last executing test programs: 4m45.133734262s ago: executing program 32 (id=12254): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) r1 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$packet(r1, 0x0, 0x0, 0x40000022, 0x0, 0x0) 4m10.617735781s ago: executing program 5 (id=12521): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x10) bind$can_raw(r0, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000240), 0x4) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x82}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@newsa={0x140, 0x10, 0x1, 0x7fffffc, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast2, 0x4, 0x6c}, @in6=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x5, 0x4, 0xd, 0xa}, {0x0, 0x400}, 0xfffffffc, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x140}}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@private}}, &(0x7f00000001c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x20}, @in=@empty, 0x4e23, 0x4, 0x4e21, 0x7, 0xa, 0x60, 0x20, 0x87, 0x0, r7}, {0x80000000, 0x7, 0xfffffffffffffffb, 0x7, 0x9, 0x7, 0x8, 0xb}, {0x0, 0x100, 0x100, 0x6a}, 0x400, 0x6e6bb9, 0x1, 0x1, 0x1, 0x2}, {{@in6=@mcast1, 0x4d4, 0x3c}, 0xa, @in=@remote, 0x3500, 0xbf0a59c5fd157c33, 0x1, 0x5, 0xff80, 0x8, 0x9}}, 0xe8) unshare(0x6a040000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000300000000000004000000080002000500000006000b0002"], 0x24}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4a, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x12) socket$kcm(0x29, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r10) 4m9.838002672s ago: executing program 2 (id=12529): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc010000190001000000001010000000ac1414bb000002003c00000000000000ac1414bb00000000000000000000000000000000ffff00000a0080000000ff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000009000000000000000800000000000000fcffffffffffffff0000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000010000030000000004010500ac1414aa000000000000000000000000fffffffe3200000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000002b"], 0x1bc}}, 0x0) 4m9.589854285s ago: executing program 2 (id=12533): r0 = socket(0x2, 0x80805, 0x0) close(0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg$inet(r1, &(0x7f00000025c0)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000c00)}}], 0x2, 0x2000c044) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 4m9.462698722s ago: executing program 2 (id=12536): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x54}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000040)=r0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r3, 0x36, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) 4m9.321264351s ago: executing program 2 (id=12537): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x700, 0x0, [@sadb_key={0x5, 0x9, 0xe0, 0x0, "01d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac55"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x78}, 0x1, 0x7}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x6a040000) unshare(0x40000200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x11, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0xd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x18f}}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x4, 0x10, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000440)=[{0x0, 0x2, 0xb}, {0x3, 0x1, 0x5, 0xa}, {0x4, 0x3, 0x6, 0x8}, {0x5, 0x1, 0xf, 0x9}], 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r3, 0x0, 0x10000}, 0x18) (async) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60}) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 64) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) sendmmsg$inet6(r6, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000004000)="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", 0xd11}, {&(0x7f0000000580)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503053b17ee560409202f4c5f0de32b0e53e4d26d04c825d9b91d5be30b532a2fb95030c6be2a14cc1ecf6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e83db76b7a7e9e9fd24a58e90a393b98403a52ade51a3ac6462964131df9c8e3c0f12071ab20b15d043fb0e68e998c831a050bfa0e19", 0xcd}, {&(0x7f00000000c0)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c", 0x25}, {&(0x7f0000000740)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d46f0ffae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000d40)="0b0ec2a1e3fc84788994f461fec29e0fe5be85ea822a7348bdc6a57f68a85a2284ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cfe5837f55a88e130609528b8aff64359e76eee93584aad3f751172", 0xa5}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9e", 0x5f}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f4", 0x53}], 0x7}}], 0x1, 0x8800) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) (async, rerun: 64) ioctl$TUNGETVNETBE(r5, 0x800454df, &(0x7f0000000640)=0x1) (async, rerun: 64) bind$inet(r4, &(0x7f0000000580)={0x2, 0x4e23, @loopback}, 0x10) sendmsg(r4, 0x0, 0x40080) socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa02, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x94) 4m7.609955457s ago: executing program 0 (id=12543): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x4}}}}}, 0x0) 4m7.497616066s ago: executing program 0 (id=12544): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x8, 0xfa, &(0x7f00000007c0)=""/250}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r9, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000400)="274f49d7dcc3a2fefb972f34cef2651de6929970cd972f9660127d3869a4796cc9b330fb91fdf7dcdd343c324dec1d4d5fc28383cd3012e19b2394fe11989c3ead6620072c03b0deffbef8bfd7428e0aaa5855032e3b401e97a8eb5610c4fa5cc0", 0x61}, {&(0x7f0000000640)="6f0ed9abb789e1364b5d8a38cbf9e2c1a51ea99db9809fcfe9fda1f93ccdaf0c6f511d318c0ca5d88d86406c6d5e5f2809a90066f9793d69d45a68501b1406211e6b7fac044e50fc87ab67d7e051688517f5f682f080a0752e883ac1efda7302685718647d13cfc6b5fdb459efe245b08ed9bb1b988c1759926bad589c81d09f586cb16c70db82e24782a4d93c7a8a6920dc8b36487cb286bd15aa2e3e622c96b9010bcf9cd83ca50229ed1434a78f34886ffc750b3e8f29d5334f3b0c06e2eb219b9de5a181ab4ff88a538029a67526c3aad8b7321d5f50468afa43", 0xdc}], 0x2}}, {{0x0, 0xffffffffffffffe6, &(0x7f0000000380)=[{&(0x7f0000000740)="54b465d7649ada6634af960bdf592d7f3a953ba4a1450c81a9ad47e41750ca2d23483f969df7cfc5b61d6b549a6be8c82f6433fbcc4db2f54e14282fd0ce03099f3c3a27aeaeba7f06ea13a63f8fc27c5004b0fd4e10730d4602229c9bdf508a55dff314215e8b4296ea4e2098", 0x6d}, {&(0x7f00000008c0)="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", 0xff}, {&(0x7f00000009c0)="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", 0xfe}, {&(0x7f0000000ac0)="9eb5e211492bff836f76950343b762946841f4ac10056e1a6697786f9d19e96599783a062693f153162bc2da89444fc66cb1548489a06e000fa81d09ebf3134ccdb9f27d39e0a219cce0d9b43868325373414d703c0f2fd35e67c262e706e7b62101f39c830cfe0fd8ea0ee31b71c906f384d318ad3985b9ae5f28997b30c95ac950e0d7a662fcb5249cf66a413a6b7a59d98451e38aa0a23b17cfb5db31a43770e4b8a4058d40dc75286f25bb2aeb08f66c21", 0xb3}], 0x52, &(0x7f0000000b80)=[{0x60, 0x84, 0x9, "bdec2aa410557a7a5eee00b09fe079d68386b8f76a592676792f81cb836111ad81d1676a6b471cb582cfd20714ecf6cf96636947a2183a82944c62c827ee0dfbe005b74f3a04a231608c"}, {0x98, 0x110, 0x2, "72b7361ef7f6907a7dda94aab1313c7a54d500fefa3e1501bb50ae52e33a5b372c9d50170ca77f4d1688ffb3fc4eb0f6ab8ad252e8be85faf083225d597034d838c7e3a3ff48d737337c785a9b357301da5b6305d6771951d3113e32d87265a7535ccdaad416f8ba2fcca0f8078973070a9f143bfa16fbcaaf72d93943be572394fd3f4e"}, {0x48, 0x103, 0xfffffffa, "974f735b9f1eeba8569f58e50e3e6107fbb2ea80fe24c1bb12168d1ef08e39ebde5b74bcc3fca500bf2e50b98273bcc846f8"}, {0x98, 0x104, 0x7, "11cb84e7729cb5d740df96b895de0494a5313787bb293e5502b4b0c534727c997f7e55f8f1afddde1d4ea0a6b9e326ee4fc1aec07018d027b82be263f7aeeb6dcc164442e7a3a491846c5df89f5b924b1d40a2967159c900916e1435d7c4adfc810691673a448391d88640418ae84c5c13607cf7736f94ffd21463f53cae8f39046fa29b345b"}], 0x1d8}}], 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d412000000000000002900000003000000", 0xeb0e7a7d4c6f0553) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r11, 0x21eae}}, 0x20}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r12, 0x0, 0x0) 4m7.251789132s ago: executing program 0 (id=12545): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x21000000, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12) 4m7.142132575s ago: executing program 0 (id=12546): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1014}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000780)=""/231, 0xe7}], 0x5}}, {{&(0x7f0000000580)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000880)=""/183, 0xb7}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000003d80)=""/4096, 0x1000}], 0x3, &(0x7f0000000080)}, 0xa}, {{&(0x7f0000000a00)=@phonet, 0x80, &(0x7f0000000180)=[{&(0x7f0000004d80)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/160, 0xa0}], 0x2}, 0x7}], 0x3, 0x2060, 0x0) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) unshare(0x62040200) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700), 0x0, 0x0, 0x0) mmap(&(0x7f00004cd000/0x4000)=nil, 0x4000, 0x1000005, 0x4010, 0xffffffffffffffff, 0xc4cec000) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14900a000000000000000016000000fe21b80000000a000000"], 0x14}}, 0x14080) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x21, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000200)={0x7, 0x100000001, 0x80000000, 0x3, 0x100, 0x80000000, 0x7, 0x7}, &(0x7f0000000280)={0x8, 0x0, 0x800, 0x40, 0x4, 0xffffffffffffff7f, 0x8000000000000001, 0x3}, &(0x7f00000002c0)={0xf, 0x6, 0x4, 0xd3, 0x8, 0xffffffffffffff1b, 0x7, 0x1}, &(0x7f0000000400)={r6, r7+60000000}, &(0x7f0000000480)={&(0x7f0000000440)={[0x6]}, 0x8}) 4m4.39950643s ago: executing program 4 (id=12553): syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) shutdown(0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) writev(r2, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x2) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet(0x2b, 0x801, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x80, @local}, 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xe, 0xf, &(0x7f0000000340)=ANY=[@ANYRES16=r3, @ANYRES32=r5, @ANYBLOB="0000000000000000b7a6000014000000b7030000000000008500000055090100000000009500000800000000bf91004758000000b70200000069000000b7000000000000009500"/82], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'netdevsim0\x00'}) 4m3.61767961s ago: executing program 5 (id=12558): socket$kcm(0x10, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r3}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x1000000}}}}]}]}, 0x68}}, 0x0) 4m3.291711312s ago: executing program 4 (id=12559): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0xa, 0x4e23, 0x80000, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1c0}, 0x4044051) 4m3.286914117s ago: executing program 5 (id=12560): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x11}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000002680)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002640)={&(0x7f0000001240)={0xac, 0x0, 0xd, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x30000000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x66}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x4004) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x20000400) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmmsg$alg(r4, &(0x7f0000001140), 0x0, 0x4044000) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x58, &(0x7f00000002c0)}, 0x10) sendmsg$nl_route(r0, 0x0, 0x4000000) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) 4m3.103766882s ago: executing program 4 (id=12562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x5c, 0x30, 0x200, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x10000080) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x10ca4}, @TCA_FLOW_XOR={0x8, 0x7, 0x40}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x3, 0xffe0}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 4m2.923269572s ago: executing program 5 (id=12563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x894}, 0x8081) r1 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000100)=[{r1, 0x84}], 0x1, 0x3ff) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048c10}, 0x24048151) r4 = socket(0x2b, 0x80801, 0x1) sendmmsg(r4, 0x0, 0x0, 0x20000090) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x1}}}, 0x24}}, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) close(0x3) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x48}}, 0x0) sendmsg$can_raw(r7, &(0x7f00000002c0)={&(0x7f0000000140), 0x10, &(0x7f0000000280)={&(0x7f0000000240)=@can={{0x2, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "c58b8d224bef9eea"}, 0x10}, 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x5) connect$netrom(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x1) socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000006, 0x4ca31, 0xffffffffffffffff, 0xd1d1d000) listen(r1, 0xda90) accept4(r1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4m2.64041099s ago: executing program 4 (id=12565): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x4}}}}}, 0x0) 4m2.448411636s ago: executing program 4 (id=12566): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$kcm(0xa, 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c0001800600060065580000100002800c001780080014800400", @ANYRES64=r0], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) 4m2.26160273s ago: executing program 2 (id=12567): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffff080000001330d54400009b84136ef75afb83ed066a5900e1baac968300000000f2ff0000010000000ec28cf1aa7951ed07a0941cd1f3a376ac23fbe20f7f4d215c01e84228b2f34ad7ad311c56f5078059a5fe01a3180be51fd788761abafa7fd3953a9c82e91babcf77ae224e5c1b554706e2dfca28d42a9cfa81a2248a65458cefa9a3eaece4ef4b03ee7ddb1559f88a0add277eed63ffa5ba680f9b9cd7b5e463e42d2142ddad21ab16a6f6bdeac9265be75384ec2826cd0d2d49e42de76d500f13a36d3ee9da04d6fe8f4e8537175aabcccc3958fbffffffc60a59b9ac62a67ae514db88e8d1113696bf470ec1942341806265ade75d5b4c3cb33e52b03e7472347a84a82474b8bf3c99daa580a14c2bb8d4ae6112b78888d48ce2dcd9f08c4ea05e7655d897b7ac118b0e251aaf338ad747d82c42112057a646042c2ea4a85dd1821b3fbd08bc34e1b77a7922c4c9a59a8d78f1453583504c1a9f8d5c564438591cf817eece2e66ad735e7db3a701937d123b4c5bd5acf379dcfc18dc2828d44f8f0f46f5e707602f48c5434e480c5a11fb4a6bb59647f561e38321d0523639b901c54886b750d26ba789ae25867812047ba1364a35eed4b11c39c25d6212eb992edb49d1629a66daf04987dc38a5ebe1c3eeba7c9b407cc8689aeef7a95a2a25fa5c10f2e73ccf4106d024f58dbbe56838eb84e3625ee0a8", 0x228}], 0x1, 0x0, 0x0, 0x7a000000}, 0x24044850) 4m2.258318943s ago: executing program 0 (id=12568): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400001f000000007910480000000000710441000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 4m1.965511975s ago: executing program 5 (id=12569): socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000040), 0x10) (async) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001340)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x440c0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000000)={0xffffff7f, 0xca8c, 0x5, 0xe78a, 0x10, 0x7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'sit0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x40}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r6}, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="20c0f0bbb344cb4e53b529e6c3802a"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000804) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) (async, rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xfff1, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3f}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4024}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x100, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0xf, &(0x7f00000010c0)=ANY=[@ANYRES16=r6], &(0x7f0000000200)='syzkaller\x00', 0x9, 0xb3, &(0x7f00000002c0)=""/179, 0x40f00, 0x6e, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x1, 0x8, 0xffffffff, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f00000003c0)}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001380)={r10, r9, 0x25, 0x1b, @void}, 0x10) syz_extract_tcp_res(0x0, 0x4, 0xffffffff) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) (async) sendmmsg(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000500)="785c92bbd69e9b57a1b50da85a127bbe4ee54b184d35567b76a030107495b543e43cd30e08f565d08600953ce849b23e641030121439cf18ee004aa0d57c32c1082bb2fd778b49fc3bcec1e5998d38c99242ae495f1847f8290744a47292f1c38d9ea455ddd6d0d872a9ef77facce80ac56fffc65ffbd735046a44e864e202bb30f1fea4aeaafdeba8dbd985d05d4ba6ea35c896a5c4138ecb1d65d92ca56d8d084a241f4c90ce3f7b113e5d2be6d3c833b9bdd64404243c544e6eabf275dded3c0a4f156929a3a502eebca136", 0xcd}, {&(0x7f0000000600)="cad5d7c18753b23e074e4a66715db391178cd4523d64ec3daf7682a50739640b508619695891cee0586e2d32365c7fae4e43e65b2cbe23ec62fc08b7123266a9ca460a2cfb10ffdd1916a31d44acc3ce", 0x50}, {&(0x7f0000000680)="a70f090a315f29da47e05f9cfdcaafef9c06ba52e9b2260cf00d5922044d0e06dee52e0fa5367a0aa9290ef00a01c9d3cf990b5296a08fb92ec2061ae93e54faf1acb43da4bb1e49dddde16e626395ccfaf60cb96e1f", 0x56}, {&(0x7f0000000700)="250907f6be6724aa0df8f224a5158f68b15fe66493283bfb933a24e7e20dbdecce7fbace4a407b8f20b5d6b5a780624efce36ec2d1ce1ab0e15fe1b690e812cf8860c910fa431e45e31bc650e432bd219c3ee8d4ec", 0x55}, {&(0x7f0000000780)="331c79bf9d7d4f5199f3d7efaec1f0263b9b63231b8c8100128687bf43495ffec314935e1504efe3abfd793c1b248d77d38df62f672eadbc0255a9f6ed482a747088c75ef0af054ac1527575378c37b18d7ff5f97fe9867d53aa6293892085b2d0fb3b07767ee20e12150d21fb7fb44f2035c0baaf00d5f862a4e227260d75c89e7704b740e5e5b5066adc69679484aa6e3463f44cae38", 0x97}, {&(0x7f0000000840)="c568cf8a6d4826032fb345eb2ebd729325539f37a4d5ef5cdc3f6eb5dc099fd7476b07ef7a38e4dd11e125f0b564e5e320ee904625b287dc365fb5a3f356", 0x3e}, {&(0x7f0000000880)="4c11f889daa867ae00bceb24d5e1eda6fc607624f887b13854607f5f0c9b706b8f80fa097d40ba51cabb291b22049ef919c5ea528d413107229b770320aee59ac225765895ea4e29", 0x48}], 0x7, &(0x7f0000000980)=[{0x78, 0x0, 0x1, "68ab8e92530e7054621aca7fc5adf5d9fad27bf7ca4a7ed5daa032e043e5003c5d949e142eca4cac503ca28ea2404a0e4ebe0440befc47c94ff7da063c7a1f5e72c317bd39eb7df824e94877215ea715e90de1ef151829dd320c54e152316b0d69a187c26367b448"}, {0x90, 0x118, 0x5, "ba6e127c0bf0cb7cc0030c937a25317d5131348edc1f330f1d0f91f0028ed3aa9042458f667ba5e963c2dc957a0dcd5f67f482485c2f9adf73d5ee21b76315bfbed973d7ef6fd2b55d94f086a00ce9368fe60c691f06c902b750500a912d701a04402057f381d58515a2672af6a4a5177633dff6df4a91cc81ea028c4201e6e6"}, {0x18, 0x103, 0xffff0000, "a006"}], 0x120}}, {{&(0x7f0000000ac0)=@ethernet={0x6, @random="42e55e25194a"}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000b40)="8223eb7b938fc0f0141edeed4148af7d3cf776de1bb42f94dfd391b018d3cb489cfeea30797e51013b3589596763da88c9ca627e61c680c47e5d36d7ab1c4eef6cdccfe7c1b33c82358cbc9ad71f7d47d69a3562fed740799581d92a4f205416ba935e495de24b33e7234e00af679165916d1f27239796b400d802788d38aa0dbe2e46252a308c6fb7def4e050fcf58f3b73088e45e902a2efd66cd76bacc22e41e5a0494f3e55b63c0d84f321cec086278312f323fcc0100e54103abe9951554ec43b96dca3ef4235026076e1808e0ccf8a755d5c0e6e1a71dc89f4881405e695af76b0a2d993d268b46dc3fec5ce8d23b0ddd8e8b4", 0xf6}, {&(0x7f0000000c40)="7bafe0fac2c1bdd478b04f3811a25b831da1fb42c4aa63568fbe5be7230fbafa925f993e0b03d8995ffb15d7357a1ae76c15c2b83a6f424bbcaccfca3ca3c859d120d88396a35aef7770e192f1d1e92c2aebc92ab98ca25287a64fac6fa9157d0707b465229e532276cd15a5e4d87cd7291fed581a6c0167f735edec9e2d5a81a5278ebeacaf5bb589472663", 0x8c}, {&(0x7f0000000d00)="26c3f0bfb178b6a331a876be4688d8a158c4bfe4f66925d2c247c8e9e176550f0b905e2e3bd3610bcb38cd0e5df6eec777bcc7f2059dd9b151a4441600b777e6428ba5426f4c7671885de14b27cda57e15e092a2bb71e60ab2b9ee3739f2887be8d0437e77d070358074224c9fc391f6e827724737d5b53d60d90d71c96e55d1c6c20b96ec63e1c886d62f00a042a2d0cc9d22e21c9ab82b39dba461c21219b35f1109927835eb4e6a66e1e61864777b01ce337bdba26ac9a61d5c1483ae3f44cfd21de1dd5545472a51088423784ff60277345c130fb00fc53d0239de6d5fbd335bf449fd14a0da4a9854e8cad578b75069da37", 0xf4}, {&(0x7f0000000e00)="09ff5127af6c3e9f698f0aff8ff1983578251707a9ede36235515d9a9bdc0068228001903871820b0d2e155f970373b0fc6cf8a9c6c121f0ea91e5bbad4f8fe91b9e2a822bf0a929d5eac5bc775997036b1e71cb68ae966b77be4404327a1a5935a0", 0x62}, {&(0x7f0000000e80)="7cb43d5d5d0ac1e39fb10022", 0xc}, {&(0x7f0000000ec0)="33203b94775254a8af2a3affb21a21bd728af57acd036c1b9416f85bdcc172cd316e897f6326d7fdc92f3eb92f8cc26d0ca38f85d8d32c140362aba787b5ae38016f312c8b90e9", 0x47}, {&(0x7f0000000f40)="7e1b80fee11683bfab36e02f6e913141a9308d7983f644c9498bcbc07fb217a39e1219c0daa14095c6d4d214a3737721bd72069e8499ea5cee27595092f4335401ed3a3945ae2c1e44ef6024662b92723167aec5ac21f1ec0f07f93aafe3822595f324ef95f99a9abecc8f5f3d27c55568a3baaa26503da71b98881435cac4baa1c6d372390e4faa9a9ec714b1d313c8bc915012d4176fc91e03ab7b12547b2409f2b8f46697", 0xa6}], 0x7, &(0x7f0000001200)=ANY=[@ANYBLOB="a0000000000000000100000003000000de168dc995545696211deeb84cc483c36a45a429a9764b828c45cbeae82f1b6878bcf18aa9000000000000000589cde8e56fc1eecb196c16a6af428d6e0d95d9490e9ab866cfd07449b55a41a3e571f3f7ac145bd4687d6217b39cf4202db64751a11f08a2b6c907f6e7906687f4bfb31f1b518ecb159e7b856698f0efda41833897a070368500000000009096c0f02e58e20734dcfa0dcb22c1a4a02b53d6cc5891c0d76bdc1d75f81a1c13"], 0xa0}}], 0x2, 0x800) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r13], 0x68}}, 0x0) 4m1.965128932s ago: executing program 0 (id=12570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x802}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40044) 4m1.952522087s ago: executing program 2 (id=12571): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002dc0)=""/4096, 0x1000}, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2c2829"], 0xe0}], 0x1}, 0x40040) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x3, 0x51, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r8, 0x5, 0x14, 0x0, &(0x7f0000000000)='%', 0x0, 0x7fffffff, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) socket$kcm(0x2, 0x3, 0x2) write$tun(r7, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, 0x0, 0x0) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x7, 0x40000, 0xfffffffe, 0x5440d, r3, 0x6, '\x00', r4, r5, 0x4, 0x1, 0x5, 0xf, @void, @value, @value=r10}, 0x50) 4m1.534857295s ago: executing program 33 (id=12570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x802}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40044) 4m1.473673146s ago: executing program 34 (id=12571): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002dc0)=""/4096, 0x1000}, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2c2829"], 0xe0}], 0x1}, 0x40040) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x3, 0x51, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r8, 0x5, 0x14, 0x0, &(0x7f0000000000)='%', 0x0, 0x7fffffff, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) socket$kcm(0x2, 0x3, 0x2) write$tun(r7, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, 0x0, 0x0) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x7, 0x40000, 0xfffffffe, 0x5440d, r3, 0x6, '\x00', r4, r5, 0x4, 0x1, 0x5, 0xf, @void, @value, @value=r10}, 0x50) 4m1.458667209s ago: executing program 5 (id=12575): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 4m0.813250912s ago: executing program 35 (id=12575): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 4m0.771427006s ago: executing program 4 (id=12577): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000000000000002000000400004803c0001800b00010065787468647200002c000280050002008300000008000340ff0000000800044000000001080006400000000208000140000000130900010073797a30000000000900020073797a32"], 0x94}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r3 = accept$alg(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001400)=""/149, 0x95}, {&(0x7f0000001380)=""/85, 0x55}], 0x2}, 0x40001}], 0x1, 0x1, 0x0) ppoll(&(0x7f0000000080)=[{r3, 0x500}, {r3, 0x404}, {r2, 0x4000}, {r1, 0x60}, {r3, 0x2}, {r2, 0x46}, {r1}], 0x7, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x3282]}, 0x8) r4 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x20008800}, 0xa4139ca75e02daac) 4m0.266451353s ago: executing program 36 (id=12577): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0104000000000000000002000000400004803c0001800b00010065787468647200002c000280050002008300000008000340ff0000000800044000000001080006400000000208000140000000130900010073797a30000000000900020073797a32"], 0x94}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r3 = accept$alg(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001400)=""/149, 0x95}, {&(0x7f0000001380)=""/85, 0x55}], 0x2}, 0x40001}], 0x1, 0x1, 0x0) ppoll(&(0x7f0000000080)=[{r3, 0x500}, {r3, 0x404}, {r2, 0x4000}, {r1, 0x60}, {r3, 0x2}, {r2, 0x46}, {r1}], 0x7, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x3282]}, 0x8) r4 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x20008800}, 0xa4139ca75e02daac) 3m42.155429364s ago: executing program 7 (id=12573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x24000000}}, 0x58}}, 0x4048014) 3m42.097653715s ago: executing program 7 (id=12601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x2a, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (rerun: 64) socket$rds(0x15, 0x5, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x80000) setsockopt(r7, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) (async) recvmmsg(r7, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)}, 0x5076}], 0x1, 0x20, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0xa, 0x7, {{0x15, 0x4, 0x1, 0x1, 0x54, 0x64, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@lsrr={0x83, 0x1b, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @empty, @loopback]}, @rr={0x7, 0xb, 0x78, [@loopback, @local]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @broadcast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'bridge_slave_0\x00'}) (async) unshare(0x62040200) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) (rerun: 32) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28) 3m41.705464397s ago: executing program 7 (id=12603): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x4}}}}}, 0x0) 3m41.604431624s ago: executing program 7 (id=12604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x8, 0xfa, &(0x7f00000007c0)=""/250}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r9, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000400)="274f49d7dcc3a2fefb972f34cef2651de6929970cd972f9660127d3869a4796cc9b330fb91fdf7dcdd343c324dec1d4d5fc28383cd3012e19b2394fe11989c3ead6620072c03b0deffbef8bfd7428e0aaa5855032e3b401e97a8eb5610c4fa5cc0", 0x61}, {&(0x7f0000000640)="6f0ed9abb789e1364b5d8a38cbf9e2c1a51ea99db9809fcfe9fda1f93ccdaf0c6f511d318c0ca5d88d86406c6d5e5f2809a90066f9793d69d45a68501b1406211e6b7fac044e50fc87ab67d7e051688517f5f682f080a0752e883ac1efda7302685718647d13cfc6b5fdb459efe245b08ed9bb1b988c1759926bad589c81d09f586cb16c70db82e24782a4d93c7a8a6920dc8b36487cb286bd15aa2e3e622c96b9010bcf9cd83ca50229ed1434a78f34886ffc750b3e8f29d5334f3b0c06e2eb219b9de5a181ab4ff88a538029a67526c3aad8b7321d5f50468afa43", 0xdc}], 0x2}}, {{0x0, 0xffffffffffffffe6, &(0x7f0000000380)=[{&(0x7f0000000740)="54b465d7649ada6634af960bdf592d7f3a953ba4a1450c81a9ad47e41750ca2d23483f969df7cfc5b61d6b549a6be8c82f6433fbcc4db2f54e14282fd0ce03099f3c3a27aeaeba7f06ea13a63f8fc27c5004b0fd4e10730d4602229c9bdf508a55dff314215e8b4296ea4e2098", 0x6d}, {&(0x7f00000008c0)="e0eaf43bb34d46fd2a639c18b2406a5a1e1f33b007e1bc1e8b210ceb3c7dbdd642d9cff1e9b372121ed1d87f81e22346c41479edd33dd4c49ebeb199f8876eee2c1db626f2f2d181a4bd238c9306cfa5d64b2de770e75789f4fee0026a20f27c5510d6b8c7d33735535d09444ac00958006e421d229772528673ef085afda87c36fa0f9fa0bbf6e0d556b77fa359a876a3d3ff0cd371bd73ed6a0ca287f56d40b9b973f045cee33c8d84f96ee8a2fb2b7bd2c5707293aa29673b47b8b2af80608d36c678ff42703c8f694e66e69762c5a563a16649b96aff541098acfd01e0e5a4c3d13938464af92c6d0a1bd24240a17b0ffd70d5909f7db79e5725cad61f", 0xff}, {&(0x7f00000009c0)="ca4925e659e703c5cb2b8fa76eb5b669cc2a8711d77fc923465dbed1ea07149fbe02990583b65b59d0195b8d9aee624f7fa87f6ff3de7f7d3100892ae3893f3e52e3c12da624e0b3c5d2b863061bf27a6eb3ad9e59a862f625a9a389fc519656eca216f9211878ce71e26ac23856fa68e09d6ec487912436a3bad3247c25f18d869baf8d45cbef08438f61c7af14ed117df2e62360cf1d50e121a07fe5debe208585c9e81bebb14f97a25b89013ddd92f519f36fbcf77035142df6589e7137b961ef46a5e3e5366e1e32d94e4d66020ee115718995f16535df752a907019f7c2c3f1acd3b4ae2ddf0d57f4876e34990a9b36d313ac7fa9c278e97500c27a", 0xfe}, {&(0x7f0000000ac0)="9eb5e211492bff836f76950343b762946841f4ac10056e1a6697786f9d19e96599783a062693f153162bc2da89444fc66cb1548489a06e000fa81d09ebf3134ccdb9f27d39e0a219cce0d9b43868325373414d703c0f2fd35e67c262e706e7b62101f39c830cfe0fd8ea0ee31b71c906f384d318ad3985b9ae5f28997b30c95ac950e0d7a662fcb5249cf66a413a6b7a59d98451e38aa0a23b17cfb5db31a43770e4b8a4058d40dc75286f25bb2aeb08f66c21", 0xb3}], 0x52, &(0x7f0000000b80)=[{0x60, 0x84, 0x9, "bdec2aa410557a7a5eee00b09fe079d68386b8f76a592676792f81cb836111ad81d1676a6b471cb582cfd20714ecf6cf96636947a2183a82944c62c827ee0dfbe005b74f3a04a231608c"}, {0x98, 0x110, 0x2, "72b7361ef7f6907a7dda94aab1313c7a54d500fefa3e1501bb50ae52e33a5b372c9d50170ca77f4d1688ffb3fc4eb0f6ab8ad252e8be85faf083225d597034d838c7e3a3ff48d737337c785a9b357301da5b6305d6771951d3113e32d87265a7535ccdaad416f8ba2fcca0f8078973070a9f143bfa16fbcaaf72d93943be572394fd3f4e"}, {0x48, 0x103, 0xfffffffa, "974f735b9f1eeba8569f58e50e3e6107fbb2ea80fe24c1bb12168d1ef08e39ebde5b74bcc3fca500bf2e50b98273bcc846f8"}, {0x98, 0x104, 0x7, "11cb84e7729cb5d740df96b895de0494a5313787bb293e5502b4b0c534727c997f7e55f8f1afddde1d4ea0a6b9e326ee4fc1aec07018d027b82be263f7aeeb6dcc164442e7a3a491846c5df89f5b924b1d40a2967159c900916e1435d7c4adfc810691673a448391d88640418ae84c5c13607cf7736f94ffd21463f53cae8f39046fa29b345b"}], 0x1d8}}], 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d412000000000000002900000003000000", 0xeb0e7a7d4c6f0553) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r11, 0x21eae}}, 0x20}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r12, 0x0, 0x0) 3m40.99746452s ago: executing program 7 (id=12607): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x30, 0x0, &(0x7f0000000000)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x9c}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}, {&(0x7f00000000c0)}], 0x2}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) socket$rxrpc(0x21, 0x2, 0x2) 3m40.493062818s ago: executing program 7 (id=12609): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8143, 0x0) socket$isdn_base(0x22, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r10 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000deff000000000000a30decedd1c737447e9b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r11, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a5d730d928d41d3df08667e904e0b0bd09a121183094b76c82db90e884360f12949aea06a370e77a4cc95c2a9ced4ce3260a7a48a30c8583405b32ef1e87a3f3203e55b5195ba6ef907bd2feb8e7bb5b76b4889601ad5af60bb027ad431323583d777ad2f325defad91be36d39ecaef02bd8ff5eedb1dfa16bc789bd7133e063403357ce47f8ca53ac65bbf0ca081e774ab8d92c3f96dd901d975bc9ef312eb310c3574a8ec29783d4ce841430d9725200"/221], 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000300)={'gre0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r12}, 0x38) shutdown(0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) 3m25.436508363s ago: executing program 37 (id=12609): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8143, 0x0) socket$isdn_base(0x22, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r10 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000deff000000000000a30decedd1c737447e9b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r11, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a5d730d928d41d3df08667e904e0b0bd09a121183094b76c82db90e884360f12949aea06a370e77a4cc95c2a9ced4ce3260a7a48a30c8583405b32ef1e87a3f3203e55b5195ba6ef907bd2feb8e7bb5b76b4889601ad5af60bb027ad431323583d777ad2f325defad91be36d39ecaef02bd8ff5eedb1dfa16bc789bd7133e063403357ce47f8ca53ac65bbf0ca081e774ab8d92c3f96dd901d975bc9ef312eb310c3574a8ec29783d4ce841430d9725200"/221], 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000300)={'gre0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r12}, 0x38) shutdown(0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) 2m33.471658725s ago: executing program 3 (id=13083): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80001, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x8, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m33.024122435s ago: executing program 3 (id=13090): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x80000000, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x700}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r4, 0x0}, 0x20) 2m28.917671939s ago: executing program 3 (id=13108): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x2404c854) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f40800030006010000d7000200d700", 0x5a}, {&(0x7f0000000000)="29dd", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) 2m28.69504123s ago: executing program 3 (id=13113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) ppoll(&(0x7f00000005c0)=[{0xffffffffffffffff, 0x8}, {r0, 0x30c8}, {0xffffffffffffffff, 0x4116}, {r0, 0x2020}, {r1, 0x404}], 0x5, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x9]}, 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x40800) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x44, r4, 0xb00, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r3, 0x0, 0xb9) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, 0x0, &(0x7f0000000080)) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_ACT={0x4}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x5c, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1d}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20040004) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@'], 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) write$tun(r7, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) 2m26.700135597s ago: executing program 8 (id=13137): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x54}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004"], 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000280), &(0x7f00000002c0)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x7, 0x1, 0x7fffffff, 0x4a613, r0, 0x1, '\x00', r2, r3, 0x3, 0x4, 0x0, 0x0, @value=r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r8}, &(0x7f0000000840), &(0x7f0000000040)=r1}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r10, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r10, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r10, 0x36, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) close(r1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r8, &(0x7f0000000900)}, 0x20) 2m26.59168548s ago: executing program 8 (id=13138): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="011200000000007ffffffe000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 2m26.559776524s ago: executing program 8 (id=13139): bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)="32780f", 0x3, 0x20000045, &(0x7f00000002c0)={0xa, 0x2, 0x10002, @mcast2, 0x4}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x5d4c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000001780)=ANY=[@ANYBLOB="2d0db769", @ANYBLOB="bd8b01f835cb31c116eb5f42e8a4b7eb14489a513b703948f042feb33d6e7d855adadfae45db592140b9aed5b6bc9c1d2ba71aae7de6a67b264eabbf17f1da0b6d5953c4322061be6eda006298def95ddf564ffcfd46d23cdf6e69cf0518217f7ef20466f3d4407517d1fa9f750ba9252f87a57f269d8d0a04ee57d1b684a120417850fa686ddc2e5db7e954eef3d616a69a874ab95cf57c52d9f402d917e60d34173f43d722431022feb133c428c4bf22e390b70adf0f10175c5f44a803f9df0094b2a5fae7b8358829d8ea2630f9786a57cc6daf940bbb03584c85fad159eeb50ac402b071f5fe2513883364186be3eb78f07b4588b6d056508bb647354a96dff635899e8ce4edb0998f4f33a1c7440dc330156a895ec809cdc0e92198ffbacba339339c5d94099a52d4afe11eba1bb915e9bfe7cb7b41a90dd236559b137dc635da7b89f10c9ede09146dc75f6d5105fb21fe40104b3c91d02925fc2c9e69e4cea21473a87312da216d695bfb94e71604057dbe146cc9178141e7f126b7aff7fa248748acecd34cbf375d0ecdd99783ec9a349260d2b089dfa9c4c287b1c0618d2f3a073a21bd4d7fd263fb5e5ae169d4abe5cb7f033e7c7d2eb069a0dfcc788f687d13cac303a0587d81cd944d5a84fa06d9b2afc1aa233846d277dbf9aca635f9a1bcd14cb986c503d0d611bcef20580d9225a50e426c18166e6f3d82e9286aa16b3c809f88b273c8f669dab27f429a1b711c72dc72d126b2330be224830830d655da98ea8214225d05b791e413b99790ed8ddb17573a230983fa4d4a38992a6edcf23d0304bef5d15b6ddb1efa2fc9a022c444a11d486f8960a7cb2e2bdd07f457ca71d26228f11311c9b417b3b17e1fdd85acf16454d9d4aad7d981efc1f5b34b581836ac83c657f8a48e44e25612a9a26def271322f87e4f4ee9d946f0d6b1cd55f31e408b894141a3bbe49117b08a2d81d977002cb74ed77b1dddd9d46e3a9fb90bf51a0f771da3bc12c60e531e0e8f1aa0d4c7f2f82934056eb58ed3d5f56e478fdd1e620c8c35c64ef29f472e80b2feb14d9e927bc7dce8bc1ff1065f9be5b568b531411d4bda9734fca4ccb821ac4a4b90b6e511b771f962b9b213f5401558d4a8659ba911d964045b8fdbd59d85eae653edda60a857d6117f9a1d7d99415e82d93c6bc3576e9c653135b18aa5b464a80d5a5449ab1891b872fdf065533eaea83251b7d8bfbc016e103bee0e1c5fe0283adb2fe9da35aac86ee256ebb2bb3b19b68cb62888b5c992f53b05abb49a16d45adfba55fcac93b80c0a18318e32947a8d061d366545afbb3bdf4112d5f1dda030af11b4af3e6d4225c85fb9c5fdd5f4eb52229920aad31004f3dedaebf9b426d50d9c515f0fca73c1be0978a5573b077420862a553801de06387b6d0a88cf1a4067fd0bd14fbc780f532d766987ed1f6e9b1e64dec33b429e88c5b2446665b8a732af6fceb47b76017533353635760d4f310f6393840647bd3ead19cff3c4197fcb9de17c89b55db101c5d4765a56379fdab3dd317e6993009ff22b10bfe66cc545558132c7ab1f4e599f52f5e1340331c0cd1d3f14f24337b5980bd670b18b1b0378690bca9f26f2186cc463f7f7cbab4efd8cee92c78fdb2779e6d83f975271f0afc0ac820213ca8e657487a6d719d818d48bb06a88b1b23bd4b85453773597d576a6960c11dde718e6366a9f63af0258a025c679f284f5d7477f974baac758402bf644f8845400c6e991254412ead358d3f449039d0f5618d0b21b1346631b9618057aa322db25f60f2c3a5f7bed5bcbf03f4c750aa0092604b7a4ea6164209a526c3c5ae1191c72f6ff52fe725ad3b7aacc138ac74185559341c551d54ad54129399798f3bcd69013a3881783a238e2d8291642d7a7fdf8304587740ba3d531557aba193b888407ff8e10c6289c9e0763a15cc9fba8c31b12c1ff402dc5b916d2848f3977acf64babd8212f445af0b7ac8a4370cffab5cded09494edd4bb985afa5e4c5a44629f9a5132737c2718fdcb4072e49e733497b190a28ec4fe5732c6280a44122fbafa2a127f702fca9874eae3563987b2119d52703954ac89d8a31417b5b714261674bc2f93bd36460530f69b3ab0e8a798f05729e2b3c186cca8daed0a0ddbba9196e4a5fe5b08dd36938cd7e4b295f5dba6609e51d18ffac9d6d80a07db9b72f6969e0cab57adf4db742347217106be60dfb4de2f9062447676f0909dbdefd89ff8fcd399900584a6b5c6c7e719977f9f551fe1e2b5831c30935edaa78d3bae6fb2b6f9acd74937a3ff496343ef65cd91149ba43f5757ed0cf4d763156d73ffc1ef75148f6754e7cf6c9796509958135eba4657acce549c4258d982914f8ce80fc7aa26463a0857d266c63e1244d58a4e61c24b6d30ea387b7e55ee6ceda68368de8ce0fec5def80a5414aa194978559b047ae7897a98e17ac00b8b9ff03be6e39859a8afb8d1674ec88be300e22001e88e1319a39d325d65102cf1535ae215408f479fa440355f1859f195e3a298e6de5ee279eb25ce524a9dfdf638b5c074676a19d738480c802053e924719703eac07b0e878155f41388de338796a9b646badf68d72260bf1f8a03b63520c79ed54a1d042e94cdf6474e18461e62294749cf0047d397da7458c8ffa753a1f8373c30dffe213842fd9b3159160d38e1f0f794c07490c4267d0528779198abb1d18c551b1391699ccbf24be200210fefc5157c5fe47ed914f8881a6feb7af6ceba0cb792dbf29d86f445baf7be71efa5fd6ddace6ab357cfcab428e1a86bab0c9832b519faacd4f1923a99777c5d9db0c447ca55c20cfa7dc037fce598bfb2acffd733c278fe4d8d9d8cff99c2ea3f6b2692a172ef559d2fb44b5b3050afe5e1de26ad021ffa2e694e8c91de71fbea05c253e1087151fa1ae066d73571443fb077d211c9da432be4d1e533447baedb85bd1a6f8c9aa244b7ac09448f696e487f514f4711f94b9ae3e78bb864e0b042fc82306c3ec2f2799d9b3cdadae02ac1082f12e03f9e99b517d53e3f9109af3f4d7b3dd2deeca978e647c90f54a0478e3f9051c7499e9431366af38c29083f568b9a618541fead217f2172b802b9f74a975f546a9c41d7245c31392b794a8308326d29bf6e8c78d9d6ce9834f45af25145739e726672aa0aafbcc7a8f054cdc91efc6a122a3e7a0429e96197310dccf6e5c412f200ad7edb5f1a1290c67839ff4f84ffaeede8bf3845d56ff3b5d7d52f14f574f463ce4c9687682fb9a11ecd8d9c6536f539f30eb00d6158d0a6889b45526b6d686bfffadc82fc6b36e2b111446ba75b7a7b628a0bfd4c10bdbf277c80fb9795a872a64e3f771511297170ccc92a84a1de8ea19d9bc042ffe5a9fad452ebe3609f4ea8ae2847ffe5cad8d128d0918c968cfa06d6e1c197f58218c57b3643284ba8d1567e0f7cf9c0a732ec36f144765b313010c104f045f507326e3906e550e48e8960837b17b66f8b0e212c1081e12e54b26fd9a198b50a28c2dcfc8b4f7eae09bd9fc4cbc7720ff15b0183e4523d085ef70746c087b4d54f4a88f08f9aab517535bb9816d02c254397521dacbc0b4072e68f8683c3e734827c417ef8b94c4c927ae086462c8b8057a227b78b2c72c0436f17161c513b8111521cc9ca25cf2a50efd6d8005237fac04d04165c099a35b32a68fa68accae950dfa273be3442eb1de369a017998a4bba70a966d7a78e391897d8336de3b260418a1166be974131a3ee88d006ea4ce4de57a5d4ea253fc46900a092b918aed72b3c1d00e948739e50574d32cbc3a6cb49fdc79100f36d97c84383ab25ab863e4010a124a64293bd6d2a8bbbb4ec7c0e59f7f2b1358925cd13418bda210654814a6b28f2243fa4c15df35c24e186d6f4ab32720c39f67d417cf66718ab0390816491928fb384b40451ed8b387d3b7b30fe5789ef7c1a0c209363d2ed073842e4380d8e9cb4fc1075dcb4bda3d2c4fd02bddd0f49a165d30bbb2ee3ba6d04c4c084a2a4890d0ebae536b60911c5c918e471761fd5e8c68fd1548f69eb01f9b3df2bde09fb0c101c9c365099444982bf5bbfc90991b34333e1c906a2a1f5fcf97df19255d87bdd2c829cd6d46ecac6136c1160479ef313de466ba6fd38ed68331d9b66f2eb375582982068fb8d25b573d5b9dc5d617c80a3ee19c2e1493007e4648a617a489c9899060a6e81b3123accbfafc0ed7a4f3ae4624c0ec8177bf7ec61b844cc459d18e9b50bbbffa42210fc1f5a1b940983b0d621cb64ca4de6898c690d60ada84f62322622d3646695a4d437b440c893d439dfe54472ae8028c32082735c8080c4dcfe9ab9f3f75e04bda7cde25929af2e962a65384c8e6f4c97cf25d58ac99a991003ecc94ae3af81df04b61b863688db3a1719ec3dfcc9a97a9e583f0a669f708417f517102770cb2e1f07768debb6b717609f72c5d72d0830b731d80148024b0f8fc66ca99ce8ce818d51202959e0f4ee9d6fe1b3fcf0bff64734ce2e2a01b4c24e3f26427f0d8b1563036a9f7d4ef4c18b45c299536429e09ed4b55c500b95cf6bc1d18362f8d2ca43aee523d851f02ac1a1ade2a1efa6d4ab0e39b1379c01906c9850c4eecef1c8eccab95e29b66adced52b5bc5eb8bcc0f8175b772c7d51f75f268908a786119d54c656d501beabacfa0a69a68e8a122bd3245865657ed667f73d1fc02e537ca4d17a7a660db609ea9a11ec35de1854594ef2391b5b4deec367786884617fe6238c6a684786f381065180d320639eb312506947be05fa1d9f4e6907677679f514bb9cafb8e9e2b98cb4ab68f9fd2eb90e125705052aa0a2c79d3d442079b9e20533650ee74ae9682e0b3af55063f9ed93420203d4b256efbfd3c415fad5b2b9c8dab8aaee0412c844a392be903d70f73ef48ed1649a795f116dc1a65bddace6e93c5e9dbefe135ed9b124d8842568e5dc4845313b0c442f1cbd6e8882416cb5ca40cc6e71503aafefd6d84f5e0dcc3734e67821ac49510bfd650dbba139746e20a6b1f3a8d8a8fe05e568f96a51d79df5f1ef37d11d9e4734b30468eb69a0c4dedb82f535dfb4a9cada434bd7d7aa5b690689cf46bbaadef3afa5cddbd9f0395068a90ddd24df0eb4f522ed22d24809628c99db05ffd665c33c74643786f933875a14ba1041ea23ed7482ebb5f7af4d15a73ef93039bebfb8176eaf5047f1ec50dc04a02ea44936cd2cc579d28fb651b13b18efc871d4097c0ad485d90fe5c8f2496d883a5d9d90f6c9c00212b47f3d582119c3118d8496d039baa2e600f8af16466b1ccd1b4190cfa0d0877d78e5dd9e1b145fe5b13912dea01dde656cf3ea632d687e8b2bf132bc7caf127572f1530d0f1eea987314fcfe1f0d2abe5b88e19a384107aeeb3e22873337a70f1563650cf55c1e43b47e6869c7c6ec6c533491e1a4d71300231dc918e650e70adb00756fdd05342cc1e14506632b082aa6d9633833cfe7e8fd2677bc4655522c8486c12167c4203a4a76d65deb7e3b84b8e3e56e28d36edcc49b735fcd962ae2c1a91516bbb27a1f8f18521b1a84430a0974541e9011a506f643a959c9f3a48d789c5b3b53151ffb7c931c9e458559eb5275d9ee2b935076cc02ea6afcedf4e977b308196b911b9e246b2cdf6fc127888cb993f8f4d0c2acf447015b8ba2a4a004ca06b16d4b60376dce092dfce500f1376afb110329fbaadf29672e19957e325f5a872c65213d30d20bb116809299e8382cca3dc5a9fcfeab4b599080dd9d583", @ANYBLOB="080027bd7000ffdbdf250e00ab200866477fbc2986fd05002d00090000"], 0x2c}, 0x1, 0x0, 0x0, 0x4008050}, 0x20000080) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x400, @local}, {0xa, 0x1, 0x0, @remote}, 0x0, {[0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x8]}}, 0x5c) socket$inet(0x2b, 0x801, 0x0) recvfrom(r0, 0x0, 0x0, 0x40010001, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000100)={0x80, 0x81, 0x0, 0x4, 0x0, 0x0, 0x10}, 0xc) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000004) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000003e000701feffffff07000000017c0000040042800c0001800600060080d0"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(r3, 0x0, 0x0) socketpair(0x1, 0x1, 0xfffffffe, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040)=0x2, &(0x7f0000000240)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r7, &(0x7f0000000540)="094a9c6f468da134016c698c8a7e6910c537c3bdaaac692077c00600000000000000459a319889e4beb3558c403e05a5137253929747b6d589dfb05a02e08ef1984a2246cf516291b02de14c9e43ba0edf3886a0e788cd188788e457e0a809337326f763e2c6c108477c77fa8ec8ab7bdd38db7cc59686127858219889a26a70d3624f259a94bf7086ef4bc477aa2d409e4100"/158}, 0x20) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) sendto(r5, &(0x7f0000000680)="3f0256b9da6c749e8d474aef0b073c2ba8daf2eeaf1dfa8db5c8b22ecba1d4284568a36694ea4eae78b4c76ca291600ae164da395d30a42ad2edb630e44fefa699b3e0fa39da979308df878d38071145aa4e9d84cc19b7f84d90f8bfe112d198e7adf5c5ae0cb34190a400a46a43d200645d9e50ef4b5f17cece0367cab3158de2370000", 0x84, 0x20050, &(0x7f0000000340)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80) shutdown(r0, 0x1) socket$kcm(0x10, 0x2, 0x0) 2m26.367618163s ago: executing program 8 (id=13141): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffe}, {0x7d}}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x4d6, 0x33}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, {{@in6=@remote, 0x0, 0x3c}, 0x2, @in6=@dev}, {{@in6=@mcast2, 0x0, 0x6c}, 0x0, @in=@multicast1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {{@in=@remote, 0x0, 0x33}, 0xe327da050daf7a02, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x5, 0x0, 0xfe}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 2m26.348153581s ago: executing program 8 (id=13143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x1}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xe, 0xffff}, {0x0, 0x1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) setsockopt$ax25_int(r3, 0x101, 0xa, &(0x7f0000000080)=0x9, 0x4) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11, 0x1, 0x0, 0x40}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB], 0x20}}, 0x40090) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000828500000017000000bf91000000000000b7020000000000008500000085000000b700"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x1c, 0x2d, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4, 0x800}, @nested={0x6, 0x11, 0x0, 0x1, [@generic="2fe5"]}]}, 0x1c}], 0x1}, 0x300) close(r1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r8, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x39, 0x8, 0x1, 0xb, 0x2}, &(0x7f0000000140)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000400018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r10, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 2m25.690057274s ago: executing program 8 (id=13146): socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000022000000040000"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[], 0x184}}, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x40050) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000314010009000000000000000900020073797a3200000000080041007369770014003300766c616e3100000000000e00000000000900020073797a32000000000800410072786500140033006970766c616e30000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) 2m24.5927042s ago: executing program 3 (id=13151): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000020080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 2m24.437210817s ago: executing program 3 (id=13154): r0 = socket(0x15, 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000003c0), 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x4}, 0x8) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x34000, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@initdev, @in=@local}}, {{@in=@initdev}, 0x0, @in=@private}}, &(0x7f00000000c0)=0xffffffffffffff65) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1d}, @in=@empty, 0x4e23, 0x4000, 0x0, 0x9, 0xa, 0x0, 0x30, 0x0, 0x0, 0xee01}, {0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1bd}, {0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x4}, 0xfffbffff, 0x0, 0x1, 0x0, 0x2}, {{@in=@multicast2, 0x0, 0x6c}, 0x2, @in=@multicast1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}}, 0xe8) sendmmsg$inet6(r2, &(0x7f00000090c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0xf7ffff7f00000000) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280), 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) r7 = socket(0x1e, 0x4, 0x0) recvmmsg$unix(r7, 0x0, 0x0, 0x400122a0, 0x0) sendmmsg(r7, &(0x7f00000030c0), 0x0, 0x9200000000000000) sendmmsg$alg(r6, 0x0, 0x0, 0x40800) shutdown(0xffffffffffffffff, 0x1) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000000)=0x80000000, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 2m24.21278221s ago: executing program 1 (id=13157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'netpci0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r1) socket(0xa, 0x3, 0x3a) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000005d00)=ANY=[], 0x114}], 0xc, 0x0, 0x0, 0x1}, 0x80) 2m23.577511247s ago: executing program 1 (id=13159): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$vsock_stream(0x28, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x8}, 0x18) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1, 0x400000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x300000000000000, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8004, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2101, 0x0) 2m22.934086441s ago: executing program 6 (id=13162): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x0, 0xdf, 0x0, 0x0, 0x3, 0x10000}, 0x28) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x890b, &(0x7f0000000000)=@buf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000003800f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000015006bab9e3fe3d86e17aa31026b876c1d0000007ea60847160af36504000a0038001d000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4930400e7861000bdd7fcf50ea1e190b4", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8800) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={r6, 0x62}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0xd260, 0x8200, 0x40, 0x5, 0x0}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000480)={r6, 0xe77, 0x81, 0xc2c, 0x0, 0xffff, 0x8c, 0xffffffff, {r7, @in={{0x2, 0x4e20, @local}}, 0x2, 0x7, 0x0, 0x2d, 0x400}}, &(0x7f0000000400)=0xb0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m22.607613756s ago: executing program 6 (id=13164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}, 0x1, 0xf5}, 0x4048014) 2m22.546375281s ago: executing program 1 (id=13165): syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000086dd0500560008005400003b60ec970001983a0000000000000000000000000000000700ff020000000000000000000000000001"], 0xfdef) 2m22.442657056s ago: executing program 6 (id=13166): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x4}}}}}, 0x0) 2m22.191944761s ago: executing program 6 (id=13168): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x1}, 0x14) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000008c0)={0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)}, 0x20) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={0x0, 0x6, 0x8}, 0xc) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0xffffffffffffffff, 0x0, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1, 0x3, &(0x7f0000000100)=@raw=[@func, @map_idx={0x18, 0x0, 0x5, 0x0, 0xa}], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x35, r0, 0x8, &(0x7f0000000780)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0xc, 0x81, 0x8}, 0x10, 0x0, r2, 0x3, &(0x7f0000000c40)=[0x1, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4, r5, r6], &(0x7f0000000c80)=[{0x3, 0x4, 0xf, 0x9}, {0x0, 0x5, 0xa, 0x4}, {0x0, 0x3, 0x4, 0xa}], 0x10, 0x800}, 0x94) write(r1, &(0x7f0000000000)="240000001e005f80024000000000000002000000010000000000080008000100000000ff", 0x24) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000005c0)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x7ffffff, &(0x7f00000004c0)={0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ac0)=@delchain={0x17c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x140, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x104, 0x1, [@m_simple={0xcc, 0x1e, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x4a66, 0x4, 0x3, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) syz_emit_ethernet(0xfc1, &(0x7f0000002340)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x9, 0x6, "a4f293", 0xf8b, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[@srh={0x5e, 0xa, 0x4, 0x5, 0x0, 0x28, 0x1, [@private0, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @hopopts={0x62, 0x1c5, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x2, 0x10, 0x3a, 0x6, [0xfffffffffffffffc, 0x8000, 0x100000000, 0x80000001, 0x7, 0x9, 0x5, 0xffffffffffffff01]}}, @enc_lim={0x4, 0x1, 0x5}, @ra, @calipso={0x7, 0x48, {0x3, 0x10, 0x9, 0x1, [0x2000000, 0xcf, 0x5, 0x7, 0xfff, 0x100, 0x2, 0x5]}}, @generic={0x8a, 0xd82, "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"}, @enc_lim={0x4, 0x1, 0x5}]}], {0x4e20, 0x4e21, 0xfb, 0x0, @gue={{0x1, 0x1, 0x0, 0x7, 0x100, @void}, "26bc4d426df105a1b58f88af5302632add03e74e52382f19361f1ac1f419c10d8b6bcf60e47c33ead5f2965f642051faafa26d8ebe6a0e0cace9ef28675a63eca98617a63b857c37b5785c467a08a996f9aa07fe5cab460e9de65bd9e2ad58279e4f028fc7a6b55dc1d00e27cb2ad9861d298078b453f5dbb2241454dc9b9bc17b74bdd8ad9bf50703c1d01160085441e3ea5a106541ac9d52358163e17b4702087136898c219933a98f9110629833a0c862f81772042367f47bf94d89459688ae2ecd90d87f258f6f821ae7b9b1ebf9d870f62da8c66c69fd85a5c1e297edea907ab62050183c7dd6ae1d16420da1"}}}}}}}, 0x0) bind$unix(r9, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r10 = socket$unix(0x1, 0x2, 0x0) connect$unix(r10, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r10, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r11 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r11, &(0x7f0000000840)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x8800}, 0x4000080) close(r9) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x6, 0x7a6ca697541ff5c9}, {0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m21.947570067s ago: executing program 6 (id=13170): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create1(0x0) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x80000001}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r4, &(0x7f0000000200)=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000005c0)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)={0x20000014}) 2m21.93888769s ago: executing program 1 (id=13172): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000100)={0x3, 0x3}) bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1, 0x2}, 0x70) 2m21.812545777s ago: executing program 1 (id=13173): socket$rds(0x15, 0x5, 0x0) unshare(0x24060400) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r2, 0x2) sendmsg$inet(r2, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r4, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x200) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) close(0x4) r10 = accept4$ax25(r9, 0x0, &(0x7f00000005c0), 0x40800) ioctl$FS_IOC_FIEMAP(r10, 0xc020660b, &(0x7f0000000600)={0x868b, 0xffffffffffff5403, 0x6, 0x1, 0x1, 0x0, [{0x5, 0xfd, 0x2, '\x00', 0x8}]}) recvmmsg$unix(r9, &(0x7f0000000400)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f00000000c0)=""/186, 0xba}, {&(0x7f0000000180)=""/140, 0x8c}, {&(0x7f0000000240)}], 0x4, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}], 0x1, 0x160, &(0x7f0000000440)={0x77359400}) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3c0022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r11, 0x800442d2, &(0x7f0000000240)={0x9, &(0x7f0000000480)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @local}, {}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @multicast}]}) 2m21.760192802s ago: executing program 6 (id=13175): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="55c0cc0ba6f3b908ecb5c6e93e4dc70ed9c875dd444569fab05e32a08e71d1c480fa1ada9e6f952dea418e2eb2dd8dcdd18f82c2be42e92405d2eccae94e713594f13ebfe37be3cb7ce0eb237d63f25744e42baf027055a65359c121788ba610f7df23b902755c5771d93efedd8252aca1dda5efe1493ec0a5a9e965666d1afe33b384953a9102b3f1", 0x89}, {&(0x7f00000002c0)="4b17746f0c2c20350492d7a09e5dc9648fbc15e2812f642ac2c20713a937013b9aad5bcc52d50571282c1891507b899bbdff0360237f4f24fce4ed425f64ce8355d10afb19676ebadb52", 0x4a}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)="900d3798e4653207eae6da23bf6c69f8e965679b910b52e0a4de8e3c4ef97ab320820bd9275a6e2a4609c4feb730084e64cc106664be66878f403244c97c0411b65371955f45c915599f9f722d1962a221a86918d50891c838bfdf21f7a255f2e2cf5839d1c3aa3dbfcd94ca44e18c7863d497ff4f85628494915bc016f7c5d62747bb5368ef052201a0ee3cc9dca7156e893cf07b494f98a177460a7ec073fd8af879ae71c8cac715a241052bae3a3f09f4f4dda617e5ca05290be71acaabf4544ca83830", 0xc5}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20008d0) sendto$inet(r1, &(0x7f0000000480)="1770636c259d1cf74f499e95624f1bab90e0febfcb6e62c7c10d275a871e8651912a485d913942d7cd6d0f54fce6089897addaef8dfff8c472bf071936868bb2e57f5d30d6ee3ccbce435cdc209f12b0cc7fc787", 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000380)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f00000003c0)={0x41424344}, 0xc, 0x8) syz_emit_ethernet(0x25a, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="800400069078000002042b0b1e030c02042e03012ef4d76489eb30f163bc671ae521ca144c8ba0337981a41fec683cd1dbff4dade80bb1da74454446d303b2f052988d1ce716c0310432b4eac35330e2ed6377387d9bd3b56c70c4bc04b7e2076bd92c0457b0fa7e9fe391135f68d60f820e8469a783ac76521d42f54f7d818b6229725a3ce002d4457bbd88c62de7250d650aecab3ec935f13ec4827e7932a93b53fb65"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=r4, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000040000000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, r5, 0x0, 0xa0028000}, 0x86) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x4) listen(0xffffffffffffffff, 0x9f) write(r6, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638", 0x27) socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x6a040000) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) syz_extract_tcp_res(&(0x7f0000000640), 0x4eb6, 0x9) r7 = socket(0x5, 0x3, 0x0) write(r7, &(0x7f0000000000)="240000001e005f80024000000000000002000000010000000000080008000100000000ff", 0x24) 2m21.101678312s ago: executing program 1 (id=13177): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) (async, rerun: 32) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94) (async) socket(0x10, 0x3, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x42031, 0xffffffffffffffff, 0x80000000) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000004c0)={0x4, 0x4, 0x9c34, 0xc0}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x48884) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m8.503751838s ago: executing program 38 (id=13146): socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000022000000040000"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[], 0x184}}, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x40050) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000314010009000000000000000900020073797a3200000000080041007369770014003300766c616e3100000000000e00000000000900020073797a32000000000800410072786500140033006970766c616e30000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) 2m6.978655686s ago: executing program 39 (id=13154): r0 = socket(0x15, 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000003c0), 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x4}, 0x8) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x34000, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@initdev, @in=@local}}, {{@in=@initdev}, 0x0, @in=@private}}, &(0x7f00000000c0)=0xffffffffffffff65) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1d}, @in=@empty, 0x4e23, 0x4000, 0x0, 0x9, 0xa, 0x0, 0x30, 0x0, 0x0, 0xee01}, {0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1bd}, {0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x4}, 0xfffbffff, 0x0, 0x1, 0x0, 0x2}, {{@in=@multicast2, 0x0, 0x6c}, 0x2, @in=@multicast1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}}, 0xe8) sendmmsg$inet6(r2, &(0x7f00000090c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0xf7ffff7f00000000) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280), 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) r7 = socket(0x1e, 0x4, 0x0) recvmmsg$unix(r7, 0x0, 0x0, 0x400122a0, 0x0) sendmmsg(r7, &(0x7f00000030c0), 0x0, 0x9200000000000000) sendmmsg$alg(r6, 0x0, 0x0, 0x40800) shutdown(0xffffffffffffffff, 0x1) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000000)=0x80000000, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 2m4.28384709s ago: executing program 40 (id=13175): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="55c0cc0ba6f3b908ecb5c6e93e4dc70ed9c875dd444569fab05e32a08e71d1c480fa1ada9e6f952dea418e2eb2dd8dcdd18f82c2be42e92405d2eccae94e713594f13ebfe37be3cb7ce0eb237d63f25744e42baf027055a65359c121788ba610f7df23b902755c5771d93efedd8252aca1dda5efe1493ec0a5a9e965666d1afe33b384953a9102b3f1", 0x89}, {&(0x7f00000002c0)="4b17746f0c2c20350492d7a09e5dc9648fbc15e2812f642ac2c20713a937013b9aad5bcc52d50571282c1891507b899bbdff0360237f4f24fce4ed425f64ce8355d10afb19676ebadb52", 0x4a}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)="900d3798e4653207eae6da23bf6c69f8e965679b910b52e0a4de8e3c4ef97ab320820bd9275a6e2a4609c4feb730084e64cc106664be66878f403244c97c0411b65371955f45c915599f9f722d1962a221a86918d50891c838bfdf21f7a255f2e2cf5839d1c3aa3dbfcd94ca44e18c7863d497ff4f85628494915bc016f7c5d62747bb5368ef052201a0ee3cc9dca7156e893cf07b494f98a177460a7ec073fd8af879ae71c8cac715a241052bae3a3f09f4f4dda617e5ca05290be71acaabf4544ca83830", 0xc5}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20008d0) sendto$inet(r1, &(0x7f0000000480)="1770636c259d1cf74f499e95624f1bab90e0febfcb6e62c7c10d275a871e8651912a485d913942d7cd6d0f54fce6089897addaef8dfff8c472bf071936868bb2e57f5d30d6ee3ccbce435cdc209f12b0cc7fc787", 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000380)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f00000003c0)={0x41424344}, 0xc, 0x8) syz_emit_ethernet(0x25a, &(0x7f0000000940)=ANY=[@ANYBLOB="0180c2000000ffffffffffff81002c0086dd640d2ea3022006fffe8000000000000000000000000000aafc020000000000000000000000000001870a000000000000010200000730000000030a0300f097ffffffffffffffffffffffffffff7f40000000000000000900000000000000000000000000000005021e2105020480071000000002027f040004000000000000003c00622166000000621f0000000000000b4c8278960ebb2e1788ff51b1d2e27261006c95e03a285c642a303240129fd4dc7bdd6d9d0d2aced45db296aab33d931a3b0caa91d0afcf6fbb991103d6cb3d84c1de48f96d7eb716fa42217119819184d2f5f55d575260a9e8d2058fd5a8bb86ae9f9a8526d39669d9b9e12764e44e73457dab7bfb7d34d5b192b572f1dc7de8c201336fd1716351dcd2341f35294fedc9afe0dc56b3035a937bc725f58de60b08a8a45ba86cc6a2359facaf87a04b3e1269378f24bfde507b9876111f48af559e033b8f1b60494e706538cf9bb09f9d2709434e50d59644f4a9b789291d108701020000c9100000000000000000000000000000000005020800000000000000000918680000004e204e21", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="800400069078000002042b0b1e030c02042e03012ef4d76489eb30f163bc671ae521ca144c8ba0337981a41fec683cd1dbff4dade80bb1da74454446d303b2f052988d1ce716c0310432b4eac35330e2ed6377387d9bd3b56c70c4bc04b7e2076bd92c0457b0fa7e9fe391135f68d60f820e8469a783ac76521d42f54f7d818b6229725a3ce002d4457bbd88c62de7250d650aecab3ec935f13ec4827e7932a93b53fb65"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=r4, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000040000000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, r5, 0x0, 0xa0028000}, 0x86) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x4) listen(0xffffffffffffffff, 0x9f) write(r6, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638", 0x27) socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x6a040000) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) syz_extract_tcp_res(&(0x7f0000000640), 0x4eb6, 0x9) r7 = socket(0x5, 0x3, 0x0) write(r7, &(0x7f0000000000)="240000001e005f80024000000000000002000000010000000000080008000100000000ff", 0x24) 2m1.773045258s ago: executing program 41 (id=13177): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) (async, rerun: 32) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94) (async) socket(0x10, 0x3, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x42031, 0xffffffffffffffff, 0x80000000) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000004c0)={0x4, 0x4, 0x9c34, 0xc0}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x48884) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 41.246095486s ago: executing program 9 (id=13192): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000220000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) 37.144316157s ago: executing program 9 (id=13193): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000280)="f5", 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x10000}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0xdf15003157931110, 0x10}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xfdffffff, 0x7e2, 0x6}}]}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xd50}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000084}, 0x4800) 28.898483008s ago: executing program 9 (id=13194): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000020642500000000002020207b1af8ff00000000bfa108000000000047010000f6ffffffb702000008000000b70b000000000000850000000500000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x17, &(0x7f0000000000)=""/23}, 0x94) r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) 17.682643917s ago: executing program 9 (id=13195): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000004c0)={r1, @in6={{0xa, 0x4e22, 0xfffffffe, @empty, 0x9d}}, 0x0, 0x8002}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="0000000000000000ffffffff0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r6, 0x1) recvmmsg(r6, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r9, {0xfff3, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'team_slave_0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000300090c10000000008003000000", 0x58}], 0x1) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000780)=0xe8) sendmsg$nl_generic(r11, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="740200003b0020002bbd7000fbdbdf251b000000a501518008007c00ac14143c0800e100", @ANYRES32=r12, @ANYBLOB="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"], 0x274}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000018}, 0x4000080) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000dd225eaadd409240812b2a5f1ff244a35d401097d874034f2cae0c1c96e67413dc6f26187902a9b3ae472f8b38a865390d937be85e62ac1994"], 0x50) r13 = socket(0x21, 0x800, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r13) socket$nl_netfilter(0x10, 0x3, 0xc) 10.231550303s ago: executing program 9 (id=13196): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x4}}}}}, 0x0) 0s ago: executing program 9 (id=13197): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00ff", 0xb2, 0xb, 0x6, 0x6}, 0x3c) kernel console output (not intermixed with test programs): registering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1578.934516][T11509] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1579.045812][T11523] FAULT_INJECTION: forcing a failure. [ 1579.045812][T11523] name failslab, interval 1, probability 0, space 0, times 0 [ 1579.068716][T11523] CPU: 1 UID: 0 PID: 11523 Comm: syz.5.12516 Not tainted syzkaller #0 PREEMPT(full) [ 1579.068746][T11523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1579.068760][T11523] Call Trace: [ 1579.068768][T11523] [ 1579.068777][T11523] dump_stack_lvl+0x189/0x250 [ 1579.068807][T11523] ? __pfx____ratelimit+0x10/0x10 [ 1579.068831][T11523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1579.068854][T11523] ? __pfx__printk+0x10/0x10 [ 1579.068883][T11523] ? __pfx___might_resched+0x10/0x10 [ 1579.068901][T11523] ? fs_reclaim_acquire+0x7d/0x100 [ 1579.068924][T11523] should_fail_ex+0x414/0x560 [ 1579.068956][T11523] should_failslab+0xa8/0x100 [ 1579.068986][T11523] __kmalloc_noprof+0xcb/0x4f0 [ 1579.069011][T11523] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1579.069046][T11523] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1579.069083][T11523] genl_family_rcv_msg_doit+0xb8/0x300 [ 1579.069119][T11523] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1579.069157][T11523] ? apparmor_capable+0x137/0x1b0 [ 1579.069184][T11523] ? bpf_lsm_capable+0x9/0x20 [ 1579.069210][T11523] ? security_capable+0x7e/0x2e0 [ 1579.069248][T11523] genl_rcv_msg+0x60e/0x790 [ 1579.069283][T11523] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1579.069311][T11523] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1579.069340][T11523] ? __asan_memcpy+0x40/0x70 [ 1579.069362][T11523] ? __pfx_ref_tracker_free+0x10/0x10 [ 1579.069390][T11523] netlink_rcv_skb+0x208/0x470 [ 1579.069411][T11523] ? __lock_acquire+0xab9/0xd20 [ 1579.069440][T11523] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1579.069469][T11523] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1579.069511][T11523] ? down_read+0x1ad/0x2e0 [ 1579.069537][T11523] genl_rcv+0x28/0x40 [ 1579.069561][T11523] netlink_unicast+0x82c/0x9e0 [ 1579.069589][T11523] ? __pfx_netlink_unicast+0x10/0x10 [ 1579.069610][T11523] ? netlink_sendmsg+0x642/0xb30 [ 1579.069628][T11523] ? skb_put+0x11b/0x210 [ 1579.069655][T11523] netlink_sendmsg+0x805/0xb30 [ 1579.069693][T11523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1579.069719][T11523] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1579.069741][T11523] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1579.069762][T11523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1579.069785][T11523] __sock_sendmsg+0x219/0x270 [ 1579.069807][T11523] ____sys_sendmsg+0x505/0x830 [ 1579.069839][T11523] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1579.069874][T11523] ? import_iovec+0x74/0xa0 [ 1579.069904][T11523] ___sys_sendmsg+0x21f/0x2a0 [ 1579.069932][T11523] ? __pfx____sys_sendmsg+0x10/0x10 [ 1579.069999][T11523] ? __fget_files+0x2a/0x420 [ 1579.070016][T11523] ? __fget_files+0x3a0/0x420 [ 1579.070044][T11523] __x64_sys_sendmsg+0x19b/0x260 [ 1579.070073][T11523] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1579.070110][T11523] ? __pfx_ksys_write+0x10/0x10 [ 1579.070133][T11523] ? rcu_is_watching+0x15/0xb0 [ 1579.070157][T11523] ? do_syscall_64+0xbe/0x3b0 [ 1579.070185][T11523] do_syscall_64+0xfa/0x3b0 [ 1579.070207][T11523] ? lockdep_hardirqs_on+0x9c/0x150 [ 1579.070230][T11523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.070250][T11523] ? clear_bhb_loop+0x60/0xb0 [ 1579.070274][T11523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.070293][T11523] RIP: 0033:0x7ff6c8b8eba9 [ 1579.070312][T11523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1579.070331][T11523] RSP: 002b:00007ff6c6df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1579.070353][T11523] RAX: ffffffffffffffda RBX: 00007ff6c8dd5fa0 RCX: 00007ff6c8b8eba9 [ 1579.070369][T11523] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 1579.070381][T11523] RBP: 00007ff6c6df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1579.070394][T11523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1579.070406][T11523] R13: 00007ff6c8dd6038 R14: 00007ff6c8dd5fa0 R15: 00007ffff05ca6f8 [ 1579.070436][T11523] [ 1579.605660][ T36] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1579.615575][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.641253][T11525] batman_adv: batadv0: Adding interface: dummy0 [ 1579.648279][T11525] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1579.684770][T11534] netlink: 44 bytes leftover after parsing attributes in process `syz.5.12520'. [ 1579.715772][T11525] batman_adv: batadv0: Interface activated: dummy0 [ 1579.740287][ T36] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1579.775622][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.795541][ T36] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1579.804287][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.845696][ T36] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1579.858517][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.296150][T11557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12527'. [ 1580.297494][T11556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12526'. [ 1580.915898][T11576] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1580.946911][T11576] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.037849][T11580] netlink: 'syz.0.12535': attribute type 10 has an invalid length. [ 1581.077622][T11576] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1581.098171][T11576] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.210011][T11576] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1581.232744][T11576] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.358727][T11576] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1581.380481][T11576] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.404642][T11598] netlink: 'syz.0.12539': attribute type 23 has an invalid length. [ 1582.559869][T11606] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12542'. [ 1582.903723][T11611] netlink: 'syz.0.12544': attribute type 10 has an invalid length. [ 1582.917263][T11611] mac80211_hwsim hwsim184 wlan1: entered promiscuous mode [ 1582.925049][T11611] mac80211_hwsim hwsim184 wlan1: entered allmulticast mode [ 1582.933483][T11611] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1583.412749][ T6147] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1583.434383][ T6147] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.765600][ T6145] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1583.781697][ T6145] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.817574][ T6145] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1583.834791][ T6145] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.882424][ T1085] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1583.931567][ T1085] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1586.552245][T11652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12556'. [ 1587.250717][T11665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12561'. [ 1587.326387][T11665] veth1_vlan: entered allmulticast mode [ 1587.625990][T11677] tipc: New replicast peer: 255.255.255.255 [ 1587.636966][T11677] tipc: Enabled bearer , priority 10 [ 1588.283935][T11690] syz_tun (unregistering): left allmulticast mode [ 1588.747788][ T8399] tipc: Node number set to 1307641403 [ 1589.022954][T11696] netlink: 256 bytes leftover after parsing attributes in process `syz.3.12574'. [ 1589.057128][ T8897] Bluetooth: hci3: command 0x0406 tx timeout [ 1589.567744][ T8897] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1589.580310][ T8897] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1589.590460][ T8897] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1589.614432][ T8897] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1589.631536][ T8897] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1589.705759][ T36] bridge_slave_1: left allmulticast mode [ 1589.707870][ T8897] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1589.723293][ T8897] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1589.732548][ T8897] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1589.735271][ T36] bridge_slave_1: left promiscuous mode [ 1589.762172][ T8897] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1589.770036][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.780087][ T8897] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1589.938766][ T36] bridge_slave_0: left allmulticast mode [ 1589.944509][ T36] bridge_slave_0: left promiscuous mode [ 1589.987820][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.289376][ T8897] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1590.309007][ T8897] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1590.321770][ T8897] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1590.333486][ T8897] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1590.342421][ T8897] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1590.639197][T30543] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1590.664850][ T36] dvmrp1 (unregistering): left allmulticast mode [ 1590.671730][T30543] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1590.674290][T30543] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1590.699049][T30543] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1590.715191][T30543] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1591.042562][ T36] bond0 (unregistering): left allmulticast mode [ 1591.049712][ T36] bond_slave_0: left allmulticast mode [ 1591.055196][ T36] bond_slave_1: left allmulticast mode [ 1591.061349][ T36] batadv_slave_0: left allmulticast mode [ 1591.067898][ T36] bond0 (unregistering): left promiscuous mode [ 1591.074084][ T36] bond_slave_0: left promiscuous mode [ 1591.080010][ T36] bond_slave_1: left promiscuous mode [ 1591.085549][ T36] batadv_slave_0: left promiscuous mode [ 1591.113946][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1591.124172][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1591.135168][ T36] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1591.148878][ T36] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1591.158756][ T36] bond0 (unregistering): Released all slaves [ 1591.172956][ T36] bond1 (unregistering): Released all slaves [ 1591.259903][ T36] k›*·]‘: left promiscuous mode [ 1591.353670][ T36] tipc: Disabling bearer [ 1591.366727][ T36] tipc: Left network mode [ 1591.702961][T30543] Bluetooth: hci0: command tx timeout [ 1591.856876][T30543] Bluetooth: hci1: command tx timeout [ 1592.416569][T30543] Bluetooth: hci2: command tx timeout [ 1592.616571][T11702] chnl_net:caif_netlink_parms(): no params data found [ 1592.816558][T30543] Bluetooth: hci3: command tx timeout [ 1592.869324][T11702] bridge0: port 1(bridge_slave_0) entered blocking state [ 1592.885785][T11702] bridge0: port 1(bridge_slave_0) entered disabled state [ 1592.894235][T11702] bridge_slave_0: entered allmulticast mode [ 1592.912876][T11702] bridge_slave_0: entered promiscuous mode [ 1592.971863][T11702] bridge0: port 2(bridge_slave_1) entered blocking state [ 1592.980509][T11702] bridge0: port 2(bridge_slave_1) entered disabled state [ 1592.990015][T11702] bridge_slave_1: entered allmulticast mode [ 1593.007019][T11702] bridge_slave_1: entered promiscuous mode [ 1593.090972][T11708] chnl_net:caif_netlink_parms(): no params data found [ 1593.108554][T11702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1593.130569][T11702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1593.420110][T11702] team0: Port device team_slave_0 added [ 1593.471296][T11702] team0: Port device team_slave_1 added [ 1593.570752][T11702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1593.579074][T11702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1593.608790][T11702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1593.645710][T11702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1593.653933][T11702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1593.681705][T11702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1593.728946][T11708] bridge0: port 1(bridge_slave_0) entered blocking state [ 1593.736729][T11708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1593.744096][T11708] bridge_slave_0: entered allmulticast mode [ 1593.752793][T11708] bridge_slave_0: entered promiscuous mode [ 1593.777135][T30543] Bluetooth: hci0: command tx timeout [ 1593.815097][T11708] bridge0: port 2(bridge_slave_1) entered blocking state [ 1593.833109][T11708] bridge0: port 2(bridge_slave_1) entered disabled state [ 1593.841133][T11708] bridge_slave_1: entered allmulticast mode [ 1593.851120][T11708] bridge_slave_1: entered promiscuous mode [ 1593.937025][T30543] Bluetooth: hci1: command tx timeout [ 1593.979464][T11702] hsr_slave_0: entered promiscuous mode [ 1593.996989][T11702] hsr_slave_1: entered promiscuous mode [ 1594.005990][T11702] debugfs: 'hsr0' already exists in 'hsr' [ 1594.022145][T11702] Cannot create hsr debugfs directory [ 1594.070479][T11708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1594.133349][T11708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1594.429469][T11708] team0: Port device team_slave_0 added [ 1594.444929][ T36] hsr_slave_0: left promiscuous mode [ 1594.453909][ T36] hsr_slave_1: left promiscuous mode [ 1594.480828][ T36] pim6reg (unregistering): left allmulticast mode [ 1594.502737][T30543] Bluetooth: hci2: command tx timeout [ 1594.898174][T30543] Bluetooth: hci3: command tx timeout [ 1594.992263][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1595.061102][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1595.757781][T11708] team0: Port device team_slave_1 added [ 1595.864126][T11708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1595.872432][T30543] Bluetooth: hci0: command tx timeout [ 1595.878169][T11708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1595.905386][T11708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1595.995537][T11708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1596.003823][T11708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1596.031568][T30543] Bluetooth: hci1: command tx timeout [ 1596.045485][T11708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1596.535487][T11708] hsr_slave_0: entered promiscuous mode [ 1596.554122][T11708] hsr_slave_1: entered promiscuous mode [ 1596.561316][T11708] debugfs: 'hsr0' already exists in 'hsr' [ 1596.569032][T11708] Cannot create hsr debugfs directory [ 1596.578689][T30543] Bluetooth: hci2: command tx timeout [ 1596.642236][T11705] chnl_net:caif_netlink_parms(): no params data found [ 1596.700271][T11716] chnl_net:caif_netlink_parms(): no params data found [ 1596.978002][T30543] Bluetooth: hci3: command tx timeout [ 1597.042960][T11705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.050885][T11705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1597.060991][T11705] bridge_slave_0: entered allmulticast mode [ 1597.083133][T11705] bridge_slave_0: entered promiscuous mode [ 1597.099116][T11705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1597.106287][T11705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1597.124074][T11705] bridge_slave_1: entered allmulticast mode [ 1597.134806][T11705] bridge_slave_1: entered promiscuous mode [ 1597.166235][T11702] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1597.273677][T11716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.284676][T11716] bridge0: port 1(bridge_slave_0) entered disabled state [ 1597.296705][T11716] bridge_slave_0: entered allmulticast mode [ 1597.304634][T11716] bridge_slave_0: entered promiscuous mode [ 1597.313097][T11702] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1597.330719][T11705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1597.350322][ T36] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1597.360951][ T36] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.385945][T11716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1597.414541][T11716] bridge0: port 2(bridge_slave_1) entered disabled state [ 1597.432150][T11716] bridge_slave_1: entered allmulticast mode [ 1597.441725][T11716] bridge_slave_1: entered promiscuous mode [ 1597.470729][T11702] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1597.484064][T11702] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1597.485845][T11758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12584'. [ 1597.509364][T11705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1597.567658][T11760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1597.618091][T11705] team0: Port device team_slave_0 added [ 1597.631033][ T36] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1597.641351][ T36] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.660500][T11716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1597.675072][T11716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1597.714000][T11705] team0: Port device team_slave_1 added [ 1597.754066][T11760] vlan2: entered allmulticast mode [ 1597.763807][T11760] batadv0: entered allmulticast mode [ 1597.836116][ T36] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1597.849822][ T36] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.883520][T11716] team0: Port device team_slave_0 added [ 1597.896161][T11716] team0: Port device team_slave_1 added [ 1597.930054][T11705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1597.938478][T11705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1597.968883][T30543] Bluetooth: hci0: command tx timeout [ 1597.975323][T11705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1597.993812][T11705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1598.002894][T11705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1598.035389][T11705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1598.097774][T30543] Bluetooth: hci1: command tx timeout [ 1598.105654][ T36] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1598.124780][ T36] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.225058][T11716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1598.243568][T11716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1598.285589][T11716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1598.303299][T11716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1598.313917][T11716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1598.343233][T11716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1598.357037][T11708] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1598.369873][T11708] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1598.410484][T11705] hsr_slave_0: entered promiscuous mode [ 1598.419460][T11705] hsr_slave_1: entered promiscuous mode [ 1598.429678][T11705] debugfs: 'hsr0' already exists in 'hsr' [ 1598.435791][T11705] Cannot create hsr debugfs directory [ 1598.451660][T11776] gretap0: entered promiscuous mode [ 1598.458594][T11776] vlan3: entered promiscuous mode [ 1598.505972][T11708] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1598.607309][T11708] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1598.657298][T30543] Bluetooth: hci2: command tx timeout [ 1598.741762][T11716] hsr_slave_0: entered promiscuous mode [ 1598.759497][T11716] hsr_slave_1: entered promiscuous mode [ 1598.775087][T11716] debugfs: 'hsr0' already exists in 'hsr' [ 1598.781960][T11716] Cannot create hsr debugfs directory [ 1599.057680][T30543] Bluetooth: hci3: command tx timeout [ 1599.183501][ T36] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.194553][T11793] netlink: 'syz.3.12592': attribute type 10 has an invalid length. [ 1599.256033][T11793] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1599.280423][ T36] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.411864][ T36] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.494699][T11797] netlink: 'syz.3.12593': attribute type 10 has an invalid length. [ 1599.503729][T11797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1599.521048][T11797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1599.534896][T11797] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1599.550979][ T36] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.589445][T11797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12593'. [ 1599.601015][T11797] netlink: 'syz.3.12593': attribute type 1 has an invalid length. [ 1599.614055][T11702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1599.699042][T11705] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1599.722602][T11705] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1599.766868][T11705] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1599.794374][T11702] 8021q: adding VLAN 0 to HW filter on device team0 [ 1599.804526][T11705] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1599.903663][ T6153] bridge0: port 1(bridge_slave_0) entered blocking state [ 1599.912109][ T6153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1599.931462][T11708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1599.985362][ T6153] bridge0: port 2(bridge_slave_1) entered blocking state [ 1599.992731][ T6153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1600.080172][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.092083][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1600.125791][T11716] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1600.144443][T11716] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1600.183094][T11708] 8021q: adding VLAN 0 to HW filter on device team0 [ 1600.196313][T11716] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1600.209216][T11716] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1600.274021][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.285303][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1600.330227][ T6153] bridge0: port 1(bridge_slave_0) entered blocking state [ 1600.337584][ T6153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1600.401970][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.414573][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1600.564289][ T6153] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.571527][ T6153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1600.702000][ T36] bond0: (slave netdevsim0): Releasing backup interface [ 1600.724375][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.738810][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1600.892102][T11705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1601.102584][T11705] 8021q: adding VLAN 0 to HW filter on device team0 [ 1601.298882][T11837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12597'. [ 1601.364455][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1601.372720][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1601.418864][T11837] bridge_slave_1: left allmulticast mode [ 1601.424648][T11837] bridge_slave_1: left promiscuous mode [ 1601.432807][T11837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1601.444132][T11837] bridge_slave_0: left allmulticast mode [ 1601.452242][T11837] bridge_slave_0: left promiscuous mode [ 1601.460879][T11837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1601.596323][T11716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1601.616148][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1601.623720][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1601.760777][ T36] bridge_slave_1: left allmulticast mode [ 1601.768105][ T36] bridge_slave_1: left promiscuous mode [ 1601.774097][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1601.805671][ T36] bridge_slave_0: left allmulticast mode [ 1601.816404][ T36] bridge_slave_0: left promiscuous mode [ 1601.822302][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1601.836997][ T36] bridge_slave_1: left allmulticast mode [ 1601.842777][ T36] bridge_slave_1: left promiscuous mode [ 1601.851382][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1601.863921][ T36] bridge_slave_0: left allmulticast mode [ 1601.872940][ T36] bridge_slave_0: left promiscuous mode [ 1601.879571][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1602.039033][T11844] netlink: 'syz.3.12598': attribute type 10 has an invalid length. [ 1602.284805][ T36] erspan0 (unregistering): left allmulticast mode [ 1602.404739][ T36] dvmrp1 (unregistering): left allmulticast mode [ 1602.958719][ T36] bond1 (unregistering): (slave vlan3): Releasing active interface [ 1602.969676][ T36] bond1 (unregistering): Released all slaves [ 1603.172411][ T36] bond2 (unregistering): Released all slaves [ 1603.190043][ T36] bo (unregistering): Released all slaves [ 1603.411723][ T36] bond0 (unregistering): Released all slaves [ 1603.627286][ T36] bond3 (unregistering): Released all slaves [ 1603.848499][ T36] bond4 (unregistering): Released all slaves [ 1604.281617][ T94] block nbd4: Possible stuck request ffff8880251d0000: control (read@0,1024B). Runtime 1470 seconds [ 1604.292981][ T94] block nbd4: Possible stuck request ffff8880251d01c0: control (read@1024,1024B). Runtime 1470 seconds [ 1604.304938][ T94] block nbd4: Possible stuck request ffff8880251d0380: control (read@2048,1024B). Runtime 1470 seconds [ 1604.316961][ T94] block nbd4: Possible stuck request ffff8880251d0540: control (read@3072,1024B). Runtime 1470 seconds [ 1604.384861][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1604.402824][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1604.414437][ T36] bond0 (unregistering): Released all slaves [ 1604.638595][ T36] dvmrp1 (unregistering): left allmulticast mode [ 1604.945883][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1604.958949][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1604.970552][ T36] bond0 (unregistering): Released all slaves [ 1604.994488][T11702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1605.132828][T11844] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1605.247555][T11845] mac80211_hwsim hwsim207 wlan1: entered allmulticast mode [ 1605.352575][ T36] k›*·]‘: left promiscuous mode [ 1605.405188][T11716] 8021q: adding VLAN 0 to HW filter on device team0 [ 1605.428695][ T36] k›*·]‘: left promiscuous mode [ 1605.456406][ T6145] bridge0: port 1(bridge_slave_0) entered blocking state [ 1605.463923][ T6145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1605.575335][T11852] netlink: set zone limit has 4 unknown bytes [ 1605.581952][T11708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1605.583870][ T6145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1605.596709][ T6145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1605.627681][ T36] tipc: Left network mode [ 1605.779135][ T36] tipc: Disabling bearer [ 1605.801188][ T36] tipc: Left network mode [ 1605.873553][ T36] tipc: Left network mode [ 1605.958671][T11702] veth0_vlan: entered promiscuous mode [ 1606.015009][ T36] IPVS: stopping master sync thread 7071 ... [ 1606.022695][T11702] veth1_vlan: entered promiscuous mode [ 1606.403994][T11702] veth0_macvtap: entered promiscuous mode [ 1606.449414][T11702] veth1_macvtap: entered promiscuous mode [ 1606.545908][T11702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1606.603223][T11702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1606.668533][T11705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1606.736017][ T6147] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.770008][ T6147] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.877486][ T6147] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.888030][ T6147] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.953458][T11708] veth0_vlan: entered promiscuous mode [ 1606.989288][T11716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1607.048373][T11708] veth1_vlan: entered promiscuous mode [ 1607.490297][T11708] veth0_macvtap: entered promiscuous mode [ 1607.604927][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1607.624678][T11708] veth1_macvtap: entered promiscuous mode [ 1607.657194][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1607.942439][T11708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1607.990758][T10155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1608.001645][T10155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1608.091852][T11708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1608.104373][T11716] veth0_vlan: entered promiscuous mode [ 1608.157222][T11705] veth0_vlan: entered promiscuous mode [ 1608.169285][T10155] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.256122][T11705] veth1_vlan: entered promiscuous mode [ 1608.292954][T10155] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.304444][T10155] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.340262][T11716] veth1_vlan: entered promiscuous mode [ 1608.374705][T10155] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.770844][T11705] veth0_macvtap: entered promiscuous mode [ 1608.791428][T11898] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1608.831040][T11716] veth0_macvtap: entered promiscuous mode [ 1608.866000][T11705] veth1_macvtap: entered promiscuous mode [ 1608.955211][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1608.982349][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1609.048083][T11901] netlink: 'syz.7.12604': attribute type 10 has an invalid length. [ 1609.163698][T11716] veth1_macvtap: entered promiscuous mode [ 1609.176048][T11901] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1609.230382][T11705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1609.276211][T11900] mac80211_hwsim hwsim211 wlan1: entered allmulticast mode [ 1609.312527][T11821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1609.356623][T11821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1609.417063][T11716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1609.448680][T11705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1609.511283][T11909] netlink: 'syz.7.12607': attribute type 10 has an invalid length. [ 1609.567765][T11716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1609.591440][T10155] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.702783][T11909] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1609.732773][T10155] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.762201][T10155] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.877140][T10155] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.885940][T10155] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.979134][T10155] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.025289][T10155] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.104195][T11912] syzkaller0: entered promiscuous mode [ 1610.160809][T11912] syzkaller0: entered allmulticast mode [ 1610.209689][T10155] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.506115][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1610.566708][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1610.869781][T11930] netlink: 'syz.3.12610': attribute type 1 has an invalid length. [ 1610.892716][T11930] netlink: 'syz.3.12610': attribute type 3 has an invalid length. [ 1610.932305][T11821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1610.932500][T11930] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12610'. [ 1610.966559][T11821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1611.011211][ T36] hsr_slave_0: left promiscuous mode [ 1611.021352][ T36] hsr_slave_1: left promiscuous mode [ 1611.028836][ T36] batman_adv: batadv0: Interface deactivated: dummy0 [ 1611.057582][ T36] batman_adv: batadv0: Removing interface: dummy0 [ 1611.082752][ T36] hsr_slave_0: left promiscuous mode [ 1611.105453][ T36] hsr_slave_1: left promiscuous mode [ 1611.112526][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1611.156441][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1611.164743][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1611.186564][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1611.241336][ T36] hsr_slave_0: left promiscuous mode [ 1611.269280][ T36] hsr_slave_1: left promiscuous mode [ 1611.275524][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1611.313284][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1611.337457][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1611.345090][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1611.483509][ T36] batadv0: left allmulticast mode [ 1611.489927][ T36] veth1_macvtap: left promiscuous mode [ 1611.495764][ T36] veth0_macvtap: left promiscuous mode [ 1611.502695][ T36] veth1_vlan: left promiscuous mode [ 1611.508993][ T36] veth0_vlan: left promiscuous mode [ 1611.530356][ T36] veth1_macvtap: left promiscuous mode [ 1611.536208][ T36] veth0_macvtap: left promiscuous mode [ 1611.552859][ T36] veth1_vlan: left promiscuous mode [ 1611.563937][ T36] veth0_vlan: left promiscuous mode [ 1611.582587][ T36] veth1_macvtap: left promiscuous mode [ 1611.591717][ T36] veth0_macvtap: left promiscuous mode [ 1611.598312][ T36] veth1_vlan: left promiscuous mode [ 1611.604453][ T36] veth0_vlan: left promiscuous mode [ 1612.038365][ T36] pimreg (unregistering): left allmulticast mode [ 1614.107362][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1614.181206][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1615.452948][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1615.521289][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1616.301612][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1616.344054][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1616.514174][T11820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1616.524137][T11820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1617.032460][T11821] smc: removing ib device syz2 [ 1617.058331][ T134] smc: removing ib device syz! [ 1617.063532][T11957] netlink: 'syz.9.12617': attribute type 8 has an invalid length. [ 1617.522756][T11976] netlink: 'syz.9.12621': attribute type 10 has an invalid length. [ 1618.513801][T11991] netlink: 'syz.8.12625': attribute type 1 has an invalid length. [ 1618.664893][T11976] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1619.492472][T11998] syzkaller0: entered promiscuous mode [ 1619.514879][T11998] syzkaller0: entered allmulticast mode [ 1619.878283][T12016] syzkaller0: entered promiscuous mode [ 1619.883803][T12016] syzkaller0: entered allmulticast mode [ 1620.421399][T12041] netlink: 'syz.6.12636': attribute type 1 has an invalid length. [ 1621.222041][T12055] veth3: entered promiscuous mode [ 1622.174677][T12072] netlink: 256 bytes leftover after parsing attributes in process `syz.6.12646'. [ 1622.607058][ T30] audit: type=1800 audit(1757736753.684:34): pid=12076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.12646" name="memory.events" dev="tmpfs" ino=83 res=0 errno=0 [ 1623.036167][T12082] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12648'. [ 1623.237535][T12085] FAULT_INJECTION: forcing a failure. [ 1623.237535][T12085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1623.283009][T12085] CPU: 1 UID: 0 PID: 12085 Comm: syz.9.12649 Not tainted syzkaller #0 PREEMPT(full) [ 1623.283039][T12085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1623.283052][T12085] Call Trace: [ 1623.283062][T12085] [ 1623.283072][T12085] dump_stack_lvl+0x189/0x250 [ 1623.283101][T12085] ? __pfx____ratelimit+0x10/0x10 [ 1623.283125][T12085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1623.283148][T12085] ? __pfx__printk+0x10/0x10 [ 1623.283177][T12085] ? __pfx_migrate_enable+0x10/0x10 [ 1623.283208][T12085] should_fail_ex+0x414/0x560 [ 1623.283242][T12085] _copy_to_user+0x31/0xb0 [ 1623.283272][T12085] generic_map_lookup_batch+0x896/0xcc0 [ 1623.283311][T12085] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1623.283334][T12085] ? __fget_files+0x2a/0x420 [ 1623.283357][T12085] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1623.283381][T12085] bpf_map_do_batch+0x25e/0x5f0 [ 1623.283410][T12085] ? security_bpf+0x7e/0x300 [ 1623.283441][T12085] __sys_bpf+0x557/0x870 [ 1623.283469][T12085] ? __pfx___sys_bpf+0x10/0x10 [ 1623.283509][T12085] ? ksys_write+0x22a/0x250 [ 1623.283539][T12085] ? __pfx_ksys_write+0x10/0x10 [ 1623.283562][T12085] ? rcu_is_watching+0x15/0xb0 [ 1623.283591][T12085] __x64_sys_bpf+0x7c/0x90 [ 1623.283616][T12085] do_syscall_64+0xfa/0x3b0 [ 1623.283639][T12085] ? lockdep_hardirqs_on+0x9c/0x150 [ 1623.283661][T12085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.283682][T12085] ? clear_bhb_loop+0x60/0xb0 [ 1623.283706][T12085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.283726][T12085] RIP: 0033:0x7f308858eba9 [ 1623.283744][T12085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1623.283762][T12085] RSP: 002b:00007f30893d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1623.283784][T12085] RAX: ffffffffffffffda RBX: 00007f30887d5fa0 RCX: 00007f308858eba9 [ 1623.283800][T12085] RDX: 0000000000000038 RSI: 00002000000001c0 RDI: 0000000000000018 [ 1623.283813][T12085] RBP: 00007f30893d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1623.283844][T12085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1623.283857][T12085] R13: 00007f30887d6038 R14: 00007f30887d5fa0 R15: 00007fff6b830ad8 [ 1623.283894][T12085] [ 1623.741253][T12088] netlink: 'syz.9.12650': attribute type 10 has an invalid length. [ 1624.209121][T12093] bridge1: entered promiscuous mode [ 1624.473765][T12095] batadv0: entered promiscuous mode [ 1624.490776][T12095] vlan2: entered promiscuous mode [ 1624.680426][T12099] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12655'. [ 1624.720194][T12099] 8021q: VLANs not supported on ipvlan1 [ 1624.730798][ T36] IPVS: stop unused estimator thread 0... [ 1625.043826][T12105] netlink: 'syz.6.12657': attribute type 1 has an invalid length. [ 1625.094124][T12105] netlink: 'syz.6.12657': attribute type 3 has an invalid length. [ 1625.097677][T12107] netlink: 'syz.6.12657': attribute type 12 has an invalid length. [ 1625.116073][T12107] netlink: 'syz.6.12657': attribute type 29 has an invalid length. [ 1625.143586][T12107] netlink: 148 bytes leftover after parsing attributes in process `syz.6.12657'. [ 1625.164617][T12105] netlink: 224 bytes leftover after parsing attributes in process `syz.6.12657'. [ 1625.187440][T12107] netlink: 59 bytes leftover after parsing attributes in process `syz.6.12657'. [ 1625.768104][ T8897] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1625.788143][ T8897] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1625.807244][ T8897] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1625.837295][ T8897] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1625.840200][T12116] netlink: 'syz.6.12661': attribute type 23 has an invalid length. [ 1625.855874][ T8897] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1625.967509][T12118] bond_slave_0: entered promiscuous mode [ 1625.973275][T12118] bond_slave_1: entered promiscuous mode [ 1626.006261][T12118] vlan2: entered promiscuous mode [ 1626.012288][T12118] bond0: entered promiscuous mode [ 1626.020854][T12118] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 1626.022871][T12122] netlink: 'syz.6.12664': attribute type 2 has an invalid length. [ 1626.315407][T12124] mac80211_hwsim hwsim206 wlan0: entered promiscuous mode [ 1626.359986][T12124] macsec1: entered promiscuous mode [ 1626.405291][T12124] macsec1: entered allmulticast mode [ 1626.411695][T12124] mac80211_hwsim hwsim206 wlan0: entered allmulticast mode [ 1626.693788][T11820] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1626.743108][T12136] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 1626.793891][T12136] CPU: 0 UID: 0 PID: 12136 Comm: syz.3.12669 Not tainted syzkaller #0 PREEMPT(full) [ 1626.793922][T12136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1626.793936][T12136] Call Trace: [ 1626.793945][T12136] [ 1626.793955][T12136] dump_stack_lvl+0x189/0x250 [ 1626.793991][T12136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1626.794017][T12136] ? __pfx__printk+0x10/0x10 [ 1626.794048][T12136] ? __rcu_read_unlock+0x84/0xe0 [ 1626.794076][T12136] ? kernfs_path_from_node+0x2f/0x290 [ 1626.794099][T12136] ? kernfs_path_from_node+0x250/0x290 [ 1626.794121][T12136] ? kernfs_path_from_node+0x2f/0x290 [ 1626.794149][T12136] sysfs_warn_dup+0x8e/0xa0 [ 1626.794173][T12136] sysfs_do_create_link_sd+0xc0/0x110 [ 1626.794199][T12136] device_add_class_symlinks+0x1cf/0x240 [ 1626.794230][T12136] device_add+0x475/0xb50 [ 1626.794261][T12136] wiphy_register+0x1c81/0x2aa0 [ 1626.794307][T12136] ? __pfx_wiphy_register+0x10/0x10 [ 1626.794332][T12136] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 1626.794370][T12136] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 1626.794405][T12136] ieee80211_register_hw+0x3442/0x40a0 [ 1626.794458][T12136] ? ieee80211_register_hw+0x13a1/0x40a0 [ 1626.794499][T12136] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1626.794535][T12136] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1626.794574][T12136] ? __hrtimer_setup+0x187/0x210 [ 1626.794593][T12136] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1626.794620][T12136] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 1626.794689][T12136] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1626.794719][T12136] ? trace_kmalloc+0x1f/0xd0 [ 1626.794744][T12136] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 1626.794772][T12136] ? kstrndup+0xbf/0x160 [ 1626.794805][T12136] hwsim_new_radio_nl+0xea4/0x1b10 [ 1626.794838][T12136] ? __pfx___nla_validate_parse+0x10/0x10 [ 1626.794885][T12136] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1626.794933][T12136] ? __nla_parse+0x40/0x60 [ 1626.794960][T12136] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1626.795004][T12136] genl_family_rcv_msg_doit+0x212/0x300 [ 1626.795045][T12136] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1626.795089][T12136] ? bpf_lsm_capable+0x9/0x20 [ 1626.795115][T12136] ? security_capable+0x7e/0x2e0 [ 1626.795155][T12136] genl_rcv_msg+0x60e/0x790 [ 1626.795194][T12136] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1626.795223][T12136] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1626.795272][T12136] netlink_rcv_skb+0x208/0x470 [ 1626.795295][T12136] ? __lock_acquire+0xab9/0xd20 [ 1626.795326][T12136] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1626.795358][T12136] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1626.795406][T12136] ? down_read+0x1ad/0x2e0 [ 1626.795436][T12136] genl_rcv+0x28/0x40 [ 1626.795463][T12136] netlink_unicast+0x82c/0x9e0 [ 1626.795496][T12136] ? __pfx_netlink_unicast+0x10/0x10 [ 1626.795521][T12136] ? netlink_sendmsg+0x642/0xb30 [ 1626.795542][T12136] ? skb_put+0x11b/0x210 [ 1626.795579][T12136] netlink_sendmsg+0x805/0xb30 [ 1626.795616][T12136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1626.795647][T12136] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1626.795671][T12136] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1626.795693][T12136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1626.795720][T12136] __sock_sendmsg+0x219/0x270 [ 1626.795746][T12136] ____sys_sendmsg+0x505/0x830 [ 1626.795782][T12136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1626.795821][T12136] ? import_iovec+0x74/0xa0 [ 1626.795861][T12136] ___sys_sendmsg+0x21f/0x2a0 [ 1626.795893][T12136] ? __pfx____sys_sendmsg+0x10/0x10 [ 1626.795960][T12136] ? __fget_files+0x2a/0x420 [ 1626.795980][T12136] ? __fget_files+0x3a0/0x420 [ 1626.796012][T12136] __x64_sys_sendmsg+0x19b/0x260 [ 1626.796045][T12136] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1626.796087][T12136] ? rcu_is_watching+0x15/0xb0 [ 1626.796114][T12136] ? do_syscall_64+0xbe/0x3b0 [ 1626.796143][T12136] do_syscall_64+0xfa/0x3b0 [ 1626.796167][T12136] ? lockdep_hardirqs_on+0x9c/0x150 [ 1626.796191][T12136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1626.796212][T12136] ? clear_bhb_loop+0x60/0xb0 [ 1626.796238][T12136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1626.796258][T12136] RIP: 0033:0x7f7cc3b8eba9 [ 1626.796278][T12136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1626.796298][T12136] RSP: 002b:00007f7cc4aa9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1626.796320][T12136] RAX: ffffffffffffffda RBX: 00007f7cc3dd5fa0 RCX: 00007f7cc3b8eba9 [ 1626.796334][T12136] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 1626.796345][T12136] RBP: 00007f7cc3c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1626.796356][T12136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1626.796367][T12136] R13: 00007f7cc3dd6038 R14: 00007f7cc3dd5fa0 R15: 00007fff27599398 [ 1626.796404][T12136] [ 1627.426070][T11820] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.581665][T11820] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.601603][T12157] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12675'. [ 1627.734485][T11820] bond0: (slave netdevsim0): Releasing backup interface [ 1627.748265][T11820] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.797650][T12113] chnl_net:caif_netlink_parms(): no params data found [ 1627.940091][T30543] Bluetooth: hci5: command tx timeout [ 1628.063688][T12175] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12681'. [ 1628.066015][T12177] netlink: 'syz.9.12679': attribute type 10 has an invalid length. [ 1628.109551][T12113] bridge0: port 1(bridge_slave_0) entered blocking state [ 1628.122146][T12113] bridge0: port 1(bridge_slave_0) entered disabled state [ 1628.136646][T12113] bridge_slave_0: entered allmulticast mode [ 1628.145002][T12113] bridge_slave_0: entered promiscuous mode [ 1628.170826][T12176] netlink: 'syz.8.12680': attribute type 10 has an invalid length. [ 1628.175943][T12177] mac80211_hwsim hwsim217 wlan1: entered promiscuous mode [ 1628.188815][T12177] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1628.223896][T12169] mac80211_hwsim hwsim217 wlan1: entered allmulticast mode [ 1628.260859][T12113] bridge0: port 2(bridge_slave_1) entered blocking state [ 1628.275095][T12113] bridge0: port 2(bridge_slave_1) entered disabled state [ 1628.293978][T12113] bridge_slave_1: entered allmulticast mode [ 1628.303289][T12113] bridge_slave_1: entered promiscuous mode [ 1628.368321][T12185] Unknown options in mask b7f2 [ 1628.449317][T12180] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.470681][T12189] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12685'. [ 1628.493612][T12176] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1628.619655][T11820] bridge_slave_1: left allmulticast mode [ 1628.631282][T11820] bridge_slave_1: left promiscuous mode [ 1628.641793][T11820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1628.660621][T11820] bridge_slave_0: left allmulticast mode [ 1628.674571][T11820] bridge_slave_0: left promiscuous mode [ 1628.683216][T11820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1628.710228][T12201] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12687'. [ 1629.272625][T11820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1629.284336][T11820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1629.297444][T11820] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1629.306251][T11820] bond0 (unregistering): Released all slaves [ 1629.344263][T12180] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1629.395298][T12113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1629.420800][T12193] syzkaller0: entered promiscuous mode [ 1629.426584][T12193] syzkaller0: entered allmulticast mode [ 1629.509360][T12206] veth3: entered promiscuous mode [ 1629.548668][T12113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1629.680991][T12180] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1629.695593][T12215] netlink: 'syz.9.12690': attribute type 10 has an invalid length. [ 1629.793693][T12113] team0: Port device team_slave_0 added [ 1629.906287][T12180] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1629.973878][T12228] FAULT_INJECTION: forcing a failure. [ 1629.973878][T12228] name failslab, interval 1, probability 0, space 0, times 0 [ 1629.988401][T12228] CPU: 0 UID: 0 PID: 12228 Comm: syz.9.12693 Not tainted syzkaller #0 PREEMPT(full) [ 1629.988427][T12228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1629.988439][T12228] Call Trace: [ 1629.988447][T12228] [ 1629.988456][T12228] dump_stack_lvl+0x189/0x250 [ 1629.988492][T12228] ? __pfx____ratelimit+0x10/0x10 [ 1629.988516][T12228] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1629.988539][T12228] ? __pfx__printk+0x10/0x10 [ 1629.988573][T12228] ? __pfx___might_resched+0x10/0x10 [ 1629.988598][T12228] should_fail_ex+0x414/0x560 [ 1629.988632][T12228] should_failslab+0xa8/0x100 [ 1629.988662][T12228] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1629.988690][T12228] ? __alloc_skb+0x112/0x2d0 [ 1629.988718][T12228] __alloc_skb+0x112/0x2d0 [ 1629.988746][T12228] netlink_sendmsg+0x5c6/0xb30 [ 1629.988781][T12228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1629.988808][T12228] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1629.988830][T12228] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1629.988852][T12228] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1629.988876][T12228] __sock_sendmsg+0x219/0x270 [ 1629.988906][T12228] ____sys_sendmsg+0x505/0x830 [ 1629.988938][T12228] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1629.988973][T12228] ? import_iovec+0x74/0xa0 [ 1629.989002][T12228] ___sys_sendmsg+0x21f/0x2a0 [ 1629.989029][T12228] ? __pfx____sys_sendmsg+0x10/0x10 [ 1629.989059][T12228] ? rcu_read_lock_any_held+0xb3/0x120 [ 1629.989095][T12228] ? sb_end_write+0xe9/0x1c0 [ 1629.989127][T12228] ? __pfx_vfs_write+0x10/0x10 [ 1629.989163][T12228] __x64_sys_sendmsg+0x19b/0x260 [ 1629.989193][T12228] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1629.989230][T12228] ? __pfx_ksys_write+0x10/0x10 [ 1629.989253][T12228] ? rcu_is_watching+0x15/0xb0 [ 1629.989278][T12228] ? do_syscall_64+0xbe/0x3b0 [ 1629.989307][T12228] do_syscall_64+0xfa/0x3b0 [ 1629.989330][T12228] ? lockdep_hardirqs_on+0x9c/0x150 [ 1629.989352][T12228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1629.989372][T12228] ? clear_bhb_loop+0x60/0xb0 [ 1629.989396][T12228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1629.989416][T12228] RIP: 0033:0x7f308858eba9 [ 1629.989434][T12228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1629.989452][T12228] RSP: 002b:00007f30893b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1629.989475][T12228] RAX: ffffffffffffffda RBX: 00007f30887d6090 RCX: 00007f308858eba9 [ 1629.989494][T12228] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1629.989508][T12228] RBP: 00007f30893b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1629.989520][T12228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1629.989532][T12228] R13: 00007f30887d6128 R14: 00007f30887d6090 R15: 00007fff6b830ad8 [ 1629.989564][T12228] [ 1630.271838][T30543] Bluetooth: hci5: command tx timeout [ 1630.295317][T12113] team0: Port device team_slave_1 added [ 1630.413211][T11820] hsr_slave_0: left promiscuous mode [ 1630.427280][T11820] hsr_slave_1: left promiscuous mode [ 1630.433569][T11820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1630.442367][T11820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1630.450934][T11820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1630.459688][T11820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1630.489779][T11820] veth1_macvtap: left promiscuous mode [ 1630.495554][T11820] veth0_macvtap: left promiscuous mode [ 1630.502988][T11820] veth1_vlan: left promiscuous mode [ 1630.508554][T11820] veth0_vlan: left promiscuous mode [ 1631.235789][T11820] team0 (unregistering): Port device team_slave_1 removed [ 1631.302421][T11820] team0 (unregistering): Port device team_slave_0 removed [ 1632.005891][T12113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1632.014161][T12113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1632.041827][T12113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1632.054781][T12113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1632.062206][T12113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1632.095478][T12113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1632.142172][T12237] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1632.193240][T11938] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.338602][T30543] Bluetooth: hci5: command tx timeout [ 1632.354149][T11938] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.440254][T12113] hsr_slave_0: entered promiscuous mode [ 1632.447523][T12113] hsr_slave_1: entered promiscuous mode [ 1632.453866][T12113] debugfs: 'hsr0' already exists in 'hsr' [ 1632.460891][T12113] Cannot create hsr debugfs directory [ 1632.479106][T12250] netlink: 24 bytes leftover after parsing attributes in process `syz.9.12700'. [ 1632.529607][ T134] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.555008][T12248] syzkaller0: entered promiscuous mode [ 1632.561717][T12248] syzkaller0: entered allmulticast mode [ 1632.594550][ T134] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.716598][T12254] netlink: 'syz.6.12702': attribute type 10 has an invalid length. [ 1633.105896][T12265] gretap0: entered promiscuous mode [ 1633.123907][T12265] vlan2: entered promiscuous mode [ 1633.385312][T12272] netlink: 'syz.9.12709': attribute type 1 has an invalid length. [ 1633.395074][T12272] netlink: 'syz.9.12709': attribute type 3 has an invalid length. [ 1633.417939][T12272] netlink: 224 bytes leftover after parsing attributes in process `syz.9.12709'. [ 1633.615886][T12286] netlink: 'syz.6.12713': attribute type 10 has an invalid length. [ 1633.656285][T12285] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1633.679555][T12285] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1633.952024][T12292] syzkaller0: entered promiscuous mode [ 1633.966553][T12292] syzkaller0: entered allmulticast mode [ 1634.067684][T12307] FAULT_INJECTION: forcing a failure. [ 1634.067684][T12307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1634.083983][T12307] CPU: 0 UID: 0 PID: 12307 Comm: syz.8.12719 Not tainted syzkaller #0 PREEMPT(full) [ 1634.084012][T12307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1634.084024][T12307] Call Trace: [ 1634.084033][T12307] [ 1634.084105][T12307] dump_stack_lvl+0x189/0x250 [ 1634.084135][T12307] ? __pfx____ratelimit+0x10/0x10 [ 1634.084158][T12307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1634.084182][T12307] ? __pfx__printk+0x10/0x10 [ 1634.084212][T12307] ? __pfx_migrate_enable+0x10/0x10 [ 1634.084246][T12307] should_fail_ex+0x414/0x560 [ 1634.084279][T12307] _copy_to_user+0x31/0xb0 [ 1634.084307][T12307] generic_map_lookup_batch+0x896/0xcc0 [ 1634.084347][T12307] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1634.084370][T12307] ? __fget_files+0x2a/0x420 [ 1634.084398][T12307] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1634.084423][T12307] bpf_map_do_batch+0x25e/0x5f0 [ 1634.084451][T12307] ? security_bpf+0x7e/0x300 [ 1634.084482][T12307] __sys_bpf+0x557/0x870 [ 1634.084510][T12307] ? __pfx___sys_bpf+0x10/0x10 [ 1634.084550][T12307] ? ksys_write+0x22a/0x250 [ 1634.084579][T12307] ? __pfx_ksys_write+0x10/0x10 [ 1634.084602][T12307] ? rcu_is_watching+0x15/0xb0 [ 1634.084631][T12307] __x64_sys_bpf+0x7c/0x90 [ 1634.084655][T12307] do_syscall_64+0xfa/0x3b0 [ 1634.084679][T12307] ? lockdep_hardirqs_on+0x9c/0x150 [ 1634.084701][T12307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.084721][T12307] ? clear_bhb_loop+0x60/0xb0 [ 1634.084750][T12307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.084769][T12307] RIP: 0033:0x7f8623f8eba9 [ 1634.084787][T12307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1634.084804][T12307] RSP: 002b:00007f8624e3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1634.084825][T12307] RAX: ffffffffffffffda RBX: 00007f86241d5fa0 RCX: 00007f8623f8eba9 [ 1634.084840][T12307] RDX: 0000000000000038 RSI: 00002000000001c0 RDI: 0000000000000018 [ 1634.084851][T12307] RBP: 00007f8624e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1634.084863][T12307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1634.084874][T12307] R13: 00007f86241d6038 R14: 00007f86241d5fa0 R15: 00007ffd28fb55f8 [ 1634.084904][T12307] [ 1634.338034][ T94] block nbd4: Possible stuck request ffff8880251d0000: control (read@0,1024B). Runtime 1500 seconds [ 1634.350093][ T94] block nbd4: Possible stuck request ffff8880251d01c0: control (read@1024,1024B). Runtime 1500 seconds [ 1634.368164][ T94] block nbd4: Possible stuck request ffff8880251d0380: control (read@2048,1024B). Runtime 1500 seconds [ 1634.379350][ T94] block nbd4: Possible stuck request ffff8880251d0540: control (read@3072,1024B). Runtime 1500 seconds [ 1634.429911][ T8897] Bluetooth: hci5: command tx timeout [ 1634.467764][T12312] netlink: 16 bytes leftover after parsing attributes in process `syz.8.12720'. [ 1634.537800][T12113] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1634.625845][T12113] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1634.658937][T12315] netlink: 36 bytes leftover after parsing attributes in process `syz.9.12721'. [ 1634.692764][T12113] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1634.731310][T12113] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1635.007548][T12325] netlink: 'syz.8.12723': attribute type 1 has an invalid length. [ 1635.040119][T12325] netlink: 'syz.8.12723': attribute type 3 has an invalid length. [ 1635.056850][T12325] netlink: 224 bytes leftover after parsing attributes in process `syz.8.12723'. [ 1635.074192][T12327] bridge2: entered promiscuous mode [ 1635.162242][T12113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1635.242749][T12113] 8021q: adding VLAN 0 to HW filter on device team0 [ 1635.285069][ T134] bridge0: port 1(bridge_slave_0) entered blocking state [ 1635.292315][ T134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1635.373382][T11938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1635.380611][T11938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1636.003486][T12358] netlink: 44 bytes leftover after parsing attributes in process `syz.8.12735'. [ 1636.034359][T12358] netlink: 43 bytes leftover after parsing attributes in process `syz.8.12735'. [ 1636.069710][T12358] netlink: 'syz.8.12735': attribute type 5 has an invalid length. [ 1636.087627][T12361] netlink: 'syz.9.12736': attribute type 1 has an invalid length. [ 1636.108582][T12361] netlink: 'syz.9.12736': attribute type 3 has an invalid length. [ 1636.131332][T12358] netlink: 43 bytes leftover after parsing attributes in process `syz.8.12735'. [ 1636.146965][T12361] netlink: 224 bytes leftover after parsing attributes in process `syz.9.12736'. [ 1636.171094][T12367] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 1636.180566][T12367] CPU: 1 UID: 0 PID: 12367 Comm: syz.6.12737 Not tainted syzkaller #0 PREEMPT(full) [ 1636.180595][T12367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1636.180608][T12367] Call Trace: [ 1636.180617][T12367] [ 1636.180626][T12367] dump_stack_lvl+0x189/0x250 [ 1636.180658][T12367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1636.180682][T12367] ? __pfx__printk+0x10/0x10 [ 1636.180715][T12367] ? kernfs_path_from_node+0x2f/0x290 [ 1636.180737][T12367] ? kernfs_path_from_node+0x250/0x290 [ 1636.180758][T12367] ? kernfs_path_from_node+0x2f/0x290 [ 1636.180792][T12367] sysfs_warn_dup+0x8e/0xa0 [ 1636.180813][T12367] sysfs_do_create_link_sd+0xc0/0x110 [ 1636.180838][T12367] device_add_class_symlinks+0x1cf/0x240 [ 1636.180865][T12367] device_add+0x475/0xb50 [ 1636.180894][T12367] wiphy_register+0x1c81/0x2aa0 [ 1636.180937][T12367] ? __pfx_wiphy_register+0x10/0x10 [ 1636.180961][T12367] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 1636.181001][T12367] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 1636.181034][T12367] ieee80211_register_hw+0x3442/0x40a0 [ 1636.181075][T12367] ? ieee80211_register_hw+0x13a1/0x40a0 [ 1636.181115][T12367] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1636.181167][T12367] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1636.181200][T12367] ? __hrtimer_setup+0x187/0x210 [ 1636.181220][T12367] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1636.181247][T12367] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 1636.181311][T12367] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1636.181339][T12367] ? trace_kmalloc+0x1f/0xd0 [ 1636.181363][T12367] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 1636.181391][T12367] ? kstrndup+0xbf/0x160 [ 1636.181424][T12367] hwsim_new_radio_nl+0xea4/0x1b10 [ 1636.181456][T12367] ? __pfx___nla_validate_parse+0x10/0x10 [ 1636.181493][T12367] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1636.181534][T12367] ? __nla_parse+0x40/0x60 [ 1636.181561][T12367] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1636.181601][T12367] genl_family_rcv_msg_doit+0x212/0x300 [ 1636.181639][T12367] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1636.181682][T12367] ? bpf_lsm_capable+0x9/0x20 [ 1636.181709][T12367] ? security_capable+0x7e/0x2e0 [ 1636.181743][T12367] genl_rcv_msg+0x60e/0x790 [ 1636.181787][T12367] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1636.181816][T12367] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1636.181864][T12367] netlink_rcv_skb+0x208/0x470 [ 1636.181885][T12367] ? __lock_acquire+0xab9/0xd20 [ 1636.181913][T12367] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1636.181944][T12367] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1636.181991][T12367] ? down_read+0x1ad/0x2e0 [ 1636.182019][T12367] genl_rcv+0x28/0x40 [ 1636.182046][T12367] netlink_unicast+0x82c/0x9e0 [ 1636.182079][T12367] ? __pfx_netlink_unicast+0x10/0x10 [ 1636.182103][T12367] ? netlink_sendmsg+0x642/0xb30 [ 1636.182126][T12367] ? skb_put+0x11b/0x210 [ 1636.182156][T12367] netlink_sendmsg+0x805/0xb30 [ 1636.182194][T12367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1636.182223][T12367] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1636.182246][T12367] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1636.182268][T12367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1636.182295][T12367] __sock_sendmsg+0x219/0x270 [ 1636.182320][T12367] ____sys_sendmsg+0x505/0x830 [ 1636.182355][T12367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1636.182394][T12367] ? import_iovec+0x74/0xa0 [ 1636.182425][T12367] ___sys_sendmsg+0x21f/0x2a0 [ 1636.182456][T12367] ? __pfx____sys_sendmsg+0x10/0x10 [ 1636.182547][T12367] ? __fget_files+0x2a/0x420 [ 1636.182567][T12367] ? __fget_files+0x3a0/0x420 [ 1636.182598][T12367] __x64_sys_sendmsg+0x19b/0x260 [ 1636.182629][T12367] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1636.182669][T12367] ? rcu_is_watching+0x15/0xb0 [ 1636.182698][T12367] ? do_syscall_64+0xbe/0x3b0 [ 1636.182727][T12367] do_syscall_64+0xfa/0x3b0 [ 1636.182751][T12367] ? lockdep_hardirqs_on+0x9c/0x150 [ 1636.182783][T12367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.182804][T12367] ? clear_bhb_loop+0x60/0xb0 [ 1636.182829][T12367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.182850][T12367] RIP: 0033:0x7f688c78eba9 [ 1636.182870][T12367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1636.182889][T12367] RSP: 002b:00007f688d611038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1636.182909][T12367] RAX: ffffffffffffffda RBX: 00007f688c9d6090 RCX: 00007f688c78eba9 [ 1636.182925][T12367] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 1636.182938][T12367] RBP: 00007f688c811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1636.182952][T12367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1636.182963][T12367] R13: 00007f688c9d6128 R14: 00007f688c9d6090 R15: 00007ffda4029528 [ 1636.182996][T12367] [ 1636.228776][T12113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1636.530934][ T8897] Bluetooth: hci5: command 0x0405 tx timeout [ 1636.909610][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1636.946055][T12113] veth0_vlan: entered promiscuous mode [ 1637.008755][T12113] veth1_vlan: entered promiscuous mode [ 1637.112594][T12113] veth0_macvtap: entered promiscuous mode [ 1637.132318][T12113] veth1_macvtap: entered promiscuous mode [ 1637.205158][T12113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1637.262253][T12386] IPVS: stopping backup sync thread 12387 ... [ 1637.287895][T12113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1637.333666][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.370101][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.389465][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.428250][T12390] FAULT_INJECTION: forcing a failure. [ 1637.428250][T12390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1637.436831][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.497159][T12390] CPU: 1 UID: 0 PID: 12390 Comm: syz.9.12745 Not tainted syzkaller #0 PREEMPT(full) [ 1637.497188][T12390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1637.497201][T12390] Call Trace: [ 1637.497210][T12390] [ 1637.497220][T12390] dump_stack_lvl+0x189/0x250 [ 1637.497252][T12390] ? __pfx____ratelimit+0x10/0x10 [ 1637.497276][T12390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1637.497300][T12390] ? __pfx__printk+0x10/0x10 [ 1637.497328][T12390] ? __might_fault+0xb0/0x130 [ 1637.497368][T12390] should_fail_ex+0x414/0x560 [ 1637.497404][T12390] _copy_from_user+0x2d/0xb0 [ 1637.497429][T12390] __sys_bpf+0x1ed/0x870 [ 1637.497458][T12390] ? __pfx___sys_bpf+0x10/0x10 [ 1637.497499][T12390] ? ksys_write+0x22a/0x250 [ 1637.497529][T12390] ? __pfx_ksys_write+0x10/0x10 [ 1637.497552][T12390] ? rcu_is_watching+0x15/0xb0 [ 1637.497580][T12390] __x64_sys_bpf+0x7c/0x90 [ 1637.497605][T12390] do_syscall_64+0xfa/0x3b0 [ 1637.497628][T12390] ? lockdep_hardirqs_on+0x9c/0x150 [ 1637.497652][T12390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1637.497678][T12390] ? clear_bhb_loop+0x60/0xb0 [ 1637.497702][T12390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1637.497722][T12390] RIP: 0033:0x7f308858eba9 [ 1637.497741][T12390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1637.497758][T12390] RSP: 002b:00007f30893d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1637.497779][T12390] RAX: ffffffffffffffda RBX: 00007f30887d5fa0 RCX: 00007f308858eba9 [ 1637.497795][T12390] RDX: 0000000000000020 RSI: 0000200000000380 RDI: 0000000000000003 [ 1637.497809][T12390] RBP: 00007f30893d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1637.497822][T12390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1637.497834][T12390] R13: 00007f30887d6038 R14: 00007f30887d5fa0 R15: 00007fff6b830ad8 [ 1637.497866][T12390] [ 1637.861949][T12393] vlan3: entered promiscuous mode [ 1638.206804][T11821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1638.232039][T11821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1638.385778][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1638.407493][T12410] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12749'. [ 1638.424336][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1638.440806][T12407] mac80211_hwsim hwsim212 wlan0: entered allmulticast mode [ 1638.459221][T12413] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12752'. [ 1638.495382][T12413] erspan0: entered promiscuous mode [ 1638.509236][T12413] macvtap1: entered promiscuous mode [ 1638.515235][T12413] macvtap1: entered allmulticast mode [ 1638.521028][T12413] erspan0: entered allmulticast mode [ 1638.683189][T12419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12658'. [ 1638.889659][T12426] syzkaller0: entered promiscuous mode [ 1638.895541][T12426] syzkaller0: entered allmulticast mode [ 1638.909708][T12424] netlink: 'syz.3.12756': attribute type 9 has an invalid length. [ 1638.992142][T12430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12758'. [ 1639.067899][T12432] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12759'. [ 1639.090325][T12432] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12759'. [ 1639.572139][T12447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12764'. [ 1639.691439][T12452] pimreg: tun_chr_ioctl cmd 1074025677 [ 1639.697777][T12452] pimreg: linktype set to 780 [ 1639.703358][T12452] pimreg: tun_chr_ioctl cmd 35111 [ 1640.171912][T12463] netlink: 'syz.1.12767': attribute type 13 has an invalid length. [ 1640.187279][T12463] netlink: 'syz.1.12767': attribute type 17 has an invalid length. [ 1640.385469][T12463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1640.702651][T12475] netlink: 'syz.6.12771': attribute type 23 has an invalid length. [ 1640.801987][T12480] syzkaller0: entered promiscuous mode [ 1640.811053][T12480] syzkaller0: entered allmulticast mode [ 1640.913602][T12486] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12775'. [ 1640.952107][T12486] batadv0: entered promiscuous mode [ 1640.970703][T12486] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1640.997634][T12486] batadv0: left promiscuous mode [ 1641.667981][T12506] veth3: entered promiscuous mode [ 1641.721081][T12512] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12786'. [ 1641.757829][T12512] macvtap2: entered promiscuous mode [ 1641.763434][T12512] macvtap2: entered allmulticast mode [ 1641.774013][T12512] bond0: entered allmulticast mode [ 1641.793452][T12512] bond_slave_0: entered allmulticast mode [ 1641.800449][T12512] bond_slave_1: entered allmulticast mode [ 1641.820531][T12512] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 1641.868593][T12512] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1642.225685][T12523] netlink: 'syz.9.12790': attribute type 10 has an invalid length. [ 1642.433344][T12543] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 4, id = 0 [ 1642.449158][T12535] tipc: Started in network mode [ 1642.462749][T12535] tipc: Node identity f60931fcea16, cluster identity 4711 [ 1642.470763][T12535] tipc: Enabled bearer , priority 0 [ 1642.479876][T12544] netlink: 'syz.9.12796': attribute type 1 has an invalid length. [ 1642.492068][T12535] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1642.500926][T12544] netlink: 'syz.9.12796': attribute type 3 has an invalid length. [ 1642.510722][T12544] netlink: 224 bytes leftover after parsing attributes in process `syz.9.12796'. [ 1642.560125][T12544] netlink: 'syz.9.12796': attribute type 12 has an invalid length. [ 1642.570062][T12544] netlink: 'syz.9.12796': attribute type 29 has an invalid length. [ 1642.579570][T12544] netlink: 148 bytes leftover after parsing attributes in process `syz.9.12796'. [ 1642.622081][T12535] tipc: Resetting bearer [ 1642.675776][T12552] vlan3: entered promiscuous mode [ 1642.708906][T12555] netlink: 'syz.1.12801': attribute type 8 has an invalid length. [ 1642.770574][T12534] tipc: Disabling bearer [ 1642.839304][T12561] batman_adv: batadv0: Adding interface: dummy0 [ 1642.866269][T12561] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1642.899062][T12561] batman_adv: batadv0: Interface activated: dummy0 [ 1643.201973][T12573] netlink: 'syz.1.12809': attribute type 3 has an invalid length. [ 1643.363689][T12581] erspan0: entered promiscuous mode [ 1643.386597][T12581] macvtap1: entered promiscuous mode [ 1643.402464][T12581] macvtap1: entered allmulticast mode [ 1643.411582][ T30] audit: type=1800 audit(1757736774.494:35): pid=12587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.12811" name="memory.events" dev="tmpfs" ino=274 res=0 errno=0 [ 1643.443580][T12581] erspan0: entered allmulticast mode [ 1643.467520][T12583] erspan0: left allmulticast mode [ 1643.475244][T12583] erspan0: left promiscuous mode [ 1643.548363][T12580] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 1643.612925][T12590] __nla_validate_parse: 4 callbacks suppressed [ 1643.612945][T12590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12812'. [ 1643.920483][T12604] netlink: 24 bytes leftover after parsing attributes in process `syz.9.12817'. [ 1644.114964][T12613] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12820'. [ 1644.396095][T12623] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1644.411490][T12623] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1644.510829][T12627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1644.552655][T12623] gretap1: entered promiscuous mode [ 1644.585150][T12623] bond2: (slave gretap1): making interface the new active one [ 1644.622887][T12623] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1644.696296][T12630] netlink: 20 bytes leftover after parsing attributes in process `syz.9.12826'. [ 1644.730691][T12632] FAULT_INJECTION: forcing a failure. [ 1644.730691][T12632] name failslab, interval 1, probability 0, space 0, times 0 [ 1644.732125][T12630] netlink: 60 bytes leftover after parsing attributes in process `syz.9.12826'. [ 1644.756894][T12632] CPU: 1 UID: 0 PID: 12632 Comm: syz.6.12827 Not tainted syzkaller #0 PREEMPT(full) [ 1644.756923][T12632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1644.756936][T12632] Call Trace: [ 1644.756945][T12632] [ 1644.756955][T12632] dump_stack_lvl+0x189/0x250 [ 1644.756983][T12632] ? __pfx____ratelimit+0x10/0x10 [ 1644.757007][T12632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1644.757031][T12632] ? __pfx__printk+0x10/0x10 [ 1644.757066][T12632] ? __pfx___might_resched+0x10/0x10 [ 1644.757084][T12632] ? fs_reclaim_acquire+0x7d/0x100 [ 1644.757110][T12632] should_fail_ex+0x414/0x560 [ 1644.757145][T12632] should_failslab+0xa8/0x100 [ 1644.757176][T12632] __kmalloc_noprof+0xcb/0x4f0 [ 1644.757202][T12632] ? inet_ioctl+0x42c/0x4c0 [ 1644.757220][T12632] ? fib_create_info+0x1728/0x3210 [ 1644.757248][T12632] fib_create_info+0x1728/0x3210 [ 1644.757301][T12632] fib_table_insert+0xc6/0x1b50 [ 1644.757343][T12632] ? __kasan_kmalloc+0x93/0xb0 [ 1644.757372][T12632] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 1644.757405][T12632] ip_rt_ioctl+0x46e/0x1070 [ 1644.757431][T12632] ? __pfx_ip_rt_ioctl+0x10/0x10 [ 1644.757451][T12632] ? __might_fault+0xb0/0x130 [ 1644.757502][T12632] inet_ioctl+0x42c/0x4c0 [ 1644.757526][T12632] ? __pfx_inet_ioctl+0x10/0x10 [ 1644.757572][T12632] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1644.757605][T12632] sock_do_ioctl+0xd9/0x300 [ 1644.757628][T12632] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1644.757646][T12632] ? __lock_acquire+0xab9/0xd20 [ 1644.757753][T12632] sock_ioctl+0x576/0x790 [ 1644.757786][T12632] ? __pfx_sock_ioctl+0x10/0x10 [ 1644.757820][T12632] ? __fget_files+0x2a/0x420 [ 1644.757837][T12632] ? __fget_files+0x3a0/0x420 [ 1644.757855][T12632] ? __fget_files+0x2a/0x420 [ 1644.757876][T12632] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1644.757901][T12632] ? __pfx_sock_ioctl+0x10/0x10 [ 1644.757928][T12632] __se_sys_ioctl+0xfc/0x170 [ 1644.757953][T12632] do_syscall_64+0xfa/0x3b0 [ 1644.757977][T12632] ? lockdep_hardirqs_on+0x9c/0x150 [ 1644.758001][T12632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.758021][T12632] ? clear_bhb_loop+0x60/0xb0 [ 1644.758046][T12632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.758066][T12632] RIP: 0033:0x7f688c78eba9 [ 1644.758085][T12632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1644.758103][T12632] RSP: 002b:00007f688d632038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1644.758124][T12632] RAX: ffffffffffffffda RBX: 00007f688c9d5fa0 RCX: 00007f688c78eba9 [ 1644.758140][T12632] RDX: 00002000000000c0 RSI: 000000000000890b RDI: 0000000000000003 [ 1644.758154][T12632] RBP: 00007f688d632090 R08: 0000000000000000 R09: 0000000000000000 [ 1644.758167][T12632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1644.758179][T12632] R13: 00007f688c9d6038 R14: 00007f688c9d5fa0 R15: 00007ffda4029528 [ 1644.758213][T12632] [ 1645.750351][T12650] validate_nla: 2 callbacks suppressed [ 1645.750373][T12650] netlink: 'syz.1.12831': attribute type 12 has an invalid length. [ 1645.772557][T12650] netlink: 'syz.1.12831': attribute type 29 has an invalid length. [ 1645.781244][T12650] netlink: 148 bytes leftover after parsing attributes in process `syz.1.12831'. [ 1645.793752][T12650] netlink: 59 bytes leftover after parsing attributes in process `syz.1.12831'. [ 1646.090377][T12664] netlink: 'syz.9.12835': attribute type 1 has an invalid length. [ 1646.144110][T12664] bond1 (unregistering): Released all slaves [ 1646.832861][T12684] tipc: Started in network mode [ 1646.851460][T12684] tipc: Node identity 2e1f4f651c8a, cluster identity 4711 [ 1646.865020][T12684] tipc: Enabled bearer , priority 0 [ 1646.924648][T12684] syzkaller0: entered promiscuous mode [ 1646.939764][T12684] syzkaller0: entered allmulticast mode [ 1646.950837][T12684] tipc: Resetting bearer [ 1646.983438][T12678] tipc: Resetting bearer [ 1647.859996][T32667] tipc: Node number set to 848645989 [ 1650.684235][T12678] tipc: Disabling bearer [ 1652.487627][T12697] netlink: 'syz.8.12843': attribute type 10 has an invalid length. [ 1652.573280][T12699] mac80211_hwsim hwsim213 wlan1: entered allmulticast mode [ 1652.663996][T12697] mac80211_hwsim hwsim213 wlan1: left allmulticast mode [ 1653.054812][T12716] netlink: 676 bytes leftover after parsing attributes in process `syz.1.12853'. [ 1653.085083][T12716] netlink: 676 bytes leftover after parsing attributes in process `syz.1.12853'. [ 1653.117064][T12722] netlink: 'syz.3.12856': attribute type 8 has an invalid length. [ 1653.138125][T12720] bond_slave_0: entered promiscuous mode [ 1653.144295][T12720] bond_slave_1: entered promiscuous mode [ 1653.174581][T12720] vlan3: entered promiscuous mode [ 1653.198338][T12720] bond0: entered promiscuous mode [ 1653.204412][T12720] mac80211_hwsim hwsim213 wlan1: entered promiscuous mode [ 1653.232652][T12720] bond1: entered promiscuous mode [ 1653.720976][T12739] IPVS: persistence engine module ip_vs_pe_ not found [ 1653.739607][T11806] IPVS: starting estimator thread 0... [ 1653.750074][T12737] netlink: 'syz.1.12862': attribute type 10 has an invalid length. [ 1653.790167][T12737] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1653.866911][T12751] IPVS: using max 31 ests per chain, 74400 per kthread [ 1653.890178][T12734] mac80211_hwsim hwsim222 wlan1: entered allmulticast mode [ 1653.992222][T12757] Unknown options in mask b7f2 [ 1654.185459][T12765] veth0_to_bond: entered allmulticast mode [ 1654.533715][T12779] netlink: 'syz.8.12881': attribute type 3 has an invalid length. [ 1658.544189][T12793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12885'. [ 1658.558361][T12792] netlink: 'syz.6.12883': attribute type 1 has an invalid length. [ 1658.562038][T12786] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 1658.574725][T32669] IPVS: starting estimator thread 0... [ 1658.577279][T12792] netlink: 'syz.6.12883': attribute type 3 has an invalid length. [ 1658.590539][T12794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12886'. [ 1658.607559][T12792] netlink: 224 bytes leftover after parsing attributes in process `syz.6.12883'. [ 1658.646706][T12796] netlink: 224 bytes leftover after parsing attributes in process `syz.9.12887'. [ 1658.676522][T12797] netlink: 'syz.6.12883': attribute type 12 has an invalid length. [ 1658.689186][T12795] IPVS: using max 29 ests per chain, 69600 per kthread [ 1658.716164][T12797] netlink: 'syz.6.12883': attribute type 29 has an invalid length. [ 1658.721926][T12800] netlink: 172 bytes leftover after parsing attributes in process `syz.9.12887'. [ 1658.760596][T12797] netlink: 148 bytes leftover after parsing attributes in process `syz.6.12883'. [ 1658.760766][T12800] netlink: 172 bytes leftover after parsing attributes in process `syz.9.12887'. [ 1658.789768][T12797] netlink: 'syz.6.12883': attribute type 1 has an invalid length. [ 1658.802952][T12797] netlink: 'syz.6.12883': attribute type 2 has an invalid length. [ 1658.811819][T12797] netlink: 3 bytes leftover after parsing attributes in process `syz.6.12883'. [ 1658.833258][T12796] netlink: 16 bytes leftover after parsing attributes in process `syz.9.12887'. [ 1658.845753][T12796] tipc: Started in network mode [ 1658.878615][T12796] tipc: Node identity fffffe01, cluster identity 64 [ 1658.895960][T12796] tipc: Node number set to 4294966785 [ 1658.902497][T12796] tipc: Cannot configure node identity twice [ 1659.072788][T12817] netlink: 43 bytes leftover after parsing attributes in process `syz.6.12892'. [ 1659.101481][T12820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1659.311843][T12825] netlink: 'syz.8.12895': attribute type 13 has an invalid length. [ 1659.331009][T12825] netlink: 'syz.8.12895': attribute type 17 has an invalid length. [ 1659.470782][T12835] netlink: 'syz.3.12899': attribute type 2 has an invalid length. [ 1659.644144][T12825] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1659.807601][ T30] audit: type=1800 audit(1757736790.884:36): pid=12837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12897" name="memory.events" dev="tmpfs" ino=175 res=0 errno=0 [ 1659.906299][T12847] netlink: 'syz.9.12901': attribute type 29 has an invalid length. [ 1660.378416][T12861] bond_slave_0: entered promiscuous mode [ 1660.384145][T12861] bond_slave_1: entered promiscuous mode [ 1660.389898][T12861] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1660.397783][T12861] batadv_slave_0: entered promiscuous mode [ 1660.458328][T12861] macvtap1: entered promiscuous mode [ 1660.479630][T12861] bond0: entered promiscuous mode [ 1660.502219][T12861] mac80211_hwsim hwsim207 wlan1: entered promiscuous mode [ 1660.515375][T12861] macvtap1: entered allmulticast mode [ 1660.524880][T12861] bond0: entered allmulticast mode [ 1660.535422][T12861] bond_slave_0: entered allmulticast mode [ 1660.558589][T12861] bond_slave_1: entered allmulticast mode [ 1660.565495][T12861] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1660.574271][T12861] batadv_slave_0: entered allmulticast mode [ 1660.584673][T12861] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1660.610803][T12874] batadv_slave_1: entered promiscuous mode [ 1660.634707][T12872] batadv_slave_1: left promiscuous mode [ 1660.982883][T12885] batman_adv: batadv0: Adding interface: dummy0 [ 1660.992098][T12885] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1661.065656][T12885] batman_adv: batadv0: Interface activated: dummy0 [ 1661.265989][T12904] gretap0: entered promiscuous mode [ 1661.290842][T12904] vlan2: entered promiscuous mode [ 1661.521216][T12908] vlan4: entered promiscuous mode [ 1661.526683][T12908] batadv0: entered promiscuous mode [ 1661.598236][T12916] Unknown options in mask b7f2 [ 1662.013931][T12926] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 1662.057798][T12926] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1662.924271][T12950] macvtap3: entered promiscuous mode [ 1662.930425][T12950] macvtap3: entered allmulticast mode [ 1663.224622][T12961] mac80211_hwsim hwsim216 wlan0: entered promiscuous mode [ 1663.262717][T12961] macvtap4: entered allmulticast mode [ 1663.291091][T12961] mac80211_hwsim hwsim216 wlan0: entered allmulticast mode [ 1663.336435][T12961] mac80211_hwsim hwsim216 wlan0: left allmulticast mode [ 1663.343533][T12961] mac80211_hwsim hwsim216 wlan0: left promiscuous mode [ 1663.718669][T12980] validate_nla: 3 callbacks suppressed [ 1663.718688][T12980] netlink: 'syz.3.12943': attribute type 10 has an invalid length. [ 1663.927893][T12987] syzkaller0: entered promiscuous mode [ 1663.934084][T12987] syzkaller0: entered allmulticast mode [ 1664.312247][T12997] FAULT_INJECTION: forcing a failure. [ 1664.312247][T12997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1664.347104][T12997] CPU: 1 UID: 0 PID: 12997 Comm: syz.1.12950 Not tainted syzkaller #0 PREEMPT(full) [ 1664.347134][T12997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1664.347148][T12997] Call Trace: [ 1664.347157][T12997] [ 1664.347166][T12997] dump_stack_lvl+0x189/0x250 [ 1664.347195][T12997] ? __pfx____ratelimit+0x10/0x10 [ 1664.347219][T12997] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1664.347243][T12997] ? __pfx__printk+0x10/0x10 [ 1664.347283][T12997] should_fail_ex+0x414/0x560 [ 1664.347314][T12997] _copy_to_user+0x31/0xb0 [ 1664.347341][T12997] simple_read_from_buffer+0xe1/0x170 [ 1664.347376][T12997] proc_fail_nth_read+0x1b3/0x220 [ 1664.347401][T12997] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1664.347427][T12997] ? rw_verify_area+0x2a6/0x4d0 [ 1664.347451][T12997] ? __lock_acquire+0xab9/0xd20 [ 1664.347477][T12997] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1664.347502][T12997] vfs_read+0x200/0xa30 [ 1664.347526][T12997] ? fdget_pos+0x247/0x320 [ 1664.347548][T12997] ? __pfx___mutex_lock+0x10/0x10 [ 1664.347574][T12997] ? __pfx_vfs_read+0x10/0x10 [ 1664.347601][T12997] ? __fget_files+0x2a/0x420 [ 1664.347624][T12997] ? __fget_files+0x3a0/0x420 [ 1664.347640][T12997] ? __fget_files+0x2a/0x420 [ 1664.347668][T12997] ksys_read+0x145/0x250 [ 1664.347703][T12997] ? __fget_files+0x3a0/0x420 [ 1664.347722][T12997] ? __pfx_ksys_read+0x10/0x10 [ 1664.347753][T12997] ? do_syscall_64+0xbe/0x3b0 [ 1664.347781][T12997] do_syscall_64+0xfa/0x3b0 [ 1664.347804][T12997] ? lockdep_hardirqs_on+0x9c/0x150 [ 1664.347824][T12997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1664.347843][T12997] ? clear_bhb_loop+0x60/0xb0 [ 1664.347866][T12997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1664.347884][T12997] RIP: 0033:0x7f7e27d8d5bc [ 1664.347904][T12997] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1664.347922][T12997] RSP: 002b:00007f7e28bb9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1664.347944][T12997] RAX: ffffffffffffffda RBX: 00007f7e27fd5fa0 RCX: 00007f7e27d8d5bc [ 1664.347959][T12997] RDX: 000000000000000f RSI: 00007f7e28bb90a0 RDI: 0000000000000004 [ 1664.347972][T12997] RBP: 00007f7e28bb9090 R08: 0000000000000000 R09: 0000000000000000 [ 1664.347985][T12997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1664.347998][T12997] R13: 00007f7e27fd6038 R14: 00007f7e27fd5fa0 R15: 00007ffc85cb16d8 [ 1664.348031][T12997] [ 1664.624102][ T94] block nbd4: Possible stuck request ffff8880251d0000: control (read@0,1024B). Runtime 1530 seconds [ 1664.635128][ T94] block nbd4: Possible stuck request ffff8880251d01c0: control (read@1024,1024B). Runtime 1530 seconds [ 1664.648210][ T94] block nbd4: Possible stuck request ffff8880251d0380: control (read@2048,1024B). Runtime 1530 seconds [ 1664.662408][ T94] block nbd4: Possible stuck request ffff8880251d0540: control (read@3072,1024B). Runtime 1530 seconds [ 1665.263457][T13016] batadv0: entered promiscuous mode [ 1665.281919][T13016] vlan2: entered promiscuous mode [ 1665.623537][T13025] __nla_validate_parse: 13 callbacks suppressed [ 1665.623555][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12961'. [ 1665.711746][T13031] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12962'. [ 1665.721959][T13031] netlink: 16 bytes leftover after parsing attributes in process `syz.8.12962'. [ 1665.985831][T13043] gretap0: entered promiscuous mode [ 1666.013862][T13043] vlan2: entered promiscuous mode [ 1666.140172][T13047] netlink: 256 bytes leftover after parsing attributes in process `syz.3.12970'. [ 1666.345698][T13053] netlink: 28 bytes leftover after parsing attributes in process `syz.9.12971'. [ 1666.375838][ T30] audit: type=1800 audit(1757736797.444:37): pid=13050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.12970" name="memory.events" dev="tmpfs" ino=644 res=0 errno=0 [ 1666.668515][T13066] netlink: 'syz.6.12975': attribute type 10 has an invalid length. [ 1666.684525][T13068] netlink: 16 bytes leftover after parsing attributes in process `syz.9.12976'. [ 1666.700437][T13063] netlink: 'syz.8.12974': attribute type 3 has an invalid length. [ 1666.709563][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12976'. [ 1666.716997][T13066] netlink: 'syz.6.12975': attribute type 10 has an invalid length. [ 1666.918872][T13079] netlink: 'syz.9.12978': attribute type 8 has an invalid length. [ 1667.114889][T13090] mac80211_hwsim hwsim222 wlan1: left allmulticast mode [ 1667.199247][T13097] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12986'. [ 1667.214345][T13090] mac80211_hwsim hwsim222 wlan1: entered allmulticast mode [ 1667.781597][T13118] IPVS: set_ctl: invalid protocol: 0 100.1.0.255:20000 [ 1668.080138][T13129] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12997'. [ 1668.314245][T13139] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13002'. [ 1668.371164][T13145] netlink: 'syz.8.13002': attribute type 11 has an invalid length. [ 1668.574305][T13116] bond0 (unregistering): left allmulticast mode [ 1668.597777][T13116] bond_slave_0: left allmulticast mode [ 1668.603299][T13116] bond_slave_1: left allmulticast mode [ 1668.633058][T13116] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1668.645790][T13116] batadv_slave_0: left allmulticast mode [ 1668.655139][T13116] mac80211_hwsim hwsim207 wlan1: left allmulticast mode [ 1668.671807][T13116] bond0 (unregistering): left promiscuous mode [ 1668.684714][T13116] bond_slave_0: left promiscuous mode [ 1668.696660][T13116] bond_slave_1: left promiscuous mode [ 1668.702569][T13116] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1668.718216][T13116] batadv_slave_0: left promiscuous mode [ 1668.726139][T13116] mac80211_hwsim hwsim207 wlan1: left promiscuous mode [ 1668.801289][T13116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1668.825271][T13116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1668.848345][T13116] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 1668.873532][T13116] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1668.920149][T13116] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1668.945000][T13116] bond0 (unregistering): Released all slaves [ 1668.984723][T13139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1669.003737][T13139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1669.072920][T13139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1669.089565][T13139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1669.307799][T13148] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.474102][T13148] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.733419][T13148] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.797495][T13177] syz_tun: entered allmulticast mode [ 1669.803579][T13182] veth0: entered promiscuous mode [ 1669.951955][T13172] syz_tun: left allmulticast mode [ 1670.062660][T13148] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.140585][T13175] veth0: left promiscuous mode [ 1670.177761][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1670.444501][T13206] netlink: 'syz.6.13021': attribute type 23 has an invalid length. [ 1670.474992][ T1085] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1670.562693][T13212] netlink: 'syz.8.13023': attribute type 1 has an invalid length. [ 1670.684224][T13212] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1670.767852][T13214] vlan3: entered allmulticast mode [ 1670.780653][T13214] veth1: entered allmulticast mode [ 1670.801268][T13214] bond3: (slave vlan3): making interface the new active one [ 1670.826041][T13214] bond3: (slave vlan3): Enslaving as an active interface with an up link [ 1670.841273][ T1085] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1670.923579][ T6145] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.197066][ T1085] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1672.624959][T13269] __nla_validate_parse: 1 callbacks suppressed [ 1672.624980][T13269] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13038'. [ 1672.679453][T13243] netlink: 160 bytes leftover after parsing attributes in process `syz.6.13030'. [ 1672.905028][T13278] syzkaller0: entered promiscuous mode [ 1672.915865][T13278] syzkaller0: entered allmulticast mode [ 1672.943404][T13281] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1673.137371][T13293] netlink: 20 bytes leftover after parsing attributes in process `syz.9.13047'. [ 1673.350756][T13300] vlan2: entered allmulticast mode [ 1673.356226][T13300] batadv0: entered allmulticast mode [ 1673.464617][T13305] ip6gretap1: entered promiscuous mode [ 1673.480690][T13310] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1673.913976][T13336] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13059'. [ 1673.951733][T13338] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13058'. [ 1674.054195][T13343] veth0: entered promiscuous mode [ 1674.098384][T13343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13062'. [ 1674.512124][T13325] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1674.623718][T13362] vlan4: entered allmulticast mode [ 1674.629733][T13362] batadv0: entered allmulticast mode [ 1675.897992][T13379] netlink: 'syz.9.13074': attribute type 10 has an invalid length. [ 1675.918726][T13379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.926112][T13379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1675.969741][T13383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13076'. [ 1675.989772][T13387] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13074'. [ 1676.014067][T13379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1676.021434][T13379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1676.029124][T13379] bridge0: port 1(bridge_slave_0) entered blocking state [ 1676.036528][T13379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1676.063995][T13379] bridge0: entered promiscuous mode [ 1676.071962][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13078'. [ 1676.104075][T13379] bridge0: entered allmulticast mode [ 1676.123765][T13379] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1676.145394][T13383] vlan3: entered promiscuous mode [ 1676.159355][T13383] batadv0: entered promiscuous mode [ 1676.252270][T13387] bridge_slave_1: left allmulticast mode [ 1676.259294][T13387] bridge_slave_1: left promiscuous mode [ 1676.268014][T13387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.307732][T13387] bridge_slave_0: left allmulticast mode [ 1676.325690][T13387] bridge_slave_0: left promiscuous mode [ 1676.357878][T13387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.444378][T13387] bond0: (slave bridge0): Releasing backup interface [ 1676.463120][T13387] bridge0 (unregistering): left allmulticast mode [ 1676.545350][T13388] bond_slave_0: entered promiscuous mode [ 1676.551202][T13388] bond_slave_1: entered promiscuous mode [ 1676.568720][T13388] macvtap1: entered promiscuous mode [ 1676.574815][T13388] bond0: entered promiscuous mode [ 1676.588602][T13388] mac80211_hwsim hwsim222 wlan1: entered promiscuous mode [ 1676.597748][T13388] macvtap1: entered allmulticast mode [ 1676.603577][T13388] bond0: entered allmulticast mode [ 1676.609420][T13388] bond_slave_0: entered allmulticast mode [ 1676.615591][T13388] bond_slave_1: entered allmulticast mode [ 1676.624049][T13388] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1676.645485][T13391] bond0: left allmulticast mode [ 1676.650685][T13391] bond_slave_0: left allmulticast mode [ 1676.657224][T13391] bond_slave_1: left allmulticast mode [ 1676.662735][T13391] bond0: left promiscuous mode [ 1676.669218][T13391] mac80211_hwsim hwsim222 wlan1: left promiscuous mode [ 1676.677599][T13391] bond_slave_0: left promiscuous mode [ 1676.683279][T13391] bond_slave_1: left promiscuous mode [ 1677.004526][T13413] tipc: Enabling of bearer rejected, failed to enable media [ 1677.032845][T13404] syzkaller0: entered promiscuous mode [ 1677.038480][T13404] syzkaller0: entered allmulticast mode [ 1677.272056][T13425] tipc: Enabled bearer , priority 0 [ 1677.393606][T13425] syzkaller0: entered promiscuous mode [ 1677.399905][T13425] syzkaller0: entered allmulticast mode [ 1677.413676][T13425] tipc: Resetting bearer [ 1677.591766][T13429] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.623035][T13423] tipc: Resetting bearer [ 1677.758905][T13449] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13095'. [ 1680.452561][T13423] tipc: Disabling bearer [ 1680.464030][T13441] netlink: 'syz.1.13093': attribute type 1 has an invalid length. [ 1680.472172][T13442] netlink: 248 bytes leftover after parsing attributes in process `syz.1.13093'. [ 1680.505788][T13429] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.642312][T13429] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.648406][T13454] openvswitch: netlink: Missing valid actions attribute. [ 1680.667367][T13454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1680.830558][T13429] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.924911][T13461] netlink: 'syz.9.13100': attribute type 1 has an invalid length. [ 1680.967045][T13461] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13100'. [ 1681.001868][T13465] netlink: 'syz.9.13100': attribute type 1 has an invalid length. [ 1681.012077][T13464] netlink: 48 bytes leftover after parsing attributes in process `syz.6.13101'. [ 1681.164719][T13471] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13102'. [ 1681.171947][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.251789][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.287010][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.319714][T13476] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13104'. [ 1681.321228][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.401017][T13476] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13104'. [ 1681.424943][T13483] Unknown options in mask b7f2 [ 1681.639679][T13490] netlink: 16 bytes leftover after parsing attributes in process `syz.8.13110'. [ 1681.676841][T13490] openvswitch: netlink: Flow actions attr not present in new flow. [ 1681.743622][T13500] netlink: 'syz.1.13114': attribute type 10 has an invalid length. [ 1681.837676][T13500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1681.850185][T13500] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1681.877522][T13507] netlink: 24 bytes leftover after parsing attributes in process `syz.9.13117'. [ 1681.973189][T13513] tipc: Enabled bearer , priority 0 [ 1681.985027][T13513] syzkaller0: entered promiscuous mode [ 1681.994979][T13513] syzkaller0: entered allmulticast mode [ 1682.023712][T13514] netlink: 'syz.9.13119': attribute type 2 has an invalid length. [ 1682.079357][T13514] tipc: Resetting bearer [ 1682.120568][T13514] tipc: Disabling bearer [ 1682.293167][T13531] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13122'. [ 1682.703043][T13545] netlink: 'syz.6.13127': attribute type 1 has an invalid length. [ 1682.720823][T13545] netlink: 'syz.6.13127': attribute type 3 has an invalid length. [ 1682.761446][T13545] netlink: 'syz.6.13127': attribute type 12 has an invalid length. [ 1682.784838][T13545] netlink: 'syz.6.13127': attribute type 29 has an invalid length. [ 1682.801240][T13545] __nla_validate_parse: 1 callbacks suppressed [ 1682.801263][T13545] netlink: 148 bytes leftover after parsing attributes in process `syz.6.13127'. [ 1682.828749][T13545] netlink: 'syz.6.13127': attribute type 1 has an invalid length. [ 1682.841545][T13545] netlink: 'syz.6.13127': attribute type 2 has an invalid length. [ 1682.866855][T13545] netlink: 3 bytes leftover after parsing attributes in process `syz.6.13127'. [ 1683.020657][T13555] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 1683.045349][T13555] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1683.079168][T13552] mac80211_hwsim hwsim213 wlan1: entered allmulticast mode [ 1683.125180][T13550] netlink: 20824 bytes leftover after parsing attributes in process `syz.9.13129'. [ 1683.239507][T13562] FAULT_INJECTION: forcing a failure. [ 1683.239507][T13562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1683.253514][T13562] CPU: 0 UID: 0 PID: 13562 Comm: syz.8.13135 Not tainted syzkaller #0 PREEMPT(full) [ 1683.253564][T13562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1683.253588][T13562] Call Trace: [ 1683.253604][T13562] [ 1683.253622][T13562] dump_stack_lvl+0x189/0x250 [ 1683.253653][T13562] ? __pfx____ratelimit+0x10/0x10 [ 1683.253677][T13562] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1683.253702][T13562] ? __pfx__printk+0x10/0x10 [ 1683.253732][T13562] ? __pfx_migrate_enable+0x10/0x10 [ 1683.253762][T13562] should_fail_ex+0x414/0x560 [ 1683.253806][T13562] _copy_to_user+0x31/0xb0 [ 1683.253834][T13562] generic_map_lookup_batch+0x896/0xcc0 [ 1683.253873][T13562] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1683.253895][T13562] ? __fget_files+0x2a/0x420 [ 1683.253919][T13562] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 1683.253943][T13562] bpf_map_do_batch+0x25e/0x5f0 [ 1683.253971][T13562] ? security_bpf+0x7e/0x300 [ 1683.254000][T13562] __sys_bpf+0x557/0x870 [ 1683.254035][T13562] ? __pfx___sys_bpf+0x10/0x10 [ 1683.254081][T13562] ? ksys_write+0x22a/0x250 [ 1683.254111][T13562] ? __pfx_ksys_write+0x10/0x10 [ 1683.254138][T13562] ? rcu_is_watching+0x15/0xb0 [ 1683.254170][T13562] __x64_sys_bpf+0x7c/0x90 [ 1683.254201][T13562] do_syscall_64+0xfa/0x3b0 [ 1683.254222][T13562] ? lockdep_hardirqs_on+0x9c/0x150 [ 1683.254245][T13562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.254272][T13562] ? clear_bhb_loop+0x60/0xb0 [ 1683.254296][T13562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.254316][T13562] RIP: 0033:0x7f8623f8eba9 [ 1683.254340][T13562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1683.254363][T13562] RSP: 002b:00007f8624e3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1683.254385][T13562] RAX: ffffffffffffffda RBX: 00007f86241d5fa0 RCX: 00007f8623f8eba9 [ 1683.254405][T13562] RDX: 0000000000000038 RSI: 00002000000001c0 RDI: 0000000000000018 [ 1683.254419][T13562] RBP: 00007f8624e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1683.254432][T13562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1683.254445][T13562] R13: 00007f86241d6038 R14: 00007f86241d5fa0 R15: 00007ffd28fb55f8 [ 1683.254478][T13562] [ 1683.544659][T13567] netlink: 24 bytes leftover after parsing attributes in process `syz.8.13136'. [ 1683.753804][T13563] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1683.848971][T13575] netlink: 16 bytes leftover after parsing attributes in process `syz.8.13139'. [ 1683.858819][T13575] openvswitch: netlink: Flow actions attr not present in new flow. [ 1684.054027][T13583] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 1684.064084][T13583] CPU: 1 UID: 0 PID: 13583 Comm: syz.8.13143 Not tainted syzkaller #0 PREEMPT(full) [ 1684.064113][T13583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1684.064127][T13583] Call Trace: [ 1684.064136][T13583] [ 1684.064145][T13583] dump_stack_lvl+0x189/0x250 [ 1684.064179][T13583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1684.064206][T13583] ? __pfx__printk+0x10/0x10 [ 1684.064240][T13583] ? kernfs_path_from_node+0x2f/0x290 [ 1684.064263][T13583] ? kernfs_path_from_node+0x250/0x290 [ 1684.064284][T13583] ? kernfs_path_from_node+0x2f/0x290 [ 1684.064312][T13583] sysfs_warn_dup+0x8e/0xa0 [ 1684.064334][T13583] sysfs_do_create_link_sd+0xc0/0x110 [ 1684.064361][T13583] device_add_class_symlinks+0x1cf/0x240 [ 1684.064390][T13583] device_add+0x475/0xb50 [ 1684.064420][T13583] wiphy_register+0x1c81/0x2aa0 [ 1684.064465][T13583] ? __pfx_wiphy_register+0x10/0x10 [ 1684.064490][T13583] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 1684.064529][T13583] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 1684.064564][T13583] ieee80211_register_hw+0x3442/0x40a0 [ 1684.064620][T13583] ? ieee80211_register_hw+0x13a1/0x40a0 [ 1684.064662][T13583] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1684.064698][T13583] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1684.064730][T13583] ? __hrtimer_setup+0x187/0x210 [ 1684.064750][T13583] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1684.064777][T13583] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 1684.064846][T13583] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1684.064875][T13583] ? trace_kmalloc+0x1f/0xd0 [ 1684.064900][T13583] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 1684.064928][T13583] ? kstrndup+0xbf/0x160 [ 1684.064963][T13583] hwsim_new_radio_nl+0xea4/0x1b10 [ 1684.064998][T13583] ? __pfx___nla_validate_parse+0x10/0x10 [ 1684.065037][T13583] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1684.065084][T13583] ? __nla_parse+0x40/0x60 [ 1684.065107][T13583] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1684.065145][T13583] genl_family_rcv_msg_doit+0x212/0x300 [ 1684.065179][T13583] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1684.065223][T13583] ? bpf_lsm_capable+0x9/0x20 [ 1684.065250][T13583] ? security_capable+0x7e/0x2e0 [ 1684.065289][T13583] genl_rcv_msg+0x60e/0x790 [ 1684.065327][T13583] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1684.065356][T13583] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1684.065405][T13583] netlink_rcv_skb+0x208/0x470 [ 1684.065428][T13583] ? __lock_acquire+0xab9/0xd20 [ 1684.065457][T13583] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1684.065490][T13583] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1684.065544][T13583] ? down_read+0x1ad/0x2e0 [ 1684.065576][T13583] genl_rcv+0x28/0x40 [ 1684.065613][T13583] netlink_unicast+0x82c/0x9e0 [ 1684.065647][T13583] ? __pfx_netlink_unicast+0x10/0x10 [ 1684.065671][T13583] ? netlink_sendmsg+0x642/0xb30 [ 1684.065695][T13583] ? skb_put+0x11b/0x210 [ 1684.065726][T13583] netlink_sendmsg+0x805/0xb30 [ 1684.065765][T13583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1684.065795][T13583] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1684.065820][T13583] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1684.065842][T13583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1684.065869][T13583] __sock_sendmsg+0x219/0x270 [ 1684.065893][T13583] ____sys_sendmsg+0x505/0x830 [ 1684.065929][T13583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1684.065968][T13583] ? import_iovec+0x74/0xa0 [ 1684.066000][T13583] ___sys_sendmsg+0x21f/0x2a0 [ 1684.066031][T13583] ? __pfx____sys_sendmsg+0x10/0x10 [ 1684.066104][T13583] ? __fget_files+0x2a/0x420 [ 1684.066122][T13583] ? __fget_files+0x3a0/0x420 [ 1684.066153][T13583] __x64_sys_sendmsg+0x19b/0x260 [ 1684.066180][T13583] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1684.066210][T13583] ? rcu_is_watching+0x15/0xb0 [ 1684.066225][T13583] ? do_syscall_64+0xbe/0x3b0 [ 1684.066241][T13583] do_syscall_64+0xfa/0x3b0 [ 1684.066253][T13583] ? lockdep_hardirqs_on+0x9c/0x150 [ 1684.066265][T13583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1684.066275][T13583] ? clear_bhb_loop+0x60/0xb0 [ 1684.066296][T13583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1684.066314][T13583] RIP: 0033:0x7f8623f8eba9 [ 1684.066332][T13583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1684.066349][T13583] RSP: 002b:00007f8624e3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1684.066370][T13583] RAX: ffffffffffffffda RBX: 00007f86241d5fa0 RCX: 00007f8623f8eba9 [ 1684.066386][T13583] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008 [ 1684.066398][T13583] RBP: 00007f8624011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1684.066410][T13583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1684.066422][T13583] R13: 00007f86241d6038 R14: 00007f86241d5fa0 R15: 00007ffd28fb55f8 [ 1684.066455][T13583] [ 1684.712500][T13590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1684.994090][T13597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13147'. [ 1685.005474][T13597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13147'. [ 1685.047641][T13592] infiniband syz2: set down [ 1685.052279][T13592] infiniband syz2: added ipvlan0 [ 1685.142557][T13602] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13149'. [ 1685.153782][T13592] RDS/IB: syz2: added [ 1685.155535][T13602] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13149'. [ 1685.164639][T13592] smc: adding ib device syz2 with port count 1 [ 1685.177500][T13592] smc: ib device syz2 port 1 has no pnetid [ 1685.815895][T13609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13151'. [ 1686.997986][T13647] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1687.045887][T13646] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1687.301124][T13650] vlan2: entered promiscuous mode [ 1688.233019][T13669] netlink: 256 bytes leftover after parsing attributes in process `syz.9.13169'. [ 1688.270810][T13669] netlink: 20 bytes leftover after parsing attributes in process `syz.9.13169'. [ 1688.654269][T13679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13173'. [ 1688.664457][T13679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1688.672740][T13679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1688.697655][T13679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1688.743890][T13679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1688.789218][T13679] batman_adv: batadv0: Interface deactivated: dummy0 [ 1688.806262][T13679] batman_adv: batadv0: Removing interface: dummy0 [ 1688.827977][T13689] validate_nla: 6 callbacks suppressed [ 1688.827996][T13689] netlink: 'syz.9.13176': attribute type 13 has an invalid length. [ 1688.886199][T13679] bond0: (slave batadv0): Releasing backup interface [ 1689.127940][T13689] gretap0: refused to change device tx_queue_len [ 1689.148742][T13689] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1695.183071][ T94] block nbd4: Possible stuck request ffff8880251d0000: control (read@0,1024B). Runtime 1560 seconds [ 1695.204844][ T94] block nbd4: Possible stuck request ffff8880251d01c0: control (read@1024,1024B). Runtime 1560 seconds [ 1695.233526][ T94] block nbd4: Possible stuck request ffff8880251d0380: control (read@2048,1024B). Runtime 1560 seconds [ 1695.254808][ T94] block nbd4: Possible stuck request ffff8880251d0540: control (read@3072,1024B). Runtime 1560 seconds [ 1701.704932][T30543] Bluetooth: hci4: command 0x0406 tx timeout [ 1711.955154][T30543] Bluetooth: hci1: command 0x0406 tx timeout [ 1717.113653][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 1717.155034][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 1725.005537][T30543] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1725.125955][T30543] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1725.254638][ T94] block nbd4: Possible stuck request ffff8880251d0000: control (read@0,1024B). Runtime 1590 seconds [ 1725.324124][ T94] block nbd4: Possible stuck request ffff8880251d01c0: control (read@1024,1024B). Runtime 1590 seconds [ 1725.345771][T30543] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1725.364157][ T94] block nbd4: Possible stuck request ffff8880251d0380: control (read@2048,1024B). Runtime 1590 seconds [ 1725.393279][ T94] block nbd4: Possible stuck request ffff8880251d0540: control (read@3072,1024B). Runtime 1590 seconds [ 1726.602861][T30543] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1727.223875][T30543] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1730.044304][T13715] Bluetooth: hci0: command tx timeout [ 1730.333391][T13715] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1730.474693][T13715] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1730.544964][T13715] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1730.786041][T13715] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1730.875523][T13715] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1731.265513][T24085] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1731.303795][T13715] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1731.785159][T24085] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1731.866171][T24085] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1732.104336][T24085] Bluetooth: hci0: command tx timeout [ 1732.314788][ T8897] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1733.575620][ T8897] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1733.714645][ T8897] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1733.944934][ T8897] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1734.185783][T13715] Bluetooth: hci0: command tx timeout [ 1734.235758][ T8897] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1734.884201][ T8897] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1735.083421][ T8897] Bluetooth: hci6: command tx timeout [ 1735.144034][ T8897] Bluetooth: hci4: command tx timeout [ 1736.273416][T30543] Bluetooth: hci0: command tx timeout [ 1737.153197][T30543] Bluetooth: hci6: command tx timeout [ 1737.234369][T30543] Bluetooth: hci4: command tx timeout [ 1737.793261][T30543] Bluetooth: hci7: command tx timeout [ 1739.223579][T30543] Bluetooth: hci6: command tx timeout [ 1739.304425][T30543] Bluetooth: hci4: command tx timeout [ 1739.873865][T30543] Bluetooth: hci7: command tx timeout [ 1741.335804][T30543] Bluetooth: hci6: command tx timeout [ 1741.383162][T30543] Bluetooth: hci4: command tx timeout [ 1741.963789][T30543] Bluetooth: hci7: command tx timeout [ 1744.034584][T30543] Bluetooth: hci7: command tx timeout [ 1755.355258][ T94] block nbd4: Possible stuck request ffff8880251d0000: control (read@0,1024B). Runtime 1620 seconds [ 1755.426048][ T94] block nbd4: Possible stuck request ffff8880251d01c0: control (read@1024,1024B). Runtime 1620 seconds [ 1755.443483][ T94] block nbd4: Possible stuck request ffff8880251d0380: control (read@2048,1024B). Runtime 1620 seconds [ 1755.523004][ T94] block nbd4: Possible stuck request ffff8880251d0540: control (read@3072,1024B). Runtime 1620 seconds [ 1781.050578][T13750] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20003 [ 1785.455686][ T94] block nbd4: Possible stuck request ffff8880251d0000: control (read@0,1024B). Runtime 1650 seconds [ 1785.573827][ T94] block nbd4: Possible stuck request ffff8880251d01c0: control (read@1024,1024B). Runtime 1650 seconds [ 1785.595300][ T94] block nbd4: Possible stuck request ffff8880251d0380: control (read@2048,1024B). Runtime 1650 seconds [ 1785.684751][ T94] block nbd4: Possible stuck request ffff8880251d0540: control (read@3072,1024B). Runtime 1650 seconds [ 1785.973596][ T8897] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1786.204443][ T8897] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1786.334672][ T8897] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1787.174852][ T8897] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1787.585782][ T8897] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1788.214604][T13715] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1788.294541][T13715] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1788.604659][T13715] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1788.944313][T24085] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1789.543827][T24085] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1790.665640][ T8897] Bluetooth: hci8: command tx timeout [ 1791.405086][ T8897] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1791.513942][ T8897] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1791.666063][ T8897] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1792.265832][ T8897] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1792.664844][ T8897] Bluetooth: hci9: command tx timeout [ 1792.714919][ T8897] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1792.744329][T30543] Bluetooth: hci8: command tx timeout [ 1794.754945][ T8897] Bluetooth: hci9: command tx timeout [ 1794.826231][ T8897] Bluetooth: hci8: command tx timeout [ 1795.494880][T24085] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1795.815001][T24085] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1796.034270][T24085] Bluetooth: hci10: command tx timeout [ 1796.344618][T24085] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1796.814878][T24085] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1796.842723][T30543] Bluetooth: hci9: command tx timeout [ 1796.983769][T30543] Bluetooth: hci8: command tx timeout [ 1797.194747][T24085] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1798.131719][T24085] Bluetooth: hci10: command tx timeout [ 1798.914791][T24085] Bluetooth: hci9: command tx timeout [ 1799.073900][T24085] Bluetooth: hci5: command 0x0405 tx timeout [ 1800.185026][T30543] Bluetooth: hci10: command tx timeout [ 1800.424681][T30543] Bluetooth: hci11: command tx timeout [ 1802.274762][T30543] Bluetooth: hci10: command tx timeout [ 1802.513503][T30543] Bluetooth: hci11: command tx timeout [ 1804.594751][T30543] Bluetooth: hci11: command tx timeout [ 1806.674933][T30543] Bluetooth: hci11: command tx timeout [ 1816.224827][ T94] block nbd4: Possible stuck request ffff8880251d0000: control (read@0,1024B). Runtime 1680 seconds [ 1816.253019][ T94] block nbd4: Possible stuck request ffff8880251d01c0: control (read@1024,1024B). Runtime 1680 seconds [ 1816.274319][ T94] block nbd4: Possible stuck request ffff8880251d0380: control (read@2048,1024B). Runtime 1680 seconds [ 1816.303320][ T94] block nbd4: Possible stuck request ffff8880251d0540: control (read@3072,1024B). Runtime 1680 seconds [ 1831.534677][ T31] INFO: task kworker/u8:6:1085 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1831.694533][ T31] Not tainted syzkaller #0 [ 1831.773748][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1831.942760][ T31] task:kworker/u8:6 state:D stack:21192 pid:1085 tgid:1085 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 1832.344998][ T31] Workqueue: netns cleanup_net [ 1832.605626][ T31] Call Trace: [ 1832.885133][ T31] [ 1833.025659][ T31] __schedule+0x1798/0x4cc0 [ 1833.114907][ T31] ? __lock_acquire+0xab9/0xd20 [ 1833.314338][ T31] ? __lock_acquire+0xab9/0xd20 [ 1833.523636][ T31] ? __pfx___schedule+0x10/0x10 [ 1833.695570][ T31] ? schedule+0x91/0x360 [ 1833.976121][ T31] schedule+0x165/0x360 [ 1834.154038][ T31] schedule_preempt_disabled+0x13/0x30 [ 1834.383667][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 1834.646004][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 1835.004409][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 1835.205559][ T31] ? __lock_acquire+0xab9/0xd20 [ 1835.475787][ T31] ? rdma_dev_exit_net+0x8c/0x340 [ 1835.792891][ T31] down_write+0x1ab/0x1f0 [ 1835.924072][ T31] ? __pfx_down_write+0x10/0x10 [ 1836.183456][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 1836.512919][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 1836.813372][ T31] ? rdma_net_to_dev_net+0x1ed/0x240 [ 1836.934967][ T31] rdma_dev_exit_net+0x8c/0x340 [ 1837.095394][ T31] ? __pfx___might_resched+0x10/0x10 [ 1837.284259][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 1837.395208][ T31] ? net_generic+0x1e/0x240 [ 1837.493790][ T31] ? mutex_is_locked+0x17/0x50 [ 1837.635892][ T31] ? rtnl_is_locked+0x15/0x20 [ 1837.805123][ T31] ops_undo_list+0x497/0x990 [ 1837.923712][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1838.344582][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1838.534678][ T31] cleanup_net+0x4c5/0x800 [ 1838.673299][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1838.794747][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1838.955535][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1839.073598][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1839.264730][ T31] process_scheduled_works+0xae1/0x17b0 [ 1839.404563][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1839.535857][ T31] worker_thread+0x8a0/0xda0 [ 1839.634096][T13777] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1839.743041][ T31] kthread+0x70e/0x8a0 [ 1840.033411][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1840.194064][ T31] ? __pfx_kthread+0x10/0x10 [ 1840.244105][T13777] CPU: 1 UID: 0 PID: 13777 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1840.244146][T13777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1840.244166][T13777] Call Trace: [ 1840.244181][T13777] [ 1840.244197][T13777] dump_stack_lvl+0x189/0x250 [ 1840.244251][T13777] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1840.244274][T13777] ? __pfx__printk+0x10/0x10 [ 1840.244301][T13777] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1840.244325][T13777] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1840.244351][T13777] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1840.244377][T13777] warn_alloc+0x214/0x310 [ 1840.244413][T13777] ? __pfx_warn_alloc+0x10/0x10 [ 1840.244452][T13777] ? __get_vm_area_node+0x28f/0x300 [ 1840.244480][T13777] ? kcov_ioctl+0x55/0x640 [ 1840.244510][T13777] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 1840.244576][T13777] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1840.244612][T13777] ? __pfx_kcov_ioctl+0x10/0x10 [ 1840.244637][T13777] vmalloc_user_noprof+0xad/0xf0 [ 1840.244664][T13777] ? kcov_ioctl+0x55/0x640 [ 1840.244691][T13777] kcov_ioctl+0x55/0x640 [ 1840.244718][T13777] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1840.244743][T13777] ? __pfx_kcov_ioctl+0x10/0x10 [ 1840.244768][T13777] __se_sys_ioctl+0xfc/0x170 [ 1840.244794][T13777] do_syscall_64+0xfa/0x3b0 [ 1840.244818][T13777] ? lockdep_hardirqs_on+0x9c/0x150 [ 1840.244841][T13777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1840.244860][T13777] ? clear_bhb_loop+0x60/0xb0 [ 1840.244882][T13777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1840.244900][T13777] RIP: 0033:0x7f661ab8e7ab [ 1840.244919][T13777] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1840.244938][T13777] RSP: 002b:00007ffe08a3ec80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1840.244960][T13777] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f661ab8e7ab [ 1840.244975][T13777] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000dd [ 1840.244990][T13777] RBP: 00007f661add64e8 R08: 00000000000000da R09: 0000000000000000 [ 1840.245004][T13777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1840.245016][T13777] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1840.245046][T13777] [ 1840.245054][T13777] Mem-Info: [ 1840.705158][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1840.845479][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1841.014496][ T31] ? __pfx_kthread+0x10/0x10 [ 1841.074539][T13777] active_anon:6404 inactive_anon:0 isolated_anon:0 [ 1841.074539][T13777] active_file:4573 inactive_file:40592 isolated_file:0 [ 1841.074539][T13777] unevictable:768 dirty:37 writeback:0 [ 1841.074539][T13777] slab_reclaimable:14473 slab_unreclaimable:195669 [ 1841.074539][T13777] mapped:64460 shmem:1356 pagetables:1538 [ 1841.074539][T13777] sec_pagetables:0 bounce:0 [ 1841.074539][T13777] kernel_misc_reclaimable:0 [ 1841.074539][T13777] free:1116132 free_pcp:13767 free_cma:0 [ 1841.233081][T13777] Node 0 active_anon:25616kB inactive_anon:0kB active_file:18292kB inactive_file:162164kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:257840kB dirty:144kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16304kB pagetables:6008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1841.293748][ T31] ret_from_fork+0x436/0x7d0 [ 1841.513234][ T31] ? __pfx_ret_from_fork+0x10/0x10