last executing test programs: 5.088900867s ago: executing program 4 (id=103): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX=r0], 0x44}, 0x1, 0x0, 0x0, 0x1000000}, 0x20008040) 4.501941972s ago: executing program 3 (id=109): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, &(0x7f0000000040)) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000180)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000600000000000000008500000007000000c5000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000005ac0)={0x0, 0x0, &(0x7f0000005a80)={&(0x7f00000058c0)=ANY=[@ANYBLOB="cc0000001b0001002bbd7000fddbdf2500000000002400000400000000000001ac1414390000000000000000000000004e2200014e2400050200a0a03b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="090000000000000007000000000000000600000000000000020000000000000007000000000000000c00000000000000a604000000000000060000000000000002000000000000000000000000000000f4fffffffffffffff2ffffffffffffff790a0000b26b6e00010101010000000005000000000000000a00100002"], 0xcc}, 0x1, 0x0, 0x0, 0x44040}, 0x20000004) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba000000000033000000000000", @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008000d0001000000080029006edc0000"], 0x38}}, 0x0) 4.371904343s ago: executing program 4 (id=111): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x9, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18001811000000000000000000000000000000002e54169d6988a29d196d88f018e522d728b71f0eff2a4e90014ca4b5cfc5ace11bee00d6d69aa5213a3cbe977ced10302066b32e4d6b5e46ff950bbacb62ad309b43554b04ac7a70bfa640730ea19db78b623c18bbdae2e0b86539014c5320185134eac9f8cf0c6e67c070d1ed6309a360d9f89a0442ee26342956caebfb4cbfe591776a5a1037e44a67ce7aad89e68433fd64fc06cd7afa01a86ce56a", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000000000b7020000435db5538500000085000000b70077f8f5797eec19"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f00003ec000/0x4000)=nil, 0x4000, 0x3000008, 0x30, r2, 0x53054000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x4000000000000000, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x1d, &(0x7f0000000000)=0x4, 0x4) setsockopt$sock_attach_bpf(r7, 0x1, 0x34, &(0x7f00000000c0)=r6, 0x4) close(r7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) sendto$inet6(r8, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) 4.367027613s ago: executing program 0 (id=112): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) (async) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) (async) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x30) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20000000) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r6, &(0x7f0000000340)=""/49, 0x31) (async) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x8044) 4.208599281s ago: executing program 1 (id=113): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x4, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="7b0a00000000000061117c00e0370100ce00000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe45}, 0x94) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000340)={0x0, 0xffffffffffffffff}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000000)=[{r1}, {r5, 0x1000}, {r1, 0xc8382fed29c366d}], 0x3, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) accept4$vsock_stream(r2, &(0x7f0000000880)={0x28, 0x0, 0x2711}, 0x10, 0x80000) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffee) write$tun(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x100) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/76}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) r7 = socket(0x1d, 0x800, 0x1000) ioctl$sock_netrom_SIOCADDRT(r7, 0x6180, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r7) sendmsg$DEVLINK_CMD_TRAP_SET(r7, 0x0, 0x24014141) 3.630993588s ago: executing program 3 (id=115): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000200)}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24008056) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x8400, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0x33, 0x3, 0x0, 0x2, 0x2, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x42000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.466753204s ago: executing program 3 (id=116): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200101}, {{0x0, 0x0, 0x0}, 0x444a}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000005340)=""/4081, 0xff1}, {&(0x7f0000000340)=""/235, 0xeb}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, 0x0}, 0x406}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/134, 0x86}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000000000)=""/127, 0x7f}, {&(0x7f00000006c0)=""/241, 0xf1}], 0x5}, 0x83}, {{0x0, 0x0, 0x0}, 0xa}], 0x8, 0x40010020, 0x0) 3.194268561s ago: executing program 3 (id=117): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) unshare(0x22020400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x16c5, r1, 0x20}, 0x38) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0xfffc, @local}]}, &(0x7f0000000440)=0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r4}]}}}]}, 0x38}}, 0x48010) close(r4) r5 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd}, {0xb, 0xfff1}, {0xb, 0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x4, 0x7, 0xb, 0x1, 0x9, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x18) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2, 0x1}, &(0x7f0000000100)=0x8) 3.144040003s ago: executing program 4 (id=118): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX=r0], 0x44}, 0x1, 0x0, 0x0, 0xffef}, 0x20008040) 3.126510728s ago: executing program 1 (id=119): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000001d711875000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a400)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c80)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x10120, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) recvmmsg(r3, &(0x7f0000007600)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2000, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, 0x0, 0x0) r5 = gettid() r6 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r5, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 2.944478948s ago: executing program 2 (id=120): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 2.799558539s ago: executing program 2 (id=121): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (fail_nth: 1) 2.69177611s ago: executing program 0 (id=122): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2, 0xffffffffffffffff}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000300000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1, @ANYRES16=r3], 0x4c}}, 0x40000) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r6, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8001, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), r7) sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r8, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x40001) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r7, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r9, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 2.690191613s ago: executing program 4 (id=123): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x2c}}, 0x4004) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x2, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000000c0)='5', 0x1, 0x20000000, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000007c0)="87", 0x1, 0x4000, 0x0, 0xfffffffffffffe00) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000800)=ANY=[], 0x9) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000004a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x24}}, 0x0) 2.639791305s ago: executing program 3 (id=124): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvmmsg(r2, &(0x7f0000000f80)=[{{&(0x7f00000006c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000001000)=""/258, 0x102}, {&(0x7f0000000840)=""/95, 0x5f}], 0x2, &(0x7f00000003c0)=""/64, 0x40}, 0x8}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000008c0)=""/27, 0x1b}, {&(0x7f0000000980)=""/106, 0x6a}, {&(0x7f0000000a00)=""/169, 0xa9}, {&(0x7f0000000ac0)=""/218, 0xda}, {&(0x7f0000000bc0)=""/132, 0x84}, {&(0x7f0000000c80)=""/138, 0x8a}, {&(0x7f0000000d40)=""/201, 0xc9}], 0x7, &(0x7f0000000ec0)=""/163, 0xa3}, 0x81}], 0x2, 0x10027, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$netlink(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000007e80)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r4, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x2b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003c80)={0xa, 0x4e24, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000003f00)=[{&(0x7f0000000540)="32607b20f4ebd4e86c60bfc02d671512b75c7eff8a8e4adbfc89e0e29024836c5a6387428db677dab4ea78829a0db8f7fa5abc8a8615c740e99c900b1b696720772d2908992aec54f5b2efdf1cc44fa94c700abe36399c6949e00ce52f6a558aaba68ff6873958a7df59bd6fe08b14cf5f0cceda5ce60c24bc05f3723b452e848fd862a7b8d3b406b4912af4a4170606f75cf78be7c85118b7d85ac2d7255d26e0dfa426467027ed7e4aa24e9c08", 0xae}, {&(0x7f0000003e00)="4359ae00e2cae11972e25bc7e1576041f2b680087a96f0f55c58a1d94fc16ea42d49990044b5dc5c2330ad8a3a7be11b9cd9c2d20c5da109c6cec75d3abd2bbdafc2148d8c7b7bdb7e5d3c87797b50bd0c46a00624b48c62773068f78744af35c93a64869cffc318c9c583d0d460fa7f7587632e8481057ad354ba74b507e6c45074f42c78b65880ca1a781bbcbfbc7eb09895c288491146af3d6f1c469e9054b9d64636f45d78568cac31bfb668", 0xae}], 0x2}}, {{&(0x7f0000003f40)={0xa, 0x4e22, 0x5, @private1, 0x8}, 0x1c, 0x0}}], 0x3, 0x4041c12) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000000301010300000000000000000a0000020c00198008000100090400001800018014e64f0f31cc450001800800edb5c559ffff0800f30000000000"], 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) recvmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x221) 2.635285722s ago: executing program 1 (id=125): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13141, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0xb7}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 2.383418234s ago: executing program 2 (id=126): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000200)}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x24008056) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0xefff, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0x33, 0x3, 0x0, 0x2, 0x2, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x42000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.19227602s ago: executing program 2 (id=127): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x40, 0x7800, 0x3, 0x8, {{0x6, 0x4, 0x1, 0x5, 0x18, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @broadcast, {[@end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x2f, 0xe8, 0x0, 0x0, 0x53, @mcast1, @private2, 0x20, 0x8000, 0x0, 0x4}}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7d}, 0x2000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f00000003c0)=0xc, 0x4) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xffe0, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}}]}, 0x30}}, 0x0) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r13, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r13, 0x1, 0x9, &(0x7f0000000080), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', r2, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r10, @ANYBLOB="1400050000000000000000000000e3"], 0x3c}, 0x1, 0x11}, 0x0) 2.09506641s ago: executing program 0 (id=128): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe0f}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) r3 = socket$kcm(0x10, 0x2, 0x4) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) (async) shutdown(r4, 0x1) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={0x0, 0x42}, 0x8) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5400000010000304000000000000008000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad88000000003400128009000100626f6e64000000002400028005000d000100000005000c000000000008000b0046db"], 0x54}}, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@raw=[@alu={0x1, 0x1, 0x1, 0x6, 0x0, 0x10, 0x4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x1}], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x6f0115295e65e665, 0x1, '\x00', r9, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xf185, 0xffffffffffffffff, 0x7, &(0x7f0000000140)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000340)=[{0x3, 0x4, 0xc, 0xa}, {0x5, 0x1, 0x6, 0xb}, {0x3, 0x3, 0xe, 0x5fdcbfb2b9afe916}, {0x3, 0x3, 0x9, 0x7}, {0x0, 0x4, 0xc, 0x6}, {0x1, 0x2, 0x5, 0x8}, {0x1, 0x4, 0xc, 0x8}], 0x10, 0x9}, 0x94) 1.187730334s ago: executing program 0 (id=129): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x880000, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) (async) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async, rerun: 64) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="5400000010000305000000000000000000000000afc098830ce13a866d58a0da209c85a13e349afd13de8086fe8694dd9c9be03162389dacca3cf83d93c0411e67085931eb770ed8763bdde61231eae9987079574dcdbb84d2e85f75c13bca892b8aa6f10b1fa69acb4fbed93661871b007db66dffbe3b07d688469c251e617519a1478b8d17defd57ce9f00da0d453776c1062b1d2c73ecfd035b4e3be0ed48247944ae8d289ee69040ffaa9dae255eb4af824e6d889257cec324cd7df976a9eda485603997210b07a23272133144cd784313e8c2dd558c52d9fe48f073d05fd98288ffe45a30fdd2af60ee4c00135f710abe283f17", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b000100627269646765000024000280050017000000000005002c000100000005002400000000000500160000000000"], 0x54}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x4, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x1ff, 0x4, 0x0, 0x7fff, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x2, 0xb1e, 0x1, 0xffffffff}}]}]}}}]}, 0x64}}, 0x0) sendto$packet(r3, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) (async) r9 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r9, &(0x7f00000001c0), 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x4, 0x0, 0x69, @private1, @loopback, 0x40, 0x40, 0x2, 0xc5f}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5d, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000009c0)) (async) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="5400000000000000000000040009010400a492813ed50b0004000b000000000000000000000000000000000000ced9053b44177b0f1b6f5fea6f4d658978039ebaca2327ad8a2b1118eed0c67d1bd6d10cff2e46d7f099e83fce14bbe86954961aba5beb35712d9d4e9a3666d9978edb7309435fd930192a5361765355f27466acfc9804ef6242047ccbcfa310dafc3acb17835bb375d511a67aabf324fa4a3c38030a2cac44ac3e1714700fe93d251ca5a135eb68145d86339212886d2677eeb37d052601c5fe1bff66566a969c2b563d1bd18a3d12685042a73d5c438a0f0f4d7736a4344f22db6fac18e75c5ee618dd8bdb6b", @ANYRES32=0x0, @ANYBLOB="080001000000000008000a000200000008000a000100000008000a000200000004000b0004000900"], 0x54}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) (async) r15 = socket(0x400000000010, 0x2, 0x0) r16 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r17, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r15, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r17, {0x9, 0x8}, {}, {0xb, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x2, 0xe0, 0x4636, 0xd6, 0xc8, 0x81, 0x8001, 0x4c, 0xbf5c, 0x7, 0x1, 0x1, 0x1, 0x7, 0xff, 0x40, 0x4, 0x5, 0x80000000, 0x1000, 0xfffffffb, 0xcfb, 0x2, 0x7fff, 0x95, 0x15e5, 0x3, 0xff, 0x3, 0x81, 0xfffffffe, 0x3, 0x1c, 0x4, 0x0, 0x0, 0x2, 0x101, 0x30, 0x0, 0x100, 0x1, 0xf4, 0x6, 0x200, 0x0, 0xfffffffd, 0xffffffff, 0x3, 0x1ff, 0x4, 0x8a03, 0x6, 0x1, 0x2, 0x9, 0x2, 0x9c8, 0x9, 0x200, 0x231e, 0xfff, 0xf, 0x1, 0x7, 0x8000, 0x5, 0x8, 0x2, 0xfffffffb, 0x2, 0x4, 0x7fffffff, 0x5, 0x9, 0x6, 0x6, 0x9, 0xae, 0x2, 0x101, 0x4, 0x0, 0x0, 0x1000, 0x0, 0x7, 0xfffffffe, 0x6, 0xd, 0x64b, 0x1efe, 0x6e1c, 0xfffffff9, 0x2, 0x3, 0x60, 0x94, 0x3, 0x5, 0x1, 0x9, 0x0, 0xfffff6e4, 0xec0, 0x7, 0x8, 0x7e, 0xd081, 0x1, 0x1, 0x8, 0x7, 0x7, 0x7fff, 0x7, 0x8, 0x2f, 0x8, 0x9, 0x2, 0x7ff, 0xa38, 0x6, 0x327, 0x101, 0x2, 0x2, 0x1, 0x3, 0xd46, 0x5, 0x338, 0x40, 0x1b8beb60, 0x6, 0x240, 0x7, 0x0, 0x0, 0x9, 0x8, 0x1, 0x3f0, 0x40, 0x0, 0x0, 0x1, 0xfffffe01, 0x3, 0xfffffffd, 0x2, 0x0, 0x98, 0x8, 0x200, 0x40, 0x4, 0x6, 0x8, 0x4, 0x9, 0x8, 0xf1b, 0x0, 0xfffffff9, 0x10000, 0x0, 0x81, 0x9, 0x3, 0x3, 0x3, 0x5, 0xfffffff7, 0x7, 0x5, 0x5, 0x9, 0x3ff, 0x2, 0x1000, 0x80000000, 0xfffffffc, 0x5, 0xff, 0x40, 0x7f, 0x9, 0xfffffc01, 0x0, 0x7f, 0x200, 0x8, 0x7, 0x5, 0x6, 0x8, 0x40, 0x1, 0x1, 0x7, 0x7fff, 0x301, 0x9, 0x4, 0x7f, 0x80000000, 0xd, 0x3, 0x101, 0x6e, 0x6, 0x3, 0x40000000, 0x3, 0x0, 0x9, 0x0, 0xfffffff8, 0x90b, 0xfe, 0x200, 0x2000000, 0x3, 0x200, 0xffffff01, 0x7, 0xfffffff1, 0x80000000, 0x1000, 0x0, 0x4, 0x2, 0x6e3000, 0x4, 0x6, 0x3, 0xdda, 0x4, 0x6, 0xfffffffd, 0x5, 0x80, 0x1000, 0x1, 0x0, 0x2, 0x7ff, 0x6, 0xfffffff8, 0x400000c, 0x2, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x592, 0xc6a3, 0x4, 0x81, 0x120, 0x40, 0x2, 0x3, 0x6, 0xc0000000, 0xe, 0x8, 0xf, 0x1000, 0x48e, 0x6, 0x1, 0x4, 0x1b70, 0xff, 0x1, 0xffffffff, 0x1, 0x5, 0xdd6, 0x80000001, 0xffff, 0x0, 0xe, 0x80000000, 0xfff, 0x7fff, 0x136d, 0x9, 0x5, 0xfffffffa, 0x7, 0x0, 0x8, 0x8, 0xa97b, 0x81, 0x0, 0x8, 0x1, 0x1b93d89b, 0x2400000, 0xfffffffa, 0xff52, 0x6, 0x6, 0x1, 0x670, 0x7ff, 0x7, 0xbb7, 0x5, 0x8, 0x7fff, 0x1, 0x3, 0x6, 0xfffffff7, 0x4, 0x764, 0x1, 0x80000000, 0x7fffffff, 0xb3, 0x2, 0xfc69, 0xffff0000, 0x0, 0x7, 0x400, 0x8, 0x1, 0x8, 0xa8d, 0x1, 0xffff7fff, 0x0, 0x5, 0xfffffff7, 0x94, 0x4, 0x8, 0xffff, 0x8, 0xfffffff5, 0x200, 0x9, 0x6, 0x3, 0x800, 0xf, 0x1, 0xfffffff0, 0x3, 0xffff, 0x80, 0xae0, 0x4, 0x1, 0xfffffffe, 0x800, 0xcc, 0xfffffffe, 0x4, 0x9, 0x10001, 0x7, 0xe, 0x2, 0x6, 0x4, 0x5f3, 0x5, 0x4, 0x8, 0x2, 0x6, 0x7, 0x7, 0xffffffff, 0x97e9, 0x9, 0x400, 0x7, 0xfffffff7, 0x5, 0x15, 0x1000, 0x100, 0x9, 0x4000009, 0xffffffff, 0xe, 0x3ff, 0x0, 0x4, 0x79, 0x3, 0x5, 0x3, 0x3, 0x401, 0x1, 0xffffff80, 0xda29, 0x9, 0x200, 0x3, 0x2, 0x4, 0x800, 0x87, 0x1, 0x2, 0x8d, 0xa0, 0x80000001, 0x8, 0x5, 0x0, 0x8, 0x1, 0x32a0, 0x2, 0x0, 0x7f, 0x7d, 0x9, 0x34, 0x8, 0x5, 0x9, 0x1, 0x0, 0x7, 0x1, 0x1, 0x200, 0x10, 0x3, 0x3, 0x8000, 0x0, 0xf, 0x8, 0x7, 0x101, 0x8, 0x637, 0x1, 0xfff, 0x3, 0x4, 0x94c0, 0x10001, 0x7fff, 0x9, 0x7, 0xf, 0x10001, 0x7, 0x101, 0x79a1, 0x3ef, 0x5, 0x4, 0x2, 0xffffff01, 0x3, 0xf, 0x8, 0x5, 0xb, 0x0, 0x8001, 0x80, 0x9, 0x80000001, 0x7, 0x6, 0x0, 0xffffffff, 0xfffffff7, 0x4, 0x8, 0x5, 0x7, 0x7, 0x80000000, 0x2, 0x3, 0x200, 0x8, 0x2, 0x3ff, 0x2, 0x6, 0x1, 0x7, 0x3, 0x4d800, 0x4d4, 0x7, 0xe, 0x7, 0x0, 0x9, 0x80000001, 0xbd8, 0xd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x7, 0x9, 0x9, 0x4, {0x6, 0x0, 0x6b, 0xffc0, 0x5, 0xb}, {0x7, 0x0, 0x800, 0x5, 0x8001, 0x7}, 0xffffff01, 0x8001, 0x3}}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x124fc}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x10}, 0x408c014) (async, rerun: 64) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)=ANY=[@ANYBLOB="b0016247", @ANYRES16=0x0, @ANYBLOB="080026bd700000040000070000004000018008000100", @ANYRES32=r2, @ANYBLOB="140002006e69637666300000000000000000000008000300050000000800030003000000080003000100000008000100", @ANYRES32=r6, @ANYBLOB="2800018008000300000000001400020062726964676530000000000000000000080003000200000040000180080003000300000008000300010000001400020076657468315f766972745f77696669000800030002000000080003000500000008000100", @ANYRES32=r8, @ANYBLOB="2800018008000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000140002006e657464657673696d300000000000003800018008000100", @ANYRES32=r10, @ANYBLOB="08000300030000001400020076657468305f746f5f68737200000000080003000000000008000300010000007c0001801400020076657468305f746f5f7465616d000000140002006e69637666300000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="1400020076657468315f746f5f6873720000000008000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="0800030000000000140002006261746164765f736c6176655f3000001800018014000200"/52], 0x1b0}, 0x1, 0x0, 0x0, 0x8000}, 0x810) (rerun: 64) 1.16564786s ago: executing program 2 (id=130): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$int_in(r0, 0x0, &(0x7f0000000000)=0x100) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000006a0001002abd7000fd33804ce1c5c6"], 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@gettfilter={0x44, 0x2e, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x7}, {0xb, 0xffff}, {0xffe0, 0xb}}, [{0x8, 0xb, 0x8d}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x10}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002"], 0x74}}, 0x24005000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) connect$802154_dgram(r2, &(0x7f0000000100)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c2cd830ab969e0300000000000000c183b5fbe6133fd546dc8dc5ab2a799f358e984a0a7250ce31ff7c565b78aa69dfe7b384ed6fa1a61397816cf6f753c099d63f922508448df3240e5420aa28b0583e499b51d4dfb6b978efacbe5396a70c935d2bc161b3af2969a354afb183ab6df5790903b3db622efef825755fa11204", @ANYRES16=r4, @ANYBLOB="010000000000000000000400000024000180060001000a000000620008000100000006000400000000000600020000000000"], 0x38}}, 0x0) unshare(0x6a040000) 1.03195878s ago: executing program 1 (id=131): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f00000003c0)='ns/pid_for_children\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, r1, 0x0, 0x3, &(0x7f0000000000)='\x7f^\x00'}, 0x30) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000), 0x0) 1.017560399s ago: executing program 3 (id=132): socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet(0x2b, 0x801, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000cb000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r4) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8dffff"}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt(r6, 0x6, 0x0, 0x0, &(0x7f0000000000)) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 905.082399ms ago: executing program 4 (id=133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000c80)={'ipvlan1\x00', &(0x7f0000000b80)=@ethtool_drvinfo={0x3, "b6a5a4c554b540f610881ddfc60c7c10be18a8a16e1fd36b19b498d996d2e6b1", "a0f5b5b9a6563713536a30f274de5a7be62afd1c93714b68f85659a4f8be4ae1", "53d063674ff30e6064e9f63d13bc359f93623f64dd4b0df3d38ef244e5eb57c4", "a6bceb100f1bcc066a312d29063a1ef04adedf160f1ab07016c4f7465c955a61", "4143967e44cb0bf2bffe750097e64bdeb49558d0cdb6a6324cf75d622f2be2d7", "e48958e49ee4338d590974d4", 0x7fff, 0x9, 0x8a, 0x5}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x64, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0xb}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="27bcf42ec08d516cf711a7b2fccc3fb8cae8e0195ffdb9b858a45fe647100b8db404d4842515c1ca4850a8d54250de31bff2ad08bb3dcfbc93e86ff002f1746e48370eff974ac0dd2749462aada83fb200e3f289ea0dc285bb4c8fcb6eb0e18ecbdc67bcf0be66e6de28e8dae9cb0cf5497d600ca0fb6cd4e70ee7d41380787c428d50b584d39914b3744bff7d86659f015f9c9cf00b883f037c62c4d6ec0e42ad2e1793efad73f593dbbafcd36b6780feaccb3971b88f74a2021acb1493602cb59b84a8252eb6d76245ff3938eeae678abb4ca58a77ce0dcf059cff24e40570da386db73481514df25cc58274f3b7397e0f51838c5d", 0xf6}, {&(0x7f00000004c0)="fc15f613128c36c19b748f8d26043d566c1b8ab5b4884eee7483f74e0bceea801231968508aaedb344c1895d5f727da63bd03c5e441f6dbf4d2792702b229170403ff72cec6fe1e0ccd131d740bb3cabac4de732fbe806d066a0c6c114e004e3f52e6368d82a2b55d53501818838c30f8a652752e13f4beacf2b3a0a1e32d4f1d224eed28bc5c57b398c2a1c15848c07260125d8e88e1346aa3e572375a02707fb087e999839962c0a25a827199e7cce288ba5e215e7d44347778da8464ce29a74229e4c608afb5c22c1bd54fdc73ab74bddf3fd3749cb9762a8a6a38a563eeab810a33b27", 0xe5}, {&(0x7f0000000200)}], 0x3, &(0x7f0000000cc0)=[{0x78, 0x110, 0x3ff, "d5600aff2802a08569c2267d36d0bea154efb04922f9425f5a904eef225f66cc662401ffb5147480545b94adc71665f732583a22be01684751a86bf5c4c1a1356faef99576f485c096c0029667840cca6c6ce168f04d0dab5abb783312ff8d3475"}, {0x48, 0x29b, 0x3, "ef94fe3a4090676e71ac375e6ef450be54514fcce97b2499a8673eb1bd84b729414868ebd11874771704164d57d64a54aad6a2e353"}, {0xa8, 0x104, 0x40, "10b5e99e59c95df4f956c4a4b3b0ab04684c0e2d2b0a834f0b695855d479bc2f62b9c1d2af489f20f07376b48c59e8182d7a3d9e0ab336b78e29a1c6227c4ab90bc6ce21425c4657bfcdc0b7d990edf3f9ac9cf7336123bffae99d50bd4e1f282102b26de562745b6383838b1b67eacd262d6cebd7c55395cc9b757ef0b27efdc59a8d0f374ceea890d9c9317b6edc662e16c8"}, {0x1010, 0x1, 0x6, "dabdf06dc527fef2a870b18b459f354fcfe925d061266cc7ebb36bedd0d6d7e08446bce46c22fd01ea47212d33da95443ad4bf4cf370b8e7cc37aacff157cb2e417851c47c725d59bc6491d553ae929d51895b198924287dc4c25e49fffe53273dea1b6cea82e737bd9fb18f8e5104a010af201598eeacaee42e8547db960f8e82dce60f877ee21efe2f7222972f1dd10d05e74b773e4dd9d54ac4f8d9028afa3697403ba31a64a606bbb550276337f32ca2f2e125644af06be7ec3ad5b595fa20087b9b40f97e92a884c10b5a7499ade010dd7d1fc9ec24304067599acd4e237e109170b184aad68fd6f6d1f3bc932c0dcd3943a6d96df3cb36d05a04052b07dc78dc8e30b64eaa3a43d8794749c0127a8a07126708865883f660d3eaab6b9b73d0e9dbe5d6a7c0228061320335ce0938be687be6d4694fa9553ce5eed50f05f2336a364078314ea7cfce1254fd22389b23e041128a1db8143497a4d4e1e2083494c47d47faa4c05dfbdeacd2f10e16edd24b6f7f6b59fdc265cae0371f4718d6ff431e4fd97e141c55dbbda5498a604dd62e36db70fa07b8a696b0d354b4d5fa4f4e50374956c250ec4fda4530d8d44fe16ee21ff7e2d5f42c71dc2a729db212c0b2a8cac4be144d5fe143fe796845a62570c7aa6d258916f7902b63af48126a0f72963ef17835c45131dbd04e59a70b973e0bae4f8f5d0d47652072bade0f76c6d9ff11c81bca3a23f69d1bbbdfbbf4d072882b28eab0cef93dc21798060e31a2ac09c4d4ede9cddf59e35676c7d28641f71647d0ad6c13b84cfca88226818836840308f50cb63d52e515ae20517de2586280fe82f04ea9ea4758311287fcf58b91a669107dc529c6c0dd430931b2f15a6526a4b3c29074c9e9ae83a9d1925caab6b8927d6c4344e393fdbbcd6381ed964b378f07c04b4cc725cc157177ccd89e9baba839c9b66b4a7bea5f66f1055e5669d8755fc71a85af364fd9995816bf6a4d5864062e9f74a5bcff2d2e13ad6133d54b967772a242d2a7bcd90e08ea228c34f7468c8c23b98819275b81805618515aead58cca4e8088490add5a49903f4bd2e12612f69519c2978c83aaad0ab168a7fe645cb887b2265dcb52b1b6ffc36f6cb382aabb923490049736b145e71f0f20cbd3b1f91e293439f3b0a59946e318b1a89bf2a73d430a893fb83bae334ec17a2add76e9d7ed0dadea1bd9282df6bee793374c2c2b9282648ea1f1240187fd9df8aff06900bc8999ab89aea5a582da354afc4b74e510d5fbece451b30a51c5269c8dfccc169980c882d3cad355b557cc8cb0c156671a1ad979c937a912f0b9e0ad35c6f2deeb03ee50cc426e269a23d3b1d3191f2516635c0841e7af45e90bdaccc4be04f0053f86f41e7447eaaca5512524158c8ef81e904d06646e55c150c21068409445c94f39ed7c10577ba667a292342b4f1b3bcf638f3bb62f9871ad2ef1d808e8ebc28a9ec1ff205cc0ca641172c2227006e793695c45bbf65c2534371621a733d189c5bc68467fc3aff791a55fbc4ce6bd6f5a100942094da4dd212460f82a50b484a82afcf9964b24fa28c18bf3f94023fbe3abc8a5fa951dfd694712bb22fdfb24cf447c27a80056a4330762cd9cd936e0156cf02151812ce67af17d1baab8889d5cd1a36f0ad23b41d5c92f9299b30a687e9677a32448b5ae17d8cb0ea00fff5262730a8c51349f9e816049beb28b1ba4ace13159fdf56080ff49786495aa94eeff12dfb213790cf0a0c46c4a310248d3993c41c182f63481f8dce12de560d8551deaa5bf7e3146f45cfb6a4a32f7ff8f453a98536e15b6d10f3f17f1fb45d4cb711f3c2893ccef02be0693f806a85d907e8accf013cebef3a0b0a7ea34c5b3d98e50436a4ea519e8592c7da3adcbec59a3ec17eac7d5dc01517c7aeb879b6646b965ed648b9a8df0b0024a72efc069771c34ada6a7a1fc8da22625e8ac80f24958affe795cfa588d691ccabd76b4318b29677a2d6d8f1f65c4ffda13c7ba026b19091d96bb97644598228c70c2e8fc92279c8adf1d3e21fdbbffa6a57c71a0181568b151cb513f7495aa0f173bcca281b6f115fcb052bb9c3b790f3a27b348a53e586ae0ffa2773bb54946c4d97abb69e9ecf631651dcad2163d516816479bc99c1b0f0c95d8ab8b4d858ca2834d7bf32f97b4dc699121ffd50a30303c10e3037d9507dbc194b0d9a5c0123111205c38277a6023d8d9b5fbdc8bca51fcf6ad9c1772a94137fe7b6345c5d5bd76c2bdd269db57a7d8a46769ab6994bd37f2953c9290692741437c43a3e3b0a63aa3d636a948a0a494230b3a1fa2db535bda82f415de34ce02676c619e15e84759b36786b3b4f5b970b81f8cc47f3d71f1483ef64792aef9f11d86b10b24bc27f985295d7b234c27e35f748669f81bb7c0776ca4bd2396202a413849bf47f39fe69f6c83c3de0eace6e84fa8bba866311536f071c53318bdfc07f7eea39d47ab135e945d122f7abc612c88f22c3364f17d6118183b8d5b0004a15f9f9c45cfea1b21b0196013bf34554a86c26318942db2829fdd663a240510082fa25f1fc8e3bc58b58fe4afef05d02114af231e25a7dba50e5b4a062c739ce5ca56bf49d5fc5345ca46d858342b376b7f734026f3ba1e4f18dbbc0e9bd5d81f98c46515b3c6b53782da772be3d73df7148b82bbd5abeb0f6e4755e57134708326ca41b29ae1fbb86b017ee1cf479cc05b0c1146ff1c0c0d8cf5d7f61f435f8aa178b84123eb3cdea2e1e35e7c75cfcd1fd82d860f44c260cbe3c26988d8c170502589b46a0a772aee89d96bc93ec227cfdb70e430a01fd8e9c532c2586aa63e75b9c48565dde646c21ad84060864d1c6cbced7eb10e6616c9ae672fc53553c6712015b9a327d979f43fb4c56c783f269f1b9f42ea4b5bbc39c58212648a8694be1c6d7330cff9540356ce7b36d458cca56a1c6e59ef9704fef4e84f8feea7485ccaf969e3fe22960ff8474137919166b8e09310b2ec43ef0f6662e865c903e2f7cdf9cdc876079942487271eb0466f91f6ece9646f0d7983a006f7f07a56bedd0ba4c94ece6cb484895c1b6084a0e267f03550c0397d8a8548274272306451824a0d2e70376dfcadff6d12e9ef7e7c6f34ce24dff5aded11b34724c86bdb84b10c2bcdd2c4ae79896752b630d1cfbccab6fc76407c5e5f91e04670e3acca52e896df0582c8953875f9d79277cc923c5cb393902f75625243d09ac863a52a3d4cd78e0aaa5aa948f7345d1b357a894c84cda183070649f451eb1634be697ba776f5e6292e2d1ebc73ffca490be4a73d53c7ac4d3a54506eac5c989e73933dc4fba4908631a6c4d2b621024620cf11b303a89fe5e5a60603baf4b85a3423c33f105542563fbce0df4086f79211dbb148aa55be58dfa7af8a777a8829676fc0c959c7e8d967903488d281faf5f84d8c7809df3d8723cc88bdaa3929cee2aa52fd87c3e4c2b0857dda2ef2ddba8525a72c58c64c6c5a122c5f8a59c056d037617808b59629614b49160ac92605624c3b4cdd7937d9188185a56e0ec5a9d987ea02297ec216246027e50fb9ce63656d78c013b9bb4f0753996df7d3693996bdb53c53e847b5cee3435c706206828fc091fc3adfafef0ee670a5f7336ae5a8b1819e5edd58e833be88e8ecef81d2c89a9bf8952e043923302a9d58c72bffcfa6489e98e01002ab08b8cc8059e0aea6d874f490ca8c7ba72808317d9ca40e9975fb78c515043a18633da547b6311f21c8162d20ca59710af568a46ba8b81ddaca34fd3a613cf165df4cefcfd4624b96bcec8b200b8ede78611074682116f3f4e2c20244b965dbb715f5f9bd2ebd4d480bc0be8b9104fff184c46ec0851164072563d6a9285318e3ba9bb0741180df0716a7036ee59efa986eb4dcc601c1168fb90b1858724286a785460a2eca2a263e7a6a41f25ecf825fa1eabd2d26fc4093d9befb1a10d82b866550376d64e64319152a2461221d17ab6cc0650fc786deee6b45530866ad82a3bd500a1d49e9abc7687e5c454b53a964920e2ad92360757f82fd748f743396f1c86890872069a3bc51e2a5523c704f881d6b0cad2b225443c115c1cc1ec526d640610f75cab7e97922c2803676a80b4062579f806deaff78ad6f8d2316e387ae19a1eca435e1b40281f788c4d6be6745c64df94c6872d5eed481e83fb091c0853d43c6a57a6737b30695c5bae49f4b81cd19a0ee6588e1610b3ad113dde734acd25404f5b827333fb87e1e3c577122c09345033b0c3af83ed7eff0cb57cf069accf7976ec107b9640c3104e7860966532032e03358890cc08177f215d7218017cd7c19b00ad181764b0607b1567d324da2b4ea912dbbc68a8a8d22d9f74b7e62f482db2e25dce92b29a822dc303fc6142962ce08d2f3b323a17aa7cb076178099c770dd4a786d5d2e853013e3ab33aea8b366063f059f051718e369d99e24f32cb69eb6eb3ada214e5cd40917bfdd40d56f66832d0b0509afab1216d9f6eebc9c94b348f1230a39a149604bb274016b7c8b6fab3c035b16a5b209078e4e969700e92de532d0719be53c912a2cc3c38f89d7eb153497900bdbe7f5aeabf1ea7bebf6251571f74bab977286b9b6d4ef22a1576cfbdadd601fd64b5a87f6948e7021d7314e79d47d1b52b530ffc5a363777ab416fc875c50c9c260e75be5d61c07c4919f01ef095c108914ff3831ad71304dc2c3c9ec16ee8a6da21bf30147f60ecd96338fc120cc2dd218dec1878f1e3ed27c148ecff4c5ca22631f0951ec6e74b5a23818832f9223d9df36d069a99b119e449a434c0e82abf81d36d12066639904ac293c55a4373057ba5ff58aab19dac033069a2e5828c1d6a38c5a73efe91816d5113b22c8c77c91946f66cb138c37dd7e42467ff87a03697892578febe31ef10594e1b1d63e2034d0072ccf9346176eb1b3ff975715adad415952177e30289599ce48c0b22e223704eb5d192ca5f1a065ef2bf421efd5818f44b728ee4fd1bcbf21b059f51e883f4fd8a7f3dd09ebd4016cf8d5a7326a6370382c09e2abb74bb61e6da2fbd780331fbc95a4da8e38d85f9f85597e1f6cc436253c17a4f73e568e121f4b6049ea114e85e16a1474ff431ec9e35371a3b9abd225943d78f8ca0d4bf3019f4a8a068d32b2986ae751a078e4a66ea013fc9b3a5901944281ab18e960df9af06425e65b59994c39f48a3ec552553c18110cdfd92ae7ff6a42914822ede6e9f8fdeadb5b58d0505e70502cae43b69e6a5efb01933b1120dde39425ff4e5b8cbeec55a9899a8c7502c29a8cd1580bd3e751dc56391739e0caf38673ce0c679e3a7178630a824b7011f4bf0597fc1dfc53c6bcdece491ac55307e8418554aee04fff5a901fe1dbf62b2a59cb5d2c6a5eb3b40cc33b485766f589750ad401e69ec9464218a7f49b65f0cc71348e37cc53053306b36829cd67878f557a2efe75117ca529b7df4aefdc1107c69896c389ecfdac8020356cd67c75f98495d7756c43b8d08cf66fdcd2ea37a0ef727e24477a5def144d67758e986f86ef163117e59578fd2485af39913241b4b2f9dbac29ccb0dfef9388764c9a942f0258d4f9e2175ce43edff8b8eb6f8e888063c5377cb5debec70c3f7b61213dcce406cee75b39cefd81d4e1ca0b7aca79f5336a9a91a79a41974ec7c06cacdb665c9e39fb9461771f823310990dc48ce3ce46a6d5a796f762334e0696ddbf60fb0cd6dba8373fc41a424e733eb0e6d8df3fc6bfc89a2dd9c902c409b1396ae2"}, {0xa8, 0x10a, 0xff, "427427fa3ca1e3bb87017df6def4f05a0047b2e321f407ce5c7f8c0534553db75486e6942c81f6df1e2a69326c7bab47230218ca60d88357b773e3e21b35bf700e13c9597fe45997436d42eaeb3bef67a809dbcce3573b299d92ea753570486c230a3373fdbec775d19c3f13986ae8bcd576a8d738f30987edcc752dfac901e20e57b7ae082e46769edc3588009eeab11d4c28"}], 0x1220}, 0x40) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r13, {0x0, 0xa}, {0x2, 0xb}, {0xb, 0xa}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x5, 0x0, 0x2, 0xfff}, 0x101, 0x0, 0x40, 0x407, 0xd0a6, 0xf, 0x11, 0x9, 0x1, 0xfffffffc, {0x5, 0x6, 0x3, 0x4, 0x913, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048005) 844.455621ms ago: executing program 0 (id=134): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0xf, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xc6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r3) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) (rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) (async, rerun: 64) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r5, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) (async, rerun: 64) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x54, r6, 0x1, 0x0, 0x25dfdbfe, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x54}}, 0x0) 839.818006ms ago: executing program 1 (id=135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000031401002cbd7000fcdbdf250900020073797a3200000000080041"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x7, 0x80, 0x0, 0xfe, {{0x6, 0x4, 0x0, 0x10, 0x18, 0x0, 0x0, 0xd7, 0x5e55b37311de6d89, 0x0, @broadcast, @loopback, {[@timestamp_prespec={0x44, 0x4, 0x4b}]}}}}}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5ff}]}]}, 0x60}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000b00000000000000", @ANYRES32=0x1, @ANYBLOB="902fb87800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000080ffffff0020080000000200801377d40000351e0bc1a111b4"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)=ANY=[@ANYBLOB="38010000", @ANYRES16=r7, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r8, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c00178004000500040004"], 0x138}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)={0x93c, r3, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7fc000, 0x66}}}}, [@NL80211_ATTR_TX_RATES={0x214, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x24, 0x1, 0x6c, 0x2, 0xc, 0x9, 0x24, 0x16, 0x1, 0x2, 0x5, 0x0, 0x6, 0x5, 0x60, 0x18, 0x1, 0x4, 0xc, 0x3]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0xf07, 0x101, 0x7, 0x2, 0x1000, 0x3, 0xd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5ab6, 0x4, 0x5, 0x8000, 0x8, 0x2, 0x8001]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0x0, 0x0, 0x1, 0x3, 0x4, 0x7]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x36, 0x1b, 0x36, 0x1b, 0x18, 0x6, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9, 0x100, 0x4, 0x9, 0x1, 0x4a07, 0xa]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x48, 0x24, 0xb, 0x4, 0x48, 0x1b, 0x0, 0x4, 0xc, 0x2, 0x74, 0x24, 0xa, 0x3, 0x16, 0x36, 0x1b, 0x1, 0x5, 0x12, 0x1, 0x1b, 0x12, 0x1b, 0x1b, 0x48, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ce6, 0x8525, 0x10, 0x9, 0xd, 0x5, 0x9, 0x2da6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x6}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x8, 0x3, 0xf, 0x8, 0xe, 0x5]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7c, 0x7, 0xa, 0x1, 0x6, 0xa6, 0x3, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x7, 0x164, 0x1, 0xe3e8, 0x800, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x6, 0x0, 0x5448, 0x3def, 0x8f7, 0x468a, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0xc, 0xc, 0x101, 0x0, 0x100, 0x6, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x9, 0x0, 0x29e3, 0x200, 0x6, 0x5, 0xd]}}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6, 0x4, 0x16, 0x4, 0x0, 0x9, 0x60, 0xc, 0x17, 0x12, 0x12]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x24, 0x48, 0x2, 0x1b, 0x16, 0x48, 0x2, 0x24, 0x0, 0x48, 0x18, 0x2, 0x6c, 0x36, 0x60, 0x3, 0x1b, 0x24]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x0, 0xf149, 0x2fc, 0x100, 0x1ff, 0x9]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x60, 0x6, 0x4, 0xb, 0x4, 0x12, 0xb, 0xc, 0x1b, 0x5d, 0x0, 0xc, 0x3, 0x36, 0x1b, 0x6, 0x60, 0x0, 0x0, 0x1b, 0x30, 0x4, 0x1b, 0x4d, 0x36, 0x60, 0xc, 0x6c, 0x9]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6c, 0x1b, 0x3b, 0x18, 0x24, 0x2, 0x4, 0x6, 0x12, 0xb, 0x16, 0x24, 0x5, 0x1, 0x9]}]}]}, @NL80211_ATTR_TX_RATES={0x1c8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x5]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0xfffd, 0x21c, 0x9, 0x0, 0x7, 0x67a]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x12, 0x48, 0x1, 0x18, 0x18, 0xc, 0x1b, 0x2, 0x36, 0x1, 0x9, 0x5, 0x4, 0x2, 0xc, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x2, 0x5, 0x1, 0xebc7, 0xb2b2, 0x31, 0x5]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x16, 0x36, 0x1b, 0x9, 0x36, 0x8, 0x6c, 0x2, 0x12, 0x0, 0x12, 0xc, 0x2, 0x36, 0x30, 0x2, 0x18, 0x30, 0x60, 0x30]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8, 0x0, 0xe, 0xdd8, 0x8, 0x6, 0xffff]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x6}, {0x6, 0x3}, {0x3, 0x1}, {0x2, 0x6}, {0x5, 0x3}, {0x0, 0x1}, {0x0, 0x6}, {0x2, 0x7}, {0x6, 0x9}, {0x7, 0x3}, {0x1, 0x8}, {0x1, 0x6}, {0x1, 0x6}, {0x5, 0x6}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0xcc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0x8, 0x7, 0x1, 0x9, 0xf, 0x1]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x60, 0x7b]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x3, 0x9, 0x0, 0x3c, 0x4, 0x6, 0x24, 0x16, 0x6, 0x18, 0x1b, 0x6, 0x48, 0xb, 0x4, 0x6c, 0x9, 0x24]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x60, 0x4, 0x4, 0x5, 0x1, 0x6c, 0x5, 0xb, 0x18, 0x1b, 0x18, 0x36, 0x30, 0x48, 0x5, 0x6c, 0x6, 0x3, 0x6c, 0x12, 0x12, 0x5244fcf3ec4b1e3b, 0x24, 0x6, 0x4, 0x1, 0x64, 0x6]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x4, 0xb, 0x18, 0x30, 0x60, 0x5, 0x9, 0x6, 0x3, 0xb, 0x5, 0x3, 0x16, 0x3, 0x1b, 0x36, 0x60, 0xb, 0x6, 0x1b, 0x3, 0x1, 0x0, 0xb, 0x12, 0x30, 0x18, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x7, 0x5}, {0x6, 0x5}, {0x0, 0x9}, {0x1, 0x8}, {0x4, 0xa}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x12, 0x12, 0x30, 0x3, 0x24, 0x48, 0x18, 0x48, 0x18, 0x16, 0x2, 0x1, 0x4, 0x9, 0x36, 0x18, 0x1b, 0x24, 0x1, 0x49, 0x0, 0x0, 0x5, 0x9, 0xb, 0x2, 0x24, 0x36, 0x1b, 0x16, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xfff9, 0x5a, 0x2, 0x84, 0x800, 0x1, 0x2]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1b, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x8, 0x5, 0x3, 0x3, 0x2ac1, 0x3, 0xbb]}}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x7}, {0x0, 0x1}, {0x4}, {}, {0x1, 0xa}, {0x6, 0x1}, {0x6, 0x3}]}]}]}, @NL80211_ATTR_TX_RATES={0xf0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0x3}, {0x4, 0x3}, {0x3}, {0x2, 0x7}, {0x4}, {0x7, 0x1}, {0x4, 0x9}, {0x6, 0x6}, {0x5, 0x5}, {0x3, 0x6}, {0x2, 0x1}, {0x1}, {0x5, 0x5}, {0x6, 0xa}, {0x0, 0x9}, {0x7, 0x8}, {0x4, 0x7}, {0x3, 0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0xa}, {0x7, 0x3}, {0x4, 0x3}, {0x3, 0x1}, {0x6, 0xa}, {0x5, 0x2}, {0x2, 0x3}, {0x0, 0x4}, {0x0, 0x3}, {0x4, 0x3}, {0x6, 0x6}, {0x0, 0xa}, {0x4, 0x4}, {0x4}, {0x2, 0x4}, {0x2, 0x9}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x1, 0x1}, {0x0, 0x7}, {0x1}, {0x1, 0x1}, {0x7, 0x9}, {0x6, 0x5}, {0x3, 0x9}, {0x0, 0x7}, {0x3, 0x1}, {0x0, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x80, 0x5, 0x9, 0x2, 0x400, 0x15]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x4, 0x1}, {0x5, 0xd}, {0x4, 0x8}, {0x3, 0x1}, {0x3, 0x4}, {0x1, 0x1}, {0x7, 0x8}, {0x1, 0x6}, {0x5, 0x8}, {0x1, 0x7}, {0x1, 0x8}, {0x2, 0x3}, {0x7}, {0x7, 0x4}, {0x3}, {0x6, 0x9}, {0x7, 0x8}, {0x4, 0x9}, {0x6, 0x4}, {0x6, 0x6}, {0x1}, {0x0, 0x8}, {0x6, 0x2}, {0x2, 0x5}, {0x0, 0x5}, {0x2, 0x7}, {0x3, 0x5}, {0x1}, {0x1, 0x5}, {0x6, 0x1}, {0x3, 0x8}, {0x1, 0x8}, {0x5}, {0x1, 0x7}, {0x1, 0x3}, {0x3, 0xa}, {}, {0x2, 0x9}, {0x2, 0x1}]}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x4, 0xb, 0x4, 0x4, 0x1, 0x8001, 0x800]}}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x15, 0x1000, 0x1, 0x6, 0xfff9, 0x1ff, 0xd]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x2}, {0x0, 0xa}, {0x4, 0x2}, {0x7, 0x2}, {0x4, 0x2}, {0x4}, {0x7, 0x1}, {0x3, 0x5}, {0x5, 0xa}, {0x3}, {0x6, 0x7}, {0x1, 0x3}, {0x0, 0xa}, {0x4, 0x7}, {0x0, 0x3}, {0x0, 0x8}, {0x6}, {0x3, 0xa}, {0x7, 0xa}, {0x5}, {0x6, 0xa}, {0x4, 0x1}, {0x1}, {0x1, 0xa}, {0x7, 0x1}]}]}]}, @NL80211_ATTR_TX_RATES={0x35c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0xff7f, 0x0, 0xaff, 0x2, 0xf9, 0xf189, 0x69]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x6, 0xf49, 0x89, 0x81, 0xff, 0x3]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x8}, {0x3, 0x9}, {0x6, 0x7}, {0x6, 0xa}, {0x5, 0x1}, {0x0, 0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x6, 0xa}, {0x7, 0x9}, {0x4}, {0x0, 0x2}, {0x6}, {0x0, 0x5}, {0x3, 0xa}, {0x3, 0xa}, {0x5, 0x9}, {0x2, 0x7}, {0x5, 0x3}, {0x6, 0x2}, {0x0, 0x8}, {0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8, 0x7, 0x3, 0xfc01, 0x2, 0x1, 0x9]}}]}, @NL80211_BAND_6GHZ={0xd0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x18, 0x2e, 0x9, 0x24, 0x24, 0x24, 0x6c, 0x6, 0x36, 0x1b, 0x6, 0x16, 0x12, 0x24, 0x36, 0x60, 0x30, 0x8e4e4accfd1a5425, 0x30]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x70, 0x3ff, 0x4, 0x9, 0x7, 0x9, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x6, 0x400, 0x2ab, 0x1, 0x6e53, 0xfdf0, 0x5]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6, 0x12, 0x9, 0x6c, 0x4, 0x1, 0x5, 0xb, 0x3, 0x16, 0x18, 0x2, 0x6c, 0x3, 0x24, 0x60, 0x60, 0x3, 0x2, 0x36, 0x48, 0x5, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x200, 0x1, 0x80, 0xb8, 0x7, 0x1, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3}, {0x3, 0x2}, {0x7, 0x4}, {0x6, 0xa}, {0x7, 0x5}, {0x7, 0x6}, {0x0, 0x1}, {0x7, 0x3}, {0x5, 0x6}, {0x4, 0x7}, {0x7, 0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x6, 0xa}, {0x2, 0x11}, {0x0, 0x8}, {0x1, 0x3}, {0x7, 0x9}, {0x0, 0x4}, {0x7, 0x2}, {0x7, 0x8}, {0x0, 0x3}, {0x1, 0x8}, {0x1, 0x6}, {0x4, 0x5}, {0x4, 0x9}, {0x4, 0x8}, {0x5, 0x4}, {0x5}, {0x7, 0x2}, {0x3, 0x2}, {0x0, 0x5}, {0x7, 0x9}, {0x5, 0x5}, {0x7}, {0x2}, {0x6, 0x1}, {0x2, 0x7}, {0x2}, {0x2, 0x4}, {0x6, 0x6}, {0x7, 0x4}, {0x1, 0x2}, {0x0, 0x3}, {0x7, 0xa}, {0x0, 0x6}, {0x6, 0x1}, {0x2}, {0x6, 0x5}, {0x5, 0x6}, {0x0, 0xa}, {0x2, 0x8}, {0x3, 0x6}, {0x6}, {0x0, 0x9}, {0x6, 0x4}]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x7}, {0x7, 0x7}, {0x0, 0x7}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x2}, {0x1}, {0x3}, {0x4, 0x2}, {0x2, 0x8}, {0x7, 0x1}, {0x6, 0x2}, {0x7, 0x9}, {0x7, 0x1}, {0x3, 0x5}, {0x4, 0x6}, {0x2, 0x1}, {0x5, 0x6}, {0x7, 0x6}, {0x5, 0x1}, {0x1, 0x4}, {}, {0x0, 0x5}, {}, {0x7, 0xa}, {0x1, 0x2}, {0x6, 0x1}, {0x1, 0x6}, {0x7, 0x5}, {0x4, 0x3}, {0x3, 0x7}, {0x6, 0x2}, {0x1, 0x9}, {0x6, 0x9}, {0x7, 0x8}, {0x4, 0x7}, {0x1, 0x7}, {0x3, 0x7}, {0x2, 0x4}, {0x7, 0x1}, {0x5, 0x5}, {0x4}, {0x1, 0x5}, {0x7, 0x2}, {0x2, 0x4}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xc, 0x3, 0x1, 0x7f, 0x3, 0x7, 0x2]}}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x6, 0x6}, {0x6, 0x19}, {0x6, 0x7}, {0x6, 0x4}, {0x2, 0x7}, {0x1, 0x1}, {0x6, 0xa}, {0x5, 0x6}, {0x2, 0x2}, {0x7, 0x9}, {0x0, 0x2}, {0x7}, {0x0, 0xa}, {0x3, 0x3}, {0x0, 0x6}, {0x5, 0x5}, {0x4, 0x9}, {}, {0x0, 0xa}, {0x5, 0x2}, {0x4, 0x5}, {0x0, 0x3}, {0x6, 0x2}, {0x1, 0x4}, {0x3, 0x7}, {0x1, 0x7}, {0x6, 0x2}, {0x2, 0xa}, {0x3, 0x4}, {0x7, 0x9}, {0x7, 0x1}, {0x0, 0x8}, {0x7, 0x2}, {0x1, 0xa}, {0x5, 0x6}, {0x4, 0x4}, {0x7, 0x4}, {0x7, 0x9}, {0x4, 0xa}, {0x1, 0x4}, {0x2, 0x5}, {0x6, 0x9}, {0x0, 0x1}, {0x7}, {0x0, 0x9}, {0x3, 0x5}, {0x5, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6fa, 0x9, 0x833, 0xffff, 0xb, 0x401, 0xfffd]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc0, 0x9, 0x1b, 0x1b, 0x30, 0x9, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x3, 0x6}, {0x2, 0x8}, {0x6, 0x8}, {0x1, 0x1}, {0x2, 0xa}, {0x5, 0x4}, {0x1, 0x9}, {0x1, 0xa}, {0x6, 0x7}, {0x1, 0x3}, {0x2, 0x5}, {0x2, 0x9}, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x9}, {0x7, 0x3}, {0x4, 0x5}, {0x3, 0x7}, {0x2, 0x1}, {0x4, 0x7}, {0x1, 0x3}, {0x1, 0x8}, {0x0, 0xa}, {0x5, 0x3}, {0x7, 0xa}, {0x7, 0x2}, {0x2, 0x1}, {0x0, 0x6}, {0x6, 0x2}, {0x3, 0x5}, {0x3, 0x2}, {0x6, 0x4}, {0x4, 0x8}, {0x0, 0x4}, {0x0, 0x9}, {0x2, 0x3}, {0x1, 0x9}, {0x2, 0x8}, {0x0, 0x6}, {0x6, 0x6}, {0x6, 0x4}, {}, {0x2, 0x4}, {0x6, 0x5}, {0x0, 0x1}, {0x2, 0x4}]}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x36, 0x48, 0x9, 0xb, 0x5, 0x2, 0xbd5d16720f5ad74a, 0x1b, 0x2, 0x60, 0x6, 0x9, 0x6c, 0x18, 0x2, 0x4, 0x30, 0xc, 0x18, 0x6c, 0x6, 0x0, 0x6, 0x2, 0x3, 0xc, 0x1, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3, 0x60]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x36, 0x16, 0x6c, 0x18]}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{}, {0x4, 0x1}, {}, {0x5, 0x7}, {0x5, 0x3}, {0x1, 0x3}, {0x3, 0xa}, {0x1, 0x8}, {0x5, 0x1}, {0x7, 0x1}, {0x2, 0x2}, {0x7, 0x9}, {0x4, 0x1}, {0x6, 0xa}, {0x0, 0x4}, {0x4, 0xa}, {0x7, 0x9}, {0x0, 0x2}, {0x6, 0x4}, {0x0, 0x8}, {0x5, 0x9}, {0x3}, {0x1, 0x9}, {0x4}, {0x4, 0x5}, {0x6, 0x8}, {0x1, 0x7}, {0x6, 0x8}, {0x1, 0x3}, {0x0, 0x4}, {0x3, 0x4}, {0x5}, {0x7}, {0x5, 0x4}, {0x3, 0xa}, {0x0, 0x6}, {0x6}, {0x4, 0x5}, {0x2}, {0x7, 0x2}, {0x5, 0x4}, {0x2, 0x4}, {0x3, 0x3}, {0x3, 0x4}, {0x4, 0x8}, {0x4, 0x7}, {0x1, 0x8}, {0x0, 0xa}, {0x5, 0x4}, {}, {0x3, 0xa}, {0x2, 0x5}, {0x4, 0x5}, {0x0, 0x1}, {0x6, 0x9}, {0x2}]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x2}, {0x5, 0x8}, {0x0, 0x5}, {0x0, 0x5}, {0x3, 0x6}, {0x5, 0x7}, {0x6, 0x9}, {0x5, 0x8}, {0x1}, {0x2, 0x7}, {0x1, 0x7}, {0x5, 0xa}, {}, {}, {0x0, 0x9}, {0x0, 0x2}, {0x6, 0x1}, {0x7, 0x2}, {0x6, 0x1}, {0x1, 0xa}, {0x4, 0x6}, {0x6, 0x6}, {0x7, 0x7}, {0x0, 0x9}, {0x2, 0x4}, {0x7, 0x4}, {0x3, 0x4}, {0x1, 0x1}, {0x1, 0x2}, {0x6}, {0x2, 0x5}, {0x6}, {0x7, 0x2}, {0x5, 0x3}, {0x0, 0x5}, {0x4, 0x7}, {0x5, 0x7}, {0x1, 0x4}, {0x7, 0x5}, {0x1, 0x4}, {0x6, 0x9}, {0x4, 0x7}, {0x6, 0x2}, {0x7, 0x8}, {0x1, 0x5}, {}, {0x5, 0x5}, {0x6, 0x6}, {0x1, 0x6}, {0x0, 0x8}, {}, {0x1, 0x5}, {0x5, 0xa}, {0x1, 0x5}, {0x0, 0x9}, {0x1, 0x9}, {0x2}, {0x1, 0xa}, {0x4, 0x2}, {0x0, 0x6}, {0x3, 0x3}, {0x3, 0x4}, {0x7, 0x8}, {0x3, 0x6}, {0x2, 0x8}, {0x6, 0xa}, {0x3, 0x2}, {0x5, 0x6}, {0x6, 0x2}, {0x6, 0x1}, {0x2, 0x9}, {0x6, 0x4}, {0x0, 0x1}, {0x6, 0x1}]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x0, 0x100, 0x4, 0x0, 0x8, 0xed3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x297d, 0x3, 0x1, 0x3, 0xfc00, 0x29f, 0x7, 0x8001]}}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xec, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x48, 0x12, 0x0, 0x5, 0x18, 0x1, 0xb, 0x12, 0x1, 0x36, 0xb, 0x5, 0x5, 0x4, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0xb, 0x9, 0x7, 0x7, 0x3, 0xf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf8b6, 0xfff9, 0xffff, 0x0, 0x558, 0x9, 0x9, 0x600]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5882, 0x7fff, 0x0, 0xb3, 0x7, 0x8, 0xf485]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x5, 0x4}, {0x3, 0x6}, {0x6, 0x5}, {0x1, 0x7}, {0x5}, {0x6, 0x4}, {0x0, 0x1}, {0x6, 0x9}, {0x1, 0x8}, {0x3, 0x4}, {0x2, 0x1}, {0x7, 0x2}, {0x1, 0xa}, {0x5, 0xa}, {0x7}, {0x5, 0x7}, {0x4, 0x3}, {}, {0x5, 0xa}, {0x4, 0x9}, {0x1, 0x1}, {0x3, 0xa}, {0x1, 0x3}, {0x1}, {0x2, 0x2}]}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x1, 0x9, 0xfff8, 0x1, 0x8, 0x89ea, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x4, 0x3}, {0x1, 0x8}, {0x1, 0x5}, {0x3, 0x4}, {0x6, 0x2}, {0x1, 0x7}, {0x1, 0x2}, {0x4, 0x6}, {0x2, 0x5}, {0x4, 0x1}, {0x1, 0x2}, {0x0, 0x9}, {0x2, 0x3}, {0x7, 0x7}, {0x5}, {}, {0x3, 0x4}, {0x7, 0x2}, {0x5, 0x4}, {0x5, 0x3}, {0x1, 0x8}, {0x1}, {0x4}, {0x2, 0x2}, {0x7, 0x9}, {0x3}, {0x6, 0x9}, {0x2, 0xa}, {0x2, 0x7}, {0x1, 0xa}, {0x2, 0x9}, {0x0, 0x3}, {0x3}, {0x7, 0x9}, {0x4, 0x7}, {0x5, 0x9}, {0x5, 0x4}, {0x3, 0x3}, {0x3, 0xa}, {0x4, 0xa}, {0x2, 0xa}, {0x7, 0x5}, {0x6, 0xa}]}]}]}]}, 0x93c}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) 718.928686ms ago: executing program 0 (id=136): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x8946, &(0x7f0000000a00)="4749c2368bb8dd2c7f17323cf53a") r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x38, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8f, 0x1, 0xa9, 0x9, 0x5, 0xfffe, 0x2, 0x100]}}]}]}]}, 0x38}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1b00000019000100007f0000000094bc2d"], 0x1c}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r10) sendmsg$NLBL_MGMT_C_ADD(r9, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003480)={&(0x7f0000000000)={0x30, r11, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, ')+@[\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x30}}, 0x0) r12 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x3c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8}, @TCA_CAKE_AUTORATE={0x4, 0x9, 0xff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x9}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x40}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x6c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400a204}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r11, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40814}, 0x4000890) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000680)={0x1f, 0x20, @none}, 0xe) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x22, &(0x7f0000000100)={0x0, 0x989680}) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r14}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010024000000000000000c0000000c0000000200000000514bb26fe5ac79317800000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) r15 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r15, 0x89f0, &(0x7f0000000180)={'pim6reg1\x00', @ifru_names='rose0\x00'}) 495.36887ms ago: executing program 1 (id=137): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000940)={0x38, r0, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @val={0xc, 0x99, {0x7}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x9}]}]}]}, 0x38}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xb) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050027bd7000fedbdf250600000008000300", @ANYRES32=r5, @ANYBLOB="dc90daf366347d9dbcf5522a4bfd80aae8d8b2080005000600885b3bef"], 0x2c}, 0x1, 0x0, 0x0, 0x40048}, 0x0) 274.262212ms ago: executing program 2 (id=138): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="fdffffff", @ANYRES16=r1, @ANYBLOB="01022abd7000000000001b000000180001801400020069703665727370616e30000000000000"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000000)=0xb, 0x4) sendto$unix(r2, &(0x7f0000000240)="0014", 0x2, 0x4040081, 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0) (async) recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r5 = socket$netlink(0x10, 0x3, 0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r5) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x4, 0x70bd27, 0x25dfdbfb}, 0x1c}}, 0x10) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r6, 0x4, 0x70bd27, 0x25dfdbfb}, 0x1c}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$can_bcm(0x1d, 0x2, 0x2) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 0s ago: executing program 4 (id=139): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) pwritev(r3, 0x0, 0x0, 0x4000000, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xf, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd96", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r2, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.239' (ED25519) to the list of known hosts. [ 85.172022][ T5851] cgroup: Unknown subsys name 'net' [ 85.282841][ T5851] cgroup: Unknown subsys name 'cpuset' [ 85.292945][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.121289][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.194176][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.203616][ T5872] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.213731][ T5872] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.221319][ T5872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.231850][ T5878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.240092][ T5878] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.247636][ T5878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.260204][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.271324][ T5872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.278644][ T5873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.279080][ T5872] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.288053][ T5873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.293497][ T5872] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.307424][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.316913][ T5872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.324656][ T5872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.339326][ T5872] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.348239][ T5878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.357563][ T5878] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.365641][ T5878] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.378037][ T5878] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.387659][ T5878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.398151][ T5878] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.402350][ T5883] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.416197][ T5883] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.950471][ T24] cfg80211: failed to load regulatory.db [ 92.041706][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 92.216256][ T5881] chnl_net:caif_netlink_parms(): no params data found [ 92.283759][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 92.335196][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 92.437573][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 92.474280][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.481859][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.490370][ T5866] bridge_slave_0: entered allmulticast mode [ 92.497668][ T5866] bridge_slave_0: entered promiscuous mode [ 92.544730][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.551999][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.562165][ T5866] bridge_slave_1: entered allmulticast mode [ 92.569587][ T5866] bridge_slave_1: entered promiscuous mode [ 92.661920][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.669282][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.676582][ T5881] bridge_slave_0: entered allmulticast mode [ 92.685354][ T5881] bridge_slave_0: entered promiscuous mode [ 92.699038][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.706206][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.713632][ T5877] bridge_slave_0: entered allmulticast mode [ 92.721896][ T5877] bridge_slave_0: entered promiscuous mode [ 92.755690][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.762957][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.770428][ T5881] bridge_slave_1: entered allmulticast mode [ 92.777582][ T5881] bridge_slave_1: entered promiscuous mode [ 92.805494][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.812719][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.820374][ T5877] bridge_slave_1: entered allmulticast mode [ 92.827608][ T5877] bridge_slave_1: entered promiscuous mode [ 92.837997][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.851942][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.926196][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.933701][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.942189][ T5874] bridge_slave_0: entered allmulticast mode [ 92.950393][ T5874] bridge_slave_0: entered promiscuous mode [ 92.961118][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.974746][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.014617][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.038166][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.045748][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.053952][ T5874] bridge_slave_1: entered allmulticast mode [ 93.061757][ T5874] bridge_slave_1: entered promiscuous mode [ 93.096743][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.104181][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.112193][ T5870] bridge_slave_0: entered allmulticast mode [ 93.120032][ T5870] bridge_slave_0: entered promiscuous mode [ 93.131236][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.156709][ T5866] team0: Port device team_slave_0 added [ 93.194929][ T5881] team0: Port device team_slave_0 added [ 93.201115][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.208789][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.216446][ T5870] bridge_slave_1: entered allmulticast mode [ 93.224191][ T5870] bridge_slave_1: entered promiscuous mode [ 93.246336][ T5866] team0: Port device team_slave_1 added [ 93.268812][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.281251][ T5881] team0: Port device team_slave_1 added [ 93.319221][ T5877] team0: Port device team_slave_0 added [ 93.340342][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.366036][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.377541][ T5877] team0: Port device team_slave_1 added [ 93.384755][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.392142][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.418672][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.432620][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.439853][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.460004][ T51] Bluetooth: hci1: command tx timeout [ 93.466141][ T5883] Bluetooth: hci0: command tx timeout [ 93.471801][ T5876] Bluetooth: hci3: command tx timeout [ 93.478931][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.521974][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.539161][ T5876] Bluetooth: hci4: command tx timeout [ 93.539169][ T5883] Bluetooth: hci2: command tx timeout [ 93.576679][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.583800][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.610195][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.650735][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.657712][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.683914][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.696582][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.703605][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.729529][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.742839][ T5874] team0: Port device team_slave_0 added [ 93.756197][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.763516][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.790051][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.827809][ T5874] team0: Port device team_slave_1 added [ 93.857777][ T5870] team0: Port device team_slave_0 added [ 93.866845][ T5870] team0: Port device team_slave_1 added [ 93.949669][ T5866] hsr_slave_0: entered promiscuous mode [ 93.956182][ T5866] hsr_slave_1: entered promiscuous mode [ 93.964681][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.972220][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.998298][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.014752][ T5877] hsr_slave_0: entered promiscuous mode [ 94.021556][ T5877] hsr_slave_1: entered promiscuous mode [ 94.027719][ T5877] debugfs: 'hsr0' already exists in 'hsr' [ 94.033586][ T5877] Cannot create hsr debugfs directory [ 94.081273][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.088334][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.114380][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.128379][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.135476][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.161502][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.232704][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.242251][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.268750][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.299991][ T5881] hsr_slave_0: entered promiscuous mode [ 94.306441][ T5881] hsr_slave_1: entered promiscuous mode [ 94.313159][ T5881] debugfs: 'hsr0' already exists in 'hsr' [ 94.318979][ T5881] Cannot create hsr debugfs directory [ 94.486051][ T5874] hsr_slave_0: entered promiscuous mode [ 94.493925][ T5874] hsr_slave_1: entered promiscuous mode [ 94.500604][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 94.506380][ T5874] Cannot create hsr debugfs directory [ 94.571785][ T5870] hsr_slave_0: entered promiscuous mode [ 94.578220][ T5870] hsr_slave_1: entered promiscuous mode [ 94.587083][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 94.592965][ T5870] Cannot create hsr debugfs directory [ 94.945499][ T5877] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.957679][ T5877] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.003834][ T5877] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.038133][ T5877] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.113500][ T5866] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.143262][ T5866] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.155278][ T5866] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.180644][ T5866] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.248728][ T5881] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.272665][ T5881] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.284657][ T5881] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.297424][ T5881] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.368163][ T5874] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.385664][ T5874] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.404834][ T5874] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.416396][ T5874] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.519847][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.539701][ T5876] Bluetooth: hci3: command tx timeout [ 95.545233][ T5876] Bluetooth: hci1: command tx timeout [ 95.550654][ T5883] Bluetooth: hci0: command tx timeout [ 95.588033][ T5870] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.602074][ T5870] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.613440][ T5870] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.620449][ T5876] Bluetooth: hci4: command tx timeout [ 95.620497][ T5876] Bluetooth: hci2: command tx timeout [ 95.635604][ T5870] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.672928][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.702663][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.710064][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.738061][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.745201][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.902994][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.948199][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.962846][ T5881] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.996119][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.003299][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.030630][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.073794][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.122724][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.145146][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.152311][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.175357][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.192659][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.199937][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.216942][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.224111][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.254231][ T1039] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.261378][ T1039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.290094][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.297226][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.313797][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.340518][ T1039] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.347823][ T1039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.382539][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.394516][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.401813][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.449787][ T5881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.537764][ T5866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.565794][ T5874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.647277][ T5870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.688833][ T5877] veth0_vlan: entered promiscuous mode [ 96.724774][ T5877] veth1_vlan: entered promiscuous mode [ 96.856899][ T5877] veth0_macvtap: entered promiscuous mode [ 96.885267][ T5877] veth1_macvtap: entered promiscuous mode [ 96.992071][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.048112][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.078367][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.133239][ T3509] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.146687][ T3509] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.171649][ T3509] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.185240][ T3509] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.237856][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.295613][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.311954][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.445945][ T5881] veth0_vlan: entered promiscuous mode [ 97.513183][ T3587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.541633][ T5874] veth0_vlan: entered promiscuous mode [ 97.543729][ T3587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.553473][ T5881] veth1_vlan: entered promiscuous mode [ 97.575623][ T5866] veth0_vlan: entered promiscuous mode [ 97.621237][ T51] Bluetooth: hci1: command tx timeout [ 97.624795][ T5874] veth1_vlan: entered promiscuous mode [ 97.626743][ T51] Bluetooth: hci0: command tx timeout [ 97.638580][ T5876] Bluetooth: hci3: command tx timeout [ 97.654510][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.677454][ T5866] veth1_vlan: entered promiscuous mode [ 97.687374][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.699570][ T51] Bluetooth: hci2: command tx timeout [ 97.705097][ T51] Bluetooth: hci4: command tx timeout [ 97.765512][ T5881] veth0_macvtap: entered promiscuous mode [ 97.805641][ T5881] veth1_macvtap: entered promiscuous mode [ 97.862734][ T5877] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.888376][ T5874] veth0_macvtap: entered promiscuous mode [ 97.901311][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.952728][ T5874] veth1_macvtap: entered promiscuous mode [ 97.993689][ T5866] veth0_macvtap: entered promiscuous mode [ 98.019600][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.032562][ T5981] tipc: Started in network mode [ 98.037586][ T5981] tipc: Node identity 0e37c1786641, cluster identity 4711 [ 98.049870][ T5981] tipc: Enabled bearer , priority 0 [ 98.063850][ T5866] veth1_macvtap: entered promiscuous mode [ 98.079070][ T5981] syzkaller0: entered promiscuous mode [ 98.084595][ T5981] syzkaller0: entered allmulticast mode [ 98.099029][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.131025][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.138454][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.147671][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.182771][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.190378][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.202002][ T5870] veth0_vlan: entered promiscuous mode [ 98.214929][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.236970][ T5870] veth1_vlan: entered promiscuous mode [ 98.248619][ T5982] tipc: Resetting bearer [ 98.258709][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.272724][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.285640][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.307920][ T5980] tipc: Resetting bearer [ 98.320779][ T5980] tipc: Disabling bearer [ 98.336202][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.353241][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.375720][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.468947][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.485226][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.495375][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.517363][ T5984] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 98.536625][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.546252][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.597723][ T5870] veth0_macvtap: entered promiscuous mode [ 98.617206][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 98.737634][ T5870] veth1_macvtap: entered promiscuous mode [ 98.768057][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.799028][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.811072][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.850661][ T3587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.859050][ T3587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.864035][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.924721][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.002370][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.041887][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.068380][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.120589][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.132068][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.144504][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.157055][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.204381][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.310573][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.402477][ T5995] team0: Device macvtap1 is already an upper device of the team interface [ 99.595046][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.621921][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.640505][ T6001] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.681012][ T6002] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.700387][ T51] Bluetooth: hci1: command tx timeout [ 99.707793][ T5876] Bluetooth: hci0: command tx timeout [ 99.707841][ T5883] Bluetooth: hci3: command tx timeout [ 99.734604][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.736437][ T6002] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.754880][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.787109][ T5883] Bluetooth: hci4: command tx timeout [ 99.787150][ T51] Bluetooth: hci2: command tx timeout [ 100.512665][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 100.569065][ T6010] gretap0: entered promiscuous mode [ 100.644081][ T6010] gretap0: left promiscuous mode [ 100.697717][ T6018] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 100.765431][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'. [ 101.480200][ T6030] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13'. [ 102.593548][ T6043] Bluetooth: MGMT ver 1.23 [ 103.500658][ T6055] Zero length message leads to an empty skb [ 103.729900][ T6060] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 104.134532][ T6076] syz.4.25 uses obsolete (PF_INET,SOCK_PACKET) [ 104.161328][ T6076] netlink: 'syz.4.25': attribute type 2 has an invalid length. [ 104.280138][ T6060] netlink: 'syz.1.21': attribute type 21 has an invalid length. [ 104.329014][ T6060] netlink: 128 bytes leftover after parsing attributes in process `syz.1.21'. [ 104.338035][ T6060] netlink: 'syz.1.21': attribute type 5 has an invalid length. [ 104.389654][ T6060] netlink: 'syz.1.21': attribute type 6 has an invalid length. [ 104.397357][ T6060] netlink: 3 bytes leftover after parsing attributes in process `syz.1.21'. [ 104.507836][ T6080] netlink: 36 bytes leftover after parsing attributes in process `syz.4.26'. [ 105.393145][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'. [ 105.522024][ T6083] syz.4.27 (6083) used greatest stack depth: 16672 bytes left [ 105.571001][ T6097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'. [ 106.421474][ T6125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.34'. [ 106.709898][ T6104] mpoa:mpoad_close: () going down [ 106.920892][ T6163] netlink: 'syz.1.36': attribute type 2 has an invalid length. [ 107.125178][ T6169] pimreg: entered allmulticast mode [ 107.173410][ T6169] netlink: 'syz.4.37': attribute type 2 has an invalid length. [ 107.181916][ T6169] netlink: 164 bytes leftover after parsing attributes in process `syz.4.37'. [ 107.496964][ T6179] syzkaller1: entered promiscuous mode [ 107.519510][ T6179] syzkaller1: entered allmulticast mode [ 107.823827][ T6196] geneve2: entered promiscuous mode [ 107.833905][ T6196] geneve2: entered allmulticast mode [ 108.129598][ T6207] netlink: 'syz.4.49': attribute type 1 has an invalid length. [ 108.137348][ T6207] netlink: 120 bytes leftover after parsing attributes in process `syz.4.49'. [ 108.173731][ T6208] Bluetooth: MGMT ver 1.23 [ 108.221281][ T6203] netlink: 'syz.3.47': attribute type 10 has an invalid length. [ 108.244071][ T6207] netlink: 136 bytes leftover after parsing attributes in process `syz.4.49'. [ 108.293330][ T6203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.343898][ T6203] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 108.405917][ T6207] netlink: 19 bytes leftover after parsing attributes in process `syz.4.49'. [ 108.427754][ T6203] netlink: 'syz.3.47': attribute type 7 has an invalid length. [ 108.446976][ T6203] netlink: 'syz.3.47': attribute type 8 has an invalid length. [ 108.682145][ T6203] syz_tun: entered promiscuous mode [ 108.698518][ T6203] syz_tun: left promiscuous mode [ 108.740755][ T6213] batadv0: entered promiscuous mode [ 108.746510][ T6213] batadv0: entered allmulticast mode [ 108.761830][ T6213] bond0: (slave batadv0): Releasing backup interface [ 108.774119][ T6213] bridge0: port 3(batadv0) entered blocking state [ 108.781754][ T6213] bridge0: port 3(batadv0) entered disabled state [ 109.233467][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 109.243159][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 109.835477][ T6253] vlan2: entered promiscuous mode [ 109.854571][ T6253] macvtap0: entered promiscuous mode [ 110.311122][ T6275] tipc: Enabling of bearer rejected, failed to enable media [ 110.914992][ T6294] vlan2: entered allmulticast mode [ 111.113514][ T6305] __nla_validate_parse: 5 callbacks suppressed [ 111.113533][ T6305] netlink: 36 bytes leftover after parsing attributes in process `syz.0.71'. [ 111.304633][ T6303] IPv6: addrconf: prefix option has invalid lifetime [ 111.420882][ T6316] validate_nla: 1 callbacks suppressed [ 111.420899][ T6316] netlink: 'syz.1.74': attribute type 2 has an invalid length. [ 111.543107][ T6316] þ: entered promiscuous mode [ 111.755416][ T6326] netlink: 108 bytes leftover after parsing attributes in process `syz.0.77'. [ 111.795682][ T6326] netlink: 108 bytes leftover after parsing attributes in process `syz.0.77'. [ 111.907139][ T6332] pim6reg1: entered promiscuous mode [ 111.946989][ T6332] pim6reg1: entered allmulticast mode [ 111.977400][ T6335] netlink: 132 bytes leftover after parsing attributes in process `syz.0.77'. [ 112.710378][ T6355] netlink: 16 bytes leftover after parsing attributes in process `syz.3.84'. [ 112.848079][ T6355] bond0: entered promiscuous mode [ 112.880257][ T6355] bond_slave_0: entered promiscuous mode [ 112.887603][ T6355] bond_slave_1: entered promiscuous mode [ 112.911350][ T6355] bond0: left promiscuous mode [ 112.920878][ T6355] bond_slave_0: left promiscuous mode [ 112.944771][ T6355] bond_slave_1: left promiscuous mode [ 113.109602][ T6367] netlink: 16 bytes leftover after parsing attributes in process `syz.2.88'. [ 113.196694][ T6369] geneve2: entered promiscuous mode [ 113.216096][ T6371] netlink: 24 bytes leftover after parsing attributes in process `syz.4.89'. [ 113.242131][ T6369] geneve2: entered allmulticast mode [ 113.259935][ T6371] netlink: 84 bytes leftover after parsing attributes in process `syz.4.89'. [ 113.285366][ T6371] netlink: 'syz.4.89': attribute type 4 has an invalid length. [ 113.548686][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'. [ 114.188545][ T6398] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.197436][ T6398] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.423534][ T30] audit: type=1800 audit(1757635793.786:2): pid=6408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.99" name="memory.events" dev="tmpfs" ino=137 res=0 errno=0 [ 114.528101][ T6411] raw_sendmsg: syz.2.99 forgot to set AF_INET. Fix it! [ 114.598806][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.626427][ T6398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.098996][ T6155] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.174158][ T6155] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.278590][ T3549] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.368098][ T6438] netlink: 'syz.1.102': attribute type 2 has an invalid length. [ 115.401497][ T6438] netlink: 132 bytes leftover after parsing attributes in process `syz.1.102'. [ 115.545400][ T3549] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.583471][ T6443] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 115.616108][ T6443] macvtap1: entered allmulticast mode [ 115.639029][ T6443] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 115.678248][ T6443] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 115.712707][ T6443] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 117.271522][ T6513] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 117.283565][ T6513] macvtap1: entered allmulticast mode [ 117.292509][ T6513] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 117.355591][ T6513] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 117.367439][ T6513] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 117.621253][ T6525] FAULT_INJECTION: forcing a failure. [ 117.621253][ T6525] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 117.694222][ T6525] CPU: 1 UID: 0 PID: 6525 Comm: syz.2.121 Not tainted syzkaller #0 PREEMPT(full) [ 117.694249][ T6525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 117.694269][ T6525] Call Trace: [ 117.694277][ T6525] [ 117.694285][ T6525] dump_stack_lvl+0x189/0x250 [ 117.694323][ T6525] ? __pfx____ratelimit+0x10/0x10 [ 117.694345][ T6525] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.694369][ T6525] ? __pfx__printk+0x10/0x10 [ 117.694398][ T6525] ? __might_fault+0xb0/0x130 [ 117.694438][ T6525] should_fail_ex+0x414/0x560 [ 117.694472][ T6525] _copy_from_user+0x2d/0xb0 [ 117.694497][ T6525] __sys_sendto+0x25c/0x520 [ 117.694522][ T6525] ? __pfx___sys_sendto+0x10/0x10 [ 117.694541][ T6525] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 117.694579][ T6525] ? __fget_files+0x3a0/0x420 [ 117.694609][ T6525] ? ksys_write+0x22a/0x250 [ 117.694638][ T6525] ? __pfx_ksys_write+0x10/0x10 [ 117.694662][ T6525] ? rcu_is_watching+0x15/0xb0 [ 117.694698][ T6525] __x64_sys_sendto+0xde/0x100 [ 117.694724][ T6525] do_syscall_64+0xfa/0x3b0 [ 117.694745][ T6525] ? lockdep_hardirqs_on+0x9c/0x150 [ 117.694766][ T6525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.694786][ T6525] ? clear_bhb_loop+0x60/0xb0 [ 117.694810][ T6525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.694830][ T6525] RIP: 0033:0x7febf4b8eba9 [ 117.694856][ T6525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.694872][ T6525] RSP: 002b:00007febf5a45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 117.694897][ T6525] RAX: ffffffffffffffda RBX: 00007febf4dd5fa0 RCX: 00007febf4b8eba9 [ 117.694911][ T6525] RDX: ffffffffffffff58 RSI: 0000200000000140 RDI: 0000000000000004 [ 117.694924][ T6525] RBP: 00007febf5a45090 R08: 0000200000000100 R09: 0000000000000010 [ 117.694937][ T6525] R10: 0000000020008005 R11: 0000000000000246 R12: 0000000000000001 [ 117.694950][ T6525] R13: 00007febf4dd6038 R14: 00007febf4dd5fa0 R15: 00007ffdcfd07138 [ 117.694982][ T6525] [ 118.007372][ T6533] __nla_validate_parse: 1 callbacks suppressed [ 118.007391][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.124'. [ 118.167207][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.123'. [ 118.277422][ T6545] sctp: [Deprecated]: syz.0.128 (pid 6545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.277422][ T6545] Use struct sctp_sack_info instead [ 118.302633][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.128'. [ 118.302996][ T6547] netlink: 'syz.2.127': attribute type 16 has an invalid length. [ 118.323860][ T6547] netlink: 'syz.2.127': attribute type 17 has an invalid length. [ 118.421755][ T6554] IPv6: NLM_F_REPLACE set, but no existing node found! [ 118.548233][ T6557] netlink: 20 bytes leftover after parsing attributes in process `syz.3.124'. [ 118.681044][ T6544] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 118.776130][ T6547] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.783908][ T6547] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.906099][ T6547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.922258][ T6547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.087660][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.127'. [ 119.253118][ T6151] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.270967][ T6560] netlink: 52 bytes leftover after parsing attributes in process `syz.0.129'. [ 119.281124][ T6151] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.295856][ T6151] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.322534][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'. [ 119.331622][ T6562] netlink: 40 bytes leftover after parsing attributes in process `syz.2.130'. [ 119.340621][ T6151] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.428538][ T6562] geneve2: entered promiscuous mode [ 119.493059][ T6562] geneve2: entered allmulticast mode [ 119.535842][ T6151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.597977][ T6151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.674650][ T6151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.689495][ T6151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.721749][ T6581] netlink: 232 bytes leftover after parsing attributes in process `syz.1.135'. [ 119.735699][ T6574] tipc: Started in network mode [ 119.744532][ T6574] tipc: Node identity 12de86276ad, cluster identity 4711 [ 119.752126][ T6574] tipc: Enabled bearer , priority 0 [ 119.791275][ T6574] syzkaller0: entered promiscuous mode [ 119.797304][ T6574] syzkaller0: entered allmulticast mode [ 119.886925][ T6584] netlink: 'syz.0.136': attribute type 9 has an invalid length. [ 119.911188][ T6571] tipc: Resetting bearer [ 119.922158][ T6584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.136'. [ 119.969876][ T6571] tipc: Disabling bearer [ 121.236406][ T6151] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.276494][ T6433] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 121.288424][ T6433] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 121.296835][ T6433] CPU: 0 UID: 0 PID: 6433 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 121.306292][ T6433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 121.316354][ T6433] RIP: 0010:klist_del+0x49/0x110 [ 121.321296][ T6433] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 b9 6b b2 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 9b 6b b2 f6 4d 8b 7e 58 4c 89 f7 e8 5f 74 [ 121.340931][ T6433] RSP: 0018:ffffc9000b4a7768 EFLAGS: 00010202 [ 121.347009][ T6433] RAX: 000000000000000b RBX: ffff88802f72ac60 RCX: ffff88802cb2da00 [ 121.354987][ T6433] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 121.362990][ T6433] RBP: ffffc9000b4a7890 R08: ffff8880599eec33 R09: 1ffff1100b33dd86 [ 121.370966][ T6433] R10: dffffc0000000000 R11: ffffed100b33dd87 R12: dffffc0000000000 [ 121.378941][ T6433] R13: 1ffff11005ee558c R14: 0000000000000000 R15: ffff888028eda750 [ 121.386920][ T6433] FS: 0000000000000000(0000) GS:ffff888125c14000(0000) knlGS:0000000000000000 [ 121.395845][ T6433] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.402427][ T6433] CR2: 00005586f88b4000 CR3: 00000000779dc000 CR4: 00000000003526f0 [ 121.410404][ T6433] Call Trace: [ 121.413702][ T6433] [ 121.416639][ T6433] device_del+0x280/0x8e0 [ 121.420993][ T6433] ? _raw_spin_unlock_irq+0x2e/0x50 [ 121.426187][ T6433] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 121.432336][ T6433] ? __pfx_device_del+0x10/0x10 [ 121.437191][ T6433] ? netdev_unregister_kobject+0x344/0x450 [ 121.443006][ T6433] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 121.449444][ T6433] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 121.456263][ T6433] ? rtnl_net_dev_lock+0x257/0x2f0 [ 121.461400][ T6433] unregister_netdevice_queue+0x33c/0x380 [ 121.467231][ T6433] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 121.473492][ T6433] ? rtnl_net_dev_lock+0x36/0x2f0 [ 121.478515][ T6433] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 121.483623][ T6433] unregister_netdev+0x1f/0x60 [ 121.488401][ T6433] bnep_session+0x294d/0x2b40 [ 121.493082][ T6433] ? rcu_is_watching+0x15/0xb0 [ 121.497846][ T6433] ? trace_sched_exit_tp+0x36/0x110 [ 121.503049][ T6433] ? __lock_acquire+0xab9/0xd20 [ 121.507907][ T6433] ? __pfx_bnep_session+0x10/0x10 [ 121.512953][ T6433] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 121.518847][ T6433] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 121.525182][ T6433] ? __pfx_woken_wake_function+0x10/0x10 [ 121.530819][ T6433] ? __kthread_parkme+0x7b/0x200 [ 121.535757][ T6433] ? __kthread_parkme+0x1a1/0x200 [ 121.540780][ T6433] kthread+0x70e/0x8a0 [ 121.544849][ T6433] ? __pfx_bnep_session+0x10/0x10 [ 121.549874][ T6433] ? __pfx_kthread+0x10/0x10 [ 121.554480][ T6433] ? _raw_spin_unlock_irq+0x23/0x50 [ 121.559666][ T6433] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.564873][ T6433] ? __pfx_kthread+0x10/0x10 [ 121.569470][ T6433] ret_from_fork+0x3fc/0x770 [ 121.574073][ T6433] ? __pfx_ret_from_fork+0x10/0x10 [ 121.579199][ T6433] ? __switch_to_asm+0x39/0x70 [ 121.583958][ T6433] ? __switch_to_asm+0x33/0x70 [ 121.588717][ T6433] ? __pfx_kthread+0x10/0x10 [ 121.593305][ T6433] ret_from_fork_asm+0x1a/0x30 [ 121.598083][ T6433] [ 121.601093][ T6433] Modules linked in: [ 121.606075][ T6433] ---[ end trace 0000000000000000 ]--- [ 121.613685][ T6433] RIP: 0010:klist_del+0x49/0x110 [ 121.620669][ T6433] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 b9 6b b2 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 9b 6b b2 f6 4d 8b 7e 58 4c 89 f7 e8 5f 74 [ 121.640512][ T6433] RSP: 0018:ffffc9000b4a7768 EFLAGS: 00010202 [ 121.646648][ T6433] RAX: 000000000000000b RBX: ffff88802f72ac60 RCX: ffff88802cb2da00 [ 121.654888][ T6433] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 121.663189][ T6433] RBP: ffffc9000b4a7890 R08: ffff8880599eec33 R09: 1ffff1100b33dd86 [ 121.673602][ T6433] R10: dffffc0000000000 R11: ffffed100b33dd87 R12: dffffc0000000000 [ 121.682591][ T6433] R13: 1ffff11005ee558c R14: 0000000000000000 R15: ffff888028eda750 [ 121.692184][ T6433] FS: 0000000000000000(0000) GS:ffff888125d14000(0000) knlGS:0000000000000000 [ 121.702125][ T6433] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.708779][ T6433] CR2: 00007febf5907d60 CR3: 0000000050b9e000 CR4: 00000000003526f0 [ 121.717601][ T6433] Kernel panic - not syncing: Fatal exception [ 121.724009][ T6433] Kernel Offset: disabled [ 121.728332][ T6433] Rebooting in 86400 seconds..