last executing test programs: 2m16.26243496s ago: executing program 32 (id=1036): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@getsa={0x3c, 0x12, 0x1, 0x70bd29, 0x25dfdbfb, {@in=@private=0xa010100, 0x4d3, 0x2, 0x3c}, [@srcaddr={0x14, 0xd, @in=@remote}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000191c0)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="0000000002"], 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 2m4.385116656s ago: executing program 33 (id=1252): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async, rerun: 64) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) (rerun: 64) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000100)={@default, @default, @null, 0x63, 0xffffffffffff0001, 0x0, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001d000100000000", @ANYRES32=r5, @ANYBLOB="1000c0041400010000000000000000000000ffffe0000001"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000001000ffff27bd7000fedbdf25eeff0000", @ANYRES32=0x0, @ANYBLOB="15010000000000002800128009000100766c616e000000001800028006000100040000000c000200110000001300000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="0a000100aaaaaaaaaa"], 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) (async, rerun: 64) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x4000000000000, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r10 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000440)=0x10, 0x80000) preadv(r10, &(0x7f0000000900)=[{&(0x7f0000000680)=""/235, 0xeb}, {&(0x7f0000000780)=""/253, 0xfd}, {&(0x7f0000000480)=""/10, 0xa}, {&(0x7f0000000880)=""/81, 0x51}], 0x4, 0x0, 0x3) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0xb8}}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x300, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) (async) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) getpeername$unix(r8, &(0x7f00000002c0), &(0x7f0000000340)=0x6e) (async, rerun: 32) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f00000000c0)={'wlan1\x00', 0x2000}) (rerun: 32) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40404}, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (rerun: 32) r14 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newtaction={0x124, 0x30, 0x51b, 0x0, 0x0, {}, [{0x110, 0x1, [@m_skbmod={0x10c, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5a, 0x4}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xe}]}, {0xa7, 0x14, "3b7f3f98b3ddc606902d25c55ca4e235f97d1477d8e6b5efa545df6a6a382db541c3625d4cb96347eaa5b07cbe5b6789165a471bcc6e158a3d5fcc0f7a83757857f15d0fdd827a1f6979f7d522e473c062d4fea18fa9b6c0cfb6f6ec7ea085634bbdc7d0865cc2f51d2cec81178a5986a1790e10ca9ad7924e49549bd207f636db221ec80958aa8eeef44803d2adf0bcb9f46781773ffddbe0dd8842f4df2923ab7ca8"}, {0xc}, {0xc, 0x6}}}]}]}, 0x124}}, 0x0) 2m1.215041975s ago: executing program 34 (id=1167): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x40, 0x0, 0x10, 0x70bd29, 0x25dfdc01, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) (async) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) r3 = socket(0x10, 0x3, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 32) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) write$tun(r5, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x1) (rerun: 64) unshare(0x2c060000) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 32) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async, rerun: 32) socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="140000000000002951000000070000000702000000000000"], 0x18}, 0x20002800) (async, rerun: 32) r8 = socket(0x2a, 0x2, 0x0) (rerun: 32) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 2m0.175509327s ago: executing program 35 (id=1173): unshare(0x6a040000) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x70) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095", @ANYRES64=0x0, @ANYRES8, @ANYRES8=0x0], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8004}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea0900bce100000000009ba56a", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000002180)=[{&(0x7f0000000b80)="2eec711f70abb5a31ead08c7571d8dbe3513461cdae3e277bb4a0c321145a64f7d3038a91ff1feab2bfbe7d0ce8dcfa4f107ccf32e039663002f9e38a82711255bc508d495b07b09ec17922ccdcbb5f84bc3efb04a84fac3f7ad1b0f3a012ff312c13292a08fb5b5d28ffbbf060f7f9d5cc4d3", 0x73}, {&(0x7f0000000c00)="7cf2c3eb81af2d4a17e32b07f1e5774d91f558979e6b7c3f8f15cb5f0b3ca18202d1ddee09f26e2b34519623fea7b40188deace7a6b05bd2cf9e4203b034aaee2162f52c7b361902847e03f3454bcf3b107febde557e59bd9dcaa80a97e2d1c2520c289ca8e296a2c53ff0bec2930dfd0a238475c3ff115beeee9cd90ee6d2b83df025bc7d69438990ee3316174f0c6b31ae3ddcab1bb6493d8544521f2da302277f2da5c07dceafd74d5cd6c3de3e90af65d68dc58ae4c34d8ec9c6dfd8f96db8902894cb87f139ff5855d533e4010854587d", 0xd3}, {&(0x7f0000000d00)="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", 0xeba}], 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0x14, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRESHEX=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001849000002000000000000000000000018490000fdffffff00000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x61, &(0x7f0000000240)=""/97, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000009c0), 0x10, 0x4001}, 0x94) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r4) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01000600e81a0ab6df251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) bind$alg(r2, &(0x7f00000010c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = socket$inet(0x2, 0x1, 0x1) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000500)='cubic', 0x9) sendmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03c00e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000440)="addbecc8f7b208308a885c89ede411d6cb557c84", 0x14}], 0x2}, 0x4000000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000140)={0x0, @aes128, 0x0, @desc4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) 1m49.880013246s ago: executing program 36 (id=1250): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r2, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/56, 0x38}}], 0x1, 0x12141, 0x0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x94) 1m37.556399311s ago: executing program 37 (id=1301): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x6a040000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r1, 0x29, 0x4b, 0x0, &(0x7f0000000340)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001680)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa4}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x804) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x600) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$kcm(0x29, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000001c0)='cubic', 0x3) sendmmsg$inet(r5, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x999}], 0x1}}], 0x1, 0x40) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r5, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x90, r8, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x67}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0xf8}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fdc1af04068870a8c112812e4a9cb79bc9760f5f494a3bd7"}]]}, 0x90}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000100)=@raw=[@exit], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x24bba, r0}, 0x90) 1m21.740849654s ago: executing program 38 (id=1411): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x9d, "44b49d4505bc3e0e83b4427580addf1cf96d8fa1ffa2f381754a01e082ff4ba7871662ff07eea0a08e9cd448b8867ee2b89ab8b147152cdfe88a8c87bc9d8479df22ced40d384f25922c88888564ea17801c47e942b5181490dd2c401f4000dde15c7bf897e478cf1971c65d491bcae0b3d07b9624763ee42e0deca8c61b57513ba9297874bceec7ef5039b72a711e364b466bd56612f3f9fbf8b3498c"}, &(0x7f0000000100)=0xa5) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x19}, 0x2}}}, 0x84) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x2e0, 0x100, 0xffffffff, 0x0, 0x100, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, &(0x7f00000002c0), {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, [0xff000000, 0xff000000, 0xffffff00, 0xffffffff], [0xff, 0xffffffff, 0xffffffff, 0xff], 'bond_slave_1\x00', 'ip6gretap0\x00', {}, {}, 0x67, 0x5, 0x2, 0xe}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x3, 0x4], 0x0, 0x4, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xc}}}, {{@ipv6={@remote, @empty, [0x0, 0xff, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0xff000000, 0xff000000], 'veth1_vlan\x00', 'wg1\x00', {0xff}, {0xff}, 0x0, 0x6, 0x2, 0x20}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x1f, @ipv4=@dev={0xac, 0x14, 0x14, 0x3e}, @ipv4=@rand_addr=0x64010100, @port=0x4e23, @icmp_id=0x68}}}, {{@ipv6={@empty, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xffffffff, 0xff000000, 0xffffff00], [], 'veth1_virt_wifi\x00', 'hsr0\x00', {}, {0xff}, 0x33, 0x83, 0x4, 0x42}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x2d, @ipv4=@multicast2, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @port=0x4e22, @gre_key=0xffff}}}, {{@ipv6={@empty, @private2, [0xff000000, 0xffffffff, 0xff000000, 0xff], [0xff000000, 0xff000000, 0xff000000, 0xffffffff], 'veth0_to_hsr\x00', 'team_slave_1\x00', {}, {0xff}, 0x86, 0x2a, 0x4}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x5, 0x2, 0x0, [0x8, 0x3, 0x1, 0xffff, 0xffff, 0x2, 0xab8, 0xaa, 0x5, 0x4, 0x0, 0x8, 0x4, 0x3, 0x7bf9, 0x7], 0x7}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @gre_key=0x6, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) (async) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000008c0)=0x9, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={r0, 0xe0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x1a, &(0x7f0000001a80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001ac0), &(0x7f0000001b00), 0x8, 0xbc, 0x8, 0x8, &(0x7f0000001b40)}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001e80)={r0, 0x20, &(0x7f0000001e40)={&(0x7f0000001d40)=""/138, 0x8a, 0x0, &(0x7f0000001e00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0xc, 0x10, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='syzkaller\x00', 0x9, 0x1000, &(0x7f00000009c0)=""/4096, 0x41100, 0x4, '\x00', r4, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000001cc0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001d00)={0x4, 0x0, 0x5, 0x4}, 0x10, r5, 0xffffffffffffffff, 0x6, &(0x7f0000001ec0)=[r1, r3], &(0x7f0000001f00)=[{0x2, 0x3, 0x4, 0x2}, {0x3, 0x3, 0x0, 0xc}, {0x1, 0x5, 0x9, 0x1}, {0x3, 0x3, 0x10, 0x5}, {0x4, 0x4, 0x1, 0x9}, {0x1, 0x5, 0xe, 0xb}], 0x10, 0xbc31}, 0x94) (async) unshare(0x40000000) (async) connect$bt_sco(r1, &(0x7f0000002040)={0x1f, @none}, 0x8) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002240)={&(0x7f0000002080)="7957ac4df1542bda6933d468dede3c869ec9f842a89fb1fac72f16", &(0x7f00000020c0)=""/110, &(0x7f0000002140)="68fbfebb1e4bf45224f3159850fec724e88ac21eddeb788384816d11170e41d95ef5fab33183c576261b457c58a09cd4363a5f8b93c709f510500a33b39772f97aabad217755c256ab70d6621e3eb6c315d52bb04839125ad78f347d8246c8856ad5323e247fff19e4690abbbed947f98e89a4eedd173a27dd8da4f3818f0ed50ccb14c03c420a2339e04201474c10a7ab70adc63706b364e0dbdd0371a426e670d56e59b658d845627ab61e89076f", &(0x7f0000002200)="aab68f1ff3a385390021b9389ad9e8a33acf8742dea83c41b8f44b3a48518db6233c09", 0x0, r0, 0x4}, 0x38) (async) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000002280)=""/216, &(0x7f0000002380)=0xd8) socketpair(0x8, 0xa, 0x8, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$l2tp6(r6, &(0x7f0000002400)=""/27, 0x1b, 0x1, 0x0, 0x0) connect$l2tp6(r7, &(0x7f0000002440)={0xa, 0x0, 0x4, @local, 0x6, 0x1}, 0x20) (async) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000002480)={r4, 0x1, 0x6, @remote}, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), r7) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x28, r8, 0x0, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4050) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000002600)={r2, 0x1000}, &(0x7f0000002640)=0x8) (async) unshare(0x20200) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000002680), &(0x7f00000026c0)=0x14) r9 = getpid() syz_open_procfs$namespace(r9, &(0x7f0000002700)='ns/uts\x00') (async) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCSPGRP(r10, 0x8902, &(0x7f0000002740)=r9) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f00000027c0), r7) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f00000028c0)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002880)={&(0x7f0000002800)={0x54, r11, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r7}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x54}}, 0x48000) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002940), r7) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000002bc0)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002980)={0x1c4, r12, 0x8, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7000000, @mcast2, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "61d3b0095e4233cb090cf03f6e13308b28dabb101c09796aee9aaad8"}}, @TIPC_NLA_NODE_ID={0x22, 0x3, "ef8c0c4132b21ef679c3c6c4fecbf614e3a982c731436c9abbfe1974e0a5"}, @TIPC_NLA_NODE_ID={0x64, 0x3, "d121da72ed89c5423b1ed3819b247828057dda53e2c109d544ed119c4d66cb06700e098149094cfb5ea136e0a5bbc0bba584ab517bc126b4e645d018741f3f302e7575a598c47b96d9ccc2c99d19f7d939d6ce5f8dc6949522021b91651aeae0"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1d1a0ca}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20000}, 0x24044801) 1m19.483965478s ago: executing program 39 (id=1421): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00', r0}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) unshare(0x6020480) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB='&'], 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd700021dcdf10270000000c00018008000100", @ANYRES32, @ANYBLOB="180001801400020064756d6d7930"], 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r8 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000003c0)={&(0x7f0000000200)=@vsock, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)="6d4f9f98db2b5ad9ff0c302bc60d39948df1abb48430658890ad5dbf79d7bfab5795881858963b490884945643801ce1949a12c7f45745872e3fc4087244d6bf5406e9a9e47537cf1417c631c08ba0ed21734479c112bc2f782da8a8a10af6250ef5b084a959aac75987797620b41025e4abae05795fa5a09357393c4bffe423cefd4f", 0x83}], 0x1, &(0x7f0000000580)=[{0x18, 0x103, 0x10001, "f43c3f"}, {0xe0, 0xe0, 0x9, "ac722193f94382e9dc9bd68d8770af27a7923468bb06edfebf670448fc385f7102bce72c541bf7086afd0c8b1aaa733f5588accfcc4d2087883250f5ef38522ef61554b0b1ebf0b68b3e6de0c2dfcade6b5d57d330721d2345753f7f5d5b9a1c10b99c30f8df8fdb3cd2781d2882f80caae9f322119ecc89843f6cc8934a6bc110a3a3456a7144b81fbf75f6d612c0723aac36e593d7480ad60535dfb4ff428516a04ee10ef3898f66ca5c0857c58e4887f7738662dae8922b601fb145093f11f31326c49dbfbfbc4c068cd5d9"}], 0xf8}, 0x4000090) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) unshare(0x6a040000) 1m19.437304975s ago: executing program 40 (id=1422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) unshare(0x6a000600) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="850000800c00646c24c6e7a304c93d6042fb30a83d562f0d88617ee4b73a4203"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000400)="2cc78452a851dbd9335889877ba1da600efbaceb6797659c75a98ddc01fc3415d6ea742b1a89dcdc3b3bb97b46ddd25bb4565436a58b6cf828e523a350c9fe8261aed45391528bc076f58b9dedf1c2527f37aa4b78e1c735808b097dccd24517245e564cd0934afb6c81ce88e0cae8c82db0adb5", 0x10f0, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000800)="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", 0x16c5, r7, 0x4}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'vlan1\x00'}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=ANY=[@ANYRES8=r4, @ANYRES32=0x0, @ANYBLOB="77270500008002002c00128009000100766c616e000000001c00028006000100000000001000048005214c43e22e29dd7c80000008000500", @ANYBLOB="bee97145b7d619f1f0c42d079c4c3f4ca17355893f6434ee50d9ef6554bb68a96313f85ead4238aaaf879bfe3579be60ca3dc34046778bf04ed815bcfbfdd42305dd4c8be4fa2578463faf3390a3e4b8ae1413c9ef566c642c3355e67e663123146e20df04e6336c11662f928137463fc5d233f528c8c6a3e57269345ecb130dabff990429d7f56b0bf5f974e7a8b7c8c7b5a15214ba767bad4ca5729297a1134bd01feb6ac1676a5f8a06c7a7126b5891f6cbe1b5ba1e16bacd07309ccc9080ec295ef805549ef1f99b46939ef3f8", @ANYBLOB="16d9ad0c10318066b2dbb7ff2e4d738043614da0d4bfa5c07262a24fe6fb93f3a3c288356a31d88a060002e069c5bea054a58b"], 0x54}}, 0xc000) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r3], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x8001}, 0x18) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20000}, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$can_raw(r6, 0x0, 0x20) shutdown(0xffffffffffffffff, 0x1) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000000940)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002bbd7000fddbdf251100000008000300efa9e1d8c6a805a2e4eb1f0d436b063f00b80355219e4d2f878e4a1d6f0df00fcd1a84360d6e61f78dc2cdfac87cf7f1a2edf012afcb1e10a42906bc87aeeb2200a2df454cb99d9edf36d8f0d9dca63f3237aa9a57140808d4bc17768d502140c305430a9286e1bbe00dac74c2e5f95fa454a725c6cf3ae90278d7f2349fc04d", @ANYRES32=0x0, @ANYBLOB="050019000000000018001300a42412e0800360806c608185920336c8861b82b6"], 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) 1m14.882010374s ago: executing program 0 (id=1515): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket(0x10, 0x803, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20002000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0) 1m14.768393427s ago: executing program 0 (id=1517): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000020603edffffffffffffff0005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008810}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x6a040200) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000010) write$tun(0xffffffffffffffff, 0x0, 0x3e) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r4, &(0x7f0000000100), 0x0) sendmmsg$inet(r4, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x40800) shutdown(r4, 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in={0x2, 0x4e22, @multicast2}], 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="600007009921daa2f63432e75d5ef55491761788e72f44e5eb4436492ccfba6e40beb7de8b3b55c6cfe2341cad63aa2dde9afac21d97933933bec9e3d705e7ccdfbc837088ae74718cd247644c9f8b4f62914f19a0ea1f462550a98c583e33b14c368cc66fe9f6cf4ddfd1d46fc25b29467db82c46059238067bdc94688c6201b98b11917d4944647fea3740d82ecfd382344ddd6e703732936504183994afdfbab2b424dd51b726ca55ec229066", @ANYRES16=r7, @ANYBLOB="050427bd7000fedbdf", @ANYRES32=r8, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040008000000080007000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\f'], 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1m3.155688074s ago: executing program 4 (id=1602): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x5) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x10000000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x8102, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r4, 0x521, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x78, r4, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x585f}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xe, 0x0, 0x4]}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000000}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7ff}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000850}, 0x40000) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)=0x3) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x80, 0x700, 0xc, 0x3, {{0x46, 0x4, 0x0, 0x0, 0x118, 0x64, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp_addr={0x44, 0x14, 0x70, 0x1, 0x7, [{@local, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @timestamp_prespec={0x44, 0x44, 0xce, 0x3, 0x9, [{@empty, 0x10000}, {@multicast2, 0x3}, {@broadcast, 0x3}, {@loopback, 0x2}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x4}, {@local, 0x200}, {@rand_addr=0x64010102, 0x9}, {@dev={0xac, 0x14, 0x14, 0x34}}]}, @timestamp_addr={0x44, 0xc, 0x76, 0x1, 0x1, [{@private=0xa010101}]}, @timestamp_addr={0x44, 0x24, 0x54, 0x1, 0x8, [{@broadcast}, {@local, 0x8}, {@local, 0x3}, {@remote, 0x6}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x72, 0xffffffffffffffff, [{0x5, 0x6, "1417d42e"}, {0x4, 0x11, "0b62093aedd6e65ebdaf3e3e91b2de"}, {0x2, 0x5, "86a3b6"}, {0x6, 0xb, "ff54db19ca6a51ed3d"}, {0x2, 0xb, "38255b5239e23cf64d"}, {0x2, 0xc, "89cb457462b69057b001"}, {0x0, 0x12, "c2d9f6f9414631cf727cec44b1b2a598"}, {0x5, 0x12, "9090df08eac0bd57c9e166f5fe9d74b1"}, {0x0, 0xa, "a04c5b877a665fd2"}]}, @ra={0x94, 0x4}]}}}}}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r5}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x42) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x2160) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r11) syz_init_net_socket$x25(0x9, 0x5, 0x0) close(0x3) 1m2.835823947s ago: executing program 4 (id=1604): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x1, 0x2}, 0x2) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e22, 0x7fff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, {0xa, 0x4e24, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0xffffffffffffffff, {[0x5, 0x7, 0x7, 0x52, 0x4, 0x144, 0x6, 0x1ff]}}, 0x5c) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000280)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r3}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r4, 0x120, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffff8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4801) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000980)={&(0x7f0000000440), 0xc, &(0x7f0000000940)={&(0x7f0000000480)=@newtaction={0x4b4, 0x30, 0x2, 0x70bd29, 0x25dfdbfd, {}, [{0x4a0, 0x1, [@m_vlan={0x104, 0x20, 0x0, 0x0, {{0x9}, {0xa8, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0xd32, 0x10000000, 0x8, 0x2}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x286}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x30, 0x8, 0x1, 0x800, 0xfffffff9}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x8, 0x1, 0x1, 0x9}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0xa, 0x6, 0x9, 0x3}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6f, 0x1, 0x9edea6baee7595b1, 0x7, 0x6}, 0x1}}]}, {0x34, 0x6, "1de815394358b47c432d2f55a917ab8800c4968a9abb7835fe4ffd8e6ef05fe904fae892529655bc28baba9f52c18107"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x88, 0xa, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xbf7b, 0xfffffffe, 0x2, 0x0, 0xffffff81}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x20, 0x2, 0x6, 0x6, 0x5}}]}, {0x2a, 0x6, "54632c749918688c71f4ddcc86aefebf4bee07c3c94e12d9cbe145cc9a4089a5c290dedfd763"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x68, 0x1e, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}]}, {0x13, 0x6, "dacf61fcec1d78dad520c8b3cc004d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_connmark={0x58, 0x6, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5c0c0, 0x4a32, 0x6, 0x8, 0x4}, 0x1}}]}, {0x9, 0x6, "1fe5d870d1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x13c, 0x6, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb, 0x3, 0x5, 0x5, 0x6}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff8, 0xfff9}}]}, {0xed, 0x6, "6a449fcfacb8e45e37bbaa927ad31dcff5ac693c5cebb1b9bcaaebe516af9acebe1894ed0b5d9b10f8fe422ab62d6f45c49fb54e2d464491abb4be5ad671af65d624bd6e8a25fcb910bace2606ed401b3b27d89d478884f94e993025b6c7146bafa73edf17868c749e167c41ccd20fd2950576cec45c6dc071f18e1cdd95d0b3cf0a8a141bb3cb415bce3bfb0aaa695d5318c5ed429d7a60b18d3b6c7ff18a9d56e60c210da1c715f92d476f588a4841b454cdec04d3d90b41f4535749dcc0b0340270677197a5de5697541899d413d75bceefcd0e75186051b2b010ef56977ee3713bed3dec2e914e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x114, 0x19, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6}, @TCA_CT_LABELS={0x14, 0x7, "78659dcf838c7bc7f11c559adb98c33a"}]}, {0xd0, 0x6, "b0576bf290fda8b848b8e4289bc5df145407546b7b16ba47f4ea8a3bf7ed703a8a73c1e82d04845ac0aaaa2cc3068021d0f085cd8827defbedfb9144247d9c2b29f01cc668e3a5b629035cf18d7695599b67cfbc4ac0d1395de2c9af657ae36a8cd41489584555a5ce8f9fa17dbd4163ebfeff929a9b31d085319b1aafcecff7594541f959c712e1309067268cc49f4ca5060fedb7c31dfb3f4862243dc78b06ee3a0be106847e1893fa3a719baff4366e711e6a97df429c407097bf7780a5d19214a150f7f71348c7849a73"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x4800}, 0x44044) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000009c0)) getpeername(r2, &(0x7f0000000a00)=@alg, &(0x7f0000000a80)=0x80) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000c80)={0x1, 0x1, 0x1000, 0xbf, &(0x7f0000000ac0)="7e57778f9f5695ff626cd389ad2fb96e3e8e96bbbaaad81188f9c63ae81a089299d3256fc7fba7dca4db9d2c13847aa59642e8c3b9ee6cd304096745e4ce577e4b43e6eacbc6791b04c9e7e44c99c2bf52f9e4f1e042588fe55684cde358769a94e5f102256d9d5b88fbb96578007cd3a0b3cbf3186caf52e23fd22f96d91c028f2882f04e523689f191b0ce22aba6045e3326dec77dcc988d4698a70dcf9867509e900838ee40260ca15729576b32838cad26ee7328596fb490830e7420fc", 0xdd, 0x0, &(0x7f0000000b80)="7d1e27821cdbd217797a51a70c1f6f30a366a5088b053bd5f80ab6987cf3dffc9e5a12453af340bd260e16a86b354d903e40822473c8f3469dfb11329846eddc1ad4dc55e92b4512b9dcc007e24df6f6bd155f23e311c75389282488c87ca8aaa62899d040e6dd3951312d7918b14be18b0a9763c087f0f8e2f1988e9a34ec8a2d73ffb0dbdd0e8f7d292d12d2dcd90ced90168ecdfa3dd5b96db2d5c0a1bb3ff5763604bff5bb0f46a1944b3b1b51bee84df4b3e432b423638822c2c04d0dfe9595a37ee793bc6e13e6b9ee1f72a75eb82292cb0f78eddc90b060bd47"}) r6 = accept(r2, 0x0, &(0x7f0000000d00)) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000d80)={0x0, @loopback, @multicast1}, &(0x7f0000000dc0)=0xc) ioctl$sock_x25_SIOCADDRT(r6, 0x890b, &(0x7f0000001100)={@null, 0xf, 'geneve0\x00'}) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001340)=@assoc_value={0x0, 0x1}, 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001380)={{{@in6=@private0, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000001480)=0xe8) socket$netlink(0x10, 0x3, 0xf) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001540)={@local, @multicast1}, 0xc) 1m2.785487929s ago: executing program 4 (id=1605): r0 = socket(0x10, 0x803, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100ff03850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x8000000000000000}, 0x18) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff7, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x6, 0x6}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xb}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)={0x118, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x4}, @generic="0926b3eb9e87f8c8b3a6caa09a1a38d124a173def80bde05b592a5f49cb8056fef80a90fc8c487e1b6004db5feaf0d98b43fc34265f6f01ce7fed79fa135fe637b9fdc8c89e7777e70aecc0b9c372af84eb990d7d32d6c563a42d4889ed3925ac319f32db2703ff85c5b143715d335c94f3fd06ba27da8f5fe0788f669730c4358c2be63e25072bf9e", @typed={0x8, 0x96, 0x0, 0x0, @fd=r9}, @nested={0x59, 0x7a, 0x0, 0x1, [@typed={0x8, 0x64, 0x0, 0x0, @fd}, @generic="741194f25eec40f4e2ba2a00d51d6b66e9d985c86f6af8d238212a3fde4b46e23817e54664da29c4693e5eb2b5492c0a116d51211a8c40bf30dcd91e7d481e5a467f1ef9da", @typed={0x8, 0x108, 0x0, 0x0, @u32=0x180000}]}, @typed={0x8, 0xc3, 0x0, 0x0, @fd}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x20000080}, 0x0) 1m2.328504435s ago: executing program 4 (id=1606): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000002ac0)=[@in6={0xa, 0x4e24, 0xa, @local, 0x9}]}, &(0x7f0000000080)=0x10) getpeername$packet(r1, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) 1m1.438321189s ago: executing program 4 (id=1614): syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0xfffc, 0x1, 0x0, 0x2f, 0x0, @multicast2, @local, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@local}, {}, {@multicast1}, {@local}, {@local}, {@multicast1}, {@empty}]}]}}}}}}}, 0x0) 1m1.290520525s ago: executing program 4 (id=1616): socket(0x28, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x1e, 0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x29, 0x9, 0x8, 0x800, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x10, 0x0, 0xe7, 0x2}}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0xe78, 0x2}, &(0x7f0000000200)=0x8) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x80000) setsockopt(r9, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x19, 0x4, 0x1, 0x1, 0x64, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @loopback]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @ra={0x94, 0x4}]}}}}}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8010, 0xffffffffffffffff, 0xfffff000) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8) 59.062076083s ago: executing program 41 (id=1517): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000020603edffffffffffffff0005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008810}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x6a040200) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000010) write$tun(0xffffffffffffffff, 0x0, 0x3e) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r4, &(0x7f0000000100), 0x0) sendmmsg$inet(r4, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x40800) shutdown(r4, 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in={0x2, 0x4e22, @multicast2}], 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="600007009921daa2f63432e75d5ef55491761788e72f44e5eb4436492ccfba6e40beb7de8b3b55c6cfe2341cad63aa2dde9afac21d97933933bec9e3d705e7ccdfbc837088ae74718cd247644c9f8b4f62914f19a0ea1f462550a98c583e33b14c368cc66fe9f6cf4ddfd1d46fc25b29467db82c46059238067bdc94688c6201b98b11917d4944647fea3740d82ecfd382344ddd6e703732936504183994afdfbab2b424dd51b726ca55ec229066", @ANYRES16=r7, @ANYBLOB="050427bd7000fedbdf", @ANYRES32=r8, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040008000000080007000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\f'], 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 57.065360441s ago: executing program 42 (id=1528): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) unshare(0x4000400) getpeername(r1, &(0x7f0000000040)=@xdp, &(0x7f00000000c0)=0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a060000) (async) syz_init_net_socket$ax25(0x3, 0x6, 0xc4) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) (async) listen(r4, 0x0) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) connect(r3, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000280001801400040000000200000000000000ffffac1414aa060001000a00800008"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 50.197818879s ago: executing program 5 (id=1689): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket(0x10, 0x803, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000024010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0) 49.982457195s ago: executing program 5 (id=1691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x29, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15946395916e2b388abc3d6ce2316334e"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x7}, 0x4) getpeername(r1, &(0x7f0000000080)=@ethernet={0x0, @remote}, &(0x7f0000000100)=0x80) 49.277296758s ago: executing program 5 (id=1692): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xec, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8000000000000001}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x71, 0xa8, @random="8d1c6c193c4e37a18616bec481780a1dd74b765267b6e3cd0d2536606c724df012e795dc1bdb95625beb2544b92a020bbf07ba33a1a7fd234fd8212e86c956adf9f640291dde54bf126c712cd272fcee5408b85861f1328d37c76be936b508f2146cdf460b6fd7b87957479954"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7fffffffffffffff}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x81}]}, 0xec}, 0x1, 0x0, 0x0, 0x20010804}, 0x20004000) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000340)={0x368, r3, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x81, @dev={0xfe, 0x80, '\x00', 0x24}, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_virt_wifi\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x494, @dev={0xfe, 0x80, '\x00', 0x35}, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf9d}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_LINK={0x170, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffc01}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8f5b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xef6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2f3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff801}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9c7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc450}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pimreg1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x10000, @mcast2, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x6, @local, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6b, @dev={0xfe, 0x80, '\x00', 0x20}, 0xc51}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @remote, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}]}, 0x368}, 0x1, 0x0, 0x0, 0x8800}, 0x4008800) unshare(0x34040200) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000780)=0x0) sendmsg$nl_generic(r5, &(0x7f0000000a00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000007c0)={0x1d0, 0x2a, 0x10, 0x70bd28, 0x25dfdbfb, {0x20}, [@generic="8dc72a5bbb81264047cd4a4747fd58fce1652c941a2abe683215b30ef1a46a583c3c626f7f9ff5b9364fc2b47eb019305b52a3b896d45aa4373a0000696c149ddd88daeacb46c2966a0cb46f78e7dd42d64ec984aad09a81cae03993c2a35e67491f39618dc7323e6f3b115c49c608cd8e54e33450d94e32c099ba9631", @typed={0x8, 0x13b, 0x0, 0x0, @u32=0x9}, @nested={0x12b, 0x8e, 0x0, 0x1, [@typed={0x4, 0x11b}, @generic="bbdc18d3ddd1c3a13eee67d77fb8c12ad09329ce742e4fbb9c685fb1f54959333b8e8e6374da2e6a6ea7c318e999aef56d5607ae60bb4d1ace1fb33a14ab570146f4d08ff7dad34c8354e960d9ffb2e3b968ad35585215", @typed={0xc4, 0x105, 0x0, 0x0, @binary="fd799abb562bb15a1f86adc2624ac636115c10a9734f1cd803a692df69aa312bb979df5a6c7eaa159de2277789d8999dc2f2b49278fcb95ee4b391eb2267a0c5498908f8c52866853e622ffc88b77c1d34b0a56bae649ac500e39fae79cf43ca9f04b21a909e1abba7608ef88fd80aeba84e81c01f9512754ffc41c97bc3e69da94a09fe0aec14591ae9edf2f6c036d1b7fd9879d6e4d4b56552dc10e7649e984179ce4184f834ce3e96b3c3e71b88d0dd12f60e840c6d85917fa5b0433f8708"}, @typed={0x8, 0x8, 0x0, 0x0, @ipv4=@loopback}]}, @typed={0x8, 0x84, 0x0, 0x0, @pid=r6}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000}, 0x10) socketpair(0x26, 0x5, 0x5, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x80000, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$key(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x2, 0x8, 0x0, 0x3, 0x19, 0x0, 0x70bd25, 0x25dfdbfd, [@sadb_key={0x4, 0x0, 0xa8, 0x0, "d2ffc88f592e33f853bd6a74ae23db41158a0f3e0f"}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d3}, @sadb_x_filter={0x5, 0x1a, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x11, 0x14}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_x_nat_t_type={0x1, 0x14, 0xd}, @sadb_lifetime={0x4, 0x3, 0x9, 0xb9, 0x9, 0xfff}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_lifetime={0x4, 0x3, 0x8000, 0xbf, 0x800}, @sadb_x_nat_t_port={0x1, 0x0, 0x4e22}]}, 0xc8}}, 0x0) clock_gettime(0x0, &(0x7f0000002140)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000020c0)=[{{&(0x7f0000000c00)=@tipc=@id, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c80)=""/178, 0xb2}], 0x1, &(0x7f0000000d80)=""/114, 0x72}, 0x2}, {{&(0x7f0000000e00)=@alg, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000e80)=""/158, 0x9e}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/38, 0x26}], 0x3, &(0x7f0000001fc0)=""/208, 0xd0}, 0xf0e3}], 0x2, 0x1, &(0x7f0000002180)={r9, r10+10000000}) syz_open_procfs$namespace(r6, &(0x7f00000021c0)='ns/pid_for_children\x00') r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000002200)={'bridge_slave_0\x00'}) ioctl$SIOCRSACCEPT(r4, 0x89e3) syz_genetlink_get_family_id$nl80211(&(0x7f0000002240), r7) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r8, 0x6, 0x15, &(0x7f0000002280)=0x5, 0x4) pipe(&(0x7f00000022c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r12, &(0x7f0000002300)={@void, @val={0x0, 0x4, 0x1000, 0x2, 0xfffd, 0x8}, @eth={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@llc={0x4, {@snap={0xaa, 0x1, "16", "e71d75", 0xd, "489a392c4a966eea2b7c0f3833cccd99151602af5a322aa820e79dc0e40754b4f495f86fa095a525cd25"}}}}}}, 0x4a) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000002380)={{0x67, @multicast1, 0x4e23, 0x1, 'wlc\x00', 0x32, 0x0, 0x7}, {@loopback, 0x4e21, 0x10000, 0x3, 0x3ba, 0xe}}, 0x44) 48.320123785s ago: executing program 5 (id=1697): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x26}, 0x3, 0x1, 0x1, 0x3, 0x1ff, 0x802}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r5 = socket(0x28, 0x5, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r4, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r5, 0x900}, 0x20) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x4, 0x5, [0x7eb, 0x1, 0x7, 0x6, 0x80]}, &(0x7f0000000080)=0x12) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000140)={r6, 0x5}, 0x8) 48.032227983s ago: executing program 5 (id=1699): r0 = socket(0x40000000015, 0x5, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000940), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) sendmmsg(r5, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x40844) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1dfb080cd21d308098e000086dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010020bd70100600010007000000080009000200000008000b000000000008000c00a80a0000050012"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010101}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) 46.167642096s ago: executing program 43 (id=1616): socket(0x28, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x1e, 0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x29, 0x9, 0x8, 0x800, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x10, 0x0, 0xe7, 0x2}}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0xe78, 0x2}, &(0x7f0000000200)=0x8) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x80000) setsockopt(r9, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0x19, 0x4, 0x1, 0x1, 0x64, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @local]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @loopback]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @ra={0x94, 0x4}]}}}}}) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8010, 0xffffffffffffffff, 0xfffff000) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000180)=0x5, 0x8) 46.044199845s ago: executing program 5 (id=1709): unshare(0x6a040000) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x70) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) (async) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095", @ANYRES64=0x0, @ANYRES8, @ANYRES8=0x0], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8004}, 0x94) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095", @ANYRES64=0x0, @ANYRES8, @ANYRES8=0x0], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8004}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea0900bce100000000009ba56a", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea0900bce100000000009ba56a", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r4) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01000600e81a0ab6df251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) bind$alg(r2, &(0x7f00000010c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) (async) bind$alg(r2, &(0x7f00000010c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) socket$kcm(0x10, 0x2, 0x4) (async) socket$kcm(0x10, 0x2, 0x4) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007ed, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000500)='cubic', 0x9) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) 40.054738411s ago: executing program 8 (id=1755): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbaaaaaaaaaa3088a84d008100660086dd6eb3d5f001952fff"], 0x1d7) 39.730487283s ago: executing program 8 (id=1759): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000200)={0xe}, 0x1) recvmmsg(r0, &(0x7f0000000000), 0x0, 0x40012022, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001800)={@cgroup, 0xffffffffffffffff, 0x7}, 0x20) 39.612192964s ago: executing program 8 (id=1761): r0 = socket(0x21, 0x80805, 0xd) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) close(0x3) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) (async) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) 39.512146257s ago: executing program 8 (id=1763): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="f8080000d0ff4000fefc69a77c81a9a9f9e2eadc68530000000000000000851000600400000018000004", @ANYRES16], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xb}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x0, 0xf0, 0x3}}, 0x18) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={0x0, @l2={0x1f, 0x2, @none, 0x7, 0x2}, @ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @can={0x1d, r3}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)='pim6reg0\x00', 0x2, 0x927b, 0xa}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f00000006c0)=[{&(0x7f00000002c0)="4be6191f827f05e4931dee5a5afe14ad6c18cde360e6e81e8d88c78fd57e5ac4846dbcccb21d342f1119fb9201a369a384d262ddf650ec2baacc9fb78728e5b7b6ffeed83cdce02e6d8c16badd4e07ebe21495b8a91c07bfc9fced8c398a78f9a8", 0x61}, {&(0x7f0000000200)="451ad6056342ec6ce78fb82561f2f34a90e334843e50bdf6233a4d102602909e7b47940859bd95e5d3", 0x29}], 0x2) shutdown(r4, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000180)=0x30) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYRESDEC=r0], 0xec}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000dc0)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) socketpair(0x1e, 0x2, 0x6, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r8) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000002cabca4324eeba0b9ce9c5365f54a0c3339dcd9c", @ANYBLOB="f003cd87a8a78b12f5182f8f1a2275898692ba3cbd970fd0def7ce4e745801c3e8198c814459e1cd70fa90ef332dd1a62e8a58aa37a907fd16dee541c1adee13b4cc450cbb20f34ac1afc8bae494f3181c79ec466dfff18fc075a938778cf6289ffca7c7eeabd9d3142bd10480f0b0e43489b8cc98638c0aac5615f4c2a49e4daa4641176671eb2355b34a9fff929ca51fe9dd18ffe50e5f3679beac08913185b3a871dbc4188533a4950642ad60d80f763e1232c559002ff8eba47f6fffbb3a4540eefbd8c0c44887166942788e5df34119cf7db5b72d164614", @ANYRES64=r8, @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYRESDEC, @ANYRES32=r7, @ANYBLOB="0c00018005000100", @ANYRES32=r7, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(r9, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @rand_addr=' \x01\x00', 0xe}, 0x1c, 0x0}, 0x4080) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) accept4(r5, 0x0, 0x0, 0x800) setsockopt$inet_int(r4, 0x0, 0xa, &(0x7f0000000500)=0x10000, 0x4) socket$key(0xf, 0x3, 0x2) 38.293575352s ago: executing program 8 (id=1783): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000007540)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x7ffd, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0xd, 0x8}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r4}, @TCA_ROUTE4_TO={0x5, 0x2, 0x64}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc041}, 0x804) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, 0x0, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000001380)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r9 = socket$phonet(0x23, 0x2, 0x1) close(r0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000540)={0x0, 0x3, 0x280000000, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r9, 0xc400941d, &(0x7f0000000940)={r10, 0x8001, 0x100000000, 0x1}) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="008101000040000000", 0x9}], 0x1}, 0x48045) readv(r7, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/20, 0x14}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0xf6c52000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r11, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYRESHEX=r5], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r12}, 0x38) 37.480954916s ago: executing program 8 (id=1788): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) unshare(0x6a040000) (async) unshare(0x6a040000) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) unshare(0x10000400) (async) unshare(0x10000400) socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x2002, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x458b41, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) write$nci(r2, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) write$nci(r2, 0x0, 0x7) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)) (async) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r6, &(0x7f0000000100)=""/113, 0x71) write$ppp(r6, &(0x7f0000000200)="bc72", 0x2) (async) write$ppp(r6, &(0x7f0000000200)="bc72", 0x2) socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg$sock(r7, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="7e83ae85a0a16953cace3edaa43af5e2d4ceacbf5963cdf303a00f7655a8ec73f7fc667a208313f018a6b851c80a43f0fdf3691925523a", 0x37}, {&(0x7f0000000080)="a2b0479a15fa625d13bf2e2368b5632e2816bc88383106c6d9ac0eaedeecb7655db5c610654e7a281548fc58ffdcede7d03b5adc2848fc3dcefbe71fdb2e6ef60f5165fc886bbe9821f6103041d59feaccb882870708411dd24461b641dd8996bd947aaf49d1dba5f867e11c3913c216be14696a4842", 0x76}, {&(0x7f0000000140)="d83b4e7ab6bbfa0706f5b99586073ccfd47c57eaa397006b7b06161bdf44a3fc2fa0d58258d0cc906ba535a0d36ef7fc1ac5b8b3", 0x34}, {&(0x7f0000000280)="7bbbdcb32d104fd3650fc4fb384e33411867d0f310eb332b29de0161147d0afe887c22388a5cbc75ae71e8b29468a41d59c0314c93281250bbc8b68dc35282f60e87f36c7b1cf9d2514fdad3f1b968dc603aad010e012e6e2c7764b718862146b551b16060c6e18746bc5643a4eb649ab5ce13ee9f9cab81fc87fa91430a93e89bbb7f3b1610dea19f25893fc727cab1e7048be9c045165e6b35c3db7e7dabfcf4b4f15402a6916b29a64ca73f3cd162b63a4412b960e69f8d3a7e16dd8528ab30c2597fc25a79cb", 0xc8}], 0x4}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="cb2c82a3f5e0620a53f0a475d6d4c4ac07c23b3b6d6bbe18d178070e6da99ee47f8cac6f652268887412c9dabc2822edfa103413f0a42882d84d2ad644a80776d25265dd2b4a1db86d65e303b7cdec9afe42b5ac6dd4c48660212e806d2ad89835c3992aee964df5ba6159fcfcd6a11c7f95df85fc4d9a7ac127d52468d26eb7f0cc183acfe1a58390e12a6f9c2e44ce0b7979a4f5967de0c83ffd72ac4accc00271211e0c98df498f0ce75ec0976fb9a3755a0808d1736b584155ebc88546aba35ef0", 0xc3}], 0x1, &(0x7f0000000500)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x14}}], 0x30}}, {{&(0x7f0000000540)=@rc={0x1f, @any, 0x2}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)="4ead3b4e074e6504a42b57c9b45ca36af97873c27c44bf27c04c9ce85c0394ea8661f7d3bece3d838f13010395c909209306875fcb3edc9fd94ed7c4510442bbbb582738c4d929573ac888374f424989b1370f33766d64865bb8737f1c9ab1b8aa8e8be45dc27fce7b402e4610576a1e34e7bbcf256eb2d1ec46a1317e6d88e6a104386e41f4dc0055349d866b10c2d803b0c9b045cddbf1f2e9012f7e54a76eacea3a1426d0bb9276dbec8ed798703732aca9cb67e03179e89fa626a7ea6285e672496cb4e0caa80aa6415f872954cb497f945aa9695454f701f599f2283b8d1364a7a69c31e4c42621f8e3ae1a073db92b525d", 0xf4}], 0x1}}], 0x3, 0x4000000) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) 32.049557607s ago: executing program 6 (id=1843): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r1, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x2, @remote}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) accept(r2, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000040)=0x80) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x300, 0x0, 0x3, 0x3, 0x42}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r5, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x504) recvmmsg(r5, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10001, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001f80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xba2ceb09c15e9291}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x3, 0x8}}]}}]}, 0x64}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) 31.471502513s ago: executing program 2 (id=1849): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x90ff}, 0x48) close(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000200)='THAWED\x00', 0x7) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 31.397547772s ago: executing program 2 (id=1850): r0 = socket(0x2, 0x80805, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000180100002020692500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000e62a0000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000040)=0x8) socket(0x2, 0x80805, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000180100002020692500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000e62a0000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140), &(0x7f0000000040)=0x8) (async) 31.300170686s ago: executing program 2 (id=1851): r0 = socket$inet(0x2, 0x1, 0x0) getsockopt(r0, 0x0, 0x15, 0xffffffffffffffff, &(0x7f0000000040)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x2, 0x18, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @private0}}]}, 0x60}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0x2, 0x4) socket$inet(0x2, 0x1, 0x0) (async) getsockopt(r0, 0x0, 0x15, 0xffffffffffffffff, &(0x7f0000000040)=0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f00000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b839994fb484510bef2e488fbac2fe6faaf75e5cc4815bd2051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dcab772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f015d885b4b8ffc0fa3f880287c862137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7fc6edc76600000000826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3bf97ff8836d000000000000000000000000000000000000000000250d623b48a29e330900b8c552202407804f1ba1817256caf1090b71f2928ed030f3c8194cc3cbf48e2f4c9248c4c00a32d4873da3b7d66b1ce6f72aab16c923b16c4bfdbb24fb17bd198139c21c46065c6922fd705e670d0b5d6d495a773b872e8f88"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x2, 0x18, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @private0}}]}, 0x60}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) (async) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0x2, 0x4) (async) 31.209014629s ago: executing program 2 (id=1852): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x18) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0xe, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6119}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @exit, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xc5f}, @exit, @exit, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0x7, 0x36, &(0x7f0000000600)=""/54, 0x40f00, 0x1, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0xc, 0x1, 0xfff}, 0x10, 0xffffffffffffffff, r1, 0x0, 0x0, &(0x7f00000006c0), 0x10, 0xd71}, 0x94) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) (rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0xc3b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xb}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x48}}, 0x0) (async, rerun: 32) close(0x4) (rerun: 32) 31.074827645s ago: executing program 6 (id=1853): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x1, 0x2}, 0x2) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e22, 0x7fff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, {0xa, 0x4e24, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0xffffffffffffffff, {[0x5, 0x7, 0x7, 0x52, 0x4, 0x144, 0x6, 0x1ff]}}, 0x5c) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000280)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r3}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r4, 0x120, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffff8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4801) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000980)={&(0x7f0000000440), 0xc, &(0x7f0000000940)={&(0x7f0000000480)=@newtaction={0x4bc, 0x30, 0x2, 0x70bd29, 0x25dfdbfd, {}, [{0x4a8, 0x1, [@m_vlan={0x10c, 0x20, 0x0, 0x0, {{0x9}, {0xb0, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0xd32, 0x10000000, 0x8, 0x2}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe24}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x286}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x30, 0x8, 0x1, 0x800, 0xfffffff9}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x8, 0x1, 0x1, 0x9}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0xa, 0x6, 0x9, 0x3}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6f, 0x1, 0x9edea6baee7595b1, 0x7, 0x6}, 0x1}}]}, {0x31, 0x6, "1de815394358b47c432d2f55a917ab8800c4968a9abb7835fe4ffd8e6ef05fe904fae892529655bc28baba9f52"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x88, 0xa, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xbf7b, 0xfffffffe, 0x2, 0x0, 0xffffff81}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x20, 0x2, 0x6, 0x6, 0x5}}]}, {0x2a, 0x6, "54632c749918688c71f4ddcc86aefebf4bee07c3c94e12d9cbe145cc9a4089a5c290dedfd763"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x68, 0x1e, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}]}, {0x13, 0x6, "dacf61fcec1d78dad520c8b3cc004d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_connmark={0x58, 0x6, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5c0c0, 0x4a32, 0x6, 0x8, 0x4}, 0x1}}]}, {0x9, 0x6, "1fe5d870d1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x13c, 0x6, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb, 0x3, 0x5, 0x5, 0x6}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff8, 0xfff9}}]}, {0xed, 0x6, "6a449fcfacb8e45e37bbaa927ad31dcff5ac693c5cebb1b9bcaaebe516af9acebe1894ed0b5d9b10f8fe422ab62d6f45c49fb54e2d464491abb4be5ad671af65d624bd6e8a25fcb910bace2606ed401b3b27d89d478884f94e993025b6c7146bafa73edf17868c749e167c41ccd20fd2950576cec45c6dc071f18e1cdd95d0b3cf0a8a141bb3cb415bce3bfb0aaa695d5318c5ed429d7a60b18d3b6c7ff18a9d56e60c210da1c715f92d476f588a4841b454cdec04d3d90b41f4535749dcc0b0340270677197a5de5697541899d413d75bceefcd0e75186051b2b010ef56977ee3713bed3dec2e914e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x114, 0x19, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6}, @TCA_CT_LABELS={0x14, 0x7, "78659dcf838c7bc7f11c559adb98c33a"}]}, {0xd0, 0x6, "b0576bf290fda8b848b8e4289bc5df145407546b7b16ba47f4ea8a3bf7ed703a8a73c1e82d04845ac0aaaa2cc3068021d0f085cd8827defbedfb9144247d9c2b29f01cc668e3a5b629035cf18d7695599b67cfbc4ac0d1395de2c9af657ae36a8cd41489584555a5ce8f9fa17dbd4163ebfeff929a9b31d085319b1aafcecff7594541f959c712e1309067268cc49f4ca5060fedb7c31dfb3f4862243dc78b06ee3a0be106847e1893fa3a719baff4366e711e6a97df429c407097bf7780a5d19214a150f7f71348c7849a73"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x4800}, 0x44044) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000009c0)) getpeername(r2, &(0x7f0000000a00)=@alg, &(0x7f0000000a80)=0x80) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000c80)={0x1, 0x1, 0x1000, 0xbf, &(0x7f0000000ac0)="7e57778f9f5695ff626cd389ad2fb96e3e8e96bbbaaad81188f9c63ae81a089299d3256fc7fba7dca4db9d2c13847aa59642e8c3b9ee6cd304096745e4ce577e4b43e6eacbc6791b04c9e7e44c99c2bf52f9e4f1e042588fe55684cde358769a94e5f102256d9d5b88fbb96578007cd3a0b3cbf3186caf52e23fd22f96d91c028f2882f04e523689f191b0ce22aba6045e3326dec77dcc988d4698a70dcf9867509e900838ee40260ca15729576b32838cad26ee7328596fb490830e7420fc", 0xdd, 0x0, &(0x7f0000000b80)="7d1e27821cdbd217797a51a70c1f6f30a366a5088b053bd5f80ab6987cf3dffc9e5a12453af340bd260e16a86b354d903e40822473c8f3469dfb11329846eddc1ad4dc55e92b4512b9dcc007e24df6f6bd155f23e311c75389282488c87ca8aaa62899d040e6dd3951312d7918b14be18b0a9763c087f0f8e2f1988e9a34ec8a2d73ffb0dbdd0e8f7d292d12d2dcd90ced90168ecdfa3dd5b96db2d5c0a1bb3ff5763604bff5bb0f46a1944b3b1b51bee84df4b3e432b423638822c2c04d0dfe9595a37ee793bc6e13e6b9ee1f72a75eb82292cb0f78eddc90b060bd47"}) r6 = accept(r2, 0x0, &(0x7f0000000d00)) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000d80)={0x0, @loopback, @multicast1}, &(0x7f0000000dc0)=0xc) ioctl$sock_x25_SIOCADDRT(r6, 0x890b, &(0x7f0000001100)={@null, 0xf, 'geneve0\x00'}) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001340)=@assoc_value={0x0, 0x1}, 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001380)={{{@in6=@private0, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000001480)=0xe8) socket$netlink(0x10, 0x3, 0xf) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001540)={@local, @multicast1}, 0xc) 31.008122201s ago: executing program 2 (id=1854): r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000002240)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbbbbbbbbbbbbb86dd6d002000000a29"], 0x91) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000200)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000040), 0x4) close(0x3) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x200}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r7) sendmsg$SEG6_CMD_SET_TUNSRC(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x28, r8, 0x821, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010902}}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x88efa964645774f0) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0xffff]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xffff, 0x9a, 0xfffffff9, 0x9]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2a}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008004}, 0x20048041) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r8, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x0, 0x2, 0xce]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x1, 0x6, 0x9]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000c80}, 0x800) 30.985296863s ago: executing program 44 (id=1709): unshare(0x6a040000) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x70) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) (async) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095", @ANYRES64=0x0, @ANYRES8, @ANYRES8=0x0], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8004}, 0x94) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095", @ANYRES64=0x0, @ANYRES8, @ANYRES8=0x0], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8004}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea0900bce100000000009ba56a", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea0900bce100000000009ba56a", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r4) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01000600e81a0ab6df251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) bind$alg(r2, &(0x7f00000010c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) (async) bind$alg(r2, &(0x7f00000010c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) socket$kcm(0x10, 0x2, 0x4) (async) socket$kcm(0x10, 0x2, 0x4) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007ed, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000500)='cubic', 0x9) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) 30.980157399s ago: executing program 6 (id=1856): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xdc, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf93f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffff0}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xe}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3ff}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x448c1}, 0x20004084) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r1, 0x300, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_team\x00'}]}, 0x28}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb4, r2, 0xec32fe238c88af9b, 0xff, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x40}, @NL80211_ATTR_REG_RULES={0x5c, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xf3f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x36}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7f}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x49}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0x12, 0xa, 'veth0_to_team\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0x12, 0xa, 'veth0_to_team\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000005c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r2, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xca}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4804}, 0x20000890) bpf$ITER_CREATE(0x21, &(0x7f0000000780), 0x8) (async) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000780), 0x8) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x24110004}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r2, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x69}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x50) (async) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x24110004}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r2, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x69}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x50) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000900), 0x4) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfc, 0x42}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x200}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x4880) ppoll(&(0x7f0000000a40)=[{r7}, {r5, 0x4011}, {r5, 0x68}, {r5, 0x7008}], 0x4, &(0x7f0000000a80)={0x0, 0x3938700}, &(0x7f0000000ac0)={[0x5]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000b00)={'vcan0\x00', 0x0}) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000d80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b80)={0x1b4, 0x14, 0x400, 0x70bd27, 0x25dfdbfb, {0x26, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x3d, 0x1, "eb91a241d10f3c882e0b8027ec39d35d71c44e4dea2c064ba7d92d62805368bac3b4c6b75ff9ffcf993b3364b1d10dc103d6800d02b5e9d60d"}, @INET_DIAG_REQ_BYTECODE={0x86, 0x1, "04f75739c3ae00cc46291ae42cb79c3ef7198c8189a882a1f6e52d119a5802ca3375de194279b04dcc9061a478f38c44bf9ce337d23937f7e9334ee9afc977905e364064bf933a4602145ade5a72eb4b5cba5a41d662af782d02db8a76f6648d31c0388334267b437630838f62ade9a4c7b01d100021d3dce4dfdb8756535170f8a2"}, @INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "48d81a775c115d82055e6c0162144f8c82ac0f329bfcf14d8cfb998eb8d7925a43f434771b4fc686a08696aa6b778c03e4c0fde99df7572c338b2a660ea799ae96c074d8edbdc2f4915f33f625aeac602c160a33cc327f38f8887ce2791f843497049bb0ff7ffae7ec1b15ddb1cad6444c3e6f7bd23a4d97b227f710b4e5ab875e19c5f81b85cacf70bb322ae87b80a9cb48d6d22af7cc0f2f66735e95cedc0c10acca52082b917f44c1ddb00110c227f0b1f0a98c65fc8350864b729469854d521a76ddb9fbdc7c2697782358b843230c"}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x40000}, 0x1) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000d80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b80)={0x1b4, 0x14, 0x400, 0x70bd27, 0x25dfdbfb, {0x26, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x3d, 0x1, "eb91a241d10f3c882e0b8027ec39d35d71c44e4dea2c064ba7d92d62805368bac3b4c6b75ff9ffcf993b3364b1d10dc103d6800d02b5e9d60d"}, @INET_DIAG_REQ_BYTECODE={0x86, 0x1, "04f75739c3ae00cc46291ae42cb79c3ef7198c8189a882a1f6e52d119a5802ca3375de194279b04dcc9061a478f38c44bf9ce337d23937f7e9334ee9afc977905e364064bf933a4602145ade5a72eb4b5cba5a41d662af782d02db8a76f6648d31c0388334267b437630838f62ade9a4c7b01d100021d3dce4dfdb8756535170f8a2"}, @INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "48d81a775c115d82055e6c0162144f8c82ac0f329bfcf14d8cfb998eb8d7925a43f434771b4fc686a08696aa6b778c03e4c0fde99df7572c338b2a660ea799ae96c074d8edbdc2f4915f33f625aeac602c160a33cc327f38f8887ce2791f843497049bb0ff7ffae7ec1b15ddb1cad6444c3e6f7bd23a4d97b227f710b4e5ab875e19c5f81b85cacf70bb322ae87b80a9cb48d6d22af7cc0f2f66735e95cedc0c10acca52082b917f44c1ddb00110c227f0b1f0a98c65fc8350864b729469854d521a76ddb9fbdc7c2697782358b843230c"}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x40000}, 0x1) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000dc0)="43f5ca4744502382430296809b2b30d84dad92187c7a2b84e9f0f3f479085d9510fa3e170540657ced99cc6e815b5e20b024a477a84b31d45d23dd2501b557d2048ca02c90a67cb4a328efcc4d1d2fd7c3b7eae631514900d502e042ac4e2bc80c8a3089084df9547f449e94ffeb", 0x6e) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000dc0)="43f5ca4744502382430296809b2b30d84dad92187c7a2b84e9f0f3f479085d9510fa3e170540657ced99cc6e815b5e20b024a477a84b31d45d23dd2501b557d2048ca02c90a67cb4a328efcc4d1d2fd7c3b7eae631514900d502e042ac4e2bc80c8a3089084df9547f449e94ffeb", 0x6e) syz_genetlink_get_family_id$ethtool(&(0x7f0000000e80), r6) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e80), r6) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000fc0)={'erspan0\x00', &(0x7f0000000ec0)={'syztnl0\x00', r8, 0x7, 0x49f, 0xc9, 0xffffffff, {{0x36, 0x4, 0x0, 0x7, 0xd8, 0x67, 0x0, 0x0, 0x29, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0xb, 0xde, [@local, @multicast2]}, @timestamp_prespec={0x44, 0x34, 0xd2, 0x3, 0x3, [{@empty, 0xe}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf}, {@empty, 0x9}, {@loopback, 0x2}, {@empty, 0xf0e}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x73}]}, @rr={0x7, 0xb, 0x41, [@private=0xa010102, @multicast2]}, @timestamp_addr={0x44, 0x44, 0xe4, 0x1, 0x7, [{@local}, {@rand_addr=0x64010100, 0x5}, {@empty, 0x8001}, {@multicast1, 0x7}, {@private=0xa010101, 0x7fff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@loopback, 0x7}, {@private=0xa010102, 0x7f}]}, @timestamp={0x44, 0x24, 0xf7, 0x0, 0x3, [0x0, 0x1, 0x0, 0x2, 0x1, 0x8, 0x3, 0xff]}, @timestamp={0x44, 0x10, 0xf0, 0x0, 0x2, [0x8, 0x2, 0x7]}, @end]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000fc0)={'erspan0\x00', &(0x7f0000000ec0)={'syztnl0\x00', r8, 0x7, 0x49f, 0xc9, 0xffffffff, {{0x36, 0x4, 0x0, 0x7, 0xd8, 0x67, 0x0, 0x0, 0x29, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0xb, 0xde, [@local, @multicast2]}, @timestamp_prespec={0x44, 0x34, 0xd2, 0x3, 0x3, [{@empty, 0xe}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf}, {@empty, 0x9}, {@loopback, 0x2}, {@empty, 0xf0e}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x73}]}, @rr={0x7, 0xb, 0x41, [@private=0xa010102, @multicast2]}, @timestamp_addr={0x44, 0x44, 0xe4, 0x1, 0x7, [{@local}, {@rand_addr=0x64010100, 0x5}, {@empty, 0x8001}, {@multicast1, 0x7}, {@private=0xa010101, 0x7fff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@loopback, 0x7}, {@private=0xa010102, 0x7f}]}, @timestamp={0x44, 0x24, 0xf7, 0x0, 0x3, [0x0, 0x1, 0x0, 0x2, 0x1, 0x8, 0x3, 0xff]}, @timestamp={0x44, 0x10, 0xf0, 0x0, 0x2, [0x8, 0x2, 0x7]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000001000)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000001000)={'wg2\x00', 0x0}) getpeername$packet(r6, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001080)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001140)={'gre0\x00', &(0x7f00000010c0)={'tunl0\x00', r8, 0x10, 0x7800, 0x4, 0x2, {{0x13, 0x4, 0x0, 0x1, 0x4c, 0x65, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010101, @local, {[@ssrr={0x89, 0x27, 0xc4, [@loopback, @private=0xa010102, @local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @noop, @end, @timestamp_addr={0x44, 0xc, 0x70, 0x1, 0xc, [{@private=0xa010102, 0x4}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001140)={'gre0\x00', &(0x7f00000010c0)={'tunl0\x00', r8, 0x10, 0x7800, 0x4, 0x2, {{0x13, 0x4, 0x0, 0x1, 0x4c, 0x65, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010101, @local, {[@ssrr={0x89, 0x27, 0xc4, [@loopback, @private=0xa010102, @local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @noop, @end, @timestamp_addr={0x44, 0xc, 0x70, 0x1, 0xc, [{@private=0xa010102, 0x4}]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000001300)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={0x108, r9, 0x4, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) r14 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001380), r5) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x6ac40f7daa4d9fbb}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, r14, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6f}]}, 0x24}, 0x1, 0x0, 0x0, 0x44084}, 0x4800) ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x891b, &(0x7f0000001480)={'veth0_to_batadv\x00', {0x2, 0x0, @multicast2}}) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x18, 0x7, 0x946, 0x3, 0x140, r5, 0x9, '\x00', r10, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) 30.825314202s ago: executing program 6 (id=1857): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xfffffffffffffd78) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}}, 0x5c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0xff, 0xb, 0xbc95, 0x4e, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x9, 0x7fffffff}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280080001000100001a"], 0x64}}, 0x2000000) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000580)={{{@in=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000140)=0xe8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xf}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) unshare(0x2c020400) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000003500)={&(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)=[{&(0x7f0000003540)=ANY=[@ANYBLOB="a0000000300010002cbd7000fcdbdf2508001400", @ANYRES32, @ANYBLOB="04002a80ffd21d6b9daa41934c8f58fcbaaff91701992015848ed95d437696eb9aa965597ad49906635d12e35055a34e0ecf2400266d020c12177e87fda7e174e77ca84ad9d5e3b3adb60d40cbf3af86bac70b776b77eeeb5db1d86366e1f3d1d724d8705902a7daa7e2c8d756d07f2701e253d12c601068890021daa393252a0800b70010000000"], 0xa0}, {&(0x7f0000000480)=ANY=[@ANYBLOB="10001c001de62d52a25d8008b2146a51564c04ccddb654f219d2aecd07ac7ad4a97e85bbac33825d1119da08a86b9ed5c4c84494edeb117e9db45b8d7dc692180908e9464b739508bcfa17e227f8cb60258970edd5fa0b0a24fd8c90614221e6a5dcfda8f99af31b9229f9ddf99fe9ea721ef3d36779e8c6914aafcd167735cb943969af45510cede69c7e0c83b483d3f5"], 0x10}, {&(0x7f0000000840)=ANY=[@ANYBLOB="3400fcdbdf25a052d87aa332282668412d3ba70604472ca31ed9e67d7426e18569a2413c70a97a601fb5326462cd4dd3ba67b0cae7f4ec8aac0226862e790503014ae1603de178809670cb2c111dc2abc361937eae15ac1c06c7f99e9232a33a1f", @ANYRES32=r2, @ANYBLOB="0800b400", @ANYRES64, @ANYRESDEC=r3], 0x34}, {0x0, 0x44}, {0x0}], 0x5, &(0x7f0000003480), 0x0, 0x800}, 0x200c8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@mcast2, @in=@local, 0x4e24, 0xfff3, 0x4e21, 0x1ff, 0xa, 0xa0, 0x20, 0x3b, r2, r4}, {0x9346, 0x9, 0x3, 0x2, 0x8, 0x80, 0x80, 0x7}, {0x3, 0x80000001, 0xb, 0x1}, 0x0, 0x6e6bb6, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d6, 0x33}, 0x2, @in=@private=0xa010101, 0x3501, 0x1, 0x2, 0x4, 0x7fffffff, 0x0, 0x9}}, 0xe8) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000700)={{0xa, 0x4e20, 0x0, @mcast2, 0x40}, {0xa, 0x0, 0xfffffffd, @mcast2}, 0x1, {[0x0, 0x48, 0xfffffffc, 0xffffffff, 0x0, 0x0, 0xfffffffd]}}, 0x5c) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) shutdown(r9, 0x1) 30.771373719s ago: executing program 2 (id=1858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000580)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x1e) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRESHEX=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r5, r5, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000005c0)=@broadcast, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000011000000080000001cb3000000000064000100010882848b960c1218240000000000"], 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) 30.631840688s ago: executing program 6 (id=1859): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="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", 0xfa}, {&(0x7f0000000100)="81b40c4f5616312639531c84eb715c771694c3bee367706bd3c5acf03a604841c764bccadf9e901509c46b1aff2f33d168c76b0952a57a9821ad17a4da3e792979b15330fa565ca72c07049a473c915a88052571259f11b860421717c6822592f76247aa992d8a45941ee0fde79b4e927c1a5d1296608a0cfe368f91ae9d15ed16ee95b746fded65ef", 0x89}], 0x2, &(0x7f0000000200)=[{0xa0, 0x88, 0x1, "b6ec8e03a1a0632e7339a03c77f9378b72fe84613dbde608be98e960e4b17287f84dbdb838e4dee60a9f1136567d5d56459f9e301b67ecd8d3b9e91fd7beef86248181672e977f874d6f4715e04cd7e1f99c0ffd924b24c992970cc19d152f0c69c3641a61ae6c9e8780159c3a1f97560e1236419b5695f772a7bbbb350e2f85bdb1d639d5c6926f22"}, {0xb0, 0x10f, 0x5, "45b503a1d7440cae7cd8096a1d3fbe88699286d02578787dd9cdb9d47cee2ef2d684d6dff60584dc0c6e3f6e45d2aefab7c12239875b893d83b5bd91aff0d2aa280fb55349cb8d0682c012d833921575d3e5c399c20856443cdcac67b19c2ea733ee693497d900f9986710c22406604f404336016d6bf9c3a00892e7a93a6b935ae4f0717ecb244b051441bc6148de1c6e4f7b553636369f2e74592265d381"}, {0x68, 0x113, 0x80000001, "a3c10ef22e484937b0dff33e4ebb4bdcc5c3efed844b06b2a2653fdc5edcb4fac6e26492c866431b640bab631bf8a0bcaf98928becb2b45e499c974e616577327dcc4b7f679ef83f5fa2258d44cd9abe46e2"}, {0x58, 0x84, 0x1, "f0bacd31041719e93f4d4d06151a728fcb509b0d8ea67ca9ac180384824870152e58da9fc7cc88156ad4e674dcf77f8639e85cc5559f6c0b01173bad9396fe711d"}], 0x210}, 0x440c0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf0, 0xf0, 0x6, [@decl_tag={0x7, 0x0, 0x0, 0x11, 0x4}, @restrict={0xb}, @const={0x6, 0x0, 0x0, 0xa, 0x1}, @struct={0xa, 0x2, 0x0, 0x4, 0x0, 0x6, [{0x7, 0x2, 0xffff}, {0x0, 0x1, 0x400}]}, @ptr={0x4, 0x0, 0x0, 0x2, 0x3}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x62, 0x0, 0x27}, @var={0x9, 0x0, 0x0, 0xe, 0x1, 0x2}, @enum64={0xb, 0x8, 0x0, 0x13, 0x1, 0x1, [{0x3, 0xffffffff}, {0xf, 0x5, 0xc}, {0xc, 0x97, 0x5}, {0xc, 0x5, 0xc}, {0xc, 0x101, 0xfffffffa}, {0x9, 0xe1a, 0x3}, {0x9, 0x8001, 0x5}, {0xa, 0x8, 0x1}]}, @restrict={0x9, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x30, 0x30, 0x30, 0x61]}}, &(0x7f00000005c0)=""/91, 0x10e, 0x5b, 0x1, 0x800000}, 0x28) (async) socket$nl_audit(0x10, 0x3, 0x9) r3 = accept4(r1, 0x0, &(0x7f0000000680), 0x80800) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000006c0), 0x3) (async) getpeername(r0, &(0x7f0000000700)=@tipc=@id, &(0x7f0000000780)=0x80) (async) bind$xdp(r3, &(0x7f00000007c0)={0x2c, 0x7, 0x0, 0x21}, 0x10) (async) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000840)={0x0, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @rand_addr=0x64010101}, {0x2, 0x4e22, @loopback}, 0x45, 0x0, 0x0, 0x0, 0x34, &(0x7f0000000800)='wlan0\x00', 0x2, 0x1, 0x1}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x674fc7cf413d3bef, 0x0) (async) socket$kcm(0x29, 0x0, 0x0) (async) ioctl$SIOCAX25NOUID(r3, 0x89e3, &(0x7f0000000900)=0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0x7, 0x8, 0x12, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x40, 0x7, 0x3, 0x14a}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x4, '\x00', r4, r2, 0x4, 0x3, 0x4}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f0000000f80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ac0)=@newtclass={0x44c, 0x28, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x3, 0xa94f2287be67d0fc}, {0xa, 0x7}, {0x2, 0x8}}, [@tclass_kind_options=@c_htb={{0x8}, {0x414, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0x80000001}, @TCA_HTB_CTAB={0x404, 0x3, [0x8, 0x0, 0x2, 0xffff, 0x6, 0x7, 0xe, 0x2, 0x6, 0x8, 0xb, 0x9, 0x4, 0x10000, 0xf0a, 0x3, 0x2, 0x7, 0x8, 0x90000000, 0x5, 0xd, 0x4a, 0x7, 0x1, 0x1000, 0xb892, 0x428, 0x3, 0x6, 0x6, 0x9, 0xc1, 0x81, 0x9, 0xc, 0x9, 0x4, 0xe7, 0xeaf, 0x4, 0x10, 0x2, 0xe, 0x2, 0x7, 0x27, 0x0, 0x712, 0x0, 0x5, 0x1, 0x3, 0x8, 0x6, 0xfffffffb, 0x0, 0x8, 0xfa, 0x6, 0x6a0d, 0xfffffff7, 0x7fff, 0x7, 0x7ff, 0x8, 0x2, 0x8, 0x8, 0x4, 0x3, 0xfffffff1, 0x5, 0x4, 0x2e23, 0xd3, 0x7, 0x7, 0x0, 0x752c, 0x5, 0x80000000, 0x2, 0x58000000, 0x1, 0x4, 0xfffffffe, 0x7f, 0x5, 0x4, 0x9, 0xb9, 0xbbd, 0x3, 0xce, 0x31bc, 0x1, 0x32c, 0x4, 0x1990e4c2, 0x2, 0x80000000, 0x8, 0x4, 0x5, 0x59, 0xffffa749, 0x2, 0x5, 0x1, 0x4, 0xff, 0x9, 0x3d, 0xc7fe, 0x2, 0x4, 0x63, 0x40, 0x1000, 0x1, 0x3, 0x5, 0x2, 0x5, 0x3, 0x5, 0x100, 0x7, 0x1, 0x9, 0xc03, 0xffffffff, 0x1, 0xf, 0x8, 0x2bc6, 0x1, 0x1, 0x3, 0x7fff, 0x9, 0x80, 0x1000, 0x3, 0x80000000, 0x6, 0x4, 0x3, 0x10, 0x2, 0x7, 0x7ff, 0x0, 0x7, 0xfffffffb, 0x9, 0xffff, 0x4, 0xfffffffe, 0x1ff, 0x809c, 0x3, 0xdb, 0x3c, 0xfffffff9, 0x9, 0x1, 0x2, 0xfffffffc, 0x7922, 0x8, 0x81, 0xffff, 0x12, 0x0, 0x3, 0x8001, 0x6, 0x10100, 0x80, 0x8001, 0x2, 0xfffffffe, 0x0, 0x21, 0xfffffffa, 0x8, 0x8000, 0x2, 0xf5e3, 0x256b, 0x5, 0x6, 0x380, 0x400, 0x3, 0x4, 0x1, 0x0, 0x6, 0x1, 0x0, 0x4, 0x1000, 0x2, 0xd7, 0x3ff, 0x10, 0xb, 0x6, 0x0, 0x2, 0x0, 0x3, 0x0, 0x6, 0x1ff, 0x6, 0xc, 0x3, 0x3, 0x10000, 0x0, 0x10001, 0x8, 0x2d, 0x3, 0x0, 0x0, 0xfffffff2, 0x8, 0x4, 0x9, 0x7, 0x200, 0x2, 0x1, 0x54c4, 0x0, 0x2, 0x9000, 0x7fffffff, 0x6, 0xe078, 0xc6f, 0x2, 0x8, 0x4, 0x2, 0x9, 0x7, 0x8, 0x6, 0x3, 0x80000001]}]}}, @tclass_kind_options=@c_mqprio={0xb}]}, 0x44c}, 0x1, 0x0, 0x0, 0x4080}, 0xc004) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x30, r5, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xf263, 0x19}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x47}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000001140)={0x0, @in={{0x2, 0x4e22, @empty}}, [0x8000, 0x3, 0x3ff, 0x1d13, 0x8, 0x2, 0x8, 0x4, 0x8000, 0x3, 0x3, 0x80000000, 0x7efe46fa, 0x2, 0x4]}, &(0x7f0000001240)=0x100) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000001280)={r7, 0xe2, 0xe1, "9ed7142c0a938c11e8228244580069a941951a1d33d3b9f4b5f3fe809dbe5628e16ab48357b1faba8b1ec1a8afd6ee56992c579aa69da2a577903caf2df8b1c703168fb6eb48303b8f5ff4c2978766af916bcd9ace6aa0ef2c36b773432e3bb214b121509fa7518853546fc270f65aa057d3f57a1cf32e1873c03dd60c4c11d8165865013ac04124ed642cbf5223cc867f75efc095ef73af82882a70398090a34b5ca78c2fed600e528462763264c65e53d40aba351b69068ad50b669088461e40daaa908df56b4baba1b4d1ad4fd2947c8ccf5a8f094009f8aa8c4e5d96ee4dfe"}, 0xe9) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x3c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40001) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), r3) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x28, r9, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x50}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000040) syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), r2) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), r10) bind$netlink(r8, &(0x7f0000001640)={0x10, 0x0, 0x25dfdbfe, 0x40000000}, 0xc) 30.498859966s ago: executing program 6 (id=1861): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000580)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x1e) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000005c0)=@broadcast, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000011000000080000001cb3000000000064000100010882848b960c1218240000000000"], 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000010802110000000802110000000002000000000000"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000110012882845090b6551824"], 0x28) 22.41098616s ago: executing program 45 (id=1788): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) unshare(0x6a040000) (async) unshare(0x6a040000) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) unshare(0x10000400) (async) unshare(0x10000400) socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x2002, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x458b41, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) write$nci(r2, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) write$nci(r2, 0x0, 0x7) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)) (async) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r6, &(0x7f0000000100)=""/113, 0x71) write$ppp(r6, &(0x7f0000000200)="bc72", 0x2) (async) write$ppp(r6, &(0x7f0000000200)="bc72", 0x2) socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg$sock(r7, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="7e83ae85a0a16953cace3edaa43af5e2d4ceacbf5963cdf303a00f7655a8ec73f7fc667a208313f018a6b851c80a43f0fdf3691925523a", 0x37}, {&(0x7f0000000080)="a2b0479a15fa625d13bf2e2368b5632e2816bc88383106c6d9ac0eaedeecb7655db5c610654e7a281548fc58ffdcede7d03b5adc2848fc3dcefbe71fdb2e6ef60f5165fc886bbe9821f6103041d59feaccb882870708411dd24461b641dd8996bd947aaf49d1dba5f867e11c3913c216be14696a4842", 0x76}, {&(0x7f0000000140)="d83b4e7ab6bbfa0706f5b99586073ccfd47c57eaa397006b7b06161bdf44a3fc2fa0d58258d0cc906ba535a0d36ef7fc1ac5b8b3", 0x34}, {&(0x7f0000000280)="7bbbdcb32d104fd3650fc4fb384e33411867d0f310eb332b29de0161147d0afe887c22388a5cbc75ae71e8b29468a41d59c0314c93281250bbc8b68dc35282f60e87f36c7b1cf9d2514fdad3f1b968dc603aad010e012e6e2c7764b718862146b551b16060c6e18746bc5643a4eb649ab5ce13ee9f9cab81fc87fa91430a93e89bbb7f3b1610dea19f25893fc727cab1e7048be9c045165e6b35c3db7e7dabfcf4b4f15402a6916b29a64ca73f3cd162b63a4412b960e69f8d3a7e16dd8528ab30c2597fc25a79cb", 0xc8}], 0x4}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="cb2c82a3f5e0620a53f0a475d6d4c4ac07c23b3b6d6bbe18d178070e6da99ee47f8cac6f652268887412c9dabc2822edfa103413f0a42882d84d2ad644a80776d25265dd2b4a1db86d65e303b7cdec9afe42b5ac6dd4c48660212e806d2ad89835c3992aee964df5ba6159fcfcd6a11c7f95df85fc4d9a7ac127d52468d26eb7f0cc183acfe1a58390e12a6f9c2e44ce0b7979a4f5967de0c83ffd72ac4accc00271211e0c98df498f0ce75ec0976fb9a3755a0808d1736b584155ebc88546aba35ef0", 0xc3}], 0x1, &(0x7f0000000500)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x14}}], 0x30}}, {{&(0x7f0000000540)=@rc={0x1f, @any, 0x2}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)="4ead3b4e074e6504a42b57c9b45ca36af97873c27c44bf27c04c9ce85c0394ea8661f7d3bece3d838f13010395c909209306875fcb3edc9fd94ed7c4510442bbbb582738c4d929573ac888374f424989b1370f33766d64865bb8737f1c9ab1b8aa8e8be45dc27fce7b402e4610576a1e34e7bbcf256eb2d1ec46a1317e6d88e6a104386e41f4dc0055349d866b10c2d803b0c9b045cddbf1f2e9012f7e54a76eacea3a1426d0bb9276dbec8ed798703732aca9cb67e03179e89fa626a7ea6285e672496cb4e0caa80aa6415f872954cb497f945aa9695454f701f599f2283b8d1364a7a69c31e4c42621f8e3ae1a073db92b525d", 0xf4}], 0x1}}], 0x3, 0x4000000) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) 15.575000639s ago: executing program 46 (id=1858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000580)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x1e) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRESHEX=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r5, r5, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000005c0)=@broadcast, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000011000000080000001cb3000000000064000100010882848b960c1218240000000000"], 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) 15.354053724s ago: executing program 47 (id=1861): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000580)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x1e) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000005c0)=@broadcast, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000011000000080000001cb3000000000064000100010882848b960c1218240000000000"], 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000010802110000000802110000000002000000000000"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000110012882845090b6551824"], 0x28) 6.064039127s ago: executing program 3 (id=2009): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, "06"}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x10, @dev={0xfe, 0x80, '\x00', 0xfe}}, 0x80, 0x0}, 0x20000804) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0503000000000000000007000000040003"], 0x1c}}, 0x24044080) (async) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000002000010400000000000000000a0000000000000000000000080017004e224e2208001b"], 0x2c}}, 0x10008080) (async) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001a0001000000000000000000810000000000000000000a0000000f00fe0000000a4a014a9a6bb27a6e33755a917a40c1c0146b1c93f18d3574c5b429e09d1e715daa0b815f7c7e8c72ce29915072e661ef2ef09567800da0587b4594f4"], 0x24}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) (async) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) 5.843915603s ago: executing program 3 (id=2013): r0 = socket$kcm(0xa, 0x5, 0x0) (async) clock_gettime(0x0, &(0x7f0000000080)) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 5.683817205s ago: executing program 3 (id=2016): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000002000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0) 5.58650438s ago: executing program 3 (id=2018): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x2c, 0x0, 0x1, 0x9}, 0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r0], 0x7c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r3, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r4, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc00000800090005000000080007009801000020"], 0x234}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000014001100010080000000000009000000080002"], 0x1c}], 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, '\x00', "9b84f987950ff3df25fa8f46983d34157e047d274e22d1b6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8936, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000004"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000640)={'tunl0\x00', 0x0, 0x1, 0x7800, 0xa, 0xde, {{0x2a, 0x4, 0x0, 0x16, 0xa8, 0x66, 0x0, 0x3, 0x4, 0x0, @broadcast, @private=0xa010101, {[@cipso={0x86, 0x33, 0x3, [{0x1, 0x12, "09a7fa014f6fc677b59373e0cfaad2e1"}, {0x1, 0xb, "19484a68c16451a830"}, {0x0, 0x10, "0f2b76c6a2796547000000000000"}]}, @timestamp_prespec={0x44, 0x34, 0xf8, 0x3, 0x3, [{@rand_addr=0x64010101, 0x9}, {@rand_addr=0x64010100, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x5}, {@multicast1, 0x1}, {@multicast2, 0x10001}]}, @timestamp_addr={0x44, 0x24, 0x66, 0x1, 0x4, [{@multicast2, 0x3}, {@broadcast, 0xfffff001}, {@broadcast, 0x100081}, {@private=0xa010102, 0x2}]}, @generic={0x0, 0x7, "f2cdee4a84"}]}}}}}) connect$packet(r7, &(0x7f0000000300)={0x11, 0xf5, r8, 0x1, 0x3}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x18, 0x1, 0x2) read(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffefffffd, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x7, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) 5.000598246s ago: executing program 0 (id=1950): r0 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x8, 0x7, 0x2, 0x7, {{0x15, 0x4, 0x3, 0x8, 0x54, 0x68, 0x0, 0x1, 0x2f, 0x0, @multicast1, @loopback, {[@rr={0x7, 0x13, 0xc1, [@multicast2, @dev={0xac, 0x14, 0x14, 0x2d}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @rr={0x7, 0x3, 0x1b}, @ssrr={0x89, 0x17, 0xca, [@multicast2, @remote, @multicast2, @private=0xa010102, @empty]}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0x8, "0ea2ffdfd034"}, @generic={0xd5, 0x5, "f05077"}]}}}}}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0xffffffff, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x3, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60042800}, 0x40084c0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x5c, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x11298}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}}}, @IFLA_MTU={0x8, 0x4, 0x3193}]}, 0x5c}}, 0x4000) r7 = socket$packet(0x11, 0x3, 0x300) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f00000003c0)) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0x7, 0x0, &(0x7f0000000c40)="63eced8e46dc3f", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r11 = socket$inet_tcp(0x2, 0x1, 0x0) r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r12, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}, 0x48) r13 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r13, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r13, 0x80) accept4$netrom(r13, &(0x7f0000000080)={{}, [@netrom, @remote, @rose, @remote, @netrom, @default, @netrom]}, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f00000006c0)={{0x2, 0x4e21, @remote}, {0x6}, 0x28, {0x2, 0x4e23, @broadcast}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000008c0)=[{0x0, 0x34}], 0x1}, 0x0) recvfrom$unix(r0, &(0x7f0000000180)=""/150, 0x96, 0x0, 0x0, 0x0) 4.643201416s ago: executing program 3 (id=2022): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xfffffffffffffd78) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}}, 0x5c) unshare(0x2c020400) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) shutdown(r1, 0x1) 4.323895416s ago: executing program 3 (id=2024): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="180000008f00000000000000da41000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf09000000000000550901008004000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000350d00008500000006000000d500f4fffcffffffbf91000000000000b70200000300100085000000ae000000b7000000000000009500"], &(0x7f0000000080)='GPL\x00', 0xb, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 3.990003436s ago: executing program 0 (id=2028): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffff13bee81084b4bba2b704000000000000850000003300000085000000500000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_delrule={0x1c, 0x21, 0x129, 0x40000, 0x25dfdbff}, 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x7e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x3c}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x400080, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000300)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3.699944442s ago: executing program 0 (id=2030): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac14143c00000000000000000000000000000000000200000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc010000000000190000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000002000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00170000000000fdffffff000000000000000028bd7000000000004c001400636d6163286165732900000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000001800"], 0x1a0}}, 0x800) 3.479180562s ago: executing program 0 (id=2033): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) bind$can_j1939(r1, &(0x7f0000000280)={0x1d, r3, 0x1, {0x3, 0x0, 0x4}, 0xff}, 0x18) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000140)={0x1, 0x80000001, 0x3}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x17, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x7c}, {0x6}]}, 0x10) syz_init_net_socket$ax25(0x3, 0x2, 0x1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000004640)) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f00000004000000040000000400000004000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000002000000000000000dfff043ac7a2e5a83c0300000000000000000000208cc4b0e27be62bc0d4fb8c2b4abbea16"], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000004000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r7}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='.\x00'}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r11, @ANYBLOB="0800c300741300000800c40001000000", @ANYRESOCT=r11], 0x30}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020d90c1af8ff00000000bfa100000500000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.679867659s ago: executing program 7 (id=2037): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180009ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0xc4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x98, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x70, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x45, 0x3, "cd4b6abe42031763d02899c77f963d140d7a9d3ac869f3a860917523679abf4579f9cd6564e64066681fb945bfe585ab6933a6f6514a0eebad4e3537b11b37357f"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r5, 0x89f0, &(0x7f0000000000)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newsa={0x13c, 0x10, 0x713, 0x70bd2d, 0x0, {{@in=@broadcast, @in=@loopback, 0x0, 0x7, 0x0, 0x0, 0xa}, {@in=@local, 0x0, 0x3c}, @in6=@private1, {0x0, 0xfffffffffffffffe, 0x7, 0x100000}, {0x0, 0x0, 0xfffffffffffffff8}, {0x0, 0x0, 0x8}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(md5)\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x0) getsockopt$inet6_int(r2, 0x29, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) unshare(0x22020600) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet(0x2b, 0x801, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r11, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) ioctl$sock_SIOCETHTOOL(r10, 0x8946, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1e, &(0x7f0000000840)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 1.873373943s ago: executing program 7 (id=2043): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac14143c00000000000000000000000000000000000200000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc0100000000001a0000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000002000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00170000000000fdffffff000000000000000028bd7000000000004c001400636d6163286165732900000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000001800"], 0x1a0}}, 0x800) 1.795459506s ago: executing program 7 (id=2044): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000001f0000540000000e0001"], 0x34}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f00000001c0)={{0xfffffff0, 0x80}, 0x100, './file0\x00'}) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7fff}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x1) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) close(r5) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0) r7 = socket$kcm(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f00000000c0)={0x0, 'macvtap0\x00', {0x4}}) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f00000082c0)={0x40, r6, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x40}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080) 1.597524713s ago: executing program 7 (id=2047): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x6, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r1, &(0x7f0000000300)="99a283f3300100c9c12398c3ae46eb2b0f6b106f92c0a70180de08f7788e", 0x0, 0x4}, 0x20) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10, 0x80000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'gre0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x30, 0x7, 0x6, 0x4, {{0x39, 0x4, 0x3, 0x7, 0xe4, 0x65, 0x0, 0x5, 0x0, 0x0, @private=0xa010100, @remote, {[@timestamp_addr={0x44, 0xc, 0x61, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x80}]}, @rr={0x7, 0x17, 0xe1, [@local, @multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @end, @timestamp_addr={0x44, 0x2c, 0x1e, 0x1, 0x3, [{@rand_addr=0x64010102}, {@local, 0x2}, {@multicast1, 0x2a}, {@loopback, 0x1000}, {@loopback, 0xff}]}, @cipso={0x86, 0x18, 0x3, [{0x6, 0x9, "b1a36b9acbee36"}, {0x5, 0x9, "67b7f1deb4dcc8"}]}, @generic={0x88, 0x7, "e13880fce8"}, @timestamp_prespec={0x44, 0x24, 0xff, 0x3, 0x8, [{@empty, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast1, 0x19}]}, @timestamp_prespec={0x44, 0x3c, 0xdb, 0x3, 0x1, [{@broadcast, 0xa0}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x94}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@remote, 0x7}, {@local, 0x7}, {@loopback, 0xfffffff8}]}]}}}}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x4, 0x8, 0xb}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10001, 0x9, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r7) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r8, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x6, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0xc000}, 0x24000850) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x7}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_OKEY={0x8, 0x5, 0x1}, @IFLA_GRE_LOCAL={0x8, 0x6, @remote}]}}}]}, 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x6, 0x8, 0x2}, 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r1, &(0x7f0000000300)="99a283f3300100c9c12398c3ae46eb2b0f6b106f92c0a70180de08f7788e", 0x0, 0x4}, 0x20) (async) accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10, 0x80000) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'gre0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x30, 0x7, 0x6, 0x4, {{0x39, 0x4, 0x3, 0x7, 0xe4, 0x65, 0x0, 0x5, 0x0, 0x0, @private=0xa010100, @remote, {[@timestamp_addr={0x44, 0xc, 0x61, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x80}]}, @rr={0x7, 0x17, 0xe1, [@local, @multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @end, @timestamp_addr={0x44, 0x2c, 0x1e, 0x1, 0x3, [{@rand_addr=0x64010102}, {@local, 0x2}, {@multicast1, 0x2a}, {@loopback, 0x1000}, {@loopback, 0xff}]}, @cipso={0x86, 0x18, 0x3, [{0x6, 0x9, "b1a36b9acbee36"}, {0x5, 0x9, "67b7f1deb4dcc8"}]}, @generic={0x88, 0x7, "e13880fce8"}, @timestamp_prespec={0x44, 0x24, 0xff, 0x3, 0x8, [{@empty, 0x8}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast1, 0x19}]}, @timestamp_prespec={0x44, 0x3c, 0xdb, 0x3, 0x1, [{@broadcast, 0xa0}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x94}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@remote, 0x7}, {@local, 0x7}, {@loopback, 0xfffffff8}]}]}}}}}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x4, 0x8, 0xb}, 0x50) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10001, 0x9, 0x1}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r7) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r8, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x6, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0xc000}, 0x24000850) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x7}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_OKEY={0x8, 0x5, 0x1}, @IFLA_GRE_LOCAL={0x8, 0x6, @remote}]}}}]}, 0x50}}, 0x0) (async) 1.443474345s ago: executing program 7 (id=2051): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4b, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x800, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xffff}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24048034) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r0], 0x20}, 0x1, 0x0, 0x0, 0x600c8c4}, 0x20000800) 1.101051236s ago: executing program 9 (id=2052): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) (rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8040) (async, rerun: 64) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)}, 0x40000021) (rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x5c, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000804) 811.892034ms ago: executing program 9 (id=2053): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) sendmsg$IEEE802154_START_REQ(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="06000000d5a07d33d552893083b3c1b0b71486b7054659c3d4374774f7b9257d0af73b233535729bf0cf50245e", @ANYRES16=r3, @ANYBLOB="010027bd7000ffdbdf250d00000006000800a0aa0000050007000800000006000a00ffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x200c8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000000c0)={0x10, 0x19, 0x508, 0x70bd2c, 0x25dfdbfc}, 0x10}], 0x1, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x20008850}, 0x4) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) (async) sendmsg$IEEE802154_START_REQ(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="06000000d5a07d33d552893083b3c1b0b71486b7054659c3d4374774f7b9257d0af73b233535729bf0cf50245e", @ANYRES16=r3, @ANYBLOB="010027bd7000ffdbdf250d00000006000800a0aa0000050007000800000006000a00ffff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x200c8000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$netlink(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000000c0)={0x10, 0x19, 0x508, 0x70bd2c, 0x25dfdbfc}, 0x10}], 0x1, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x20008850}, 0x4) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) 611.316291ms ago: executing program 9 (id=2054): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac14143c00000000000000000000000000000000000200000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc0100000000001f0000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000002000000000000000000000000000002000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00170000000000fdffffff000000000000000028bd7000000000004c001400636d6163286165732900000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000001800"], 0x1a0}}, 0x800) 608.633323ms ago: executing program 1 (id=2055): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff8000000000000008000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb09", 0x65}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) setsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000000)=0xac0f, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004503005800000000202f"], 0x0) 452.645339ms ago: executing program 7 (id=2056): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) sendmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000780)="f77f0b6c8889a79a2802bda2", 0xc}], 0x1}}], 0x1, 0x40000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x840000000002, 0x3, 0xfa) setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0xff00) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x84080, 0x0) syz_extract_tcp_res(&(0x7f0000000240)={0x41424344, 0x41424344}, 0x4, 0xffffffff) write$tun(r3, &(0x7f0000000c40)={@val={0x0, 0x6000}, @val={0x0, 0x3, 0x6, 0x6, 0xd, 0x5}, @mpls={[{0xf69d4}, {0xed45, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x10, 0x0, 0x1}, {0x9}, {0x2, 0x0, 0x1}, {}], @ipv6=@tcp={0xa, 0x6, "4fe995", 0x466, 0x6, 0xff, @empty, @local, {[@hopopts={0xff, 0x6, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x30, {0x3, 0xa, 0xd5, 0x1, [0x8, 0x3a36, 0x3, 0x1, 0x7]}}]}, @srh={0x2, 0x8, 0x4, 0x4, 0x7, 0x20, 0x1, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2]}, @fragment={0x87, 0x0, 0x0, 0x1, 0x0, 0x19, 0x66}, @dstopts={0x3a, 0x1e, '\x00', [@calipso={0x7, 0x58, {0x3, 0x14, 0x6, 0x1, [0xfffffffffffffff9, 0x9, 0x4, 0xfe, 0x2, 0x9, 0x9, 0xa7, 0x0, 0x461]}}, @pad1, @generic={0x1, 0x4f, "b99f3061e2a4a1ddabd5f64b8ea151f1cb462207660a593734eb0a58b9d8fa1f6b776ea4af7959d25467b2a1399d3ef842371fb55d128a85a5760290db15e35b176a60c00b2dd97e70525143cc48a8"}, @enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x40, {0xfc9ab2b8a49a29b6, 0xe, 0x7, 0x0, [0x40, 0xfffffffffffffffa, 0x0, 0x80, 0x8, 0xaea1, 0xbb]}}]}, @hopopts={0xb5, 0x3e, '\x00', [@generic={0x7, 0xdc, "2af1ca39ec31512a5cc75bdb9e29375a26eea4faab4b5f4b80f0fea6338ab4f6c55f186027d7ca5c551ec6b60dada5f1fc33ca75b700be2a1d08798b071fb7f00aa3cbbf373b17871a37742e0ec30a4e26df2ffdb0cd1b644c4153e8da5685aafe30bfb6a0618d718aff91e60435e44d541d4a82c1bba36664e0ae59c74339a1a9672d1d83dc9c446b0af056f810f10e7a3fd787feb9f3ee143b9ebd472627c23676176d0011fef8314ef6b77d916a9b3cbaf59758705981e1060d04d9bee0c38be3ce591ad4d65b3ae52abf54bd18d72768a3b6e6341a6fe75728fb"}, @generic={0xfd, 0xed, "f9a2beee6a17e22686cabf17253268672fd2bea5023e799a214f143409f80ea34fcfe70d289a437654ebc2873b790dee14e01592053b2edfbdc712417218257b9e9042095e8f4677cdade2dde7a2371e66daa58fc2ced52edea81aa21ac075cf1038ff3cb4b44757a246ed103b6df882686ee49ede872335db197f9031a5fcb5018afc0b54b762e8a8790d925b47e9a13441f1abd29e078bc3a5a5fa67e6986529729c242070959217f4ffceb3a93d790377fe7fa9db1c84a3da437801235bf168576da031d98b585c78870966d853c342f65c8d9a8240c1fd9f99d1a595f1298262c91259dc25787c4763903d"}, @calipso={0x7, 0x10, {0x1, 0x2, 0x10, 0xff01, [0x7fffffffffffffff]}}, @hao={0xc9, 0x10, @private2}, @ra={0x5, 0x2, 0x8001}]}, @hopopts={0x2, 0xa, '\x00', [@generic={0xe3, 0x2d, "001e759dbf13c3f9e4df7455e0d2839aa9daa60626fa3f812d32ef066ecb8e8deb4d83990921fc95e8ad3b1da2"}, @generic={0x1}, @jumbo={0xc2, 0x4, 0x10000}, @calipso={0x7, 0x18, {0x0, 0x4, 0x7f, 0x58, [0x44f, 0xf8f]}}]}], {{0x4e20, 0x4e22, 0x41424344, r4, 0x1, 0x0, 0xf, 0xc2, 0x7, 0x0, 0x4, {[@sack_perm={0x4, 0x2}, @sack={0x5, 0x22, [0x2, 0xfffffff1, 0xd6, 0x6, 0x8, 0x44, 0x8, 0xffff]}, @nop]}}, {"2811fa780835752e26dd75e8bbcae0c476764e8b2217881b471e27541e6d80abf7639c56914add400fc452a77c3230a4e837b7b56a94946ef76f"}}}}}}, 0x4b8) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}], 0x28}, 0x4044800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRESHEX], 0x248}, 0x1, 0x0, 0x0, 0x11}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x7}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB='\x00\x00r\a\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0xff05, 0x0) r10 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@o_path={&(0x7f0000000980)='./file0\x00', 0x0, 0x8}, 0x18) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x20, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1e, 0x1e, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x9a5b68ec7a6cf8e9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @jmp={0x5, 0x0, 0x3, 0x6, 0xb, 0xffffffffffffffc0, 0x1}]}, &(0x7f0000000380)='GPL\x00', 0x36, 0x14, &(0x7f00000003c0)=""/20, 0x41100, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000ac0)=[0xffffffffffffffff, r11, 0x1, r12, r13], &(0x7f0000000b00)=[{0x5, 0x4, 0xd, 0xb}, {0x2, 0x5, 0x8, 0x9}, {0x1, 0x3, 0x8, 0x2}, {0x5, 0x4}, {0x1, 0x5, 0x0, 0x9}], 0x10, 0xb}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r9, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x13, &(0x7f00000005c0)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffb}, @generic={0x5, 0x7, 0x3, 0x6, 0x561b}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000001100)=""/4096, 0x41000, 0x16, '\x00', r7, @fallback=0x2, r9, 0x8, &(0x7f0000000200)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x3, 0x6, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000006c0)=[r9, r9, r9, r9, r6, r9, r9, r14, r6], &(0x7f0000000700)=[{0x0, 0x4, 0x8, 0x3}, {0x3, 0x3, 0xc, 0x7}, {0x3, 0x5, 0xb, 0x4}, {0x0, 0x2, 0x9, 0x4}], 0x10, 0x5ee}, 0x94) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="02002cbd7000ffdbdf250200000014000c00fc01000000000000000000000000000014000c00fe8000000000000000000000000000bb080004000a01010108000100", @ANYRES32=0x0, @ANYBLOB="62e6ea08000710124369a0c95e8b95304f173721db8cf201db88c3b0ff9ef201000000d4d47d76c682860f69de087488860699e75472e977c68dd3623cc1b80916f47c0199283ab25bc15610964ff0d0af4030e88a842c4b353e6e31211b051a040a142eaf244da0ec2e56075accdf6f61db8e61f51ca925790cde", @ANYRES32=r9, @ANYBLOB="080004000a01010208000500ffffffff14000b0000000000000000000000ffff0a01010208000700", @ANYRES32=r10, @ANYBLOB="0c0003000300000000000000"], 0x8c}}, 0x0) 452.073487ms ago: executing program 9 (id=2057): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0, 0x0, 0x3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10, 0x0}, 0x4000001) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r2, r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$802154_raw(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000180)={&(0x7f0000000600)="2ebd485ccf3db66ffa4f59df0efc0ea9febde2bfb22d1b144f5382d4ca40fb62f0d9ac9e01d89b5efb43cd70c09b4e40ce413747bcd444534ddc201390d26aecfd0e8fbd3b4a5a402087a7af45daa21d273f45c2134f924293b87620a2c3ac69441df66bf78060b3b517e1e3a73292633407d967541e3320fc1cd81fc6d7dee85fde602c038c7cfde2b4f9acba8d3b3c5a5971eaa24d9c5892bb49048b51bf358d4a0696ab35b183596c81250f6f7942d928088285d63ed08657df798ab774f87b208e4257ca984a0026b400f8200096ecb4169be31f863fe16951a2a0f074b8", 0xe0}, 0x1, 0x0, 0x0, 0x811}, 0x8000000) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8fbad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x48}}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x6c, 0x64, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xe, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5317}]}}]}, 0x6c}}, 0x48010) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffffffff}, 0x50) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 356.14425ms ago: executing program 1 (id=2058): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000020301020000000000d3288ff4000009"], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x4000004) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x88, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x3c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a144ca0}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fd20378}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf40e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3878}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3228575b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3277c258}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}]}, 0x88}}, 0x4) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0xfffffffd, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x34}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000340001000000000000000000010100800c"], 0x114}], 0x1}, 0x0) 238.86531ms ago: executing program 1 (id=2059): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}}, 0x20}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 226.268572ms ago: executing program 9 (id=2060): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03210000000000002c0012800c0001006d6163766c616e001c000280080001000800000006000200010000001ffe02000000000008000500", @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 156.093625ms ago: executing program 1 (id=2061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x22, 0x0, 0xfffff024}, {0x28, 0x0, 0x0, 0xfdfff034}, {0x6, 0x3, 0xa, 0x4}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x9, 0x8}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r6}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 83.538766ms ago: executing program 9 (id=2062): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffc}, 0x10}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) write(r3, &(0x7f0000000240)="94", 0x1) vmsplice(r6, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) tee(r2, r6, 0x8f5, 0x100000000000000) write(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32=r0], 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x20}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000005800)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r7, @ANYRESHEX=r8], 0x4c}}, 0x804) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r12, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r13, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) 79.908011ms ago: executing program 1 (id=2063): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000001080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70fd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x40}]}}}]}, 0x40}}, 0x0) 0s ago: executing program 1 (id=2064): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x28}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x925}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x7, 0x5, 0x10, 0xfffc, 0x81]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8d5}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x89a}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x84}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff0}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0xc, 0x3, 0x6, 0x7, 0x6]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10040011}, 0x8d0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES64=r2, @ANYRESHEX=r4, @ANYRESDEC], &(0x7f0000000200)='syzkaller\x00', 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r7) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000000000003600000008007300000000000e0001006e657464657673696d0000000f0002006e627464657673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x11, r9, 0x3cd30000) ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000140)={{{@in=@loopback, @in=@loopback, 0x4e25, 0x0, 0x3, 0x2, 0x2}, {0x2, 0x53, 0x4, 0x7, 0xffffdffffffffffc, 0x1e6, 0xfffffffffffffffe, 0x8001}, {0x7ffffffffffffffe, 0x0, 0xfdfb, 0x5}, 0x727, 0x0, 0x1, 0x0, 0x3, 0x2}, {{@in6=@empty, 0x0, 0x2b}, 0xa, @in=@multicast1, 0xffffffff, 0x1, 0x2, 0x0, 0xffffffff, 0x3439, 0x400009}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x2}, 0x1c) kernel console output (not intermixed with test programs): ] veth0_vlan: entered promiscuous mode [ 210.954415][T10539] veth1_vlan: entered promiscuous mode [ 210.986726][T10539] veth0_macvtap: entered promiscuous mode [ 210.995981][T10539] veth1_macvtap: entered promiscuous mode [ 211.013647][T10539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.028634][T10539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.043258][ T1144] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.055787][ T8187] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.075959][ T8187] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.085124][ T51] Bluetooth: hci4: command tx timeout [ 211.088414][ T8187] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.142854][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.152127][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.173540][ T6951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.182548][ T6951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.699102][T10626] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1276'. [ 211.709856][T10626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1276'. [ 211.718946][T10626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1276'. [ 211.838228][T10638] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1279'. [ 211.850960][T10637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1279'. [ 212.089193][T10654] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1284'. [ 212.203958][ T5882] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.216617][ T5882] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.223674][T10659] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input39 [ 212.234466][ T5882] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.245148][ T5882] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.253778][ T5882] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.420745][T10663] tipc: Enabled bearer , priority 0 [ 212.468419][T10663] syzkaller0: entered promiscuous mode [ 212.473920][T10663] syzkaller0: entered allmulticast mode [ 212.481702][T10663] tipc: Resetting bearer [ 212.508723][T10657] lo speed is unknown, defaulting to 1000 [ 212.639341][T10657] chnl_net:caif_netlink_parms(): no params data found [ 212.713589][T10657] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.721904][T10657] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.729353][T10657] bridge_slave_0: entered allmulticast mode [ 212.737072][T10657] bridge_slave_0: entered promiscuous mode [ 212.745138][T10657] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.752424][T10657] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.760286][T10657] bridge_slave_1: entered allmulticast mode [ 212.768117][T10657] bridge_slave_1: entered promiscuous mode [ 212.801296][T10657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.813026][T10657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.848639][T10657] team0: Port device team_slave_0 added [ 212.858309][T10657] team0: Port device team_slave_1 added [ 212.950517][T10657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.961906][T10657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.988500][T10657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.001408][T10672] tipc: Started in network mode [ 213.007319][T10672] tipc: Node identity 2af2760161ab, cluster identity 4711 [ 213.016999][T10672] tipc: Enabled bearer , priority 0 [ 213.027553][T10657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.036024][T10657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.065036][T10657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.126657][T10674] syzkaller0: entered promiscuous mode [ 213.132650][T10674] syzkaller0: entered allmulticast mode [ 213.139635][T10674] tipc: Resetting bearer [ 213.162127][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1287'. [ 213.171753][ T51] Bluetooth: hci4: command tx timeout [ 213.212717][T10657] hsr_slave_0: entered promiscuous mode [ 213.219908][T10657] hsr_slave_1: entered promiscuous mode [ 213.226814][T10657] debugfs: 'hsr0' already exists in 'hsr' [ 213.232736][T10657] Cannot create hsr debugfs directory [ 213.239361][T10662] tipc: Resetting bearer [ 213.270642][ T5882] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 213.282012][ T5882] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 213.290230][ T5882] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 213.301098][ T5882] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 213.308863][ T5882] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.146622][ T43] tipc: Node number set to 1264154113 [ 214.289090][ T51] Bluetooth: hci5: command tx timeout [ 214.584673][T10662] tipc: Disabling bearer [ 214.594816][T10671] tipc: Resetting bearer [ 215.247987][ T51] Bluetooth: hci4: command tx timeout [ 215.407066][ T5882] Bluetooth: hci6: command tx timeout [ 216.012665][T10671] tipc: Disabling bearer [ 216.365351][ T5882] Bluetooth: hci5: command tx timeout [ 217.327405][ T5882] Bluetooth: hci4: command tx timeout [ 217.428611][T10691] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1291'. [ 217.487345][ T5882] Bluetooth: hci6: command tx timeout [ 217.539229][T10693] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 217.804807][T10698] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1294'. [ 217.901764][T10657] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 217.932265][T10657] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 217.949587][T10657] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 217.962614][T10676] lo speed is unknown, defaulting to 1000 [ 217.981515][T10657] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 218.047237][T10705] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input40 [ 218.280542][T10657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.388434][T10657] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.443079][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.450677][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.455302][ T5882] Bluetooth: hci5: command tx timeout [ 218.471042][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.478244][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.516698][T10676] chnl_net:caif_netlink_parms(): no params data found [ 218.575122][T10717] tipc: Enabled bearer , priority 0 [ 218.632339][T10717] syzkaller0: entered promiscuous mode [ 218.638171][T10717] syzkaller0: entered allmulticast mode [ 218.644326][T10717] tipc: Resetting bearer [ 218.696811][T10716] tipc: Resetting bearer [ 219.060191][T10730] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1300'. [ 219.566679][ T51] Bluetooth: hci6: command tx timeout [ 220.033732][T10716] tipc: Disabling bearer [ 220.060302][T10676] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.068045][T10676] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.075924][T10676] bridge_slave_0: entered allmulticast mode [ 220.082913][T10676] bridge_slave_0: entered promiscuous mode [ 220.105951][T10676] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.113113][T10676] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.135827][T10676] bridge_slave_1: entered allmulticast mode [ 220.143782][T10676] bridge_slave_1: entered promiscuous mode [ 220.272258][T10676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.317820][T10676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.416866][T10676] team0: Port device team_slave_0 added [ 220.440908][T10676] team0: Port device team_slave_1 added [ 220.528370][ T51] Bluetooth: hci5: command tx timeout [ 220.553526][T10676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.568942][T10676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.595765][T10676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.609939][T10676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.617613][T10676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.645327][T10676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.751265][T10755] tipc: Enabling of bearer rejected, failed to enable media [ 220.822672][T10657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.850149][T10676] hsr_slave_0: entered promiscuous mode [ 220.865975][T10676] hsr_slave_1: entered promiscuous mode [ 220.882731][T10676] debugfs: 'hsr0' already exists in 'hsr' [ 220.895072][T10676] Cannot create hsr debugfs directory [ 220.964675][T10733] lo speed is unknown, defaulting to 1000 [ 221.382054][T10657] veth0_vlan: entered promiscuous mode [ 221.426317][T10657] veth1_vlan: entered promiscuous mode [ 221.438336][T10676] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 221.469240][T10676] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 221.482876][T10676] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 221.510523][T10676] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 221.533670][T10657] veth0_macvtap: entered promiscuous mode [ 221.563063][T10657] veth1_macvtap: entered promiscuous mode [ 221.621373][T10657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.640648][T10657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.649747][ T51] Bluetooth: hci6: command 0x0419 tx timeout [ 221.787798][T10676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.825911][ T1144] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.847526][ T8184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.874204][ T8184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.883879][ T6951] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.925903][ T6951] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.943876][T10676] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.958851][ T6951] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.978206][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.993471][ T8184] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.000715][ T8184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.019904][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.063890][ T8184] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.071141][ T8184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.440831][T10785] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1308'. [ 222.543060][T10676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.704584][T10676] veth0_vlan: entered promiscuous mode [ 222.723630][T10797] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 222.737112][T10676] veth1_vlan: entered promiscuous mode [ 222.791894][T10676] veth0_macvtap: entered promiscuous mode [ 222.808507][T10676] veth1_macvtap: entered promiscuous mode [ 222.842628][T10676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.894351][T10800] netlink: 'syz.0.1312': attribute type 1 has an invalid length. [ 222.904701][T10676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.937756][ T6953] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.958194][ T6953] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.977035][ T6953] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.997286][ T6953] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.139251][ T6953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.147397][ T6953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.220738][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.254239][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.711316][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 223.727772][ T51] Bluetooth: hci6: command 0x0419 tx timeout [ 223.733926][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 223.755210][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 223.775177][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 223.783838][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 224.028167][T10827] tipc: Started in network mode [ 224.039777][T10827] tipc: Node identity 865b5b3e8a66, cluster identity 4711 [ 224.057416][T10827] tipc: Enabled bearer , priority 0 [ 224.148025][T10827] syzkaller0: entered promiscuous mode [ 224.156958][T10827] syzkaller0: entered allmulticast mode [ 224.163528][T10827] tipc: Resetting bearer [ 224.171880][T10815] lo speed is unknown, defaulting to 1000 [ 224.242459][ T6951] tipc: Resetting bearer [ 224.261451][T10826] tipc: Resetting bearer [ 225.114988][ T5915] tipc: Node number set to 205347646 [ 225.806997][ T51] Bluetooth: hci7: command tx timeout [ 226.352409][T10826] tipc: Disabling bearer [ 226.368144][T10841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1321'. [ 226.512801][T10841] bridge_slave_1: left allmulticast mode [ 226.538342][T10841] bridge_slave_1: left promiscuous mode [ 226.544250][T10841] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.623129][T10849] netlink: 'syz.7.1323': attribute type 10 has an invalid length. [ 226.636324][T10841] bridge_slave_0: left allmulticast mode [ 226.642390][T10841] bridge_slave_0: left promiscuous mode [ 226.658072][T10841] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.838198][T10849] team0: Port device netdevsim0 added [ 226.921390][T10857] netlink: 'syz.7.1326': attribute type 1 has an invalid length. [ 227.174395][T10815] chnl_net:caif_netlink_parms(): no params data found [ 227.379461][T10815] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.458887][T10815] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.466743][T10815] bridge_slave_0: entered allmulticast mode [ 227.478701][T10815] bridge_slave_0: entered promiscuous mode [ 227.491794][T10855] lo speed is unknown, defaulting to 1000 [ 227.563687][T10815] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.577261][T10815] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.587257][T10815] bridge_slave_1: entered allmulticast mode [ 227.598927][T10815] bridge_slave_1: entered promiscuous mode [ 227.691830][T10815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.708963][T10815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.766197][T10815] team0: Port device team_slave_0 added [ 227.775781][T10815] team0: Port device team_slave_1 added [ 227.822973][T10815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.830075][T10815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.858716][T10815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.872641][T10815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.879966][T10815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.906190][ T51] Bluetooth: hci7: command tx timeout [ 227.913416][T10815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.000976][T10815] hsr_slave_0: entered promiscuous mode [ 228.008186][T10815] hsr_slave_1: entered promiscuous mode [ 228.014614][T10815] debugfs: 'hsr0' already exists in 'hsr' [ 228.021748][T10815] Cannot create hsr debugfs directory [ 228.332007][T10883] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1332'. [ 228.633449][T10815] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 228.653187][T10815] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 228.678444][T10815] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 228.708056][T10815] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 228.767415][T10901] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1335'. [ 228.978607][T10904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1337'. [ 228.998855][T10815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.078587][T10815] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.120450][ T6953] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.127690][ T6953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.199542][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.206759][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.452514][T10907] lo speed is unknown, defaulting to 1000 [ 229.837270][T10934] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1343'. [ 229.853582][T10815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.965146][ T51] Bluetooth: hci7: command tx timeout [ 230.150832][T10957] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1348'. [ 230.161367][T10957] netlink: 'syz.8.1348': attribute type 6 has an invalid length. [ 230.237003][T10815] veth0_vlan: entered promiscuous mode [ 230.260662][T10815] veth1_vlan: entered promiscuous mode [ 230.308707][T10815] veth0_macvtap: entered promiscuous mode [ 230.320424][T10815] veth1_macvtap: entered promiscuous mode [ 230.340669][T10815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.356562][T10815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.377200][ T1108] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.388116][ T1108] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.398244][ T1108] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.408510][ T1108] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.476913][ T8187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.485443][ T8187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.513587][ T8187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.521958][ T8187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.578048][T10968] sctp: [Deprecated]: syz.9.1313 (pid 10968) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.578048][T10968] Use struct sctp_sack_info instead [ 230.959006][T10976] macvtap1: entered allmulticast mode [ 230.964547][T10976] veth0_macvtap: entered allmulticast mode [ 231.222189][T10987] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1358'. [ 231.371992][T10989] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1359'. [ 231.431771][T10995] netlink: 'syz.7.1361': attribute type 10 has an invalid length. [ 231.476795][T10995] veth0_vlan: left promiscuous mode [ 231.484525][T10995] veth0_vlan: entered promiscuous mode [ 231.500530][T10995] team0: Device veth0_vlan failed to register rx_handler [ 231.821664][T11019] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1370'. [ 231.938884][T11031] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1371'. [ 231.939558][T11032] bond0: Caught tx_queue_len zero misconfig [ 232.049744][ T51] Bluetooth: hci7: command tx timeout [ 232.207326][T11042] tipc: Started in network mode [ 232.212228][T11042] tipc: Node identity 0638d87b97ef, cluster identity 4711 [ 232.222215][T11042] tipc: Enabled bearer , priority 0 [ 232.248188][T11042] syzkaller0: entered promiscuous mode [ 232.253703][T11042] syzkaller0: entered allmulticast mode [ 232.298036][T11042] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 232.323763][T11042] tipc: Resetting bearer [ 232.381865][T11042] tipc: Resetting bearer [ 232.414572][T11042] tipc: Disabling bearer [ 232.616525][T11027] lo speed is unknown, defaulting to 1000 [ 232.849927][T11048] lo speed is unknown, defaulting to 1000 [ 233.306927][T11080] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 233.318782][T11080] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 233.492815][T11089] tipc: Enabled bearer , priority 0 [ 233.581559][T11089] syzkaller0: entered promiscuous mode [ 233.587947][T11089] syzkaller0: entered allmulticast mode [ 233.594335][T11089] tipc: Resetting bearer [ 233.626285][T11086] tipc: Resetting bearer [ 233.684538][T11097] netlink: 'syz.9.1392': attribute type 5 has an invalid length. [ 235.406950][T11086] tipc: Disabling bearer [ 235.423339][T11101] tipc: Enabling of bearer rejected, failed to enable media [ 235.623824][T11124] netlink: 108 bytes leftover after parsing attributes in process `syz.9.1398'. [ 235.632479][T11128] netlink: 'syz.8.1399': attribute type 32 has an invalid length. [ 235.662322][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1399'. [ 235.685548][T11128] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 235.705947][T11128] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 235.918001][T11147] netlink: 'syz.9.1403': attribute type 4 has an invalid length. [ 235.944481][T11147] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.1403'. [ 235.956821][T11151] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1404'. [ 235.960506][T11147] netlink: 'syz.9.1403': attribute type 1 has an invalid length. [ 235.977890][T11147] netlink: 'syz.9.1403': attribute type 8 has an invalid length. [ 236.079269][T11153] tipc: Enabled bearer , priority 0 [ 236.115901][ T5882] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 236.126316][T11159] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 236.126380][ T5882] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 236.146071][ T5882] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 236.155663][ T5882] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 236.164020][ T5882] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 236.207747][T11153] syzkaller0: entered promiscuous mode [ 236.213304][T11153] syzkaller0: entered allmulticast mode [ 236.219832][T11153] tipc: Resetting bearer [ 236.270100][T11152] tipc: Resetting bearer [ 236.741460][T11180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1414'. [ 236.760497][T11180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1414'. [ 237.115173][ T43] tipc: Node number set to 2446841979 [ 238.086718][ T8187] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 238.209326][ T5882] Bluetooth: hci8: command tx timeout [ 238.373898][T11152] tipc: Disabling bearer [ 238.810864][T11169] lo speed is unknown, defaulting to 1000 [ 239.344721][T11154] lo speed is unknown, defaulting to 1000 [ 239.844602][T11154] chnl_net:caif_netlink_parms(): no params data found [ 240.039232][T11154] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.047467][T11154] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.056494][T11154] bridge_slave_0: entered allmulticast mode [ 240.066522][T11154] bridge_slave_0: entered promiscuous mode [ 240.081690][T11225] pim6reg: entered allmulticast mode [ 240.088897][T11154] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.096619][T11154] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.103988][T11154] bridge_slave_1: entered allmulticast mode [ 240.118627][T11154] bridge_slave_1: entered promiscuous mode [ 240.131654][T11225] pim6reg: left allmulticast mode [ 240.212447][T11154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.232652][T11154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.285325][ T5882] Bluetooth: hci8: command tx timeout [ 240.311573][T11154] team0: Port device team_slave_0 added [ 240.331644][T11154] team0: Port device team_slave_1 added [ 240.497277][T11209] lo speed is unknown, defaulting to 1000 [ 240.498738][T11154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.511500][T11154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.538546][T11154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.552301][T11210] lo speed is unknown, defaulting to 1000 [ 240.554305][T11154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.565893][T11154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.592899][T11154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.643256][T11214] lo speed is unknown, defaulting to 1000 [ 240.753619][T11154] hsr_slave_0: entered promiscuous mode [ 240.771434][T11154] hsr_slave_1: entered promiscuous mode [ 240.786034][T11154] debugfs: 'hsr0' already exists in 'hsr' [ 240.802285][T11154] Cannot create hsr debugfs directory [ 241.204222][T11154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.284134][T11154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.362644][T11154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.443483][T11154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.561440][T11240] lo speed is unknown, defaulting to 1000 [ 241.602079][T11244] netlink: 'syz.0.1428': attribute type 3 has an invalid length. [ 241.702591][T11154] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 241.712670][T11154] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 241.723449][T11154] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 241.734637][T11154] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 241.815956][T11154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.839486][T11154] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.852056][ T6951] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.859289][ T6951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.874353][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.881565][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.076900][T11154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.128909][T11154] veth0_vlan: entered promiscuous mode [ 242.140215][T11154] veth1_vlan: entered promiscuous mode [ 242.175842][T11154] veth0_macvtap: entered promiscuous mode [ 242.185809][T11154] veth1_macvtap: entered promiscuous mode [ 242.215725][T11154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.247985][T11154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.272787][ T1144] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.305048][ T1144] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.315577][ T1144] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.355898][ T1144] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.365510][ T5882] Bluetooth: hci8: command tx timeout [ 242.427496][ T8184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.443893][ T8184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.478508][ T8187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.486955][ T8187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.128943][T11289] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1441'. [ 243.141394][T11290] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1441'. [ 243.220608][T11296] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1443'. [ 243.390998][T11305] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1447'. [ 243.421321][T11307] batman_adv: batadv0: Adding interface: dummy0 [ 243.428228][T11307] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.454630][T11307] batman_adv: batadv0: Interface activated: dummy0 [ 243.465397][T11307] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1448'. [ 243.652714][T11320] netlink: 'syz.0.1452': attribute type 29 has an invalid length. [ 243.687712][T11320] netlink: 'syz.0.1452': attribute type 29 has an invalid length. [ 243.697435][T11320] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1452'. [ 243.772171][T11324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1453'. [ 243.786309][T11324] IPv6: NLM_F_REPLACE set, but no existing node found! [ 243.839400][T11328] tipc: Enabling of bearer rejected, failed to enable media [ 244.188183][T11348] xt_l2tp: invalid flags combination: 0 [ 244.247377][T11350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1459'. [ 244.450829][ T5882] Bluetooth: hci8: command tx timeout [ 244.878943][T11361] lo speed is unknown, defaulting to 1000 [ 245.465537][T11369] netlink: 'syz.1.1464': attribute type 29 has an invalid length. [ 245.474467][T11369] netlink: 'syz.1.1464': attribute type 29 has an invalid length. [ 245.484195][T11369] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1464'. [ 245.559642][T11373] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1466'. [ 245.589213][T11373] netlink: 'syz.1.1466': attribute type 1 has an invalid length. [ 245.704685][T11381] ip6tnl0: Caught tx_queue_len zero misconfig [ 245.822519][T11388] netlink: 'syz.0.1470': attribute type 19 has an invalid length. [ 245.949153][T11397] tipc: Invalid UDP bearer configuration [ 245.949205][T11397] tipc: Enabling of bearer rejected, failed to enable media [ 245.961133][T11401] netlink: 'syz.0.1472': attribute type 13 has an invalid length. [ 245.981713][T11401] netlink: 'syz.0.1472': attribute type 17 has an invalid length. [ 245.982829][T11398] bridge3: entered allmulticast mode [ 246.112583][T11401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.124753][T11401] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.139432][T11401] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.158495][T11404] netlink: 'syz.1.1475': attribute type 29 has an invalid length. [ 246.220997][T11401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.303650][T11393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.440054][T11402] lo speed is unknown, defaulting to 1000 [ 247.005962][ T8184] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 247.607011][T11439] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 248.452687][T11457] tipc: Started in network mode [ 248.458194][T11457] tipc: Node identity 1e9effd3b13b, cluster identity 4711 [ 248.467217][T11457] tipc: Enabled bearer , priority 0 [ 248.532580][T11457] syzkaller0: entered promiscuous mode [ 248.539514][T11457] syzkaller0: entered allmulticast mode [ 248.546577][T11457] tipc: Resetting bearer [ 249.137819][T11480] __nla_validate_parse: 7 callbacks suppressed [ 249.137833][T11480] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1488'. [ 249.253208][T11456] tipc: Resetting bearer [ 249.538256][ T5975] tipc: Node number set to 2946891731 [ 250.821301][T11456] tipc: Disabling bearer [ 250.845231][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 251.219338][T11482] lo speed is unknown, defaulting to 1000 [ 251.710958][T11503] tipc: Enabled bearer , priority 0 [ 251.839284][T11502] syzkaller0: entered promiscuous mode [ 251.864460][T11502] syzkaller0: entered allmulticast mode [ 251.871360][T11502] tipc: Resetting bearer [ 252.016562][ T6951] tipc: Resetting bearer [ 252.024259][ T51] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 252.036464][ T51] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 252.048592][ T51] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 252.059776][ T51] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 252.069829][ T51] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 252.413668][T11504] lo speed is unknown, defaulting to 1000 [ 252.458137][T11501] tipc: Resetting bearer [ 252.793153][T11509] validate_nla: 2 callbacks suppressed [ 252.793171][T11509] netlink: 'syz.0.1498': attribute type 1 has an invalid length. [ 254.014574][ T5882] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 254.035539][ T5882] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 254.063490][ T5882] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 254.082372][ T5882] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 254.100909][ T5185] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 254.109289][ T5882] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 254.113387][ T5185] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 254.126449][ T51] Bluetooth: hci9: command tx timeout [ 254.142989][ T51] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 254.162760][ T51] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 254.175519][ T51] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 254.582251][T11501] tipc: Disabling bearer [ 254.602251][T11509] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 254.807909][T11504] chnl_net:caif_netlink_parms(): no params data found [ 255.130109][T11532] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1504'. [ 255.134926][T11513] lo speed is unknown, defaulting to 1000 [ 255.176602][T11504] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.189586][T11504] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.197938][T11504] bridge_slave_0: entered allmulticast mode [ 255.206672][T11504] bridge_slave_0: entered promiscuous mode [ 255.223937][T11504] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.232385][T11504] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.242429][T11504] bridge_slave_1: entered allmulticast mode [ 255.254399][T11504] bridge_slave_1: entered promiscuous mode [ 255.391464][T11504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.429988][T11504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.578156][T11515] lo speed is unknown, defaulting to 1000 [ 255.598286][T11504] team0: Port device team_slave_0 added [ 255.633740][T11504] team0: Port device team_slave_1 added [ 255.710473][T11546] tipc: Enabled bearer , priority 0 [ 255.731832][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.782751][T11546] syzkaller0: entered promiscuous mode [ 255.790193][T11546] syzkaller0: entered allmulticast mode [ 255.797730][T11546] tipc: Resetting bearer [ 255.804536][T11504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.812430][T11504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.838887][T11504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.852464][T11504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.860022][T11504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.887269][T11504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.948290][ T6951] tipc: Resetting bearer [ 256.064126][T11504] hsr_slave_0: entered promiscuous mode [ 256.075027][T11504] hsr_slave_1: entered promiscuous mode [ 256.082094][T11504] debugfs: 'hsr0' already exists in 'hsr' [ 256.089250][T11504] Cannot create hsr debugfs directory [ 256.206915][ T5877] Bluetooth: hci10: command tx timeout [ 256.211194][T11553] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1509'. [ 256.221958][ T5877] Bluetooth: hci9: command tx timeout [ 256.286713][ T5877] Bluetooth: hci11: command tx timeout [ 256.380010][T11513] chnl_net:caif_netlink_parms(): no params data found [ 256.437220][T11545] tipc: Resetting bearer [ 257.339353][T11566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1513'. [ 258.112578][T11545] tipc: Disabling bearer [ 258.168301][T11568] tipc: Enabling of bearer rejected, failed to enable media [ 258.285093][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 258.286308][ T51] Bluetooth: hci10: command tx timeout [ 258.299736][ T5877] Bluetooth: hci9: command tx timeout [ 258.328670][T11515] chnl_net:caif_netlink_parms(): no params data found [ 258.365506][ T5877] Bluetooth: hci11: command tx timeout [ 258.600790][T11504] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.663170][T11513] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.745141][T11513] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.752499][T11513] bridge_slave_0: entered allmulticast mode [ 258.773839][T11513] bridge_slave_0: entered promiscuous mode [ 258.880082][T11504] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.898889][T11513] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.906700][T11513] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.914359][T11513] bridge_slave_1: entered allmulticast mode [ 258.923028][T11513] bridge_slave_1: entered promiscuous mode [ 258.955625][T11582] lo speed is unknown, defaulting to 1000 [ 259.001661][T11504] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.028549][T11515] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.036170][T11515] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.044483][T11515] bridge_slave_0: entered allmulticast mode [ 259.053130][T11515] bridge_slave_0: entered promiscuous mode [ 259.091989][T11515] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.100939][T11515] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.111467][T11515] bridge_slave_1: entered allmulticast mode [ 259.119659][T11515] bridge_slave_1: entered promiscuous mode [ 259.166072][T11504] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.189190][T11513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.246987][T11513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.290299][T11515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.407019][T11515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.419624][T11513] team0: Port device team_slave_0 added [ 259.448213][T11595] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci11/hci11:200/input41 [ 259.464606][T11513] team0: Port device team_slave_1 added [ 259.558220][T11513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.572433][T11513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.600275][T11513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.613731][T11515] team0: Port device team_slave_0 added [ 259.621501][T11513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.629914][T11513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.657819][T11513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.686487][T11515] team0: Port device team_slave_1 added [ 259.741622][T11515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.749146][T11515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.775870][T11515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.802812][T11515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.810654][T11515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.838849][T11515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.893828][T11504] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 259.932538][T11504] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 259.972521][T11513] hsr_slave_0: entered promiscuous mode [ 259.980052][T11513] hsr_slave_1: entered promiscuous mode [ 259.987480][T11513] debugfs: 'hsr0' already exists in 'hsr' [ 259.993346][T11513] Cannot create hsr debugfs directory [ 260.000452][T11504] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 260.044319][T11515] hsr_slave_0: entered promiscuous mode [ 260.052427][T11515] hsr_slave_1: entered promiscuous mode [ 260.063530][T11515] debugfs: 'hsr0' already exists in 'hsr' [ 260.070136][T11515] Cannot create hsr debugfs directory [ 260.096970][T11504] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 260.289652][T11617] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.297482][T11617] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.329049][T11617] batman_adv: batadv0: Interface deactivated: dummy0 [ 260.365576][ T5877] Bluetooth: hci9: command tx timeout [ 260.371150][ T51] Bluetooth: hci10: command tx timeout [ 260.426246][T11617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.444589][T11617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.452298][ T51] Bluetooth: hci11: command tx timeout [ 260.574395][T11617] bridge3: left allmulticast mode [ 260.614741][ T6951] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.624430][ T6951] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.661779][ T6951] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.688399][T11622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1526'. [ 260.699161][T11622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1526'. [ 260.712187][ T8187] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.835701][T11515] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 260.850096][T11515] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 260.880225][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.889044][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.936320][T11515] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 260.946582][T11515] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 260.981412][T11504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.012719][T11504] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.040895][T11515] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 261.050831][T11515] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 261.071992][ T6951] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.079325][ T6951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.091401][ T6951] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.098556][ T6951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.122724][T11515] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 261.132518][T11515] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 261.471075][T11513] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.501126][T11515] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 261.514640][T11627] lo speed is unknown, defaulting to 1000 [ 261.517025][T11515] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 261.547057][T11515] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 261.575908][T11513] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.599236][T11515] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 261.662911][T11513] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.718037][T11504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.764791][T11513] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.982993][T11513] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 261.999958][T11513] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 262.032417][T11515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.042504][T11513] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 262.061993][T11513] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 262.104096][T11515] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.144543][ T8184] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.151756][ T8184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.161639][ T8184] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.168836][ T8184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.224166][T11504] veth0_vlan: entered promiscuous mode [ 262.261990][T11504] veth1_vlan: entered promiscuous mode [ 262.316342][T11515] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.386861][T11504] veth0_macvtap: entered promiscuous mode [ 262.403681][T11513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.423550][T11504] veth1_macvtap: entered promiscuous mode [ 262.445843][ T51] Bluetooth: hci10: command tx timeout [ 262.478163][T11513] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.502100][T11504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.514315][ T6947] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.521780][ T6947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.537626][ T51] Bluetooth: hci11: command tx timeout [ 262.561724][T11504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.580222][ T8187] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.587391][ T8187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.628302][ T8187] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.637821][ T8187] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.665898][ T1144] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.675480][ T1144] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.707344][T11515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.833602][ T8187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.858901][ T8187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.917792][ T6951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.937386][ T6951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.202027][T11671] FAULT_INJECTION: forcing a failure. [ 263.202027][T11671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.225170][T11671] CPU: 0 UID: 0 PID: 11671 Comm: syz.5.1529 Not tainted syzkaller #0 PREEMPT(full) [ 263.225197][T11671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 263.225217][T11671] Call Trace: [ 263.225224][T11671] [ 263.225233][T11671] dump_stack_lvl+0x189/0x250 [ 263.225258][T11671] ? __pfx____ratelimit+0x10/0x10 [ 263.225283][T11671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.225301][T11671] ? __pfx__printk+0x10/0x10 [ 263.225322][T11671] ? __might_fault+0xb0/0x130 [ 263.225355][T11671] should_fail_ex+0x414/0x560 [ 263.225382][T11671] _copy_from_iter+0x1de/0x1790 [ 263.225398][T11671] ? __lock_acquire+0xab9/0xd20 [ 263.225422][T11671] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 263.225453][T11671] ? policy_nodemask+0x27c/0x720 [ 263.225474][T11671] ? __pfx__copy_from_iter+0x10/0x10 [ 263.225499][T11671] ? set_page_refcounted+0xa0/0x1e0 [ 263.225520][T11671] ? page_copy_sane+0x4e/0x280 [ 263.225540][T11671] copy_page_from_iter+0xdd/0x170 [ 263.225562][T11671] tun_get_user+0x1d7b/0x3e20 [ 263.225598][T11671] ? tun_get_user+0x6f6/0x3e20 [ 263.225625][T11671] ? aa_file_perm+0x44d/0x1550 [ 263.225642][T11671] ? __pfx_tun_get_user+0x10/0x10 [ 263.225659][T11671] ? _parse_integer_limit+0x1ae/0x1f0 [ 263.225692][T11671] ? __lock_acquire+0xab9/0xd20 [ 263.225718][T11671] ? ref_tracker_alloc+0x318/0x460 [ 263.225739][T11671] ? __lock_acquire+0xab9/0xd20 [ 263.225762][T11671] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 263.225790][T11671] ? tun_get+0x1c/0x2f0 [ 263.225814][T11671] ? tun_get+0x1c/0x2f0 [ 263.225831][T11671] ? tun_get+0x1c/0x2f0 [ 263.225853][T11671] tun_chr_write_iter+0x113/0x200 [ 263.225874][T11671] vfs_write+0x5c9/0xb30 [ 263.225899][T11671] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 263.225918][T11671] ? __pfx_vfs_write+0x10/0x10 [ 263.225949][T11671] ? __fget_files+0x2a/0x420 [ 263.225980][T11671] ksys_write+0x145/0x250 [ 263.226002][T11671] ? __pfx_ksys_write+0x10/0x10 [ 263.226019][T11671] ? rcu_is_watching+0x15/0xb0 [ 263.226041][T11671] ? do_syscall_64+0xbe/0x3b0 [ 263.226061][T11671] do_syscall_64+0xfa/0x3b0 [ 263.226076][T11671] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.226098][T11671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.226113][T11671] ? clear_bhb_loop+0x60/0xb0 [ 263.226132][T11671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.226148][T11671] RIP: 0033:0x7fe2a678d97f [ 263.226165][T11671] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 263.226178][T11671] RSP: 002b:00007fe2a7644000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 263.226196][T11671] RAX: ffffffffffffffda RBX: 00007fe2a69e5fa0 RCX: 00007fe2a678d97f [ 263.226208][T11671] RDX: 0000000000000066 RSI: 0000200000000440 RDI: 00000000000000c8 [ 263.226219][T11671] RBP: 00007fe2a7644090 R08: 0000000000000000 R09: 0000000000000000 [ 263.226229][T11671] R10: 0000000000000066 R11: 0000000000000293 R12: 0000000000000001 [ 263.226239][T11671] R13: 00007fe2a69e6038 R14: 00007fe2a69e5fa0 R15: 00007ffff80049e8 [ 263.226268][T11671] [ 263.234588][T11515] veth0_vlan: entered promiscuous mode [ 263.587634][T11515] veth1_vlan: entered promiscuous mode [ 263.597692][T11513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.698277][T11680] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1532'. [ 263.724293][T11513] veth0_vlan: entered promiscuous mode [ 263.736024][T11515] veth0_macvtap: entered promiscuous mode [ 263.750655][T11515] veth1_macvtap: entered promiscuous mode [ 263.771616][T11513] veth1_vlan: entered promiscuous mode [ 263.806977][T11515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.814582][ T1210] IPVS: starting estimator thread 0... [ 263.841476][T11515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.871095][ T1144] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.908034][ T1144] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.917223][ T1144] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.925088][T11686] IPVS: using max 30 ests per chain, 72000 per kthread [ 263.941540][T11513] veth0_macvtap: entered promiscuous mode [ 263.949239][ T1144] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.977999][T11513] veth1_macvtap: entered promiscuous mode [ 264.060582][T11513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.073074][T11513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.091549][ T6947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.106735][ T6947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.167961][ T6953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.172283][ T1144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.185930][ T6953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.214234][ T1144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.225761][ T1144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.247435][ T1144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.397693][ T6947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.413799][ T6947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.452671][ T6947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.478272][ T6947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.649583][T11712] wg0: entered promiscuous mode [ 264.654482][T11712] wg0: entered allmulticast mode [ 264.753910][T11718] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.769487][T11718] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 264.782870][T11718] bridge_slave_0: default FDB implementation only supports local addresses [ 264.821880][T11712] ip6gretap0: entered promiscuous mode [ 264.835340][T11712] macvlan2: entered allmulticast mode [ 264.847824][T11712] ip6gretap0: entered allmulticast mode [ 264.859925][T11712] ip6gretap0: left allmulticast mode [ 264.866190][T11712] ip6gretap0: left promiscuous mode [ 264.879957][T11721] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1543'. [ 265.078042][T11730] €Â: renamed from bridge_slave_0 (while UP) [ 265.169213][T11734] tipc: Started in network mode [ 265.176521][T11734] tipc: Node identity f6d215861e87, cluster identity 4711 [ 265.195479][T11734] tipc: Enabled bearer , priority 0 [ 265.209266][T11734] syzkaller0: entered promiscuous mode [ 265.217210][T11734] syzkaller0: entered allmulticast mode [ 265.243416][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1549'. [ 265.274661][T11734] syzkaller0: mtu less than device minimum [ 265.421273][T11747] siw: device registration error -23 [ 265.450423][T11747] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1552'. [ 265.470393][T11733] tipc: Resetting bearer [ 265.509216][T11733] tipc: Disabling bearer [ 265.610757][T11751] netlink: 'syz.4.1556': attribute type 10 has an invalid length. [ 265.630232][T11751] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.638107][T11751] bridge0: port 1(€Â) entered disabled state [ 265.673349][T11751] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.680710][T11751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.688343][T11751] bridge0: port 1(€Â) entered blocking state [ 265.694560][T11751] bridge0: port 1(€Â) entered forwarding state [ 265.748949][T11751] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 265.912038][T11765] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1560'. [ 266.171932][T11772] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1563'. [ 266.652262][T11793] ieee802154 phy0 wpan0: encryption failed: -90 [ 267.198965][T11802] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1571'. [ 267.439705][T11819] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1576'. [ 267.500755][T11821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1577'. [ 267.558343][T11817] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1575'. [ 267.591744][T11827] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1578'. [ 267.607774][T11817] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1575'. [ 267.619489][T11817] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1575'. [ 268.239422][T11849] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1584'. [ 268.255102][T11851] sch_fq: defrate 0 ignored. [ 269.993558][T11908] tc_dump_action: action bad kind [ 270.144670][T11910] bridge_slave_0: left allmulticast mode [ 270.151839][T11910] bridge_slave_0: left promiscuous mode [ 270.160178][T11910] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.188921][T11910] bridge_slave_1: left allmulticast mode [ 270.200129][T11910] bridge_slave_1: left promiscuous mode [ 270.228050][T11910] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.260704][T11910] bond0: (slave bond_slave_0): Releasing backup interface [ 270.302272][T11910] bond0: (slave bond_slave_1): Releasing backup interface [ 270.366551][T11910] team0: Failed to send options change via netlink (err -105) [ 270.377707][T11910] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 270.393607][T11910] team0: Port device team_slave_0 removed [ 270.422054][T11910] team0: Failed to send options change via netlink (err -105) [ 270.432897][T11910] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 270.451008][T11910] team0: Port device team_slave_1 removed [ 270.459334][T11910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.467662][T11910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.481618][T11910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.505893][T11910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.537193][T11910] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 270.630895][T11914] team0: Failed to send options change via netlink (err -105) [ 270.645711][T11914] team0: Mode changed to "activebackup" [ 271.637864][T11952] netlink: 'syz.5.1613': attribute type 12 has an invalid length. [ 271.680084][T11948] vlan2: entered allmulticast mode [ 271.686765][T11948] veth1: entered allmulticast mode [ 271.705740][T11956] __nla_validate_parse: 12 callbacks suppressed [ 271.705758][T11956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1613'. [ 272.674369][T11964] lo speed is unknown, defaulting to 1000 [ 272.908059][T11989] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1620'. [ 273.081397][T11968] lo speed is unknown, defaulting to 1000 [ 273.081466][T11991] netlink: 'syz.3.1621': attribute type 29 has an invalid length. [ 273.092167][T11993] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1621'. [ 273.098288][T11992] netlink: 'syz.3.1621': attribute type 29 has an invalid length. [ 273.646908][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 274.244367][T12016] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1630'. [ 274.388835][ T5877] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 274.399022][ T5877] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 274.407696][ T5877] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 274.417921][ T5877] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 274.426898][ T5877] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 274.801992][T12021] lo speed is unknown, defaulting to 1000 [ 275.121469][T12025] lo speed is unknown, defaulting to 1000 [ 275.172306][T12034] vxcan3: entered promiscuous mode [ 275.177695][T12034] vxcan3: entered allmulticast mode [ 275.184540][T12034] team0: Device vxcan3 is of different type [ 275.240133][T12021] chnl_net:caif_netlink_parms(): no params data found [ 275.406557][T12021] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.415676][T12021] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.428591][T12044] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci12/hci12:200/input42 [ 275.440656][T12021] bridge_slave_0: entered allmulticast mode [ 275.449978][T12021] bridge_slave_0: entered promiscuous mode [ 275.464006][T12021] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.471662][T12021] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.479569][T12021] bridge_slave_1: entered allmulticast mode [ 275.495375][T12021] bridge_slave_1: entered promiscuous mode [ 275.538669][T12046] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1633'. [ 275.595428][T12021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.612532][T12021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.682505][T12021] team0: Port device team_slave_0 added [ 275.695671][T12021] team0: Port device team_slave_1 added [ 275.736990][T12021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.744052][T12021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.772768][T12021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.793758][T12021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.802081][T12021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.828545][T12021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.843270][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1636'. [ 275.919850][T12021] hsr_slave_0: entered promiscuous mode [ 275.928212][T12021] hsr_slave_1: entered promiscuous mode [ 275.936814][T12021] debugfs: 'hsr0' already exists in 'hsr' [ 275.942691][T12021] Cannot create hsr debugfs directory [ 276.526501][ T5877] Bluetooth: hci12: command tx timeout [ 276.553307][ T51] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 276.579152][ T51] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 276.588600][ T51] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 276.602428][ T51] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 276.611595][ T51] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 276.733796][T12077] erspan0: entered promiscuous mode [ 276.756157][T12077] erspan0: left promiscuous mode [ 276.892330][T12021] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 276.900091][T12084] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1646'. [ 276.917365][T12021] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 276.953269][T12021] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 276.978496][T12021] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 277.064254][T12075] lo speed is unknown, defaulting to 1000 [ 277.255926][T12021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.262966][T12100] tipc: Started in network mode [ 277.271318][T12100] tipc: Node identity d6bc3287a1ee, cluster identity 4711 [ 277.279243][T12100] tipc: Enabled bearer , priority 0 [ 277.302686][T12100] syzkaller0: entered promiscuous mode [ 277.308897][T12100] syzkaller0: entered allmulticast mode [ 277.384790][T12100] tipc: Resetting bearer [ 277.394641][T12100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.403188][T12100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.443614][T12021] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.456994][T12099] tipc: Resetting bearer [ 277.475944][T12099] tipc: Disabling bearer [ 277.501753][T12075] chnl_net:caif_netlink_parms(): no params data found [ 277.540805][ T8187] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.548232][ T8187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.601417][ T8187] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.608664][ T8187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.759567][T12117] nbd: must specify at least one socket [ 277.802579][T12075] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.811719][T12075] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.819369][T12075] bridge_slave_0: entered allmulticast mode [ 277.828467][T12075] bridge_slave_0: entered promiscuous mode [ 277.845171][T12075] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.852334][T12075] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.860028][T12075] bridge_slave_1: entered allmulticast mode [ 277.868765][T12075] bridge_slave_1: entered promiscuous mode [ 277.982219][T12075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.008343][T12075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.119718][T12075] team0: Port device team_slave_0 added [ 278.167658][T12075] team0: Port device team_slave_1 added [ 278.250185][T12075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.257644][T12075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.301814][T12075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.329178][T12075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.345355][T12075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.382485][T12075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.462261][T12021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.511585][T12075] hsr_slave_0: entered promiscuous mode [ 278.519691][T12075] hsr_slave_1: entered promiscuous mode [ 278.529971][T12075] debugfs: 'hsr0' already exists in 'hsr' [ 278.537560][T12075] Cannot create hsr debugfs directory [ 278.615775][ T51] Bluetooth: hci12: command tx timeout [ 278.686334][ T51] Bluetooth: hci13: command tx timeout [ 278.804676][T12021] veth0_vlan: entered promiscuous mode [ 278.827463][T12135] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1659'. [ 278.942003][T12075] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.990008][T12137] netlink: 'syz.3.1660': attribute type 6 has an invalid length. [ 278.991401][T12021] veth1_vlan: entered promiscuous mode [ 279.136997][T12075] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.184271][T12021] veth0_macvtap: entered promiscuous mode [ 279.219597][T12021] veth1_macvtap: entered promiscuous mode [ 279.278917][T12075] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.338076][T12021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.383405][T12075] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.429550][T12021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.465368][ T6953] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.474789][ T6953] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.508685][ T6953] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.524519][ T6953] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.611483][T12153] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1664'. [ 279.643246][T12153] netlink: 'syz.3.1664': attribute type 4 has an invalid length. [ 279.790034][T12075] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 279.802826][T12075] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 279.820455][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.830696][T12075] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 279.839785][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.866495][T12075] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 279.922481][ T8187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.941899][ T8187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.169872][T12075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.247696][T12075] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.283866][ T8187] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.291130][ T8187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.348895][ T6953] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.356144][ T6953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.690887][ T5877] Bluetooth: hci12: command tx timeout [ 280.702657][T12184] syzkaller1: entered promiscuous mode [ 280.710324][T12184] syzkaller1: entered allmulticast mode [ 280.765799][ T5877] Bluetooth: hci13: command tx timeout [ 280.908944][T12075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.601036][T12075] veth0_vlan: entered promiscuous mode [ 281.643329][T12075] veth1_vlan: entered promiscuous mode [ 281.783540][T12075] veth0_macvtap: entered promiscuous mode [ 281.818521][T12075] veth1_macvtap: entered promiscuous mode [ 281.880925][T12075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.928150][T12075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.962220][ T1097] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.014121][ T1097] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.040218][ T1097] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.068691][ T1097] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.300107][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.308434][T12217] netlink: 'syz.5.1681': attribute type 1 has an invalid length. [ 282.323258][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.392538][ T6953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.408650][ T6953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.538184][T12222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1683'. [ 282.582756][T12222] bridge0: entered promiscuous mode [ 282.591774][T12222] macsec1: entered allmulticast mode [ 282.601833][T12222] bridge0: entered allmulticast mode [ 282.629461][T12222] bridge0: port 3(macsec1) entered blocking state [ 282.646291][T12222] bridge0: port 3(macsec1) entered disabled state [ 282.682519][T12222] bridge0: left allmulticast mode [ 282.703569][T12222] bridge0: left promiscuous mode [ 282.751263][T12230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.768656][ T5877] Bluetooth: hci12: command tx timeout [ 282.776747][T12232] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1687'. [ 282.781678][T12230] batadv_slave_0: entered promiscuous mode [ 282.845396][ T5877] Bluetooth: hci13: command 0x040f tx timeout [ 283.276791][T12246] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1688'. [ 283.320970][T12246] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1688'. [ 284.219167][T12259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1693'. [ 284.926240][ T5877] Bluetooth: hci13: command 0x040f tx timeout [ 285.481314][T12287] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1699'. [ 286.459818][T12318] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci13/hci13:200/input43 [ 287.005985][ T5877] Bluetooth: hci13: command 0x040f tx timeout [ 287.384356][T12342] veth1_to_team: entered promiscuous mode [ 287.405516][T12342] veth1_to_team: entered allmulticast mode [ 287.531093][ T51] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 287.542915][ T51] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 287.552286][ T51] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 287.561715][ T51] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 287.572694][ T51] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 287.664761][T12336] lo speed is unknown, defaulting to 1000 [ 287.863225][T12355] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.871039][T12355] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.024004][T12355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.040392][T12355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.147005][T12346] lo speed is unknown, defaulting to 1000 [ 288.199399][ T1108] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.210075][ T1108] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.226741][T12360] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1716'. [ 288.244596][ T1108] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.257693][ T1108] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.539328][T12369] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1719'. [ 288.564404][T12372] netlink: 'syz.3.1720': attribute type 10 has an invalid length. [ 288.567708][T12346] chnl_net:caif_netlink_parms(): no params data found [ 288.609973][T12372] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 288.647404][T12372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1720'. [ 288.683147][T12372] bridge_slave_1: left allmulticast mode [ 288.715552][T12372] bridge_slave_1: left promiscuous mode [ 288.721380][T12372] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.758762][T12372] bridge_slave_0: left allmulticast mode [ 288.758767][T12378] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1720'. [ 288.758786][T12372] bridge_slave_0: left promiscuous mode [ 288.781883][T12372] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.805392][T12372] bond0: (slave bridge0): Releasing backup interface [ 288.993732][T12346] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.015968][T12346] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.035916][T12346] bridge_slave_0: entered allmulticast mode [ 289.044093][T12346] bridge_slave_0: entered promiscuous mode [ 289.081344][T12346] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.092973][T12346] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.123504][T12346] bridge_slave_1: entered allmulticast mode [ 289.136875][T12346] bridge_slave_1: entered promiscuous mode [ 289.148950][T12389] tipc: Started in network mode [ 289.153851][T12389] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 289.178749][T12389] tipc: Enabled bearer , priority 10 [ 289.307931][T12346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.323134][T12346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.339610][T12402] netlink: 248 bytes leftover after parsing attributes in process `syz.6.1727'. [ 289.440808][T12346] team0: Port device team_slave_0 added [ 289.450578][T12346] team0: Port device team_slave_1 added [ 289.549394][T12408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1729'. [ 289.649231][ T5877] Bluetooth: hci14: command tx timeout [ 289.669170][T12346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.678484][T12346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.711404][T12346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.729595][T12346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.742143][T12346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.772065][T12346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.864498][T12346] hsr_slave_0: entered promiscuous mode [ 289.872806][T12346] hsr_slave_1: entered promiscuous mode [ 289.880098][T12346] debugfs: 'hsr0' already exists in 'hsr' [ 289.890633][T12346] Cannot create hsr debugfs directory [ 289.903587][T12417] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1732'. [ 289.913599][T12417] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1732'. [ 290.136498][T12346] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.159176][T12420] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1733'. [ 290.172033][T12420] netlink: 'syz.2.1733': attribute type 1 has an invalid length. [ 290.180943][T12420] netlink: 'syz.2.1733': attribute type 1 has an invalid length. [ 290.195996][ T5948] tipc: Node number set to 4269801488 [ 290.233306][T12346] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.320068][T12346] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.375133][T12424] netlink: 'syz.6.1735': attribute type 33 has an invalid length. [ 290.383104][T12424] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1735'. [ 290.428683][T12346] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.721047][T12346] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 290.747031][T12346] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 290.770561][T12346] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 290.790021][T12346] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 291.052278][T12346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.130862][T12346] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.140782][T12462] netlink: zone id is out of range [ 291.161617][T12462] netlink: zone id is out of range [ 291.171500][ T6951] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.176804][T12462] netlink: zone id is out of range [ 291.178720][ T6951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.183817][T12462] netlink: get zone limit has 8 unknown bytes [ 291.210805][ T6951] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.218189][ T6951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.600565][T12346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.730783][ T51] Bluetooth: hci14: command tx timeout [ 291.866428][T12346] veth0_vlan: entered promiscuous mode [ 291.893900][T12346] veth1_vlan: entered promiscuous mode [ 291.962768][T12346] veth0_macvtap: entered promiscuous mode [ 292.000688][T12346] veth1_macvtap: entered promiscuous mode [ 292.062997][T12346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.080308][T12480] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci14/hci14:200/input44 [ 292.108960][T12346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.151686][ T6951] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.196653][ T6951] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.261492][ T1097] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.286798][ T1097] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.422307][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.441803][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.507555][ T6953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.516851][ T6953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.730915][T12488] sch_tbf: burst 2 is lower than device lo mtu (1550) ! [ 292.801654][T12499] netlink: 'syz.2.1753': attribute type 29 has an invalid length. [ 292.842208][T12499] netlink: 'syz.2.1753': attribute type 29 has an invalid length. [ 293.516717][ T6953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.542317][ T6953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.636901][T12530] netlink: 'syz.6.1764': attribute type 29 has an invalid length. [ 293.648430][T12530] netlink: 'syz.6.1764': attribute type 29 has an invalid length. [ 293.667040][T12530] __nla_validate_parse: 7 callbacks suppressed [ 293.667057][T12530] netlink: 500 bytes leftover after parsing attributes in process `syz.6.1764'. [ 293.758781][T12535] netlink: 'syz.6.1766': attribute type 8 has an invalid length. [ 293.806319][ T51] Bluetooth: hci14: command tx timeout [ 294.202586][T12552] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1774'. [ 294.218379][T12552] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 294.364332][T12565] netlink: 'syz.6.1777': attribute type 29 has an invalid length. [ 294.387133][T12565] netlink: 'syz.6.1777': attribute type 29 has an invalid length. [ 294.398223][T12565] netlink: 500 bytes leftover after parsing attributes in process `syz.6.1777'. [ 294.522212][T12573] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1781'. [ 294.602790][T12576] netlink: 'syz.3.1781': attribute type 32 has an invalid length. [ 294.783079][T12569] lo speed is unknown, defaulting to 1000 [ 294.892358][T12580] netlink: 'syz.8.1783': attribute type 2 has an invalid length. [ 295.286255][T12591] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 295.297183][T12590] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 295.495009][T12595] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 295.716732][T12606] bridge_slave_0: invalid flags given to default FDB implementation [ 295.734196][T12604] netlink: 'syz.6.1790': attribute type 29 has an invalid length. [ 295.764323][T12604] netlink: 'syz.6.1790': attribute type 29 has an invalid length. [ 295.805798][T12604] netlink: 500 bytes leftover after parsing attributes in process `syz.6.1790'. [ 295.885668][ T51] Bluetooth: hci14: command tx timeout [ 295.921361][T12617] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1792'. [ 295.986836][T12614] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 296.001220][T12619] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1793'. [ 296.024032][T12619] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1793'. [ 296.039767][T12619] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1793'. [ 296.128440][T12614] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 296.326305][T12629] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1795'. [ 296.421843][T12608] lo speed is unknown, defaulting to 1000 [ 296.921520][T12646] netlink: 'syz.3.1799': attribute type 10 has an invalid length. [ 296.955507][T12646] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.026495][T12609] lo speed is unknown, defaulting to 1000 [ 297.837854][ T5915] IPVS: starting estimator thread 0... [ 297.927916][T12676] IPVS: using max 33 ests per chain, 79200 per kthread [ 297.970842][ T51] Bluetooth: hci14: command tx timeout [ 298.173582][T12695] tipc: Enabled bearer , priority 0 [ 298.218487][T12694] tipc: Disabling bearer [ 298.552507][T12706] veth0: entered promiscuous mode [ 298.582421][T12705] veth0: left promiscuous mode [ 299.221150][T12725] __nla_validate_parse: 9 callbacks suppressed [ 299.221167][T12725] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1824'. [ 299.239050][T12725] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1824'. [ 299.250992][T12725] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1824'. [ 299.550975][T12739] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1828'. [ 299.661463][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1829'. [ 299.910714][T12748] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1831'. [ 300.981460][T12781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1842'. [ 301.063625][T12781] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1842'. [ 301.073652][T12781] netlink: zone id is out of range [ 301.079537][T12781] netlink: zone id is out of range [ 301.084725][T12781] netlink: get zone limit has 8 unknown bytes [ 301.103538][T12764] lo speed is unknown, defaulting to 1000 [ 301.106726][T12781] syzkaller1: entered promiscuous mode [ 301.115766][T12781] syzkaller1: entered allmulticast mode [ 301.130910][T12781] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 302.298535][T12827] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1857'. [ 302.315434][T12827] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1857'. [ 302.453523][T12830] validate_nla: 1 callbacks suppressed [ 302.453541][T12830] netlink: 'syz.2.1858': attribute type 13 has an invalid length. [ 302.487302][T12830] netlink: 'syz.2.1858': attribute type 17 has an invalid length. [ 302.488009][ T5877] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 302.516509][ T5877] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 302.517091][T12835] netlink: 'syz.3.1860': attribute type 1 has an invalid length. [ 302.536984][ T5877] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 302.548796][ T5877] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 302.559127][T12835] netlink: 'syz.3.1860': attribute type 1 has an invalid length. [ 302.567875][ T5877] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 302.654235][T12830] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 302.673673][T12835] netlink: 'syz.3.1860': attribute type 1 has an invalid length. [ 302.696489][T12835] netlink: 'syz.3.1860': attribute type 1 has an invalid length. [ 302.716257][T12845] netlink: 'syz.6.1861': attribute type 13 has an invalid length. [ 302.725738][T12845] netlink: 'syz.6.1861': attribute type 17 has an invalid length. [ 302.741909][T12835] netlink: 'syz.3.1860': attribute type 1 has an invalid length. [ 302.756124][T12835] netlink: 'syz.3.1860': attribute type 1 has an invalid length. [ 302.853127][T12845] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 302.882380][T12841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.958371][T12830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.066298][T12831] lo speed is unknown, defaulting to 1000 [ 303.085219][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 303.478319][T12843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.529402][T12831] chnl_net:caif_netlink_parms(): no params data found [ 303.606940][T12842] lo speed is unknown, defaulting to 1000 [ 303.814190][T12831] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.824813][T12831] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.846864][T12831] bridge_slave_0: entered allmulticast mode [ 303.862649][T12831] bridge_slave_0: entered promiscuous mode [ 303.876202][T12831] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.887500][T12831] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.895534][T12831] bridge_slave_1: entered allmulticast mode [ 303.903821][T12831] bridge_slave_1: entered promiscuous mode [ 303.964492][T12846] lo speed is unknown, defaulting to 1000 [ 304.061386][T12831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.090547][T12831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.137805][T12831] team0: Port device team_slave_0 added [ 304.146455][T12831] team0: Port device team_slave_1 added [ 304.177914][T12831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.185495][T12831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.212175][T12831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.233732][T12831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.241237][T12831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.268262][T12831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.321063][T12831] hsr_slave_0: entered promiscuous mode [ 304.327980][T12831] hsr_slave_1: entered promiscuous mode [ 304.336494][T12831] debugfs: 'hsr0' already exists in 'hsr' [ 304.342239][T12831] Cannot create hsr debugfs directory [ 304.489002][T12831] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.566280][T12831] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.605313][ T5877] Bluetooth: hci15: command tx timeout [ 304.648009][T12831] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.716335][T12831] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.853752][T12831] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 304.867838][T12831] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 304.879839][T12831] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 304.892412][T12831] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 305.050840][T12831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.099943][T12831] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.114767][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.122012][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.159214][ T6953] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.166446][ T6953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.538049][T12831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.861438][T12831] veth0_vlan: entered promiscuous mode [ 305.878580][T12831] veth1_vlan: entered promiscuous mode [ 305.921383][T12831] veth0_macvtap: entered promiscuous mode [ 305.936847][T12831] veth1_macvtap: entered promiscuous mode [ 305.960585][T12831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.982035][T12831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.000920][ T6947] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.012348][ T6947] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.025708][ T6947] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.038625][ T1097] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.183089][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.204090][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.247931][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.261320][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.695456][ T5877] Bluetooth: hci15: command tx timeout [ 306.901463][T12941] __nla_validate_parse: 132 callbacks suppressed [ 306.901478][T12941] netlink: 156 bytes leftover after parsing attributes in process `syz.9.1879'. [ 308.703602][T12971] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci15/hci15:200/input45 [ 308.765491][ T5877] Bluetooth: hci15: command tx timeout [ 308.997067][T12970] lo speed is unknown, defaulting to 1000 [ 309.258312][T12989] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci15/hci15:200/input46 [ 310.347881][T13003] validate_nla: 124 callbacks suppressed [ 310.347901][T13003] netlink: 'syz.9.1896': attribute type 10 has an invalid length. [ 310.379472][T13003] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 310.568482][T13015] veth1_to_hsr: entered promiscuous mode [ 310.574739][T13015] macvtap1: entered promiscuous mode [ 310.586929][T13015] macvtap1: entered allmulticast mode [ 310.592386][T13015] veth1_to_hsr: entered allmulticast mode [ 310.737114][T13023] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1902'. [ 310.749653][T13023] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1902'. [ 310.845829][ T5877] Bluetooth: hci15: command tx timeout [ 311.046443][T13034] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1905'. [ 311.060729][ T51] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 311.070617][ T51] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 311.081459][ T51] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 311.097307][ T51] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 311.107083][ T51] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 311.160032][T13039] syzkaller0: entered promiscuous mode [ 311.167845][T13039] syzkaller0: entered allmulticast mode [ 311.423644][T13033] lo speed is unknown, defaulting to 1000 [ 311.717220][T13059] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci16/hci16:200/input47 [ 311.772442][T13033] chnl_net:caif_netlink_parms(): no params data found [ 311.816649][T13063] bridge1: entered promiscuous mode [ 311.822030][T13063] bridge1: entered allmulticast mode [ 312.019738][T13033] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.032735][T13033] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.041673][T13033] bridge_slave_0: entered allmulticast mode [ 312.061783][T13033] bridge_slave_0: entered promiscuous mode [ 312.073028][T13033] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.089633][T13033] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.090078][T13077] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1916'. [ 312.098367][T13033] bridge_slave_1: entered allmulticast mode [ 312.119703][T13033] bridge_slave_1: entered promiscuous mode [ 312.183987][T13078] IPVS: Scheduler module ip_vs_sip not found [ 312.236943][T13033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.262023][T13033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.342541][T13033] team0: Port device team_slave_0 added [ 312.358855][T13033] team0: Port device team_slave_1 added [ 312.366771][T13085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1917'. [ 312.382318][T13085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1917'. [ 312.452376][T13033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.466901][T13033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.493850][T13033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.512133][T13033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.520831][T13033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.549577][T13033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.643686][T13033] hsr_slave_0: entered promiscuous mode [ 312.650962][T13033] hsr_slave_1: entered promiscuous mode [ 312.659714][T13033] debugfs: 'hsr0' already exists in 'hsr' [ 312.666668][T13033] Cannot create hsr debugfs directory [ 312.893444][T13033] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.920219][T13102] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1925'. [ 312.971358][T13033] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.078447][T13033] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.175698][ T5877] Bluetooth: hci16: command tx timeout [ 313.200750][T13033] team0: Port device netdevsim0 removed [ 313.210296][T13033] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.249112][T13115] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1926'. [ 313.353257][T13117] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1927'. [ 313.414613][T13119] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1928'. [ 313.420320][T13033] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 313.428091][T13119] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1928'. [ 313.450556][T13033] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 313.463169][T13033] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 313.473997][T13033] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 313.601287][T13129] netlink: 'syz.3.1929': attribute type 1 has an invalid length. [ 313.666431][T13129] 8021q: adding VLAN 0 to HW filter on device bond1 [ 313.688475][T13033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.704621][T13131] ipvlan2: entered allmulticast mode [ 313.710829][T13131] bond1: entered allmulticast mode [ 313.769687][T13129] bond1: (slave gretap1): making interface the new active one [ 313.777920][T13129] gretap1: entered allmulticast mode [ 313.791316][T13129] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 313.824164][T13128] lo speed is unknown, defaulting to 1000 [ 313.832168][T13033] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.874583][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.881836][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.913342][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.920599][ T3536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.339945][T13151] netlink: 'syz.3.1933': attribute type 1 has an invalid length. [ 314.350189][T13151] netlink: 'syz.3.1933': attribute type 2 has an invalid length. [ 314.363829][T13151] netlink: 'syz.3.1933': attribute type 1 has an invalid length. [ 314.426154][T13033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.976133][T13157] lo speed is unknown, defaulting to 1000 [ 315.004010][T13033] veth0_vlan: entered promiscuous mode [ 315.060393][T13033] veth1_vlan: entered promiscuous mode [ 315.114542][T13169] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1935'. [ 315.134171][T13033] veth0_macvtap: entered promiscuous mode [ 315.146939][T13033] veth1_macvtap: entered promiscuous mode [ 315.228775][T13033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.245847][ T5877] Bluetooth: hci16: command tx timeout [ 315.264496][T13033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.284061][ T1097] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.307094][ T1097] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.323287][ T1097] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.344784][ T1144] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.392888][T13182] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1937'. [ 315.419773][T13182] bridge0: entered promiscuous mode [ 315.471152][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.491227][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.573945][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.584543][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.741355][T13186] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 315.824283][T13192] IPv6: sit1: Disabled Multicast RS [ 315.962324][T13198] netlink: 'syz.3.1941': attribute type 1 has an invalid length. [ 316.040653][T13198] 8021q: adding VLAN 0 to HW filter on device bond3 [ 316.053514][T13198] bond2: (slave bond3): Enslaving as a backup interface with a down link [ 316.362274][T13209] syzkaller1: entered promiscuous mode [ 316.369443][T13209] syzkaller1: entered allmulticast mode [ 316.440799][T13209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.553396][T13210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.876298][T13202] lo speed is unknown, defaulting to 1000 [ 317.175659][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.253040][T13221] __nla_validate_parse: 1 callbacks suppressed [ 317.253057][T13221] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1947'. [ 317.327507][ T5877] Bluetooth: hci16: command tx timeout [ 317.369254][T13226] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1948'. [ 317.390599][T13226] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1948'. [ 317.871967][T13237] !: renamed from dummy0 (while UP) [ 318.080649][T13239] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1955'. [ 318.135327][T13239] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1955'. [ 318.144353][T13239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1955'. [ 318.216697][ T51] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 318.228015][ T51] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 318.259841][ T51] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 318.288385][ T51] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 318.301221][ T51] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 318.440872][ T5877] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 318.454788][ T5877] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 318.472340][ T5877] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 318.483013][ T5877] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 318.504767][ T5877] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 318.811344][T13244] lo speed is unknown, defaulting to 1000 [ 318.936646][T13255] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 318.952844][T13256] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1960'. [ 318.993137][T13256] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1960'. [ 319.365315][T13246] lo speed is unknown, defaulting to 1000 [ 319.405870][ T5877] Bluetooth: hci16: command tx timeout [ 319.621093][T13244] chnl_net:caif_netlink_parms(): no params data found [ 320.032500][T13246] chnl_net:caif_netlink_parms(): no params data found [ 320.161573][T13244] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.170740][T13244] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.178432][T13244] bridge_slave_0: entered allmulticast mode [ 320.187118][T13244] bridge_slave_0: entered promiscuous mode [ 320.221629][T13244] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.231564][T13244] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.239953][T13244] bridge_slave_1: entered allmulticast mode [ 320.249077][T13244] bridge_slave_1: entered promiscuous mode [ 320.293244][T13287] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1965'. [ 320.309927][T13287] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1965'. [ 320.371199][ T5877] Bluetooth: hci17: command tx timeout [ 320.442682][T13244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.479050][T13246] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.496121][T13246] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.514027][T13246] bridge_slave_0: entered allmulticast mode [ 320.531041][T13246] bridge_slave_0: entered promiscuous mode [ 320.559457][T13244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.589666][T13246] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.605989][ T5877] Bluetooth: hci18: command tx timeout [ 320.619251][T13246] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.627418][T13246] bridge_slave_1: entered allmulticast mode [ 320.636532][T13246] bridge_slave_1: entered promiscuous mode [ 320.860834][T13244] team0: Port device team_slave_0 added [ 320.888999][T13246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.940923][T13246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.967338][T13244] team0: Port device team_slave_1 added [ 321.050756][T13311] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 321.090279][T13315] netlink: 'syz.3.1974': attribute type 4 has an invalid length. [ 321.091528][T13246] team0: Port device team_slave_0 added [ 321.114922][T13246] team0: Port device team_slave_1 added [ 321.141993][T13318] netlink: 'syz.3.1974': attribute type 4 has an invalid length. [ 321.206365][T13244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.213566][T13244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.257689][T13244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.282300][T13323] team0: No ports can be present during mode change [ 321.291083][T13244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.299880][T13244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.328653][T13244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.346388][T13246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.353814][T13246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.384354][T13246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.428141][T13246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.443691][T13246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.479346][T13246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.712369][T13246] hsr_slave_0: entered promiscuous mode [ 321.729650][T13246] hsr_slave_1: entered promiscuous mode [ 321.748521][T13246] debugfs: 'hsr0' already exists in 'hsr' [ 321.759219][T13246] Cannot create hsr debugfs directory [ 321.789574][T13244] hsr_slave_0: entered promiscuous mode [ 321.804288][T13244] hsr_slave_1: entered promiscuous mode [ 321.819110][T13244] debugfs: 'hsr0' already exists in 'hsr' [ 321.835119][T13244] Cannot create hsr debugfs directory [ 322.445954][ T5877] Bluetooth: hci17: command tx timeout [ 322.552182][T13244] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.686141][ T5877] Bluetooth: hci18: command tx timeout [ 322.777832][T13244] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.906956][T13244] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.993214][T13244] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.040194][T13346] __nla_validate_parse: 7 callbacks suppressed [ 323.040212][T13346] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1984'. [ 323.329906][T13351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1985'. [ 323.342763][T13244] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 323.369102][T13244] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 323.476525][T13244] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 323.516579][T13244] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 323.615591][T13358] syzkaller1: entered promiscuous mode [ 323.629981][T13358] syzkaller1: entered allmulticast mode [ 323.690229][T13371] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1989'. [ 323.700316][T13371] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 323.707690][T13371] IPv6: NLM_F_CREATE should be set when creating new route [ 323.715034][T13371] IPv6: NLM_F_CREATE should be set when creating new route [ 323.744596][T13371] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1989'. [ 324.000654][T13379] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci18/hci18:200/input48 [ 324.014640][T13246] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 324.069732][T13246] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 324.114475][T13246] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 324.166533][T13244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.181417][T13246] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 324.281662][T13244] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.331670][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.339286][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.381642][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.389047][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.526634][ T5877] Bluetooth: hci17: command tx timeout [ 324.711731][T13246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.766587][ T5877] Bluetooth: hci18: command tx timeout [ 324.773210][T13246] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.832753][T13403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1995'. [ 324.867062][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.874302][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.918279][T13405] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci18/hci18:200/input49 [ 324.978965][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.986203][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.108500][T13410] netlink: 'syz.3.1996': attribute type 10 has an invalid length. [ 325.112920][T13246] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 325.130639][T13246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.207928][T13410] team0: Port device dummy0 added [ 325.238304][T13414] netlink: 'syz.3.1996': attribute type 10 has an invalid length. [ 325.348796][T13414] team0: Port device dummy0 removed [ 325.437478][T13244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.620499][T13244] veth0_vlan: entered promiscuous mode [ 325.668981][T13244] veth1_vlan: entered promiscuous mode [ 325.692419][T13423] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2000'. [ 325.750661][T13428] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2001'. [ 325.820447][T13244] veth0_macvtap: entered promiscuous mode [ 325.846807][T13246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.862156][T13244] veth1_macvtap: entered promiscuous mode [ 325.888192][T13430] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2002'. [ 325.961400][T13244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.018263][T13244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.057586][T13246] veth0_vlan: entered promiscuous mode [ 326.068863][T13435] netlink: 'syz.7.2003': attribute type 16 has an invalid length. [ 326.077714][T13435] netlink: 'syz.7.2003': attribute type 17 has an invalid length. [ 326.092792][ T1108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.102909][ T1108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.133918][ T5914] IPVS: starting estimator thread 0... [ 326.193630][T13435] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.201253][T13435] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.236343][T13439] IPVS: using max 29 ests per chain, 69600 per kthread [ 326.350953][T13435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.371392][T13435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.501097][T13444] FAULT_INJECTION: forcing a failure. [ 326.501097][T13444] name failslab, interval 1, probability 0, space 0, times 0 [ 326.516506][T13444] CPU: 1 UID: 0 PID: 13444 Comm: syz.3.2005 Not tainted syzkaller #0 PREEMPT(full) [ 326.516531][T13444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 326.516540][T13444] Call Trace: [ 326.516548][T13444] [ 326.516555][T13444] dump_stack_lvl+0x189/0x250 [ 326.516580][T13444] ? __pfx____ratelimit+0x10/0x10 [ 326.516602][T13444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.516621][T13444] ? __pfx__printk+0x10/0x10 [ 326.516645][T13444] ? __pfx___might_resched+0x10/0x10 [ 326.516678][T13444] should_fail_ex+0x414/0x560 [ 326.516701][T13444] should_failslab+0xa8/0x100 [ 326.516723][T13444] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 326.516744][T13444] ? __alloc_skb+0x112/0x2d0 [ 326.516765][T13444] __alloc_skb+0x112/0x2d0 [ 326.516786][T13444] netlink_sendmsg+0x5c6/0xb30 [ 326.516815][T13444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.516836][T13444] ? aa_sock_msg_perm+0xf1/0x1d0 [ 326.516861][T13444] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 326.516878][T13444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.516896][T13444] __sock_sendmsg+0x21c/0x270 [ 326.516922][T13444] ____sys_sendmsg+0x505/0x830 [ 326.516948][T13444] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.516977][T13444] ? import_iovec+0x74/0xa0 [ 326.517000][T13444] ___sys_sendmsg+0x21f/0x2a0 [ 326.517023][T13444] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.517078][T13444] ? __fget_files+0x2a/0x420 [ 326.517100][T13444] ? __fget_files+0x3a0/0x420 [ 326.517132][T13444] __x64_sys_sendmsg+0x19b/0x260 [ 326.517154][T13444] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 326.517184][T13444] ? __pfx_ksys_write+0x10/0x10 [ 326.517210][T13444] ? do_syscall_64+0xbe/0x3b0 [ 326.517231][T13444] do_syscall_64+0xfa/0x3b0 [ 326.517246][T13444] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.517268][T13444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.517284][T13444] ? clear_bhb_loop+0x60/0xb0 [ 326.517305][T13444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.517320][T13444] RIP: 0033:0x7f261ab8eec9 [ 326.517336][T13444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.517350][T13444] RSP: 002b:00007f261bab2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.517369][T13444] RAX: ffffffffffffffda RBX: 00007f261ade5fa0 RCX: 00007f261ab8eec9 [ 326.517382][T13444] RDX: 0000000020004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 326.517393][T13444] RBP: 00007f261bab2090 R08: 0000000000000000 R09: 0000000000000000 [ 326.517403][T13444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.517412][T13444] R13: 00007f261ade6038 R14: 00007f261ade5fa0 R15: 00007fff4c9f8d58 [ 326.517442][T13444] [ 326.797581][ T5877] Bluetooth: hci17: command tx timeout [ 326.847093][ T5877] Bluetooth: hci18: command tx timeout [ 326.936885][ T1108] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.959107][ T1108] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.993494][T13440] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2003'. [ 327.032511][T13456] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2009'. [ 327.077955][T13246] veth1_vlan: entered promiscuous mode [ 327.096862][ T1108] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.140348][ T1108] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.152885][ T1108] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.207499][ T1108] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.236060][ T8187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.244645][ T8187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.387336][ T8187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.396501][ T8187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.423659][T13473] netlink: 'syz.7.2015': attribute type 7 has an invalid length. [ 327.432386][T13473] netlink: 'syz.7.2015': attribute type 8 has an invalid length. [ 327.442727][T13473] netlink: 'syz.7.2015': attribute type 4 has an invalid length. [ 327.536653][T13246] veth0_macvtap: entered promiscuous mode [ 327.551456][T13246] veth1_macvtap: entered promiscuous mode [ 327.588091][T13246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.609616][T13246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.627433][ T3536] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.650424][ T3536] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.689837][ T1097] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.726220][ T1097] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.354604][ T8191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.376179][ T8191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.426886][ T8191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.454585][ T8191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.683466][T13512] __nla_validate_parse: 6 callbacks suppressed [ 328.683496][T13512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1953'. [ 329.477223][T13509] lo speed is unknown, defaulting to 1000 [ 329.704304][T13545] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2032'. [ 329.883982][T13554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2033'. [ 330.221092][T13559] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2035'. [ 330.424084][T13565] tap0: tun_chr_ioctl cmd 1074812118 [ 330.460011][T13521] lo speed is unknown, defaulting to 1000 [ 330.468059][T13569] netlink: 248 bytes leftover after parsing attributes in process `syz.7.2037'. [ 330.553128][T13570] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 331.128646][T13551] lo speed is unknown, defaulting to 1000 [ 331.172000][T13585] netlink: 'syz.1.2042': attribute type 9 has an invalid length. [ 331.208225][T13582] can: request_module (can-proto-5) failed. [ 331.224453][T13587] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2042'. [ 331.408154][T13594] netlink: 'syz.9.2045': attribute type 7 has an invalid length. [ 331.419940][T13594] netlink: 'syz.9.2045': attribute type 8 has an invalid length. [ 331.429805][T13594] netlink: 'syz.9.2045': attribute type 4 has an invalid length. [ 331.439615][T13594] netlink: 204 bytes leftover after parsing attributes in process `syz.9.2045'. [ 331.561833][T13602] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2048'. [ 331.690014][T13611] netlink: 'syz.7.2051': attribute type 5 has an invalid length. [ 332.745000][T13637] netlink: 'syz.1.2058': attribute type 7 has an invalid length. [ 332.754915][T13635] ip6gretap0: entered promiscuous mode [ 332.761025][T13637] netlink: 'syz.1.2058': attribute type 8 has an invalid length. [ 332.763518][T13635] macsec1: entered promiscuous mode [ 332.769642][T13637] netlink: 'syz.1.2058': attribute type 4 has an invalid length. [ 332.769662][T13637] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2058'. [ 332.785816][T13635] macsec1: entered allmulticast mode [ 332.806664][T13635] ip6gretap0: entered allmulticast mode [ 332.879060][T13642] netlink: 'syz.1.2059': attribute type 1 has an invalid length. [ 332.890713][T13643] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2060'. [ 332.916456][T13643] macvlan2: entered promiscuous mode [ 333.166478][ T31] INFO: task kworker/u8:11:6945 blocked for more than 143 seconds. [ 333.175367][ T31] Not tainted syzkaller #0 [ 333.185201][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 333.200871][ T31] task:kworker/u8:11 state:D stack:21192 pid:6945 tgid:6945 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 333.217773][ T31] Workqueue: netns cleanup_net [ 333.223048][ T31] Call Trace: [ 333.227378][ T31] [ 333.230490][ T31] __schedule+0x1798/0x4cc0 [ 333.240734][ T31] ? __lock_acquire+0xab9/0xd20 [ 333.247431][ T31] ? __lock_acquire+0xab9/0xd20 [ 333.252772][ T31] ? __pfx___schedule+0x10/0x10 [ 333.258588][ T31] ? schedule+0x91/0x360 [ 333.263459][ T31] schedule+0x165/0x360 [ 333.268367][ T31] schedule_preempt_disabled+0x13/0x30 [ 333.274069][ T31] __mutex_lock+0x7e6/0x1350 [ 333.277517][T13658] netlink: 'syz.9.2065': attribute type 1 has an invalid length. [ 333.279718][ T31] ? __mutex_lock+0x5bb/0x1350 [ 333.292536][T13658] netlink: 'syz.9.2065': attribute type 2 has an invalid length. [ 333.292871][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 333.303492][T13658] netlink: 'syz.9.2065': attribute type 1 has an invalid length. [ 333.306490][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 333.321372][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 333.328796][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 333.335792][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 333.341237][ T31] ? _raw_spin_unlock+0x28/0x50 [ 333.347201][ T31] rdma_dev_change_netns+0x39/0x300 [ 333.352647][ T31] rdma_dev_exit_net+0x203/0x340 [ 333.358332][ T31] ? __pfx___might_resched+0x10/0x10 [ 333.363646][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 333.369838][ T31] ? net_generic+0x1e/0x240 [ 333.374496][ T31] ? mutex_is_locked+0x17/0x50 [ 333.379802][ T31] ? rtnl_is_locked+0x15/0x20 [ 333.384536][ T31] ops_undo_list+0x49a/0x990 [ 333.389799][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 333.395628][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 333.400944][ T31] cleanup_net+0x4c5/0x800 [ 333.407687][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 333.412785][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.420711][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 333.426895][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 333.432652][ T31] process_scheduled_works+0xae1/0x17b0 [ 333.438929][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 333.446136][ T31] worker_thread+0x8a0/0xda0 [ 333.450782][ T31] kthread+0x70e/0x8a0 [ 333.455543][ T31] ? __pfx_worker_thread+0x10/0x10 [ 333.460900][ T31] ? __pfx_kthread+0x10/0x10 [ 333.466215][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.471461][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.477392][ T31] ? __pfx_kthread+0x10/0x10 [ 333.481995][ T31] ret_from_fork+0x439/0x7d0 [ 333.488716][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 333.493854][ T31] ? __switch_to_asm+0x39/0x70 [ 333.499328][ T31] ? __switch_to_asm+0x33/0x70 [ 333.504123][ T31] ? __pfx_kthread+0x10/0x10 [ 333.509460][ T31] ret_from_fork_asm+0x1a/0x30 [ 333.514248][ T31] [ 333.520037][ T31] INFO: task syz.1.1036:9771 blocked for more than 143 seconds. [ 333.528750][ T31] Not tainted syzkaller #0 [ 333.533700][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 333.545976][ T31] task:syz.1.1036 state:D stack:23640 pid:9771 tgid:9769 ppid:5863 task_flags:0x400140 flags:0x00004006 [ 333.558903][ T31] Call Trace: [ 333.562205][ T31] [ 333.566773][ T31] __schedule+0x1798/0x4cc0 [ 333.571335][ T31] ? validate_chain+0x897/0x2140 [ 333.576840][ T31] ? __lock_acquire+0xab9/0xd20 [ 333.581714][ T31] ? __pfx___schedule+0x10/0x10 [ 333.586942][ T31] ? schedule+0x91/0x360 [ 333.591206][ T31] schedule+0x165/0x360 [ 333.595507][ T31] schedule_timeout+0x9a/0x270 [ 333.600306][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 333.606222][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.611441][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.617378][ T31] ? wait_for_completion+0x267/0x5d0 [ 333.624217][ T31] wait_for_completion+0x2bf/0x5d0 [ 333.630036][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 333.636281][ T31] ? up_write+0x1c4/0x420 [ 333.640642][ T31] ? remove_client_context+0xc0/0x1e0 [ 333.647577][ T31] disable_device+0x1c6/0x320 [ 333.652592][ T31] ? __pfx_disable_device+0x10/0x10 [ 333.658599][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 333.664181][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 333.670985][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 333.677515][ T31] nldev_dellink+0x2d1/0x320 [ 333.682141][ T31] ? __lock_acquire+0xab9/0xd20 [ 333.687975][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 333.693201][ T31] ? apparmor_capable+0x137/0x1b0 [ 333.698865][ T31] ? bpf_lsm_capable+0x9/0x20 [ 333.703608][ T31] ? security_capable+0x7e/0x2e0 [ 333.709456][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 333.714629][ T31] rdma_nl_rcv+0x6ae/0x980 [ 333.719829][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 333.728721][ T31] ? __lock_acquire+0xab9/0xd20 [ 333.733739][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 333.739265][ T31] netlink_unicast+0x82f/0x9e0 [ 333.744057][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 333.749642][ T31] ? netlink_sendmsg+0x642/0xb30 [ 333.754601][ T31] ? skb_put+0x11b/0x210 [ 333.759270][ T31] netlink_sendmsg+0x805/0xb30 [ 333.764063][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.769760][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 333.775446][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 333.780899][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.786510][ T31] __sock_sendmsg+0x21c/0x270 [ 333.791318][ T31] ____sys_sendmsg+0x505/0x830 [ 333.796188][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.801495][ T31] ? import_iovec+0x74/0xa0 [ 333.809102][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 333.813816][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.819526][ T31] ? __fget_files+0x2a/0x420 [ 333.825584][ T31] ? __fget_files+0x3a0/0x420 [ 333.830294][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 333.835358][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 333.840835][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 333.846346][ T31] ? do_syscall_64+0xbe/0x3b0 [ 333.851037][ T31] do_syscall_64+0xfa/0x3b0 [ 333.855730][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.860951][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.867078][ T31] ? clear_bhb_loop+0x60/0xb0 [ 333.871766][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.877756][ T31] RIP: 0033:0x7f981378eec9 [ 333.882173][ T31] RSP: 002b:00007f98119f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.891338][ T31] RAX: ffffffffffffffda RBX: 00007f98139e6090 RCX: 00007f981378eec9 [ 333.899816][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 333.908679][ T31] RBP: 00007f9813811f91 R08: 0000000000000000 R09: 0000000000000000 [ 333.917257][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.927377][ T31] R13: 00007f98139e6128 R14: 00007f98139e6090 R15: 00007ffe5ffc1d38 [ 333.935676][ T31] [ 333.938953][ T31] [ 333.938953][ T31] Showing all locks held in the system: [ 333.951226][ T31] 1 lock held by ksoftirqd/0/15: [ 333.961076][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 333.980590][ T31] 1 lock held by khungtaskd/31: [ 333.986167][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 333.997194][ T31] 3 locks held by kworker/u9:0/51: [ 334.002324][ T31] #0: ffff88801e77d948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 334.013737][ T31] #1: ffffc90000bb7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 334.027062][ T31] #2: ffff888023cccdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 334.039277][ T31] 3 locks held by kworker/u8:8/3525: [ 334.044581][ T31] #0: ffff88801a5d9948 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 334.058438][ T31] #1: ffffc9000c287bc0 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 334.072372][ T31] #2: ffff888030974700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 334.085866][ T31] 2 locks held by getty/5627: [ 334.090587][ T31] #0: ffff8880340620a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 334.101141][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 334.111775][ T31] 3 locks held by kworker/u9:5/5877: [ 334.117721][ T31] #0: ffff888033c1a948 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 334.129218][ T31] #1: ffffc900043efbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 334.145931][ T31] #2: ffff888031448dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 334.157774][ T31] 4 locks held by kworker/u8:11/6945: [ 334.163217][ T31] #0: ffff88801b2fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 334.175192][ T31] #1: ffffc9001c28fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 334.185897][ T31] #2: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 334.195366][ T31] #3: ffff888030974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 334.207809][ T31] 2 locks held by syz.1.1036/9771: [ 334.213125][ T31] #0: ffffffff99e44958 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 334.223587][ T31] #1: ffff888030974700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 334.237094][ T31] 2 locks held by syz.4.1167/10236: [ 334.242311][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 334.252449][ T31] #1: ffff888030974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 334.264181][ T31] 2 locks held by syz.3.1173/10262: [ 334.271219][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 334.281303][ T31] #1: ffff888030974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 334.293575][ T31] 1 lock held by syz.2.1250/10519: [ 334.299387][ T31] #0: ffffffff8e13fa40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 334.310164][ T31] 2 locks held by syz.6.1301/10733: [ 334.315726][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 334.326111][ T31] #1: ffff888030974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 334.339442][ T31] 2 locks held by syz.8.1411/11169: [ 334.344660][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 334.355403][ T31] #1: ffff888030974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 334.367720][ T31] 2 locks held by syz.9.1421/11210: [ 334.372914][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 334.382921][ T31] #1: ffff888030974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 334.395620][ T31] 2 locks held by syz.9.1421/11214: [ 334.400896][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 334.410906][ T31] #1: ffff888030974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 334.423176][ T31] 2 locks held by syz.7.1422/11209: [ 334.428848][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 334.440903][ T31] #1: ffff888030974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 334.461512][ T31] 2 locks held by syz.0.1517/11582: [ 334.467035][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 334.476790][ T31] #1: ffff888030974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 334.488353][ T31] 2 locks held by syz.1.1528/11627: [ 334.493564][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 334.503169][ T31] #1: ffff888030974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 334.516375][ T31] 2 locks held by syz.4.1616/11968: [ 334.521623][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 334.532133][ T31] #1: ffff888030974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 334.548936][ T31] 2 locks held by syz.5.1709/12336: [ 334.554589][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 334.564414][ T31] #1: ffff888030974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 334.576683][ T31] 2 locks held by syz.8.1788/12608: [ 334.581908][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 334.591540][ T31] #1: ffff888030974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 334.602903][ T31] 2 locks held by syz.8.1788/12609: [ 334.608577][ T5882] Bluetooth: hci4: command 0x0406 tx timeout [ 334.610313][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 334.615729][ T5185] Bluetooth: hci5: command 0x0406 tx timeout [ 334.624404][ T31] #1: ffff888030974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 334.641762][ T31] 2 locks held by syz.2.1858/12842: [ 334.648025][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 334.658466][ T31] #1: ffff888030974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 334.670492][ T31] 2 locks held by syz.6.1861/12846: [ 334.676175][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 334.687194][ T31] #1: ffff888030974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 334.699324][ T31] 2 locks held by syz.3.2024/13521: [ 334.704643][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 334.714709][ T31] #1: ffff888030974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 334.726831][ T31] 2 locks held by syz.0.2033/13551: [ 334.732067][ T31] #0: ffffffff8f52d3b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 334.742080][ T31] #1: ffff888030974700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 334.755421][ T31] [ 334.761154][ T31] ============================================= [ 334.761154][ T31] [ 334.772401][ T31] NMI backtrace for cpu 1 [ 334.772418][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 334.772434][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 334.772442][ T31] Call Trace: [ 334.772449][ T31] [ 334.772456][ T31] dump_stack_lvl+0x189/0x250 [ 334.772479][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.772495][ T31] ? __pfx__printk+0x10/0x10 [ 334.772524][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 334.772545][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 334.772564][ T31] ? __pfx__printk+0x10/0x10 [ 334.772586][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 334.772607][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 334.772626][ T31] watchdog+0xf93/0xfe0 [ 334.772648][ T31] ? watchdog+0x1de/0xfe0 [ 334.772672][ T31] kthread+0x70e/0x8a0 [ 334.772692][ T31] ? __pfx_watchdog+0x10/0x10 [ 334.772711][ T31] ? __pfx_kthread+0x10/0x10 [ 334.772736][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.772757][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.772776][ T31] ? __pfx_kthread+0x10/0x10 [ 334.772791][ T31] ret_from_fork+0x439/0x7d0 [ 334.772805][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 334.772830][ T31] ? __switch_to_asm+0x39/0x70 [ 334.772845][ T31] ? __switch_to_asm+0x33/0x70 [ 334.772860][ T31] ? __pfx_kthread+0x10/0x10 [ 334.772875][ T31] ret_from_fork_asm+0x1a/0x30 [ 334.772903][ T31] [ 334.772934][ T31] Sending NMI from CPU 1 to CPUs 0: [ 334.926554][ C0] NMI backtrace for cpu 0 [ 334.926570][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 334.926588][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 334.926598][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 334.926626][ C0] RIP: 0010:__lock_acquire+0x504/0xd20 [ 334.926647][ C0] Code: c3 48 63 8f e8 0a 00 00 49 83 c7 28 41 89 c4 48 39 cb 0f 8d d6 00 00 00 48 83 fb 31 0f 83 92 00 00 00 41 8b 07 25 ff 1f 00 00 <48> 0f a3 05 64 7d 08 12 73 10 48 69 c0 c8 00 00 00 48 8d 88 10 e3 [ 334.926660][ C0] RSP: 0018:ffffc90000127750 EFLAGS: 00000002 [ 334.926673][ C0] RAX: 0000000000000779 RBX: 0000000000000000 RCX: 00000000ffffffff [ 334.926684][ C0] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff88801caf0000 [ 334.926694][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8b3bfc50 [ 334.926704][ C0] R10: dffffc0000000000 R11: ffffed100702ab17 R12: ffffffffffffff05 [ 334.926716][ C0] R13: 0000000000000001 R14: ffff88801caf0b68 R15: ffff88801caf0b10 [ 334.926727][ C0] FS: 0000000000000000(0000) GS:ffff888125c3d000(0000) knlGS:0000000000000000 [ 334.926746][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 334.926757][ C0] CR2: 0000555579e2b5c8 CR3: 000000007d65e000 CR4: 00000000003526f0 [ 334.926771][ C0] Call Trace: [ 334.926777][ C0] [ 334.926788][ C0] ? batadv_iv_ogm_schedule+0x430/0xf00 [ 334.926808][ C0] lock_acquire+0x120/0x360 [ 334.926826][ C0] ? batadv_iv_ogm_schedule+0x430/0xf00 [ 334.926848][ C0] ? batadv_iv_ogm_schedule+0x430/0xf00 [ 334.926870][ C0] batadv_iv_ogm_schedule+0x454/0xf00 [ 334.926889][ C0] ? batadv_iv_ogm_schedule+0x430/0xf00 [ 334.926914][ C0] ? batadv_iv_ogm_schedule+0x430/0xf00 [ 334.926933][ C0] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 334.926955][ C0] ? batadv_send_skb_packet+0x426/0x690 [ 334.926975][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x6c6/0x7e0 [ 334.927000][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 334.927020][ C0] process_scheduled_works+0xae1/0x17b0 [ 334.927052][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 334.927078][ C0] worker_thread+0x8a0/0xda0 [ 334.927103][ C0] kthread+0x70e/0x8a0 [ 334.927120][ C0] ? __pfx_worker_thread+0x10/0x10 [ 334.927134][ C0] ? __pfx_kthread+0x10/0x10 [ 334.927150][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.927169][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.927187][ C0] ? __pfx_kthread+0x10/0x10 [ 334.927204][ C0] ret_from_fork+0x439/0x7d0 [ 334.927218][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 334.927234][ C0] ? __switch_to_asm+0x39/0x70 [ 334.927251][ C0] ? __switch_to_asm+0x33/0x70 [ 334.927267][ C0] ? __pfx_kthread+0x10/0x10 [ 334.927283][ C0] ret_from_fork_asm+0x1a/0x30 [ 334.927306][ C0] [ 334.928558][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 335.205622][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 335.214722][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 335.224769][ T31] Call Trace: [ 335.228042][ T31] [ 335.230971][ T31] dump_stack_lvl+0x99/0x250 [ 335.235556][ T31] ? __asan_memcpy+0x40/0x70 [ 335.240153][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.245352][ T31] ? __pfx__printk+0x10/0x10 [ 335.250034][ T31] vpanic+0x281/0x750 [ 335.254008][ T31] ? __pfx_vpanic+0x10/0x10 [ 335.258544][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 335.264205][ T31] ? preempt_schedule+0xae/0xc0 [ 335.269067][ T31] ? preempt_schedule_common+0x83/0xd0 [ 335.274543][ T31] panic+0xb9/0xc0 [ 335.278274][ T31] ? __pfx_panic+0x10/0x10 [ 335.282696][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 335.288688][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 335.294853][ T31] watchdog+0xfd2/0xfe0 [ 335.299027][ T31] ? watchdog+0x1de/0xfe0 [ 335.303357][ T31] kthread+0x70e/0x8a0 [ 335.307420][ T31] ? __pfx_watchdog+0x10/0x10 [ 335.312092][ T31] ? __pfx_kthread+0x10/0x10 [ 335.316673][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 335.321882][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.327073][ T31] ? __pfx_kthread+0x10/0x10 [ 335.331652][ T31] ret_from_fork+0x439/0x7d0 [ 335.336230][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 335.341333][ T31] ? __switch_to_asm+0x39/0x70 [ 335.346082][ T31] ? __switch_to_asm+0x33/0x70 [ 335.350836][ T31] ? __pfx_kthread+0x10/0x10 [ 335.355414][ T31] ret_from_fork_asm+0x1a/0x30 [ 335.360212][ T31] [ 335.363368][ T31] Kernel Offset: disabled [ 335.367673][ T31] Rebooting in 86400 seconds..