last executing test programs: 2m10.267782588s ago: executing program 32 (id=2962): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000000414010026bd7000ffdbdf250800010000000000080003000100"], 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000000) 2m8.549184127s ago: executing program 33 (id=2975): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x64, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x31, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72"]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) connect$rose(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x38, r6, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x4}]}]}, 0x38}}, 0x44040) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='U\x00'/20, @ANYRES32=r4, @ANYBLOB="000000000000000014001a80100002800c0001800800000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x850}, 0x0) close(0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000410000009"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r8}, 0x50) r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r5) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x844821}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r10, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1000}]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x24008000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r9}, &(0x7f0000000840), &(0x7f0000000340)=r8}, 0x20) close(r8) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r9, &(0x7f0000000900)}, 0x20) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r11, 0x6180, 0x0) sendmmsg$inet6(r11, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000000080)="b82619", 0x3}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="75e2170b7a8528e9bc6df9a425040ff02dea431ec2aff2516c010001004d68cb7c7237b75d6618694a1de7829f5a2f513a567acc", 0x34}, {&(0x7f00000000c0)}, {&(0x7f00000000c0)}], 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="140000000000000029000000340000000900000000000000200000000000000029000000360000001100000000000000c2000000000029000000360000002f07000000000000010a000000000000000000fc06100000000202ff01800400000002000000c20400000029071800000000046f08000200000000000000ca1d00"/144], 0x90}}], 0x2, 0xc0000) 2m6.517598904s ago: executing program 34 (id=2988): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x10000c00) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2500, 0x7315, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x2, 0x4, 0x0, @multicast1, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000600)={'ip_vti0\x00', 0x0, 0x10, 0x10, 0x9, 0xfffffffd, {{0x24, 0x4, 0x1, 0x27, 0x90, 0x66, 0x0, 0x8c, 0x29, 0x0, @empty, @multicast2, {[@lsrr={0x83, 0x13, 0xd2, [@rand_addr=0x64010100, @rand_addr=0x64010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x2c}]}, @generic={0x88, 0xfffffffffffffeb1, "f3f7c37c33b58b55f285e2"}, @noop, @timestamp_prespec={0x44, 0x4c, 0xe6, 0x3, 0xc, [{@broadcast, 0xffff7fff}, {@remote, 0x4}, {@rand_addr=0x64010102}, {@broadcast, 0xfffff800}, {@empty, 0xb67c}, {@local, 0x7}, {@private=0xa010100}, {@private=0xa010102, 0x10001}, {@broadcast, 0x9}]}, @generic={0x89, 0xb, "565f643ab53c1b554d"}, @end]}}}}}) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f00000006c0)=[{{&(0x7f0000000780)=@nfc, 0x80, &(0x7f0000000500)}, 0x1ff}, {{&(0x7f0000000940)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f00000009c0)=""/174, 0xae}, {&(0x7f0000000a80)=""/199, 0xc7}, {&(0x7f0000000b80)=""/141, 0x8d}, {&(0x7f0000000c40)=""/209, 0xd1}, {&(0x7f0000000580)=""/16, 0x10}, {&(0x7f0000000d40)=""/238, 0xee}, {&(0x7f0000000e40)=""/213, 0xd5}, {&(0x7f0000000f40)=""/86, 0x56}], 0x8, &(0x7f0000001040)=""/249, 0xf9}, 0x3}, {{&(0x7f0000001140)=@nl, 0x80, &(0x7f00000023c0), 0x0, &(0x7f0000002440)=""/206, 0xce}, 0x2}], 0x3, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x23, 0x803, 0xfffffffd) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x101, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}, {0x0, 0x2, 0x3}, 0x3ff, 0x0, 0x1}, {{@in=@local, 0x0, 0x2b}, 0x0, @in=@loopback, 0x0, 0x851e4bae041d5f68, 0x0, 0x4}}, 0xe8) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c00000010008506000000000000000000dfc6e154ceea919d5d802b2abb10058a5a71ab8654b123b27c48e8a2e596adb1604e85737cdabc0010411185ae4ae78e2b871ae6f29b4f93ed1be685cf5257adb7e0568cdbc91d507c698e35cb1c63b07f479c9fb6dda5f7c37ef62dc630aa86b49604387ea352489946a3eee7ed4cba617d29d187b78ccf99b795a5b47f9d7543632bb4b2b0f57d6a758339155b34a80233a61362611b6c6933caf397008a9f8dc81c8b1df467574792be93b9abf7cbb1aa4cd78b1c47", @ANYRES16=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x300080c4) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r6], 0x40}}, 0x4000) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="0400000008000000090080000800000004000100"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0xc855) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0xc000000) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmmsg(r7, &(0x7f000000e340)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x80, 0x0, 0x0, &(0x7f00000079c0)=ANY=[@ANYBLOB="10000000002b000029000000390000"], 0x10}}], 0x1, 0x40084) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) splice(r7, &(0x7f0000000280)=0x3, r3, &(0x7f00000002c0)=0x4, 0x7, 0x2) 2m3.567078442s ago: executing program 35 (id=3007): syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 1m44.869165938s ago: executing program 36 (id=3087): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000040000000400"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000180)={0x8, 0x10}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = socket(0x8, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto$inet6(r3, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x0) ioctl$IMGETCOUNT(r2, 0x40106183, &(0x7f0000000000)) syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00200000000808004b00005c0000000000069078ac141400ac1e0001890b6be0000001ac1414aa440c070300"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c0007727907800000204763fe7c6090000004e5981785af989782e00220f2f95447b1cd314d9f8b004ef0b9905af3fef5383ae8df5cb013e402709a6f45346500e50d582467e98b0536e957a0f38fd2d412ed713dddb58fd4fc95473e5243532d5f3b70b8652559d188d6c951952ee0c9abdc963b66466c5da83d7f1"], 0x0) 1m40.392517705s ago: executing program 37 (id=3119): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x838, 0x41, 0x107, 0x0, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x31}, @nested={0x820, 0x1, 0x0, 0x1, [@nested={0x81c, 0x40, 0x0, 0x1, [@generic="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", @typed={0x4, 0x14e}, @nested={0x11, 0x48, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="2f8327c5b8"]}]}]}]}, 0x838}}, 0x4010) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r5, &(0x7f0000000480), 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r6, r6, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r8, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 1m29.648741999s ago: executing program 38 (id=3231): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x4000010, 0xffffffffffffffff, 0x0) unshare(0x10000c00) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x8000}, 0x8f) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000006c0)={'filter\x00', 0x0, 0x4, 0xb8, [0x3, 0x5, 0x10, 0x0, 0x4, 0xa], 0x4, &(0x7f0000000140)=[{}, {}, {}, {}], &(0x7f0000000740)=""/184}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket(0x23, 0x803, 0xfffffffd) getsockname$packet(r3, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r7], 0x40}}, 0x4000) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYBLOB="0400000008000000090080000800000004000100"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0xc855) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0xc000000) r9 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmmsg(r9, &(0x7f000000e340), 0x0, 0x40084) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, &(0x7f00000002c0)=0x78) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a000000080000ee0400000068360000100000000900000008000000690d000002000040000000000d00000000000007"], 0x0, 0x5a, 0xfffffdf7, 0x1, 0x1, 0x10000, @value=r8}, 0x28) socket$inet6_udp(0xa, 0x2, 0x0) 1m27.431165884s ago: executing program 39 (id=3250): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=@newlink={0x54, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f24c, 0xa028e3bf577c33cc}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_team\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x7, 0xc5b, 0x8000}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x40) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x76, &(0x7f0000000180)={0x2}, &(0x7f0000000280)=0x20) unshare(0x62040200) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000)=0x5, 0x4) 1m19.157506951s ago: executing program 40 (id=3301): syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a060000) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0xfffffef8, 0x0, 0x0, 0x200000}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(r0, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000002800018014000400001fff00000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000000) 1m18.716994457s ago: executing program 9 (id=3434): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a00000000", 0x69, 0x24040000, 0x0, 0x0) 1m18.587842752s ago: executing program 9 (id=3436): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001480)=@filter={'filter\x00', 0x4, 0x4, 0x458, 0xffffffff, 0xe8, 0x260, 0x0, 0xfeffffff, 0xffffffff, 0x388, 0x388, 0x388, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@ah={{0x30}, {[0x4d3, 0x4d2], 0x1, 0xd7, 0x2}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x88030000}, {0x28}}}}, 0x4b8) 1m18.260012973s ago: executing program 9 (id=3438): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3d, 0x0, &(0x7f0000000140)="259a53d4226f080a618b0e7e7771a46548354f626e2e054aa8caef56abcc844efadb6bbe4e61272f0f3799751e9c25a7ec9a7e8f4e33ad6870f01ad466", 0x0, 0xe93c, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf7fff647}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000002b0000000000000007000000060003000c0001800600000088480000130032b91bfb756c745f696e6a656374696f6e00802e73d11d9a0a46b551a71c66851d27460000004212aca49f3f544634f7763b5d931a8fa5e227b2ac51a7dee8824f2f521ab088e696124d4ccc0b57d83a4d814e035d0ae443545adb037c0d2079f106a23c8545fe410bebb17fe944c1f6cff85b49c360b5bde9843270452cf56be94a25bfdfc9249bcb4122601fa5a634a9071cb1f4500e93808b55ffffff"], 0x38}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x7}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m17.918089603s ago: executing program 9 (id=3440): unshare(0x22020600) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x569) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000003010000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m17.53359425s ago: executing program 9 (id=3444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x90) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000003c0)={0x0, 0x200}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={r3, @in={{0x2, 0x4e21, @multicast1}}, 0xe, 0x6200, 0x6f, 0x4905, 0x4, 0xf918, 0xd}, 0x9c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) r8 = epoll_create(0xbe68) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000040)={0xe0002036}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) syz_emit_ethernet(0x5e, &(0x7f0000000c00)={@random="c3472ab8358d", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) r10 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$igmp(0x2, 0x3, 0x2) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="259a4528ca85e8", @ANYRES16=r11, @ANYBLOB="000827bd7000fbdbdf250b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ff0100003b000000110007006b3e45137b7e4e87d4dd84d38c0000000a0006000802110000000000040028000a00060008021100000000000a000600080211000000000014006e80040001000400010004000200040001003400508005000400b300000005000200000000000400060008000880040001000e00040074d3c2ebebcca1569cf600000400050004000a00"], 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x1) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x1410, 0x100, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r13 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r13, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r14 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f0000000100)={0xa0002000}) setsockopt$TIPC_GROUP_JOIN(r13, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r12], 0x5c}}, 0x40) 1m17.010230651s ago: executing program 9 (id=3450): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x838, 0x41, 0x107, 0x0, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x31}, @nested={0x820, 0x1, 0x0, 0x1, [@nested={0x81c, 0x40, 0x0, 0x1, [@generic="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", @typed={0x4, 0x14e}, @nested={0x11, 0x48, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="2f8327c5b8"]}]}]}]}, 0x838}}, 0x4010) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r5, &(0x7f0000000480), 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x4c}}, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r6, r6, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r8, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 1m3.807930948s ago: executing program 0 (id=3583): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300000e000000000000000000000005000600000000000a00000000000000000000000000000000ff8000000000000000000000400000020001000000000000000a18ff00000005000500000000000a"], 0x70}}, 0x0) 1m3.515104486s ago: executing program 0 (id=3585): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async, rerun: 64) syz_emit_ethernet(0x42, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv4={0x800, @dccp={{0x9, 0x4, 0x0, 0x1, 0x34, 0x65, 0x0, 0x4, 0x21, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xc}, {[@generic={0x83, 0x8, "a464e654cfb7"}, @cipso={0x86, 0x6, 0x2}]}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x5, 0x0, 0x0, 0x4, 0x0, "9cc7e8", 0x3, "94125f"}}}}}}, 0x0) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r2}, 0x18) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) 1m3.264089406s ago: executing program 0 (id=3587): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ffd07b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m3.185287682s ago: executing program 0 (id=3588): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000a00)=ANY=[], 0x18c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000027c00000400fc800c0001800600060008"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='scalable\x00', 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='fib_table_lookup\x00', r5, 0x0, 0x417}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001e80)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0x9}, {}, {0xb, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x14}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0xfffc, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast2, {[@noop, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@private=0xa010101, 0x7}]}, @cipso={0x86, 0x2a, 0x3, [{0x2, 0x6, "84924d89"}, {0x6, 0x2}, {0x2, 0xf, "d109567cb50ec760777fb80755"}, {0x5, 0xb, "c92d3002d91d907b79"}, {0x0, 0x2}]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r8, 0x0, 0x3, &(0x7f0000001e40), 0x4) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc250}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200), 0x4) 1m2.845503872s ago: executing program 0 (id=3592): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000040000001a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000008000000000000000100008500000097000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000ff", @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1m2.543888826s ago: executing program 0 (id=3596): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x149a40, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180004ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000013b80)=ANY=[@ANYBLOB="280000001b1401"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x10) write(r3, &(0x7f00000000c0)="510003000000", 0x6) socket$kcm(0x2, 0x8, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x70}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet(0xa, 0x801, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r7 = openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) accept4(r5, 0x0, 0x0, 0x80000) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000002034a94030008000400ffffffffffffaaaaaaaaaabb080045f0002c00000000002f9078ac1e0001e0000001000065580018907804e700000000000086ddffff000000009821d9f02f84492bbbd4be4a7a07f7270fbaebe2e58bf3bdde78b12eb4751b464bae68804e044e"], 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) 1m2.003877183s ago: executing program 41 (id=3448): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x838, 0x41, 0x107, 0x0, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x31}, @nested={0x820, 0x1, 0x0, 0x1, [@nested={0x81c, 0x40, 0x0, 0x1, [@generic="80849c781e2570afbfa68aab6663505888c949d40d29cd502a7f0551660a22e2636f3a45b79366ac93458be39c13d6320e9dae49024812506dda76e417c2b5684ccfdb37421f8e08669a045a728bd0cf7487b8a25c6effa98bea10252f7f8b44d4421eb2ab25758acc75116c17f73c866207e48259137fc8d22ba8addaded0a51204e1ae539b343ba77465324c6175fecd6e9c2f86af117b7fa5393092669fb3c642f7740a41733d5ce072cb592369df3c7db507f710981b79a6f27f94443f82e9468217993d279b3cd98d43e7a8197a93ac53a20d50fa65dcbc1a77285f4fa8a41aafe7928d9c1c47fee58d1fadbf0a55b3a2ba109efcab6ccd4a4897a30de28477b97274e7c8802b39c25e18a45c7d866f1f4552dae599ae8332c0b6842236ee654753542c141ccdfde080daf5d1fc244f449d5100984dcec6b9aac2515af2069c5844b1444f09dadb830f0dbdd0727ac353c30d01d60d2bd2ef1dc2002b88023697caf780763ecb00f95e212f449bbe8eff689d82ca4d7e36c26aafddcf6ce49e893a4d248c1bf9ad5f8f59d6b6179cdcef47fed73ebb99cd7e44fb3cb269b9d2a1305a8930a9ded7ae7dcfe499350ed9aa48ad0ea9d9ead3833ba10872dd6a8b79ec67dbf0d9dbac5f36a2cbb736f2da8e0d7cc5cb6a4ea67bb22816004ccae86ba17eb2fb282c273cad2297e1208d719fa25e7924e294609a0afb411aa64deeba287852d645fbba7ab4da91a253326823c7f4f6bd1bd2e42b1afb6edfd8193c923a5589d17d970e8d1e4d45569b0dc774ee515ef91b01521ca3db670e321b3b9bf022f5fe9cac1e5ec1c22ab48d23deb50de82980858edb03abada41b51f7173c71e97db095b4b57e55811358b4524b0aa5f4c5d1a0bed1515f684411a80af8d3b6fb042e5e9209195f7d850fde0993e78b825f75f9f56f9177510f3e02e6781432668ce0a4569d28f1d0cc0c27f07175fd9e5a32bc94effddefc5b286e772d8c566e2298754efb3f9b33dd8fd5e54f0dd200e7a4c204845a39157370ca3bd389e2a9b10073deb4d9c7149d15cebb6617f1518f2e7bcd6657ce14c24ba76384e5a9e4d1b781c2072cf42e6521572403f6b139116e50ecee390ff919138c99b47fbd051c92f9f55f2813c215e972856ddf9f8a4feeae39b285b57d9ceefab5bdae067ced7b4119e7df3b509a7264e5bef5ab8e1fa06a69f666f565cf0d3804dc5029f4b0a9acbe513a1c4f0921a1c0175c8e4cce165f18e67634daa44a4719999f5ed208e19e9e9f522c553a4035f74f9625b69351fc244bb3dcb1d877157a62d799d0d1684fd5787f9e352282b9c63a3b21333c9a0b7745bbebf1fb540e5d873b6c7e1599febc8d4d1e0d41f6e7fc769629d9386f17ab1166ee78024a74736f895bf78c029d706413b410cc8a0da62a1b87bae76d9a415df8d504c706cea05c97727a81390c537ce327b3adf75a800ecc92b88daba2544542cdfda1438be39df05d8c29eb4afd4c25dcdab150056728c2fc83d186e1a07112502ac361b35bf00e5d5286771ad6765fa74d5ebd7b6c55600c80a1cf0fa2b4f1db7d6b41bf53a0e66dfe65659c25e4aa408708233fa128a44520b2cc7b91ea6b368a2ee13bde5251b2181e4cae6da505c47a303f580e8d88f0bdcc23e2f0bb422d93646d5c71933fb91ab52ffd1b820d760765659bf3306fbfc25057f72ad8232c43507379d003ab249ee4d24ec1f69b3dfe49afa65a672d2f314fb658cf0eedb6631fe901dfd02d922d07960220c570e47487e154075afb0bba6c86f80c02db65c34ece7185ba5d81149a8cc338694ec8a110eef640165a36cdad3dcdfc515ae082dc1c6e870c643bb55003fa9e94e075aa8c7629dbf170f04431ecefce57853a4f4b7b8bd9f00a6cad834465957a3926ed3f911c1a72e260ed800245802e4574699906200052ff44de38229216cea820419ec265c34951207f6cb5518a5ef4a45a9b94bcf420e6a961b2abc2dbb9fe2e4b73a167a9bdf2dc0107cc8660f25b8261682bf515bd9404dd380e3dc9d0f692c806c9531a663eced8bb2099f481787345149d6a77445a64706cfd154864f4733665f134912d92f8f3b543eb35382b75e14990c840f9c6ff3813ee54f7213b43f1a355e15075f5e4257f04ba4ed4a122bceb9d5cb6def3cbdd23bb5b708ca11088460795abc1dc90beaea60408f4543fc4f61f4b7e7c82d84c66abfa5b4a70682178c318e51d363d732468ae0b04835878f500e998644c677c47ce5c54e20c9606da5922b6f478c5531a1e85c28e4f3dedf40e3279b2e55de1268d55c16455f82260f3862ecde5b7d289da77d7599ba6c1842aa603b3a7de496ab7b39db03acf55aaa1fbe5b71d697ae8934c33ed0928f1ac26fc57b81a45637922a2fcc09aa9e11ee4974b75ca14a6ad47b0f2bbab73fe0ac61cf301d43d333d57457e9fc1ff7b69543e931c897a163ce88e00b49a7fa118a1d087e2dfaa163f64b1913afca5a621a19f56c9ea83cb5cf6de0f394fcea75f00c6748f2e109a557c1f3d5b4aa9872287918c259db61b341ae63494b8e461fcc0d89857e67b7491fd67faa4315389739d79b3acabb42702be7b094900d3870b79a2e913af6445092788747ce9f7e059490844937006d3023fdb5e3047cfe4d54cdfdc13768c5fe0de57ee1157f14edbeb4e48d3e8b30a1ff389a61b44d7d43ecf7b9393089a08d584780bb8ce463238ad059773a4eb0f355a850a23ea8a1ad0367aecef23caedbe4d29c66c14f76782c9416f3a1807c665bea3d041340342e73fe5e94abaa84cc83f5e7f9bdbec12c16f8966452153aae98ee2a472431b9a0f25495f79c5eb2dc2ffc347fee2e5f2437f4a8d7abfe1b1e2c5c4a4ecbd5d0ed117b6", @typed={0x4, 0x14e}, @nested={0x11, 0x48, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="2f8327c5b8"]}]}]}]}, 0x838}}, 0x4010) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r5, &(0x7f0000000480), 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x1b, [0x0]}}]}]}, 0x54}}, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r6, r6, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r8, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 1m1.922984572s ago: executing program 42 (id=3450): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x838, 0x41, 0x107, 0x0, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x31}, @nested={0x820, 0x1, 0x0, 0x1, [@nested={0x81c, 0x40, 0x0, 0x1, [@generic="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", @typed={0x4, 0x14e}, @nested={0x11, 0x48, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="2f8327c5b8"]}]}]}]}, 0x838}}, 0x4010) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea454"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r5, &(0x7f0000000480), 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x4c}}, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r6, r6, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r8, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 58.346296127s ago: executing program 4 (id=3620): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={r0, 0x2, 0x0, 0x800}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, r2, 0x100, 0x70bd27, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000001700000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x24}, 0xfffffffffffffeb5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r8, 0x303, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0xfffffd, 0x2, 0x3}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) write$cgroup_int(r10, &(0x7f0000000140)=0x10001, 0xfffffd0a) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) socket$nl_generic(0x10, 0x3, 0x10) 58.124103769s ago: executing program 4 (id=3622): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$rxrpc(0x21, 0x2, 0xa) close(r2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="0100050000000000000000826d0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES16=r0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) (async) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000040)) 57.916516208s ago: executing program 4 (id=3624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000b07b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 57.73571826s ago: executing program 4 (id=3626): r0 = socket$key(0xf, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r2, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r1, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x300, &(0x7f0000000140)={0x11, 0x8100, r2}, 0x14) 57.424112126s ago: executing program 4 (id=3628): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x32, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x3, 0x1, 0x0, {0x0, 0x0, 0x8, 0x401}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) 57.276040631s ago: executing program 4 (id=3629): syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 47.523586736s ago: executing program 43 (id=3596): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x149a40, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180004ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000013b80)=ANY=[@ANYBLOB="280000001b1401"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x10) write(r3, &(0x7f00000000c0)="510003000000", 0x6) socket$kcm(0x2, 0x8, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x70}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet(0xa, 0x801, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r7 = openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) accept4(r5, 0x0, 0x0, 0x80000) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000002034a94030008000400ffffffffffffaaaaaaaaaabb080045f0002c00000000002f9078ac1e0001e0000001000065580018907804e700000000000086ddffff000000009821d9f02f84492bbbd4be4a7a07f7270fbaebe2e58bf3bdde78b12eb4751b464bae68804e044e"], 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) 47.12686226s ago: executing program 7 (id=3672): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8085}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x0, 0x6, 0x9, 0x5, 0xfff, 0x9, 0x7, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 46.460833365s ago: executing program 7 (id=3676): r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r0, 0x2c, 0x48f, 0x0, 0x0) 46.295971185s ago: executing program 7 (id=3679): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r0, 0x0, 0x1000000}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xe498}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x80009, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00800000000000000c002b8008000100", @ANYRES32, @ANYBLOB="8b3687728576b4420ff5201d562563b1adb4b186855dd79386b8ee233cec4034428a8899a5589536a56929e6cb8974afea815007026871d7ed29ebd6340ee0f3263da28790261ea8ab443ae8cdac7a5706ffc29e84dac64df11b7c8dc14979f7e98b735dc6f7287f29cdf0bfa80f6dabdb9b5c83606d6f8ebb894a69bb9691cdd0ae33c94e0d47a85a8354289f204efbefe8d6f4ed893263737b13765aa7"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) sendmsg$can_bcm(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73) r8 = accept4(r7, 0x0, 0x0, 0x80000) write(r8, &(0x7f0000000040)="cb", 0xfffffdef) setsockopt$sock_int(r8, 0x1, 0x49, &(0x7f00000009c0)=0xfefffffb, 0x4) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r9}, 0x10) 45.308227739s ago: executing program 7 (id=3685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a313200000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000100003800c00008008000340bc"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 45.223227213s ago: executing program 7 (id=3686): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8085}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x0, 0x6, 0x9, 0x5, 0xfff, 0x9, 0x7, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 44.838584867s ago: executing program 7 (id=3690): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000180)={0x8, 0x10}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = socket(0x8, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto$inet6(r3, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x0) ioctl$IMGETCOUNT(r2, 0x40106183, &(0x7f0000000000)) syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00200000000808004b00005c0000000000069078ac141400ac1e0001890b6be0000001ac1414aa440c070300"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c0007727907800000204763fe7c6090000004e5981785af989782e00220f2f95447b1cd314d9f8b004ef0b9905af3fef5383ae8df5cb013e402709a6f45346500e50d582467e98b0536e957a0f38fd2d412ed713dddb58fd4fc95473e5243532d5f3b70b8652559d188d6c951952ee0c9abdc963b66466c5da83d7f1"], 0x0) 42.199781304s ago: executing program 44 (id=3629): syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 40.918067163s ago: executing program 5 (id=3714): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x14, r1, 0xf01, 0xfffffffc, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x54}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000880)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x24, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x70bd3b, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x800) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000104000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="01390100000000001c0012800b1001006d616373656300000c00028005000300ff000000"], 0x3c}, 0x1, 0x0, 0x0, 0xa21d294a54a2fc59}, 0x80) 40.501077428s ago: executing program 5 (id=3717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) ioctl$TUNSETLINK(r1, 0x400454cd, 0x207) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440200000000900010073797a30000000000800034000000005"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r4, 0x10e, 0x3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e00440002800600020001000000080001000100000008000300", @ANYRES32], 0x84}}, 0x20008040) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 40.102997269s ago: executing program 5 (id=3720): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}}, 0x10) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x401, @empty, 0x6}, 0x1c) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 38.693224356s ago: executing program 5 (id=3723): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1d0000001400000000000000", @ANYRES32, @ANYBLOB="2fda3710ac775d4949801e844bf9424e2004b3ac368fefa8e91412d872ac7f4a8b3aa6c7696e775db2d61bf00a056faf5ef3f423c6bc6f5d12cfcb2c552609645ce77976f4d5ae13648c3848a0148b2239b1c42fe07ea8f483aeb6c4a0f39f1a7a51de31168f22fe6e6d0a472ea5d4464d84a31e07d081355499d8105ea70ceed4c9b93bee3996d3e949c059a348d07d4aa9b44c1767540170b0775b95211d4cc800e7a3ba75ca7800000060e51fa057a7d949925c4edeaf1756ef0f198acd98c317e526ee5d", @ANYRES64=0x0], 0x20) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x4e33, @empty}, {0x304, @broadcast}, 0x2, {0x2, 0x4e64, @empty}}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006911300000000000851000000200000085000000b400000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) unshare(0x400) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x480000000102, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GENEVE_TTL={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_ID={0x8}]}}}]}, 0x50}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r9, 0x1}, 0x14}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xc, 0x2, {{}, [@TCA_NETEM_LOSS={0x44, 0xd, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI]}]}}}]}, 0x90}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r11, &(0x7f0000000700)="f5", 0x1) r12 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r12, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0xfffe, 0x400, @loopback={0xff00000000000000}, 0x101}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000e80)=[@hoplimit_2292={{0x14, 0x29, 0x36, 0x80}}], 0x18}}], 0x1, 0x4000880) splice(r11, &(0x7f0000000040), r10, 0x0, 0x800000000ff, 0x0) 38.306465546s ago: executing program 5 (id=3725): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 38.159858766s ago: executing program 5 (id=3727): socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'macvlan0\x00', &(0x7f00000003c0)=@ethtool_drvinfo={0x3, "c17d9e0b7545bc9199c17534c80bcdc09f448a57804714df10922384bdf603ad", "f6faa7f6579635f441913cfffdd3bdbcd4c13a58d248e887e313366918f2e88f", "7342cbb2b294c6dfaef6a7421a8b1ae7c36fbd5fb7d87ccc565d5bcf9f36758a", "e035849245372add1e2cad27720563af23eb7699c879769ae016d81bce511689", "fb24ac37fd72d07818eec8a719142507bf79ec51c3ff123140e667e41ebd7d0b", "0839612155ca065bbeb67a68", 0xfff, 0x10000, 0x32, 0x4, 0x9}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x80000) setsockopt(r6, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) recvmmsg(r6, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000880)=0x8) r9 = socket(0x22, 0xa, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x17, &(0x7f0000001140)=@sack_info={r8, 0xef, 0x6}, 0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x1b, 0x4, 0x1, 0x1, 0x6c, 0x64, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x13}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @timestamp={0x44, 0xc, 0x92, 0x0, 0x2, [0x9, 0x6]}, @rr={0x7, 0xb, 0xe0, [@multicast1, @local]}, @timestamp={0x44, 0x10, 0x79, 0x0, 0x4, [0x0, 0x0, 0xfff]}]}}}}}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRESOCT=r7], &(0x7f0000000180)=0x28) 29.609290578s ago: executing program 45 (id=3690): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000180)={0x8, 0x10}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = socket(0x8, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendto$inet6(r3, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x0) ioctl$IMGETCOUNT(r2, 0x40106183, &(0x7f0000000000)) syz_emit_ethernet(0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00200000000808004b00005c0000000000069078ac141400ac1e0001890b6be0000001ac1414aa440c070300"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c0007727907800000204763fe7c6090000004e5981785af989782e00220f2f95447b1cd314d9f8b004ef0b9905af3fef5383ae8df5cb013e402709a6f45346500e50d582467e98b0536e957a0f38fd2d412ed713dddb58fd4fc95473e5243532d5f3b70b8652559d188d6c951952ee0c9abdc963b66466c5da83d7f1"], 0x0) 23.163176532s ago: executing program 46 (id=3727): socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'macvlan0\x00', &(0x7f00000003c0)=@ethtool_drvinfo={0x3, "c17d9e0b7545bc9199c17534c80bcdc09f448a57804714df10922384bdf603ad", "f6faa7f6579635f441913cfffdd3bdbcd4c13a58d248e887e313366918f2e88f", "7342cbb2b294c6dfaef6a7421a8b1ae7c36fbd5fb7d87ccc565d5bcf9f36758a", "e035849245372add1e2cad27720563af23eb7699c879769ae016d81bce511689", "fb24ac37fd72d07818eec8a719142507bf79ec51c3ff123140e667e41ebd7d0b", "0839612155ca065bbeb67a68", 0xfff, 0x10000, 0x32, 0x4, 0x9}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x80000) setsockopt(r6, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) recvmmsg(r6, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000880)=0x8) r9 = socket(0x22, 0xa, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x17, &(0x7f0000001140)=@sack_info={r8, 0xef, 0x6}, 0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x1b, 0x4, 0x1, 0x1, 0x6c, 0x64, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x13}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @timestamp={0x44, 0xc, 0x92, 0x0, 0x2, [0x9, 0x6]}, @rr={0x7, 0xb, 0xe0, [@multicast1, @local]}, @timestamp={0x44, 0x10, 0x79, 0x0, 0x4, [0x0, 0x0, 0xfff]}]}}}}}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRESOCT=r7], &(0x7f0000000180)=0x28) 2.511901117s ago: executing program 8 (id=4019): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @loopback, 0xfcb}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) pipe(0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x2d, 0x0, 0x3}, {}, {}, {}, {0x6}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000003000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="84000000000040959f30370b06000000000400ffffffef020000", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x4a, 0x0, &(0x7f0000000140)="d510faffffdb674c5ae4000b0094", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0xfffffffa}]}, 0x10) close(0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x38c) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) 2.268833836s ago: executing program 2 (id=4021): syz_emit_ethernet(0x11, &(0x7f0000001480)=ANY=[@ANYBLOB="0180c200e596aa09aaaaaa1a0004dc0085"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x3, 0x51, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000080045100070006500000001"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="2913620302", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x10, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x4}]}, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x94) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x9, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20) 2.268393847s ago: executing program 3 (id=4022): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000140)=0xd) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x0, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000a00)=ANY=[@ANYRESOCT=r1, @ANYBLOB="18000000000000000000000000000000181100004f6ae0843e5f501a6de3e3f1facec8463be1c0d5668c69ddafc16597f15e0e7e0944d5dcb4aca13fbcabb84f4661fba2e9a0ada7ea2b1a029d5e351ca20fc88d96844c205684ef9437438e722d", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000004000000c300000095", @ANYRES64=r1, @ANYRES32=r1], 0x0, 0x1000002, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000130008002abd7000ffdbdf252606008e4e204e240300000007000000000000c048ea00009ccfffff03000000ffffff7f00010000", @ANYRES32, @ANYBLOB="052a670006000000010000000100000004000100"], 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='vnet_rx_one\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x1a, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x44}}, 0x4000850) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r7, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="140000000000000029000000340005000700000000000000911c983a913f1c932682feedff7a58c25a7a68dac57effcb7417508071a210ea0bfc467f9a3b45ad892e7b4acaabee559eba82d11a8207b89e1a9c081a45d136bc430c7ecfbafac535984261f659f67aabb356c5d899c7ba5eea3b3f9ef37b82b2cfc19c30ad7fd37a9fd79fe102f08fac86cfe061cde41afe93ee617ee3ddddbffb"], 0x18}, 0x24004840) bind$ax25(r6, &(0x7f00000006c0)={{0x3, @default, 0x1}, [@default, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @null]}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="8959edca91c028332245dc943c066cf064a71e0cc2cf83f59eca251729ce0f1ad23a668a39d6bf4c0cd2dc95957e97146658c2b030cd64b494396f996ff0b06cef371c99ee97d6a7c2d57b15ac820ff64383d054f80fa1dddbd806f4252dea814f08a71c3c22c0a06f0f", @ANYRES32, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007b243ce4b3daa7804f"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$alg(0x26, 0x5, 0x0) accept4(r9, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r8}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) 1.949064541s ago: executing program 6 (id=4024): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%ps \x00'}, 0x20) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%-5lx \x00'}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1e, &(0x7f0000000080)=@raw=[@ldst={0x2, 0x3, 0x3, 0x2, 0x2, 0x8, 0x10}, @exit, @alu={0x4, 0x1, 0x7, 0x9, 0x6, 0x100, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @exit, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x6c, &(0x7f00000001c0)=""/108, 0x41100, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x3, 0x40, 0x80000000}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000006c0)=[r2, r3, r4, r5, 0xffffffffffffffff, r6, r7], &(0x7f0000000700)=[{0x4, 0x5, 0xe, 0x380bf790ea05445f}, {0x2, 0x5, 0xb, 0x1}, {0x1, 0x1, 0xb, 0xc}, {0x3, 0x4, 0x10, 0x8}, {0x4, 0x5, 0xa, 0xb}, {0x5, 0x4, 0x9, 0x9}, {0x4, 0x1, 0x3, 0x5}, {0x2, 0x1, 0x4, 0x3}, {0x4, 0x3, 0x1, 0x1}], 0x10, 0xfffffff9}, 0x94) r9 = socket$packet(0x11, 0x3, 0x300) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r10, &(0x7f0000000b00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x6c, r11, 0x8, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r15}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r16}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x12) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r17, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xd0, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:setfiles_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000010) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000d00)={'team0\x00', 0x0}) r19 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000d40)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x10, '\x00', r18, r19, 0x3, 0x5, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000010c0)={r8, 0xe0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000e00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000e40), &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcc, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000f00), &(0x7f0000000f40), 0x8, 0xc2, 0x8, 0x8, &(0x7f0000000f80)}}, 0x10) r21 = openat$cgroup_ro(r4, &(0x7f0000001100)='memory.swap.events\x00', 0x0, 0x0) sendmsg$nl_xfrm(r21, &(0x7f0000001500)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001180)=@expire={0x33c, 0x18, 0x2, 0x70bd28, 0x25dfdbfc, {{{@in=@private=0xa010101, @in=@broadcast, 0x4e21, 0x496, 0x4e22, 0x0, 0xa, 0x20, 0x20, 0x0, r20, 0xee01}, {@in6=@mcast2, 0x8}, @in6=@local, {0x7, 0xf87, 0x2, 0xffffffff, 0x4, 0x2, 0x0, 0x2}, {0x3, 0x10, 0x0, 0x80}, {0x3, 0x3, 0xffffffff}, 0x70bd2d, 0x3503, 0xa, 0x4, 0x7, 0x21}, 0xd}, [@etimer_thresh={0x8, 0xc, 0x6}, @algo_auth={0xed, 0x1, {{'xcbc(des)\x00'}, 0x528, "0064217d631d0aebfe9ff139509bea4035e884a22ce7dfedfcec46c8c07914cbb0df401961de385e3107d5b353d51c74bb89f4d92887ef962c1b1c79bae712d69c3e80ca2f45c1e5a1f079f0c3f4f22a298166c4f2a587a6a89a7a68cd4f8ec10a63a3fed7f1e311a073a657635c026eb3f46cff78a9cf3a738df44f4e1187de76b5826c527952846f0653cbf454dc47fb0bdb0f0d899a42080e749ea743426721dbb3b60c"}}, @offload={0xc, 0x1c, {r18}}, @user_kmaddress={0x2c, 0x13, {@in6=@empty, @in6=@mcast2, 0x0, 0xa}}, @sec_ctx={0x10b, 0x8, {0x107, 0x8, 0x0, 0x80, 0xff, "cd92110b3b4c83d295afdd768098c12003aebe40b057889d5d3b987a093f7abeaa82972bc9f0fbfb8cd149ea7ba4b3ed46eef46cd78be6e4a832bf05c1006ae1fc2666bb7a5a0a59d802f0ebab3706f5b8ece5842b7fda14964560f5876b0c9d23f2152334c87260e04f4e7d5120031083b73a5a1c1f722e337fcdc259971c237caeeae6db5d394e6e4ebbff57396e15ef4d4324e36e53a71f6c301daebafced70cc1d38584de6be4fe37cd8950d6db19af1ebf218e143b956faf5a90548cdc9ddf846be0beeccd10e1d8f5211d07d1d4fa30123d944eb1d51683063a8a1b75bf5038d39abb09eb04e968897ab5858d6ae0954dba4e01cbe4039e53a9f8e61"}}, @replay_thresh={0x8, 0xb, 0x9126}]}, 0x33c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$inet_tcp_int(r21, 0x6, 0x9, &(0x7f0000001540)=0xc5, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) pwritev(r2, &(0x7f0000001640)=[{&(0x7f0000001580)="8d16f8d87ad06860976b2f16ad8cb4c732d5e041ed57aeccd9e0f043bc9ce105f5eb8d890040fd0022d4b9acb07b3a8eb23aa5a63c6a96285708663aefad93997338d835855ae74818e333eca1436b30bae02d483d773dd951fe8acc61077f06b9ed3bc71db58e02da48c7d78144d5a701167332a34078919ab35cab86a588b7b368ebcba0cedb575e7f9524356b1ffe05063c7d96f9733c97", 0x99}], 0x1, 0x4, 0x566) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r9, 0x8982, &(0x7f0000001680)={0x1, 'ip_vti0\x00'}) 1.71511253s ago: executing program 6 (id=4026): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0), 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async, rerun: 64) r5 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="0ddac400000000000000bfb48c676fab22e2d076fb296526ae98655ee4c429d1f245f7b1cfa5447a76830be1d0cfd34ed8af4ddbcc0b787eb0619e69f27ab98c3754b47c0b61fc44", 0x48}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) (async) recvmsg$can_bcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}, 0x10000) (async) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 64) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38) (async, rerun: 32) close(r3) (async, rerun: 32) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r7, 0xfffffffd) (async) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000001000), 0x581, 0x40000000, 0x0) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) (async, rerun: 32) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x80, 0x40, 0xa29fb27, 0x645, {{0x25, 0x4, 0x2, 0x0, 0x94, 0x67, 0x0, 0x5, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x4, 0xc, 0x0, 0xe}, @noop, @noop, @noop, @generic={0x88, 0xc, "4ca7a5d1289b4ed0e8b4"}, @lsrr={0x83, 0x27, 0xb4, [@rand_addr=0x64010106, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010102, @local, @rand_addr=0x64010101]}, @noop, @timestamp={0x44, 0x8, 0xed, 0x0, 0x7, [0x10e9]}, @timestamp_prespec={0x44, 0x3c, 0x31, 0x3, 0x1, [{@multicast2, 0x2}, {@empty, 0x4}, {@loopback, 0xb}, {@empty, 0x5}, {@empty, 0x3}, {@broadcast, 0x3}, {@rand_addr=0x64010100, 0x6}]}]}}}}}) setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000340)={0xffffffffffffffff, 0x1, 0x0, r10, 0x3ff}, 0xc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80c0, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a00)={'gre0\x00', &(0x7f0000000900)={'erspan0\x00', 0x0, 0x700, 0x7, 0x3, 0x81, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x64, 0x0, 0x8, 0x2f, 0x0, @remote, @broadcast}}}}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (rerun: 64) 1.435203527s ago: executing program 6 (id=4028): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1e}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x1f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 1.388111614s ago: executing program 8 (id=4029): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300000e000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000002000000400000020001000000000000000a18ff00000005000500000000000a"], 0x70}}, 0x0) 1.370597553s ago: executing program 6 (id=4030): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x6}, 0x3, 0x0, 0x3, 0x3}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x40, 0x4) 1.249799789s ago: executing program 2 (id=4032): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000000bb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.201620302s ago: executing program 3 (id=4033): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}}, 0x10) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x401, @empty, 0x6}, 0x1c) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 1.191606868s ago: executing program 6 (id=4034): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028190000bca30000000000003403000040feffff720af1ff0000000071a4f1ff000000001f030000000000002e0a0200000000002604fdffffff000e61144400000000001d430000000000007a0a00fe0000001f61141c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) ioctl$TUNSETLINK(r1, 0x400454cd, 0x207) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000200900010073797a30000000000800034000000005"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r4, 0x10e, 0x3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e00440002800600020001000000080001000100000008000300", @ANYRES32], 0x84}}, 0x20008040) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 1.123135792s ago: executing program 8 (id=4035): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf) r2 = accept4(r1, 0x0, 0x0, 0x80000) syz_emit_ethernet(0xc2, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)='W', 0x1, 0x8005, &(0x7f0000000380)={0xa, 0x0, 0x0, @private0, 0x8}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendto$inet6(r2, &(0x7f00000000c0)="3263aa", 0x3, 0x840, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@cgroup=r3, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000100)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000000c0)=0x2, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000001140)) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r4}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x25dfdbff, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x8007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x54c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0xffffffff, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x3}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r8}, 0x10) sendmmsg$inet(r0, &(0x7f00000053c0), 0x0, 0x4) 1.044141477s ago: executing program 1 (id=4036): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00004000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.008737648s ago: executing program 2 (id=4037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 921.435439ms ago: executing program 1 (id=4038): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180200000300000000000000000000008500000022002800850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 881.049935ms ago: executing program 3 (id=4039): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0xc3100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r0, 0x35, 0x1, 0x6, &(0x7f0000000180)=[0x0], 0x1, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000080), 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3bfecf77}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 874.927167ms ago: executing program 8 (id=4040): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000bf03000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000041000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000300200000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 784.11113ms ago: executing program 1 (id=4041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000f5ff00000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000c80080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514000000110001"], 0xe8}}, 0x0) 716.901814ms ago: executing program 6 (id=4042): syz_emit_ethernet(0x11, &(0x7f0000001480)=ANY=[@ANYBLOB="0180c200e596aa09aaaaaa1a0004dc0085"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x3, 0x51, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000080045100070006500000001"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="2913620302", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x10, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x4}]}, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x94) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x9, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20) 687.018616ms ago: executing program 3 (id=4043): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000001b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 603.932356ms ago: executing program 1 (id=4044): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 534.501015ms ago: executing program 2 (id=4045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x188, 0x0, 0x1, 0xb00, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x5]}, @CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x1802, 0xffffffff, 0x7f, 0x9, 0xd, 0x4]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x34, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x3}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x41}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x80}]}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_TUPLE_ORIG={0x84, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xffffff01}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x401}]}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xd}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xa}]}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x40001}, 0x400c808) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) (rerun: 64) write$tun(r1, &(0x7f00000002c0)={@void, @void, @llc={@snap={0x0, 0x1, 'JN', "893646", 0x80f3, "8790d98a66a2ee4b954cefcdfcc3dbaec578f89cf6fc4947a074b2304ec20b79d10de3c696ef09e342da2cb000512f27528282ecafa9f1774368876a24593ed9b163850132296041bd15fa8ef2be93d86b1b96dd227de01dfa31358801f2895c8921cf8ebc5970e8a4ce992ac299761c074fd714c924e0d9ea9e62798bc6e8f7ded07cfaee23e51e0dbb7a427ac0fa36706860d4dc7bb2b5910c361a"}}}, 0xa5) (async) r2 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000018c0)={&(0x7f0000000380)=@pppoe={0x18, 0x0, {0x0, @empty, 'sit0\x00'}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000400)="de9f0a8b89beecc753e396946ac16731b0549de2c65b43e13d900d3325f815821e5a48e8d035f817942c90a7afc5577e1e7ef64499df6d28fd9b3a32bbc0b2863d80f33ae1074045065dcf6949450a761e54826bafc6c60f9db649e6c0c9ec047945f2e63e385e46baf750532c0cc73bce232596d5358f80aa08723cc0d6919c4e8102096da8eea05ef66f9fe918e3459c7a0d7ef3ed1f190d2bc873782fbd400fa119d8c4190a8c2fab5eb226d74ab4104e64a480734a8377271f4e", 0xbc}, {&(0x7f00000004c0)="ac73947c650fd55b83d6c70a9617c900763825d93813de5ef5a1c3f4bc0106423aabb24497f9a9d18d02a77f002c7a08759fd3e6d67fe5131d340d1bf1624632ede59e22ec377fd95e37f831f79a0df6d765183c61158f34cfc332c9dd48c2848cf3bbc1933c8fa79f740d93aa32a8570c99cf9c00125c27d426fdb5625ac4721db14dac8d13a1b438698305087cf3e8ae19c11cef37400ffdb403b9fc1d85edb27ac17f0ce8232d5e4a13cf91bdf0b0ad4787327fa8103c0b8a33f278025effb7e18f06dc202d9f13b9c38b9feb4c5dd6adbd3857edb7f77f7e367fa6e5e865db84af16950ecd7885bbfb77", 0xec}, {&(0x7f00000005c0)}], 0x3, &(0x7f0000000640)=[{0x38, 0x118, 0x9, "d90898771bc836b1643ae172810b6129baefecfda2bccfe792c10a2dc73e4dfe9e3324d077ff"}, {0xe8, 0x103, 0x2, "fc9535f93f8ab0b29087f40be3c4793262020a67283070f74e74cf76a4f6c0c0fc71f4865bba2a3b0e93a38317d11b96fc87819e4e101b32918a22f3a851d799c304fe4cedf132fb9d64831b27c224b768c36802a55fda1b9cc3d938c697d07633aeed9ad31a22ce68eb8cdda72fcd39a4afc74e244da5ad230863e14a9723be85b69e0718a346682c056bef5747f589d272ce088f7003b5a028d0371adaa23e5add1d35d7d49fbc8e569caef3f647609dd29a57a0f71a5e2dfdfedd4e9fc9ecf05f842f061ac55bd4dd153c04e13727ac6c"}, {0x108, 0x10f, 0x9, "d8cc1f0bee14d7bb9db29e6b41e4e4eae5bdcb37ba573e6effac2978d5331f009c672866e1e4d09eddf5f278bbb2edbce8747ce18f3ca4d713174ec9bc1cb79f6995eb517c161358cccdb0e442d2ecf795f384ffaca8e48903c0caff96926a6a8daee9e49672c0a7778723fa90872be6e86552dedcfeafb19185eadccd2a662a9a27ee9fc0de623ce97cdec02fb9f7e653b7fa17a821938cbdbf51a1a7c622840e9fc9da2f7c15e08b866234e1f3cb95aa28e0e64311a959c8abdfd60fcb7a7982027a9de1df0c9ea5908360dc754ecded7d3566b0778e6ae265e84170c7c01fb4fb723a484beb5c738f2f5b6d2bb101964abd4ed9a3da45"}, {0x38, 0x6, 0x200, "d85ab4fd3375799f53ba8da3ea50cf7e0aa5f667c17ad2cb0a549ea87684a917949104fba75699e0"}, {0x1010, 0x10f, 0x5, "6880b57204c0f0416ee8334634e4de4a3f8f27f2680b7ebda4309268bcc459148e2f20037e141e23456d02f61c3eee98a68746d3a75dc0a1bf32a8dbad8817bb4337a60223bcda20a62dea9b374e7312f7ef3b41377a63c13649ef145951a1ca458b6c59732d34fe309cdd1477f6889da8ef46e7fb60354a493a562935c562b11a64f0a7b8f4bf04e774e782c2a3eb425e974bfba67d3a93e6a13ba7b9e3604ae2b1fe7fac1f23b6ad1465bef369149d1261850433512cfca4674f813417ea109910a9193c5263d10cfb99ba09420577aaf2e8f57b2feff4227f710020709ba662446e372b19c724f2a87d8c8e2a5b27dbce3b60366122a702919fbde446e92fe8a4f3c2b4c7de6e3200f4492f3d7050ec6e9b7acdd89e067d73c96b6ee150534a3660b50a170feeb57dfdb273aad930cf2be1be6ebff9030d2a2bce2dd7952d06a5346f4b7c90e0a25c99d1428e6ce859202d997bdf6fc7dd8ea1677cc68a18e90b068a0af4971b619fdfdb65d568b52312581d3eb50020f6c5906113239f6d27abaf11e692f29fb4d7e8400dcb38225892eb14a1487beaeacfd939609ea29bf3ef1c35d774a8a1be81c82a4679c1c386cb2edc3fdbd91a9c00cc5fd59c8aa72acf21d7a5da174f81b206185b6493fff024960c4d1d462f67b7247aa04c53aed1739ec8cc8bfa696ea581ec9e0150a74507d4f197078e15f1df26b3f23fa1e992be3324a1a628e2c6b68d12f72d92d58b5c33221d22f38f70c84bb29709e04b959b829e64560bc53089096893463b04517eacd9545dd19d919fcdcd307d50cf9791a6b48a791498ac83aed4e5c1689928adfcce50bcd14235229fe6e20e4bd4680f9331596b21ddaf10d5d64b5b11caa710fe6f9688b23b4cf3089b9fbeeaf6e44315d6325dd9458ef8bcaca002bb45f46d7e576ea733b1d15db295c825867b5afe950fd17c692217d56a1088d4b0998a2f3054b03a35deebae95227be844074ef325a10a74da09b77a1443565d39329671b71d37da256189d8dc3bdebe15ae63e1cb4f000d222da44e3ae61d8b8eb2461c6e4545061ee10aa94d3acffe4c325943878010bbbd3b2a579d191c07ddb44b17c36775cea3cd491638c229e13e2ce53575707581f3ff8b098254f59c818a3e7e91fdcd534b2e45a18a29d92eed9e48bfb5d7f21b81c3450f2c5cf78ca52b9ed3f2dc15ad20172a4b41931bcff0503e1c6fb1952e2b04422a6ccf23535e38430389600af8719f50797b43b79caf5c0107c50887a57768b849a67b4678efb922c50284962c60e66fb9c6e984362fc2eb29dccad4ff87d50d6b2ff424340de09c879710ef404347b1b93ce7d713ec9aa591b93b484755977eca89faf7e49d6719a61063570a94d0cf47db2867f6cb61de46829eaf2a7ad9397218ea0717e06d404ff56d987cf70cfd7e889a85c02681a1635245b9eea8dc62d3d494b490c1d3fd8720c65cead65a3cf6b773b5a7ae07846dee68418d1d2480502e9427bde12f517c41c38ebbb05bb7af8323a1484b52fddc475e88c8bdb9d4c68d282b29d632a61db04cdf813173a36cc31e9c997637e9d2f894823e8fe7ceb75d38c1ada57cac713e8dd388bd9bcc8edc04d8039ff4d4c5a2edb716bea2295ae20f8af3a100daade01a66594209088616d7f99648874bc8798dfdaac40d6a1e8eacabedd05870e7f72d87a641bcf8ad511203700976ef2fb9f17c101ef35786908842e9de93aaa3004fc4fb83a28b866528b9e1da81ab2f7d43c0304f23c98bf47b2a233cc0ce5d9ef145e3dc4c37ec08e00f8d933a6cd55fc6e9029f0fe1688f106e365ab1b1d2b80380eecc938af8f5507cf89810c623292a3b37f48dd4513a0dd1efda45783b8a264367efa7fc5c8b0d523c6b45101dcb42d0b0e954a9f196a1af2ffb926e6b218c64a7aac86321005d27775c2f762d9ec1079cbd5ccb4185e025794dc14eac396d62260bd9fd067a871affd98bb122e1b30ec78848a54ee2d1a1598ddd7366c3704103440343b383bb3e7792e9bf8f85d335e81d881834e30e639ec1e75a3da58f3a1dc1ee58abb2a97c9c3e0e74df988c5bb2aa84e7657c746562a94d7a7990c3e9edb06e6dd3ca4724f245df9b70ac88f53b633ceb3101aca1a89bfd47adb3146f2117bfdd907578b159e627e9ab2872f1ccb9e9b766e12d151d6d2fc204e64e072d4950c91d5067245bd0ff426a0d014ad6864a5d14f2ed341a5fb1b7d7878034d007c3d4b07aa2049c50b88cfbd93a50be41291a1546932432aaac94068a63bec8bce6d2328c1b61d6b19cf6c1b1da7a0d840d9b38b5b5eee94a5ab796f4faacddf7fa5282b43b87d480d22f3d157afb804b8c292b9aa144fb2e2a08f2e5706fbe2240f82972831aedac8bb9bac44c39febc19c9d1dcafe514aa380670dc6455675cc0f4db527fa7d9d6abb953d128cdca048fa6b6e473572218ea80b36c6c15194e7612c469557804567d131c6648d9a790d9c84fe2543bc5f2208d7c8a13e137446bc30208fb42ea30e7c6c03bb0bf332e82dd6b3c206581b1560fe0d8af193289b1970978e49e1e935d5f7bf5625f2520a0d659a6935002ef7ba343bad1fcce7811d0c33daccf0f9c0ae1341a48b084f3d14fc82ba4c5405c1e162aec1f1d2c0a781523f55620b86d1782f3cd74665dd89d4f6143fb51bb87626faec431c947a00f05918932ad86f9117de0c12f31a06acc4b8d90852a621af80eba6359e1eb2748e8b539ecdeb0403f47d434b5205813cc318ecb21b316801bf7da4729f3e3c6203aca2f032742432166a532e40113c327027abb78f9f59b2458f2c0334ed9a30196203eff7330adca0d62667b349e62f3c5f5960aae06e2cae3d68da84b1eaad38c4c0b21cccdafb2b01350c0fbfebf5d9fa7106b9903d28b246b5076cd8122872e9015b9bda3902635a86d3461c3b77116137dde46476b0ed6f03edf500f948e74a1a1cb8596e28aeb50cbaf0d5f0b6442d26fde556b0de3b894498a69c843d061c440ddfeab6745ca3e9dddecd616c2dff7500a738ee82f1b6842d4a1afaea1bb9fc8675622bbc9cd7cb00f084f91fe23f87fbe4d0c38b0e80460f6ff39643f7cc53094227a1ba6f3e7f4b3182214425d2f485e1f895cd545d237f37edc3fe6febda92df765b276dca8b5c13677f06258f07f1ded729cfab75b9fdec2f80d16a9b6b5434c79c7ca626d6dbcb49965cc2d30c283fba15bb5bdf2d2d63956de5a1c3879b1f85b919b84a722c6a6083774a569fcf1357706b6238c77a52757bfb438f227b84570af8bdef6931d40d210c83e12036cdbd68e10d9a214824eaf3aca358068f6e39dc47f2a3d381787e0e85dde57f6dc9178b670077663ade751cbce664acdb2c98552d3a4f34508be984a213c9ee5a65fb0027626a3edb6107588adcb58dbee2907eb48aa11cba1f9c25085fb6233196a459e5e0d884eacdd806062c260a44ecde91719e5034c117af30ab307a86af6d47e9931d1e00711df239b2965528668168ca0dec912469d51567a8e4841b8fbe97fc72225a0da7e09d687f6f3e2222ca4e68319db798bd17e2dc459a3393cdfa56772d585c5c74fa7dce14e81661da1333ce0a289f2a8f22e4d230fe8e8592dc778768976cbd016a96d29723ed56d233379986d5b557078b8ea7ec22ef46a20ade094077e9e2ae1f6e3d3a7e97c12769d89a09b72401d4820b0a300bfcc8b17fcc567a755b8e5843532b475a9e978c3aa402a668357365eaba7ae6b7677b667b59b10773ef4691289e02078b15157a24aefd6381e93d84f7ac8e79ec1493722369516c138e8f01bb18d50c4269d2db8af4cd089aed8385b0ce8e4a235323ff9badacdcfae2e8eb6d9bec36c78488568a23cc4636f6fbef3e8f6e57b21b65dfaf7febbbc470be7e74dfff8362e11a90f1ea448949fd6afe2ce9bd5aaee72a06f39dc976c1e3b6f8b0be36c411fd4cd5f5ac10e65bd7979e072bb1e3e7dc9c53c2a90112674c1e526cf6d3321cd921551927aef52322b8d068e9acf8262bef25a95cf7450c8fb333271c6002779e338b79975abf775eb5bde7a5cb001d7acff0d18f83e5d8e4416579fff0bc038397d83728d61ec4f787e8c8d6ca65adea6dbad3ab0f74df3fafd5eb66b5be75d9d2ffbd76427ee6dd112aae59aa95f8bb5be3379d8ffafdb331526ffb5921c1f2a3f1bc0fa1440ff710077fc99eb2e1c1c7abe3066bcd70012851fadd7b74bed03e4097e0cae72c2f3374c4f23dfff0a5eeee518a4b2ea065c26cf6870a3b1d3fca58601e34766cd12ade0aa9d84f498612a1355bc03561ced828c632efd970b92c16d5950f67c706a4de97e169773e989caa2ddf3f2df46c48b59030ee584910332dbc9cb6eda38ba5f377c49fc7b63868dfed0599c15f20caa96dd1590c26485eb974018e94fc953cdb25f361fa461b5c3de1e0b4b30bc3c3b02ba5caa3168f54d3349f89ac84f363745a4c20ff4a8916644fce816d7b7208f28f9b6dfe52f4bc90f26d31e53a26373b648342d8adcc8bddddc6c6ca68d97b3088db94192db9d2b5bbc197472eff87c36d7a2b552e8aa413be028a26af9e4f635aab10f951894e024ff5bcc3f2f377031c75c422dc2a46b9aa58f84ed662c06c12d709c9151610138d4efdcd17edfaba1974f0f64fa0a1fdb1c17a57f4fbe2e5e6efa62ab91c619da602546b22e55498f7548d133c94a8c7b48261fa4abfe2126a841820fbb6ef26cdea257614f05b7734fe889063aeffe29da8587b6e620a2ad3774802a8c0c96aba218ee3beba1ef7831b2bf7f3504f52473d885078b38dfd895cb773e782f141e9f2c7108aa351cadbed99b28fb2d3277c35b1f0f8a355c06b3d7e4dc86bde2f8beeb3b480244261dc2c83841a322a55fdf9b23e64ed696e57c485ca66e147f57528863e191e8762e653dba193edbab4453fb7702b706501b35e362ee8b652db4c94214f2e3777083a2500bed3bf4411ad5f7a9bf3a2c95279d2343a0caf29f43fecc7df2bf78d7eb5bd6cf27460f947a11d49fb7059305ab562a6c2e8f3a26e0d63058a4f14f362bf75a297ec80b854a401dfd46c4b474f7662d93bf36ae530b88f798e297e24a704a87418c6eaa530b10918d5ebe75d420e4f39a5c03df75ff0c21eb54c893004c4abc68198bb720eb68a56f0b296e2e53a62f49ca12f6724e746a54f572d8225dee2d3f60c742d1f212910cb8cd358e20bba45d2c2c2d09fb43313657caea6dd94faf53486314bcb3525b012d55acdb0433538b9dc68eb9e678c8eaec3a1b89f61c9bedbe5c32f29d629db8201ecdeb308a0f6f220f8b0ef53deec4c739ee4bf5de44d70b80f1aa2a9de019cc12729f693a82363b39040368eef44a4b23aee2dd5bcbad1f6888d07caf6b720a89728165a49d68abc4726b519386478eb081cadd4d0c7d55d9d0760609789a5188e785e0dc07ef4112a83085a50d5d2c7d35e63b53a95a5663a248f89a0ce4ff0f9ea377e1e61992ee6fe328faec620b3d6a166c70f358946723ba9117b1a13a13f7f26f47ac67fadfa5918011ae589e6073fda49b786313159e71bb75940e00f394ffca9e703dfbcfbaaeaf9569f35bbd84a9de0845ab971b2a56e381cae71d776c97a44dd0dae055f9c05ecb4196eccf45240db6f3d2c1a1bbb32dbffdd075251af31ec293da65ed715091cad4a662563b7ba90a26376a504103d1505cfd4efc95f4ffcdc3215dc963ea6915d8291c113890623273c3d95ddf63e20311db9822ba945f26b8711b34e7df2304134c04"}], 0x1270}, 0x40008c1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x200200}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x14, r4, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x810) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)=@deltclass={0x5c, 0x29, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xce25f6287730331b}, {0xfffb, 0xfff1}, {0x5, 0xffff}}, [@tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x6, 0x1}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @tclass_kind_options=@c_cake={0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) recvmmsg(r0, &(0x7f0000003500)=[{{&(0x7f0000001b80)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000001c00)=""/101, 0x65}, {&(0x7f0000001c80)=""/4096, 0x1000}], 0x2}, 0x401}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002cc0)=""/57, 0x39}, {&(0x7f0000002d00)=""/250, 0xfa}, {&(0x7f0000002e00)=""/240, 0xf0}, {&(0x7f0000002f00)=""/241, 0xf1}, {&(0x7f0000003000)=""/12, 0xc}, {&(0x7f0000003040)=""/173, 0xad}, {&(0x7f0000003100)=""/148, 0x94}], 0x7, &(0x7f0000003240)=""/136, 0x88}, 0xfffffffe}, {{&(0x7f0000003300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000003380)}, 0xa2}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f00000033c0)=""/183, 0xb7}], 0x1, &(0x7f00000034c0)=""/9, 0x9}, 0x63d2b77}], 0x4, 0x2043, &(0x7f0000003600)={0x77359400}) (async) r8 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000003a80)={&(0x7f0000003640)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000003900)=[{&(0x7f00000036c0)=""/9, 0x9}, {&(0x7f0000003700)=""/35, 0x23}, {&(0x7f0000003740)=""/166, 0xa6}, {&(0x7f0000003800)=""/167, 0xa7}, {&(0x7f00000038c0)}], 0x5, &(0x7f0000003980)=""/201, 0xc9}, 0x40010142) (async) sendmsg$kcm(r2, &(0x7f0000003c80)={&(0x7f0000003ac0)=@xdp={0x2c, 0x0, r6, 0xe}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003b40)="0fbc148900627e32e3e27e5b03d6c4eefaf3b6887fb1461b4585d97b642430a8ca7243d57a643f9eb84f1667208aa54d883a522e7dd2073667b64fab5fcf58e0e0c24067f585dee5ce47fb4a7ffcb680cb95176e41810d921bc1c3d55fbdaada9a1870c128eb998d3c84a8fe3d1688b7e1ee8d555de14388cd20880442bd54876ae113741ded023d86dd2b74da8cd7e4385ae6e5e3e7929b3d68e4ac939486aebd70555652d09e2150275d053a866dce8603963fcb156e037d49594f0ccc49315495f2a3100797d6c1e5b26a38327bca", 0xd0}], 0x1}, 0x24048054) (async) vmsplice(r8, &(0x7f0000003d00)=[{&(0x7f0000003cc0)="94c803db9dce94061da875ffb852422b309c55a5eeb27073fdee98", 0x1b}], 0x1, 0x2) (async) write$tun(r1, &(0x7f0000003d40)={@void, @val={0x0, 0x0, 0x4, 0xe0, 0x40, 0x7}, @eth={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x7}, {0x8100, 0x0, 0x1}}, {@llc_tr={0x11, {@snap={0x55, 0xaa, "f9", "f63669", 0x6003, "4d2be4ca427548b242a5c87e6b22f7d2ee1a8fda903f3ecb65945cc8a1eb1776df9e732a199cba927edac2c9cf693b4e2b33e1c252489ae4eadab24fbd3e277aa523fa67e9d36244f88def413a24c6f9c1cf593145f6794fb57792fed60847f16095d00084adb196017ebdde9f70fcd37a919cccf158edd2f9326500cfa013200469038e56e22fa86848843919e3af6a9aeed7a0ee61d88e37e3e7fa09d3d93fc5de58474314e61bbc32cdce6aa64bcf14ca6de56461660e5d7ef335067ee323c7de5fcc27902a1f"}}}}}}, 0xf0) sendmsg$nl_route_sched(r5, &(0x7f0000003fc0)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003f80)={&(0x7f0000003e80)=@deltaction={0x100, 0x31, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x48e}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async, rerun: 64) connect$802154_dgram(r7, &(0x7f0000004000)={0x24, @none={0x0, 0xffff}}, 0x14) (rerun: 64) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000004080), r3) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000004140)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004100)={&(0x7f00000040c0)={0x1c, r9, 0x8, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async, rerun: 64) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f00000041c0), r3) (rerun: 64) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000042c0)={&(0x7f0000004180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004280)={&(0x7f0000004200)={0x50, r10, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xe}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x10) (async) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000004300)={r7}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r11, 0x84, 0x13, &(0x7f0000004340)=0x9, 0x4) (async) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000004380), 0xc, &(0x7f0000004400)={&(0x7f00000043c0)={0x20, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x400c040) (async) ioctl$sock_inet_SIOCGIFADDR(r7, 0x8915, &(0x7f0000004480)={'ip6gre0\x00', {0x2, 0x0, @remote}}) bind$inet(r11, &(0x7f00000044c0)={0x2, 0x4e21, @private=0xa010100}, 0x10) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={&(0x7f0000004580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@struct={0x5, 0x4, 0x0, 0x4, 0x0, 0x0, [{0x8, 0x5, 0x3}, {0xd, 0x4, 0x9}, {0xc, 0x4, 0x6}, {0x2, 0x3, 0x10}]}]}, {0x0, [0x51, 0x2e, 0x2e, 0x30]}}, &(0x7f0000004600)=""/121, 0x5a, 0x79, 0x1, 0xfff}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000004500)=@base={0x20, 0x7, 0x0, 0x7, 0x28080, r5, 0x222, '\x00', r6, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x0, @value=r12}, 0x50) 496.675292ms ago: executing program 3 (id=4046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) ioctl$TUNSETLINK(r1, 0x400454cd, 0x207) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000500900010073797a30000000000800034000000005"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r4, 0x10e, 0x3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e00440002800600020001000000080001000100000008000300", @ANYRES32], 0x84}}, 0x20008040) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 440.020143ms ago: executing program 1 (id=4047): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6000000, 0x2, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x3, 0x1, 0x0, {0x0, 0x0, 0x8, 0x401}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) 325.840489ms ago: executing program 1 (id=4048): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x4c804) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000210000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00'], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 303.982174ms ago: executing program 8 (id=4049): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700020185000000a000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 238.160599ms ago: executing program 2 (id=4050): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1e}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x20, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 149.81405ms ago: executing program 2 (id=4051): unshare(0x22020600) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x569) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000a000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 144.241792ms ago: executing program 8 (id=4052): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1], 0xe4}}, 0x0) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') (async) unshare(0x6a040000) (async) r3 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x6180, 0x0) (async, rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='>', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES16=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES64=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000402000000", @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32, @ANYRES32=r2], 0xa0}, 0x4004881) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/user\x00') (async, rerun: 64) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) (async, rerun: 64) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="3164d60b78f90a6b5e63b62a91b678e528827af13204f56d481d01e0"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x57, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r5, 0x27, 0xe, 0x0, &(0x7f0000000080)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x1e) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000680)={0x0, 0xfffffe1b, "99738ee37336bf3ad7e834435feef3a67ebc8b91c6ff8e85ae5c910d22456ed001400051b07ebc29fb52ba3e5589fadf37ac168f8d56b0fe4f0353875e83699b9780f20e762a9e61b35aa7d9e7d84ece4e7689af0125f12e67455075e841275aad4147a9121ea719331e9b20c198e02871a4fb7f0800b45f2d3ffa7c462c1425436938c1162b3c355e518e981f5c3bd3c769391277e5feeea34250"}, &(0x7f0000000000)=0x8) (async) socket$kcm(0x10, 0x2, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES16, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r7, 0x0, 0x80040c0) (async, rerun: 64) syz_emit_ethernet(0x56, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="13000000100000000800"/20, @ANYRESOCT, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000080c8df300000000000000000000000000000000000008494ae59"], 0x50) (async) socket$inet(0x2, 0x1, 0x10) (async) r9 = socket$netlink(0x10, 0x3, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r8], 0x60}}, 0x0) (async, rerun: 32) socket(0x28, 0x5, 0x0) (rerun: 32) 0s ago: executing program 3 (id=4053): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x100000000b) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x0, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) unshare(0x22020600) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40003, 0x0) vmsplice(r5, 0x0, 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000130008002abd7000ffdbdf252606008e4e204e240300000007000000000000c048ea00009ccfffff03000000ffffff7f00010000", @ANYRES32, @ANYBLOB="052a670006000000010000000100000004000100"], 0x50}, 0x1, 0x0, 0x0, 0x24008880}, 0x800) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000020605000000000000000000000000050500010007000000090000050004000000000013000300686173683a6e65742c69666163650000"], 0x44}}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r7, &(0x7f0000000380)={{0x3, @null, 0x1}, [@null={0x40, 0x40, 0x40, 0x40, 0x40, 0x40, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007b243ce4b3daa7804f"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$alg(0x26, 0x5, 0x0) accept4(r9, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r8}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): TASK> [ 429.797323][T15601] dump_stack_lvl+0x189/0x250 [ 429.797349][T15601] ? __pfx____ratelimit+0x10/0x10 [ 429.797370][T15601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.797390][T15601] ? __pfx__printk+0x10/0x10 [ 429.797410][T15601] ? __kasan_kmalloc+0x93/0xb0 [ 429.797442][T15601] ? __lock_acquire+0xab9/0xd20 [ 429.797464][T15601] should_fail_ex+0x414/0x560 [ 429.797489][T15601] should_failslab+0xa8/0x100 [ 429.797517][T15601] __kmalloc_noprof+0xcb/0x4f0 [ 429.797539][T15601] ? flow_action_cookie_create+0x26/0x90 [ 429.797572][T15601] flow_action_cookie_create+0x26/0x90 [ 429.797596][T15601] ? tc_setup_action+0x1b6/0xad0 [ 429.797616][T15601] tc_setup_action+0x32b/0xad0 [ 429.797652][T15601] ? __local_bh_enable_ip+0x12d/0x1c0 [ 429.797672][T15601] ? __pfx_tc_setup_action+0x10/0x10 [ 429.797703][T15601] tcf_action_offload_add_ex+0x580/0x870 [ 429.797734][T15601] ? __pfx_tcf_action_offload_add_ex+0x10/0x10 [ 429.797789][T15601] ? tcf_action_fill_size+0x1c/0x2e0 [ 429.797816][T15601] ? tcf_action_fill_size+0x1c/0x2e0 [ 429.797844][T15601] tcf_action_init+0x341/0xab0 [ 429.797877][T15601] ? __pfx_tcf_action_init+0x10/0x10 [ 429.797933][T15601] ? __pfx___nla_validate_parse+0x10/0x10 [ 429.798001][T15601] tc_ctl_action+0x430/0xbd0 [ 429.798037][T15601] ? __pfx_tc_ctl_action+0x10/0x10 [ 429.798058][T15601] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 429.798085][T15601] ? rcu_is_watching+0x15/0xb0 [ 429.798153][T15601] ? __pfx_tc_ctl_action+0x10/0x10 [ 429.798176][T15601] rtnetlink_rcv_msg+0x779/0xb70 [ 429.798199][T15601] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 429.798217][T15601] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 429.798233][T15601] ? ref_tracker_free+0x63a/0x7d0 [ 429.798254][T15601] ? __asan_memcpy+0x40/0x70 [ 429.798274][T15601] ? __pfx_ref_tracker_free+0x10/0x10 [ 429.798305][T15601] netlink_rcv_skb+0x205/0x470 [ 429.798326][T15601] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 429.798347][T15601] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.798379][T15601] ? netlink_deliver_tap+0x2e/0x1b0 [ 429.798407][T15601] netlink_unicast+0x82f/0x9e0 [ 429.798442][T15601] ? __pfx_netlink_unicast+0x10/0x10 [ 429.798469][T15601] ? netlink_sendmsg+0x642/0xb30 [ 429.798486][T15601] ? skb_put+0x11b/0x210 [ 429.798510][T15601] netlink_sendmsg+0x805/0xb30 [ 429.798540][T15601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.798563][T15601] ? aa_sock_msg_perm+0x94/0x160 [ 429.798584][T15601] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 429.798602][T15601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.798622][T15601] __sock_sendmsg+0x21c/0x270 [ 429.798651][T15601] ____sys_sendmsg+0x505/0x830 [ 429.798679][T15601] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.798710][T15601] ? import_iovec+0x74/0xa0 [ 429.798737][T15601] ___sys_sendmsg+0x21f/0x2a0 [ 429.798762][T15601] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.798822][T15601] ? __fget_files+0x2a/0x420 [ 429.798838][T15601] ? __fget_files+0x3a0/0x420 [ 429.798865][T15601] __x64_sys_sendmsg+0x19b/0x260 [ 429.798890][T15601] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 429.798922][T15601] ? __pfx_ksys_write+0x10/0x10 [ 429.798941][T15601] ? rcu_is_watching+0x15/0xb0 [ 429.798967][T15601] ? do_syscall_64+0xbe/0x3b0 [ 429.799014][T15601] do_syscall_64+0xfa/0x3b0 [ 429.799033][T15601] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.799051][T15601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.799069][T15601] ? clear_bhb_loop+0x60/0xb0 [ 429.799090][T15601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.799107][T15601] RIP: 0033:0x7fb10038e9a9 [ 429.799124][T15601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.799139][T15601] RSP: 002b:00007fb101229038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.799160][T15601] RAX: ffffffffffffffda RBX: 00007fb1005b5fa0 RCX: 00007fb10038e9a9 [ 429.799175][T15601] RDX: 0000000002000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 429.799188][T15601] RBP: 00007fb101229090 R08: 0000000000000000 R09: 0000000000000000 [ 429.799200][T15601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 429.799211][T15601] R13: 0000000000000000 R14: 00007fb1005b5fa0 R15: 00007ffc5d10f468 [ 429.799240][T15601] [ 430.428083][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3146'. [ 430.437271][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3146'. [ 430.502100][T15615] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3149'. [ 430.512681][T15615] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3149'. [ 430.525086][T15615] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3149'. [ 430.527043][T15618] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3148'. [ 430.534054][T15615] netlink: 13 bytes leftover after parsing attributes in process `syz.8.3149'. [ 430.640503][T15618] bond1: entered promiscuous mode [ 430.649435][T15618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 430.878672][T15618] bond1 (unregistering): Released all slaves [ 430.919269][T15632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.971415][T15632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.006546][T15632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.047625][T15632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.852724][T15659] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3162'. [ 431.921132][T15659] bridge_slave_1: left allmulticast mode [ 431.949274][T15659] bridge_slave_1: left promiscuous mode [ 431.955868][T15659] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.969402][T15659] bridge_slave_0: left allmulticast mode [ 432.006257][T15659] bridge_slave_0: left promiscuous mode [ 432.015269][T15667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3165'. [ 432.024581][T15659] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.203349][T15665] bond_slave_0: entered promiscuous mode [ 432.209117][T15665] bond_slave_1: entered promiscuous mode [ 432.218228][T15665] bond_slave_0: left promiscuous mode [ 432.223711][T15665] bond_slave_1: left promiscuous mode [ 432.372683][T15672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3167'. [ 432.432721][T15672] bond1: entered promiscuous mode [ 432.450684][T15672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 432.734099][T15672] bond1 (unregistering): Released all slaves [ 433.740863][T15705] tipc: Enabling of bearer rejected, failed to enable media [ 434.398215][T15730] tipc: Enabling of bearer rejected, failed to enable media [ 434.622086][T15746] tipc: Started in network mode [ 434.643796][T15746] tipc: Node identity a26d811fb39e, cluster identity 4711 [ 434.653849][T15746] tipc: Enabled bearer , priority 0 [ 434.673763][T15746] syzkaller0: entered promiscuous mode [ 434.679949][T15746] syzkaller0: entered allmulticast mode [ 434.800416][T15751] xt_nfacct: accounting object `syz1' does not exists [ 434.832849][T15746] tipc: Resetting bearer [ 434.888043][T15745] tipc: Resetting bearer [ 434.935335][T15745] tipc: Disabling bearer [ 435.061507][T15766] FAULT_INJECTION: forcing a failure. [ 435.061507][T15766] name failslab, interval 1, probability 0, space 0, times 0 [ 435.074915][T15766] CPU: 0 UID: 0 PID: 15766 Comm: syz.2.3199 Not tainted 6.16.0-rc7-syzkaller-01904-g9312ee76490d #0 PREEMPT(full) [ 435.074941][T15766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 435.074951][T15766] Call Trace: [ 435.074958][T15766] [ 435.074965][T15766] dump_stack_lvl+0x189/0x250 [ 435.074990][T15766] ? __pfx____ratelimit+0x10/0x10 [ 435.075011][T15766] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.075032][T15766] ? __pfx__printk+0x10/0x10 [ 435.075059][T15766] ? __pfx___might_resched+0x10/0x10 [ 435.075078][T15766] ? fs_reclaim_acquire+0x7d/0x100 [ 435.075101][T15766] should_fail_ex+0x414/0x560 [ 435.075127][T15766] should_failslab+0xa8/0x100 [ 435.075154][T15766] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 435.075178][T15766] ? __alloc_skb+0x112/0x2d0 [ 435.075204][T15766] __alloc_skb+0x112/0x2d0 [ 435.075229][T15766] netlink_ack+0x146/0xa50 [ 435.075246][T15766] ? __pfx_genl_rcv_msg+0x10/0x10 [ 435.075288][T15766] netlink_rcv_skb+0x28c/0x470 [ 435.075305][T15766] ? __lock_acquire+0xab9/0xd20 [ 435.075325][T15766] ? __pfx_genl_rcv_msg+0x10/0x10 [ 435.075349][T15766] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 435.075390][T15766] ? down_read+0x1ad/0x2e0 [ 435.075414][T15766] genl_rcv+0x28/0x40 [ 435.075435][T15766] netlink_unicast+0x82f/0x9e0 [ 435.075471][T15766] ? __pfx_netlink_unicast+0x10/0x10 [ 435.075499][T15766] ? netlink_sendmsg+0x642/0xb30 [ 435.075516][T15766] ? skb_put+0x11b/0x210 [ 435.075540][T15766] netlink_sendmsg+0x805/0xb30 [ 435.075569][T15766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.075593][T15766] ? aa_sock_msg_perm+0x94/0x160 [ 435.075616][T15766] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 435.075635][T15766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.075654][T15766] __sock_sendmsg+0x21c/0x270 [ 435.075684][T15766] ____sys_sendmsg+0x505/0x830 [ 435.075713][T15766] ? __pfx_____sys_sendmsg+0x10/0x10 [ 435.075745][T15766] ? import_iovec+0x74/0xa0 [ 435.075774][T15766] ___sys_sendmsg+0x21f/0x2a0 [ 435.075799][T15766] ? __pfx____sys_sendmsg+0x10/0x10 [ 435.075868][T15766] ? __fget_files+0x2a/0x420 [ 435.075884][T15766] ? __fget_files+0x3a0/0x420 [ 435.075913][T15766] __x64_sys_sendmsg+0x19b/0x260 [ 435.075938][T15766] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 435.075971][T15766] ? __pfx_ksys_write+0x10/0x10 [ 435.075991][T15766] ? rcu_is_watching+0x15/0xb0 [ 435.076018][T15766] ? do_syscall_64+0xbe/0x3b0 [ 435.076043][T15766] do_syscall_64+0xfa/0x3b0 [ 435.076062][T15766] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.076081][T15766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.076099][T15766] ? clear_bhb_loop+0x60/0xb0 [ 435.076121][T15766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.076139][T15766] RIP: 0033:0x7fb10038e9a9 [ 435.076155][T15766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.076171][T15766] RSP: 002b:00007fb101229038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.076191][T15766] RAX: ffffffffffffffda RBX: 00007fb1005b5fa0 RCX: 00007fb10038e9a9 [ 435.076205][T15766] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 435.076217][T15766] RBP: 00007fb101229090 R08: 0000000000000000 R09: 0000000000000000 [ 435.076230][T15766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.076240][T15766] R13: 0000000000000000 R14: 00007fb1005b5fa0 R15: 00007ffc5d10f468 [ 435.076272][T15766] [ 435.952239][T15771] net_ratelimit: 162 callbacks suppressed [ 435.952260][T15771] netlink: zone id is out of range [ 435.964372][T15771] netlink: zone id is out of range [ 435.969552][T15771] netlink: zone id is out of range [ 435.977118][T15771] netlink: zone id is out of range [ 435.982343][T15771] netlink: zone id is out of range [ 435.989059][T15771] netlink: zone id is out of range [ 435.994191][T15771] netlink: zone id is out of range [ 436.014389][T15771] netlink: zone id is out of range [ 436.035304][T15771] netlink: zone id is out of range [ 436.040476][T15771] netlink: zone id is out of range [ 436.066998][T15771] netlink: 'syz.6.3201': attribute type 13 has an invalid length. [ 436.196998][T15775] team_slave_0: entered promiscuous mode [ 436.202722][T15775] team_slave_1: entered promiscuous mode [ 436.231971][T15775] vlan2: entered promiscuous mode [ 436.238328][T15775] team0: entered promiscuous mode [ 436.556786][T15787] __nla_validate_parse: 5 callbacks suppressed [ 436.556805][T15787] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3208'. [ 436.622086][T15787] bond1: entered promiscuous mode [ 436.645730][T15787] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.740979][T15798] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3210'. [ 436.885495][T15787] bond1 (unregistering): Released all slaves [ 437.109840][T15809] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3212'. [ 437.166698][T15811] ipvlan2: entered promiscuous mode [ 437.172084][T15811] ipvlan2: entered allmulticast mode [ 437.178388][T15811] batadv0: entered allmulticast mode [ 437.187198][T15811] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 437.530491][T15826] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3221'. [ 437.572570][T15828] bond_slave_0: entered promiscuous mode [ 437.578375][T15828] bond_slave_1: entered promiscuous mode [ 437.591938][T15828] vlan2: entered promiscuous mode [ 437.599695][T15828] bond0: entered promiscuous mode [ 437.658922][T15830] Bluetooth: MGMT ver 1.23 [ 437.751562][T15832] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3225'. [ 437.790492][T15832] bond1: entered promiscuous mode [ 437.796900][T15832] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.979529][T15832] bond1 (unregistering): Released all slaves [ 438.001478][T15839] siw: device registration error -23 [ 438.010287][T15839] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3228'. [ 438.247962][T15846] netlink: 'syz.6.3232': attribute type 4 has an invalid length. [ 438.466851][T15851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3231'. [ 438.964167][T15857] Bluetooth: MGMT ver 1.23 [ 439.090971][ T50] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 439.101720][ T50] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 439.110979][ T50] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 439.122057][ T50] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 439.134523][ T50] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 439.186077][T15863] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3236'. [ 439.265502][T15869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3238'. [ 439.274592][T15869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3238'. [ 439.384205][T15871] x_tables: ip_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 439.901045][T15864] chnl_net:caif_netlink_parms(): no params data found [ 440.029151][T15864] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.037378][T15864] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.045368][T15864] bridge_slave_0: entered allmulticast mode [ 440.053566][T15864] bridge_slave_0: entered promiscuous mode [ 440.064008][T15864] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.074230][T15864] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.082437][T15864] bridge_slave_1: entered allmulticast mode [ 440.090713][T15864] bridge_slave_1: entered promiscuous mode [ 440.150710][T15864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.170796][T15864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.243856][T15864] team0: Port device team_slave_0 added [ 440.252742][T15864] team0: Port device team_slave_1 added [ 440.295489][T15864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.302458][T15864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.329330][T15864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.353331][T15864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.371002][T15864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.400196][T15864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.549391][T15864] hsr_slave_0: entered promiscuous mode [ 440.561207][T15864] hsr_slave_1: entered promiscuous mode [ 440.582676][T15864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.599486][T15864] Cannot create hsr debugfs directory [ 440.608632][T15907] veth1_to_team: entered allmulticast mode [ 441.047253][T15864] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 441.109742][T15864] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 441.152592][T15864] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 441.169008][T15864] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 441.195929][ T5855] Bluetooth: hci9: command tx timeout [ 441.577332][T15864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.612690][T15864] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.634119][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.641345][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.660925][ T7400] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.668116][ T7400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.000062][T15864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.252242][T15864] veth0_vlan: entered promiscuous mode [ 442.272735][T15864] veth1_vlan: entered promiscuous mode [ 442.307189][T15864] veth0_macvtap: entered promiscuous mode [ 442.321952][T15864] veth1_macvtap: entered promiscuous mode [ 442.343965][T15864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.361053][T15864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.382889][ T7405] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.403942][ T7405] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.413544][ T7405] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.434045][ T7405] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.503152][ T7402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.519948][ T7402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.552438][ T7392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.564681][ T7392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.700948][T15952] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 442.963328][T15960] __nla_validate_parse: 5 callbacks suppressed [ 442.963347][T15960] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3263'. [ 443.059780][T15960] bond1: entered promiscuous mode [ 443.066239][T15960] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.133828][ T50] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 443.158102][ T50] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 443.183296][ T50] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 443.231494][ T50] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 443.249860][ T50] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 443.266893][ T50] Bluetooth: hci9: command tx timeout [ 443.364119][T15960] bond1 (unregistering): Released all slaves [ 443.741736][T15982] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3268'. [ 444.003141][T15990] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3269'. [ 444.189767][T15996] FAULT_INJECTION: forcing a failure. [ 444.189767][T15996] name failslab, interval 1, probability 0, space 0, times 0 [ 444.203085][T15996] CPU: 1 UID: 0 PID: 15996 Comm: syz.6.3270 Not tainted 6.16.0-rc7-syzkaller-01904-g9312ee76490d #0 PREEMPT(full) [ 444.203118][T15996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 444.203130][T15996] Call Trace: [ 444.203138][T15996] [ 444.203146][T15996] dump_stack_lvl+0x189/0x250 [ 444.203172][T15996] ? __pfx____ratelimit+0x10/0x10 [ 444.203193][T15996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.203213][T15996] ? __pfx__printk+0x10/0x10 [ 444.203237][T15996] ? __pfx___might_resched+0x10/0x10 [ 444.203258][T15996] ? fs_reclaim_acquire+0x7d/0x100 [ 444.203279][T15996] should_fail_ex+0x414/0x560 [ 444.203302][T15996] should_failslab+0xa8/0x100 [ 444.203330][T15996] __kmalloc_node_noprof+0xd1/0x4e0 [ 444.203352][T15996] ? __pfx___up_read+0x10/0x10 [ 444.203373][T15996] ? crypto_create_tfm_node+0x83/0x3f0 [ 444.203403][T15996] crypto_create_tfm_node+0x83/0x3f0 [ 444.203433][T15996] crypto_spawn_tfm2+0x5c/0x90 [ 444.203454][T15996] crypto_authenc_init_tfm+0x47/0x1c0 [ 444.203484][T15996] crypto_create_tfm_node+0x189/0x3f0 [ 444.203514][T15996] crypto_spawn_tfm2+0x5c/0x90 [ 444.203535][T15996] aead_init_geniv+0x169/0x240 [ 444.203563][T15996] crypto_create_tfm_node+0x189/0x3f0 [ 444.203593][T15996] crypto_alloc_tfm_node+0x172/0x3f0 [ 444.203628][T15996] esp_init_state+0x5b6/0x1140 [ 444.203651][T15996] ? pfkey_sendmsg+0xbfe/0x1090 [ 444.203668][T15996] ? __sock_sendmsg+0x21c/0x270 [ 444.203695][T15996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.203721][T15996] ? __pfx_esp_init_state+0x10/0x10 [ 444.203764][T15996] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 444.203799][T15996] ? __xfrm_init_state+0x7ef/0x13f0 [ 444.203824][T15996] __xfrm_init_state+0xa73/0x13f0 [ 444.203843][T15996] ? __xfrm_init_state+0x7ef/0x13f0 [ 444.203866][T15996] xfrm_init_state+0x18/0xa0 [ 444.203885][T15996] pfkey_add+0x1d38/0x2e00 [ 444.203925][T15996] ? __pfx_pfkey_add+0x10/0x10 [ 444.203941][T15996] ? kmem_cache_free+0x18f/0x400 [ 444.203979][T15996] pfkey_sendmsg+0xbfe/0x1090 [ 444.204015][T15996] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 444.204066][T15996] ? aa_sock_msg_perm+0x94/0x160 [ 444.204088][T15996] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 444.204107][T15996] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 444.204134][T15996] __sock_sendmsg+0x21c/0x270 [ 444.204162][T15996] ____sys_sendmsg+0x505/0x830 [ 444.204192][T15996] ? __pfx_____sys_sendmsg+0x10/0x10 [ 444.204225][T15996] ? import_iovec+0x74/0xa0 [ 444.204253][T15996] ___sys_sendmsg+0x21f/0x2a0 [ 444.204278][T15996] ? __pfx____sys_sendmsg+0x10/0x10 [ 444.204341][T15996] ? __fget_files+0x2a/0x420 [ 444.204357][T15996] ? __fget_files+0x3a0/0x420 [ 444.204385][T15996] __x64_sys_sendmsg+0x19b/0x260 [ 444.204411][T15996] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 444.204444][T15996] ? __pfx_ksys_write+0x10/0x10 [ 444.204465][T15996] ? rcu_is_watching+0x15/0xb0 [ 444.204491][T15996] ? do_syscall_64+0xbe/0x3b0 [ 444.204516][T15996] do_syscall_64+0xfa/0x3b0 [ 444.204535][T15996] ? lockdep_hardirqs_on+0x9c/0x150 [ 444.204554][T15996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.204572][T15996] ? clear_bhb_loop+0x60/0xb0 [ 444.204594][T15996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.204612][T15996] RIP: 0033:0x7f171938e9a9 [ 444.204628][T15996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.204641][T15996] RSP: 002b:00007f171a138038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.204660][T15996] RAX: ffffffffffffffda RBX: 00007f17195b5fa0 RCX: 00007f171938e9a9 [ 444.204673][T15996] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 444.204685][T15996] RBP: 00007f171a138090 R08: 0000000000000000 R09: 0000000000000000 [ 444.204696][T15996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 444.204706][T15996] R13: 0000000000000000 R14: 00007f17195b5fa0 R15: 00007ffebf98ab68 [ 444.204737][T15996] [ 444.593268][T15965] chnl_net:caif_netlink_parms(): no params data found [ 444.748252][T16003] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3272'. [ 444.854927][T15965] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.862108][T15965] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.896549][T15965] bridge_slave_0: entered allmulticast mode [ 444.913312][T15965] bridge_slave_0: entered promiscuous mode [ 444.922687][T15965] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.931531][T15965] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.939547][T15965] bridge_slave_1: entered allmulticast mode [ 444.956544][T15965] bridge_slave_1: entered promiscuous mode [ 445.081077][T16007] netlink: 'syz.6.3273': attribute type 303 has an invalid length. [ 445.082123][T15965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.119027][T15965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.193139][T15965] team0: Port device team_slave_0 added [ 445.202926][T15965] team0: Port device team_slave_1 added [ 445.286078][T15965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.294448][T15965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.333443][T15965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.348447][T15965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.353591][ T50] Bluetooth: hci10: command tx timeout [ 445.355986][ T5855] Bluetooth: hci9: command tx timeout [ 445.368593][T15965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.401302][T15965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.461998][T15965] hsr_slave_0: entered promiscuous mode [ 445.470030][T15965] hsr_slave_1: entered promiscuous mode [ 445.478772][T15965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 445.486804][T15965] Cannot create hsr debugfs directory [ 445.740365][T16022] bond_slave_0: entered promiscuous mode [ 445.746299][T16022] bond_slave_1: entered promiscuous mode [ 445.755927][T16022] vlan2: entered promiscuous mode [ 445.761246][T16022] bond0: entered promiscuous mode [ 445.955491][T15965] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.035957][T16026] netlink: 'syz.9.3278': attribute type 1 has an invalid length. [ 446.050886][T15965] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.147190][T15965] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.246823][T15965] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.252350][T16029] netlink: 'syz.6.3279': attribute type 1 has an invalid length. [ 446.278846][T16029] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3279'. [ 446.352831][T16031] ipvlan2: entered promiscuous mode [ 446.359765][T16031] ipvlan2: entered allmulticast mode [ 446.368101][T16031] batadv0: entered allmulticast mode [ 446.374541][T16031] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 446.393554][T16033] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 446.569152][T15965] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 446.588776][T15965] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 446.609787][T15965] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 446.648193][T15965] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 446.921286][T15965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.988428][T15965] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.043309][ T7396] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.050521][ T7396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.099806][ T7405] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.107007][ T7405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.107229][T16056] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3289'. [ 447.184575][T16056] bond1: entered promiscuous mode [ 447.193055][T16056] 8021q: adding VLAN 0 to HW filter on device bond1 [ 447.323301][T16056] bond1 (unregistering): Released all slaves [ 447.362520][T16061] ipvlan2: entered promiscuous mode [ 447.368217][T16061] ipvlan2: entered allmulticast mode [ 447.374464][T16061] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 447.426438][ T50] Bluetooth: hci10: command tx timeout [ 447.432041][ T5855] Bluetooth: hci9: command tx timeout [ 447.878419][T16074] bond_slave_0: entered promiscuous mode [ 447.884175][T16074] bond_slave_1: entered promiscuous mode [ 447.893196][T16074] vlan2: entered promiscuous mode [ 447.899170][T16074] bond0: entered promiscuous mode [ 447.971925][T15965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.152388][T15965] veth0_vlan: entered promiscuous mode [ 448.193830][T16080] netlink: 180 bytes leftover after parsing attributes in process `syz.6.3297'. [ 448.204550][T16080] netlink: 172 bytes leftover after parsing attributes in process `syz.6.3297'. [ 448.239188][T15965] veth1_vlan: entered promiscuous mode [ 448.318414][T15965] veth0_macvtap: entered promiscuous mode [ 448.347588][T15965] veth1_macvtap: entered promiscuous mode [ 448.380413][T15965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.397251][T15965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.474211][ T1164] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.497967][T16083] netlink: 'syz.6.3298': attribute type 1 has an invalid length. [ 448.506308][ T1164] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.561911][T16088] netlink: 'syz.9.3300': attribute type 1 has an invalid length. [ 448.571745][ T1164] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.582032][ T1164] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.619903][T16083] bond1: (slave geneve2): making interface the new active one [ 448.629355][T16083] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 448.674307][ T1164] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 448.712845][T16083] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 448.740449][ T1164] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 448.756514][ T1164] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 448.811205][ T1164] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 448.849653][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.875780][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.973799][ T7401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.001754][ T7401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.260375][T16099] bond_slave_0: entered promiscuous mode [ 449.266228][T16099] bond_slave_1: entered promiscuous mode [ 449.275445][T16099] vlan2: entered promiscuous mode [ 449.280716][T16099] bond0: entered promiscuous mode [ 449.506507][ T5855] Bluetooth: hci10: command tx timeout [ 449.614422][T16108] team_slave_0: entered promiscuous mode [ 449.620222][T16108] team_slave_1: entered promiscuous mode [ 449.622113][T16112] netlink: 'syz.3.3308': attribute type 4 has an invalid length. [ 449.640985][T16108] vlan2: entered promiscuous mode [ 449.646240][T16108] team0: entered promiscuous mode [ 450.273203][T16137] Cannot find del_set index 0 as target [ 450.493406][T16139] netlink: 9280 bytes leftover after parsing attributes in process `syz.9.3317'. [ 450.860309][T16154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3323'. [ 450.920419][T16154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.952917][T16155] net_ratelimit: 163 callbacks suppressed [ 450.952937][T16155] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 451.011383][T16154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.095878][T16136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.109696][T16154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.181104][T16154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.282032][ T1164] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.303095][ T1164] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.323838][ T1164] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.342589][ T7396] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.585116][ T5855] Bluetooth: hci10: command tx timeout [ 451.729251][ T5967] IPVS: starting estimator thread 0... [ 451.760007][T16160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.835529][T16162] IPVS: using max 26 ests per chain, 62400 per kthread [ 451.858625][T16166] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 452.318263][T16173] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 452.428236][T16177] dummy0: entered promiscuous mode [ 452.433810][T16177] vlan2: entered promiscuous mode [ 452.584068][T16181] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3334'. [ 453.060959][T16194] netlink: 'syz.3.3338': attribute type 1 has an invalid length. [ 453.071257][T16194] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3338'. [ 453.756105][ T50] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 453.763922][T16214] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3345'. [ 453.777283][ T50] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 453.786865][ T50] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 453.798721][ T50] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 453.809258][ T50] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 454.341254][T16212] chnl_net:caif_netlink_parms(): no params data found [ 454.534420][T16212] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.542387][T16212] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.553025][T16212] bridge_slave_0: entered allmulticast mode [ 454.572484][T16212] bridge_slave_0: entered promiscuous mode [ 454.583856][T16212] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.605324][T16212] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.614224][T16212] bridge_slave_1: entered allmulticast mode [ 454.634612][T16237] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3350'. [ 454.636275][T16212] bridge_slave_1: entered promiscuous mode [ 454.704095][T16212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.740614][T16212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.791514][T16212] team0: Port device team_slave_0 added [ 454.801455][T16212] team0: Port device team_slave_1 added [ 454.856588][T16212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.863555][T16212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.891880][T16212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.918958][T16212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.929814][T16212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.957257][T16212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.957774][T16241] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3352'. [ 455.013132][T16241] xt_hashlimit: size too large, truncated to 1048576 [ 455.053766][T16212] hsr_slave_0: entered promiscuous mode [ 455.062652][T16212] hsr_slave_1: entered promiscuous mode [ 455.070439][T16212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 455.078142][T16212] Cannot create hsr debugfs directory [ 455.389652][T16212] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.469401][T16212] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.536345][T16212] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.691433][T16212] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.745846][T16253] vlan2: entered promiscuous mode [ 455.762369][T16255] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3358'. [ 455.905355][ T5855] Bluetooth: hci11: command tx timeout [ 456.325900][ T50] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 456.329161][T16212] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 456.345299][ T50] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 456.356617][ T50] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 456.376199][ T50] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 456.389010][T16212] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 456.397441][ T50] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 456.479625][T16212] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 456.521394][T16212] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 456.679937][T16275] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3363'. [ 456.812345][T16212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.893616][T16212] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.923995][T16281] smc: net device bond0 applied user defined pnetid SYZ2 [ 456.949227][ T7392] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.956453][ T7392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.038322][ T7396] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.045706][ T7396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.567495][T16294] bridge: RTM_NEWNEIGH with invalid ether address [ 457.716613][T16308] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3373'. [ 457.745959][T16308] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3373'. [ 457.812431][T16262] chnl_net:caif_netlink_parms(): no params data found [ 457.919547][T16312] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 457.997531][ T5855] Bluetooth: hci11: command tx timeout [ 458.039635][T16212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.127754][T16262] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.136544][T16262] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.143959][T16262] bridge_slave_0: entered allmulticast mode [ 458.157246][T16262] bridge_slave_0: entered promiscuous mode [ 458.166978][T16262] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.174282][T16262] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.215808][T16262] bridge_slave_1: entered allmulticast mode [ 458.223791][T16262] bridge_slave_1: entered promiscuous mode [ 458.429707][T16262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.465828][ T5855] Bluetooth: hci12: command tx timeout [ 458.493266][T16262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.523956][T16333] team_slave_0: entered promiscuous mode [ 458.529753][T16333] team_slave_1: entered promiscuous mode [ 458.536921][T16333] vlan2: entered promiscuous mode [ 458.542081][T16333] team0: entered promiscuous mode [ 458.661285][T16262] team0: Port device team_slave_0 added [ 458.672139][T16262] team0: Port device team_slave_1 added [ 458.767657][T16262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.793841][T16262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.849620][T16262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.882649][T16262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.892694][T16262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.968513][T16262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.121942][T16262] hsr_slave_0: entered promiscuous mode [ 459.146948][T16262] hsr_slave_1: entered promiscuous mode [ 459.153491][T16262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 459.171352][T16262] Cannot create hsr debugfs directory [ 459.300614][T16352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3386'. [ 459.300826][T16348] vlan2: entered promiscuous mode [ 459.313548][T16352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3386'. [ 459.542799][T16212] veth0_vlan: entered promiscuous mode [ 459.637751][T16360] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3389'. [ 459.687321][T16212] veth1_vlan: entered promiscuous mode [ 459.709101][T16362] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 459.779555][T16262] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.943932][T16262] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.028741][T16212] veth0_macvtap: entered promiscuous mode [ 460.029366][T16375] FAULT_INJECTION: forcing a failure. [ 460.029366][T16375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.057506][T16375] CPU: 0 UID: 0 PID: 16375 Comm: syz.9.3396 Not tainted 6.16.0-rc7-syzkaller-01904-g9312ee76490d #0 PREEMPT(full) [ 460.057534][T16375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 460.057545][T16375] Call Trace: [ 460.057553][T16375] [ 460.057562][T16375] dump_stack_lvl+0x189/0x250 [ 460.057599][T16375] ? __pfx____ratelimit+0x10/0x10 [ 460.057619][T16375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.057640][T16375] ? __pfx__printk+0x10/0x10 [ 460.057677][T16375] should_fail_ex+0x414/0x560 [ 460.057703][T16375] _copy_to_user+0x31/0xb0 [ 460.057729][T16375] simple_read_from_buffer+0xe1/0x170 [ 460.057760][T16375] proc_fail_nth_read+0x1df/0x250 [ 460.057782][T16375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 460.057804][T16375] ? rw_verify_area+0x258/0x650 [ 460.057825][T16375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 460.057845][T16375] vfs_read+0x200/0x980 [ 460.057873][T16375] ? __pfx___mutex_lock+0x10/0x10 [ 460.057895][T16375] ? __pfx_vfs_read+0x10/0x10 [ 460.057920][T16375] ? __fget_files+0x2a/0x420 [ 460.057942][T16375] ? __fget_files+0x3a0/0x420 [ 460.057957][T16375] ? __fget_files+0x2a/0x420 [ 460.057984][T16375] ksys_read+0x145/0x250 [ 460.058008][T16375] ? __pfx_ksys_read+0x10/0x10 [ 460.058037][T16375] ? do_syscall_64+0xbe/0x3b0 [ 460.058062][T16375] do_syscall_64+0xfa/0x3b0 [ 460.058081][T16375] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.058100][T16375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.058118][T16375] ? clear_bhb_loop+0x60/0xb0 [ 460.058140][T16375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.058157][T16375] RIP: 0033:0x7fd29f38d3bc [ 460.058175][T16375] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 460.058193][T16375] RSP: 002b:00007fd2a02c1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 460.058213][T16375] RAX: ffffffffffffffda RBX: 00007fd29f5b5fa0 RCX: 00007fd29f38d3bc [ 460.058228][T16375] RDX: 000000000000000f RSI: 00007fd2a02c10a0 RDI: 0000000000000019 [ 460.058240][T16375] RBP: 00007fd2a02c1090 R08: 0000000000000000 R09: 0000000000000000 [ 460.058252][T16375] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 460.058265][T16375] R13: 0000000000000000 R14: 00007fd29f5b5fa0 R15: 00007ffcce129918 [ 460.058297][T16375] [ 460.066107][ T5855] Bluetooth: hci11: command tx timeout [ 460.371694][T16262] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.451295][T16212] veth1_macvtap: entered promiscuous mode [ 460.552284][ T5855] Bluetooth: hci12: command tx timeout [ 460.562913][T16262] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.675539][T16212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.680685][T16391] netlink: 9280 bytes leftover after parsing attributes in process `syz.9.3404'. [ 460.712619][T16212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.783514][ T7400] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.801501][ T7400] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.873608][ T7400] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.886337][ T7400] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.159660][T16262] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 461.180936][ T7402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.213567][ T7402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.222411][T16262] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 461.283021][T16262] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 461.343689][T16262] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 461.373533][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.389471][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.477203][T16406] netlink: 452 bytes leftover after parsing attributes in process `syz.3.3407'. [ 461.599512][T16416] netlink: 'syz.4.3342': attribute type 21 has an invalid length. [ 461.637268][T16416] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3342'. [ 461.660718][T16416] netlink: 'syz.4.3342': attribute type 4 has an invalid length. [ 461.669994][T16416] netlink: 'syz.4.3342': attribute type 3 has an invalid length. [ 461.681261][T16416] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3342'. [ 461.699706][T16419] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3409'. [ 461.710554][T16262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.812966][T16419] bond1: entered promiscuous mode [ 461.827666][T16419] 8021q: adding VLAN 0 to HW filter on device bond1 [ 461.838978][T16422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3410'. [ 461.857617][T16422] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3410'. [ 462.027703][T16419] bond1 (unregistering): Released all slaves [ 462.117482][T16422] gretap1: entered promiscuous mode [ 462.194539][T16262] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.252189][ T7400] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.259505][ T7400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.299192][ T7400] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.306445][ T7400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.371007][T16262] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 462.383214][T16262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 462.389121][ T5855] Bluetooth: hci11: command tx timeout [ 462.521922][T16430] ipvlan2: entered promiscuous mode [ 462.533631][T16430] ipvlan2: entered allmulticast mode [ 462.539468][T16430] batadv0: entered allmulticast mode [ 462.553188][T16430] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 462.614587][T16432] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 462.642988][ T5855] Bluetooth: hci12: command tx timeout [ 462.769468][T16434] bond1: entered promiscuous mode [ 462.779172][T16434] 8021q: adding VLAN 0 to HW filter on device bond1 [ 463.082996][T16434] bond1 (unregistering): Released all slaves [ 463.120245][T16445] vlan2: entered promiscuous mode [ 463.363898][T16262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.477997][T16262] veth0_vlan: entered promiscuous mode [ 463.512281][T16262] veth1_vlan: entered promiscuous mode [ 463.663168][T16262] veth0_macvtap: entered promiscuous mode [ 463.692218][T16262] veth1_macvtap: entered promiscuous mode [ 463.764193][T16262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.855941][T16262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.910743][T16474] vlan2: entered promiscuous mode [ 463.970476][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.075503][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.084377][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.136700][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.426898][ T7405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.466600][ T7405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.598058][T16494] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 464.621115][ T7405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.660240][ T7405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.705526][ T5855] Bluetooth: hci12: command tx timeout [ 464.829651][T16499] __nla_validate_parse: 4 callbacks suppressed [ 464.829672][T16499] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3437'. [ 464.873565][ T50] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 464.887682][ T50] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 464.896632][ T50] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 464.904956][ T50] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 464.912864][ T50] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 465.135579][T16499] IPVS: Scheduler module ip_vs_sip not found [ 465.248097][T16514] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 465.569080][T16526] netlink: 'syz.9.3444': attribute type 1 has an invalid length. [ 465.706914][T16526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 465.773639][T16536] netlink: zone id is out of range [ 465.779767][T16536] netlink: zone id is out of range [ 465.792339][T16536] netlink: zone id is out of range [ 465.800127][T16536] netlink: zone id is out of range [ 465.806018][T16536] netlink: zone id is out of range [ 465.811261][T16536] netlink: zone id is out of range [ 465.820822][T16536] netlink: zone id is out of range [ 465.827411][T16536] netlink: zone id is out of range [ 465.829884][T16532] bond1: (slave gretap1): making interface the new active one [ 465.833421][T16536] netlink: zone id is out of range [ 465.848233][T16532] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 465.938793][T16536] netlink: 'syz.1.3448': attribute type 13 has an invalid length. [ 465.950547][T16536] netlink: 'syz.1.3448': attribute type 17 has an invalid length. [ 465.969563][T16536] netlink: 'syz.1.3448': attribute type 27 has an invalid length. [ 466.093969][T16544] netlink: 'syz.9.3450': attribute type 13 has an invalid length. [ 466.112287][T16544] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3450'. [ 466.653035][T16559] tipc: Started in network mode [ 466.665855][T16559] tipc: Node identity 0ad30b74ce5e, cluster identity 4711 [ 466.683547][T16559] tipc: Enabled bearer , priority 0 [ 466.764289][T16558] tipc: Disabling bearer [ 466.861697][T16500] chnl_net:caif_netlink_parms(): no params data found [ 466.944552][T16561] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3454'. [ 467.026388][ T5855] Bluetooth: hci13: command tx timeout [ 467.083798][T16561] Cannot find add_set index 0 as target [ 467.270938][T16573] vlan2: entered promiscuous mode [ 467.393171][T16500] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.400572][T16500] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.411581][T16500] bridge_slave_0: entered allmulticast mode [ 467.424282][T16500] bridge_slave_0: entered promiscuous mode [ 467.442648][T16500] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.465518][T16500] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.493561][T16500] bridge_slave_1: entered allmulticast mode [ 467.509827][T16500] bridge_slave_1: entered promiscuous mode [ 467.600999][T16580] netlink: 'syz.4.3460': attribute type 26 has an invalid length. [ 467.628496][T16500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.648733][T16500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.672569][T16582] ipvlan2: entered promiscuous mode [ 467.678941][T16582] ipvlan2: entered allmulticast mode [ 467.684250][T16582] batadv0: entered allmulticast mode [ 467.691526][T16582] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 467.729592][T16584] netlink: 'syz.4.3462': attribute type 1 has an invalid length. [ 467.737935][T16584] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3462'. [ 467.850793][T16500] team0: Port device team_slave_0 added [ 467.869306][T16500] team0: Port device team_slave_1 added [ 467.989852][T16500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.002443][T16500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.064565][T16500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.097865][T16500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.105180][T16500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.139006][T16500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.378240][T16500] hsr_slave_0: entered promiscuous mode [ 468.396263][T16500] hsr_slave_1: entered promiscuous mode [ 468.403963][T16500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.422761][T16500] Cannot create hsr debugfs directory [ 468.557760][T16607] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 468.742426][T16610] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3473'. [ 468.807522][T16500] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.899165][T16500] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.012472][T16500] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.112329][ T5855] Bluetooth: hci13: command tx timeout [ 469.331804][T16500] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.479003][T16621] ipvlan2: entered promiscuous mode [ 469.484244][T16621] ipvlan2: entered allmulticast mode [ 469.501218][T16621] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 469.678986][T16500] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 469.711069][T16500] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 469.761245][T16500] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 469.781007][T16627] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3482'. [ 469.795597][T16500] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 469.805244][T16627] netlink: 'syz.4.3482': attribute type 7 has an invalid length. [ 469.813047][T16627] netlink: 'syz.4.3482': attribute type 8 has an invalid length. [ 469.828189][T16627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3482'. [ 469.858845][T16627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3482'. [ 470.106988][T16500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.134575][T16500] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.161678][ T7396] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.168898][ T7396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.191621][ T7400] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.198866][ T7400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.264098][T16646] tipc: Enabled bearer , priority 0 [ 470.297348][T16645] tipc: Disabling bearer [ 470.478431][T16651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3486'. [ 470.502426][T16651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3486'. [ 470.572089][T16500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.599671][T16654] netlink: 'syz.4.3487': attribute type 1 has an invalid length. [ 470.660381][T16654] bond1: (slave geneve2): making interface the new active one [ 470.670795][T16654] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 470.701115][T16654] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 470.722887][ T7392] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 470.734320][ T7392] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 470.773957][ T7392] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 470.783906][ T7392] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 470.806118][T16500] veth0_vlan: entered promiscuous mode [ 470.830828][T16500] veth1_vlan: entered promiscuous mode [ 470.875535][T16500] veth0_macvtap: entered promiscuous mode [ 470.952848][T16500] veth1_macvtap: entered promiscuous mode [ 471.024115][T16500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.066059][T16500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.087122][T16666] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3488'. [ 471.121350][ T7400] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.138700][ T7400] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.148346][ T7400] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.185519][ T5855] Bluetooth: hci13: command tx timeout [ 471.205918][ T7400] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.344403][ T7396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.377590][ T7396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.440620][ T7392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.449419][ T7392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.472225][T16671] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3493'. [ 471.499436][T16671] net_ratelimit: 335 callbacks suppressed [ 471.499458][T16671] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 471.644307][T16674] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3431'. [ 472.086093][T16684] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3497'. [ 472.126019][T16689] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3497'. [ 472.216811][T16691] team_slave_0: entered promiscuous mode [ 472.222548][T16691] team_slave_1: entered promiscuous mode [ 472.245564][T16691] vlan2: entered promiscuous mode [ 472.253319][T16691] team0: entered promiscuous mode [ 472.451739][T16696] netlink: 'syz.3.3501': attribute type 1 has an invalid length. [ 472.597090][T16700] bond2: (slave geneve2): making interface the new active one [ 472.619755][T16700] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 472.694470][ T7405] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 472.717289][T16703] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 472.728094][ T7405] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 472.741841][ T7392] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 472.765019][ T7392] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 473.039013][T16711] team_slave_0: entered promiscuous mode [ 473.044753][T16711] team_slave_1: entered promiscuous mode [ 473.068185][T16711] vlan2: entered promiscuous mode [ 473.073237][T16711] team0: entered promiscuous mode [ 473.127211][T16714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3507'. [ 473.268989][ T5855] Bluetooth: hci13: command tx timeout [ 473.548119][T10887] hid-generic 0005:15C2:1010.0003: item fetching failed at offset 0/1 [ 473.625886][T10887] hid-generic 0005:15C2:1010.0003: probe with driver hid-generic failed with error -22 [ 473.762982][T16733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3514'. [ 474.164913][T16750] netlink: 'syz.0.3521': attribute type 1 has an invalid length. [ 474.313461][T16754] tipc: Started in network mode [ 474.324276][T16754] tipc: Node identity 76775389a2e1, cluster identity 4711 [ 474.336372][T16754] tipc: Enabled bearer , priority 0 [ 474.351082][T16753] tipc: Disabling bearer [ 475.174472][T16787] bond_slave_0: entered promiscuous mode [ 475.180408][T16787] bond_slave_1: entered promiscuous mode [ 475.205132][T16787] vlan2: entered promiscuous mode [ 475.224811][T16787] bond0: entered promiscuous mode [ 475.261011][T16786] veth0_to_bridge: entered promiscuous mode [ 475.268762][T16788] veth0_to_bridge: left promiscuous mode [ 475.696527][T16806] __nla_validate_parse: 5 callbacks suppressed [ 475.696545][T16806] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3548'. [ 475.954212][T16816] ipvlan2: entered promiscuous mode [ 475.961344][T16816] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 476.230574][T16825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3555'. [ 476.250722][T16826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3555'. [ 476.380074][T16830] netlink: 'syz.4.3556': attribute type 1 has an invalid length. [ 476.436097][T16830] bond2: (slave ip6gretap2): making interface the new active one [ 476.445684][T16830] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 476.541297][T16833] bridge_slave_0: left allmulticast mode [ 476.559245][T16833] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.611426][T16833] bridge_slave_1: left allmulticast mode [ 476.645555][T16833] bridge_slave_1: left promiscuous mode [ 476.651467][T16833] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.692327][T16833] bond0: (slave bond_slave_0): Releasing backup interface [ 476.718215][T16833] bond_slave_0: left promiscuous mode [ 476.741755][T16833] bond0: (slave bond_slave_1): Releasing backup interface [ 476.751840][T16845] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3560'. [ 476.756689][T16833] bond_slave_1: left promiscuous mode [ 476.779789][T16833] team_slave_0: left promiscuous mode [ 476.803456][T16833] team0: Failed to send options change via netlink (err -105) [ 476.815444][T16833] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 476.824387][T16848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3560'. [ 476.825770][T16833] team0: Port device team_slave_0 removed [ 476.848572][T16833] team_slave_1: left promiscuous mode [ 476.874193][T16833] team0: Failed to send options change via netlink (err -105) [ 476.889647][T16833] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 476.900453][T16833] team0: Port device team_slave_1 removed [ 476.907766][T16833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.916191][T16833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.926749][T16833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.940082][T16833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.965797][T16833] bond2: (slave geneve2): Releasing active interface [ 476.982708][T16833] bond2: (slave geneve2): the permanent HWaddr of slave - 6a:e6:e1:e9:4e:e8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 477.003394][T16833] bond2: (slave ip6gretap1): making interface the new active one [ 477.023979][T16833] bond2: (slave ip6gretap1): Releasing active interface [ 477.155991][T16844] team0: Failed to send options change via netlink (err -105) [ 477.170764][T16844] team0: Mode changed to "activebackup" [ 477.178931][T16846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3561'. [ 477.179343][ T7392] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 477.198897][ T7392] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 477.208765][ T7392] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 477.218079][ T7392] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 477.478354][T16859] veth1_to_batadv: entered promiscuous mode [ 477.532246][T16861] vlan2: entered promiscuous mode [ 477.766900][T16869] netlink: 'syz.3.3569': attribute type 1 has an invalid length. [ 477.919323][T16869] bond3: (slave ip6gretap2): making interface the new active one [ 477.944430][T16869] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 478.119139][T16881] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3574'. [ 478.170388][T16881] bond3: entered promiscuous mode [ 478.177583][T16881] 8021q: adding VLAN 0 to HW filter on device bond3 [ 478.470997][T16881] bond3 (unregistering): Released all slaves [ 478.677417][T16890] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 478.845513][T16892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3578'. [ 478.879618][T16892] veth1_macvtap: left promiscuous mode [ 478.973804][T16895] netlink: 'syz.3.3579': attribute type 4 has an invalid length. [ 479.057934][T16897] netlink: 404 bytes leftover after parsing attributes in process `syz.0.3580'. [ 479.078280][T16897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3580'. [ 479.619049][T16916] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 480.530565][T16948] FAULT_INJECTION: forcing a failure. [ 480.530565][T16948] name failslab, interval 1, probability 0, space 0, times 0 [ 480.543972][T16948] CPU: 0 UID: 0 PID: 16948 Comm: syz.4.3597 Not tainted 6.16.0-rc7-syzkaller-01904-g9312ee76490d #0 PREEMPT(full) [ 480.543999][T16948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 480.544010][T16948] Call Trace: [ 480.544019][T16948] [ 480.544028][T16948] dump_stack_lvl+0x189/0x250 [ 480.544056][T16948] ? __pfx____ratelimit+0x10/0x10 [ 480.544077][T16948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.544098][T16948] ? __pfx__printk+0x10/0x10 [ 480.544128][T16948] ? __pfx___might_resched+0x10/0x10 [ 480.544147][T16948] ? fs_reclaim_acquire+0x7d/0x100 [ 480.544171][T16948] should_fail_ex+0x414/0x560 [ 480.544196][T16948] should_failslab+0xa8/0x100 [ 480.544222][T16948] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 480.544247][T16948] ? __alloc_skb+0x112/0x2d0 [ 480.544272][T16948] __alloc_skb+0x112/0x2d0 [ 480.544296][T16948] netlink_ack+0x146/0xa50 [ 480.544313][T16948] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 480.544330][T16948] ? ref_tracker_free+0x63a/0x7d0 [ 480.544351][T16948] ? __asan_memcpy+0x40/0x70 [ 480.544371][T16948] ? __pfx_ref_tracker_free+0x10/0x10 [ 480.544401][T16948] netlink_rcv_skb+0x28c/0x470 [ 480.544422][T16948] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 480.544442][T16948] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 480.544469][T16948] ? netlink_deliver_tap+0x2e/0x1b0 [ 480.544493][T16948] netlink_unicast+0x82f/0x9e0 [ 480.544523][T16948] ? __pfx_netlink_unicast+0x10/0x10 [ 480.544551][T16948] ? netlink_sendmsg+0x642/0xb30 [ 480.544567][T16948] ? skb_put+0x11b/0x210 [ 480.544591][T16948] netlink_sendmsg+0x805/0xb30 [ 480.544624][T16948] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.544643][T16948] ? aa_sock_msg_perm+0x94/0x160 [ 480.544664][T16948] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 480.544681][T16948] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.544699][T16948] __sock_sendmsg+0x21c/0x270 [ 480.544728][T16948] ____sys_sendmsg+0x505/0x830 [ 480.544755][T16948] ? __pfx_____sys_sendmsg+0x10/0x10 [ 480.544793][T16948] ? import_iovec+0x74/0xa0 [ 480.544822][T16948] ___sys_sendmsg+0x21f/0x2a0 [ 480.544847][T16948] ? __pfx____sys_sendmsg+0x10/0x10 [ 480.544910][T16948] ? __fget_files+0x2a/0x420 [ 480.544926][T16948] ? __fget_files+0x3a0/0x420 [ 480.544954][T16948] __x64_sys_sendmsg+0x19b/0x260 [ 480.544979][T16948] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 480.545013][T16948] ? __pfx_ksys_write+0x10/0x10 [ 480.545033][T16948] ? rcu_is_watching+0x15/0xb0 [ 480.545060][T16948] ? do_syscall_64+0xbe/0x3b0 [ 480.545086][T16948] do_syscall_64+0xfa/0x3b0 [ 480.545107][T16948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.545124][T16948] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 480.545142][T16948] ? clear_bhb_loop+0x60/0xb0 [ 480.545164][T16948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.545182][T16948] RIP: 0033:0x7ff6de58e9a9 [ 480.545200][T16948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.545217][T16948] RSP: 002b:00007ff6df440038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.545238][T16948] RAX: ffffffffffffffda RBX: 00007ff6de7b5fa0 RCX: 00007ff6de58e9a9 [ 480.545252][T16948] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000007 [ 480.545265][T16948] RBP: 00007ff6df440090 R08: 0000000000000000 R09: 0000000000000000 [ 480.545278][T16948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.545289][T16948] R13: 0000000000000000 R14: 00007ff6de7b5fa0 R15: 00007ffc2ddb8008 [ 480.545318][T16948] [ 480.764415][T16951] __nla_validate_parse: 4 callbacks suppressed [ 480.764433][T16951] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3596'. [ 481.126717][T16949] Bluetooth: MGMT ver 1.23 [ 481.666892][T16961] vlan2: entered promiscuous mode [ 481.896296][ T50] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 481.908887][ T50] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 481.918234][ T50] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 481.945163][ T50] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 481.957913][ T50] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 482.080523][ T50] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 482.081321][T16972] sit2: entered promiscuous mode [ 482.096507][ T50] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 482.104913][ T50] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 482.129408][ T50] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 482.138976][ T50] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 482.253058][T16978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.270248][T16978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.320726][T16980] netlink: 'syz.3.3607': attribute type 1 has an invalid length. [ 482.380409][T16980] bond4: (slave ip6gretap3): making interface the new active one [ 482.389617][T16980] bond4: (slave ip6gretap3): Enslaving as an active interface with an up link [ 483.726247][T16965] chnl_net:caif_netlink_parms(): no params data found [ 483.969946][T17003] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3614'. [ 484.065959][ T5855] Bluetooth: hci14: command tx timeout [ 484.069133][T17003] bond5: entered promiscuous mode [ 484.079316][T17003] 8021q: adding VLAN 0 to HW filter on device bond5 [ 484.225966][ T5855] Bluetooth: hci15: command tx timeout [ 484.269467][T17003] bond5 (unregistering): Released all slaves [ 484.310639][T16965] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.320928][T16965] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.328898][T16965] bridge_slave_0: entered allmulticast mode [ 484.338851][T16965] bridge_slave_0: entered promiscuous mode [ 484.352774][T17005] ipvlan2: entered promiscuous mode [ 484.457855][T16965] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.475577][T16965] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.482952][T16965] bridge_slave_1: entered allmulticast mode [ 484.513849][T16965] bridge_slave_1: entered promiscuous mode [ 484.720414][T16965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.769366][T16965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.912269][T16975] chnl_net:caif_netlink_parms(): no params data found [ 484.943754][T16965] team0: Port device team_slave_0 added [ 484.978512][T16965] team0: Port device team_slave_1 added [ 484.982621][T17031] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3622'. [ 485.121909][T16965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.155667][T16965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.197307][T16965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.231154][T16965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.239233][T16965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.267327][T16965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.629880][T17042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3627'. [ 485.650124][T17043] syzkaller1: entered promiscuous mode [ 485.658829][T17043] syzkaller1: entered allmulticast mode [ 485.679832][T16965] hsr_slave_0: entered promiscuous mode [ 485.687252][T16965] hsr_slave_1: entered promiscuous mode [ 485.693553][T16965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 485.701875][T16965] Cannot create hsr debugfs directory [ 486.027209][T16975] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.034440][T16975] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.056923][T16975] bridge_slave_0: entered allmulticast mode [ 486.078880][T16975] bridge_slave_0: entered promiscuous mode [ 486.098165][T16975] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.117976][T16975] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.145640][ T5855] Bluetooth: hci14: command tx timeout [ 486.160625][T16975] bridge_slave_1: entered allmulticast mode [ 486.177416][T16975] bridge_slave_1: entered promiscuous mode [ 486.306681][ T5855] Bluetooth: hci15: command tx timeout [ 486.334211][T16975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.377134][T16975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.520128][T16975] team0: Port device team_slave_0 added [ 486.566116][T16975] team0: Port device team_slave_1 added [ 486.842075][T16975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.854846][T16975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.925086][T16975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.956484][T16975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.963601][T16975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.994368][T16975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.112422][T16965] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.187308][T17063] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3632'. [ 487.223056][T16975] hsr_slave_0: entered promiscuous mode [ 487.230765][T16975] hsr_slave_1: entered promiscuous mode [ 487.240578][T16975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.248672][T16975] Cannot create hsr debugfs directory [ 487.307988][T16965] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.342978][T17065] ipvlan2: entered promiscuous mode [ 487.356055][T17065] ipvlan2: entered allmulticast mode [ 487.364173][T17065] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 487.437120][T16965] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.544015][T16965] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.868023][T16965] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 487.893289][T16965] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 487.951334][T16975] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.974288][T16965] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 488.015562][T16965] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 488.059444][T16975] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.179238][T16975] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.235773][ T5855] Bluetooth: hci14: command tx timeout [ 488.246571][T16965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.284239][T16975] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.324375][T16965] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.338075][ T7400] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.345334][ T7400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.385302][ T5855] Bluetooth: hci15: command tx timeout [ 488.388763][ T7400] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.397988][ T7400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.582609][T16975] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 488.594598][T16975] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 488.611940][T16975] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 488.635717][T16975] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 488.840025][T16975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.868456][T16975] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.890101][ T7392] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.897301][ T7392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.963121][ T7392] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.970346][ T7392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.080707][T16965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.552493][T16975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.956424][T16965] veth0_vlan: entered promiscuous mode [ 489.996368][T16965] veth1_vlan: entered promiscuous mode [ 490.058017][T16965] veth0_macvtap: entered promiscuous mode [ 490.100443][T16965] veth1_macvtap: entered promiscuous mode [ 490.123767][T17122] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3641'. [ 490.199689][T16965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.235539][T16965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.295464][ T7401] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.305476][ T5855] Bluetooth: hci14: command tx timeout [ 490.361084][T16975] veth0_vlan: entered promiscuous mode [ 490.377136][T16975] veth1_vlan: entered promiscuous mode [ 490.475299][ T5855] Bluetooth: hci15: command tx timeout [ 490.480865][ T7401] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.490151][ T7401] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.499788][ T7401] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.633321][T16975] veth0_macvtap: entered promiscuous mode [ 490.671086][T16975] veth1_macvtap: entered promiscuous mode [ 490.741420][T16975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.788674][ T7405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.822062][ T7405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.953285][T16975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.076927][ T7402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.098725][ T7402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.119282][ T7405] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.154335][T17122] netlink: 'syz.3.3641': attribute type 6 has an invalid length. [ 491.173113][ T7405] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.261112][ T7405] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.284781][ T7405] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.443786][T17131] netlink: zone id is out of range [ 491.455288][T17131] netlink: zone id is out of range [ 491.466915][T17131] netlink: zone id is out of range [ 491.481948][ T7400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.503773][ T7400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.510872][T17131] netlink: zone id is out of range [ 491.526861][T17131] netlink: zone id is out of range [ 491.532005][T17131] netlink: zone id is out of range [ 491.542033][T17131] netlink: zone id is out of range [ 491.569630][ T7392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.569633][T17131] netlink: zone id is out of range [ 491.569650][ T7392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.628387][T17131] netlink: zone id is out of range [ 491.636158][T17131] netlink: zone id is out of range [ 491.637087][T17132] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3642'. [ 491.787020][T17135] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3600'. [ 492.173894][T17145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3646'. [ 492.183883][T17145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3646'. [ 494.137222][T17192] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3662'. [ 494.148100][T17192] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3662'. [ 495.147703][T17205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.230445][T17217] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3667'. [ 496.280213][ T50] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 496.298089][ T50] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 496.315234][ T50] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 496.328405][ T50] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 496.337464][ T50] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 496.839946][T17259] netlink: 'syz.5.3677': attribute type 4 has an invalid length. [ 496.853471][T17257] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3679'. [ 497.087129][T17271] netlink: 'syz.5.3683': attribute type 4 has an invalid length. [ 497.170600][T17271] FAULT_INJECTION: forcing a failure. [ 497.170600][T17271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.215461][T17271] CPU: 0 UID: 0 PID: 17271 Comm: syz.5.3683 Not tainted 6.16.0-rc7-syzkaller-01904-g9312ee76490d #0 PREEMPT(full) [ 497.215489][T17271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 497.215501][T17271] Call Trace: [ 497.215509][T17271] [ 497.215518][T17271] dump_stack_lvl+0x189/0x250 [ 497.215546][T17271] ? __pfx____ratelimit+0x10/0x10 [ 497.215566][T17271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.215585][T17271] ? __pfx__printk+0x10/0x10 [ 497.215620][T17271] should_fail_ex+0x414/0x560 [ 497.215646][T17271] _copy_to_user+0x31/0xb0 [ 497.215672][T17271] simple_read_from_buffer+0xe1/0x170 [ 497.215699][T17271] proc_fail_nth_read+0x1df/0x250 [ 497.215720][T17271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 497.215741][T17271] ? rw_verify_area+0x258/0x650 [ 497.215761][T17271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 497.215781][T17271] vfs_read+0x200/0x980 [ 497.215808][T17271] ? __pfx___mutex_lock+0x10/0x10 [ 497.215829][T17271] ? __pfx_vfs_read+0x10/0x10 [ 497.215854][T17271] ? __fget_files+0x2a/0x420 [ 497.215873][T17271] ? __fget_files+0x3a0/0x420 [ 497.215887][T17271] ? __fget_files+0x2a/0x420 [ 497.215912][T17271] ksys_read+0x145/0x250 [ 497.215937][T17271] ? __pfx_ksys_read+0x10/0x10 [ 497.215955][T17271] ? rcu_is_watching+0x15/0xb0 [ 497.215979][T17271] ? do_syscall_64+0xbe/0x3b0 [ 497.216002][T17271] do_syscall_64+0xfa/0x3b0 [ 497.216020][T17271] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.216039][T17271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.216056][T17271] ? clear_bhb_loop+0x60/0xb0 [ 497.216077][T17271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.216094][T17271] RIP: 0033:0x7f29acd8d3bc [ 497.216112][T17271] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 497.216128][T17271] RSP: 002b:00007f29adc35030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 497.216149][T17271] RAX: ffffffffffffffda RBX: 00007f29acfb5fa0 RCX: 00007f29acd8d3bc [ 497.216163][T17271] RDX: 000000000000000f RSI: 00007f29adc350a0 RDI: 0000000000000004 [ 497.216175][T17271] RBP: 00007f29adc35090 R08: 0000000000000000 R09: 000000000000003d [ 497.216187][T17271] R10: 0000000024040000 R11: 0000000000000246 R12: 0000000000000001 [ 497.216200][T17271] R13: 0000000000000000 R14: 00007f29acfb5fa0 R15: 00007ffc52d7c818 [ 497.216231][T17271] [ 497.473675][T17246] chnl_net:caif_netlink_parms(): no params data found [ 497.770498][T17276] team_slave_0: entered promiscuous mode [ 497.776524][T17276] team_slave_1: entered promiscuous mode [ 497.785675][T17276] vlan2: entered promiscuous mode [ 497.790833][T17276] team0: entered promiscuous mode [ 497.981375][T17246] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.989117][T17246] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.997182][T17246] bridge_slave_0: entered allmulticast mode [ 498.007868][T17246] bridge_slave_0: entered promiscuous mode [ 498.017336][T17246] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.028925][T17246] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.041880][T17289] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3687'. [ 498.053353][T17246] bridge_slave_1: entered allmulticast mode [ 498.062474][T17246] bridge_slave_1: entered promiscuous mode [ 498.075724][T17289] block nbd1: Unsupported socket: shutdown callout must be supported. [ 498.199949][T17293] netlink: 'syz.5.3688': attribute type 1 has an invalid length. [ 498.214552][T17246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.276431][T17246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.340821][T17292] vlan2: entered promiscuous mode [ 498.385417][ T5855] Bluetooth: hci16: command tx timeout [ 498.572333][T17246] team0: Port device team_slave_0 added [ 498.638215][T17246] team0: Port device team_slave_1 added [ 498.908035][T17246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.938014][T17246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.018406][T17246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.061403][T17246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.083385][T17246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.182541][T17246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.473000][T17307] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 499.484406][T17246] hsr_slave_0: entered promiscuous mode [ 499.515484][T17246] hsr_slave_1: entered promiscuous mode [ 499.531719][T17246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 499.566867][T17246] Cannot create hsr debugfs directory [ 500.231946][T17246] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.399594][T17246] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.466887][ T5855] Bluetooth: hci16: command tx timeout [ 500.513498][T17246] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.556533][T17328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3701'. [ 500.667816][T17246] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.033308][T17246] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 501.070101][T17246] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 501.102720][T17246] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 501.124525][T17338] netlink: 'syz.3.3706': attribute type 1 has an invalid length. [ 501.140365][T17246] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 501.443333][T17246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.527556][T17246] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.551533][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.558747][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.676616][ T50] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 501.697942][ T7392] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.705147][ T7392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.719742][ T50] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 501.733887][ T50] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 501.742365][ T50] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 501.751627][ T50] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 501.882419][T17246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 501.913783][T17354] sctp: [Deprecated]: syz.5.3711 (pid 17354) Use of struct sctp_assoc_value in delayed_ack socket option. [ 501.913783][T17354] Use struct sctp_sack_info instead [ 502.263605][T17367] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3714'. [ 502.511621][T17246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.545383][ T5855] Bluetooth: hci16: command tx timeout [ 502.631282][T17374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3717'. [ 502.822728][T17246] veth0_vlan: entered promiscuous mode [ 502.872464][T17352] chnl_net:caif_netlink_parms(): no params data found [ 502.910833][T17246] veth1_vlan: entered promiscuous mode [ 503.541921][T17388] bridge_slave_0: left promiscuous mode [ 503.825753][ T5855] Bluetooth: hci17: command tx timeout [ 504.077562][T17388] sit2: left promiscuous mode [ 504.270842][ T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.273990][T17398] netlink: 'syz.3.3722': attribute type 1 has an invalid length. [ 504.290302][ T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.396376][ T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.405879][ T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.416115][T17352] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.423330][T17352] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.433393][T17352] bridge_slave_0: entered allmulticast mode [ 504.441086][T17352] bridge_slave_0: entered promiscuous mode [ 504.451246][T17352] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.459219][T17352] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.468234][T17352] bridge_slave_1: entered allmulticast mode [ 504.499016][T17352] bridge_slave_1: entered promiscuous mode [ 504.524999][T17398] bond5: (slave ip6gretap4): making interface the new active one [ 504.533726][T17398] bond5: (slave ip6gretap4): Enslaving as an active interface with an up link [ 504.621190][T17402] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3723'. [ 504.635386][ T5855] Bluetooth: hci16: command tx timeout [ 504.653279][T17402] netem: invalid attributes len -16 [ 504.660662][T17402] netem: change failed [ 504.666707][T17246] veth0_macvtap: entered promiscuous mode [ 504.691142][T17352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.734071][T17352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.838168][T17246] veth1_macvtap: entered promiscuous mode [ 504.929141][T17352] team0: Port device team_slave_0 added [ 504.941241][T17352] team0: Port device team_slave_1 added [ 504.978935][T17246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.065858][T17246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.206306][T17352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.304840][T17352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.461995][T17352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.479343][ T7405] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.516381][ T7405] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.547171][ T7405] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.576258][ T7405] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.616345][T17352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.623324][T17352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.700088][T17352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.907368][ T5855] Bluetooth: hci17: command tx timeout [ 505.973519][T17352] hsr_slave_0: entered promiscuous mode [ 505.996985][T17352] hsr_slave_1: entered promiscuous mode [ 506.017917][T17352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.026111][T17352] Cannot create hsr debugfs directory [ 506.286168][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.294100][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.458137][ T7401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.475271][ T7401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.700075][T17352] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.758966][T17440] ipvlan2: entered promiscuous mode [ 506.764218][T17440] ipvlan2: entered allmulticast mode [ 506.787694][T17440] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 506.812218][T17442] netlink: 'syz.2.3735': attribute type 1 has an invalid length. [ 506.865340][T17352] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.014852][T17352] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.170172][T17352] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.397726][T17352] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 507.458586][T17352] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 507.489327][T17352] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 507.523460][T17352] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 507.877622][T17352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.966938][T17352] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.988062][ T50] Bluetooth: hci17: command tx timeout [ 507.996664][ T7401] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.003991][ T7401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.040292][ T7405] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.047512][ T7405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.182953][T17352] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 508.559819][T17352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.160704][T17352] veth0_vlan: entered promiscuous mode [ 509.196565][T17497] netlink: 'syz.3.3749': attribute type 4 has an invalid length. [ 509.216070][T17352] veth1_vlan: entered promiscuous mode [ 509.310568][T17352] veth0_macvtap: entered promiscuous mode [ 509.326609][T17497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3749'. [ 509.346397][T17352] veth1_macvtap: entered promiscuous mode [ 509.399372][T17352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.431238][T17352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.481926][ T1168] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.519325][ T1168] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.548707][ T1168] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.566320][ T1168] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.742789][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.768566][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.873621][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.903411][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.066039][ T50] Bluetooth: hci17: command tx timeout [ 510.129018][T17516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3757'. [ 510.197405][T17516] bond6: entered promiscuous mode [ 510.203040][T17516] 8021q: adding VLAN 0 to HW filter on device bond6 [ 510.357030][T17527] netlink: 'syz.2.3759': attribute type 1 has an invalid length. [ 510.524150][T17516] bond6 (unregistering): Released all slaves [ 511.015144][T17546] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3767'. [ 511.503893][T17566] tipc: Started in network mode [ 511.509991][T17566] tipc: Node identity 62e8159a58f7, cluster identity 4711 [ 511.518606][T17566] tipc: Enabled bearer , priority 0 [ 511.569866][T17565] tipc: Disabling bearer [ 511.592696][T17568] xt_TCPMSS: Only works on TCP SYN packets [ 512.266496][T17575] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3778'. [ 512.309974][T17575] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3778'. [ 512.526117][T17577] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3779'. [ 512.557591][T17577] netlink: 'syz.8.3779': attribute type 4 has an invalid length. [ 512.738703][T17581] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3781'. [ 512.839741][T17581] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3781'. [ 513.178474][T17599] netlink: 'syz.2.3787': attribute type 1 has an invalid length. [ 513.233346][T17601] team_slave_0: entered promiscuous mode [ 513.239114][T17601] team_slave_1: entered promiscuous mode [ 513.251269][T17601] vlan2: entered promiscuous mode [ 513.257298][T17601] team0: entered promiscuous mode [ 513.519211][T17607] bond_slave_0: entered promiscuous mode [ 513.524975][T17607] bond_slave_1: entered promiscuous mode [ 513.530925][T17607] vlan2: entered promiscuous mode [ 513.548016][T17607] bond0: entered promiscuous mode [ 513.875710][T17610] vlan2: entered promiscuous mode [ 514.015607][T17612] netlink: 'syz.2.3793': attribute type 25 has an invalid length. [ 514.028183][ T5855] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 514.035719][T17612] netlink: 'syz.2.3793': attribute type 7 has an invalid length. [ 514.036240][T17613] netlink: 'syz.2.3793': attribute type 25 has an invalid length. [ 514.065778][ T5855] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 514.083023][ T5855] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 514.084233][T17613] netlink: 'syz.2.3793': attribute type 7 has an invalid length. [ 514.116488][ T5855] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 514.134110][ T5855] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 514.322851][T17622] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3796'. [ 515.623948][T17641] sctp: [Deprecated]: syz.8.3803 (pid 17641) Use of struct sctp_assoc_value in delayed_ack socket option. [ 515.623948][T17641] Use struct sctp_sack_info instead [ 515.766737][T17651] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3805'. [ 515.824002][T17651] bond6: entered promiscuous mode [ 515.833681][T17651] 8021q: adding VLAN 0 to HW filter on device bond6 [ 516.235333][ T50] Bluetooth: hci18: command tx timeout [ 516.577163][T17651] bond6 (unregistering): Released all slaves [ 516.617497][T17617] chnl_net:caif_netlink_parms(): no params data found [ 516.773006][T17662] bond_slave_0: entered promiscuous mode [ 516.778763][T17662] bond_slave_1: entered promiscuous mode [ 516.806961][T17662] vlan2: entered promiscuous mode [ 516.827716][T17662] bond0: entered promiscuous mode [ 517.230275][T17617] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.272171][T17617] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.317816][T17617] bridge_slave_0: entered allmulticast mode [ 517.351369][T17617] bridge_slave_0: entered promiscuous mode [ 517.386492][T17617] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.393746][T17617] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.432703][T17617] bridge_slave_1: entered allmulticast mode [ 517.448765][T17617] bridge_slave_1: entered promiscuous mode [ 517.581990][T17617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.636832][T17617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.857634][T17617] team0: Port device team_slave_0 added [ 517.888119][T17617] team0: Port device team_slave_1 added [ 517.927755][T17678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3814'. [ 518.027504][T17617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.034477][T17617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.115216][T17617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.162092][T17617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.182593][T17617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.220523][T17617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.314507][ T5855] Bluetooth: hci18: command tx timeout [ 518.339496][T17688] team_slave_0: entered promiscuous mode [ 518.345253][T17688] team_slave_1: entered promiscuous mode [ 518.353190][T17688] vlan2: entered promiscuous mode [ 518.364068][T17688] team0: entered promiscuous mode [ 518.419698][T17693] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3818'. [ 518.422780][T17691] ipvlan2: entered promiscuous mode [ 518.434184][T17691] ipvlan2: entered allmulticast mode [ 518.442768][T17691] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 518.500658][T17617] hsr_slave_0: entered promiscuous mode [ 518.528101][T17617] hsr_slave_1: entered promiscuous mode [ 518.566719][T17617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 518.574306][T17617] Cannot create hsr debugfs directory [ 518.866075][ T5855] Bluetooth: hci5: command 0x0406 tx timeout [ 518.879006][T17701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3822'. [ 519.225847][T17617] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.265623][T17617] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 519.741167][T17617] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.775246][T17617] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 519.926216][T17711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3826'. [ 520.047768][T17617] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.074195][T17617] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 520.385796][ T50] Bluetooth: hci18: command tx timeout [ 520.456979][ T5855] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 520.469829][ T5855] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 520.481583][ T5855] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 520.493670][ T5855] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 520.508241][ T5855] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 520.524070][T17617] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.536121][T17617] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 521.031618][T17617] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 521.091217][T17617] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 521.152016][T17617] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 521.177626][T17617] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 521.348765][T17741] sctp: [Deprecated]: syz.8.3836 (pid 17741) Use of struct sctp_assoc_value in delayed_ack socket option. [ 521.348765][T17741] Use struct sctp_sack_info instead [ 521.576433][T17756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3838'. [ 521.765830][T17764] netlink: 'syz.8.3841': attribute type 1 has an invalid length. [ 521.773816][T17764] net_ratelimit: 162 callbacks suppressed [ 521.773835][T17764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.943885][T17771] tipc: Enabled bearer , priority 0 [ 521.953525][T17727] chnl_net:caif_netlink_parms(): no params data found [ 521.982825][T17764] syzkaller0: entered promiscuous mode [ 521.994863][T17764] syzkaller0: entered allmulticast mode [ 522.088419][T17764] tipc: Resetting bearer [ 522.177010][T17780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3846'. [ 522.190905][T17780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3846'. [ 522.209811][T17777] vlan2: entered promiscuous mode [ 522.279199][T17763] tipc: Resetting bearer [ 522.319042][T17763] tipc: Disabling bearer [ 522.326549][T17784] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 522.467106][ T5855] Bluetooth: hci18: command tx timeout [ 522.533329][T17727] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.548957][ T5855] Bluetooth: hci19: command tx timeout [ 522.550878][T17727] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.595755][T17727] bridge_slave_0: entered allmulticast mode [ 522.625900][T17727] bridge_slave_0: entered promiscuous mode [ 522.646668][T17727] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.653811][T17727] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.665489][T17727] bridge_slave_1: entered allmulticast mode [ 522.702174][T17727] bridge_slave_1: entered promiscuous mode [ 522.796313][T17617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.902680][T17727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.955382][T17727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.172668][T17727] team0: Port device team_slave_0 added [ 523.179903][T17806] IPv6: Can't replace route, no match found [ 523.193706][T17727] team0: Port device team_slave_1 added [ 523.347243][T17811] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3857'. [ 523.364287][T17811] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3857'. [ 523.377779][T17617] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.386439][T17811] netlink: 'syz.8.3857': attribute type 18 has an invalid length. [ 523.398882][T17727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.414958][T17727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.497177][T17727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.539423][T17727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.555222][T17727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.601497][T17727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.658061][ T7396] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.665280][ T7396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.687959][ T7396] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.695175][ T7396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.697451][T17813] sctp: [Deprecated]: syz.2.3858 (pid 17813) Use of struct sctp_assoc_value in delayed_ack socket option. [ 523.697451][T17813] Use struct sctp_sack_info instead [ 523.822422][T17824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3860'. [ 523.858757][T17823] veth0_macvtap: left promiscuous mode [ 523.867789][T17823] macvtap0: entered allmulticast mode [ 523.898739][T17825] tipc: Cannot configure node identity twice [ 523.976885][T17727] hsr_slave_0: entered promiscuous mode [ 523.984233][T17727] hsr_slave_1: entered promiscuous mode [ 523.992115][T17727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 524.000510][T17727] Cannot create hsr debugfs directory [ 524.399949][T17839] vlan2: entered promiscuous mode [ 524.630856][ T5855] Bluetooth: hci19: command tx timeout [ 525.050738][T17727] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.134475][T17863] tipc: Enabled bearer , priority 0 [ 525.182682][T17859] tipc: Disabling bearer [ 525.342585][T17727] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.656466][T17617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.926797][T17727] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.168834][T17727] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.551770][T17886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3881'. [ 526.574128][T17878] sctp: [Deprecated]: syz.8.3879 (pid 17878) Use of struct sctp_assoc_value in delayed_ack socket option. [ 526.574128][T17878] Use struct sctp_sack_info instead [ 526.681124][T17617] veth0_vlan: entered promiscuous mode [ 526.693871][T17727] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 526.707033][ T5855] Bluetooth: hci19: command tx timeout [ 526.728190][T17727] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 526.775600][T17727] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 526.809827][T17727] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 526.830689][T17617] veth1_vlan: entered promiscuous mode [ 527.083909][T17617] veth0_macvtap: entered promiscuous mode [ 527.137404][T17617] veth1_macvtap: entered promiscuous mode [ 527.246622][T17617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.322443][T17617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.426794][T17727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.462510][ T1168] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.479898][ T1168] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.696051][ T1168] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.705982][ T1168] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.768311][T17727] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.803956][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.811165][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.990931][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.998130][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.192234][T17925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3892'. [ 528.276672][ T7392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.304443][ T7392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.493849][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.502943][T17727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 528.537934][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.710082][T17945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3899'. [ 528.733815][T17947] netlink: 'syz.3.3898': attribute type 1 has an invalid length. [ 528.758308][T17940] sctp: [Deprecated]: syz.8.3897 (pid 17940) Use of struct sctp_assoc_value in delayed_ack socket option. [ 528.758308][T17940] Use struct sctp_sack_info instead [ 528.788126][ T5855] Bluetooth: hci19: command tx timeout [ 529.110384][T17959] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3901'. [ 529.174441][T17947] bond6: entered promiscuous mode [ 529.180480][T17947] 8021q: adding VLAN 0 to HW filter on device bond6 [ 529.206281][T17950] bond6: (slave bridge7): making interface the new active one [ 529.214191][T17950] bridge7: entered promiscuous mode [ 529.220715][T17950] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 529.345059][T17959] bond1: entered promiscuous mode [ 529.350645][T17959] 8021q: adding VLAN 0 to HW filter on device bond1 [ 529.887420][T17959] bond1 (unregistering): Released all slaves [ 530.399591][T17994] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3909'. [ 530.617841][T17727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.788129][T17727] veth0_vlan: entered promiscuous mode [ 530.857462][T18008] netlink: 'syz.6.3914': attribute type 4 has an invalid length. [ 530.863070][T18005] tipc: Enabled bearer , priority 0 [ 530.887451][T17727] veth1_vlan: entered promiscuous mode [ 530.906523][T18004] tipc: Disabling bearer [ 531.017775][T17727] veth0_macvtap: entered promiscuous mode [ 531.077313][T17727] veth1_macvtap: entered promiscuous mode [ 531.160479][T17727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.218355][T17727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.250442][T18022] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3921'. [ 531.288833][ T7401] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.330718][ T7401] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.363253][ T7401] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.395721][T18021] tipc: Started in network mode [ 531.400663][T18021] tipc: Node identity aeebcc9eb7ba, cluster identity 4711 [ 531.419967][T18021] tipc: Enabled bearer , priority 0 [ 531.433684][ T7401] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.453625][T18024] syzkaller0: entered promiscuous mode [ 531.460066][T18024] syzkaller0: entered allmulticast mode [ 531.481188][T18026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3922'. [ 531.621362][T18026] bond7: entered promiscuous mode [ 531.631640][T18026] 8021q: adding VLAN 0 to HW filter on device bond7 [ 531.933809][T18026] bond7 (unregistering): Released all slaves [ 532.012348][T18018] tipc: Resetting bearer [ 532.093461][T18018] tipc: Disabling bearer [ 532.411795][ T7401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.453898][ T7401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.579304][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.615154][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.725911][T18043] sctp: [Deprecated]: syz.6.3928 (pid 18043) Use of struct sctp_assoc_value in delayed_ack socket option. [ 532.725911][T18043] Use struct sctp_sack_info instead [ 533.240291][T18058] sctp: [Deprecated]: syz.1.3827 (pid 18058) Use of struct sctp_assoc_value in delayed_ack socket option. [ 533.240291][T18058] Use struct sctp_sack_info instead [ 533.349402][T18070] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3934'. [ 533.590701][T18072] sctp: [Deprecated]: syz.6.3935 (pid 18072) Use of struct sctp_assoc_value in delayed_ack socket option. [ 533.590701][T18072] Use struct sctp_sack_info instead [ 534.078440][T18103] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3944'. [ 534.103166][T18103] 0·: renamed from hsr0 (while UP) [ 534.153996][T18103] 0·: entered allmulticast mode [ 534.166017][T18103] hsr_slave_0: entered allmulticast mode [ 534.182350][T18100] sctp: [Deprecated]: syz.6.3943 (pid 18100) Use of struct sctp_assoc_value in delayed_ack socket option. [ 534.182350][T18100] Use struct sctp_sack_info instead [ 534.205372][T18103] hsr_slave_1: entered allmulticast mode [ 534.221122][T18103] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 535.009203][T18134] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3955'. [ 535.145057][T18137] netlink: 'syz.6.3958': attribute type 6 has an invalid length. [ 535.224465][T18144] netlink: 'syz.6.3958': attribute type 21 has an invalid length. [ 535.529106][T18157] tipc: Enabled bearer , priority 0 [ 535.560198][T18156] tipc: Disabling bearer [ 535.590405][T18162] netlink: 'syz.6.3964': attribute type 74 has an invalid length. [ 535.638565][T18165] batadv_slave_1: entered promiscuous mode [ 535.661086][T18165] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3965'. [ 535.707276][T18164] batadv_slave_1: left promiscuous mode [ 536.347506][T18187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.400215][T18196] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 536.498607][T18203] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3979'. [ 536.821849][T18215] tipc: Started in network mode [ 536.856825][T18215] tipc: Node identity 86d4adb79b7c, cluster identity 4711 [ 536.881247][T18215] tipc: Enabled bearer , priority 0 [ 536.963178][T18207] tipc: Disabling bearer [ 537.543447][T18230] mac80211_hwsim hwsim50 wlan1: entered allmulticast mode [ 537.682056][T18230] bridge_slave_0: left allmulticast mode [ 537.703090][T18230] bridge_slave_0: left promiscuous mode [ 537.713769][T18230] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.731815][T18230] bridge_slave_1: left allmulticast mode [ 537.741340][T18230] bridge_slave_1: left promiscuous mode [ 537.792950][T18241] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3987'. [ 537.793545][T18230] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.869864][T18230] bond0: (slave bond_slave_0): Releasing backup interface [ 537.882763][T18246] netlink: 'syz.6.3984': attribute type 10 has an invalid length. [ 537.918981][T18230] bond0: (slave bond_slave_1): Releasing backup interface [ 537.969239][T18230] team0: Port device team_slave_0 removed [ 537.987065][T18230] team0: Port device team_slave_1 removed [ 538.002111][T18230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.010790][T18230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.028870][T18230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.045357][T18230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.205840][T18246] mac80211_hwsim hwsim50 wlan1: left allmulticast mode [ 538.223759][T18246] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 538.448129][T18257] delete_channel: no stack [ 538.608926][T18265] ipvlan2: entered promiscuous mode [ 538.618662][T18265] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 538.868386][T18275] tipc: Enabled bearer , priority 0 [ 538.919106][T18273] tipc: Disabling bearer [ 538.996834][T18285] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4000'. [ 539.157071][T18292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4001'. [ 539.275883][T18297] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4003'. [ 539.349038][T18227] Bluetooth: hci2: command 0x0406 tx timeout [ 539.355989][T18227] Bluetooth: hci3: command 0x0406 tx timeout [ 539.362990][T18227] Bluetooth: hci6: command 0x0406 tx timeout [ 539.369390][T18226] Bluetooth: hci7: command 0x0406 tx timeout [ 539.408660][T18297] bond1: entered promiscuous mode [ 539.440667][T18297] 8021q: adding VLAN 0 to HW filter on device bond1 [ 539.677013][T18301] sctp: [Deprecated]: syz.1.4005 (pid 18301) Use of struct sctp_assoc_value in delayed_ack socket option. [ 539.677013][T18301] Use struct sctp_sack_info instead [ 539.714512][T18313] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4008'. [ 539.839014][T18315] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4009'. [ 539.976230][T18297] bond1 (unregistering): Released all slaves [ 540.099836][T18319] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4011'. [ 540.132450][T18323] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4012'. [ 540.179099][ T1164] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 540.193720][ T1164] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 540.206492][ T5939] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 540.254091][T18319] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4011'. [ 540.284402][T18319] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4011'. [ 540.384257][T18332] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4015'. [ 540.618967][T18338] tipc: Started in network mode [ 540.645223][T18338] tipc: Node identity 027430d7c66, cluster identity 4711 [ 540.652466][T18338] tipc: Enabled bearer , priority 0 [ 540.741732][T18333] tipc: Disabling bearer [ 540.947383][ T5939] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 541.186165][ T5939] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 541.806732][T18377] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 542.429212][T18398] vlan2: entered promiscuous mode [ 542.871805][T18422] ipvlan2: entered promiscuous mode [ 543.028093][ T31] INFO: task syz.3.2962:14940 blocked for more than 143 seconds. [ 543.038503][ T31] Not tainted 6.16.0-rc7-syzkaller-01904-g9312ee76490d #0 [ 543.058145][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 543.087526][ T31] task:syz.3.2962 state:D stack:22808 pid:14940 tgid:14934 ppid:5845 task_flags:0x400140 flags:0x00004004 [ 543.104328][ T31] Call Trace: [ 543.108089][ T31] [ 543.111138][ T31] __schedule+0x16fd/0x4cf0 [ 543.116271][ T31] ? schedule+0x165/0x360 [ 543.120722][ T31] ? __lock_acquire+0xab9/0xd20 [ 543.126091][ T31] ? __pfx___schedule+0x10/0x10 [ 543.131076][ T31] ? schedule+0x91/0x360 [ 543.135980][ T31] schedule+0x165/0x360 [ 543.140289][ T31] schedule_timeout+0x9a/0x270 [ 543.145402][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 543.150947][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 543.163529][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 543.180298][ T31] ? wait_for_completion+0x267/0x5d0 [ 543.214255][ T31] wait_for_completion+0x2bf/0x5d0 [ 543.231432][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 543.245477][ T31] ? up_write+0x1c4/0x420 [ 543.254520][ T31] ? remove_client_context+0xc0/0x1e0 [ 543.267057][ T31] disable_device+0x1c6/0x320 [ 543.277469][ T31] ? __pfx_disable_device+0x10/0x10 [ 543.292884][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 543.305598][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 543.318630][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 543.331140][ T31] nldev_dellink+0x2d1/0x320 [ 543.340812][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 543.352339][ T31] ? rcu_is_watching+0x15/0xb0 [ 543.363213][ T31] ? apparmor_capable+0x137/0x1b0 [ 543.370687][ T31] ? bpf_lsm_capable+0x9/0x20 [ 543.385270][ T31] ? security_capable+0x7e/0x2e0 [ 543.404566][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 543.414534][ T31] rdma_nl_rcv+0x6ae/0x980 [ 543.419434][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 543.424504][ T31] ? __lock_acquire+0xab9/0xd20 [ 543.430015][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 543.454224][ T31] netlink_unicast+0x82f/0x9e0 [ 543.462667][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 543.469036][ T31] ? netlink_sendmsg+0x642/0xb30 [ 543.484379][ T31] ? skb_put+0x11b/0x210 [ 543.494254][ T31] netlink_sendmsg+0x805/0xb30 [ 543.506450][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 543.511863][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 543.519168][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 543.530078][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 543.542189][ T31] __sock_sendmsg+0x21c/0x270 [ 543.551815][ T31] ____sys_sendmsg+0x505/0x830 [ 543.562420][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 543.571500][ T31] ? import_iovec+0x74/0xa0 [ 543.581295][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 543.599956][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 543.616680][ T31] ? __fget_files+0x2a/0x420 [ 543.621323][ T31] ? __fget_files+0x3a0/0x420 [ 543.635483][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 543.645533][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 543.655696][ T31] ? rcu_is_watching+0x15/0xb0 [ 543.660547][ T31] ? do_syscall_64+0xbe/0x3b0 [ 543.681673][ T31] do_syscall_64+0xfa/0x3b0 [ 543.686557][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 543.691851][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.703526][ T31] ? clear_bhb_loop+0x60/0xb0 [ 543.708404][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.714454][ T31] RIP: 0033:0x7f37f918e9a9 [ 543.719422][ T31] RSP: 002b:00007f37f9f10038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.728988][ T31] RAX: ffffffffffffffda RBX: 00007f37f93b5fa0 RCX: 00007f37f918e9a9 [ 543.737686][ T31] RDX: 0000000020000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 543.746139][ T31] RBP: 00007f37f9210d69 R08: 0000000000000000 R09: 0000000000000000 [ 543.754369][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.763409][ T31] R13: 0000000000000000 R14: 00007f37f93b5fa0 R15: 00007fff3149e068 [ 543.772353][ T31] [ 543.782292][ T31] [ 543.782292][ T31] Showing all locks held in the system: [ 543.875889][ T31] 1 lock held by khungtaskd/31: [ 543.880773][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 543.905853][ T31] 5 locks held by kworker/u8:7/1164: [ 543.915462][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 543.935523][ T31] #1: ffff8880b8623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 543.947942][ T31] #2: ffff8880795b0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x460 [ 543.958951][ T31] #3: ffff8880b8725958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x4b3/0xf30 [ 543.968179][ T31] #4: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390 [ 543.978333][ T31] 2 locks held by getty/5614: [ 543.983297][ T31] #0: ffff88814bb920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 543.993838][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 544.007226][ T31] 3 locks held by kworker/u9:3/5851: [ 544.012638][ T31] #0: ffff888053c81148 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 544.024344][ T31] #1: ffffc900042dfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 544.037476][ T31] #2: ffff88805845cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 544.048090][ T31] 2 locks held by kworker/u8:11/7392: [ 544.053472][ T31] 4 locks held by kworker/u8:24/7406: [ 544.059836][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 544.071418][ T31] #1: ffffc90003e9fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 544.082851][ T31] #2: ffffffff8f512790 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 544.092824][ T31] #3: ffff8880558646d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 544.107361][ T31] 2 locks held by syz.3.2962/14940: [ 544.115878][ T31] #0: ffffffff99e7f938 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 544.136452][ T31] #1: ffff8880558646d0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 544.149131][ T31] 2 locks held by syz.4.2975/14977: [ 544.154351][ T31] #0: ffffffff8f512790 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 544.164349][ T31] #1: ffff8880558646d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 544.176270][ T31] 2 locks held by syz.1.2988/15018: [ 544.181458][ T31] #0: ffffffff8f512790 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 544.191448][ T31] #1: ffff8880558646d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 544.203582][ T31] 2 locks held by syz.0.3007/15086: [ 544.216517][ T31] #0: ffffffff8f512790 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 544.226672][ T31] #1: ffff8880558646d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 544.238552][ T31] 2 locks held by syz.5.3087/15426: [ 544.243755][ T31] #0: ffffffff8f512790 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 544.256794][ T31] #1: ffff8880558646d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 544.268750][ T31] 2 locks held by syz.7.3119/15541: [ 544.273956][ T31] #0: ffffffff8f512790 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 544.284248][ T31] #1: ffff8880558646d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 544.296121][ T31] 2 locks held by syz.2.3231/15847: [ 544.301330][ T31] #0: ffffffff8f512790 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 544.318992][ T31] #1: ffff8880558646d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 544.331891][ T31] 2 locks held by syz.8.3250/15907: [ 544.337611][ T31] #0: ffffffff8f512790 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 544.352166][ T31] #1: ffff8880558646d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 544.363922][ T31] 2 locks held by syz.6.3301/16091: [ 544.369717][ T31] #0: ffffffff8f512790 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 544.380038][ T31] #1: ffff8880558646d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 544.392240][ T31] 2 locks held by syz.1.3448/16536: [ 544.398376][ T31] #0: ffffffff8f512790 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 544.408646][ T31] #1: ffff8880558646d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 544.423648][ T31] 2 locks held by syz.9.3450/16544: [ 544.429610][ T31] #0: ffffffff8f512790 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 544.440031][ T31] #1: ffff8880558646d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 544.451955][ T31] 2 locks held by syz.0.3596/16946: [ 544.458051][ T31] #0: ffffffff8f512790 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 544.470250][ T31] #1: ffff8880558646d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 544.477952][T18223] Bluetooth: hci8: command 0x0406 tx timeout [ 544.482477][ T31] 2 locks held by syz.4.3629/17053: [ 544.493337][ T31] #0: ffffffff8f512790 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 544.503739][ T31] #1: ffff8880558646d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 544.518211][ T31] 2 locks held by syz.7.3690/17295: [ 544.523428][ T31] #0: ffffffff8f512790 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 544.533458][ T31] #1: ffff8880558646d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 544.546101][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 544.560577][ T31] 2 locks held by syz.5.3727/17419: [ 544.566540][ T31] #0: ffffffff8f512790 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 544.577476][ T31] #1: ffff8880558646d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 544.589668][ T31] 3 locks held by syz.8.4052/18429: [ 544.595477][ T31] #0: ffffffff8f512790 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 544.605346][ T31] #1: ffffffff8f51f5c8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 544.614463][ T31] #2: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 544.630613][ T31] 1 lock held by syz.3.4053/18436: [ 544.636689][ T31] #0: ffffffff8f51f5c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 544.646804][ T31] [ 544.652112][ T31] ============================================= [ 544.652112][ T31] [ 544.666176][ T31] NMI backtrace for cpu 1 [ 544.666195][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller-01904-g9312ee76490d #0 PREEMPT(full) [ 544.666216][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 544.666227][ T31] Call Trace: [ 544.666234][ T31] [ 544.666243][ T31] dump_stack_lvl+0x189/0x250 [ 544.666267][ T31] ? __wake_up_klogd+0xd9/0x110 [ 544.666293][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 544.666314][ T31] ? __pfx__printk+0x10/0x10 [ 544.666351][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 544.666380][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 544.666402][ T31] ? _printk+0xcf/0x120 [ 544.666429][ T31] ? __pfx__printk+0x10/0x10 [ 544.666454][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 544.666474][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 544.666502][ T31] watchdog+0xfee/0x1030 [ 544.666528][ T31] ? watchdog+0x1de/0x1030 [ 544.666554][ T31] kthread+0x70e/0x8a0 [ 544.666581][ T31] ? __pfx_watchdog+0x10/0x10 [ 544.666597][ T31] ? __pfx_kthread+0x10/0x10 [ 544.666622][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 544.666640][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 544.666657][ T31] ? __pfx_kthread+0x10/0x10 [ 544.666681][ T31] ret_from_fork+0x3fc/0x770 [ 544.666703][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 544.666728][ T31] ? __switch_to_asm+0x39/0x70 [ 544.666748][ T31] ? __switch_to_asm+0x33/0x70 [ 544.666768][ T31] ? __pfx_kthread+0x10/0x10 [ 544.666792][ T31] ret_from_fork_asm+0x1a/0x30 [ 544.666829][ T31] [ 544.666837][ T31] Sending NMI from CPU 1 to CPUs 0: [ 544.845510][ C0] NMI backtrace for cpu 0 [ 544.845529][ C0] CPU: 0 UID: 0 PID: 16 Comm: rcu_preempt Not tainted 6.16.0-rc7-syzkaller-01904-g9312ee76490d #0 PREEMPT(full) [ 544.845548][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 544.845559][ C0] RIP: 0010:__lock_acquire+0x56d/0xd20 [ 544.845581][ C0] Code: c8 b8 8d 48 c7 c6 56 30 a8 8d e8 ae d2 e5 ff 90 0f 0b 90 90 90 31 c9 48 8b 3c 24 0f b6 81 c4 00 00 00 84 c0 0f 84 68 ff ff ff <41> 0f b6 f4 0f b6 d0 40 38 c6 0f 42 d6 80 b9 c6 00 00 00 02 0f 84 [ 544.845596][ C0] RSP: 0018:ffffc90000157770 EFLAGS: 00000002 [ 544.845612][ C0] RAX: 0000000000000002 RBX: 0000000000000000 RCX: ffffffff9349d558 [ 544.845623][ C0] RDX: 0000000000000002 RSI: 0000000000000000 RDI: ffff88801d2cda00 [ 544.845634][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff84c691fb [ 544.845645][ C0] R10: ffffc90000157958 R11: fffff5200002af2d R12: ffffffffffffff05 [ 544.845658][ C0] R13: 0000000000000002 R14: ffff88801d2ce518 R15: ffff88801d2ce510 [ 544.845669][ C0] FS: 0000000000000000(0000) GS:ffff888125c12000(0000) knlGS:0000000000000000 [ 544.845683][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 544.845694][ C0] CR2: 00007f67aaf83178 CR3: 000000007581c000 CR4: 00000000003526f0 [ 544.845718][ C0] Call Trace: [ 544.845724][ C0] [ 544.845735][ C0] ? debug_object_activate+0xbb/0x420 [ 544.845757][ C0] lock_acquire+0x120/0x360 [ 544.845772][ C0] ? debug_object_activate+0xbb/0x420 [ 544.845798][ C0] _raw_spin_lock_irqsave+0xa7/0xf0 [ 544.845815][ C0] ? debug_object_activate+0xbb/0x420 [ 544.845835][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 544.845854][ C0] debug_object_activate+0xbb/0x420 [ 544.845878][ C0] __mod_timer+0xa4f/0xf30 [ 544.845904][ C0] schedule_timeout+0x126/0x270 [ 544.845924][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 544.845943][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 544.845958][ C0] ? __pfx_process_timeout+0x10/0x10 [ 544.845979][ C0] ? prepare_to_swait_event+0x341/0x380 [ 544.846002][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 544.846023][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 544.846039][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 544.846054][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 544.846071][ C0] ? finish_swait+0xcd/0x1f0 [ 544.846091][ C0] rcu_gp_kthread+0x99/0x390 [ 544.846107][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 544.846122][ C0] ? __kthread_parkme+0x7b/0x200 [ 544.846140][ C0] ? __kthread_parkme+0x1a1/0x200 [ 544.846160][ C0] kthread+0x70e/0x8a0 [ 544.846180][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 544.846195][ C0] ? __pfx_kthread+0x10/0x10 [ 544.846214][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 544.846228][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 544.846244][ C0] ? __pfx_kthread+0x10/0x10 [ 544.846263][ C0] ret_from_fork+0x3fc/0x770 [ 544.846280][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 544.846298][ C0] ? __switch_to_asm+0x39/0x70 [ 544.846316][ C0] ? __switch_to_asm+0x33/0x70 [ 544.846333][ C0] ? __pfx_kthread+0x10/0x10 [ 544.846351][ C0] ret_from_fork_asm+0x1a/0x30 [ 544.846376][ C0] [ 544.862151][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 544.862173][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc7-syzkaller-01904-g9312ee76490d #0 PREEMPT(full) [ 544.862197][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 544.862209][ T31] Call Trace: [ 544.862218][ T31] [ 544.862227][ T31] dump_stack_lvl+0x99/0x250 [ 544.862253][ T31] ? __asan_memcpy+0x40/0x70 [ 544.862276][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 544.862298][ T31] ? __pfx__printk+0x10/0x10 [ 544.862334][ T31] panic+0x2db/0x790 [ 544.862359][ T31] ? __pfx_panic+0x10/0x10 [ 544.862379][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 544.862405][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 544.862432][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 544.862473][ T31] watchdog+0x102d/0x1030 [ 544.862494][ T31] ? watchdog+0x1de/0x1030 [ 544.862519][ T31] kthread+0x70e/0x8a0 [ 544.862547][ T31] ? __pfx_watchdog+0x10/0x10 [ 544.862563][ T31] ? __pfx_kthread+0x10/0x10 [ 544.862589][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 544.862608][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 544.862626][ T31] ? __pfx_kthread+0x10/0x10 [ 544.862650][ T31] ret_from_fork+0x3fc/0x770 [ 544.862672][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 544.862697][ T31] ? __switch_to_asm+0x39/0x70 [ 544.862719][ T31] ? __switch_to_asm+0x33/0x70 [ 544.862740][ T31] ? __pfx_kthread+0x10/0x10 [ 544.862764][ T31] ret_from_fork_asm+0x1a/0x30 [ 544.862801][ T31] [ 545.302964][ T31] Kernel Offset: disabled [ 545.307277][ T31] Rebooting in 86400 seconds..