, {0x6, 0x3f, 0x9, 0xa, 0x1, 0xaf, 0x0, 0x4, 0xfffffff8, 0x6, 0x2, 0x1f, 0x6, 0xe, 0x7}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xf}, @TCA_GRED_PARMS={0x38, 0x1, {0x2, 0x2, 0x3, 0x5, 0x5, 0x34, 0x7fff, 0x5, 0x3fe000, 0x6603, 0x12, 0x18, 0x3, 0x1, 0x2, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x10}, @TCA_GRED_STAB={0x104, 0x2, "6e68fec84ba0ec7fc98f3fb805afc35949b2b2c01280c94e96a262eb2d7ca7f9b8bfbda026277bfd888fa92a7553e0bdc79afb2707d12790b2446b881a469c67c254d68287d7d9af602bbb615da20b05af2017ffa0ffeee82c443abdc54cf3a8f2edc22304ed4553dc50bcf61a4757d1fa8c88f16207851dbdcf1731af835bcbf02dac6f1b75fd2f4bb798b69753bd83547000d0c795f2902fc87e035523c91d08fe5cc0297637a47d4af52884471e133ebc913d34afeadade24a69c362c27955f672a90b9c75c9b735fe9d03d207752208c76a4daaa413ea37804d6750eeca5b0fe5c863969c841e19eb77b90e84aa8ed81d1fa3159170d2110ba728f0ab169"}]}}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x3f8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c8, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x4, 0x4, 0x7, 0x0, 0x10, 0x2, 0x400f09, 0xfffffff8, 0x2542d461, 0xa000000, 0xa, 0x3, 0x9, 0xcc, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0xfffffe6c, 0x1, {0x6, 0x3f, 0x9, 0xa, 0x1, 0xaf, 0x0, 0x4, 0xfffffff8, 0x6, 0x2, 0x1f, 0x6, 0xe, 0x7}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xf}, @TCA_GRED_PARMS={0x38, 0x1, {0x2, 0x2, 0x3, 0x5, 0x5, 0x34, 0x7fff, 0x5, 0x3fe000, 0x6603, 0x12, 0x18, 0x3, 0x1, 0x2, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "406157f0e2b1d7b4917a42124fdd9ec1ad15e7350335f3e917fe072936a820531da00dd939075e064e5aade93f1fe6f90372da330feac3045aef78ff175c04f734652514bb5f82e31babf3aeac4fcabbe147563607aa7bd931eb63269f275fc897409b124f535573d2ed67b8b4da4c7c5481e60d6d9da1a6c61e3a7da896f23f18c1e47be9079a9e0af15e8dcf2b5093045d61cfa52eeee2c0b497f1c71e24dda2663795ddd2ddae560bf4157f7df72e02c20ff082ac4697aa2142062ab1bd82ef5894cfe42ff343f54b399c3a8ca024c1bcba6fb6d2b660adb5db59853dce38d78ee9c56018f1757fc8361b3d1f3ff6830503aeacea70c4e8daca550c10ae51"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x10}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$nl_netfilter(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x10, 0x2, 0x301, 0x70bd29, 0x25dfdbfd, {0x3, 0x0, 0x1}, [@typed={0x4, 0x1a}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) sendmsg$nl_netfilter(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x10, 0x2, 0x301, 0x70bd29, 0x25dfdbfd, {0x3, 0x0, 0x1}, [@typed={0x4, 0x1a}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 1m35.123477292s ago: executing program 0 (id=1697): r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x200000000114, 0x2719, 0xffffffffffffffff, &(0x7f0000000000)) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f00000000c0)=0xa, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty=0xe0000001}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523c02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904b133eebafc6eb170fb006", "21144ab13a642475fc21552dce5cda9c"}}}}}}}, 0x0) 1m34.943745782s ago: executing program 0 (id=1700): syz_emit_ethernet(0x46, &(0x7f0000000080)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x10, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c}], @echo_reply}}}}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x6, &(0x7f0000000300)={0x7fffffffefff}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x1, 0x0, 0x1000, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x1}, 0x86, 0x1, 0x0, 0x0, "9e725048442400e2162dd61f58c8ac72e8cb2903be71d67826f40daaa8cafdc14079f0223245216ea0192558a5f3ca2e46eb947d655e436adbd65756a8e97e18"}}, 0x80}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000200)) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="02"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@in6_addr=@remote, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000046}, 0x24004010) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 1m34.580743535s ago: executing program 0 (id=1704): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x4, {0x0, 0xff}}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x2, {0x0, 0xff, 0x1}}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="58000000020201040000000000000000000000001400078005001400f4000000080008400000003683ff040003000000050008000200000005000400040000000900020073797a31000000000c000300686173683a697000"], 0x58}, 0x1, 0x0, 0x0, 0x24000018}, 0x40) close(0x4) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000280)={r5, r5, 0x1, 0x2, &(0x7f00000001c0)="0090", 0x48, 0x1, 0x7, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r7}, @IFLA_GTP_FD1={0x8, 0x2, @udp6}]}}}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdb8}, 0x1, 0x0, 0x0, 0xc018}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002240)=ANY=[@ANYBLOB="8c1300003c0007010000000000400000017c00000400fc800c00018006000600800a00005413b3800146e4974c34f92c980c91d9d4292e19320a8502b732ea78be4961fe2a0f953edf032c08001000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="04004e802946190f200ababb5684c4b65624321faae53b4955fc5b346b3f83818305486f7caef0dacb96ade79f94fd8c3587f4675903f9861c2bac22d15c30e197b3f1031f52dab3b5e64089240b2324c02e7ee6a7636a95bb4bfa4e4f6b186b954fa94ecbfbcc243a07410711792f2c6813ccd9ff43d1b0cba666ae01f58612affd2d813a7e4ab588248f2695a8151da8fff2cb268eec9407c78fd7e29373316c86561723eae25748d43f7420d2f22cf352ccf178cab5981d0586477755a71755741afd136daa140be9e87dc666570f2dc1376d627575c3d5a24771bcfc5fd7bce41bf708004c00080000005927168119330590f5bdb59ac9fa28a95ddb7d4a29486380ad560e5b6a89fef8b324b81aae769676d34eeef4a2765d49e04ca40240041fadb2c4bd9ef0d957d300bc00e380a256e10eb150efb97d72dd38b735078b2bb85df1c48e212b22d6749fe892cfc7c00535eb7e6f50afb9ca089529109ec8c762e6da3c4ba91ac4dd0ddd0bffe8680f0b8863cdc45aca3cfd0b9769b413d63b296100c67141a091625204952ceff51e53f90dfd5dca7a3a125bb4771b29531bba9d08c2b8fbf9e83db867374ad67fa559f8f5ff04a01336cc20c659b8572090d0c064a6c314ae83bce504e17a3701656493040000800800a9002e01c0e766b5ef5a32517910d273194cc995bc9f3eff871b65cd38c339ca844960fc0af1508ac90464ab41022608cc8cb2ef2c239100943942776eb826d6a5e8598e7bb077199969448b33713af9f9c577ee18a563d2c026eab51ce007ee2c9cd8d2a4d340e8d687c2b8ab4d6c7da3eed7cf858b0cc7c5746d9a83c9a96e2c80748b68dec026e2e9da6fe18d8c52e3ad034f09e931930457ef83d19d025ab66c8c468dfd22534611bee6c167a781ac434464ee089ee218d62a2780000000000000000000", @ANYRES32=0x0, @ANYBLOB="1d004e80b13f5e08fb573bfea20800a300", @ANYRES32=r4, @ANYBLOB="0500310000000000000000240011800400aa80040023800400d0800800df00", @ANYRES32=0x0, @ANYBLOB="080072000200000004002e8008004f00370f81580800940008000000d1000a8075c88fc28c8b35afa8b64b4cbde675ee686eecbbaa8de7d0a124692b67f2f7e9b6a65a3bb31a6fd00d686babf0bea48c03254ffeab91f3b0ff80b68530e7ae146adc54ea7613b5d3ccd0fa826f5ead1a92b400881c487ed1d3d55d35adae2cfeab44a35585f73a142f4ffd11623be4de7644ce3717c4618b7fbb159f8fa6608b48e0feeff4283ce6aa9944753d6535c15c78efcef5ae871a816e60e2dec4ecefd84fea8315c244b068fa67f9192eb03a4768107468a611a539cf3bf18675589efe890d6832a21431a7e7e2d53000000014000700"/260], 0x138c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r10 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) write$tun(0xffffffffffffffff, &(0x7f0000000b00)=ANY=[@ANYBLOB="01fd271053a82509ac77dfbb1a826b0c1b35b366f17941f4fe4f26627a3d07540d4274515901833f49e8febefa94707c9353819270b871e3bf38ea360fff6338e670bbecdea6e50ea577d14446de9db150960d39bf6ab0f3676b59ca6e9c3dd2daed0290384afde7af6d4237b60df0cc7b1a15addb9f02d20da545146b52540654b29215b570169839ab1c1a4142c46b114ebc29107ec49c53a5f0864ef611cdfe5dfa6db5472982758d1d137be5ab6cece9cc780de347c45a261064fb7cc24be2e6fdeed062f94802dc3ef8ec679962c707df38e1"], 0x6d) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYBLOB="3ffb99b81d3a0378f441"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000181100"/82, @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000200000000000000800000009500", @ANYRES32, @ANYBLOB="4c64d04f88f2686b1cf347ba2f52c839f87d75f07602c8fca16010e0159fcfd0900d508a524bb8827f035f759754db85f4290119ca7308c91abe32954b9c87058fb62d3e778a99cd58c56ea3ec8d52d4c3169ae50691430802bf79cb8fe59f9306cbda03d3f695ae2070e9efa47449956c78fa3527c1ef82dc482c83593abacff65efa89f528c5f465c4c50168bf187f8d14c471522fa4ba62c2fa023bf648df58993bd13de65209104b4dbbd4de1d86fa0ca35d57bea5428a34885e34a17e3e65ffd23817113c9669b6c96711d3c8653c38da5d6d3c5c9c7cb11559d1c6238bf58b13a7c81ff5ffa9a1bd7c44", @ANYRES32=0x1], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0xffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x22, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000feffffff00000000000000", @ANYBLOB="00000000000000008500000083000000bf09000000000afb5509030000000008950000010000000018110000b1073807587e1e33008037fa866fcf7bf7186df7f1ae5a0a7a499066", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018280000", @ANYRES32=0x1, @ANYBLOB="0000000000020000b7080000000000007b8af8ff00000000b7080000008000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0xc504, 0xb7, &(0x7f00000006c0)=""/183, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x8}, 0x94) 1m33.91682125s ago: executing program 0 (id=1711): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYRESDEC=r2, @ANYRESHEX=r0, @ANYBLOB="a354cbdaf2fa62de9c641c2909be9edbae4e30aadf73186a1d281f"], 0x1c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) close(0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r6, &(0x7f0000000340)=""/49, 0x31) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x8044) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x8, @loopback, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendto$inet6(r5, &(0x7f0000000040)='\v', 0x1, 0x20008081, 0x0, 0x0) writev(r5, &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000580)='percpu_alloc_percpu\x00', 0xffffffffffffffff, 0x0, 0x400}, 0x18) 1m21.384017771s ago: executing program 7 (id=1831): syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x68, 0x0, 0x4, 0x67, 0x0, @rand_addr, @multicast1}, @redirect={0x5, 0x1, 0x0, @rand_addr=0x64010100, {0x7, 0x4, 0x3, 0x4, 0x1ff, 0x66, 0x8, 0x4, 0x1d, 0x0, @rand_addr=0x64010100, @remote, {[@generic={0x88, 0x5, "05d176"}]}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000240)={@multicast, @random="000803006600", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, [{0x1, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2202"}, {0x0, 0x1, "000000050000000026000400"}, {0x1, 0x1, "437d65c32f71"}]}}}}}}, 0x0) 1m21.308624373s ago: executing program 7 (id=1834): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff00002000"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) socket$nl_crypto(0x10, 0x3, 0x15) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0xdd5, &(0x7f0000000400)=ANY=[], 0x0) 1m19.541171953s ago: executing program 7 (id=1846): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0xfff, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000700000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000001000000900800000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0700000000000000000000000000000065d78561dcbace79"], 0xb8}}, 0x10) 1m19.429307297s ago: executing program 7 (id=1849): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x5c, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) connect$inet(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000100)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) clock_gettime(0x0, 0x0) select(0x40, &(0x7f0000000180)={0x200, 0x0, 0x5c3e, 0xfe22, 0x0, 0x3, 0xab}, 0x0, 0x0, &(0x7f0000000480)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r7, 0x8030942b, &(0x7f0000000000)={0x9, {0x0, 0x7fffffffffffffff, 0x366c, 0x8, 0xffff}}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 1m18.719026535s ago: executing program 36 (id=1711): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYRESDEC=r2, @ANYRESHEX=r0, @ANYBLOB="a354cbdaf2fa62de9c641c2909be9edbae4e30aadf73186a1d281f"], 0x1c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) close(0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r6, &(0x7f0000000340)=""/49, 0x31) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x8044) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x8, @loopback, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendto$inet6(r5, &(0x7f0000000040)='\v', 0x1, 0x20008081, 0x0, 0x0) writev(r5, &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000580)='percpu_alloc_percpu\x00', 0xffffffffffffffff, 0x0, 0x400}, 0x18) 1m17.797103982s ago: executing program 7 (id=1859): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f00000001c0)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb0378a7135b1bd5ba0bb8aa94141dec7f709e680cfbeef711e46b7c093f870c17c4eb40465f6ab9e706709368252ac94edbd36aaf2048429fe80c27e0414614c70322de31837cd8eaab3e41d6e22377bf00269742a2bf9e7bdb80fe4e0dda4b9b1337f01bbae1d24047c03baac605", 0xab}, {&(0x7f0000000b00)="5deeb9c8798e8b24b7bede8647338a7e21d7f182f5401f454ef058d2091aa36847cfca3d3d1cf2fa8f614134da03e657dcdebb873d889ed8b6889a774f4477b5ac412e68f963339ecb379b9d66bb7c83c1b8121bd3e31d4819b6ad89df5e8a78622d3bd47916bd5bfb11ff1ae6e40631b0129abd791865340464a90c6ccca13d323d25b3f8789d5aeebe6142d6aa34b9697775e5789c5aaf4693ec11d0570a6b0af88a382d53de77ac276f8ae8a4cc872db44aecbdfa6f60a57d0a81509508940e3a5d5c87fc6c325b7d2062b18974aeac6718ff2cdba637832484987824ba69d5edde0af290fb10859930703979fed70e90f9ad", 0xf4}, {&(0x7f0000000980)="bb64fecb948ba6f4318e7fb53f575babe2ef755cf84da819da9a061290fd4c237c95ca20c7f68a319f2201c5d7ab4fd516e014901ae00103b9ef28e75dbff1bd3fbc67c29d20f8c1c66f02941278c0a0d6432b26ff1857424793669deace6a09db5ec8e809b4e26be4da2f84a4403482e44c31d18b2ea27f92dbe6f1fb0e36d229b1f6bf8fa3c0ce5a3d2c1e83640a3ae68384332efa44c76296cac4aa7185c613e94ffd7c7ef52afb1d978422addcb7351bfd1dcb7f123bdf2c7a9ad504be27668b90e02d23d4647e39257c8801e1cf108915a3d24317dd364c3775ee673ff88471a72bcc388b81ce", 0xe9}], 0x4}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000800)="f6b328c40d4cc969a0513b8ffd72381d4ef4a89954104d4a81db2fa3c0f906a33482e2821787ac54c0c62da54d1c77255c322358d0e272be2ccacf8f689f0115afd7305a1ce39e8b54734910fd9257fc4d3d2f910d5b9965f73440df67940c76ddc3df03db0d78c28fc030a88d5060290aa8ec", 0x73}, {&(0x7f00000008c0)="20c048210440d8394cdcb9ee88a6b7584a3e07b1b1d67f42b2dda515bffbb8de861e60d4ee6dad628fdf1055f9", 0x2d}, {&(0x7f0000000940)="ee41e16fcc123e48fa04ef6edfc0fe23b7a87e1e837f1d1104d11ab1934265fd5cfb", 0x22}], 0x3}}], 0x2, 0x890) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 1m16.884440935s ago: executing program 7 (id=1866): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r2}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x10, 0x2, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x1, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b0f, &(0x7f0000000000)={'virt_wifi0\x00', @random='4\x00'}) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000002700), &(0x7f0000002780)=0x80) sendmmsg$inet(r0, &(0x7f0000000700), 0x0, 0x0) 1m1.893856081s ago: executing program 8 (id=1976): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x4, 0xa, 0x40}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x6, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) accept$alg(r1, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r7) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1d, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f0400000000000000000085000000bb00000085000000d100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r8, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) recvmmsg(r4, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001580)=""/179, 0xb3}, {0x0}, {0x0}, {0x0, 0x18}, {&(0x7f0000001880)=""/193, 0xc1}], 0x5}, 0x7}], 0x1, 0x100, &(0x7f0000002040)={0x0, 0x989680}) close(0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 1m1.247415178s ago: executing program 37 (id=1866): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r2}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x10, 0x2, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x1, 0x0, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b0f, &(0x7f0000000000)={'virt_wifi0\x00', @random='4\x00'}) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000002700), &(0x7f0000002780)=0x80) sendmmsg$inet(r0, &(0x7f0000000700), 0x0, 0x0) 1m0.934446135s ago: executing program 8 (id=1980): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x1, 0x3, 0x8, 0xffffffc0}, 0x4, 0x1, 0x8, 0x0, 0x3, 0x0, 0x16, 0x13, 0x3, 0xca, {0x0, 0x8, 0x3, 0x5, 0x84, 0x8}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newchain={0x24, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x10, 0x1}, {0xe, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x6c, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x3c, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}, @TCA_CODEL_TARGET={0x8, 0x1, 0xd8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7f}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x5, 0x2, 0x3ff}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x8b7}]}}]}, 0x6c}}, 0x4000000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r3, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x84, 0x3}], 0x10}}], 0x2, 0xc88c4) 1m0.454949927s ago: executing program 8 (id=1982): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f00000001c0)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb0378a7135b1bd5ba0bb8aa94141dec7f709e680cfbeef711e46b7c093f870c17c4eb40465f6ab9e706709368252ac94edbd36aaf2048429fe80c27e0414614c70322de31837cd8eaab3e41d6e22377bf00269742a2bf9e7bdb80fe4e0dda4b9b1337f01bbae1d24047c03baac605", 0xab}, {&(0x7f0000000b00)="5deeb9c8798e8b24b7bede8647338a7e21d7f182f5401f454ef058d2091aa36847cfca3d3d1cf2fa8f614134da03e657dcdebb873d889ed8b6889a774f4477b5ac412e68f963339ecb379b9d66bb7c83c1b8121bd3e31d4819b6ad89df5e8a78622d3bd47916bd5bfb11ff1ae6e40631b0129abd791865340464a90c6ccca13d323d25b3f8789d5aeebe6142d6aa34b9697775e5789c5aaf4693ec11d0570a6b0af88a382d53de77ac276f8ae8a4cc872db44aecbdfa6f60a57d0a81509508940e3a5d5c87fc6c325b7d2062b18974aeac6718ff2cdba637832484987824ba69d5edde0af290fb108599307039", 0xed}, {&(0x7f0000000500)="f304470a67fb38991999006d8c3905b9d4ffc50b438e6fd5c431f3c6131c", 0x1e}, {&(0x7f0000000980)="bb64fecb948ba6f4318e7fb53f575babe2ef755cf84da819da9a061290fd4c237c95ca20c7f68a319f2201c5d7ab4fd516e014901ae00103b9ef28e75dbff1bd3fbc67c29d20f8c1c66f02941278c0a0d6432b26ff1857424793669deace6a09db5ec8e809b4e26be4da2f84a4403482e44c31d18b2ea27f92dbe6f1fb0e36d229b1f6bf8fa3c0ce5a3d2c1e83640a3ae68384332efa44c76296cac4aa7185c613e94ffd7c7ef52afb1d978422addcb7351bfd1dcb7f123bdf2c7a", 0xbb}], 0x5}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000800)="f6b328c40d4cc969a0513b8ffd72381d4ef4a89954104d4a81db2fa3c0f906a33482e2821787ac54c0c62da54d1c77255c322358d0e272be2ccacf8f689f0115afd7305a1ce39e8b54734910fd9257fc4d3d2f910d5b9965f73440df67940c76ddc3df03", 0x64}], 0x1}}], 0x2, 0x890) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 1m0.158341519s ago: executing program 8 (id=1983): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRESDEC=0x0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x95}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000780)=@in6={0xa, 0x4e24, 0x93d, @remote, 0x4800}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000200)="278d2405afbdb76cbb40cfaa", 0xc}, {&(0x7f0000000800)="458b0adfa9140b5c4b038d295db29957211322aaca901f349177878260eebc07c9daf0088ade5a7464375397c078d9cad01833d2b7d088bd4516e036ef8d371c15d1ced96f9ac70efbbc5722cee1d0e274573337d4cbc2af472e93e0178fb128aaba5a56360c287044cfcce6d8eed6319ae4548c559452894374c4b939d2fc9f2a74b0754ee5396662c01253b57d8b4a7e50c52cd58ed30425dec619b31f52fe6b22718e4614d6ea8b7e45ff", 0xac}, {&(0x7f00000008c0)="4df4fff741ca9859947cfb4e90f72c29ca450e1d747f4c9a8e89d6ce0900000000000000690f1ec8fd02e9d71db8fbd75efb4bf6093d08c63bdeda588fdce8bda3c3fad50e429f0a3b1ece8b37b16090c7319412b6b789ca36c128db29b6cacabab66700ae43fcc16f3b04afea1b523212138af9de2e4fc182553080207e8146b22cf46c29ff2ef636ef0a8ee5149b000081613c6ea40b7880343da603b380357a2df882514cff6e003eb6bd10f030db5765", 0xb2}, {&(0x7f0000000980)="a82e0d12b3427af166349fd27cd2331e6361b5a58540c08cb61c496fcf8aff72142af61d33c1d8d7306a96d5022a4860ecec95ea81145dd7d01bf10cd3de912f701cbda9d10c7da2fe0c6c6e6b8f799edac9a4cf03ffffafb4b7801af5ae7c0e2fc20ec30404fa8f33b6402fb06fe0bf60110fb16b0604df1fc80cc69215c0b33f35c9c2a2e1e839c74914af98ea7e94ee5af0", 0xfffffffffffffca1}], 0x4}, 0x40000c1) unshare(0x62040200) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x4000000000001ae, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES64=r3, @ANYRES32=r0, @ANYBLOB="0000000000000000e7ffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000001c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x3400a091) setsockopt$sock_attach_bpf(r6, 0x6, 0x3, &(0x7f00000000c0), 0x4) sendmsg$inet(r6, 0x0, 0x41) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0x400, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r8, {0xfffd, 0x10}, {0xd, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) close(r6) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 59.298987193s ago: executing program 8 (id=1988): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f00000001c0)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb0378a7135b1bd5ba0bb8aa94141dec7f709e680cfbeef711e46b7c093f870c17c4eb40465f6ab9e706709368252ac94edbd36aaf2048429fe80c27e0414614c70322de31837cd8eaab3e41d6e22377bf00269742a2bf9e7bdb80fe4e0dda4b9b1337f01bbae1d24047c03baac605", 0xab}, {&(0x7f0000000b00)="5deeb9c8798e8b24b7bede8647338a7e21d7f182f5401f454ef058d2091aa36847cfca3d3d1cf2fa8f614134da03e657dcdebb873d889ed8b6889a774f4477b5ac412e68f963339ecb379b9d66bb7c83c1b8121bd3e31d4819b6ad89df5e8a78622d3bd47916bd5bfb11ff1ae6e40631b0129abd791865340464a90c6ccca13d323d25b3f8789d5aeebe6142d6aa34b9697775e5789c5aaf4693ec11d0570a6b0af88a382d53de77ac276f8ae8a4cc872db44aecbdfa6f60a57d0a81509508940e3a5d5c87fc6c325b7d2062b18974aeac6718ff2cdba637832484987824ba69d5edde0af290fb10859930703979fed70e90f9ad", 0xf4}, {&(0x7f0000000500)="f304470a67fb38991999006d8c3905b9d4ffc50b438e6fd5c431f3c6131ce4d1087ec3679904ceb777d76afd7187582da4f8c8c00008932b9f81e50656a5ba7917", 0x41}, {&(0x7f0000000980)="bb64fecb948ba6f4318e7fb53f575babe2ef755cf84da819da9a061290fd4c237c95ca20c7f68a319f2201c5d7ab4fd516e014901ae00103b9ef28e75dbff1bd3fbc67c29d20f8c1c66f02941278c0a0d6432b26ff1857424793669deace6a09db5ec8e809b4e26be4da2f84a4403482e44c31d18b2ea27f92dbe6f1fb0e36d229b1f6bf8fa3c0ce5a3d2c1e83640a3ae68384332efa44c76296cac4aa7185c613e94ffd7c7ef52afb1d978422addcb7351bfd1dcb7f123bdf2c7a9ad5", 0xbd}], 0x5}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000800)="f6b328c40d4cc969a0513b8ffd72381d4ef4a89954104d4a81db2fa3c0f906a33482e2821787ac54c0c62da54d1c77255c322358d0e272be2cca", 0x3a}, {&(0x7f00000008c0)="20c048210440d8394cdcb9ee88a6b7584a3e07b1b1d67f42b2dda515bffbb8de861e60d4ee6dad628fdf1055f9", 0x2d}, {&(0x7f0000000940)="ee41e16fcc123e48fa04ef6edfc0fe23b7a87e1e837f1d1104d1", 0x1a}], 0x3}}], 0x2, 0x890) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 59.161869934s ago: executing program 8 (id=1990): r0 = socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6f, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4d, 0x0, @wg=@data={0x4, 0x8, 0x7, "1083a66e9ec7619976f435146154d92432d8b2225dc095fb945eb8ceb4352c6b23cf3540475be62f8999cf5ba7ec7a139dfee8698d"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe19}, 0x94) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/53, 0x35}, {&(0x7f0000000200)=""/66, 0x42}], 0x2}, 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getpid() sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0xc090}, 0x4000) r3 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x12, 0x0, &(0x7f0000000200)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x700, 0x8000, 0x6cb86be4, 0x1, {{0x16, 0x4, 0x1, 0x20, 0x58, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1, {[@ra={0x94, 0x4}, @rr={0x7, 0xf, 0xc5, [@rand_addr=0x64010100, @multicast1, @private=0xa010100]}, @timestamp_addr={0x44, 0x24, 0xf3, 0x1, 0xd, [{@remote, 0x1}, {@multicast2, 0x7fff}, {@rand_addr=0x64010100, 0x2}, {@rand_addr=0x64010102, 0xff}]}, @cipso={0x86, 0xd, 0x3, [{0x2, 0x7, "de93f7076f"}]}]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000002100010000000000fedbdf2502080000e1ffffffffffffff0800010064010100140011"], 0x38}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) unshare(0x68040200) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) r6 = socket$netlink(0x10, 0x3, 0x0) recvfrom(r3, &(0x7f00000006c0)=""/4096, 0x1000, 0x22, &(0x7f0000000300)=@sco={0x1f, @none}, 0x80) sendmmsg(r6, 0x0, 0x0, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) mmap(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x3000004, 0x40010, r7, 0x3f38e000) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 54.905071996s ago: executing program 2 (id=2026): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd28, 0x25dfdc00, {0x7, 0x0, 0x0, r3, 0x40, 0xe4, 0x9}, [@NDA_LLADDR={0xa, 0x2, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$can_raw(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f0000000140)={&(0x7f0000000100)=@can={{0x1}, 0x5, 0x6, 0x0, 0x0, "17604169b6f87e3c"}, 0x10}, 0x1, 0x0, 0x0, 0x40054}, 0x4050) sendmmsg$inet(r1, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000005280)=[{&(0x7f00000050c0)='k', 0x1}], 0x1}}], 0x1, 0xc000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmmsg$inet(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x840) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @empty, 0x6}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 54.834371702s ago: executing program 2 (id=2027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = socket$inet_icmp(0x2, 0x2, 0x1) (rerun: 64) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x7, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40844}, 0x4000000) close(r1) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$int_in(r2, 0x5452, &(0x7f0000001780)=0x10000000006) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x18, 0x0, &(0x7f0000000200)) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6800000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a30000000001c0007800c00028004000140000000000c0001800800014000e81b0205000500020000000500010006"], 0x68}}, 0x0) (async, rerun: 32) r3 = socket$qrtr(0x2a, 0x2, 0x0) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r5, 0xc4fc9e90687237a7, 0x24, 0x0, {{0x15}, {@void, @void}}}, 0x14}}, 0x0) (async) recvmsg$qrtr(r3, &(0x7f0000001740)={&(0x7f0000000280), 0xc, &(0x7f00000014c0)=[{&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/197, 0xc5}], 0x3, &(0x7f0000001500)=[{0xf8, 0x0, 0x0, ""/229}, {0x30, 0x0, 0x0, ""/26}, {0xd0, 0x0, 0x0, ""/185}, {0x48, 0x0, 0x0, ""/53}], 0x240, 0x2041}, 0x38, 0x40000002) 54.65585321s ago: executing program 2 (id=2031): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r3}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xa4}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x40, r6, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb}, 0x50) close(0x3) socket$inet(0x2, 0x3, 0x7) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000083850000000400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r8}, 0xc) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=@delpolicy={0x194, 0x14, 0x130, 0x70bd25, 0x25dfdbff, {{@in=@loopback, @in=@broadcast, 0x4e21, 0x7, 0x4e24, 0x0, 0xa, 0x20, 0x80, 0x21, 0x0, 0xee01}, 0x6e6bc0}, [@tmpl={0x144, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x32}, 0xa, @in=@empty, 0x0, 0x4, 0x1, 0x1, 0x3, 0xfff, 0x6}, {{@in=@dev={0xac, 0x14, 0x14, 0x39}, 0x4d3, 0x3c}, 0x2, @in6=@private1, 0x3507, 0x4, 0x1, 0xfb, 0x40, 0x101, 0x7}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0x3c}, 0x2, @in6=@mcast2, 0x3505, 0x0, 0x1, 0x3, 0x4, 0x7, 0x9}, {{@in=@empty, 0x4d2, 0x33}, 0x2, @in6=@loopback, 0x3504, 0x3, 0x0, 0x70, 0x2, 0x40000000, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d6, 0x2b}, 0x2, @in=@remote, 0x3501, 0x1, 0x2, 0xb, 0x8, 0x3, 0x1000}]}]}, 0x194}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) 54.515982067s ago: executing program 2 (id=2034): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0x120, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0xff000000, 'netpci0\x00', 'geneve1\x00', {0xff}, {}, 0x32, 0x1, 0x28}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{}, {0x2, 0x7}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x6, 0x2, 0x4, 0x2, 0x4, 0x2], 0x5, 0x4}, {0x0, [0x5, 0x4, 0x0, 0x1, 0x4, 0x1], 0x3, 0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xff000000, 0x80, 'vxcan1\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x8, 0x2, 0x52}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x0, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x52, 0x8, [0x4, 0x3b, 0x35, 0x18, 0x33, 0x27, 0x1c, 0x38, 0x2, 0x38, 0x16, 0x34, 0x2b, 0x39, 0x3f, 0x21], 0x2, 0xffffffff, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x36c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r2, 0x20, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000002780)=""/55, 0x37}}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005fd0a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 54.361267195s ago: executing program 2 (id=2035): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0xa8daff50839eb5a3}, 0x1, 0x0, 0x0, 0x24008895}, 0x841) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) (rerun: 64) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000580)={&(0x7f0000000180), 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="04002dbd7000fcdbdf256f0000000500d600000000000a00060008021100000100000800a10001000000050018013b0019010c000000"], 0x40}, 0x1, 0x0, 0x0, 0x24004045}, 0x8040) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0xb00, 0x40822}}}}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) (async, rerun: 64) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) (rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r4, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67100000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000002030300000000000000000002000001fc000540bd0f22ce0800047163bc4000cf742f2676124ac4beddcb72c7ca"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x8000000, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) (async, rerun: 64) r8 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010101}}) ioctl$sock_inet_SIOCSIFADDR(r9, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 54.135575334s ago: executing program 2 (id=2040): unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x70) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xc5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x91081000) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0xe}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x44, r1, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004003) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) shutdown(r0, 0x1) unshare(0x6a040000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x70) (async) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x5, 0xc5) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x91081000) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0xe}, 0x94) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x44, r1, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004003) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) shutdown(r0, 0x1) (async) 46.864173946s ago: executing program 9 (id=2097): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 46.769192537s ago: executing program 9 (id=2098): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@ipv6_newnexthop={0x28, 0x68, 0x100, 0x70bd2d, 0x0, {0xa, 0x0, 0x3, 0x0, 0x4}, [@NHA_OIF={0x8}, @NHA_ID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040801}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, r2, 0x201, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x28}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80000}, 0x10000000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x800) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22fff6) close(r5) (async) close(r5) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000001c0)={0x40000008}) (async) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000001c0)={0x40000008}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0x53b, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0x53b, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000140)=0x40, 0x4) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 46.644300652s ago: executing program 9 (id=2099): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x7, 0x70cc3aa2}, 0x10) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x7, 0x70cc3aa2}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3c0808000000000000000000019078ac1e0001ac1414aa2b009078e04000e0450000000000000102000000ac1414aaac141422"], 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = accept4(r1, &(0x7f0000000080)=@can, &(0x7f0000000100)=0x80, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a40e7000000080003400000004008000f40000000063c0000000c0a01030000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002140000001000010000000000000000000084000a"], 0xd0}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a40e7000000080003400000004008000f40000000063c0000000c0a01030000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002140000001000010000000000000000000084000a"], 0xd0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/13], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r7], 0x90}}, 0x0) socket(0x21, 0x80000, 0x2) (async) socket(0x21, 0x80000, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = socket(0x15, 0x800, 0x3) setsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000200)=@int=0x3, 0x4) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000140021010000e0ffffff000023"], 0x2c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000140021010000e0ffffff000023"], 0x2c}}, 0x0) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000180)={0x40}) 46.547107832s ago: executing program 9 (id=2100): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000300), 0x8) write$cgroup_pid(r0, &(0x7f0000002380), 0x12) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x90, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x4041}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000063c0)={'vlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x12d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x44}}, 0x8000002) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x72, r6, 0x7f1f}, 0xc) 46.285149488s ago: executing program 9 (id=2101): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0xa, 0x4, 0x84) listen(r2, 0x8) socket$inet(0xa, 0x801, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) r6 = accept(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x5c, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x6c, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xe, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7}]}}, @filter_kind_options=@f_flow={{0x9}, {0x6c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5317}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8e5af3a2eb153b3b}, 0x48010) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r6) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r8, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x20008044) r9 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r9, 0x0, 0xb, &(0x7f0000000040)=0x7ff, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000006c0)={r3, &(0x7f0000000640)="bf30056d40e3e1d24764b6f49ae69316c7297d4d3fa164b4f8878b2cfc8c72ba63714cc6930edbe7f79b2e7d68153e44a5d3a9e2bb6a2d07a6542475c4fc709c", &(0x7f0000000680)=@tcp=r9}, 0x20) 45.353214303s ago: executing program 9 (id=2107): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000003e000701fe56cda3e3c932ffffff00000000047c0000080042"], 0x1c}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) sendmmsg$inet6(r2, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000000080)="b826", 0x2}, {0x0}], 0x2}}], 0x1, 0xc0000) (async) sendmmsg$inet6(r2, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000000080)="b826", 0x2}, {0x0}], 0x2}}], 0x1, 0xc0000) 44.116023136s ago: executing program 38 (id=1990): r0 = socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6f, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4d, 0x0, @wg=@data={0x4, 0x8, 0x7, "1083a66e9ec7619976f435146154d92432d8b2225dc095fb945eb8ceb4352c6b23cf3540475be62f8999cf5ba7ec7a139dfee8698d"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe19}, 0x94) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/53, 0x35}, {&(0x7f0000000200)=""/66, 0x42}], 0x2}, 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getpid() sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0xc090}, 0x4000) r3 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x12, 0x0, &(0x7f0000000200)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x700, 0x8000, 0x6cb86be4, 0x1, {{0x16, 0x4, 0x1, 0x20, 0x58, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1, {[@ra={0x94, 0x4}, @rr={0x7, 0xf, 0xc5, [@rand_addr=0x64010100, @multicast1, @private=0xa010100]}, @timestamp_addr={0x44, 0x24, 0xf3, 0x1, 0xd, [{@remote, 0x1}, {@multicast2, 0x7fff}, {@rand_addr=0x64010100, 0x2}, {@rand_addr=0x64010102, 0xff}]}, @cipso={0x86, 0xd, 0x3, [{0x2, 0x7, "de93f7076f"}]}]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000002100010000000000fedbdf2502080000e1ffffffffffffff0800010064010100140011"], 0x38}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) unshare(0x68040200) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) r6 = socket$netlink(0x10, 0x3, 0x0) recvfrom(r3, &(0x7f00000006c0)=""/4096, 0x1000, 0x22, &(0x7f0000000300)=@sco={0x1f, @none}, 0x80) sendmmsg(r6, 0x0, 0x0, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) mmap(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x3000004, 0x40010, r7, 0x3f38e000) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 40.015097492s ago: executing program 6 (id=2144): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000640)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb0378a7135b1bd5ba0bb8aa94141dec7f709e680cfbeef711e46b7c093f870c17c4eb40465f6ab9e77345084a40843b0b583aae7cf248bd06709368252ac94edbd36aaf2048429fe80c27e0414614c70322de31837cd8eaab3e41d6e22377bf00269742a2bf9e7bdb80fe4e0dda4b9b1337f01bbae1d24047c03baac605", 0xba}, {&(0x7f0000000b00)="5deeb9c8798e8b24b7bede8647338a7e21d7f182f5401f454ef058d2091aa36847cfca3d3d1cf2fa8f614134da03e657dcdebb873d889ed8b6889a774f4477b5ac412e68f963339ecb379b9d66bb7c83c1b8121bd3e31d4819b6ad89df5e8a78622d3bd47916bd5bfb11ff1ae6e40631b0129abd791865340464a90c6ccca13d323d25b3f8789d5aeebe6142d6aa34b9697775e5789c5aaf4693ec11d0570a6b0af88a382d53de77ac276f8ae8a4cc872db44aecbdfa6f60a57d0a81509508940e3a5d5c87fc6c325b7d2062b18974aeac6718ff2cdba637832484987824ba69d5edde0af290fb10859930703979fed70e90f9ad", 0xf4}, {&(0x7f0000000500)="f304470a67fb38991999006d8c3905b9d4ffc50b438e6fd5c431f3c6131ce4d1087ec3679904ceb777d76afd7187582da4f8c8c00008932b9f81e50656a5ba7917", 0x41}, {&(0x7f0000000980)="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", 0xfb}], 0x5}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f00000002c0)="f6b328c40d4ce469a0513b87fd72381d4ef4a89954104d4a81db14a3c0f906a33482e2821787ac54c0c62da54d1c77255c320400d0e237c52ccacf8f689f0115afd7305a1ce3938b54734910fd9257910d5b99d5253440df67940c76ddc3df03db0d78c28fc030a88d5060290aa8ec68032a294c0aaefb55cb6ed22c068c89b142c91dc625f5456c61069350d53e0596b6331deb1882f5c2228a80ee8aae275ffb4c10a5fb2e21cfae8ff5cffe1631b79567892d7b804f93120d8815778afbd17302498045736a08e265a545aa3afe399eca5ece1ab6fef87f2b3c93ecfa1dbbd0ba53039a579cb73076cfe96512bf042a281595ec8364de9f3be8577cd23753a5feb6a5e4277317e37ba7adb4b27360cc3c14181afd511915abb6855b505599a7f341b3f84a9159bbe67b8805837e9325eab7842d9b8d3870f01bee8fdc36dcff927a38d6e703e51800", 0x14a}, {&(0x7f00000008c0)="20c048210440d8394cdcb9ee88a6b7584a3e07b1b1d67f42b2dda515bf", 0x1d}, {0x0}], 0x3}}], 0x2, 0x890) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 39.134885035s ago: executing program 6 (id=2148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x109001, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000001dc0)=[{{&(0x7f00000001c0)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000003c0)="a9050000fb00746400010000000000462bfbdf41009f3f699c9c78616e591ed0c6b856f9", 0x24}], 0x1}}], 0x1, 0x20044044) (async) socket$inet(0x2, 0x4, 0x819c) (async, rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) (async, rerun: 32) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x200000000000001) (async, rerun: 32) syz_emit_ethernet(0x0, 0x0, 0x0) (rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 32) recvmsg$unix(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 32) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) (rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x5d, &(0x7f0000001d80)=ANY=[], 0x128}, 0x20000000) (async) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x7d, 0x8, 0x2}, 0x50) sendmsg$xdp(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x2c, 0x1, 0x0, 0x21}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000200)="958cb07cea80d5f3365c9d4cddd4e4f2d3d8c40e773de3208f7ab076204cb2e29b5a10c74b586bdf1b8dec989684e37c7375fc48da0b3b13a551e97aeaf10b878d482b453939a97c37ab94c2177cc6fd3bda20b7596254f55fdc0cfba1a865ffbe727c57478cbdb3ba8aa13ed494732cc930f54d65219c93259061207d6b9408f4c353659f06b92d9683f3897018cd948feb883d90b0c700ae91cd91b7e9988477657021ad586d4b34387cd253573b8de5d31b2f85e44a9aad971d689941066e9e987e508abc80b62a083351c230e39afdf5b20c7b61609da995c6882b", 0xdd}], 0x1}, 0x20000000) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000080)) (async) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 39.110573018s ago: executing program 39 (id=2040): unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x70) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xc5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x91081000) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0xe}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x44, r1, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004003) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) shutdown(r0, 0x1) unshare(0x6a040000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x70) (async) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x5, 0xc5) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x91081000) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0xe}, 0x94) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x44, r1, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004003) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) shutdown(r0, 0x1) (async) 38.947780748s ago: executing program 6 (id=2150): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x4, r0}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x74, 0x30, 0x871a15abc695f91d, 0x0, 0x80000, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcc1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3468800, 0x40, 0x1, 0x3, 0x80000000}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 38.872676864s ago: executing program 6 (id=2151): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000000000007"], 0x18}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2c, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000005c0)={0x18, r4, 0x1, 0x70bd2d, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x4400208}, 0xc) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000000c0)={r8, 0x8, 0x10}, &(0x7f00000002c0)=0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) 37.916404927s ago: executing program 6 (id=2155): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e12"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9af, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000a80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xbf}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x1c}}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffc00}}], 0x70}}], 0x2, 0x2400c044) shutdown(r4, 0x1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r6 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmmsg(0xffffffffffffffff, &(0x7f0000003300)=[{{&(0x7f00000002c0)=@sco, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f0000000880)=""/150, 0x96}], 0x3, &(0x7f0000001040)=""/4096, 0x1000}, 0xffff}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000940)=""/146, 0x92}, {&(0x7f0000000200)=""/58, 0x3a}], 0x2, &(0x7f0000002080)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000b00)=""/226, 0xe2}, {&(0x7f0000000c00)=""/209, 0xd1}, {&(0x7f0000000d00)=""/152, 0x98}, {&(0x7f0000000dc0)=""/191, 0xbf}, {&(0x7f0000000680)=""/42, 0x2a}], 0x5, &(0x7f0000003400)=""/220, 0xdc}, 0x6}, {{&(0x7f0000000f00)=@caif, 0x80, &(0x7f0000000780)=[{&(0x7f0000003180)=""/105, 0x69}, {&(0x7f0000003200)=""/198, 0xc6}], 0x2, &(0x7f0000000f80)=""/17, 0x11}}], 0x4, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c00028024000300733900000455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x30, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x4}]}, 0x30}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) recvfrom(r6, 0x0, 0x0, 0x2000, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x4, 0x3}}, 0x80) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000002040)={0x18, r10, 0x1, 0x200000, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) 37.184180584s ago: executing program 6 (id=2159): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 32) unshare(0x62040200) (async, rerun: 32) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa1000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0xfffffff8}, 0x10}, 0x94) (rerun: 64) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) (async, rerun: 64) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (rerun: 64) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) (async, rerun: 64) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) (async, rerun: 32) r8 = socket(0x840000000002, 0x3, 0xfa) (rerun: 32) connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) (async) getsockname$packet(r8, 0x0, 0x0) (async) recvfrom$ax25(r8, &(0x7f0000000180)=""/4, 0x4, 0x10021, &(0x7f0000000440)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async, rerun: 32) r9 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async, rerun: 32) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4c, '\x00', 0x0, r10, 0x0, 0x3}, 0x50) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) 34.697887535s ago: executing program 3 (id=2164): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="d80000001b0001002dbd7000fddbdf2500000000000000000000000000000000ac1e00010000000000000000000000004e2200004e23000c0a00008032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00080009000000008000000000000000f8ffffffffffffffff01000000000000010000000000000001000000000000800900000000000000000000008015010002000000000000000100000000000000fd002ceb3950466f6ff00000000000000700000000000000000002030000000029000000000000000c00150053073500040000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x8010) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x7cbe1000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x4, 0x8, 0xb}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r4, 0x1000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, 0x0, &(0x7f0000000480)=0x1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af07f00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) r6 = socket(0x10, 0x803, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) ioctl$SIOCX25GDTEFACILITIES(r6, 0x89ea, &(0x7f00000001c0)) r8 = accept4(r7, 0x0, 0x0, 0x0) sendto$packet(r8, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee", 0xfffffffffffffec6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x323) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) 33.34765148s ago: executing program 3 (id=2166): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x11, 0x3, 0x2) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000200)={0x38, 0x5f, 0x1, 0x70bd2a, 0x0, {}, [@typed={0x24, 0x2, 0x0, 0x0, @str='\xd8&\xfc,FG\x87\x8c\xa2A\xa3\xc6\x94\x90\r\xa0J\xf9G\x8d\xf5\xd1u\xb1o\xe9\x1a\xb5\t\xfb\xca\xb4'}]}, 0x38}}, 0x4000800) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r4) r6 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r6, &(0x7f0000000080)={0x11, 0xf5, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x14) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r7, &(0x7f00000000c0)={@val={0x8, 0xf5}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x9, 0x2f, 0x0, @local, @broadcast}, {{0x4e20, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x40, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x64008050) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) 32.373886717s ago: executing program 3 (id=2168): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) (async) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtclass={0x113c, 0x28, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x9, 0x6}, {0x10, 0xffe0}, {0x9}}, [@tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x7f, 0xd}}, @TCA_RATE={0x6, 0x5, {0x2}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_htb={{0x8}, {0x10b4, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0x140, 0xfffffff7, 0x10000, 0x0, 0x7, 0x5a2b15e2, 0x1, 0xfffffff7, 0x1, 0xfff, 0x38, 0x6, 0x2, 0x8001, 0x10, 0x4997, 0x0, 0x6, 0x5, 0x0, 0x1000, 0x3, 0x8, 0x4, 0xc3e9, 0x400, 0x0, 0x9, 0x5, 0x1, 0x8, 0x0, 0x8, 0x8, 0x2, 0x9, 0x8, 0x2, 0x3, 0xac, 0x79b5, 0x3, 0x1, 0x7, 0x2b, 0x2, 0x3, 0x40, 0x3ff, 0xfffffff9, 0xc, 0x5, 0x7, 0x6, 0x8, 0x2, 0xb2, 0x10001, 0x7fff, 0x72f, 0x471, 0x38e6c803, 0x10, 0x7581, 0x8, 0xf, 0xffff, 0x9, 0xffffffff, 0x8, 0x6, 0x80000000, 0x5, 0x7f, 0x1ff, 0x1, 0xe, 0x1, 0x9, 0x927, 0x3, 0x4, 0x1, 0x800, 0x10, 0xfff, 0x6, 0x9fd, 0xaaf, 0x2, 0xc0, 0x5, 0x1, 0x7, 0xe, 0x9, 0x10001, 0x7, 0x8, 0x5, 0xc0000000, 0x2, 0x9, 0x9, 0x10000, 0x8, 0x4, 0x7fff, 0x7, 0x40, 0xffffffa8, 0x6, 0x7fff, 0xa, 0xa, 0x7ff, 0x8000, 0x2, 0x200, 0x6, 0x80000000, 0xd, 0x10, 0x4, 0x8, 0x10001, 0xed15114, 0x3, 0xbf, 0x73, 0x8, 0x5, 0x9, 0xffff, 0xfffffffd, 0x1, 0x3ff8, 0x713, 0x44c5, 0x3, 0xfffffffd, 0x80000000, 0x2, 0x100, 0x2, 0x3ff, 0x10001, 0x5, 0x100, 0xe64, 0xffffffff, 0x3257dc15, 0x9, 0xb, 0xe292, 0x4f8, 0xfffffbff, 0x5, 0x2, 0x8, 0xbcf6, 0x0, 0x4, 0xffffffff, 0x6, 0xfffffffc, 0x72d3, 0x101, 0x10001, 0x7f, 0x3a300000, 0x3, 0x1, 0x4, 0x3c00000, 0x4ce0b166, 0x1, 0x8000, 0x2, 0xa34, 0x7, 0x85, 0x6, 0x300, 0x3, 0x6, 0x7, 0x9, 0x362, 0x80000001, 0x9, 0x7, 0x9, 0xabaa, 0x6, 0x5, 0x2, 0x8, 0x761e, 0x4, 0x7, 0x38, 0x7, 0x1, 0x6, 0xf5, 0x5, 0x7, 0x21, 0x6, 0x11a3, 0xade, 0x31888483, 0x7f, 0x7, 0x5, 0x9, 0x7, 0xda, 0x7, 0xc, 0x5, 0x1, 0x1, 0xc72, 0x5, 0x8, 0x6, 0xa, 0x2a45, 0x1, 0x1000, 0xfffffff7, 0x8a7, 0x8, 0x0, 0xb65, 0x771dd2d3, 0x7, 0x0, 0xa, 0x3, 0x8, 0x1, 0x9, 0xffffffff, 0x9, 0x8, 0x1, 0x3, 0x33, 0x3, 0x8, 0x5, 0x4, 0x1]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x1, 0x0, 0xda63, 0x8001, 0x1, 0x2}, {0xff, 0x1, 0x6, 0x10, 0x7, 0x80000001}, 0x10001, 0x336b, 0x7, 0x6, 0xfb}}, @TCA_HTB_PARMS={0x30, 0x1, {{0xa8, 0x2, 0xf, 0xb, 0x9, 0x3ff}, {0x3, 0x0, 0x7, 0x8000, 0xbac, 0x2}, 0xffffffff, 0x1, 0x6, 0x2}}, @TCA_HTB_RTAB={0x404, 0x4, [0x3, 0xc, 0x5, 0xb, 0x3a80, 0x12, 0xa1, 0x6, 0x8, 0xfffffff2, 0x7, 0x75, 0xfffffffe, 0x101, 0x4, 0x400, 0x0, 0x4, 0x9, 0x1, 0x23, 0x2, 0x8, 0x39, 0x8, 0x1, 0x6, 0x8, 0x2, 0x5, 0x5, 0xe9e, 0x80000000, 0xfffffffc, 0x0, 0x4d5a, 0x10000, 0x7ff, 0xff, 0x7, 0x14b7, 0x8, 0x10, 0x7, 0x4, 0x9, 0x3, 0x7, 0x5, 0x2, 0x3, 0x3, 0x0, 0x9, 0x9, 0x5d20000, 0x3, 0x7c9be145, 0x2, 0x0, 0x8, 0x6, 0x9, 0x0, 0x5, 0x4, 0xfffff801, 0x7d09, 0x2, 0x1, 0x4, 0x4, 0x7, 0x0, 0xd749, 0x6d, 0x200, 0x4, 0x2, 0x7, 0xb74f, 0x7, 0xe8c, 0x3, 0x40000000, 0xffff, 0x0, 0x9, 0x9, 0x5, 0x1, 0x1854, 0xffffffff, 0x9, 0x2, 0x14ca, 0x100, 0xd98d, 0x8, 0x7fff, 0x1, 0x4, 0x4, 0x626e30a2, 0x4, 0x9, 0x40, 0x7fff, 0x7, 0x0, 0x3, 0x400, 0x0, 0x7, 0x0, 0x6, 0x7, 0x8074411, 0x0, 0x5, 0x2, 0x2, 0x78, 0x6, 0x8, 0x4, 0x200, 0x100, 0x6, 0x5, 0x3, 0xfffffff6, 0x1, 0xd41, 0x7, 0x6, 0x2, 0x8, 0xd7d3, 0x3ff, 0xfffffbff, 0x8001, 0x7fffffff, 0x1000, 0x8, 0xc28, 0x7, 0x1000, 0x9, 0x5, 0x8, 0x0, 0xfff, 0x80, 0x0, 0x4, 0x0, 0x10000, 0x1000, 0x9bb2, 0x3ff, 0x5, 0x2, 0xf03, 0x800, 0x9, 0x2, 0x7, 0x200, 0x7, 0xb5, 0x7, 0x3, 0x7, 0x80000001, 0x2, 0x2, 0x9, 0xfffffffc, 0xc82, 0xcdee, 0xa58, 0x3, 0x9, 0x2, 0x1539, 0x80000000, 0x0, 0xf11, 0x10001, 0x9, 0x1, 0x80000000, 0x8, 0xfffffff9, 0x4, 0x1, 0x4c4, 0x10000, 0x6, 0x0, 0x98c, 0x9, 0x818, 0x6, 0xffffffff, 0x1, 0x401, 0xad6, 0x8, 0x4, 0x2, 0x3, 0x8f, 0x4, 0x0, 0x2, 0x3, 0x4, 0x400, 0xf, 0x6, 0x1ff, 0x7, 0x7, 0x9, 0x3, 0xc, 0xfffffff9, 0x8, 0x5, 0x3, 0xff, 0x6, 0x2, 0x5, 0x8, 0x5, 0x2, 0x3, 0x100, 0x0, 0x5, 0x290a, 0x6, 0x6, 0x7, 0x3, 0x8, 0x7f6, 0x8, 0x0, 0x9, 0x81, 0x2df, 0x4]}, @TCA_HTB_CTAB={0x404, 0x3, [0x101, 0x322a, 0x315e, 0x6, 0x99, 0x9, 0x200, 0xfffffffb, 0x10000, 0xc8, 0x8, 0xfff0, 0x6, 0x10000, 0x4, 0x968, 0x7fffffff, 0x100, 0xb, 0x8, 0x8, 0x362e, 0x8, 0xe85, 0x80000000, 0xfffffff8, 0x0, 0x1, 0x8, 0x4, 0x4, 0x7, 0x3, 0x7fff, 0x9, 0x1ff, 0x3, 0x30, 0xe, 0x80000000, 0x6, 0x10001, 0x6, 0x5000000, 0x6, 0x2, 0x6, 0x7, 0x8, 0xbf2, 0x40, 0x7fffffff, 0x34, 0x8, 0x7f, 0x1, 0x9, 0x0, 0x1, 0x7a, 0x2, 0x10001, 0x200, 0x1, 0x101, 0x7, 0x101, 0x10001, 0x4, 0x493, 0x7fffffff, 0x2, 0x3ff, 0x4, 0x4, 0x10000, 0x7, 0x3, 0xdc, 0x9, 0x5, 0x5, 0x2d, 0xffffffff, 0x0, 0x0, 0x3, 0x97, 0x4d2, 0x1, 0x6, 0x2, 0x2, 0x9, 0x5, 0x9, 0xd, 0x3a, 0x5, 0x9, 0x4, 0x1, 0x101, 0x6, 0x77, 0x3, 0x3, 0x10, 0x8, 0x0, 0xe, 0xde08, 0x4, 0x8, 0x3, 0x5, 0x80000000, 0x7, 0xc, 0x1, 0x1, 0x9, 0x9, 0x5, 0x10000, 0x1, 0x9, 0x2730, 0x8000, 0x10000, 0x1, 0x0, 0x339e, 0x7, 0x6, 0x12000000, 0xbc6a, 0x5, 0x2, 0x9, 0x4, 0x0, 0x80, 0x5, 0x7fffffff, 0x8, 0x9, 0x9, 0x400, 0xffffffff, 0x5, 0xdb9d, 0x80000000, 0x1f, 0x3, 0x352, 0x800, 0x8e81, 0x8, 0xcc7, 0x4, 0x4, 0x7, 0x17, 0x3ecb, 0x9, 0x3, 0x4, 0x5, 0x3, 0x1, 0x1, 0x6, 0x0, 0x94, 0x0, 0x1, 0x28, 0x0, 0x3, 0x0, 0xf5f, 0x70, 0xc8a, 0x0, 0x4, 0x8, 0x6, 0xa72, 0x9, 0x939, 0x80, 0x1, 0x65e6266a, 0x8, 0x4, 0xa6, 0x3, 0x20000000, 0x8, 0xc3b, 0x9, 0x6, 0x7, 0x9, 0x9, 0xf1, 0x9, 0xf2000000, 0x8a8, 0x2, 0x1000, 0x3ff, 0x9, 0x3, 0x1, 0x0, 0x2, 0x80, 0x0, 0xfffffda4, 0xffffffc0, 0xc, 0x7, 0x0, 0xffff, 0x81, 0x4, 0x5, 0x9, 0xffffff01, 0x4, 0x6, 0x5, 0x1, 0xe5, 0x3, 0x3, 0x40, 0xfe86, 0x7, 0x80000001, 0x1, 0xfff, 0x5, 0x8, 0x3, 0x9, 0x1401, 0x4, 0x2, 0xa, 0xa, 0x53, 0x8001, 0x9]}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_PARMS={0x30, 0x1, {{0x5, 0x0, 0x1, 0x7, 0x1, 0x9}, {0x0, 0x0, 0x5, 0x9, 0xe4, 0x4}, 0x3, 0x1, 0x80, 0x7f, 0x7fffffff}}, @TCA_HTB_CEIL64={0xc, 0x7, 0x5}, @TCA_HTB_CTAB={0x404, 0x3, [0x1000, 0x2, 0x3239, 0x6, 0x291c, 0x6a9, 0x5, 0x2, 0xfffffffe, 0x1, 0x1, 0x8, 0x6, 0x619, 0x8, 0x8001, 0x4, 0x7, 0x8cef, 0xb, 0x6, 0x4, 0x10000, 0x31, 0x7eb9, 0x0, 0xf, 0x0, 0x1038, 0x2, 0x2, 0xf, 0x1, 0x3, 0x1ff, 0x3, 0x2, 0x0, 0x7a2, 0x9, 0x7, 0x6, 0x9e99, 0x9, 0x35f55a88, 0x4, 0x38, 0x3c143c97, 0x7, 0x0, 0x6, 0x8000, 0x5, 0x20, 0x3, 0x3, 0x10000, 0x9, 0x9, 0x86f, 0xa3, 0x99, 0x5, 0x6, 0x401, 0x65, 0x79b7, 0x6, 0x2, 0x80, 0x3, 0x6, 0x0, 0x4, 0x2, 0xffffffd4, 0x130f, 0x7, 0x1000, 0x2, 0x0, 0x6, 0x80, 0x0, 0x2, 0x8000, 0x3, 0x1, 0x1, 0x0, 0x7, 0x4, 0x0, 0x0, 0x6, 0x7, 0x5, 0x6, 0x200000, 0xb3, 0x3ff, 0x4, 0x6, 0xc, 0x5, 0xffffff81, 0x81, 0x5, 0x401, 0x7fff, 0x0, 0x2, 0x7, 0x8b, 0x4, 0x5, 0x4, 0x6d98, 0x5, 0x50, 0x0, 0xfffffffc, 0x7, 0x3, 0xfffff842, 0x6, 0x6, 0xfff, 0x4, 0x7, 0x6, 0x2, 0x5, 0x3, 0x6, 0x0, 0x6, 0xfffffffa, 0x8000, 0x101, 0x6, 0x80, 0x8, 0x8, 0x7, 0x3, 0x69, 0x1, 0x2, 0x5b994440, 0x5, 0x3c, 0x0, 0x4, 0x1, 0x5, 0x8, 0x8, 0x8, 0x7d, 0x9, 0x800, 0x4, 0xab7, 0x1, 0xbe43, 0x4, 0xa0, 0x6, 0x4, 0x7, 0x80000001, 0x487, 0x58, 0x8, 0x5, 0xfffff94e, 0x7f, 0xdd1, 0x8, 0x81, 0xaf4, 0xbbe7, 0xf4ff, 0x9000000, 0x1, 0x4, 0x1600000, 0x5, 0xfb, 0xf, 0x2, 0xc7, 0xb913, 0x9, 0x400, 0x8, 0x1, 0x1, 0xfffffff8, 0x1000, 0x0, 0x0, 0x21b, 0x2, 0x8, 0x296, 0xffffff81, 0x7, 0x56a, 0xffffffff, 0x6, 0x93, 0x10, 0x80000001, 0x4, 0x800, 0x7, 0xde73, 0x8, 0xc14d, 0x0, 0x7, 0x8, 0x7, 0x6, 0x9, 0xfffffffd, 0x90d, 0x3, 0x8, 0x0, 0x40, 0x0, 0x9, 0x5c000000, 0x0, 0x3, 0x3, 0x7e15, 0x101, 0x7f, 0x2, 0x2, 0x6, 0x6, 0x1, 0x3, 0x8, 0x4, 0x3, 0x5, 0x1, 0x143aac6f, 0x0, 0x3ff]}]}}, @tclass_kind_options=@c_mq={0x7}]}, 0x113c}}, 0x24008000) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtclass={0x113c, 0x28, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x9, 0x6}, {0x10, 0xffe0}, {0x9}}, [@tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x7f, 0xd}}, @TCA_RATE={0x6, 0x5, {0x2}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_htb={{0x8}, {0x10b4, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0x140, 0xfffffff7, 0x10000, 0x0, 0x7, 0x5a2b15e2, 0x1, 0xfffffff7, 0x1, 0xfff, 0x38, 0x6, 0x2, 0x8001, 0x10, 0x4997, 0x0, 0x6, 0x5, 0x0, 0x1000, 0x3, 0x8, 0x4, 0xc3e9, 0x400, 0x0, 0x9, 0x5, 0x1, 0x8, 0x0, 0x8, 0x8, 0x2, 0x9, 0x8, 0x2, 0x3, 0xac, 0x79b5, 0x3, 0x1, 0x7, 0x2b, 0x2, 0x3, 0x40, 0x3ff, 0xfffffff9, 0xc, 0x5, 0x7, 0x6, 0x8, 0x2, 0xb2, 0x10001, 0x7fff, 0x72f, 0x471, 0x38e6c803, 0x10, 0x7581, 0x8, 0xf, 0xffff, 0x9, 0xffffffff, 0x8, 0x6, 0x80000000, 0x5, 0x7f, 0x1ff, 0x1, 0xe, 0x1, 0x9, 0x927, 0x3, 0x4, 0x1, 0x800, 0x10, 0xfff, 0x6, 0x9fd, 0xaaf, 0x2, 0xc0, 0x5, 0x1, 0x7, 0xe, 0x9, 0x10001, 0x7, 0x8, 0x5, 0xc0000000, 0x2, 0x9, 0x9, 0x10000, 0x8, 0x4, 0x7fff, 0x7, 0x40, 0xffffffa8, 0x6, 0x7fff, 0xa, 0xa, 0x7ff, 0x8000, 0x2, 0x200, 0x6, 0x80000000, 0xd, 0x10, 0x4, 0x8, 0x10001, 0xed15114, 0x3, 0xbf, 0x73, 0x8, 0x5, 0x9, 0xffff, 0xfffffffd, 0x1, 0x3ff8, 0x713, 0x44c5, 0x3, 0xfffffffd, 0x80000000, 0x2, 0x100, 0x2, 0x3ff, 0x10001, 0x5, 0x100, 0xe64, 0xffffffff, 0x3257dc15, 0x9, 0xb, 0xe292, 0x4f8, 0xfffffbff, 0x5, 0x2, 0x8, 0xbcf6, 0x0, 0x4, 0xffffffff, 0x6, 0xfffffffc, 0x72d3, 0x101, 0x10001, 0x7f, 0x3a300000, 0x3, 0x1, 0x4, 0x3c00000, 0x4ce0b166, 0x1, 0x8000, 0x2, 0xa34, 0x7, 0x85, 0x6, 0x300, 0x3, 0x6, 0x7, 0x9, 0x362, 0x80000001, 0x9, 0x7, 0x9, 0xabaa, 0x6, 0x5, 0x2, 0x8, 0x761e, 0x4, 0x7, 0x38, 0x7, 0x1, 0x6, 0xf5, 0x5, 0x7, 0x21, 0x6, 0x11a3, 0xade, 0x31888483, 0x7f, 0x7, 0x5, 0x9, 0x7, 0xda, 0x7, 0xc, 0x5, 0x1, 0x1, 0xc72, 0x5, 0x8, 0x6, 0xa, 0x2a45, 0x1, 0x1000, 0xfffffff7, 0x8a7, 0x8, 0x0, 0xb65, 0x771dd2d3, 0x7, 0x0, 0xa, 0x3, 0x8, 0x1, 0x9, 0xffffffff, 0x9, 0x8, 0x1, 0x3, 0x33, 0x3, 0x8, 0x5, 0x4, 0x1]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x1, 0x0, 0xda63, 0x8001, 0x1, 0x2}, {0xff, 0x1, 0x6, 0x10, 0x7, 0x80000001}, 0x10001, 0x336b, 0x7, 0x6, 0xfb}}, @TCA_HTB_PARMS={0x30, 0x1, {{0xa8, 0x2, 0xf, 0xb, 0x9, 0x3ff}, {0x3, 0x0, 0x7, 0x8000, 0xbac, 0x2}, 0xffffffff, 0x1, 0x6, 0x2}}, @TCA_HTB_RTAB={0x404, 0x4, [0x3, 0xc, 0x5, 0xb, 0x3a80, 0x12, 0xa1, 0x6, 0x8, 0xfffffff2, 0x7, 0x75, 0xfffffffe, 0x101, 0x4, 0x400, 0x0, 0x4, 0x9, 0x1, 0x23, 0x2, 0x8, 0x39, 0x8, 0x1, 0x6, 0x8, 0x2, 0x5, 0x5, 0xe9e, 0x80000000, 0xfffffffc, 0x0, 0x4d5a, 0x10000, 0x7ff, 0xff, 0x7, 0x14b7, 0x8, 0x10, 0x7, 0x4, 0x9, 0x3, 0x7, 0x5, 0x2, 0x3, 0x3, 0x0, 0x9, 0x9, 0x5d20000, 0x3, 0x7c9be145, 0x2, 0x0, 0x8, 0x6, 0x9, 0x0, 0x5, 0x4, 0xfffff801, 0x7d09, 0x2, 0x1, 0x4, 0x4, 0x7, 0x0, 0xd749, 0x6d, 0x200, 0x4, 0x2, 0x7, 0xb74f, 0x7, 0xe8c, 0x3, 0x40000000, 0xffff, 0x0, 0x9, 0x9, 0x5, 0x1, 0x1854, 0xffffffff, 0x9, 0x2, 0x14ca, 0x100, 0xd98d, 0x8, 0x7fff, 0x1, 0x4, 0x4, 0x626e30a2, 0x4, 0x9, 0x40, 0x7fff, 0x7, 0x0, 0x3, 0x400, 0x0, 0x7, 0x0, 0x6, 0x7, 0x8074411, 0x0, 0x5, 0x2, 0x2, 0x78, 0x6, 0x8, 0x4, 0x200, 0x100, 0x6, 0x5, 0x3, 0xfffffff6, 0x1, 0xd41, 0x7, 0x6, 0x2, 0x8, 0xd7d3, 0x3ff, 0xfffffbff, 0x8001, 0x7fffffff, 0x1000, 0x8, 0xc28, 0x7, 0x1000, 0x9, 0x5, 0x8, 0x0, 0xfff, 0x80, 0x0, 0x4, 0x0, 0x10000, 0x1000, 0x9bb2, 0x3ff, 0x5, 0x2, 0xf03, 0x800, 0x9, 0x2, 0x7, 0x200, 0x7, 0xb5, 0x7, 0x3, 0x7, 0x80000001, 0x2, 0x2, 0x9, 0xfffffffc, 0xc82, 0xcdee, 0xa58, 0x3, 0x9, 0x2, 0x1539, 0x80000000, 0x0, 0xf11, 0x10001, 0x9, 0x1, 0x80000000, 0x8, 0xfffffff9, 0x4, 0x1, 0x4c4, 0x10000, 0x6, 0x0, 0x98c, 0x9, 0x818, 0x6, 0xffffffff, 0x1, 0x401, 0xad6, 0x8, 0x4, 0x2, 0x3, 0x8f, 0x4, 0x0, 0x2, 0x3, 0x4, 0x400, 0xf, 0x6, 0x1ff, 0x7, 0x7, 0x9, 0x3, 0xc, 0xfffffff9, 0x8, 0x5, 0x3, 0xff, 0x6, 0x2, 0x5, 0x8, 0x5, 0x2, 0x3, 0x100, 0x0, 0x5, 0x290a, 0x6, 0x6, 0x7, 0x3, 0x8, 0x7f6, 0x8, 0x0, 0x9, 0x81, 0x2df, 0x4]}, @TCA_HTB_CTAB={0x404, 0x3, [0x101, 0x322a, 0x315e, 0x6, 0x99, 0x9, 0x200, 0xfffffffb, 0x10000, 0xc8, 0x8, 0xfff0, 0x6, 0x10000, 0x4, 0x968, 0x7fffffff, 0x100, 0xb, 0x8, 0x8, 0x362e, 0x8, 0xe85, 0x80000000, 0xfffffff8, 0x0, 0x1, 0x8, 0x4, 0x4, 0x7, 0x3, 0x7fff, 0x9, 0x1ff, 0x3, 0x30, 0xe, 0x80000000, 0x6, 0x10001, 0x6, 0x5000000, 0x6, 0x2, 0x6, 0x7, 0x8, 0xbf2, 0x40, 0x7fffffff, 0x34, 0x8, 0x7f, 0x1, 0x9, 0x0, 0x1, 0x7a, 0x2, 0x10001, 0x200, 0x1, 0x101, 0x7, 0x101, 0x10001, 0x4, 0x493, 0x7fffffff, 0x2, 0x3ff, 0x4, 0x4, 0x10000, 0x7, 0x3, 0xdc, 0x9, 0x5, 0x5, 0x2d, 0xffffffff, 0x0, 0x0, 0x3, 0x97, 0x4d2, 0x1, 0x6, 0x2, 0x2, 0x9, 0x5, 0x9, 0xd, 0x3a, 0x5, 0x9, 0x4, 0x1, 0x101, 0x6, 0x77, 0x3, 0x3, 0x10, 0x8, 0x0, 0xe, 0xde08, 0x4, 0x8, 0x3, 0x5, 0x80000000, 0x7, 0xc, 0x1, 0x1, 0x9, 0x9, 0x5, 0x10000, 0x1, 0x9, 0x2730, 0x8000, 0x10000, 0x1, 0x0, 0x339e, 0x7, 0x6, 0x12000000, 0xbc6a, 0x5, 0x2, 0x9, 0x4, 0x0, 0x80, 0x5, 0x7fffffff, 0x8, 0x9, 0x9, 0x400, 0xffffffff, 0x5, 0xdb9d, 0x80000000, 0x1f, 0x3, 0x352, 0x800, 0x8e81, 0x8, 0xcc7, 0x4, 0x4, 0x7, 0x17, 0x3ecb, 0x9, 0x3, 0x4, 0x5, 0x3, 0x1, 0x1, 0x6, 0x0, 0x94, 0x0, 0x1, 0x28, 0x0, 0x3, 0x0, 0xf5f, 0x70, 0xc8a, 0x0, 0x4, 0x8, 0x6, 0xa72, 0x9, 0x939, 0x80, 0x1, 0x65e6266a, 0x8, 0x4, 0xa6, 0x3, 0x20000000, 0x8, 0xc3b, 0x9, 0x6, 0x7, 0x9, 0x9, 0xf1, 0x9, 0xf2000000, 0x8a8, 0x2, 0x1000, 0x3ff, 0x9, 0x3, 0x1, 0x0, 0x2, 0x80, 0x0, 0xfffffda4, 0xffffffc0, 0xc, 0x7, 0x0, 0xffff, 0x81, 0x4, 0x5, 0x9, 0xffffff01, 0x4, 0x6, 0x5, 0x1, 0xe5, 0x3, 0x3, 0x40, 0xfe86, 0x7, 0x80000001, 0x1, 0xfff, 0x5, 0x8, 0x3, 0x9, 0x1401, 0x4, 0x2, 0xa, 0xa, 0x53, 0x8001, 0x9]}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_PARMS={0x30, 0x1, {{0x5, 0x0, 0x1, 0x7, 0x1, 0x9}, {0x0, 0x0, 0x5, 0x9, 0xe4, 0x4}, 0x3, 0x1, 0x80, 0x7f, 0x7fffffff}}, @TCA_HTB_CEIL64={0xc, 0x7, 0x5}, @TCA_HTB_CTAB={0x404, 0x3, [0x1000, 0x2, 0x3239, 0x6, 0x291c, 0x6a9, 0x5, 0x2, 0xfffffffe, 0x1, 0x1, 0x8, 0x6, 0x619, 0x8, 0x8001, 0x4, 0x7, 0x8cef, 0xb, 0x6, 0x4, 0x10000, 0x31, 0x7eb9, 0x0, 0xf, 0x0, 0x1038, 0x2, 0x2, 0xf, 0x1, 0x3, 0x1ff, 0x3, 0x2, 0x0, 0x7a2, 0x9, 0x7, 0x6, 0x9e99, 0x9, 0x35f55a88, 0x4, 0x38, 0x3c143c97, 0x7, 0x0, 0x6, 0x8000, 0x5, 0x20, 0x3, 0x3, 0x10000, 0x9, 0x9, 0x86f, 0xa3, 0x99, 0x5, 0x6, 0x401, 0x65, 0x79b7, 0x6, 0x2, 0x80, 0x3, 0x6, 0x0, 0x4, 0x2, 0xffffffd4, 0x130f, 0x7, 0x1000, 0x2, 0x0, 0x6, 0x80, 0x0, 0x2, 0x8000, 0x3, 0x1, 0x1, 0x0, 0x7, 0x4, 0x0, 0x0, 0x6, 0x7, 0x5, 0x6, 0x200000, 0xb3, 0x3ff, 0x4, 0x6, 0xc, 0x5, 0xffffff81, 0x81, 0x5, 0x401, 0x7fff, 0x0, 0x2, 0x7, 0x8b, 0x4, 0x5, 0x4, 0x6d98, 0x5, 0x50, 0x0, 0xfffffffc, 0x7, 0x3, 0xfffff842, 0x6, 0x6, 0xfff, 0x4, 0x7, 0x6, 0x2, 0x5, 0x3, 0x6, 0x0, 0x6, 0xfffffffa, 0x8000, 0x101, 0x6, 0x80, 0x8, 0x8, 0x7, 0x3, 0x69, 0x1, 0x2, 0x5b994440, 0x5, 0x3c, 0x0, 0x4, 0x1, 0x5, 0x8, 0x8, 0x8, 0x7d, 0x9, 0x800, 0x4, 0xab7, 0x1, 0xbe43, 0x4, 0xa0, 0x6, 0x4, 0x7, 0x80000001, 0x487, 0x58, 0x8, 0x5, 0xfffff94e, 0x7f, 0xdd1, 0x8, 0x81, 0xaf4, 0xbbe7, 0xf4ff, 0x9000000, 0x1, 0x4, 0x1600000, 0x5, 0xfb, 0xf, 0x2, 0xc7, 0xb913, 0x9, 0x400, 0x8, 0x1, 0x1, 0xfffffff8, 0x1000, 0x0, 0x0, 0x21b, 0x2, 0x8, 0x296, 0xffffff81, 0x7, 0x56a, 0xffffffff, 0x6, 0x93, 0x10, 0x80000001, 0x4, 0x800, 0x7, 0xde73, 0x8, 0xc14d, 0x0, 0x7, 0x8, 0x7, 0x6, 0x9, 0xfffffffd, 0x90d, 0x3, 0x8, 0x0, 0x40, 0x0, 0x9, 0x5c000000, 0x0, 0x3, 0x3, 0x7e15, 0x101, 0x7f, 0x2, 0x2, 0x6, 0x6, 0x1, 0x3, 0x8, 0x4, 0x3, 0x5, 0x1, 0x143aac6f, 0x0, 0x3ff]}]}}, @tclass_kind_options=@c_mq={0x7}]}, 0x113c}}, 0x24008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r11) r12 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 31.139079245s ago: executing program 3 (id=2170): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000640)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb0378a7135b1bd5ba0bb8aa94141dec7f709e680cfbeef711e46b7c093f870c17c4eb40465f6ab9e77345084a40843b0b583aae7cf248bd06709368252ac94edbd36aaf2048429fe80c27e0414614c70322de31837cd8eaab3e41d6e22377bf00269742a2bf9e7bdb80fe4e0dda4b9b1337f01bbae1d24047c03baac605", 0xba}, {&(0x7f0000000b00)="5deeb9c8798e8b24b7bede8647338a7e21d7f182f5401f454ef058d2091aa36847cfca3d3d1cf2fa8f614134da03e657dcdebb873d889ed8b6889a774f4477b5ac412e68f963339ecb379b9d66bb7c83c1b8121bd3e31d4819b6ad89df5e8a78622d3bd47916bd5bfb11ff1ae6e40631b0129abd791865340464a90c6ccca13d323d25b3f8789d5aeebe6142d6aa34b9697775e5789c5aaf4693ec11d0570a6b0af88a382d53de77ac276f8ae8a4cc872db44aecbdfa6f60a57d0a81509508940e3a5d5c87fc6c325b7d2062b18974aeac6718ff2cdba637832484987824ba69d5edde0af290fb10859930703979fed70e90f9ad", 0xf4}, {&(0x7f0000000500)="f304470a67fb38991999006d8c3905b9d4ffc50b438e6fd5c431f3c6131ce4d1087ec3679904ceb777d76afd7187582da4f8c8c00008932b9f81e50656a5ba7917", 0x41}, {&(0x7f0000000980)="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", 0xfb}], 0x5}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f00000002c0)="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", 0x14a}, {&(0x7f00000008c0)="20c048210440d8394cdcb9ee88a6b7584a3e07b1b1d67f42b2dda515bf", 0x1d}, {0x0}], 0x3}}], 0x2, 0x890) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 30.873128227s ago: executing program 3 (id=2171): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000200), &(0x7f0000000280)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f0000000400000008"], 0x50) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x12100) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x0, 0x0}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x10, 0x1, 0x80, 0x7fffffff, {{0x11, 0x4, 0x2, 0x1, 0x44, 0x65, 0x0, 0x2b, 0x29, 0x0, @empty, @remote, {[@lsrr={0x83, 0x2b, 0x58, [@private=0xa010102, @broadcast, @dev={0xac, 0x14, 0x14, 0x3c}, @loopback, @local, @local, @loopback, @rand_addr=0x64010102, @broadcast, @multicast1]}, @end, @end, @end]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x11, 0x1c, &(0x7f0000003d40)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x2, 0x5, 0x7, 0x8000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff00000042"], 0x50) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r5, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r5, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r3}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000080)=[{&(0x7f0000000540)="df", 0x1}, {0x0}], 0x2}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002600)=@newchain={0x8e0, 0x64, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1, 0x1}, {0x5, 0xffe0}, {0x0, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x12ca8}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x8001}, @filter_kind_options=@f_u32={{0x8}, {0x88c, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x13}, @TCA_U32_SEL={0x444, 0x5, {0x9, 0x0, 0xe, 0x9, 0x4ffa, 0x5, 0x5, 0x401, [{0xff, 0x4, 0x1, 0x1}, {0xfffffffd, 0xa8b, 0x0, 0x1}, {0x0, 0x3eb, 0x52e, 0xffffffff}, {0x8, 0x2, 0x1, 0x8001}, {0x7, 0x6, 0x0, 0x1}, {0x2, 0xa, 0xda74, 0x2}, {0x8, 0x4, 0x7ff, 0x81}, {0x3, 0x7fff, 0xd, 0xffffffa5}, {0x1, 0x6, 0xfffffffe, 0xfff}, {0x7000, 0x8000, 0x8, 0x1}, {0x8, 0x3, 0x0, 0x4}, {0x9, 0x9, 0xf84, 0x1}, {0xb269, 0x1, 0x7, 0x7}, {0x4, 0xffff, 0x3, 0x2}, {0x7, 0x1c29, 0x9, 0x4}, {0x6, 0x6}, {0x9, 0x39b, 0x7, 0x80000001}, {0x5, 0x4, 0x7, 0x5}, {0x985, 0x8, 0x2, 0x2}, {0x5, 0x9, 0x76f, 0xffff}, {0x6, 0xb, 0xffffffff, 0x3}, {0x1ff, 0x1ff, 0x0, 0x6}, {0x3, 0x401, 0x7ed2}, {0x7fff, 0x7, 0x2e0, 0x1}, {0x3, 0x9, 0x7, 0x3}, {0xe, 0x1, 0x5, 0x5}, {0x5, 0xfffffffd, 0x547d145b, 0x1}, {0x1, 0x6, 0xd5a, 0xe24}, {0x10000, 0x4, 0x2, 0x5}, {0x7fffffff, 0x1, 0x80, 0x6}, {0x0, 0xe, 0x8, 0x915}, {0xe, 0x8, 0x6, 0x3}, {0x3, 0x6d4, 0x7, 0xffff253d}, {0x7a, 0x4}, {0x6, 0xfffff52a, 0x7, 0x9}, {0x2, 0x3, 0x9b, 0x2}, {0x3f, 0x7f, 0xa2, 0x3}, {0x7, 0x3, 0xc, 0x5}, {0x7, 0x4, 0x7fff, 0xfffffc1d}, {0x9, 0x9, 0xe5f6, 0xfffffff7}, {0x101, 0xe, 0x6, 0x7}, {0x1, 0x0, 0xe7, 0xd48}, {0x8, 0xf1d, 0x32623de5, 0xfff}, {0xffffff7f, 0x81, 0xfffffffd}, {0x3, 0x4c9, 0xfffffff8, 0x8}, {0xe6f9, 0x40, 0x10001, 0x6}, {0xc, 0x7fff, 0x8000, 0x81}, {0xfffffff8, 0x1, 0x4, 0xc}, {0x6, 0x6, 0x0, 0xb107}, {0x101, 0x9, 0x3, 0x81}, {0x2e4, 0x6, 0x1}, {0x4, 0x7f, 0x2, 0xdf}, {0x0, 0x7, 0xe04, 0x100}, {0x1, 0x3, 0x7, 0x1}, {0x101, 0x3, 0x1, 0x80000000}, {0x9f, 0x8, 0x6, 0x80000001}, {0x8, 0x9, 0x2, 0x4}, {0x7, 0x7, 0x6, 0x2}, {0x7, 0x40, 0x0, 0x3}, {0x14ce, 0x80, 0x7fffffff, 0x1}, {0x1, 0x4, 0x9}, {0x3, 0x6, 0xb8, 0x2}, {0x1, 0x7fffffff, 0x10, 0xa7}, {0x7546, 0x2, 0x2, 0xc}, {0x1, 0x100, 0x9, 0xfffffffe}, {0x6, 0xfffffff9, 0x8}, {0x5, 0x10001, 0x3f35, 0x9}]}}, @TCA_U32_FLAGS={0x8, 0xb, 0x8}, @TCA_U32_POLICE={0x414, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7ff}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x0, 0xffff, 0x6, 0x1ff, 0x9, 0x800, 0x3, 0x0, 0x200, 0x8, 0x8, 0x8, 0x200, 0x200, 0x6, 0x40, 0x7fff, 0x100, 0xb3, 0x5, 0x9, 0xc, 0x3, 0xc2d, 0xfff, 0x6, 0x6, 0x8, 0x1, 0xffff08b3, 0xc, 0xa90, 0x8, 0x7fffffff, 0x4, 0xc232, 0x6, 0x9, 0x9, 0x1, 0x9, 0x482, 0x1, 0x2, 0x9, 0x8, 0xffffff28, 0x7f, 0x1, 0x6, 0x2, 0x84e6, 0x476d, 0x5, 0x8, 0x8, 0x4, 0x10001, 0x1, 0x858, 0xafd4, 0x3, 0x9, 0x6, 0x5, 0x8, 0x4, 0x4, 0x2, 0xc27c, 0x3, 0x0, 0x1000, 0x6, 0x1000, 0x4, 0x800, 0x2, 0x8, 0xc, 0xec6, 0x8, 0x1, 0x6, 0xf07, 0x9, 0x8, 0xffffffd3, 0xd8, 0x237, 0x800, 0x9507, 0x5, 0xff, 0x23, 0x0, 0x1, 0x2d, 0x2, 0xfffff801, 0x3, 0x8, 0x2, 0x2, 0x75, 0xe, 0xf, 0x2, 0x8, 0x9, 0xfff, 0xdb3, 0x0, 0x2, 0x3, 0x2, 0x7f0e, 0x2, 0x5, 0x5, 0xfffffff4, 0x2a, 0x3, 0xd, 0x2, 0x6, 0xffffff00, 0x4, 0x8, 0x6, 0x0, 0xff, 0xbc, 0xb3, 0x4, 0x0, 0x9, 0xf, 0x200, 0xf2b, 0x7, 0x5, 0x6, 0x5, 0x4, 0x8, 0x6, 0x0, 0xfffffffc, 0x0, 0xe, 0x56d, 0x2, 0x6, 0x2, 0x6, 0x4132, 0x51, 0x200, 0x753, 0x10000, 0x4f1, 0x6, 0x7, 0x3, 0x0, 0x3, 0xcc, 0x80, 0x8, 0xc, 0x80, 0x4, 0x4, 0xb0, 0x400, 0xee2, 0x0, 0x2, 0x2, 0x8, 0xfffff801, 0x365d, 0x0, 0x4ffc, 0xffffd201, 0x1, 0x0, 0x3, 0x9, 0x2, 0x4c21, 0x8, 0x1000, 0x4, 0xae4, 0x72, 0x6, 0xf8, 0x8, 0x8, 0x1, 0x40000000, 0x13e, 0xfffffff9, 0x3, 0x9, 0xce8, 0x8e440d7c, 0x1, 0xfffffffb, 0x1, 0xb, 0x4, 0xfffffffe, 0x2, 0x1, 0x62a3, 0x5, 0x9e58, 0x315, 0x88, 0x3, 0x7ff, 0x200, 0x100, 0x1e, 0x4, 0x8, 0x57caf02d, 0xd9b6, 0x3, 0x2, 0x4, 0x101, 0x3, 0x9, 0x9, 0x5, 0x1, 0xfffffe00, 0xfffffff1, 0xfffffffe, 0x2, 0x3, 0x3ff, 0xc5, 0x0, 0xffffffb1, 0x449, 0x800, 0x4, 0x1, 0x2, 0xd37]}]}, @TCA_U32_HASH={0x8, 0x2, 0x9cf}, @TCA_U32_LINK={0x8, 0x3, 0x6}, @TCA_U32_MARK={0x10, 0xa, {0x2, 0x3}}]}}]}, 0x8e0}}, 0x840) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}]}}]}, 0x40}}, 0x20004000) 29.944849216s ago: executing program 40 (id=2107): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000003e000701fe56cda3e3c932ffffff00000000047c0000080042"], 0x1c}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) sendmmsg$inet6(r2, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000000080)="b826", 0x2}, {0x0}], 0x2}}], 0x1, 0xc0000) (async) sendmmsg$inet6(r2, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000000080)="b826", 0x2}, {0x0}], 0x2}}], 0x1, 0xc0000) 29.693488166s ago: executing program 3 (id=2174): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500351fb112be2ae1d7907800000000e000030000009078006400d2"], 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x30, 0x4040001}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000240)={r6}, &(0x7f0000000280)=0x8) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, 0x0, 0x0) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, 0x0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]}) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) 21.452919505s ago: executing program 41 (id=2159): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 32) unshare(0x62040200) (async, rerun: 32) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa1000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1000, 0x0, 0x0, 0xfffffff8}, 0x10}, 0x94) (rerun: 64) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) (async, rerun: 64) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (rerun: 64) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) (async, rerun: 64) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) (async, rerun: 32) r8 = socket(0x840000000002, 0x3, 0xfa) (rerun: 32) connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) (async) getsockname$packet(r8, 0x0, 0x0) (async) recvfrom$ax25(r8, &(0x7f0000000180)=""/4, 0x4, 0x10021, &(0x7f0000000440)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async, rerun: 32) r9 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async, rerun: 32) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4c, '\x00', 0x0, r10, 0x0, 0x3}, 0x50) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) 14.614339318s ago: executing program 42 (id=2174): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500351fb112be2ae1d7907800000000e000030000009078006400d2"], 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x30, 0x4040001}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000240)={r6}, &(0x7f0000000280)=0x8) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, 0x0, 0x0) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, 0x0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]}) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) 7.798994411s ago: executing program 5 (id=2172): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f00000001c0)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb0378a7135b1bd5ba0bb8aa94141dec7f709e680cfbeef711e46b7c093f870c17c4eb40465f6ab9e706709368252ac94edbd36aaf2048429fe80c27e0414614c70322de31837cd8eaab3e41d6e22377bf00269742a2bf9e7bdb80fe4e0dda4b9b1337f01bbae1d24047c03baac605", 0xab}, {&(0x7f0000000b00)="5deeb9c8798e8b24b7bede8647338a7e21d7f182f5401f454ef058d2091aa36847cfca3d3d1cf2fa8f614134da03e657dcdebb873d889ed8b6889a774f4477b5ac412e68f963339ecb379b9d66bb7c83c1b8121bd3e31d4819b6ad89df5e8a78622d3bd47916bd5bfb11ff1ae6e40631b0129abd791865340464a90c6ccca13d323d25b3f8789d5aeebe6142d6aa34b9697775e5789c5aaf4693ec11d0570a6b0af88a382d53de77ac276f8ae8a4cc872db44aecbdfa6f60a57d0a81509508940e3a5d5c87fc6c325b7d2062b18974aeac6718ff2cdba637832484987824ba69d5edde0af290fb10859930703979fed70e90f9ad", 0xf4}, {&(0x7f0000000500)="f304470a67fb38991999006d8c3905b9d4ffc50b438e6fd5c431f3c6131ce4d1087ec3679904ceb777d76afd7187582da4f8c8c00008932b9f81e50656a5ba7917", 0x41}, {&(0x7f0000000980)="bb64fecb948ba6f4318e7fb53f575babe2ef755cf84da819da9a061290fd4c237c95ca20c7f68a319f2201c5d7ab4fd516e014901ae00103b9ef28e75dbff1bd3fbc67c29d20f8c1c66f02941278c0a0d6432b26ff1857424793669deace6a09db5ec8e809b4e26be4da2f84a4403482e44c31d18b2ea27f92dbe6f1fb0e36d229b1f6bf8fa3c0ce5a3d2c1e83640a3ae68384332efa44c76296cac4aa7185c613e94ffd7c7ef52afb1d978422addcb7351bfd1dcb7f123bdf2c7a9ad5", 0xbd}], 0x5}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000800)="f6b328c40d4cc969a0513b8ffd72381d4ef4a89954104d4a81db2fa3c0f906a33482e2821787ac54c0c62da54d1c77255c322358d0e272be2ccacf8f689f0115afd7305a1ce39e8b54734910fd9257fc4d3d2f910d5b9965f73440df67940c76ddc3df03db0d78c28fc030a88d506029", 0x70}, {&(0x7f00000008c0)="20c048210440d8394cdcb9ee88a6b7584a3e07b1b1d67f42b2dda515bffbb8de861e60d4ee6dad628fdf1055f9", 0x2d}, {&(0x7f0000000940)="ee41e16fcc123e48fa04ef6edfc0fe23b7a87e1e837f1d1104d1", 0x1a}], 0x3}}], 0x2, 0x890) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 7.411019231s ago: executing program 5 (id=2215): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)={0x338, 0x48, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x100, 0x0, 0x0, @u32}, @nested={0x310, 0x1, 0x0, 0x1, [@nested={0x30c, 0x151, 0x0, 0x1, [@generic="d077636bd5d41f2b76417fc3e13adebcc3d6c6c41b814c6ef6acaa25e8d146988c399c3ce1a59bf875ffcd1e9d12b6e5d5a9f53e8f8dcc87d0f577789fa72eba65f59c4da4db775384387e2e062e6a6c29056edd8872a851a7762e7c8e17b739f3fe75a84c59bfdd6b57c6f88e9e864147f432a90ada0e50e3adb392d1074b56145bccca5f34a44258fbdbe04c4e1ab9b3c33e93db3e00ddb2350595dd8d19cd7d811426f3b8c3ac41835d0d0e39f8fd6d2a1671f1ebb42e18d005b72ab35da653120f2fbd67f6f713fb2373c97c55541cb51da5b1630b3416d776c760ad4b", @generic='\x00\x00\x00\x00\x00', @nested={0x213, 0x58, 0x0, 0x1, [@nested={0x4, 0x149}, @typed={0x9d, 0x6c, 0x0, 0x0, @binary="8843496fb2f01c1ecb8de5cc4bee5588a1c991c139a2517634a612aab22f517459e771c20d15d33741f6408d34bac82986762a6bb820b38db20c5ef7e8b903eab4dd98f01f2dc253af9feb5ae27829aa50728e30d1f6b6f1e6f0bec57d4ec7d7014f323261c52ec1e306d04ce74c3dd3fd115f282e014535d4ba3d50e3bb96f4697c7792fb5485c1c41bcdf0cd946f3be4a5cebc9f11063964"}, @typed={0x80, 0x12f, 0x0, 0x0, @binary="894de0a663c3227954c2b7b953caff1f44dcf80d9dfd0af78ea4074b4547b6184e99da245f40c4cf761fa630cbc9b4347d357877a3e196382c014b940b4d0eda2d2bc69d36361766188841baa934ad2ac89717e6cff7a22eac99a65c850d15e405d7310f55b47c077feff4959bc163b757c682082d94f18117c85fdf"}, @typed={0x8, 0x8a, 0x0, 0x0, @uid}, @generic="d896407d0aaea999bf4f1efadc12ccd5712cac3c5b54c66cae457a8da39e60022fd2e987bbc955285f953d332ee5f16f8729d528e5fde6c433cc7a18f8629d174780e215560c3a087a5060ee877d7ce4bffa97d11bb27d27d8e19e8e429ce216c14d33e826292bc9ad4aff36d1e819cadfad6a26ede4bcd13216b96dd09b5d0f63cab9198c4fe62a82cf1f533cf9fa9ebe00093f0d651acfacf29237dbaafcdb22367c97787f549f75c71b1b7155851212d6bdd144b86c0b73f16f6d355ff31963034bfe061a34ce198f72e5088755e65740e8f1300a8d60fa013b", @typed={0x4, 0x66}, @nested={0x4, 0xde}]}, @typed={0x4, 0x148}, @typed={0xc, 0xa6, 0x0, 0x0, @u64=0xffffffffffffffff}]}]}, @nested={0xa, 0x2, 0x0, 0x1, [@generic="b4e27551be74"]}]}, 0x338}}, 0x20048800) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x27, 0x36, 0x0, &(0x7f0000000880)="f8ad1dcc02cb29dcc8003200810066a286ddc6617f503e7457188353133a3d4070574ac945c1be1c9b296e268bd0fabb3a4ba7534035", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000700)=[@in={0x2, 0x4e1c, @private=0xa010100}]}, &(0x7f0000000380)=0x36) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020c0000098011e8", 0x8) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000080), &(0x7f0000000180)=0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x38, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x800, @local, 0x9}, @in6={0xa, 0x4e23, 0x0, @local, 0x3}]}, &(0x7f0000000480)=0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000280)={0x6, 0x1800e, 0x6, 0x5e}, &(0x7f00000002c0)=0x10) r6 = socket(0x1e, 0x4, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40}}, &(0x7f0000000180)='GPL\x00', 0x9, 0xc5, &(0x7f00000002c0)=""/197, 0x0, 0x8}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000190001000100000000000a0080201400000400050000081e0e000900"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000001) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000540)={r3, @in6={{0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7}}}, &(0x7f0000000600)=0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@union={0x3, 0x2, 0x0, 0x5, 0x1, 0x8, [{0x1, 0x5, 0x5}, {0x0, 0x5, 0x1f8}]}]}, {0x0, [0x0]}}, &(0x7f0000000380), 0x3f, 0x0, 0x1, 0x6, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000f4686b9b1c16721c5ca0387c0d7bf89be89668ee84749b705bac3fda17b8a73da03906a51a4ee02e99869c5405ec518c179b21f27f7b1e4fbd9ec4dcc06b0b650773ccd1a8d0e2cf585d83f1a41d", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="020000000200"/28], 0x50) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000001c0)=0xd, 0x4) 6.773359286s ago: executing program 1 (id=2216): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f00000001c0)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb0378a7135b1bd5ba0bb8aa94141dec7f709e680cfbeef711e46b7c093f870c17c4eb40465f6ab9e706709368252ac94edbd36aaf2048429fe80c27e0414614c70322de31837cd8eaab3e41d6e22377bf00269742a2bf9e7bdb80fe4e0dda4b9b1337f01bbae1d24047c03baac605", 0xab}, {&(0x7f0000000b00)="5deeb9c8798e8b24b7bede8647338a7e21d7f182f5401f454ef058d2091aa36847cfca3d3d1cf2fa8f614134da03e657dcdebb873d889ed8b6889a774f4477b5ac412e68f963339ecb379b9d66bb7c83c1b8121bd3e31d4819b6ad89df5e8a78622d3bd47916bd5bfb11ff1ae6e40631b0129abd791865340464a90c6ccca13d323d25b3f8789d5aeebe6142d6aa34b9697775e5789c5aaf4693ec11d0570a6b0af88a382d53de77ac276f8ae8a4cc872db44aecbdfa6f60a57d0a81509508940e3a5d5c87fc6c325b7d2062b18974aeac6718ff2cdba637832484987824ba69d5edde0af290fb10859930703979fed70e90f9ad", 0xf4}, {&(0x7f0000000500)}, {&(0x7f0000000980)="bb64fecb948ba6f4318e7fb53f575babe2ef755cf84da819da9a061290fd4c237c95ca20c7f68a319f2201c5d7ab4fd516e014901ae00103b9ef28e75dbff1bd3fbc67c29d20f8c1c66f02941278c0a0d6432b26ff1857424793669deace6a09db5ec8e809b4e26be4da2f84a4403482e44c31d18b2ea27f92dbe6f1fb0e36d229b1f6bf8fa3c0ce5a3d2c1e83640a3ae68384332efa44c76296cac4aa7185c613e94ffd7c7ef52afb1d978422addcb7351bfd1dcb7f123bdf2c7a9ad504be27668b90e02d23d4647e39257c8801e1cf108915a3d24317dd364c3775ee673ff88471a72bcc388b81cecabbd34bcbbf8010f9fc8f715e1e52", 0xf8}], 0x5}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000800)="f6b328c40d4cc969a0513b8ffd72381d4ef4a89954104d4a81db2fa3c0f906a33482e2821787ac54c0c62da54d1c77255c322358d0e272be2ccacf8f689f0115afd7305a1ce39e8b54734910fd9257fc4d3d2f910d5b9965f73440df67940c76ddc3df03db0d78c28fc030a88d506029", 0x70}, {&(0x7f00000008c0)="20c048210440d8394cdcb9ee88a6b7584a3e07b1b1d67f42b2dda515bffbb8de861e60d4ee6dad628fdf1055f9", 0x2d}, {&(0x7f0000000940)="ee41e16fcc123e48fa04ef6edfc0fe23b7a87e1e837f1d1104d11ab1934265fd5cfbca479a17e7420ec938e84ad449c00288b126e26d6d80fb16", 0x3a}], 0x3}}], 0x2, 0x890) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 5.737495991s ago: executing program 5 (id=2219): socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000008c40)={0x11, 0x3, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff89, 0x0, 0x0, 0x10, 0x8}, 0x94) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) epoll_create(0x400) pipe(&(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000020000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 5.711531909s ago: executing program 4 (id=2220): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="200000002d00010026bdf000eebe28e0855d622d04000d1008000c08", @ANYRES32=r2, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r3 = accept(r2, &(0x7f0000000000)=@ax25={{0x3, @null}, [@bcast, @rose, @null, @rose, @rose, @netrom, @default, @rose]}, &(0x7f0000000080)=0x80) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) bind$nfc_llcp(r3, &(0x7f00000000c0)={0x27, r5, 0x0, 0x1, 0x6, 0x3, "1b1a3eecceb16d92cba1b57929e79218e5f26df3b70ba2efedf0df0b4d0bfb0023e4a38d6ed2e63531ddc0e268f5ccac924b097ea9697c7ce9b917ae48c806", 0x22}, 0x60) 5.676318952s ago: executing program 1 (id=2221): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff05000000008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(r4, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000480)="bc", 0x1}], 0x1}}], 0x2, 0x8000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000380), 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@private2, @in=@rand_addr=0x64010101, 0x4e22, 0x2000, 0x2, 0xd1e2, 0x2, 0xa0, 0x0, 0xa3}, {0xfffffffffffffffe, 0x0, 0x9, 0x4, 0x0, 0x7, 0x6, 0x3}, {0x3, 0xfffffffffffffffc, 0x0, 0xffffffffffff382a}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0xfffffffd, 0x33}, 0x14, @in=@multicast1, 0xfffffffd, 0x4, 0x0, 0x0, 0x3, 0x7}}, 0xe8) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000080)=0xa2b, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32, @ANYBLOB="28565110a86534cc60b0358a459e202c053395d9c1ba4d30ac7fe137a2488c235ed9483b44f71351c8fb181ac982"], 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0xfffffffffffffe77, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_int(r5, 0x0, 0xd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000140)=0x40, 0x4) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet(0xa, 0x801, 0x84) listen(r7, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.856453339s ago: executing program 4 (id=2222): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x16, 0x0, 0x8400, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r1, 0x0, 0x20000000, 0x4}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d00)={0x6c, r4, 0x1, 0x4, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @mcast1, 0x400005}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @local, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) r6 = socket$inet6(0xa, 0x5, 0x0) listen(r6, 0x10000) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r7, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r11, 0x0) ioctl$SIOCX25SFACILITIES(r11, 0x89e3, &(0x7f0000002200)={0x36, 0x8001, 0xc, 0xc, 0x0, 0x81}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0x0, 0xb}, {0x3}}, [{0x0, 0xb, 0x20000003}, {0x0, 0xb, 0x7}, {0x0, 0xb, 0xab}, {0xffffffffffffff3f, 0xb, 0x7}, {0x0, 0xb, 0x7fff}, {0x0, 0xb, 0x4}]}, 0xfffffffffffffdef}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bind$inet(r10, &(0x7f0000000300)={0x2, 0x4e21, @broadcast}, 0x10) r12 = socket$netlink(0x10, 0x3, 0x4) writev(r12, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r5, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x20000000) 4.573863476s ago: executing program 1 (id=2223): r0 = socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000008c40)={0x11, 0x3, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff89, 0x0, 0x0, 0x10, 0x8}, 0x94) syz_emit_ethernet(0x3fe, &(0x7f0000000400)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x3c8, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, [{0x0, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46c56aa00148c356de6b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x18, 0x7, "b8a3e10000a3e1100000006f00ff12164039d0ebab140888c235c0fffe00000000600000ff0bc0fe0000000000000000fe20e23f6541c3"}, {0x0, 0x22, "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"}]}}}}}}, 0x0) socket$packet(0x11, 0x2, 0x300) epoll_create(0x400) pipe(&(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x14, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, 0x0, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r1, 0x0, 0x6, 0x1) 4.500911991s ago: executing program 5 (id=2224): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000000080824d2e81d69575", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000a40), 0x0}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000880), 0x6e, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/29, 0x1d}], 0x1, &(0x7f0000000900)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x40000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x2a8, 0x65, 0x2, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x7c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x10}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x7, 0xfff1}}, @TCA_BASIC_ACT={0x68, 0x3, [@m_vlan={0x64, 0x1f, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x2e, 0x6, "e9a0ed808f7995647ae2ea3a026c7ba3254411a5a5204cb78cee23c048269e0992b9e43e9b7a4e793d6f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x1ec, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1d4, 0x1, [@m_skbedit={0x11c, 0x1, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8e}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xd96, 0x8, 0x6, 0xb, 0x8}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x200}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}]}, {0xad, 0x6, "e694237e5368d7ffa3b6902e867a74d28928d9c60c5545d197aed0ec6ae835ef8d6a9da336c44092b74bda2299f780b216b499fbe27d758019db25c266280e79bc55f4fa69e0bc5288f64828bf15b5160f77a26791ac04656dc2da929e6396a3d494a63bc9737729a32d8631b30d5dae8ad64e22cca01df471bba0300d563cd153d416bd231e3de075e047b883fd2ec2e650454a7c3483dc348da03b4ad0f58acd2914167f72078595"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_mirred={0xb4, 0x0, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000000, 0x7, 0x4, 0x3, 0xfeb}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3ff, 0x7, 0xffffffffffffffff, 0x2, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x800, 0x6, 0x0, 0x306, 0x3b7}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x365, 0xfffffff9, 0x20000000, 0x3, 0x6}, 0x3}}]}, {0x8, 0x6, "86bdecff"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x1000002}]}, @int={0x4, 0x0, 0x0, 0x1, 0x5, 0x20}]}, {0x0, [0x61, 0x0, 0x61, 0x61, 0x61, 0x61, 0x61, 0x61, 0x0, 0x61]}}, 0x0, 0x4c}, 0x28) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x653, '\x00', 0x0, r3, 0x0, 0x2, 0x1}, 0x50) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r8}, 0x59) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x18, 0x3, 0x2, 0x8, 0x810, r4, 0x101, '\x00', r6, r3, 0x3, 0x5, 0x1}, 0x50) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x40, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81, 0x20000009}]}}}}}}}, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000f00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x148, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x148}, 0x1, 0x0, 0x0, 0xc1}, 0x0) recvmmsg(r10, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.562748192s ago: executing program 5 (id=2225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x10) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x80000) setsockopt(r8, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) recvmmsg(r8, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x1b, 0x4, 0x1, 0x1, 0x6c, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @timestamp={0x44, 0xc, 0x8e, 0x0, 0x2, [0x9, 0x6]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @timestamp={0x44, 0x10, 0x79, 0x0, 0x4, [0x0, 0x0, 0xfff]}]}}}}}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) 3.430208707s ago: executing program 4 (id=2226): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000640)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb0378a7135b1bd5ba0bb8aa94141dec7f709e680cfbeef711e46b7c093f870c17c4eb40465f6ab9e77345084a40843b0b583aae7cf248bd06709368252ac94edbd36aaf2048429fe80c27e0414614c70322de31837cd8eaab3e41d6e22377bf00269742a2bf9e7bdb80fe4e0dda4b9b1337f01bbae1d24047c03baac605", 0xba}, {&(0x7f0000000b00)="5deeb9c8798e8b24b7bede8647338a7e21d7f182f5401f454ef058d2091aa36847cfca3d3d1cf2fa8f614134da03e657dcdebb873d889ed8b6889a774f4477b5ac412e68f963339ecb379b9d66bb7c83c1b8121bd3e31d4819b6ad89df5e8a78622d3bd47916bd5bfb11ff1ae6e40631b0129abd791865340464a90c6ccca13d323d25b3f8789d5aeebe6142d6aa34b9697775e5789c5aaf4693ec11d0570a6b0af88a382d53de77ac276f8ae8a4cc872db44aecbdfa6f60a57d0a81509508940e3a5d5c87fc6c325b7d2062b18974aeac6718ff2cdba637832484987824ba69d5edde0af290fb10859930703979fed70e90f9ad", 0xf4}, {&(0x7f0000000500)="f304470a67fb38991999006d8c3905b9d4ffc50b438e6fd5c431f3c6131ce4d1087ec3679904ceb777d76afd7187582da4f8c8c00008932b9f81e50656a5ba7917", 0x41}, {&(0x7f0000000980)="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", 0xfb}], 0x5}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f00000002c0)="f6b328c40d4ce469a0513b87fd72381d4ef4a89954104d4a81db14a3c0f906a33482e2821787ac54c0c62da54d1c77255c320400d0e237c52ccacf8f689f0115afd7305a1ce3938b54734910fd9257910d5b99d5253440df67940c76ddc3df03db0d78c28fc030a88d5060290aa8ec68032a294c0aaefb55cb6ed22c068c89b142c91dc625f5456c61069350d53e0596b6331deb1882f5c2228a80ee8aae275ffb4c10a5fb", 0xa5}, {&(0x7f00000008c0)="20c048210440d8394cdcb9ee88a6b7584a3e07b1b1d67f42b2dd", 0x1a}, {0x0}], 0x3}}], 0x2, 0x890) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 2.985205571s ago: executing program 1 (id=2227): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x40}}, 0x0) (async) r3 = socket(0x10, 0x3, 0x6) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000080)=@raw=[@snprintf, @alu={0x7, 0x0, 0xacac6402c9fd2d8b, 0x7, 0x2, 0xfffffffffffffff0, 0xfffffffffffffffc}, @generic={0x8, 0x4, 0x4, 0x9, 0x6}, @exit], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000580)=""/4096, 0x40f00, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x5, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000240)=[{0x2, 0x4, 0x2, 0x5}, {0x4, 0x4, 0x5, 0x1}, {0xb97b, 0x1, 0x3, 0x6}, {0x3, 0x4, 0x10, 0x7}, {0x2, 0x2, 0xc, 0x7}, {0x3, 0x4, 0xb, 0xa}, {0x10001, 0x5, 0xf, 0x1}, {0x0, 0x5, 0xc, 0x7}, {0x0, 0x3, 0x4, 0x6}], 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='afs_cb_break\x00', r4, 0x0, 0xda}, 0x18) (async) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x20, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}, [@TCA_MQPRIO_SHAPER={0xffffffffffffff8e, 0x2, 0x1}]}}}]}, 0x90}}, 0x20000000) 2.861362978s ago: executing program 4 (id=2228): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x158, r1, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x40, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_SEC_DEVKEY={0xc4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xa0, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x158}, 0x1, 0x0, 0x0, 0x81}, 0x80) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000340)={@mcast2, 0x0}, &(0x7f0000000380)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfe}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x48080) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000580)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@getchain={0x34, 0x66, 0x210, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3}, {0x0, 0xffff}, {0xffe0, 0x1}}, [{0x8}, {0x8, 0xb, 0x80000000}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x7, &(0x7f0000001700)={@un=@file={0x1, './file0\x00'}, {&(0x7f00000006c0)=""/4096, 0x1000}, &(0x7f00000016c0)}, 0xa0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001800), r3) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x44, r8, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x79}}}}, [@NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x14, r8, 0x400, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x24000884) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000001a40)=0x1, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000001a80), 0x2, 0x0) connect$inet(r6, &(0x7f0000001ac0)={0x2, 0x4e21, @remote}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000001b00)=0x3) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000001b40)=0xb7ec, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x56, &(0x7f0000001b80)={@local, @remote, @void, {@canfd={0xd, {{0x1, 0x1, 0x0, 0x1}, 0x1f, 0x0, 0x0, 0x0, "5077b4d7a0e0a5b820a5ce721ef79c6da31f783fd2defb8d5f50a13edd0db786594c98b2fbc07c4a110379ad5e3513c8827df9a1eb04d3e1ac9969d3c38dad8a"}}}}, &(0x7f0000001c00)={0x0, 0x4, [0xe03, 0xcea, 0x935, 0x911]}) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, &(0x7f0000001c40)={0x8, 0x2, 0xffff6216, 0x9, 0xd}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1010}, 0x8080) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000001e40)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x28, r8, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000000}, 0x4048841) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e3, &(0x7f0000001ec0)="2dfa7359b57dc9c0c31da3bddfdda08e531f2a50b72b3f819b1d615286874143aea109bf39109738a5489efe247aeeb5a66a7f0be2085cbb308bae12840d7ebc00e9b67055f703106abf098d46ad1f58d7da9a8119c6f25151358757ac7aa4ad99a35817d40fb1f879172edd2293001d70415251") 2.365517841s ago: executing program 1 (id=2229): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f00000001c0)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb0378a7135b1bd5ba0bb8aa94141dec7f709e680cfbeef711e46b7c093f870c17c4eb40465f6ab9e706709368252ac94edbd36aaf2048429fe80c27e0414614c70322de31837cd8eaab3e41d6e22377bf00269742a2bf9e7bdb80fe4e0dda4b9b1337f01b", 0xa1}, {&(0x7f0000000b00)="5deeb9c8798e8b24b7bede8647338a7e21d7f182f5401f454ef058d2091aa36847cfca3d3d1cf2fa8f614134da03e657dcdebb873d889ed8b6889a774f4477b5ac412e68f963339ecb379b9d66bb7c83c1b8121bd3e31d4819b6ad89df5e8a78622d3bd47916bd5bfb11ff1ae6e40631b0129abd791865340464a90c6ccca13d323d25b3f8789d5aeebe6142d6aa34b9697775e5789c5aaf4693ec11d0570a6b0af88a382d53de77ac276f8ae8a4cc872db44aecbdfa6f60a57d0a81509508940e3a5d5c87fc6c325b7d2062b18974aeac6718ff2cdba637832484987824ba69d5edde0af290fb10859930703979fed70e90f9ad", 0xf4}, {&(0x7f0000000500)="f304470a67fb38991999006d8c3905b9d4ffc50b438e6fd5c431f3c6131c", 0x1e}, {&(0x7f0000000980)="bb64fecb948ba6f4318e7fb53f575babe2ef755cf84da819da9a061290fd4c237c95ca20c7f68a319f2201c5d7ab4fd516e014901ae00103b9ef28e75dbff1bd3fbc67c29d20f8c1c66f02941278c0a0d6432b26ff1857424793669deace6a09db5ec8e809b4e26be4da2f84a4403482e44c31d18b2ea27f92dbe6f1fb0e36d229b1f6bf8fa3c0ce5a3d2c1e83640a3ae68384332efa44c76296cac4aa7185c613e94ffd7c7ef52afb1d978422addcb7351bfd1dcb7f123bdf2c7a", 0xbb}], 0x5}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000800)="f6b328c40d4cc969a0513b8ffd72381d4ef4a89954104d4a81db2fa3c0f906a33482e2821787ac54c0c62da54d1c77255c322358d0e272be2ccacf8f689f0115afd7305a1ce39e8b54734910fd9257fc4d3d2f910d5b9965f73440df67940c76ddc3df03", 0x64}], 0x1}}], 0x2, 0x890) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 1.225118506s ago: executing program 4 (id=2230): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9, 0x8}, {}, {0xb, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x2, 0xe0, 0x4636, 0xd6, 0xc8, 0x81, 0x8001, 0x6, 0xbf5c, 0x7, 0x1, 0x1, 0x1, 0x7, 0xff, 0x40, 0x4, 0x5, 0x80000000, 0x1000, 0xfffffffb, 0xcfb, 0x2, 0x7fff, 0x95, 0x15e5, 0x3, 0xff, 0x3, 0x81, 0xfffffffe, 0x3, 0x1c, 0x4, 0x0, 0x0, 0x2, 0x101, 0x30, 0x0, 0x100, 0x1, 0xf4, 0x6, 0x200, 0x1, 0xfffffffd, 0xffffffff, 0x3, 0x1ff, 0x4, 0x8a03, 0x6, 0x1, 0x2, 0x9, 0x2, 0x9c8, 0x9, 0x200, 0x231e, 0xfff, 0xf, 0x0, 0x7, 0x8000, 0x5, 0x8, 0x2, 0xfffffffb, 0x2, 0x4, 0x7fffffff, 0x5, 0x9, 0x6, 0x6, 0x9, 0xae, 0x2, 0x101, 0x4, 0x0, 0x0, 0x1000, 0x0, 0x7, 0xfffffffe, 0x6, 0xd, 0x64b, 0x1efe, 0x6e1c, 0xfffffff9, 0x2, 0x1, 0x5, 0x94, 0x3, 0x5, 0x1, 0x9, 0x0, 0xfffff6e4, 0xec0, 0x7, 0x8, 0x7e, 0xd081, 0x1, 0x1, 0x8, 0x7, 0x7, 0x7fff, 0x7, 0x8, 0x2f, 0x7, 0x9, 0x2, 0x7ff, 0xa38, 0x6, 0x327, 0x101, 0x2, 0x2, 0x1, 0x3, 0xd46, 0x5, 0x338, 0x40, 0x1b8beb60, 0x20000, 0x240, 0x7, 0x0, 0x0, 0x9, 0x8, 0x1, 0x3f0, 0x40, 0x0, 0x0, 0x1, 0xfffffe01, 0x3, 0xfffffffd, 0x2, 0x0, 0x98, 0x8, 0x200, 0x40, 0x4, 0x6, 0x8, 0x4, 0x9, 0x8, 0xf1b, 0x0, 0xfffffffe, 0x10000, 0x0, 0x81, 0x9, 0x3, 0x3, 0x3, 0x5, 0xfffffff7, 0x7, 0x5, 0x5, 0x9, 0x1ff, 0x2, 0x1000, 0x80000000, 0xfffffffc, 0x5, 0xff, 0x40, 0x7f, 0x9, 0xfffffc01, 0x0, 0x7f, 0x200, 0x8, 0x7, 0x5, 0x6, 0x8, 0x40, 0x1, 0x7, 0x7, 0x7fff, 0x301, 0x9, 0x4, 0x7f, 0x80000000, 0xd, 0x3, 0x101, 0x6e, 0x6, 0x3, 0x40000000, 0x3, 0x0, 0x9, 0x0, 0xfffffff8, 0x90b, 0xfe, 0x200, 0x2000000, 0x3, 0x200, 0xffffff01, 0x7, 0xfffffff1, 0x80000000, 0x1000, 0x0, 0x4, 0x2, 0x6e3000, 0x4, 0x6, 0x3, 0xdda, 0x4, 0x6, 0xfffffffd, 0x5, 0x80, 0x1000, 0x1, 0x0, 0x2, 0x7ff, 0x6, 0xfffffff8, 0xc, 0x2, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x592, 0xc6a3, 0x4, 0x81, 0x120, 0x40, 0x2, 0x3, 0x6, 0xc0000000, 0xe, 0x8, 0xf, 0x1000, 0x48e, 0x6, 0x1, 0x4, 0x1b70, 0xff, 0x1, 0xffffffff, 0x1, 0x0, 0xdd6, 0x80000001, 0xffff, 0x0, 0x4, 0x80000000, 0xfff, 0x7fff, 0x136d, 0x9, 0x5, 0xfffffffa, 0x7, 0x0, 0x8, 0x8, 0xa97b, 0x81, 0x0, 0x8, 0x1, 0x1b93d89b, 0x2400000, 0xfffffffa, 0xff52, 0x6, 0x6, 0x1, 0x670, 0x7ff, 0x8, 0xbb7, 0x5, 0x8, 0x7fff, 0x1, 0x3, 0x6, 0xfffffff7, 0x4, 0x764, 0x1, 0x80000000, 0x7fffffff, 0xb3, 0x2, 0xfc69, 0xffff0000, 0x0, 0x7, 0x400, 0x8, 0x1, 0x8, 0xa8d, 0x1, 0xffff7fff, 0x0, 0x5, 0xfffffff7, 0x94, 0x4, 0x8, 0xffff, 0x8, 0xfffffff5, 0x200, 0x9, 0x6, 0x3, 0x800, 0xf, 0x1, 0xfffffff0, 0x3, 0xffff, 0x80, 0xae0, 0x4, 0x1, 0xfffffffe, 0x800, 0xcc, 0xfffffffe, 0x4, 0x9, 0x10001, 0x7, 0xe, 0x2, 0x6, 0x4, 0x5f3, 0x5, 0x4, 0x8, 0x2, 0x6, 0x7, 0x7, 0xffffffff, 0x97e9, 0x9, 0x400, 0x7, 0xfffffff7, 0x5, 0x15, 0x1000, 0x100, 0x9, 0x9, 0x0, 0xe, 0x3ff, 0x0, 0x4, 0x79, 0x3, 0x5, 0x3, 0x3, 0x401, 0x1, 0xffffff80, 0xda29, 0x9, 0x200, 0x3, 0x2, 0x4, 0x800, 0x87, 0x1, 0x2, 0x8d, 0xa0, 0x80000001, 0x8, 0x5, 0x0, 0x8, 0x1, 0x32a0, 0x2, 0x0, 0x7f, 0x7d, 0x9, 0x34, 0x8, 0x5, 0x9, 0x1, 0x0, 0x7, 0x1, 0x1, 0x200, 0x10, 0x3, 0x3, 0x8000, 0x0, 0xf, 0x8, 0x7, 0x101, 0x8, 0x637, 0x1, 0xfff, 0x3, 0x4, 0x94c0, 0x10001, 0x7fff, 0x9, 0x7, 0xf, 0x10001, 0x0, 0x101, 0x79a1, 0x3ef, 0x5, 0x4, 0x2, 0xffffff01, 0x3, 0xf, 0x8, 0x5, 0xb, 0x0, 0x8001, 0x80, 0x9, 0x80000001, 0x7, 0x6, 0x0, 0xffffffff, 0xfffffff7, 0x4, 0x8, 0x5, 0x7, 0x7, 0x80000000, 0x2, 0x3, 0x200, 0x8, 0x133, 0x3ff, 0x2, 0x6, 0x1, 0x7, 0x3, 0x4d800, 0x4d4, 0x7, 0xe, 0x7, 0x0, 0x9, 0x80000001, 0xbd8, 0xd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x7, 0x9, 0x9, 0x4, {0x6, 0x0, 0x6b, 0xffc0, 0x5, 0xb}, {0x7, 0x0, 0x800, 0x5, 0x8001, 0x7}, 0xffffff01, 0x8001, 0x3}}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x124fc}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x10}, 0x408c014) unshare(0x20000400) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x4, 0x0, 0x0) 1.166033497s ago: executing program 1 (id=2231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="008005004800080005004ac000d70065000007069078ac14d87f000001441c2f91ffffffff000000000a0101010000000aac14143d00000000000713c60a010102ac1414bb640101020a010102863cffffffff070b4d75a5a28facd5b0c3070a257660e1a5ee31dd0705da00f806073ca7dccfdd0208acbbf3cf2a0d000d4579a3c109c7a9fb66420b441443f1ac1e010100000007ffffffff00000005440cb46000000100000c0000000000000000000000000000000000000100004e2100004e240000000200000000000000020000000300000000000000"], 0xe1) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000000c0)=0x5) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aae", 0xb) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000002440)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="57cd4e", 0x3}, {&(0x7f0000000580)="3222f0476ed4765dc271a2c4fc02", 0xe}], 0x2, &(0x7f0000001a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000801}], 0x1, 0x40) recvmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_to_bond\x00', 0x7101}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0xb19366062a5e1df1, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="840000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0000000082040200640012800b000100697036746e6c000054000280140003002001000000000000000000000000000114000200fc02000000000000000000000000000014000300fe8000000000000000000000000000aa0400130008000100", @ANYRES32], 0x84}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="0204000000000000000000000000000002001000000000030000000000286700030005000000000002000000ac1414000000000000000000030006"], 0x50}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f00000000c0), 0x2, 0x0) r9 = openat$cgroup_procs(r7, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r8, &(0x7f0000000200)='THAWED\x00', 0x7) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r9, @ANYRES64], 0x44}}, 0x200000d0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) 0s ago: executing program 4 (id=2232): socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000008c40)={0x11, 0x3, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff89, 0x0, 0x0, 0x10, 0x8}, 0x94) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) epoll_create(0x400) pipe(&(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000070000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) kernel console output (not intermixed with test programs): : 4 callbacks suppressed [ 169.057008][ T9786] netlink: 220 bytes leftover after parsing attributes in process `syz.4.972'. [ 169.186927][ T9789] netlink: 76 bytes leftover after parsing attributes in process `syz.0.971'. [ 169.239826][ T9791] netlink: 20824 bytes leftover after parsing attributes in process `syz.4.973'. [ 169.334972][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.975'. [ 169.346502][ T9798] tipc: Enabling of bearer rejected, failed to enable media [ 169.428463][ T9801] vlan4: entered promiscuous mode [ 169.445433][ T9801] dummy0: entered promiscuous mode [ 169.573681][ T9807] tipc: Resetting bearer [ 169.580080][ T9807] tipc: Resetting bearer [ 169.684325][ T9809] netlink: 68 bytes leftover after parsing attributes in process `syz.4.978'. [ 169.854096][ T9814] syzkaller1: entered promiscuous mode [ 169.902217][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.982'. [ 169.998891][ T9824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.984'. [ 170.148323][ T9833] netlink: 24 bytes leftover after parsing attributes in process `syz.4.986'. [ 170.457027][ T9845] netlink: 36 bytes leftover after parsing attributes in process `syz.0.989'. [ 170.475574][ T9845] netlink: 36 bytes leftover after parsing attributes in process `syz.0.989'. [ 170.578274][ T9856] netlink: 'syz.4.990': attribute type 16 has an invalid length. [ 170.587004][ T9856] netlink: 'syz.4.990': attribute type 17 has an invalid length. [ 170.644328][ T9857] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 170.664412][ T9856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.695829][ T9856] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 170.905815][ T9864] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.021650][ T9864] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.090029][ T9864] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.152881][ T9864] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.286212][ T8530] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.331084][ T8530] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.360097][ T8530] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.398769][ T9743] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.635695][ T9886] netlink: 'syz.1.999': attribute type 3 has an invalid length. [ 171.653021][ T9886] netlink: 'syz.1.999': attribute type 1 has an invalid length. [ 172.251338][ T9914] siw: device registration error -23 [ 172.547899][ T9923] netlink: 'syz.0.1012': attribute type 10 has an invalid length. [ 172.564359][ T9923] team0: Port device dummy0 added [ 172.571683][ T9923] netlink: 'syz.0.1012': attribute type 10 has an invalid length. [ 172.584832][ T9923] team0: Port device dummy0 removed [ 172.655969][ T9] IPVS: starting estimator thread 0... [ 172.750437][ T9932] IPVS: using max 31 ests per chain, 74400 per kthread [ 172.925515][ T9941] sctp: [Deprecated]: syz.3.1016 (pid 9941) Use of int in maxseg socket option. [ 172.925515][ T9941] Use struct sctp_assoc_value instead [ 173.246931][ T9961] tipc: Enabling of bearer rejected, already enabled [ 173.289963][ T9958] tipc: Started in network mode [ 173.296120][ T9958] tipc: Node identity 4e94ae25a27a, cluster identity 4711 [ 173.315937][ T9958] tipc: Enabled bearer , priority 0 [ 173.413324][ T9962] tipc: Disabling bearer [ 174.175294][ T9996] __nla_validate_parse: 5 callbacks suppressed [ 174.175311][ T9996] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1029'. [ 174.293673][ T9993] block nbd3: shutting down sockets [ 174.425174][ T9996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1029'. [ 174.677714][T10008] veth5: entered promiscuous mode [ 174.703826][T10013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1035'. [ 174.799353][T10020] sctp: [Deprecated]: syz.3.1037 (pid 10020) Use of int in max_burst socket option deprecated. [ 174.799353][T10020] Use struct sctp_assoc_value instead [ 175.319062][T10046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.348114][T10048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1048'. [ 175.363379][T10048] netlink: 'syz.1.1048': attribute type 15 has an invalid length. [ 175.379507][T10048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1048'. [ 175.393825][T10048] netlink: 'syz.1.1048': attribute type 15 has an invalid length. [ 175.655696][T10071] delete_channel: no stack [ 175.723011][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1053'. [ 175.782264][T10078] netlink: 'syz.0.1053': attribute type 5 has an invalid length. [ 176.078617][T10091] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1057'. [ 176.244828][T10102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1060'. [ 176.254325][T10102] tipc: Enabling of bearer rejected, failed to enable media [ 176.282124][T10104] syzkaller0: Caught tx_queue_len zero misconfig [ 176.550205][T10122] geneve1: entered promiscuous mode [ 176.555919][T10122] geneve1: entered allmulticast mode [ 176.564268][T10123] sctp: [Deprecated]: syz.4.1064 (pid 10123) Use of int in max_burst socket option deprecated. [ 176.564268][T10123] Use struct sctp_assoc_value instead [ 176.564792][ T8530] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.593480][ T8530] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.612810][ T8530] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.633358][ T8530] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.803314][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1065'. [ 177.199391][ T51] Bluetooth: hci4: link tx timeout [ 177.206561][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 177.214368][T10140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1069'. [ 177.216203][ T51] Bluetooth: hci4: link tx timeout [ 177.229265][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 178.403912][T10198] syzkaller1: entered promiscuous mode [ 178.409505][T10198] syzkaller1: entered allmulticast mode [ 178.785461][T10217] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 179.053480][T10230] netlink: 'syz.1.1097': attribute type 3 has an invalid length. [ 179.120176][T10232] syz_tun: entered allmulticast mode [ 179.300398][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 179.445815][T10237] FAULT_INJECTION: forcing a failure. [ 179.445815][T10237] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 179.460162][T10237] CPU: 0 UID: 0 PID: 10237 Comm: syz.0.1099 Not tainted syzkaller #0 PREEMPT(full) [ 179.460179][T10237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 179.460184][T10237] Call Trace: [ 179.460189][T10237] [ 179.460194][T10237] dump_stack_lvl+0x189/0x250 [ 179.460210][T10237] ? __pfx____ratelimit+0x10/0x10 [ 179.460222][T10237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.460233][T10237] ? __pfx__printk+0x10/0x10 [ 179.460249][T10237] ? __might_fault+0xb0/0x130 [ 179.460278][T10237] should_fail_ex+0x414/0x560 [ 179.460303][T10237] _copy_from_user+0x2d/0xb0 [ 179.460323][T10237] ___sys_sendmsg+0x158/0x2a0 [ 179.460346][T10237] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.460399][T10237] ? __fget_files+0x2a/0x420 [ 179.460413][T10237] ? __fget_files+0x3a0/0x420 [ 179.460434][T10237] __x64_sys_sendmsg+0x19b/0x260 [ 179.460456][T10237] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 179.460485][T10237] ? __pfx_ksys_write+0x10/0x10 [ 179.460510][T10237] ? rcu_is_watching+0x15/0xb0 [ 179.460531][T10237] ? do_syscall_64+0xbe/0x3b0 [ 179.460552][T10237] do_syscall_64+0xfa/0x3b0 [ 179.460566][T10237] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.460583][T10237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.460599][T10237] ? clear_bhb_loop+0x60/0xb0 [ 179.460619][T10237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.460634][T10237] RIP: 0033:0x7f671c58eec9 [ 179.460650][T10237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.460663][T10237] RSP: 002b:00007f671d4f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.460682][T10237] RAX: ffffffffffffffda RBX: 00007f671c7e5fa0 RCX: 00007f671c58eec9 [ 179.460694][T10237] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000015 [ 179.460704][T10237] RBP: 00007f671d4f3090 R08: 0000000000000000 R09: 0000000000000000 [ 179.460714][T10237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.460724][T10237] R13: 00007f671c7e6038 R14: 00007f671c7e5fa0 R15: 00007ffe7bd5a5d8 [ 179.460750][T10237] [ 179.700481][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 179.719442][T10239] 8021q: VLANs not supported on vxcan1 [ 179.874011][T10229] syz_tun: left allmulticast mode [ 179.885287][T10247] __nla_validate_parse: 2 callbacks suppressed [ 179.885305][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1105'. [ 180.327817][T10254] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1108'. [ 180.341809][T10254] dvmrp0: left allmulticast mode [ 181.228176][T10292] tipc: Resetting bearer [ 181.751443][T10309] tipc: Enabling of bearer rejected, failed to enable media [ 182.070103][T10324] netlink: 'syz.3.1122': attribute type 3 has an invalid length. [ 182.365298][T10333] netlink: 'syz.0.1125': attribute type 6 has an invalid length. [ 182.384177][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1125'. [ 182.394031][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1125'. [ 182.403939][T10333] netlink: 'syz.0.1125': attribute type 18 has an invalid length. [ 182.598818][T10338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1125'. [ 182.806570][T10340] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1126'. [ 182.819439][T10340] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1126'. [ 182.917718][T10343] netlink: 'syz.4.1126': attribute type 27 has an invalid length. [ 183.190223][T10343] tipc: Resetting bearer [ 183.199401][T10343] syzkaller0: left promiscuous mode [ 183.210800][T10343] syzkaller0: left allmulticast mode [ 183.239899][ T10] syz2: Port: 1 Link DOWN [ 183.573371][T10358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1131'. [ 183.653240][T10359] netlink: 'syz.0.1132': attribute type 9 has an invalid length. [ 183.895922][T10374] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1135'. [ 183.930540][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1135'. [ 184.809303][T10404] pimreg: entered allmulticast mode [ 184.904845][T10406] pimreg: left allmulticast mode [ 185.392720][T10413] __nla_validate_parse: 1 callbacks suppressed [ 185.392740][T10413] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1143'. [ 185.408583][T10413] ntd0: renamed from syz_tun [ 185.414988][T10423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1147'. [ 185.416570][T10413] ntd0: entered promiscuous mode [ 185.441958][T10424] netlink: 'syz.0.1146': attribute type 10 has an invalid length. [ 185.487281][T10421] netlink: 'syz.0.1146': attribute type 12 has an invalid length. [ 186.449368][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1160'. [ 186.512231][T10463] veth0_to_bridge: entered promiscuous mode [ 186.525857][T10460] veth0_to_bridge: left promiscuous mode [ 186.839772][T10476] tipc: Enabled bearer , priority 0 [ 186.847889][T10476] syzkaller0: entered promiscuous mode [ 186.855501][T10476] syzkaller0: entered allmulticast mode [ 186.885969][T10475] tipc: Resetting bearer [ 186.908100][T10475] tipc: Disabling bearer [ 186.984983][T10479] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1165'. [ 186.996131][T10478] delete_channel: no stack [ 187.362974][T10498] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1170'. [ 187.536928][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 187.547447][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 187.556145][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 187.566977][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 187.575610][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 187.757434][T10499] chnl_net:caif_netlink_parms(): no params data found [ 187.921856][T10499] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.938465][T10499] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.947095][T10499] bridge_slave_0: entered allmulticast mode [ 187.959085][T10499] bridge_slave_0: entered promiscuous mode [ 187.977261][T10499] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.985206][T10499] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.993370][T10499] bridge_slave_1: entered allmulticast mode [ 188.002388][T10499] bridge_slave_1: entered promiscuous mode [ 188.118441][T10520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1175'. [ 188.238791][T10520] vlan0: entered promiscuous mode [ 188.245554][T10520] erspan0: entered promiscuous mode [ 188.273604][T10499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.288263][T10499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.354844][T10499] team0: Port device team_slave_0 added [ 188.366691][T10499] team0: Port device team_slave_1 added [ 188.409413][T10499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.416775][T10499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.443654][T10499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.456446][T10499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.463950][T10499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.491230][T10499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.507209][T10527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.619685][T10499] hsr_slave_0: entered promiscuous mode [ 188.631893][T10499] hsr_slave_1: entered promiscuous mode [ 188.638651][T10499] debugfs: 'hsr0' already exists in 'hsr' [ 188.645603][T10499] Cannot create hsr debugfs directory [ 189.043662][T10499] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 189.059106][T10499] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 189.064320][T10546] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1181'. [ 189.101953][T10546] batadv1: entered promiscuous mode [ 189.107464][T10546] batadv1: entered allmulticast mode [ 189.124105][T10499] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 189.146275][T10499] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 189.414672][T10531] delete_channel: no stack [ 189.452206][T10499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.493181][T10499] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.516976][ T8529] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.524309][ T8529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.552265][ T9746] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.559444][ T9746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.596289][T10569] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 189.631036][ T5872] Bluetooth: hci5: command tx timeout [ 189.901074][T10588] 8021q: VLANs not supported on ip6gre0 [ 189.977421][T10499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.014088][T10593] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1191'. [ 190.086593][T10597] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1192'. [ 190.492825][T10499] veth0_vlan: entered promiscuous mode [ 190.507710][T10499] veth1_vlan: entered promiscuous mode [ 190.567334][T10499] veth0_macvtap: entered promiscuous mode [ 190.587040][T10499] veth1_macvtap: entered promiscuous mode [ 190.634185][T10499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.648184][T10499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.712081][ T9745] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.733452][ T9745] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.764273][ T9745] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.774675][ T9745] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.896387][ T8528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.916165][ T8528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.993631][ T8528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.003514][T10617] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1196'. [ 191.013929][ T8528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.161376][T10620] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1197'. [ 191.175614][T10622] netlink: 'syz.5.1169': attribute type 1 has an invalid length. [ 191.705411][ T5872] Bluetooth: hci5: command tx timeout [ 191.762711][T10651] netlink: 'syz.5.1206': attribute type 5 has an invalid length. [ 192.022313][ T8528] wlan1: Trigger new scan to find an IBSS to join [ 192.607463][T10694] tipc: Enabled bearer , priority 0 [ 192.623771][T10694] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 192.648589][T10694] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 192.669744][T10694] tipc: Resetting bearer [ 192.689059][T10697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'. [ 192.713751][T10698] IPVS: set_ctl: invalid protocol: 231 0.0.0.0:20004 [ 193.439034][T10722] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 193.449034][T10722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.524581][T10726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1222'. [ 193.681631][ T43] tipc: Node number set to 207509149 [ 193.736607][T10740] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20004 [ 193.747674][T10740] IPVS: set_ctl: invalid protocol: 136 10.1.1.2:20000 [ 193.779200][T10742] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1228'. [ 193.791278][ T5872] Bluetooth: hci5: command tx timeout [ 193.792182][T10742] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1228'. [ 193.866883][T10751] netlink: 'syz.5.1230': attribute type 32 has an invalid length. [ 193.876039][T10751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1230'. [ 193.886552][T10751] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 194.102215][T10761] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1233'. [ 194.460832][T10771] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1236'. [ 194.472691][T10771] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1236'. [ 195.061163][ T8528] wlan1: Trigger new scan to find an IBSS to join [ 195.799112][T10810] bond3 (unregistering): Released all slaves [ 195.862993][ T5869] Bluetooth: hci5: command tx timeout [ 196.502441][ T5869] Bluetooth: hci1: command 0x0406 tx timeout [ 196.503243][ T5864] Bluetooth: hci2: command 0x0406 tx timeout [ 196.510243][ T5869] Bluetooth: hci3: command 0x0406 tx timeout [ 197.027935][T10838] __nla_validate_parse: 4 callbacks suppressed [ 197.027952][T10838] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1255'. [ 197.131347][T10844] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1256'. [ 197.751220][ T5875] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 197.761767][ T5875] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 197.777037][ T5875] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 197.787410][ T5875] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 197.796911][ T5875] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 198.026403][ T9745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.140732][ T5946] hid-generic 0005:15C2:5505.0001: unknown main item tag 0x0 [ 198.170922][ T5946] hid-generic 0005:15C2:5505.0001: unknown main item tag 0x0 [ 198.192961][ T5946] hid-generic 0005:15C2:5505.0001: reserved main item tag 0xe [ 198.249333][ T5946] hid-generic 0005:15C2:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 198.274942][T10867] chnl_net:caif_netlink_parms(): no params data found [ 198.310561][T10880] netlink: 'syz.1.1265': attribute type 1 has an invalid length. [ 198.508636][T10867] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.528080][T10867] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.535897][T10867] bridge_slave_0: entered allmulticast mode [ 198.547094][T10867] bridge_slave_0: entered promiscuous mode [ 198.562128][T10867] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.580103][T10867] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.598092][T10867] bridge_slave_1: entered allmulticast mode [ 198.607551][T10867] bridge_slave_1: entered promiscuous mode [ 198.751555][T10867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.834121][T10867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.037321][T10867] team0: Port device team_slave_0 added [ 199.084339][T10867] team0: Port device team_slave_1 added [ 199.103029][T10905] team0: No ports can be present during mode change [ 199.284431][T10867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.291809][T10867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.355783][T10867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.385013][T10867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.398638][T10867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.429416][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1271'. [ 199.439256][T10867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.495712][T10916] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1272'. [ 199.515744][T10916] netlink: 'syz.1.1272': attribute type 1 has an invalid length. [ 199.668594][T10867] hsr_slave_0: entered promiscuous mode [ 199.683009][T10867] hsr_slave_1: entered promiscuous mode [ 199.691336][T10867] debugfs: 'hsr0' already exists in 'hsr' [ 199.697213][T10867] Cannot create hsr debugfs directory [ 199.860878][ T51] Bluetooth: hci6: command tx timeout [ 199.968159][T10926] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1274'. [ 199.977844][T10926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1274'. [ 200.392087][T10867] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 200.414613][T10867] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 200.427611][T10867] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 200.445686][T10867] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 200.625974][T10867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.691984][T10867] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.709029][ T9746] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.716882][ T9746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.745987][ T8529] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.753249][ T8529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.866937][T10954] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1279'. [ 200.895283][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1279'. [ 201.108580][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1282'. [ 201.126841][T10963] netlink: zone id is out of range [ 201.135335][T10963] netlink: zone id is out of range [ 201.141699][T10963] netlink: zone id is out of range [ 201.153971][T10963] netlink: zone id is out of range [ 201.159607][T10963] netlink: zone id is out of range [ 201.195776][T10867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.247204][T10964] netlink: del zone limit has 4 unknown bytes [ 201.317442][T10969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1284'. [ 201.426014][T10963] netlink: set zone limit has 4 unknown bytes [ 201.693412][T10990] tc_dump_action: action bad kind [ 201.712658][T10867] veth0_vlan: entered promiscuous mode [ 201.728538][T10867] veth1_vlan: entered promiscuous mode [ 201.783039][T10867] veth0_macvtap: entered promiscuous mode [ 201.800195][T10867] veth1_macvtap: entered promiscuous mode [ 201.856114][T10867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.914979][T10867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.941089][ T51] Bluetooth: hci6: command tx timeout [ 201.961659][ T9745] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.987942][ T9745] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.027782][ T9745] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.053064][ T8529] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.212383][ T8529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.241572][ T8529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.284736][ T9745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.298663][ T9745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.439967][T11004] __nla_validate_parse: 2 callbacks suppressed [ 202.439987][T11004] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1292'. [ 202.615527][T11014] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 202.994429][T11033] syzkaller1: entered promiscuous mode [ 202.999941][T11033] syzkaller1: entered allmulticast mode [ 203.156339][T11040] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1302'. [ 203.182287][T11040] tipc: Enabled bearer , priority 0 [ 203.192464][T11040] syzkaller0: entered promiscuous mode [ 203.198132][T11040] syzkaller0: entered allmulticast mode [ 203.222195][T11040] tipc: Resetting bearer [ 203.234244][T11037] tipc: Resetting bearer [ 203.256828][T11037] tipc: Disabling bearer [ 203.287416][T11045] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1304'. [ 203.395178][T11049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'. [ 203.488789][T11051] netlink: 'syz.0.1307': attribute type 1 has an invalid length. [ 203.549624][T11053] syzkaller0: entered promiscuous mode [ 203.557277][T11053] syzkaller0: entered allmulticast mode [ 203.594551][T11053] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1308'. [ 204.022718][ T51] Bluetooth: hci6: command tx timeout [ 205.272967][T11077] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1316'. [ 206.105702][ T51] Bluetooth: hci6: command tx timeout [ 206.269080][T11092] netlink: 'syz.5.1320': attribute type 16 has an invalid length. [ 206.277562][T11092] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.1320'. [ 206.292196][T11092] RDS: rds_bind could not find a transport for 7200::4000:0:20:0, load rds_tcp or rds_rdma? [ 206.394730][T11097] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612) [ 206.416986][T11097] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 206.462002][T11097] netlink: 'syz.1.1322': attribute type 1 has an invalid length. [ 206.490878][T11097] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1322'. [ 206.512011][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1322'. [ 206.729522][T11109] netlink: 'syz.6.1326': attribute type 2 has an invalid length. [ 206.739957][T11109] netlink: 4264 bytes leftover after parsing attributes in process `syz.6.1326'. [ 206.916658][T11110] xt_limit: Overflow, try lower: 604147548/4200216962 [ 207.106943][T11118] batadv1: entered promiscuous mode [ 207.115387][T11118] batadv1: entered allmulticast mode [ 207.238555][T11128] netlink: 'syz.5.1331': attribute type 1 has an invalid length. [ 207.288240][T11128] syzkaller0: entered promiscuous mode [ 207.297275][T11128] syzkaller0: entered allmulticast mode [ 207.347722][T11131] bond1: entered promiscuous mode [ 207.353727][T11131] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.663977][T11139] tipc: Enabling of bearer rejected, failed to enable media [ 207.856156][T11157] netlink: 'syz.0.1339': attribute type 1 has an invalid length. [ 207.885515][T11147] syzkaller1: entered promiscuous mode [ 207.891586][T11147] syzkaller1: entered allmulticast mode [ 207.902715][T11157] __nla_validate_parse: 2 callbacks suppressed [ 207.902732][T11157] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1339'. [ 208.337179][T11181] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001 [ 208.349503][T11181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1348'. [ 208.676925][T11190] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1350'. [ 208.723719][T11190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1350'. [ 208.753857][T11192] netlink: 'syz.1.1352': attribute type 8 has an invalid length. [ 208.762159][T11190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1350'. [ 209.135967][T11219] netlink: 1028 bytes leftover after parsing attributes in process `syz.5.1356'. [ 209.146738][T11219] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 209.156683][T11223] netlink: 'syz.0.1357': attribute type 10 has an invalid length. [ 209.172102][T11219] netlink: 'syz.5.1356': attribute type 1 has an invalid length. [ 209.401010][T11239] netlink: 1288 bytes leftover after parsing attributes in process `syz.6.1361'. [ 209.410197][T11239] openvswitch: netlink: Flow key attr not present in new flow. [ 209.833190][T11255] tipc: Started in network mode [ 209.844413][T11255] tipc: Node identity ac1414aa, cluster identity 4711 [ 209.867325][T11255] tipc: Enabled bearer , priority 10 [ 209.887189][T11257] tipc: Enabled bearer , priority 0 [ 209.895147][T11257] syzkaller0: entered promiscuous mode [ 209.901726][T11257] syzkaller0: entered allmulticast mode [ 209.929690][T11257] tipc: Resetting bearer [ 210.010448][T11256] tipc: Resetting bearer [ 210.064743][T11256] tipc: Disabling bearer [ 210.253783][T11271] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1373'. [ 210.368659][T11282] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 210.377750][T11282] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 210.388003][T11282] tipc: Resetting bearer [ 210.980940][ T5862] tipc: Node number set to 2886997162 [ 211.350772][T11302] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1384'. [ 211.696988][T11320] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1387'. [ 211.996800][ T5875] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 212.008197][ T5875] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 212.017193][ T5875] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 212.029239][ T5875] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 212.038962][ T5875] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 212.475792][T11327] chnl_net:caif_netlink_parms(): no params data found [ 212.699380][T11327] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.714976][T11327] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.723396][T11327] bridge_slave_0: entered allmulticast mode [ 212.732556][T11327] bridge_slave_0: entered promiscuous mode [ 212.742364][T11360] tipc: Enabled bearer , priority 0 [ 212.749703][T11327] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.760924][T11327] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.768676][T11327] bridge_slave_1: entered allmulticast mode [ 212.776418][T11327] bridge_slave_1: entered promiscuous mode [ 212.788801][T11360] syzkaller0: entered promiscuous mode [ 212.795724][T11360] syzkaller0: entered allmulticast mode [ 212.856701][T11327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.917633][T11360] tipc: Resetting bearer [ 212.945227][T11327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.076070][T11327] team0: Port device team_slave_0 added [ 213.085644][T11370] netlink: 'syz.6.1402': attribute type 1 has an invalid length. [ 213.103944][T11372] netlink: 'syz.0.1403': attribute type 26 has an invalid length. [ 213.151752][T11370] 8021q: adding VLAN 0 to HW filter on device bond2 [ 213.162088][T11327] team0: Port device team_slave_1 added [ 213.240188][T11359] tipc: Resetting bearer [ 213.301447][T11359] tipc: Disabling bearer [ 213.345972][T11378] bond2: (slave geneve2): making interface the new active one [ 213.357491][T11378] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 213.399632][T11370] bond2: entered promiscuous mode [ 213.417952][T11370] geneve2: entered promiscuous mode [ 213.508001][T11327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.532782][T11327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.563519][T11327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.646194][T11327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.657260][T11400] netlink: 'syz.1.1410': attribute type 1 has an invalid length. [ 213.675252][T11327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.703869][T11327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.753162][T11403] dvmrp8: entered allmulticast mode [ 213.882007][T11327] hsr_slave_0: entered promiscuous mode [ 213.889857][T11327] hsr_slave_1: entered promiscuous mode [ 213.897223][T11327] debugfs: 'hsr0' already exists in 'hsr' [ 213.907789][T11327] Cannot create hsr debugfs directory [ 213.978061][T11416] __nla_validate_parse: 28 callbacks suppressed [ 213.978080][T11416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1415'. [ 214.107121][ T51] Bluetooth: hci7: command tx timeout [ 214.516752][T11327] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 214.530230][T11327] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 214.545087][T11327] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 214.567975][T11327] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 214.727470][T11435] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1418'. [ 214.737114][T11435] netlink: 'syz.0.1418': attribute type 32 has an invalid length. [ 214.749789][T11435] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 214.881812][T11327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.891760][T11438] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1419'. [ 214.932270][T11327] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.947421][ T8528] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.954765][ T8528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.998411][ T9745] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.005721][ T9745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.037706][T11441] siw: device registration error -23 [ 215.056906][T11442] siw: device registration error -23 [ 215.377197][T11460] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1425'. [ 215.477727][T11327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.541568][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 216.083106][T11327] veth0_vlan: entered promiscuous mode [ 216.119522][T11327] veth1_vlan: entered promiscuous mode [ 216.183126][ T51] Bluetooth: hci7: command tx timeout [ 216.208264][T11479] netlink: 'syz.6.1429': attribute type 1 has an invalid length. [ 216.243813][T11327] veth0_macvtap: entered promiscuous mode [ 216.274834][T11327] veth1_macvtap: entered promiscuous mode [ 216.332467][T11481] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1430'. [ 216.347335][T11327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.355919][T11481] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1430'. [ 216.384320][T11327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.419286][ T8529] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.442807][ T8529] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.455326][T11481] rdma_rxe: rxe_newlink: failed to add lo [ 216.482717][ T8529] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.496668][ T8529] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.575829][T11481] ntd0: left promiscuous mode [ 216.594781][T11481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.608645][T11481] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.628587][T11481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.713109][ T9745] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 216.744021][ T9745] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 216.756336][ T9745] bond0: now running without any active interface! [ 216.814343][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 216.873370][ T9745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.886872][ T9745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.911084][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 216.942475][ T9745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.965020][ T9745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.339116][T11499] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1436'. [ 217.361043][ T8529] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 217.794995][T11516] "syz.1.1437" (11516) uses obsolete ecb(arc4) skcipher [ 218.140042][T11532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1441'. [ 218.262117][ T51] Bluetooth: hci7: command tx timeout [ 218.301816][T11539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1443'. [ 218.422274][ T8528] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 218.448863][ T8528] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 218.756927][T11552] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1449'. [ 219.093095][T11560] netlink: 'syz.6.1452': attribute type 1 has an invalid length. [ 219.141470][ T5862] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 219.190203][T11559] netlink: 830 bytes leftover after parsing attributes in process `syz.7.1450'. [ 219.206123][T11562] 8021q: adding VLAN 0 to HW filter on device bond3 [ 219.636905][T11560] bond3 (unregistering): Released all slaves [ 219.892362][T11578] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1458'. [ 220.026684][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1459'. [ 220.038437][T11582] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1459'. [ 220.161580][T11588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1462'. [ 220.194120][T11592] netlink: 'syz.1.1461': attribute type 11 has an invalid length. [ 220.256727][T11595] netlink: zone id is out of range [ 220.275629][T11595] netlink: zone id is out of range [ 220.290764][T11595] netlink: zone id is out of range [ 220.301699][T11595] netlink: zone id is out of range [ 220.313027][T11595] netlink: zone id is out of range [ 220.318655][T11595] netlink: zone id is out of range [ 220.327594][T11595] netlink: zone id is out of range [ 220.334968][T11595] netlink: zone id is out of range [ 220.341511][ T51] Bluetooth: hci7: command tx timeout [ 220.355843][T11595] netlink: zone id is out of range [ 220.735466][T11620] tipc: New replicast peer: 255.255.255.255 [ 220.764871][T11620] tipc: Enabled bearer , priority 10 [ 220.819343][T11630] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1472'. [ 220.904140][T11632] netlink: 'syz.6.1473': attribute type 3 has an invalid length. [ 220.950553][T11637] netlink: 'syz.0.1475': attribute type 1 has an invalid length. [ 221.066517][T11644] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1475'. [ 221.076232][T11640] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 221.091416][T11640] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 221.101217][T11637] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1475'. [ 221.728277][T11677] tipc: Started in network mode [ 221.734134][T11677] tipc: Node identity 16be840e6e5, cluster identity 4711 [ 221.746488][T11677] tipc: Enabled bearer , priority 0 [ 221.782621][T11677] syzkaller0: entered promiscuous mode [ 221.795107][T11677] syzkaller0: entered allmulticast mode [ 221.842925][T11677] tipc: Resetting bearer [ 221.846124][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1489'. [ 221.876658][T11676] tipc: Resetting bearer [ 221.904301][T11676] tipc: Disabling bearer [ 222.004055][T11690] netlink: 'syz.1.1491': attribute type 1 has an invalid length. [ 222.014627][T11690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1491'. [ 222.402980][T11713] nbd: socks must be embedded in a SOCK_ITEM attr [ 222.411774][T11713] block nbd3: shutting down sockets [ 222.500630][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 222.684610][T11735] net_ratelimit: 15 callbacks suppressed [ 222.684627][T11735] openvswitch: netlink: Flow key attr not present in new flow. [ 223.348596][T11763] netlink: 'syz.1.1515': attribute type 20 has an invalid length. [ 223.666058][ T9745] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 224.100147][T11797] netlink: 'syz.7.1524': attribute type 13 has an invalid length. [ 224.112991][T11797] netlink: 'syz.7.1524': attribute type 17 has an invalid length. [ 224.117467][T11798] xfrm0: entered promiscuous mode [ 224.128285][T11798] xfrm0: entered allmulticast mode [ 224.227328][T11797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 224.299531][T11806] __nla_validate_parse: 8 callbacks suppressed [ 224.299544][T11806] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1526'. [ 224.525052][T11813] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1528'. [ 224.544228][T11814] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1527'. [ 224.583563][T11816] netlink: 830 bytes leftover after parsing attributes in process `syz.6.1530'. [ 224.650619][T11819] netlink: 'syz.1.1529': attribute type 3 has an invalid length. [ 224.669454][T11819] netlink: 662 bytes leftover after parsing attributes in process `syz.1.1529'. [ 224.697638][T11819] siw: device registration error -23 [ 224.779342][T11819] netlink: 'syz.1.1529': attribute type 4 has an invalid length. [ 224.782631][T11828] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1533'. [ 224.831625][T11831] sctp: [Deprecated]: syz.0.1534 (pid 11831) Use of int in max_burst socket option deprecated. [ 224.831625][T11831] Use struct sctp_assoc_value instead [ 225.092550][T11839] tipc: Resetting bearer [ 225.118571][ T8527] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.129196][T11843] netlink: 'syz.1.1537': attribute type 9 has an invalid length. [ 225.149714][ T8527] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.172967][ T8527] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.183590][ T8527] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.215579][T11849] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1540'. [ 225.233027][T11849] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1540'. [ 225.244558][T11849] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1540'. [ 225.357790][T11857] Bluetooth: MGMT ver 1.23 [ 225.361878][T11855] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1543'. [ 225.628714][T11873] netlink: 'syz.1.1549': attribute type 9 has an invalid length. [ 225.832251][T11880] xfrm1: entered allmulticast mode [ 225.857394][T11880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.886522][T11880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.068172][T11889] atomic_op ffff88807d68e198 conn xmit_atomic 0000000000000000 [ 228.711737][T11981] openvswitch: netlink: Tunnel attr 14 has unexpected len 8 expected 0 [ 229.349948][T11996] __nla_validate_parse: 5 callbacks suppressed [ 229.349966][T11996] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1583'. [ 229.368546][T11996] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1583'. [ 229.442946][ T5875] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 229.453405][T12002] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1585'. [ 229.466324][ T5875] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 229.475174][ T5875] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 229.488926][T12002] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1585'. [ 229.500604][ T5875] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 229.512838][ T5875] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 229.628951][T12008] netlink: 'syz.0.1588': attribute type 1 has an invalid length. [ 229.680880][T12008] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1588'. [ 229.993864][T12021] syz_tun: entered allmulticast mode [ 230.029937][T12021] dvmrp8: entered allmulticast mode [ 230.058031][T12020] IPVS: Scheduler module ip_vs_ not found [ 230.147904][T12032] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1589'. [ 230.185959][T12032] netlink: 'syz.7.1589': attribute type 23 has an invalid length. [ 230.264430][ T9745] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 230.329974][T12003] chnl_net:caif_netlink_parms(): no params data found [ 230.562206][T12047] unsupported nlmsg_type 40 [ 230.575097][T12047] netlink: 'syz.0.1594': attribute type 1 has an invalid length. [ 230.658008][T12003] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.674886][T12003] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.684509][T12003] bridge_slave_0: entered allmulticast mode [ 230.692811][T12003] bridge_slave_0: entered promiscuous mode [ 230.701990][T12018] syz_tun: left allmulticast mode [ 230.707911][T12018] dvmrp8: left allmulticast mode [ 230.747902][T12003] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.757234][T12003] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.767432][T12003] bridge_slave_1: entered allmulticast mode [ 230.775819][T12003] bridge_slave_1: entered promiscuous mode [ 230.837402][T12003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.874468][T12003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.900567][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 230.959414][T12003] team0: Port device team_slave_0 added [ 230.968254][T12003] team0: Port device team_slave_1 added [ 231.014667][T12003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.022879][T12003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.051370][T12003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.081712][T12003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.088995][T12003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.116152][T12003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.322554][T12003] hsr_slave_0: entered promiscuous mode [ 231.330042][T12003] hsr_slave_1: entered promiscuous mode [ 231.338715][T12003] debugfs: 'hsr0' already exists in 'hsr' [ 231.345984][T12003] Cannot create hsr debugfs directory [ 231.474931][T12075] lo: entered promiscuous mode [ 231.502436][T12075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.542309][ T51] Bluetooth: hci8: command tx timeout [ 231.717688][T12088] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1607'. [ 231.878378][T12092] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1609'. [ 231.881746][T12003] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 231.910014][T12003] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 231.925014][T12003] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 231.957328][T12003] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 231.967283][T12098] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1611'. [ 232.085314][T12108] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1612'. [ 232.195491][T12003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.250754][T12003] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.278514][ T8527] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.285931][ T8527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.309458][ T9746] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.316844][ T9746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.346190][T12116] netlink: 'syz.7.1614': attribute type 21 has an invalid length. [ 232.639907][T12125] nbd4: detected capacity change from 0 to 18431 [ 232.686093][ T51] block nbd4: Receive control failed (result -32) [ 233.036864][T12003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.195225][T12153] netlink: 'syz.7.1625': attribute type 83 has an invalid length. [ 233.423504][T12170] netlink: 'syz.1.1629': attribute type 4 has an invalid length. [ 233.434904][T12171] netlink: 'syz.1.1629': attribute type 4 has an invalid length. [ 233.599723][T12181] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 233.622848][ T51] Bluetooth: hci8: command tx timeout [ 233.857190][T12003] veth0_vlan: entered promiscuous mode [ 233.905295][T12003] veth1_vlan: entered promiscuous mode [ 233.959444][T12196] team1: entered promiscuous mode [ 233.971234][T12196] team1: entered allmulticast mode [ 233.978739][T12196] 8021q: adding VLAN 0 to HW filter on device team1 [ 234.071800][T12003] veth0_macvtap: entered promiscuous mode [ 234.083446][T12003] veth1_macvtap: entered promiscuous mode [ 234.120202][T12003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.160024][T12003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.186967][T12212] netlink: 'syz.0.1639': attribute type 1 has an invalid length. [ 234.203155][ T8530] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.224292][ T8530] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.231352][T12212] sctp: [Deprecated]: syz.0.1639 (pid 12212) Use of int in max_burst socket option deprecated. [ 234.231352][T12212] Use struct sctp_assoc_value instead [ 234.268544][ T8530] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.283681][ T8530] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.403393][T12220] netlink: 'syz.7.1643': attribute type 39 has an invalid length. [ 234.439908][T12217] IPVS: rr: FWM 3 0x00000003 - no destination available [ 234.449844][ T9] IPVS: starting estimator thread 0... [ 234.514739][T12223] bridge_slave_0: left allmulticast mode [ 234.525855][T12223] bridge_slave_0: left promiscuous mode [ 234.533865][T12223] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.542409][T12226] IPVS: using max 36 ests per chain, 86400 per kthread [ 234.550090][ T5963] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 234.565358][T12223] bridge_slave_1: left allmulticast mode [ 234.574606][T12223] bridge_slave_1: left promiscuous mode [ 234.586821][T12232] netlink: 'syz.1.1644': attribute type 10 has an invalid length. [ 234.587164][T12223] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.609515][T12223] bond0: (slave bond_slave_0): Releasing backup interface [ 234.621924][T12223] bond0: (slave bond_slave_1): Releasing backup interface [ 234.632968][T12223] team0: Port device team_slave_0 removed [ 234.641344][ T5963] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 234.657036][T12223] team0: Port device team_slave_1 removed [ 234.665709][T12223] bond1: (slave gretap1): Releasing active interface [ 234.685950][ T9745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.700121][ T9745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.732350][T12232] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 234.833212][ T9745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.849807][ T9745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.985863][T12247] netlink: 'syz.0.1650': attribute type 2 has an invalid length. [ 235.165121][T12256] sctp: [Deprecated]: syz.8.1577 (pid 12256) Use of int in max_burst socket option deprecated. [ 235.165121][T12256] Use struct sctp_assoc_value instead [ 235.492993][T12277] __nla_validate_parse: 5 callbacks suppressed [ 235.493013][T12277] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1658'. [ 235.700995][ T51] Bluetooth: hci8: command tx timeout [ 235.708546][T12290] netlink: 'syz.0.1663': attribute type 1 has an invalid length. [ 235.772756][T12300] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1663'. [ 235.864678][T12297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1664'. [ 235.935325][T12307] tipc: Enabling of bearer rejected, failed to enable media [ 235.989399][T12307] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1668'. [ 236.636384][T12332] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1673'. [ 236.722561][T12345] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 236.735749][T12345] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 236.763932][T12345] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 236.783462][T12345] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 236.835961][T12345] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 236.855616][T12345] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 236.945181][T12345] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 236.986463][T12345] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 237.030153][T12345] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 237.078407][T12345] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 237.137859][T12360] netlink: 'syz.1.1681': attribute type 5 has an invalid length. [ 237.262491][T12345] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 237.274100][T12345] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 237.541320][T12372] netlink: 'syz.6.1684': attribute type 1 has an invalid length. [ 237.596443][T12345] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 237.611060][T12345] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 237.633793][T12375] tipc: Enabled bearer , priority 0 [ 237.731624][T12345] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 237.738605][T12375] syzkaller0: entered promiscuous mode [ 237.739602][T12345] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 237.760993][T12375] syzkaller0: entered allmulticast mode [ 237.782143][ T51] Bluetooth: hci8: command tx timeout [ 238.223588][T12372] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.231556][T12372] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.645680][T12396] tipc: Node number set to 3975065125 [ 238.679654][T12372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.708513][T12372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.057790][T12372] bond1: left promiscuous mode [ 239.076607][T12372] bond2: left promiscuous mode [ 239.082777][T12372] geneve2: left promiscuous mode [ 239.299401][T12345] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 239.320599][ T9746] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.341023][T12345] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 239.356720][ T9746] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.368878][ T9746] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.378479][ T9746] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.399857][T12381] tipc: Resetting bearer [ 239.423264][T12412] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1691'. [ 239.448820][T12381] tipc: Disabling bearer [ 239.557615][T12424] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1692'. [ 239.759699][T12436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1696'. [ 240.315722][T12455] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1701'. [ 240.382363][T12459] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1700'. [ 240.586960][T12467] lo: left promiscuous mode [ 240.683220][T12472] netlink: 'syz.0.1704': attribute type 7 has an invalid length. [ 240.702538][T12472] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1704'. [ 240.794026][T12474] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1704'. [ 241.071937][T12467] bridge4: left promiscuous mode [ 241.079100][T12467] bridge4: left allmulticast mode [ 241.087559][T12467] xfrm1: left allmulticast mode [ 241.121358][T12472] gtp0: entered promiscuous mode [ 241.142319][T12472] gtp0: entered allmulticast mode [ 241.308442][T12492] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1709'. [ 241.310812][T12480] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.553200][T12487] tipc: Enabling of bearer rejected, failed to enable media [ 241.655139][T12480] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.716905][T12506] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1712'. [ 241.801538][T12484] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1708'. [ 241.825124][T12480] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.077455][T12480] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.127643][T12515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.137807][T12515] batadv_slave_0: entered promiscuous mode [ 242.177681][T12515] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1714'. [ 242.499182][T12527] syzkaller0: entered promiscuous mode [ 242.508074][T12527] syzkaller0: entered allmulticast mode [ 242.521860][T12527] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 242.529290][ T8528] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.557555][ T8527] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.621735][ T8529] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.644850][ T8530] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.983737][T12545] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1721'. [ 242.993492][T12545] nbd: must specify at least one socket [ 243.114509][T12556] syzkaller1: entered promiscuous mode [ 243.121817][T12556] syzkaller1: entered allmulticast mode [ 243.312804][T12566] netlink: 'syz.1.1727': attribute type 10 has an invalid length. [ 243.329002][T12566] team0: Device ipvlan1 failed to register rx_handler [ 243.424737][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1728'. [ 244.644583][T12585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1733'. [ 244.654313][T12585] netlink: 'syz.1.1733': attribute type 5 has an invalid length. [ 244.666257][T12585] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1733'. [ 244.695654][T12585] geneve2: entered promiscuous mode [ 244.701490][T12585] geneve2: entered allmulticast mode [ 244.749323][ T8530] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 244.767330][ T8530] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 244.793911][ T8530] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 244.810674][ T8530] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 245.233006][T12589] vlan2: entered allmulticast mode [ 245.238203][T12589] bond3: entered allmulticast mode [ 246.057410][T12621] __nla_validate_parse: 37 callbacks suppressed [ 246.057423][T12621] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1744'. [ 246.233248][T12627] netlink: 'syz.6.1745': attribute type 15 has an invalid length. [ 246.384184][T12633] netlink: 'syz.8.1747': attribute type 8 has an invalid length. [ 246.402177][T12633] openvswitch: netlink: VXLAN extension 13825 out of range max 1 [ 246.424805][T12633] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 246.478469][T12640] netlink: 'syz.6.1746': attribute type 21 has an invalid length. [ 246.493391][T12638] tipc: Enabled bearer , priority 0 [ 246.504287][T12638] syzkaller0: entered promiscuous mode [ 246.509843][T12638] syzkaller0: entered allmulticast mode [ 246.553014][T12638] tipc: Resetting bearer [ 246.627742][T12637] tipc: Resetting bearer [ 246.654342][T12637] tipc: Disabling bearer [ 246.836634][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1753'. [ 247.291603][T12667] netlink: 'syz.6.1758': attribute type 9 has an invalid length. [ 247.905900][T12676] pimreg: entered allmulticast mode [ 247.912903][T12676] pimreg: left allmulticast mode [ 247.961535][T12678] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1763'. [ 247.982577][T12678] tipc: Enabled bearer , priority 0 [ 247.994472][T12678] syzkaller0: entered promiscuous mode [ 248.023104][T12678] syzkaller0: entered allmulticast mode [ 248.064989][T12677] tipc: Resetting bearer [ 248.123279][T12677] tipc: Disabling bearer [ 248.337485][T12686] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.1766'. [ 248.379493][T12691] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 248.541476][T12699] tipc: Enabled bearer , priority 10 [ 248.594643][T12700] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1772'. [ 248.701140][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1773'. [ 248.748638][T12706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1774'. [ 248.759794][T12706] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1774'. [ 248.997029][T12722] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 1, id = 0 [ 249.363100][T12741] netlink: 'syz.1.1782': attribute type 24 has an invalid length. [ 249.372318][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1782'. [ 250.682347][T12797] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1793'. [ 250.776121][ T8529] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.805973][ T8529] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.846122][ T8529] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.891381][ T8529] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.020060][T12814] vxcan0: entered allmulticast mode [ 251.162779][T12825] netlink: 'syz.8.1800': attribute type 11 has an invalid length. [ 251.181189][T12825] __nla_validate_parse: 4 callbacks suppressed [ 251.181207][T12825] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1800'. [ 251.356707][T12834] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1804'. [ 251.367717][T12832] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1803'. [ 251.383061][T12830] pim6reg1: entered promiscuous mode [ 251.388503][T12830] pim6reg1: entered allmulticast mode [ 251.407249][T12830] netlink: 'syz.1.1802': attribute type 27 has an invalid length. [ 251.443622][T12832] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.455215][T12832] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.476399][T12839] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1802'. [ 251.495630][T12839] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1802'. [ 251.529321][T12830] geneve2: left promiscuous mode [ 251.544294][T12830] geneve2: left allmulticast mode [ 251.575001][T12830] pim6reg1: left promiscuous mode [ 251.589823][T12830] pim6reg1: left allmulticast mode [ 251.602861][T12842] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1806'. [ 251.687301][ T8530] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 251.704328][T12832] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.714730][T12832] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.733790][ T8530] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 251.749373][ T8530] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 251.809261][ T8530] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 251.825760][T12832] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.887216][T12832] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.935237][T12856] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1810'. [ 251.996102][T12832] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.037762][T12832] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.246519][ T8530] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.264629][ T8530] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.268589][T12868] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1814'. [ 252.304329][ T8530] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.323368][ T8530] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.341386][ T8530] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.362175][ T8530] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.446963][ T8530] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.457035][ T8530] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.701574][T12394] IPVS: starting estimator thread 0... [ 252.707889][T12887] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 252.821053][T12892] IPVS: using max 28 ests per chain, 67200 per kthread [ 252.922705][T12883] block nbd5: server does not support multiple connections per device. [ 253.001842][T12883] block nbd5: shutting down sockets [ 253.316714][T12907] netlink: 'syz.7.1824': attribute type 13 has an invalid length. [ 253.442409][T12911] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 253.474330][T12913] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1827'. [ 253.864607][T12931] netlink: 'syz.6.1832': attribute type 1 has an invalid length. [ 253.877033][T12931] netlink: 'syz.6.1832': attribute type 1 has an invalid length. [ 253.949901][T12936] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1835'. [ 255.028090][ T9744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.040571][ T9744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.224896][ T5875] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 257.236043][ T5875] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 257.246750][ T5875] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 257.257825][ T5875] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 257.301606][ T5875] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 258.083565][T13020] chnl_net:caif_netlink_parms(): no params data found [ 258.230151][T13056] __nla_validate_parse: 2 callbacks suppressed [ 258.230169][T13056] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1865'. [ 258.257434][T13056] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1865'. [ 258.325865][T13020] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.344540][T13020] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.361159][T13020] bridge_slave_0: entered allmulticast mode [ 258.392634][T13020] bridge_slave_0: entered promiscuous mode [ 258.431609][T13020] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.459593][T13020] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.488696][T13020] bridge_slave_1: entered allmulticast mode [ 258.502991][T13020] bridge_slave_1: entered promiscuous mode [ 258.666325][T13020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.714416][T13020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.842648][T13020] team0: Port device team_slave_0 added [ 258.920903][T13020] team0: Port device team_slave_1 added [ 258.998171][T13071] team0: No ports can be present during mode change [ 259.108830][T13020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.124788][T13020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.154010][T13020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.168846][T13020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.177353][T13020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.206440][T13020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.381139][ T5875] Bluetooth: hci9: command tx timeout [ 259.577780][T13020] hsr_slave_0: entered promiscuous mode [ 259.596155][T13020] hsr_slave_1: entered promiscuous mode [ 259.603702][T13020] debugfs: 'hsr0' already exists in 'hsr' [ 259.609556][T13020] Cannot create hsr debugfs directory [ 260.145743][T13020] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 260.235822][T13020] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 260.291026][T13020] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 260.318508][T13020] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 260.374675][T13114] ipvlan2: entered promiscuous mode [ 260.787239][T13020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.889260][T13020] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.956588][ T8527] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.964086][ T8527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.029917][ T8530] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.037309][ T8530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.279109][T13135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1877'. [ 261.460876][ T5875] Bluetooth: hci9: command tx timeout [ 261.703638][T13020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.255617][T13020] veth0_vlan: entered promiscuous mode [ 262.285459][T13020] veth1_vlan: entered promiscuous mode [ 262.335871][T13020] veth0_macvtap: entered promiscuous mode [ 262.365709][T13020] veth1_macvtap: entered promiscuous mode [ 262.418407][T13020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.462560][T13020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.495242][ T8528] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.519797][ T8528] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.588545][ T8528] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.638335][ T8528] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.750797][ T9746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.769043][ T9746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.852795][ T8528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.878056][ T8528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.194806][T13173] C: renamed from team_slave_0 [ 263.214642][T13173] netlink: 'syz.1.1885': attribute type 1 has an invalid length. [ 263.234817][T13173] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1885'. [ 263.261120][T13173] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 263.309105][T13175] syz_tun: entered allmulticast mode [ 263.344658][T13171] dvmrp8: entered allmulticast mode [ 263.542659][ T5875] Bluetooth: hci9: command tx timeout [ 263.572670][T13178] sctp: [Deprecated]: syz.1.1886 (pid 13178) Use of int in max_burst socket option. [ 263.572670][T13178] Use struct sctp_assoc_value instead [ 263.736445][T13175] syz_tun: left allmulticast mode [ 263.742717][T13175] dvmrp8: left allmulticast mode [ 265.444014][T13209] macvlan2: entered promiscuous mode [ 265.449360][T13209] vlan0: entered promiscuous mode [ 265.482642][T13207] block nbd5: server does not support multiple connections per device. [ 265.492083][T13207] block nbd5: shutting down sockets [ 265.621387][ T5875] Bluetooth: hci9: command tx timeout [ 265.916737][T13225] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1897'. [ 265.996996][T13228] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1898'. [ 266.611545][T13246] netlink: 'syz.9.1902': attribute type 23 has an invalid length. [ 266.665747][T13246] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1902'. [ 267.098565][T13257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1906'. [ 267.345988][T13270] netlink: 'syz.1.1911': attribute type 1 has an invalid length. [ 267.383779][T13270] netlink: 'syz.1.1911': attribute type 1 has an invalid length. [ 267.402482][T13275] FAULT_INJECTION: forcing a failure. [ 267.402482][T13275] name failslab, interval 1, probability 0, space 0, times 0 [ 267.416353][T13275] CPU: 0 UID: 0 PID: 13275 Comm: syz.9.1913 Not tainted syzkaller #0 PREEMPT(full) [ 267.416376][T13275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 267.416400][T13275] Call Trace: [ 267.416408][T13275] [ 267.416416][T13275] dump_stack_lvl+0x189/0x250 [ 267.416442][T13275] ? __pfx____ratelimit+0x10/0x10 [ 267.416461][T13275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.416479][T13275] ? __pfx__printk+0x10/0x10 [ 267.416504][T13275] ? __pfx___might_resched+0x10/0x10 [ 267.416521][T13275] ? fs_reclaim_acquire+0x7d/0x100 [ 267.416541][T13275] should_fail_ex+0x414/0x560 [ 267.416570][T13275] should_failslab+0xa8/0x100 [ 267.416594][T13275] __kmalloc_noprof+0xcb/0x4f0 [ 267.416614][T13275] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 267.416643][T13275] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 267.416675][T13275] genl_family_rcv_msg_doit+0xb8/0x300 [ 267.416705][T13275] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 267.416733][T13275] ? apparmor_capable+0x137/0x1b0 [ 267.416750][T13275] ? bpf_lsm_capable+0x9/0x20 [ 267.416766][T13275] ? security_capable+0x7e/0x2e0 [ 267.416790][T13275] genl_rcv_msg+0x60e/0x790 [ 267.416812][T13275] ? __pfx_genl_rcv_msg+0x10/0x10 [ 267.416828][T13275] ? __pfx_smc_nl_flush_ueid+0x10/0x10 [ 267.416847][T13275] ? __asan_memcpy+0x40/0x70 [ 267.416864][T13275] ? __pfx_ref_tracker_free+0x10/0x10 [ 267.416889][T13275] netlink_rcv_skb+0x208/0x470 [ 267.416906][T13275] ? __lock_acquire+0xab9/0xd20 [ 267.416928][T13275] ? __pfx_genl_rcv_msg+0x10/0x10 [ 267.416952][T13275] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 267.416999][T13275] ? down_read+0x1ad/0x2e0 [ 267.417019][T13275] genl_rcv+0x28/0x40 [ 267.417039][T13275] netlink_unicast+0x82f/0x9e0 [ 267.417064][T13275] ? __pfx_netlink_unicast+0x10/0x10 [ 267.417081][T13275] ? netlink_sendmsg+0x642/0xb30 [ 267.417097][T13275] ? skb_put+0x11b/0x210 [ 267.417121][T13275] netlink_sendmsg+0x805/0xb30 [ 267.417146][T13275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.417170][T13275] ? aa_sock_msg_perm+0xf1/0x1d0 [ 267.417188][T13275] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 267.417204][T13275] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.417222][T13275] __sock_sendmsg+0x21c/0x270 [ 267.417242][T13275] ____sys_sendmsg+0x505/0x830 [ 267.417266][T13275] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.417295][T13275] ? import_iovec+0x74/0xa0 [ 267.417319][T13275] ___sys_sendmsg+0x21f/0x2a0 [ 267.417339][T13275] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.417393][T13275] ? __fget_files+0x2a/0x420 [ 267.417409][T13275] ? __fget_files+0x3a0/0x420 [ 267.417437][T13275] __x64_sys_sendmsg+0x19b/0x260 [ 267.417458][T13275] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 267.417483][T13275] ? __pfx_ksys_write+0x10/0x10 [ 267.417499][T13275] ? rcu_is_watching+0x15/0xb0 [ 267.417518][T13275] ? do_syscall_64+0xbe/0x3b0 [ 267.417541][T13275] do_syscall_64+0xfa/0x3b0 [ 267.417557][T13275] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.417573][T13275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.417586][T13275] ? clear_bhb_loop+0x60/0xb0 [ 267.417605][T13275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.417618][T13275] RIP: 0033:0x7f1b6658eec9 [ 267.417636][T13275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.417650][T13275] RSP: 002b:00007f1b67420038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.417668][T13275] RAX: ffffffffffffffda RBX: 00007f1b667e5fa0 RCX: 00007f1b6658eec9 [ 267.417680][T13275] RDX: 0000000000040010 RSI: 0000200000000000 RDI: 0000000000000003 [ 267.417691][T13275] RBP: 00007f1b67420090 R08: 0000000000000000 R09: 0000000000000000 [ 267.417702][T13275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.417712][T13275] R13: 00007f1b667e6038 R14: 00007f1b667e5fa0 R15: 00007ffdbb9d3b58 [ 267.417738][T13275] [ 268.485499][T13299] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 268.627945][T13308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1922'. [ 268.708526][T13314] netlink: 1041 bytes leftover after parsing attributes in process `syz.8.1923'. [ 268.837637][T13318] siw: device registration error -23 [ 269.232829][T13335] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1929'. [ 269.497614][T13344] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1931'. [ 269.982428][T13363] netlink: 'syz.8.1938': attribute type 1 has an invalid length. [ 270.011631][T13363] netlink: 'syz.8.1938': attribute type 2 has an invalid length. [ 270.041651][T13363] netlink: 'syz.8.1938': attribute type 3 has an invalid length. [ 270.050881][T13363] netlink: 208 bytes leftover after parsing attributes in process `syz.8.1938'. [ 270.108427][T13373] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1940'. [ 270.143200][T13373] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1940'. [ 270.156805][T13373] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1940'. [ 270.367064][T13382] ipip0: entered promiscuous mode [ 270.476118][T13384] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1945'. [ 270.718006][T13395] pim6reg1: entered promiscuous mode [ 270.773161][T13395] pim6reg1: entered allmulticast mode [ 270.972109][T13400] netlink: 'syz.8.1947': attribute type 8 has an invalid length. [ 271.002355][T13403] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 271.433779][T13416] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1951'. [ 272.625214][T13458] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 273.284242][ T5919] IPVS: starting estimator thread 0... [ 273.367658][T13495] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 273.398679][T13492] IPVS: using max 27 ests per chain, 64800 per kthread [ 273.409242][T13495] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 273.697366][T13498] tipc: Enabling of bearer rejected, failed to enable media [ 273.973850][T13504] __nla_validate_parse: 5 callbacks suppressed [ 273.973870][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1977'. [ 274.361978][T13513] netlink: 'syz.8.1980': attribute type 2 has an invalid length. [ 274.840031][ T51] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 274.887682][ T51] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 274.937065][ T51] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 274.954619][ T51] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 274.965245][ T51] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 275.205147][T13527] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1983'. [ 275.266245][T13527] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1983'. [ 275.303931][T13530] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1984'. [ 275.808000][T13520] chnl_net:caif_netlink_parms(): no params data found [ 276.090172][T13520] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.109358][T13520] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.130890][T13520] bridge_slave_0: entered allmulticast mode [ 276.139050][T13520] bridge_slave_0: entered promiscuous mode [ 276.157707][T13520] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.176824][T13520] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.190922][T13520] bridge_slave_1: entered allmulticast mode [ 276.209459][T13520] bridge_slave_1: entered promiscuous mode [ 276.398336][T13564] netlink: 'syz.1.1991': attribute type 3 has an invalid length. [ 276.407805][T13564] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1991'. [ 276.799132][T13520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.860199][T13520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.873424][T13570] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1994'. [ 276.909444][T13576] xt_policy: too many policy elements [ 276.999404][T13520] team0: Port device team_slave_0 added [ 277.061104][ T5875] Bluetooth: hci10: command tx timeout [ 277.089783][T13581] netlink: 'syz.1.1997': attribute type 10 has an invalid length. [ 277.113313][T13520] team0: Port device team_slave_1 added [ 277.147285][T13581] ntd0: entered promiscuous mode [ 277.158415][T13581] bond0: (slave ntd0): Enslaving as an active interface with an up link [ 277.209525][T13520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.225437][T13520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.264759][T13520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.280421][T13520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.289620][T13520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.321025][T13520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.452792][T13520] hsr_slave_0: entered promiscuous mode [ 277.463483][T13520] hsr_slave_1: entered promiscuous mode [ 277.473058][T13520] debugfs: 'hsr0' already exists in 'hsr' [ 277.479244][T13520] Cannot create hsr debugfs directory [ 277.868429][T13586] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 278.029515][T13612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2004'. [ 278.039411][T13612] tipc: Enabled bearer , priority 18 [ 278.095797][T13520] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 278.124990][T13520] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 278.148637][T13520] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 278.171872][T13520] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 278.665825][T13520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.696075][T13520] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.716245][ T8527] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.723638][ T8527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.768400][ T8530] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.775717][ T8530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.812693][T13638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2011'. [ 279.126255][T13646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2012'. [ 279.144344][T13648] netlink: 35 bytes leftover after parsing attributes in process `syz.9.2013'. [ 279.154362][ T5875] Bluetooth: hci10: command tx timeout [ 279.328193][T13520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.390786][T13520] veth0_vlan: entered promiscuous mode [ 279.431410][T13520] veth1_vlan: entered promiscuous mode [ 279.484842][T13520] veth0_macvtap: entered promiscuous mode [ 279.497422][T13520] veth1_macvtap: entered promiscuous mode [ 279.524176][T13520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.540067][T13520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.584223][ T9744] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.607610][ T9744] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.628776][ T9744] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.641808][ T9744] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.764768][T13666] netlink: 'syz.9.2018': attribute type 46 has an invalid length. [ 279.833033][ T8530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.844991][ T8530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.917973][ T8530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.929772][ T8530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.233066][T13692] sctp: [Deprecated]: syz.6.2025 (pid 13692) Use of int in max_burst socket option. [ 280.233066][T13692] Use struct sctp_assoc_value instead [ 280.389272][T13697] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2028'. [ 280.536852][T13711] netlink: 'syz.2.2031': attribute type 13 has an invalid length. [ 280.558584][T13711] gretap0: refused to change device tx_queue_len [ 280.566211][T13711] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 280.709238][T13717] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2034'. [ 280.720215][T13717] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 280.797798][T13719] netlink: 'syz.2.2035': attribute type 1 has an invalid length. [ 280.836019][T13719] 8021q: adding VLAN 0 to HW filter on device bond1 [ 280.929505][T13725] ipvlan2: entered promiscuous mode [ 281.082584][T13738] bridge_slave_0: left allmulticast mode [ 281.088521][T13738] bridge_slave_0: left promiscuous mode [ 281.097340][T13738] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.117818][T13738] bridge_slave_1: left allmulticast mode [ 281.127618][T13738] bridge_slave_1: left promiscuous mode [ 281.145323][T13738] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.175449][T13738] bond0: (slave bond_slave_0): Releasing backup interface [ 281.196634][T13738] bond0: (slave bond_slave_1): Releasing backup interface [ 281.221438][ T51] Bluetooth: hci10: command tx timeout [ 281.248918][T13738] team0: Port device team_slave_0 removed [ 281.302942][T12403] page_pool_release_retry() stalled pool shutdown: id 63, 1 inflight 60 sec [ 281.327418][T13738] team0: Port device team_slave_1 removed [ 281.347488][T13738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.355265][T13738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.374657][T13738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.396095][T13738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.414905][T13738] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 282.686985][T13783] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2049'. [ 283.029931][T13801] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2054'. [ 283.251798][T13809] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2056'. [ 283.311416][ T51] Bluetooth: hci10: command 0x0419 tx timeout [ 284.290673][T13817] netlink: 'syz.9.2059': attribute type 4 has an invalid length. [ 284.964550][T13826] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2062'. [ 285.058411][T12394] IPVS: starting estimator thread 0... [ 285.160443][T13832] IPVS: using max 29 ests per chain, 69600 per kthread [ 285.382182][ T5875] Bluetooth: hci10: command 0x0419 tx timeout [ 285.653246][T13847] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2069'. [ 285.695165][T13847] netlink: del zone limit has 4 unknown bytes [ 286.863251][T13881] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2078'. [ 286.879755][T13881] ip6gre1: entered promiscuous mode [ 287.188985][T13899] netlink: 'syz.9.2084': attribute type 4 has an invalid length. [ 287.209824][T13899] netlink: 'syz.9.2084': attribute type 4 has an invalid length. [ 287.223769][T13900] netlink: 240 bytes leftover after parsing attributes in process `syz.6.2083'. [ 287.410528][T13903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2085'. [ 287.521111][T13904] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2085'. [ 287.835929][T13913] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2089'. [ 287.848209][T13913] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2089'. [ 287.950027][T13917] netlink: 211576 bytes leftover after parsing attributes in process `syz.9.2091'. [ 288.017357][T13919] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 288.033832][T13919] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 288.042510][T13921] netlink: 'syz.9.2093': attribute type 10 has an invalid length. [ 288.047184][T13919] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 288.053917][T13921] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2093'. [ 288.093037][T13921] team0: Port device geneve0 added [ 288.357940][T13933] can: request_module (can-proto-0) failed. [ 289.109302][T13956] netlink: 'syz.9.2101': attribute type 1 has an invalid length. [ 289.464491][T13967] nbd5: detected capacity change from 0 to 127 [ 289.586729][ T5875] block nbd5: Receive control failed (result -32) [ 290.327193][T13997] __nla_validate_parse: 6 callbacks suppressed [ 290.327215][T13997] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2108'. [ 290.709195][T14017] tipc: Enabled bearer , priority 0 [ 290.717470][T14017] syzkaller0: entered promiscuous mode [ 290.723885][T14017] syzkaller0: entered allmulticast mode [ 290.746263][T14017] tipc: Resetting bearer [ 290.754543][T14016] tipc: Resetting bearer [ 290.777790][T14016] tipc: Disabling bearer [ 290.925139][T14024] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2116'. [ 290.935306][T14024] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2116'. [ 290.945595][T14024] netlink: 'syz.6.2116': attribute type 5 has an invalid length. [ 290.954165][T14024] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2116'. [ 291.339141][T14032] veth0: entered promiscuous mode [ 291.358882][T14032] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2119'. [ 291.411350][ T51] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 291.422791][ T51] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 291.433571][ T51] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 291.445628][ T51] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 291.456896][ T51] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 291.461523][T14031] netlink: 'syz.6.2119': attribute type 16 has an invalid length. [ 291.486802][T14031] netlink: 'syz.6.2119': attribute type 17 has an invalid length. [ 291.515366][T14031] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 291.581871][T14032] veth0: left promiscuous mode [ 291.624588][T14040] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2121'. [ 291.821717][T14033] chnl_net:caif_netlink_parms(): no params data found [ 291.884318][T14048] team0: Device ipip1 is of different type [ 291.971303][T14033] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.978744][T14033] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.987197][T14033] bridge_slave_0: entered allmulticast mode [ 291.997678][T14033] bridge_slave_0: entered promiscuous mode [ 292.011887][T14033] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.019717][T14033] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.030624][T14033] bridge_slave_1: entered allmulticast mode [ 292.039637][T14033] bridge_slave_1: entered promiscuous mode [ 292.110010][T14033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.126216][T14033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.179602][T14033] team0: Port device team_slave_0 added [ 292.193145][T14033] team0: Port device team_slave_1 added [ 292.219532][T14056] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2124'. [ 292.250025][T14033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.258256][T14033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.286275][T14033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.305541][T14033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.313012][T14033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.339712][T14033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.360133][T14059] netlink: 'syz.6.2125': attribute type 3 has an invalid length. [ 292.368213][T14059] netlink: 666 bytes leftover after parsing attributes in process `syz.6.2125'. [ 292.448673][T14033] hsr_slave_0: entered promiscuous mode [ 292.458601][T14033] hsr_slave_1: entered promiscuous mode [ 292.466714][T14033] debugfs: 'hsr0' already exists in 'hsr' [ 292.473688][T14033] Cannot create hsr debugfs directory [ 292.707625][T14074] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2128'. [ 292.717272][T14075] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2128'. [ 292.750446][T14033] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.866980][T14033] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.976880][T14033] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.052052][T14033] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.102568][T14081] sctp: [Deprecated]: syz.1.2130 (pid 14081) Use of int in max_burst socket option. [ 293.102568][T14081] Use struct sctp_assoc_value instead [ 293.238834][T14033] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 293.249758][T14033] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 293.263909][T14033] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 293.276187][T14033] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 293.372645][T14033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.409066][T14033] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.424630][ T8529] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.431864][ T8529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.450325][ T8529] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.457583][ T8529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.541135][ T51] Bluetooth: hci11: command tx timeout [ 293.725806][T14033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.795989][T14033] veth0_vlan: entered promiscuous mode [ 293.814756][T14033] veth1_vlan: entered promiscuous mode [ 293.869702][T14033] veth0_macvtap: entered promiscuous mode [ 293.884548][T14033] veth1_macvtap: entered promiscuous mode [ 293.915506][T14033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.937632][T14033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.970864][ T8528] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.982639][ T8528] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.001956][ T8528] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.014175][ T8528] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.127784][ T9744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.139909][T14103] netlink: 'syz.6.2134': attribute type 10 has an invalid length. [ 294.153099][ T9744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.193008][T14103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.213379][T14103] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 294.283355][ T9744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.295022][ T9744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.599904][ T30] audit: type=1800 audit(1758648399.332:3): pid=14126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2138" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2516 res=0 errno=0 [ 294.825709][T14134] netlink: zone id is out of range [ 295.031171][T14134] netlink: set zone limit has 4 unknown bytes [ 295.103216][T14141] lo: entered allmulticast mode [ 295.109574][T14141] lo: left allmulticast mode [ 295.117227][T14134] netlink: del zone limit has 4 unknown bytes [ 295.127431][T14141] netlink: 'syz.1.2143': attribute type 3 has an invalid length. [ 295.166591][T14141] tipc: Enabling of bearer rejected, failed to enable media [ 295.187788][T14141] ip6tnl2: entered promiscuous mode [ 295.196044][T14141] ip6tnl2: entered allmulticast mode [ 295.374783][T14151] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.621038][ T51] Bluetooth: hci11: command tx timeout [ 296.365044][T14167] netlink: 'syz.6.2151': attribute type 4 has an invalid length. [ 296.384561][ T5875] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 296.394915][T14167] nbd: must specify a size in bytes for the device [ 296.395179][ T5875] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 296.403087][T14167] netlink: 'syz.6.2151': attribute type 4 has an invalid length. [ 296.417913][ T5875] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 296.429842][ T5875] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 296.442131][ T5875] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 296.685618][T14171] chnl_net:caif_netlink_parms(): no params data found [ 296.767592][T14151] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.845623][T14171] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.853559][T14171] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.862285][T14171] bridge_slave_0: entered allmulticast mode [ 296.872324][T14171] bridge_slave_0: entered promiscuous mode [ 296.883817][T14171] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.891668][T14171] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.899173][T14171] bridge_slave_1: entered allmulticast mode [ 296.909414][T14171] bridge_slave_1: entered promiscuous mode [ 296.950045][T14171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.963400][T14171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.007401][T14171] team0: Port device team_slave_0 added [ 297.017723][T14171] team0: Port device team_slave_1 added [ 297.054233][T14171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.063658][T14171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.092766][T14171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.107316][T14171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.115313][T14171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.143351][T14171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.209018][T14171] hsr_slave_0: entered promiscuous mode [ 297.226539][T14171] hsr_slave_1: entered promiscuous mode [ 297.237205][T14171] debugfs: 'hsr0' already exists in 'hsr' [ 297.244184][T14171] Cannot create hsr debugfs directory [ 297.281399][T14151] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.317003][T14187] netlink: 'syz.6.2155': attribute type 13 has an invalid length. [ 297.376111][T14151] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.661721][ T9744] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.701859][ T5875] Bluetooth: hci11: command tx timeout [ 297.750043][ T9746] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.842583][ T9746] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.902882][ T9746] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.025309][T14191] syzkaller1: entered promiscuous mode [ 298.036158][T14191] syzkaller1: entered allmulticast mode [ 298.172313][T14191] __nla_validate_parse: 6 callbacks suppressed [ 298.172331][T14191] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2157'. [ 298.226145][T14191] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2157'. [ 298.255694][T14193] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2157'. [ 298.295089][T14193] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2157'. [ 298.503628][ T5875] Bluetooth: hci12: command tx timeout [ 299.215271][T14191] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 299.294583][T14191] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 299.745805][T14171] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 299.779364][T14171] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 299.782901][ T5875] Bluetooth: hci11: command tx timeout [ 299.833019][T14171] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 299.929759][T14171] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 299.942164][T14211] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2162'. [ 300.497936][T14220] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 300.594677][ T5875] Bluetooth: hci12: command tx timeout [ 300.627612][T14171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.808790][T14171] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.931386][ T8527] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.938556][ T8527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.045168][ T9746] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.053722][ T9746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.424976][T14171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 301.830031][T14229] sock: sock_set_timeout: `syz.1.2165' (pid 14229) tries to set negative timeout [ 302.214572][T14233] syzkaller1: entered promiscuous mode [ 302.229124][T14233] syzkaller1: entered allmulticast mode [ 302.663193][ T5875] Bluetooth: hci12: command tx timeout [ 302.765852][T14171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.189171][T14244] tipc: Started in network mode [ 303.196610][T14244] tipc: Node identity feae6744142a, cluster identity 4711 [ 303.223653][T14244] tipc: Enabled bearer , priority 0 [ 303.367786][T14246] syzkaller0: entered promiscuous mode [ 303.408434][T14246] syzkaller0: entered allmulticast mode [ 303.688054][T14247] tipc: Resetting bearer [ 303.809059][T14247] tipc: Disabling bearer [ 304.158367][T14171] veth0_vlan: entered promiscuous mode [ 304.237168][T14255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.254517][T14171] veth1_vlan: entered promiscuous mode [ 304.479531][T14171] veth0_macvtap: entered promiscuous mode [ 304.548652][T14171] veth1_macvtap: entered promiscuous mode [ 304.743720][ T5875] Bluetooth: hci12: command tx timeout [ 305.075953][T14171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.136203][T14171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.309614][ T8530] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.331681][ T8530] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.435510][ T8527] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.497595][ T8527] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.607467][T14272] netlink: 'syz.1.2173': attribute type 13 has an invalid length. [ 306.326035][T14271] syz_tun: entered allmulticast mode [ 306.539456][ T51] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 306.578056][ T51] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 306.598340][ T51] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 306.643736][ T51] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 306.659248][T14271] netlink: 'syz.3.2174': attribute type 23 has an invalid length. [ 306.678607][ T51] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 306.855665][ T8528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.868866][ T8528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.267855][T14270] syz_tun: left allmulticast mode [ 307.409795][ T9746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.468789][ T9746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.353825][T14290] netlink: 'syz.4.2149': attribute type 9 has an invalid length. [ 308.394205][T14290] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2149'. [ 308.825648][ T51] Bluetooth: hci13: command tx timeout [ 308.876791][T14281] chnl_net:caif_netlink_parms(): no params data found [ 309.446970][T14302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2178'. [ 309.447639][T14281] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.514996][T14281] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.537795][T14281] bridge_slave_0: entered allmulticast mode [ 309.568149][T14281] bridge_slave_0: entered promiscuous mode [ 309.637035][T14281] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.689552][T14281] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.749326][T14281] bridge_slave_1: entered allmulticast mode [ 309.805374][T14281] bridge_slave_1: entered promiscuous mode [ 309.840169][T14307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2178'. [ 310.248336][T14281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.338730][T14281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.607259][T14281] team0: Port device team_slave_0 added [ 310.682616][T14281] team0: Port device team_slave_1 added [ 310.904862][ T5875] Bluetooth: hci13: command tx timeout [ 311.095795][T14281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.116826][T14281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.141299][T14317] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2181'. [ 311.159973][T14281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.177255][T14281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.203114][T14281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.256503][T14281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.284383][T14319] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2182'. [ 311.650190][T14326] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2184'. [ 311.679916][T14281] hsr_slave_0: entered promiscuous mode [ 311.695921][T14281] hsr_slave_1: entered promiscuous mode [ 311.725529][T14281] debugfs: 'hsr0' already exists in 'hsr' [ 311.739330][T14281] Cannot create hsr debugfs directory [ 312.047682][T14329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2185'. [ 312.565872][T14281] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.886361][T14281] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.983647][ T51] Bluetooth: hci13: command tx timeout [ 313.155946][T14281] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.408854][T14281] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.985342][T14281] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 314.066917][T14281] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 314.139232][T14281] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 314.249488][T14345] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2190'. [ 314.319737][T14281] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 315.062198][ T51] Bluetooth: hci13: command tx timeout [ 315.243764][ T5875] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 315.265141][ T5875] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 315.304681][ T5875] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 315.363941][ T5875] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 315.415432][ T5875] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 315.754474][T14281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.829609][T14363] netlink: 1324 bytes leftover after parsing attributes in process `syz.4.2192'. [ 315.885357][T14281] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.994339][ T8529] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.002752][ T8529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.006257][T14363] openvswitch: netlink: Flow actions attr not present in new flow. [ 316.067823][ T8529] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.076172][ T8529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.538772][T14360] chnl_net:caif_netlink_parms(): no params data found [ 317.554658][ T51] Bluetooth: hci14: command tx timeout [ 317.979873][T14384] netlink: 'syz.1.2195': attribute type 12 has an invalid length. [ 318.138269][T14360] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.168493][T14360] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.218322][T14360] bridge_slave_0: entered allmulticast mode [ 318.271753][T14360] bridge_slave_0: entered promiscuous mode [ 318.414768][T14360] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.468284][T14360] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.496760][T14360] bridge_slave_1: entered allmulticast mode [ 318.556215][T14360] bridge_slave_1: entered promiscuous mode [ 318.818643][T14360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.916735][T14360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.286144][T14281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.329774][T14360] team0: Port device team_slave_0 added [ 319.418458][T14360] team0: Port device team_slave_1 added [ 319.625507][ T51] Bluetooth: hci14: command tx timeout [ 319.647918][T14402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2199'. [ 319.789496][T14360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.834956][T14360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.922983][T14360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.963055][T14360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.970053][T14360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.015129][T14360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.388152][T14360] hsr_slave_0: entered promiscuous mode [ 320.408551][T14360] hsr_slave_1: entered promiscuous mode [ 320.452567][T14360] debugfs: 'hsr0' already exists in 'hsr' [ 320.458447][T14360] Cannot create hsr debugfs directory [ 321.358665][T14418] netlink: 'syz.4.2203': attribute type 1 has an invalid length. [ 321.413550][T14418] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2203'. [ 321.703899][ T51] Bluetooth: hci14: command tx timeout [ 321.835634][T14281] veth0_vlan: entered promiscuous mode [ 321.878696][ T5875] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 321.906845][ T5875] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 321.923058][ T5875] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 321.947770][ T5875] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 321.973265][T14418] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2203'. [ 321.996222][ T5875] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 322.137194][T14418] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2203'. [ 322.177707][T14418] tipc: Started in network mode [ 322.194281][T14418] tipc: Node identity fffffe01, cluster identity 64 [ 322.215389][T14418] tipc: Node number set to 4294966785 [ 322.238325][T14281] veth1_vlan: entered promiscuous mode [ 322.864227][T14428] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 322.926245][T14281] veth0_macvtap: entered promiscuous mode [ 323.124784][T14281] veth1_macvtap: entered promiscuous mode [ 323.435253][T14360] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 323.506237][T14360] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 323.626368][T14360] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 323.692851][T14360] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 323.783713][ T5875] Bluetooth: hci14: command tx timeout [ 323.930141][T14281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.034893][T14433] syzkaller0: entered promiscuous mode [ 324.046585][T14433] syzkaller0: entered allmulticast mode [ 324.105088][ T5875] Bluetooth: hci15: command tx timeout [ 324.237411][T14281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.359329][ T8527] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.579713][ T8527] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.668261][ T8527] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.709391][ T8527] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.736992][T14422] chnl_net:caif_netlink_parms(): no params data found [ 325.263453][T14449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2210'. [ 325.588886][T14422] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.608664][T14422] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.636088][T14422] bridge_slave_0: entered allmulticast mode [ 325.650073][T14422] bridge_slave_0: entered promiscuous mode [ 325.854627][T14422] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.886971][T14422] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.924532][T14422] bridge_slave_1: entered allmulticast mode [ 325.972532][T14422] bridge_slave_1: entered promiscuous mode [ 326.184337][ T5875] Bluetooth: hci15: command tx timeout [ 326.246875][T14422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.456125][T14422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.667946][ T8527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.690136][ T8527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.783720][T14465] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2213'. [ 326.898475][T14422] team0: Port device team_slave_0 added [ 327.003945][ T8527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.019788][ T8527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.085510][T14422] team0: Port device team_slave_1 added [ 327.697593][T14422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.739081][T14422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.833913][T14422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.136976][T14422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.203208][T14422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.254724][T14422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.272361][ T5875] Bluetooth: hci15: command tx timeout [ 328.646905][T14360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.946394][T14360] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.088712][T14422] hsr_slave_0: entered promiscuous mode [ 329.120020][T14422] hsr_slave_1: entered promiscuous mode [ 329.167082][T14422] debugfs: 'hsr0' already exists in 'hsr' [ 329.225539][T14422] Cannot create hsr debugfs directory [ 329.625211][ T9745] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.633168][ T9745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.917431][ T9745] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.926299][ T9745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.159627][T14488] dummy0: entered promiscuous mode [ 330.195881][T14488] vlan2: entered promiscuous mode [ 330.355792][ T5875] Bluetooth: hci15: command tx timeout [ 330.786325][T14500] tipc: Enabling of bearer rejected, failed to enable media [ 331.118735][T14501] nbd: nbd4 already in use [ 332.357753][T14422] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.967888][T14422] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.515362][T14422] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.749570][T14360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.015685][T14422] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.638492][T14544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2231'. [ 334.799363][T14360] veth0_vlan: entered promiscuous mode [ 335.225862][ T31] INFO: task kworker/u8:56:9743 blocked for more than 143 seconds. [ 335.253538][ T31] Not tainted syzkaller #0 [ 335.258619][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 335.296701][ T31] task:kworker/u8:56 state:D stack:23384 pid:9743 tgid:9743 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 335.313868][ T31] Workqueue: netns cleanup_net [ 335.318697][ T31] Call Trace: [ 335.323260][ T31] [ 335.326244][ T31] __schedule+0x1798/0x4cc0 [ 335.333275][ T31] ? __lock_acquire+0xab9/0xd20 [ 335.338176][ T31] ? __lock_acquire+0xab9/0xd20 [ 335.351535][ T31] ? __pfx___schedule+0x10/0x10 [ 335.358943][ T31] ? schedule+0x91/0x360 [ 335.372389][ T31] schedule+0x165/0x360 [ 335.378281][ T31] schedule_preempt_disabled+0x13/0x30 [ 335.433720][ T31] __mutex_lock+0x7e6/0x1350 [ 335.438383][ T31] ? __mutex_lock+0x5bb/0x1350 [ 335.499543][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 335.562098][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 335.567268][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 335.643855][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 335.649989][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 335.716463][ T31] ? _raw_spin_unlock+0x28/0x50 [ 335.737026][ T31] rdma_dev_change_netns+0x39/0x300 [ 335.747893][ T31] rdma_dev_exit_net+0x203/0x340 [ 335.757918][ T31] ? __pfx___might_resched+0x10/0x10 [ 335.766434][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 335.778172][ T31] ? net_generic+0x1e/0x240 [ 335.789291][ T31] ? mutex_is_locked+0x17/0x50 [ 335.798026][ T31] ? rtnl_is_locked+0x15/0x20 [ 335.805535][ T31] ops_undo_list+0x49a/0x990 [ 335.815486][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 335.826007][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 335.834861][ T31] cleanup_net+0x4c5/0x800 [ 335.839327][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 335.846431][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 335.856939][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 335.888436][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 335.896770][ T31] process_scheduled_works+0xae1/0x17b0 [ 335.908284][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 335.915700][ T31] worker_thread+0x8a0/0xda0 [ 335.924270][ T31] kthread+0x70e/0x8a0 [ 335.928495][ T31] ? __pfx_worker_thread+0x10/0x10 [ 335.936092][ T31] ? __pfx_kthread+0x10/0x10 [ 335.949016][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 335.957594][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.965964][ T31] ? __pfx_kthread+0x10/0x10 [ 335.974982][ T31] ret_from_fork+0x439/0x7d0 [ 335.979633][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 335.994581][ T31] ? __switch_to_asm+0x39/0x70 [ 335.999511][ T31] ? __switch_to_asm+0x33/0x70 [ 336.004891][ T31] ? __pfx_kthread+0x10/0x10 [ 336.009611][ T31] ret_from_fork_asm+0x1a/0x30 [ 336.018358][ T31] [ 336.029776][ T31] INFO: task syz.2.1009:9911 blocked for more than 144 seconds. [ 336.050045][ T31] Not tainted syzkaller #0 [ 336.059336][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 336.076962][ T31] task:syz.2.1009 state:D stack:25032 pid:9911 tgid:9910 ppid:5870 task_flags:0x400140 flags:0x00004004 [ 336.104346][ T31] Call Trace: [ 336.107672][ T31] [ 336.125064][ T31] __schedule+0x1798/0x4cc0 [ 336.129633][ T31] ? validate_chain+0x897/0x2140 [ 336.139549][ T31] ? __lock_acquire+0xab9/0xd20 [ 336.168135][ T31] ? __pfx___schedule+0x10/0x10 [ 336.179256][ T31] ? schedule+0x91/0x360 [ 336.194534][ T31] schedule+0x165/0x360 [ 336.201949][ T31] schedule_timeout+0x9a/0x270 [ 336.206781][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 336.225256][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 336.234557][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.239796][ T31] ? wait_for_completion+0x267/0x5d0 [ 336.252043][ T31] wait_for_completion+0x2bf/0x5d0 [ 336.257238][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 336.297320][ T31] ? up_write+0x1c4/0x420 [ 336.316044][ T31] ? remove_client_context+0xc0/0x1e0 [ 336.334717][ T31] disable_device+0x1c6/0x320 [ 336.339450][ T31] ? __pfx_disable_device+0x10/0x10 [ 336.357373][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 336.365291][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 336.374576][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 336.386345][ T31] nldev_dellink+0x2d1/0x320 [ 336.393286][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 336.398425][ T31] ? css_rstat_updated+0x23a/0x4f0 [ 336.404957][ T31] ? apparmor_capable+0x137/0x1b0 [ 336.410111][ T31] ? bpf_lsm_capable+0x9/0x20 [ 336.417223][ T31] ? security_capable+0x7e/0x2e0 [ 336.426225][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 336.441366][ T31] rdma_nl_rcv+0x6ae/0x980 [ 336.445872][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 336.454861][ T31] ? __lock_acquire+0xab9/0xd20 [ 336.459963][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 336.469169][ T31] netlink_unicast+0x82f/0x9e0 [ 336.475980][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 336.482440][ T31] ? netlink_sendmsg+0x642/0xb30 [ 336.487492][ T31] ? skb_put+0x11b/0x210 [ 336.498350][ T31] netlink_sendmsg+0x805/0xb30 [ 336.513629][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.519063][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 336.524523][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 336.529810][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.537479][ T31] __sock_sendmsg+0x21c/0x270 [ 336.546058][ T31] ____sys_sendmsg+0x505/0x830 [ 336.551835][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.557254][ T31] ? import_iovec+0x74/0xa0 [ 336.563218][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 336.567926][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.575705][ T31] ? __fget_files+0x2a/0x420 [ 336.587853][ T31] ? __fget_files+0x3a0/0x420 [ 336.599618][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 336.607406][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.617569][ T31] ? rcu_is_watching+0x15/0xb0 [ 336.625051][ T31] ? do_syscall_64+0xbe/0x3b0 [ 336.629764][ T31] do_syscall_64+0xfa/0x3b0 [ 336.636127][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.641648][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.647720][ T31] ? clear_bhb_loop+0x60/0xb0 [ 336.655545][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.669075][ T31] RIP: 0033:0x7f3f0e18eec9 [ 336.677284][ T31] RSP: 002b:00007f3f0f014038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.686475][ T31] RAX: ffffffffffffffda RBX: 00007f3f0e3e5fa0 RCX: 00007f3f0e18eec9 [ 336.696614][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 336.709408][ T31] RBP: 00007f3f0e211f91 R08: 0000000000000000 R09: 0000000000000000 [ 336.723936][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.735149][ T31] R13: 00007f3f0e3e6038 R14: 00007f3f0e3e5fa0 R15: 00007fffa4a0bfc8 [ 336.747841][ T31] [ 336.756040][ T31] INFO: task syz.3.1124:10328 blocked for more than 144 seconds. [ 336.797119][ T31] Not tainted syzkaller #0 [ 336.878354][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 336.888187][ T31] task:syz.3.1124 state:D stack:24640 pid:10328 tgid:10326 ppid:5860 task_flags:0x400140 flags:0x00004006 [ 336.908564][ T31] Call Trace: [ 336.912739][ T31] [ 336.918541][ T31] __schedule+0x1798/0x4cc0 [ 336.929318][ T31] ? __lock_acquire+0xab9/0xd20 [ 336.935403][ T31] ? __lock_acquire+0xab9/0xd20 [ 336.945673][ T31] ? __pfx___schedule+0x10/0x10 [ 336.951427][ T31] ? schedule+0x91/0x360 [ 336.955698][ T31] schedule+0x165/0x360 [ 336.959884][ T31] schedule_preempt_disabled+0x13/0x30 [ 336.969778][ T31] __mutex_lock+0x7e6/0x1350 [ 336.975591][ T31] ? __mutex_lock+0x5bb/0x1350 [ 336.985980][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 336.997827][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 337.007659][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 337.017160][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 337.028320][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 337.035788][ T31] ? _raw_spin_unlock+0x28/0x50 [ 337.044929][ T31] rdma_dev_change_netns+0x39/0x300 [ 337.055744][ T31] rdma_dev_exit_net+0x203/0x340 [ 337.068335][ T31] ? __pfx___might_resched+0x10/0x10 [ 337.075061][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 337.084835][ T31] ? net_generic+0x1e/0x240 [ 337.095196][ T31] ? mutex_is_locked+0x17/0x50 [ 337.100103][ T31] ? rtnl_is_locked+0x15/0x20 [ 337.117170][ T31] ops_undo_list+0x49a/0x990 [ 337.124740][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 337.129877][ T31] ? ops_init+0x469/0x5c0 [ 337.140050][ T31] setup_net+0x2d3/0x320 [ 337.157540][ T31] ? __pfx_setup_net+0x10/0x10 [ 337.166014][ T31] ? copy_net_ns+0x304/0x4d0 [ 337.178806][ T31] ? down_read_killable+0x1d1/0x350 [ 337.187892][ T31] copy_net_ns+0x31b/0x4d0 [ 337.195881][ T31] create_new_namespaces+0x3f3/0x720 [ 337.204260][ T31] ? security_capable+0x7e/0x2e0 [ 337.209423][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 337.232864][ T31] ksys_unshare+0x4c8/0x8c0 [ 337.237660][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 337.250053][ T31] __x64_sys_unshare+0x38/0x50 [ 337.265815][ T31] do_syscall_64+0xfa/0x3b0 [ 337.271026][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.276344][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.287477][ T31] ? clear_bhb_loop+0x60/0xb0 [ 337.295469][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.304816][ T31] RIP: 0033:0x7f0246f8eec9 [ 337.309367][ T31] RSP: 002b:00007f0247d90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 337.328992][ T31] RAX: ffffffffffffffda RBX: 00007f02471e6090 RCX: 00007f0246f8eec9 [ 337.339918][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 337.354122][ T31] RBP: 00007f0247011f91 R08: 0000000000000000 R09: 0000000000000000 [ 337.367752][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.378066][ T31] R13: 00007f02471e6128 R14: 00007f02471e6090 R15: 00007ffece275688 [ 337.397257][ T31] [ 337.424041][ T31] [ 337.424041][ T31] Showing all locks held in the system: [ 337.502991][ T31] 1 lock held by khungtaskd/31: [ 337.507989][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 337.574625][ T31] 2 locks held by getty/5624: [ 337.579360][ T31] #0: ffff88802fbd60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 337.651780][ T31] #1: ffffc900036d32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 337.694474][ T31] 3 locks held by kworker/1:7/5982: [ 337.699835][ T31] 4 locks held by kworker/u8:56/9743: [ 337.750027][ T31] #0: ffff88801b2fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 337.806901][ T31] #1: ffffc90003db7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 337.867205][ T31] #2: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 337.912632][ T31] #3: ffff888057798700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 337.955182][ T31] 2 locks held by syz.2.1009/9911: [ 337.986543][ T31] #0: ffffffff99e6f958 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 338.023080][ T31] #1: ffff888057798700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 338.069769][ T31] 2 locks held by syz.3.1124/10328: [ 338.093986][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 338.143594][ T31] #1: ffff888057798700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 338.182942][ T31] 2 locks held by syz.4.1251/10822: [ 338.188406][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 338.241796][ T31] #1: ffff888057798700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 338.285999][ T31] 2 locks held by syz.5.1411/11402: [ 338.304046][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 338.316314][ T31] #1: ffff888057798700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 338.335506][ T31] 3 locks held by kworker/1:13/12403: [ 338.351757][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 338.363328][ T31] #1: ffffc900191f7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 338.374832][ T31] #2: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 338.388383][ T31] 2 locks held by syz.0.1711/12503: [ 338.395527][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 338.406017][ T31] #1: ffff888057798700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 338.418473][ T31] 2 locks held by syz.7.1866/13059: [ 338.431257][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 338.446191][ T31] #1: ffff888057798700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 338.457991][ T31] 2 locks held by syz.8.1990/13561: [ 338.467005][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 338.476969][ T31] #1: ffff888057798700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 338.488687][ T31] 2 locks held by syz.2.2040/13739: [ 338.495302][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 338.508353][ T31] #1: ffff888057798700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 338.522410][ T31] 2 locks held by syz.2.2040/13742: [ 338.528702][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 338.538675][ T31] #1: ffff888057798700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 338.557413][ T31] 2 locks held by syz.9.2107/13980: [ 338.564258][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 338.575733][ T31] #1: ffff888057798700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 338.592070][ T31] 2 locks held by syz.6.2159/14199: [ 338.597389][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 338.616448][ T31] #1: ffff888057798700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 338.630129][ T31] 2 locks held by syz.3.2174/14277: [ 338.635828][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 338.652767][ T31] #1: ffff888057798700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 338.668161][ T31] 3 locks held by syz-executor/14360: [ 338.676292][ T31] #0: ffff888093854dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 338.686982][ T31] #1: ffff8880938540b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 338.697025][ T31] #2: ffffffff8f69f1e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 338.709366][ T31] 4 locks held by syz-executor/14422: [ 338.715405][ T31] #0: ffff888056eccdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 338.728089][ T31] #1: ffff888056ecc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 338.739206][ T31] #2: ffffffff8f69f1e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 338.756429][ T31] #3: ffff8880377e2b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 338.772992][ T31] 2 locks held by syz.5.2225/14527: [ 338.778235][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 338.792866][ T31] #1: ffff888057798700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 338.805685][ T31] 1 lock held by syz.1.2231/14539: [ 338.811451][ T31] #0: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 338.826889][ T31] 3 locks held by syz.4.2232/14549: [ 338.835141][ T31] #0: ffff88804d434dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 338.847793][ T31] #1: ffff88804d4340b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 338.859891][ T31] #2: ffffffff8e13fb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 338.880036][ T31] [ 338.889521][ T31] ============================================= [ 338.889521][ T31] [ 338.938153][ T31] NMI backtrace for cpu 1 [ 338.938175][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 338.938194][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 338.938205][ T31] Call Trace: [ 338.938214][ T31] [ 338.938223][ T31] dump_stack_lvl+0x189/0x250 [ 338.938251][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.938271][ T31] ? __pfx__printk+0x10/0x10 [ 338.938305][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 338.938332][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 338.938357][ T31] ? __pfx__printk+0x10/0x10 [ 338.938383][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 338.938409][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 338.938435][ T31] watchdog+0xf93/0xfe0 [ 338.938462][ T31] ? watchdog+0x1de/0xfe0 [ 338.938489][ T31] kthread+0x70e/0x8a0 [ 338.938513][ T31] ? __pfx_watchdog+0x10/0x10 [ 338.938538][ T31] ? __pfx_kthread+0x10/0x10 [ 338.938559][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 338.938583][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.938599][ T31] ? __pfx_kthread+0x10/0x10 [ 338.938619][ T31] ret_from_fork+0x439/0x7d0 [ 338.938640][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 338.938663][ T31] ? __switch_to_asm+0x39/0x70 [ 338.938680][ T31] ? __switch_to_asm+0x33/0x70 [ 338.938698][ T31] ? __pfx_kthread+0x10/0x10 [ 338.938719][ T31] ret_from_fork_asm+0x1a/0x30 [ 338.938755][ T31] [ 338.938761][ T31] Sending NMI from CPU 1 to CPUs 0: [ 339.123048][ C0] NMI backtrace for cpu 0 [ 339.123069][ C0] CPU: 0 UID: 0 PID: 9746 Comm: kworker/u8:59 Not tainted syzkaller #0 PREEMPT(full) [ 339.123107][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 339.123127][ C0] Workqueue: events_unbound toggle_allocation_gate [ 339.123151][ C0] RIP: 0010:__sanitizer_cov_trace_switch+0x97/0x130 [ 339.123172][ C0] Code: 54 53 48 8b 54 24 20 65 4c 8b 04 25 08 d0 a0 92 45 31 c9 eb 08 49 ff c1 4c 39 c8 74 77 4e 8b 54 ce 10 65 44 8b 1d 89 1c e1 10 <41> 81 e3 00 01 ff 00 74 13 41 81 fb 00 01 00 00 75 d9 41 83 b8 3c [ 339.123185][ C0] RSP: 0018:ffffc90003026b08 EFLAGS: 00000012 [ 339.123198][ C0] RAX: 0000000000000020 RBX: ffff88801a486b64 RCX: 0000000000000005 [ 339.123209][ C0] RDX: ffffffff81c38920 RSI: ffffffff8e18f770 RDI: 0000000000000004 [ 339.123220][ C0] RBP: 0000004ef50e4886 R08: ffff88804e96da00 R09: 000000000000001f [ 339.123231][ C0] R10: 000000000000001f R11: 0000000000000005 R12: ffff88801a486010 [ 339.123242][ C0] R13: 0000000000000004 R14: 00000000000ddf64 R15: 0000000000000b54 [ 339.123252][ C0] FS: 0000000000000000(0000) GS:ffff888125c13000(0000) knlGS:0000000000000000 [ 339.123265][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 339.123275][ C0] CR2: 000055fb77c18000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 339.123290][ C0] Call Trace: [ 339.123296][ C0] [ 339.123306][ C0] rb_read_data_buffer+0x110/0x580 [ 339.123329][ C0] check_buffer+0x28a/0x750 [ 339.123350][ C0] __rb_reserve_next+0x592/0xdb0 [ 339.123380][ C0] ring_buffer_lock_reserve+0xbb5/0x1010 [ 339.123397][ C0] ? rb_commit+0x781/0x7e0 [ 339.123420][ C0] trace_event_buffer_lock_reserve+0x1d0/0x6f0 [ 339.123437][ C0] ? tracing_gen_ctx_irq_test+0xc6/0x160 [ 339.123453][ C0] trace_event_buffer_reserve+0x248/0x340 [ 339.123472][ C0] ? __pfx_trace_event_buffer_reserve+0x10/0x10 [ 339.123488][ C0] ? bpf_try_get_buffers+0x91/0x170 [ 339.123509][ C0] trace_event_raw_event_bpf_trace_printk+0x100/0x260 [ 339.123525][ C0] ? __pfx_trace_event_raw_event_bpf_trace_printk+0x10/0x10 [ 339.123549][ C0] ? __asan_memcpy+0x40/0x70 [ 339.123565][ C0] ? bstr_printf+0xa7c/0xb70 [ 339.123587][ C0] trace_bpf_trace_printk+0x170/0x1d0 [ 339.123607][ C0] bpf_trace_printk+0x11e/0x190 [ 339.123621][ C0] ? __lock_acquire+0xab9/0xd20 [ 339.123641][ C0] ? __pfx_bpf_trace_printk+0x10/0x10 [ 339.123656][ C0] ? bpf_trace_run1+0x181/0x4b0 [ 339.123682][ C0] bpf_prog_9e1c00255e17e72e+0x39/0x3f [ 339.123697][ C0] bpf_trace_run1+0x27f/0x4b0 [ 339.123714][ C0] ? __rb_reserve_next+0x7d2/0xdb0 [ 339.123730][ C0] ? bpf_trace_run1+0x181/0x4b0 [ 339.123749][ C0] ? __pfx_bpf_trace_run1+0x10/0x10 [ 339.123768][ C0] ? __bpf_trace_rcu_utilization+0x94/0xf0 [ 339.123787][ C0] __bpf_trace_rcu_utilization+0xa1/0xf0 [ 339.123802][ C0] ? __pfx___bpf_trace_rcu_utilization+0x10/0x10 [ 339.123820][ C0] ? rcu_qs+0xc4/0x170 [ 339.123836][ C0] ? __pfx___bpf_trace_rcu_utilization+0x10/0x10 [ 339.123850][ C0] __traceiter_rcu_utilization+0x77/0xb0 [ 339.123866][ C0] trace_rcu_utilization+0x1ad/0x1d0 [ 339.123889][ C0] rcu_note_context_switch+0xdc1/0x1140 [ 339.123911][ C0] ? trace_buffer_unlock_commit_regs+0x14f/0x550 [ 339.123930][ C0] ? trace_event_buffer_commit+0x264/0x7f0 [ 339.123949][ C0] ? __pfx_rcu_note_context_switch+0x10/0x10 [ 339.123970][ C0] ? rcu_is_watching+0x15/0xb0 [ 339.123986][ C0] __schedule+0x35d/0x4cc0 [ 339.124002][ C0] ? switch_mm_irqs_off+0x5b6/0x7a0 [ 339.124025][ C0] ? irqentry_exit+0x74/0x90 [ 339.124040][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.124058][ C0] ? __pfx___schedule+0x10/0x10 [ 339.124072][ C0] ? smp_call_function_many_cond+0xd4b/0x12d0 [ 339.124090][ C0] ? smp_call_function_many_cond+0xd33/0x12d0 [ 339.124109][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 339.124128][ C0] ? preempt_schedule+0xae/0xc0 [ 339.124143][ C0] preempt_schedule_common+0x83/0xd0 [ 339.124157][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 339.124174][ C0] preempt_schedule+0xae/0xc0 [ 339.124188][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 339.124201][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 339.124219][ C0] ? kmem_cache_alloc_bulk_noprof+0x148/0x790 [ 339.124239][ C0] ? __pfx___text_poke+0x10/0x10 [ 339.124258][ C0] preempt_schedule_thunk+0x16/0x30 [ 339.124280][ C0] ? on_each_cpu_cond_mask+0x75/0x80 [ 339.124296][ C0] on_each_cpu_cond_mask+0x7a/0x80 [ 339.124312][ C0] smp_text_poke_batch_finish+0x5f9/0x1130 [ 339.124331][ C0] ? arch_jump_label_transform_apply+0x17/0x30 [ 339.124354][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 339.124369][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 339.124390][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 339.124416][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 339.124436][ C0] static_key_enable_cpuslocked+0x128/0x250 [ 339.124457][ C0] static_key_enable+0x1a/0x20 [ 339.124475][ C0] toggle_allocation_gate+0xad/0x240 [ 339.124493][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 339.124512][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 339.124531][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 339.124546][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 339.124560][ C0] process_scheduled_works+0xae1/0x17b0 [ 339.124590][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 339.124613][ C0] worker_thread+0x8a0/0xda0 [ 339.124645][ C0] kthread+0x70e/0x8a0 [ 339.124663][ C0] ? __pfx_worker_thread+0x10/0x10 [ 339.124677][ C0] ? __pfx_kthread+0x10/0x10 [ 339.124695][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 339.124714][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.124728][ C0] ? __pfx_kthread+0x10/0x10 [ 339.124746][ C0] ret_from_fork+0x439/0x7d0 [ 339.124762][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 339.124780][ C0] ? __switch_to_asm+0x39/0x70 [ 339.124797][ C0] ? __switch_to_asm+0x33/0x70 [ 339.124816][ C0] ? __pfx_kthread+0x10/0x10 [ 339.124834][ C0] ret_from_fork_asm+0x1a/0x30 [ 339.124859][ C0] [ 339.138749][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 339.138770][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 339.138790][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 339.138802][ T31] Call Trace: [ 339.138810][ T31] [ 339.138819][ T31] dump_stack_lvl+0x99/0x250 [ 339.138844][ T31] ? __asan_memcpy+0x40/0x70 [ 339.138865][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.138883][ T31] ? __pfx__printk+0x10/0x10 [ 339.138918][ T31] vpanic+0x281/0x750 [ 339.138939][ T31] ? __pfx_vpanic+0x10/0x10 [ 339.138958][ T31] ? preempt_schedule+0xae/0xc0 [ 339.138977][ T31] ? preempt_schedule_common+0x83/0xd0 [ 339.139000][ T31] panic+0xb9/0xc0 [ 339.139017][ T31] ? __pfx_panic+0x10/0x10 [ 339.139037][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 339.139066][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 339.139092][ T31] watchdog+0xfd2/0xfe0 [ 339.139120][ T31] ? watchdog+0x1de/0xfe0 [ 339.139147][ T31] kthread+0x70e/0x8a0 [ 339.139170][ T31] ? __pfx_watchdog+0x10/0x10 [ 339.139190][ T31] ? __pfx_kthread+0x10/0x10 [ 339.139212][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 339.139235][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.139251][ T31] ? __pfx_kthread+0x10/0x10 [ 339.139271][ T31] ret_from_fork+0x439/0x7d0 [ 339.139292][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 339.139315][ T31] ? __switch_to_asm+0x39/0x70 [ 339.139333][ T31] ? __switch_to_asm+0x33/0x70 [ 339.139351][ T31] ? __pfx_kthread+0x10/0x10 [ 339.139372][ T31] ret_from_fork_asm+0x1a/0x30 [ 339.139407][ T31] [ 339.873155][ T31] Kernel Offset: disabled [ 339.877644][ T31] Rebooting in 86400 seconds..