last executing test programs: 8m37.006139824s ago: executing program 1 (id=2024): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000700000007000000002000000000000000200000d0000000000000000000000000000000000000000000000000000000800000000010000000000000700000000000000000100000400000000000000000000000006000000000000000000000200006b02fc11ad5fa69e515a34f000000000000001000005000000000000"], 0x0, 0x8a}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000340)="a9", 0x0}, 0x20) 8m36.87175031s ago: executing program 1 (id=2025): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710437000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013200000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013200000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 8m36.800061576s ago: executing program 1 (id=2026): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000200)={0x30, r1, 0x300, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0xc001) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWSET={0x15c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x108, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0xfc, 0x2, 0x0, 0x1, [{0xfffffffffffffe7c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x47001874}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1b29}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3849}]}]}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6f}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_RULE_ID={0x0, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x884c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x80f3}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0x0, 0x7, 'route\x00'}]}, @NFT_MSG_DELTABLE={0x30, 0x2, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0x19, 0x6, "ae97e1ce74c087c5d1aab14ad9afdfb00b2126d864"}]}, @NFT_MSG_DELCHAIN={0xa4, 0x5, 0xa, 0xc00, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x54f}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_DELTABLE={0x68, 0x2, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3e0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000854) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, 0x13, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6}, 0x18) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x0, 0x0) readv(r8, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8}, &(0x7f00000002c0), &(0x7f0000000300)=r5}, 0x20) r9 = accept4$inet6(r8, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000500)=0x1c, 0x800) setsockopt$inet6_int(r9, 0x29, 0x4b, &(0x7f0000000540)=0x10, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0x2100, 0x0, &(0x7f00000002c0), 0x0, 0x2000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e000100000000000000000007"], 0x28}}, 0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$BTRFS_IOC_LOGICAL_INO(r12, 0xc0389424, &(0x7f0000000140)={0x8000000000000001, 0x8, '\x00', 0x1, &(0x7f0000000100)=[0x0]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x4) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="07eeff000000df27ffff0000080003000000bc106a377589f80eb95c7fa3c28aaf10f00c7124d79632aa59b291d004ec0d04ac0230a6e3ea2eee2faf949495b525a70961c58cbb225c971174dc40fd0c4a4c", @ANYRES32=r15, @ANYBLOB], 0x1c}}, 0x0) 8m36.547578658s ago: executing program 1 (id=2028): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000a00851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000007c03000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 8m36.517019561s ago: executing program 1 (id=2029): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x7, 0x70cc3aa2}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@ipv6_newrule={0x1c, 0x20, 0x2, 0x70bd2d, 0x25dfdbff, {0xa, 0x10, 0x14, 0x2, 0x6, 0x0, 0x0, 0x4, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x24008090) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f0000000180)=""/160, 0x7}) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x2364}, 0x1, 0x0, 0x0, 0x20004801}, 0x40800) r4 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000200), 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lblcr\x00', 0x0, 0x81, 0x3a}, {@rand_addr=0x64010105, 0x4e25, 0x0, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x35}, @remote, 0x12, 0x3}}) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 8m36.367487728s ago: executing program 1 (id=2031): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r0, 0x0, 0xfaf}, 0x18) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000140)={0xa, 0x0, 0x9, @private1}, 0x20) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='kvm_msi_set_irq\x00', r3, 0x0, 0xfbf}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 8m21.128090762s ago: executing program 32 (id=2031): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r0, 0x0, 0xfaf}, 0x18) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000140)={0xa, 0x0, 0x9, @private1}, 0x20) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='kvm_msi_set_irq\x00', r3, 0x0, 0xfbf}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 8m1.872032715s ago: executing program 3 (id=2317): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0xffffffd0}, 0x10}, 0x57) 8m1.667432915s ago: executing program 3 (id=2319): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4}, 0x50) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000001c0), &(0x7f0000000340)=@tcp=r3}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@loopback}, {@in, 0x0, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x6d, 0x14, {{'cmac(aes)\x00'}, 0x108, 0x0, "b2be4bc53e13496458a584878298a2d3700dcd538a87e8351c1a6bd53d255bd04d"}}]}, 0x160}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000088500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 7m58.751585903s ago: executing program 3 (id=2336): r0 = socket(0x2, 0x80805, 0x0) (async) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x80000001}) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000040)={0x20000014}) (async) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000000c0)='g', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x39}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0)={0x0, 0xd}, 0x10}, 0x94) (async) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) r7 = socket(0x23, 0xa, 0x3) sendmsg$nl_route(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd2d, 0x25dfdbff, {0x2, 0x10, 0x80, 0x1, 0xb, 0x0, 0x0, 0x8, 0x6}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x40000) (async) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc804}, 0x4840) pipe(&(0x7f0000000000)={0xffffffffffffffff}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x9, 0x2) (async) openat$cgroup_ro(r8, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) 7m58.456446984s ago: executing program 3 (id=2339): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1541, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000110000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x62040200) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x20, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000e234d9e67417f653a58a162b404400000000b42893af6a61a214ed5319faa6bcf8a60af4b08ed0d3cb64e0577253de8ff4af08f8ca65afe578c4f55fb546f903857d1785ac858c0d39b41783226df384ab996211bd12217a56c1a3247ed9672ff84e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ea}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r7, 0x0, 0x2d, 0x1e, @val=@tcx={@void, @value=r1}}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) ppoll(&(0x7f0000000440)=[{r6, 0x4}, {r2, 0x1044}, {r0, 0x120}, {r0, 0x100}, {r8, 0x2000}, {r1, 0x20}, {r5, 0x1020}, {r5, 0xa000}, {r2, 0xb200}, {r3, 0x20}], 0xa, &(0x7f00000002c0)={0x0, 0x3938700}, &(0x7f0000000500)={[0x8]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_type(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r10, &(0x7f0000000280), 0x9) r11 = openat$cgroup_procs(r9, 0x0, 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000c40), 0x12) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r13 = openat$cgroup_ro(r12, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r13, &(0x7f0000000200)=0x1, 0x12) 7m56.036528386s ago: executing program 3 (id=2345): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$inet(0x2, 0x3, 0x4) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000200)=0x4, 0x4) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32) socket$inet6(0xa, 0x80002, 0x0) (rerun: 32) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmsg(r5, 0x0, 0x63) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r7], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r8], 0x90}}, 0x0) 7m55.727784371s ago: executing program 3 (id=2346): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4}, 0x50) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000001c0), &(0x7f0000000340)=@tcp=r3}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@loopback}, {@in, 0x0, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x6d, 0x14, {{'cmac(aes)\x00'}, 0x108, 0x0, "b2be4bc53e13496458a584878298a2d3700dcd538a87e8351c1a6bd53d255bd04d"}}]}, 0x160}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000088500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 7m55.222619876s ago: executing program 33 (id=2346): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4}, 0x50) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000001c0), &(0x7f0000000340)=@tcp=r3}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@loopback}, {@in, 0x0, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x6d, 0x14, {{'cmac(aes)\x00'}, 0x108, 0x0, "b2be4bc53e13496458a584878298a2d3700dcd538a87e8351c1a6bd53d255bd04d"}}]}, 0x160}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000088500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 4m22.929545357s ago: executing program 2 (id=3973): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000c0000000400000000000004010000000a00000000000012020000000061002e2e61002e00005f00e9d0ccf667bba1b6cd70ed224b0940ba7c58bbd4785ec4b062a4bb59e7506a6fe0a207f21f38fb872213e2aa1b"], 0x0, 0x3c}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000600)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8000000000000001}}, 0x30) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {0xa}, {}, {0xfff3}}}, 0x24}}, 0x0) 4m22.354302688s ago: executing program 2 (id=3976): syz_emit_ethernet(0x45, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040086dd2300ff"}}}}}, 0x0) 4m22.279874621s ago: executing program 2 (id=3977): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x67}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x201}, 0x80) 4m22.183061153s ago: executing program 2 (id=3978): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000040)={0x1, 0x1, 0x4, r0, 0x80000001}, 0xc) (async, rerun: 64) r1 = socket(0xa, 0x5, 0x100) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3010000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x44, 0x2e, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x9, 0xb}, {0x3, 0xfff1}, {0xffff, 0x7}}, [{0x8, 0xb, 0xfffff000}, {0x8, 0xb, 0x80}, {0x8, 0xb, 0x5c3}, {0x8, 0xb, 0x2}]}, 0x44}}, 0x4080) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, '\x00', r0, 0xffffffffffffffff, 0x5}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000600)=[0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7f, &(0x7f0000000680)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) (async, rerun: 64) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00'}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xc, 0x29, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffff06}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x0, 0xa, 0x7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff}, @exit, @map_idx={0x18, 0xa, 0x5, 0x0, 0xb}, @generic={0x7, 0xb, 0xf, 0x3d5b, 0x7}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0xfffffffc, 0x2e, &(0x7f00000004c0)=""/46, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, r4, 0x8, &(0x7f0000000540)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0xe, 0xfffffff9, 0x1}, 0x10, r6, r7, 0x5, 0x0, &(0x7f0000000940)=[{0x0, 0x1, 0x9, 0xa}, {0x3, 0x3, 0x9, 0x9}, {0x3, 0x3, 0xa, 0x4}, {0x0, 0x2, 0x0, 0x11}, {0x5, 0x4, 0x3}], 0x10, 0x2}, 0x94) recvfrom$ax25(r1, &(0x7f0000000a80)=""/90, 0x5a, 0x0, &(0x7f0000000b00)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r1) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r9, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x60000) r10 = accept4$ax25(r1, &(0x7f0000000cc0)={{0x3, @null}, [@netrom, @null, @remote, @default, @bcast, @default, @netrom, @null]}, &(0x7f0000000d40)=0x48, 0x80000) ioctl$sock_ax25_SIOCADDRT(r10, 0x890b, &(0x7f0000000d80)={@null, @null, 0x0, [@null, @default, @default, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e80)={{r3, 0xffffffffffffffff}, &(0x7f0000000e00), &(0x7f0000000e40)=r8}, 0x20) (async, rerun: 32) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000f00), r1) (rerun: 32) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001f40)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001f00)={&(0x7f0000000f40)={0xf98, r12, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0xb10, 0x8, 0x0, 0x1, [{0x840, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ALLOWEDIPS={0x230, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x604, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x9}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0xe4}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}]}]}, {0x1f0, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3d6ebf4e9f27885a1839d20331232e71f3e45f73d4e59bb8a755bc8ef9d44942"}, @WGPEER_A_ALLOWEDIPS={0x1a8, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x4}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xbc, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PEERS={0x430, 0x8, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xa1b9}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}]}, {0x394, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x360, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @private=0xa010100}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x53b6224151f04723}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0xf98}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000030c0)={r4, 0x20, &(0x7f0000003080)={&(0x7f0000001f80)=""/209, 0xd1, 0x0, &(0x7f0000002080)=""/4096, 0x1000}}, 0x10) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000003100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r10, 0xc4089434, &(0x7f0000003300)={0x0, 0x339, 0x1, [0x2, 0x8000000000000001, 0x6, 0x800, 0x200], [0x8001, 0xfffffffffffffff7, 0x8f0f, 0xd07e, 0x9, 0x4, 0x6, 0x6, 0x80000000, 0xceb, 0x7, 0x4, 0x7fffffffffffffff, 0x4, 0x2, 0x1, 0x100000001, 0x1, 0x1000, 0xe4f, 0x1, 0xfff, 0xfc2, 0x9, 0x9, 0x7, 0x5, 0x6, 0x85d, 0x4, 0xffffffff00000001, 0x9, 0x8, 0x7, 0x8, 0x5, 0x4b1d, 0x10001, 0x1, 0x2, 0xffffffffffffffff, 0x5, 0x2, 0x3ff, 0x9, 0x6, 0x1, 0x1, 0xfffffffffffffff8, 0x9, 0x2b59, 0x100000001, 0x3, 0x7, 0x8, 0x5, 0xffffffffffffffff, 0x6, 0x8, 0x3, 0x0, 0x80000001, 0xc, 0xffffffffffffffff, 0x3, 0x80000000, 0x8, 0xb, 0x10001, 0xe3b1, 0xeb, 0x8756, 0x8, 0xa, 0x1, 0xa531, 0xffffffffffffff46, 0xf1, 0x5, 0x657, 0x7fff, 0x3, 0x2, 0x2, 0xffff, 0xc, 0x6, 0xe8e, 0x81, 0xc31c, 0x9540000000000000, 0x10, 0x1, 0x5, 0x1, 0x4, 0x4, 0x7fffffffffffffff, 0x8001, 0x4, 0x0, 0x7, 0xfffffffffffffff9, 0x5, 0x401, 0x3, 0x0, 0xff, 0x10, 0x0, 0x0, 0xc, 0x8, 0x1, 0x6, 0xfff, 0xffffffff, 0x6, 0x2, 0x9, 0xfffffffffffffffd]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r11, 0x5000943f, &(0x7f0000003740)={{r7}, r13, 0x12, @unused=[0x2, 0x4, 0x3, 0xff], @devid=r14}) (async, rerun: 32) setsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000004740)={@ipv4={'\x00', '\xff\xff', @multicast1}, r0}, 0x14) (async, rerun: 32) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000004840)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004800)={&(0x7f00000047c0)={0x24, r9, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x28}, @val={0x8}, @void}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8040001}, 0x4000) (async) r15 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r15, &(0x7f0000004980)={0x0, 0x0, &(0x7f0000004940)={&(0x7f0000004880)={0x2, 0x1, 0x9, 0x5, 0x15, 0x0, 0x70bd28, 0x25dfdbfc, [@sadb_x_filter={0x5, 0x1a, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x23, 0x10, 0x4}, @sadb_x_nat_t_port={0x1, 0x0, 0x4e23}, @sadb_ident={0x2, 0xa, 0xfffd, 0x0, 0x8}, @sadb_sa={0x2, 0x1, 0x4d5, 0xe, 0x1, 0x7, 0x4, 0x1}, @sadb_x_policy={0x8, 0x12, 0x3, 0x2, 0x0, 0x6e6bba, 0xffffa97a, {0x6, 0x32, 0xc0, 0x80, 0x0, 0x2, 0x0, @in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x22}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x6}]}, 0xa8}}, 0x4080) syz_emit_ethernet(0x33, &(0x7f00000049c0)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @void, {@llc={0x4, {@snap={0x1, 0xab, "91cc", "614ee4", 0xe84c, "bd30b2f9685bdb40295e243509d0532a072af0a27ad5dc9ef7543f7b"}}}}}, &(0x7f0000004a00)={0x1, 0x2, [0xa37, 0x779, 0x416, 0xd5e]}) (async) sendmsg$inet(r1, &(0x7f0000004c40)={&(0x7f0000004a40)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000004a80), 0x0, &(0x7f0000004ac0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @rand_addr=0x64010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfa}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @private=0xa010101}}}, @ip_retopts={{0xd0, 0x0, 0x7, {[@generic={0x88, 0x4, "e63c"}, @cipso={0x86, 0x6a, 0xffffffffffffffff, [{0x2, 0x4, "0108"}, {0x2, 0x9, "dbbb5a1e790e1e"}, {0x0, 0xd, "0c0f3ba00e3e19180953c3"}, {0x7, 0xc, "6b67caf9bcc28a591867"}, {0x6, 0x3, "c9"}, {0x2, 0x10, "504aa7e0d3052366489e631cf4e3"}, {0x1, 0x11, "c79254cb253e8b0d5e276b7793b843"}, {0x5, 0x2}, {0x6, 0xe, "50c4b0272636f2bead01e318"}, {0x5, 0xa, "0bbd77066bf4423f"}]}, @lsrr={0x83, 0xb, 0xca, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x36}]}, @timestamp_prespec={0x44, 0x44, 0x7, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0x5}, {@multicast2, 0x7}, {@broadcast, 0x37}, {@rand_addr=0x64010100, 0x19a2c2f5}, {@multicast2, 0xf}, {@multicast2, 0x8}, {@multicast1, 0xdd4}, {@broadcast, 0x101}]}]}}}], 0x158}, 0x1) (async) openat$cgroup_ro(r15, &(0x7f0000004c80)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) 4m22.04729238s ago: executing program 2 (id=3979): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="259389558472849994d7d3f48a3e126e5154bcdb3c318ecb6ffa089353199832d9500a8a526cffd932a76a99277a7c041ed71e501d9e8a9d48cc1f", @ANYRES16=r2, @ANYBLOB="010000000000000000000d000000180001801400020069705f76746930000000000000000000"], 0x2c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000033000002000b00"/20], 0x14}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @loopback}}}], 0x20}}], 0x1, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000340)={0x3, 'veth1\x00', {0x3}, 0x8}) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000100)=0x2c) socket$inet6(0xa, 0x5, 0x0) unshare(0x24020400) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000001180)={@empty, @dev={0xfe, 0x80, '\x00', 0x8}, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x6, 0xc000, 0x4, 0x0, 0x7, 0x45330304}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r7 = socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0) write(r7, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) r9 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r9, &(0x7f00000004c0)={&(0x7f00000005c0), 0x7, &(0x7f0000000500)={&(0x7f00000000c0)=@can={{}, 0x0, 0x0, 0x4, 0x0, '\b-\x00'}, 0x10}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r11, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4015}, 0x40000c0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e00010000c5000000ebffffff02"], 0x1c}}, 0x0) socket(0x10, 0x3, 0x0) 4m19.930826712s ago: executing program 2 (id=3980): r0 = socket(0x1e, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a80000000060a010400000000000000000a0000050900010073797a3100000000540004802c000180090001007866726d000000001c00028005000300010000000800024000000001080001400000001210000180090001006d61737100000000140001800e000100627974656f726465720000000900020073797a32"], 0xe0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000140)="42a28df65f2e81d0991808e31200000004", 0x11}], 0x1, 0x0, 0x0, 0x40088d1}], 0x1, 0x80801) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000000)=""/16, 0x10}, {&(0x7f0000000100)=""/63, 0x3f}], 0x2}, 0x8}], 0x1, 0x1, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000300)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) accept4$ax25(r0, 0x0, &(0x7f0000000400), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='fsi_dev_init\x00', r5, 0x0, 0x100000000}, 0x18) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f00000003c0), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)="d7cbdf80c9f223d5a6d0491179f5053b8183b45d0cd4ba1f6463a957fa45877e07f15f1c62468d0f4027cb17d456cf0b77b343a672bf7784b18845474fbe92e3600daf0235504e78ef74f0182159e09afc1463e0e0d86adb0b8079d69e74a8162878d8c352b57a7220c19ed3893a8b8b7b2ac6afee4e2488b29fdcdb1e98d98d2538a210965381f5b2cb1592558d44d377c6b22255a3a7e33cbb62a832e58dce50b018c07572cb2406cce065c56da8dfd22b7c44abd3c7c6bfa9792c52cde733e3c2dcd4be004508579f75328fadf19a991bce0e969cc016e9d916b097719ba657e1010a57") r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) sendmsg$tipc(r9, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_deladdr={0x28, 0x15, 0x2, 0x70bd27, 0x25dfdbfc, {0x2, 0x8, 0x1, 0xfd}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010100}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010101}]}, 0x28}}, 0x2c000002) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb0100180000000000000060000000600000000a000000000000000000000b0300000000000000000000030000000005000000010000001c00000000000000000000030700000000000000020000000e000000000000000300000d000000000700000000000000030000000000dc86f38bd401ec16db499d6ba515a100000a0000"], &(0x7f0000000940)=""/53, 0x82, 0x35, 0x1}, 0x20) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100003f06"], 0x14}], 0x1, 0x0, 0x0, 0x40004880}, 0x20004000) 4m4.76749881s ago: executing program 34 (id=3980): r0 = socket(0x1e, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a80000000060a010400000000000000000a0000050900010073797a3100000000540004802c000180090001007866726d000000001c00028005000300010000000800024000000001080001400000001210000180090001006d61737100000000140001800e000100627974656f726465720000000900020073797a32"], 0xe0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000140)="42a28df65f2e81d0991808e31200000004", 0x11}], 0x1, 0x0, 0x0, 0x40088d1}], 0x1, 0x80801) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000000)=""/16, 0x10}, {&(0x7f0000000100)=""/63, 0x3f}], 0x2}, 0x8}], 0x1, 0x1, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000300)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) accept4$ax25(r0, 0x0, &(0x7f0000000400), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='fsi_dev_init\x00', r5, 0x0, 0x100000000}, 0x18) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f00000003c0), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)="d7cbdf80c9f223d5a6d0491179f5053b8183b45d0cd4ba1f6463a957fa45877e07f15f1c62468d0f4027cb17d456cf0b77b343a672bf7784b18845474fbe92e3600daf0235504e78ef74f0182159e09afc1463e0e0d86adb0b8079d69e74a8162878d8c352b57a7220c19ed3893a8b8b7b2ac6afee4e2488b29fdcdb1e98d98d2538a210965381f5b2cb1592558d44d377c6b22255a3a7e33cbb62a832e58dce50b018c07572cb2406cce065c56da8dfd22b7c44abd3c7c6bfa9792c52cde733e3c2dcd4be004508579f75328fadf19a991bce0e969cc016e9d916b097719ba657e1010a57") r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) sendmsg$tipc(r9, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_deladdr={0x28, 0x15, 0x2, 0x70bd27, 0x25dfdbfc, {0x2, 0x8, 0x1, 0xfd}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010100}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010101}]}, 0x28}}, 0x2c000002) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb0100180000000000000060000000600000000a000000000000000000000b0300000000000000000000030000000005000000010000001c00000000000000000000030700000000000000020000000e000000000000000300000d000000000700000000000000030000000000dc86f38bd401ec16db499d6ba515a100000a0000"], &(0x7f0000000940)=""/53, 0x82, 0x35, 0x1}, 0x20) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100003f06"], 0x14}], 0x1, 0x0, 0x0, 0x40004880}, 0x20004000) 2m32.730043669s ago: executing program 7 (id=4644): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="25d3d3000000ca20e836ab94390b6e13147cbfca001c5c4d27edd2f009f90710532b86dc868e91fd152e36b82563a5d9a42334f18cdf0347d24f4ffa8f4538034431", @ANYRES16=r1, @ANYBLOB="20002dbd7000fbdbdf250200000008003f000800000005003d0083000000"], 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000c000000000000000008000300", @ANYRES32=r1, @ANYBLOB], 0x28}}, 0x0) 2m32.570289188s ago: executing program 7 (id=4649): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r1 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a40)=@newtfilter={0xa0, 0x2c, 0xd67, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0}, {0xb}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x70, 0x2, [@TCA_FLOW_EMATCHES={0x6c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xfffa, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x48, 0x2, 0x0, 0x0, {{0x8, 0x0, 0x4}, "890a7c836015fa872c043661bc54668a8e0d9f06b7d231fa666703d6f16bcdf2f4c0ae865fb769fbb7fe5185be5cc7b69c6fcb93cc61223bf27eba5e"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 64) r8 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r8, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) (async) syz_open_procfs$namespace(r8, &(0x7f0000000000)='ns/uts\x00') (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r9, 0x8901, &(0x7f00000023c0)=r8) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000024c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017000000786df366c77df044b1abe4a22dfcdb7bed8fe0b0c1dd010418abda087027f95dbce2fc9651d530"], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r12, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) (async) r13 = accept$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0) recvmmsg$unix(r13, &(0x7f0000002240)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000480)=""/36, 0x5e}, {&(0x7f00000004c0)=""/180, 0xb4}, {&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x5, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001880)=""/188, 0xbc}, {&(0x7f0000001940)=""/167, 0xa7}, {&(0x7f0000001a00)=""/9, 0x9}, {&(0x7f00000020c0)=""/135, 0x87}, {&(0x7f0000001b00)=""/205, 0xcd}, {&(0x7f0000001c00)=""/26, 0x1a}], 0x6, &(0x7f0000001cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001d80)=""/70, 0x46}], 0x1}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001ec0)=""/61, 0x3d}, {&(0x7f0000001f00)=""/224, 0xe0}], 0x2}}, {{&(0x7f0000002040), 0x6e, &(0x7f0000002200)=[{&(0x7f00000021c0)=""/29, 0x1d}], 0x1}}], 0x5, 0x10002, &(0x7f0000002380)={0x77359400}) (async) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r9) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r11, @ANYBLOB="c46141a0c845c9a72f7680de078c359d26396001c6d7c4b4d80f82dfd579929490065b0673d5f6eab50456ad56aa44e8c6006d6ee93ff7cc3ce0435cb1c42fae019fd1d4ba02d04e5c33fb298166e20df03f38653ef3672c47024a9b3a39b04b040ce905377de40590d5d211646dd4201e793f6d39801f2a33f3a2fde03a942a0b34646d4fcb7891d7074cc8981f32c2a6d262"], 0x1c}}, 0x0) 2m31.96385122s ago: executing program 7 (id=4657): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x8, 0x4, 0x6}) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f00000000c0)={0xb, 'syz1\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x8, 0x4, 0x6}) (async) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f00000000c0)={0xb, 'syz1\x00'}) (async) 2m31.767628409s ago: executing program 7 (id=4658): syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x2, 0x2e, 0x48, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @remote, {[@rr={0x7, 0x3, 0x8c}, @timestamp_addr={0x44, 0x1c, 0x16, 0x1, 0x8, [{@broadcast, 0x6}, {@multicast2}, {@loopback, 0x6}]}]}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xfffd, 0x0, 0x57}}}}}}, 0x0) 2m31.551875621s ago: executing program 7 (id=4661): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x4) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0xfffffffd) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x2a}, 0x28) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) r7 = socket$inet(0xa, 0x801, 0x84) listen(r7, 0x1) r8 = socket$netlink(0x10, 0x3, 0x4) r9 = socket$inet(0xa, 0x801, 0x84) listen(r9, 0x8008) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r8) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) sendfile(r1, r1, 0x0, 0x9) 2m31.448864769s ago: executing program 7 (id=4665): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000000000000000000000000018500000007000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffdfffb702000008000000b70300007f000000850000007b00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x7c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="b5", 0x1}, {&(0x7f0000000000)='\\', 0x1}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x20000800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r5, 0x114, 0x2, 0x0, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x8800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x9005}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffc}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='westwood\x00', 0x9) syz_emit_ethernet(0x46, &(0x7f0000000400)={@link_local={0x3}, @random="0e577ca5a84f", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x33, 0x0, @rand_addr=0x64010101, @multicast2}, "0018630100000003"}}}}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000780)=0x17, 0x4) getsockopt$inet_tcp_buf(r8, 0x6, 0x1a, 0x0, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"/262], 0x120}, 0x1, 0x0, 0x0, 0x20004040}, 0x4008880) r9 = socket(0x2, 0x80805, 0xe0000000) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e24, 0x3, 'rr\x00', 0x25, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x87, @local, 0x4e23, 0x3, 'lc\x00', 0x5, 0x8, 0x7b}, {@private=0xa010104, 0x4e20, 0x10000, 0xf8, 0x0, 0x3ffffd}}, 0x44) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="e4000010070a010800000000000000000700000a0c00034000000000000000034d000740cf4adef17113afd81c6b04bd96ac49c43b911811d188f8fcb78981240b3ca9a74591c685f44b0300062eca7ff4966028b1ae9f40b64486da7379bae3ca3e3fcb7c13cbc4c712d87a8e0000001c00058008000140000000330802000000006006080001400000000008000a4000000002440004801800018008000100647570000c0002800800014000000003140001800e000100627974656f72646572000000140001800e000100627974656f726465720000000c0006400000000000000001"], 0xe4}, 0x1, 0x0, 0x0, 0x2}, 0x0) 2m16.357437593s ago: executing program 35 (id=4665): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000000000000000000000000018500000007000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffdfffb702000008000000b70300007f000000850000007b00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x7c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="b5", 0x1}, {&(0x7f0000000000)='\\', 0x1}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x20000800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r5, 0x114, 0x2, 0x0, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x8800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x9005}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffc}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000280)='westwood\x00', 0x9) syz_emit_ethernet(0x46, &(0x7f0000000400)={@link_local={0x3}, @random="0e577ca5a84f", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x33, 0x0, @rand_addr=0x64010101, @multicast2}, "0018630100000003"}}}}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000780)=0x17, 0x4) getsockopt$inet_tcp_buf(r8, 0x6, 0x1a, 0x0, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"/262], 0x120}, 0x1, 0x0, 0x0, 0x20004040}, 0x4008880) r9 = socket(0x2, 0x80805, 0xe0000000) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e24, 0x3, 'rr\x00', 0x25, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x87, @local, 0x4e23, 0x3, 'lc\x00', 0x5, 0x8, 0x7b}, {@private=0xa010104, 0x4e20, 0x10000, 0xf8, 0x0, 0x3ffffd}}, 0x44) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="e4000010070a010800000000000000000700000a0c00034000000000000000034d000740cf4adef17113afd81c6b04bd96ac49c43b911811d188f8fcb78981240b3ca9a74591c685f44b0300062eca7ff4966028b1ae9f40b64486da7379bae3ca3e3fcb7c13cbc4c712d87a8e0000001c00058008000140000000330802000000006006080001400000000008000a4000000002440004801800018008000100647570000c0002800800014000000003140001800e000100627974656f72646572000000140001800e000100627974656f726465720000000c0006400000000000000001"], 0xe4}, 0x1, 0x0, 0x0, 0x2}, 0x0) 42.274468102s ago: executing program 4 (id=5210): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0)={0x441, 0x12}, 0x10) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="44000000020601080000000000000000000000000500010006000000050005000a00000001000400000000000900020073797a31000000000c000300686173683a6970008b12ff9812caa061801657ff0e41f5a46c3e34d4308425e2c24f8b64ce60edaad12f216f4f0a8a176e04f88b5ba092bf6a23b6925a41736a263546892bbd615858f4aee9462376207e1e43d3aa23ba54e5fd3bae7268487bf56a82a59d6de6df1028625262"], 0x44}}, 0x8000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRES64=r1], 0x8c}, 0x1, 0x0, 0x0, 0x10000882}, 0x4000080) bind$tipc(r1, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x18) shutdown(0xffffffffffffffff, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) r10 = gettid() r11 = accept(r2, &(0x7f0000002940)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f0000000880)=0xffffffffffffff3b) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYRESOCT=r5, @ANYRES16=r7, @ANYRESOCT=r10], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621546}, 0x4) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r13, 0x6, 0x19, &(0x7f0000000000)=0x100000001, 0x4) pipe(&(0x7f0000000340)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x20000000000000ee, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_FIOGETOWN(r13, 0x8903, &(0x7f0000000780)) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000000a80)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}}}, &(0x7f00000008c0)=0xfffffffffffffc9a) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000940)={0x0, 0x0, 0x0}, &(0x7f0000000980)=0xc) sendmsg$unix(r14, &(0x7f0000000a40)={&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000540)="8e9e3d00f9c7b764d795219ed7685c0b84715982841f86c317091d5ff41f2e9ab3e464cb0df12aecc0b40dd28056d0ae357d03c90439a82e7c6b3ad024f55157415fbb4575f07a6633aff155ae6ca4c5731764b886e8a5fbf58b3fcc48f515c8d39f6705fd8df066647758ae5f0521a7b74615ef640e987186186fee78517fc7f5203485a18ee7005455ac8a793e87d8e66b20656abd18668b8759fd4a4b7178d317b3e23b7703501388f7a67fe1f141d409f8b10269e87260ffcb985c913530bb341e031bf48ea9324d278850c741ecde89adf36fe3f3a0b9414d4fc895b570e793f64f9e2292", 0xe7}, {&(0x7f0000000640)="34c7507df394bbe205b482860a48c12b1bf2ce89d03c5b624ec0e26b0d7b57161b34d7d215f46302128f5562b7a12296d4e1c93417e11c384676895f9f0f398953503a6561f0a5533ecb284d225e31361ee93b3cd0e7d7e84caedf46f0597d729483e47270bc53ee0b86f9a0898079e8b3266a46658fc3d106314defe865104d592f832247d56a5365e30a0d178da1f932000820947f14225b0ed770be61fb23fe398dc9aa", 0xa5}, {&(0x7f0000000700)="1a6a0f753fe0e5a995095a06d764f63e8c44659ec972a258b3763160", 0x1c}], 0x3, &(0x7f00000028c0)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r13, @ANYRES32=r12, @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r13, @ANYRES8=r10, @ANYRES32=r13, @ANYBLOB="000000041c000000000000000100000002000000", @ANYRESHEX=r4, @ANYRES32=r15, @ANYRES32=r16, @ANYRESDEC=r2], 0x60, 0x8040}, 0x8004) sendmsg$nl_generic(r11, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32=r15, @ANYBLOB="1400080020010000000000000000000000000001040023800800c000", @ANYRES32=r9, @ANYBLOB="00549a8169bed882bd62991563beb4c89b7ad027e1f1047bd14738cc665c8c88e4ff8ce4b84d374fd6490801d3c5e1f13fcef0a1107a8d7c95be24d04a4d403624fe29dc6488bb17424af3b13daa1aeefbad3e17af1bfb02870f853c0918f3f1376d3ab6fced380b915ac77c3d269743f55ddd2affde79cfd9c610a5a4a2d60523a5dc549911bb0c982f08004d00", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB, @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r16, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="fe16c4ca69a536980bee21dfce8a03ddeb0d2ccf37f5a75dae4608d43b01bdd27e2e57d8f75c9fc2607a51862d3d18145c45bb857e2503c0cd67c97f87ee08d042e17a25cbc6585eafda209cd99c2ad7a9195fb781a6db09e1dd9823b38934e1b328b635b0a7a37701f6356ee772212142bd5145f755894c74bb60544c96d99d6f014d5773d2e55bf841c1c3e894c2b73d0f71b6d5f061ac18040070000000"], 0x1cc8}, 0x1, 0x0, 0x0, 0x800}, 0x4000804) sendto$inet6(r8, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) 41.27067684s ago: executing program 4 (id=5219): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6020480) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x40008, 0x1}, 0x50) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000140)={'team0\x00', @multicast}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0xfffeffff}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0xac9382baadb1a948) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 40.7538213s ago: executing program 4 (id=5221): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r0, 0x2) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100030808004149014006040800", 0x58}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x252ca}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1080, 0x300}}}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x100}]}, 0x50}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 39.995738432s ago: executing program 4 (id=5224): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x8}, 0x1c) (async) getsockopt$sock_buf(r1, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c00000007000000000000000000000d0a0000000000000001000006040000000000000e"], &(0x7f0000000f40)=""/4089, 0x8b, 0xff9, 0x8}, 0x28) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x4c}}, 0x4090) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async, rerun: 32) syz_emit_ethernet(0x166, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0000fa", 0x130, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, '\x00'/12}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3"}]}}}}}}, 0x0) (async, rerun: 32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4040850}, 0x4000) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) r9 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r10 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) (async, rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r9) (rerun: 32) 39.737491405s ago: executing program 4 (id=5227): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc, 0x10}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000003c00070100000000feffffff017c00000400fc800c000180060b0600800a00000800028004001580080005000d0000000800088004004880"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0xfffe, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000240)=0x10) r2 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000090000004200000040000000c0000000", @ANYRES32=0x1, @ANYBLOB="d20500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000006dcd0436000000000000000000000000000000000900000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00'}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r3}, 0x38) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000001000)=0x1, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000009c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="d7cf67ee6f2b12e3ee254f9ea2044b673e43dbdf250100000008000300", @ANYRES32=r6, @ANYBLOB="0c0006000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40014}, 0x0) 38.396001576s ago: executing program 4 (id=5238): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r4], 0x20, 0x6044}, 0x6) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r4}, 0x8) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 23.248959778s ago: executing program 36 (id=5238): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r4], 0x20, 0x6044}, 0x6) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r4}, 0x8) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 8.823939943s ago: executing program 8 (id=5412): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) clock_gettime(0xc, 0x0) ioctl$FIOCLEX(r0, 0x5451) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c841}, 0x20000010) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0xfffffff1, 0x0, r0, 0x9, '\x00', r3, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000f10000000000000000000218010000202070250000000000202020db1209ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x1, 0xe0, &(0x7f0000000440)=""/224, 0x41000}, 0x94) 8.604935178s ago: executing program 8 (id=5414): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x18) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{0x0, 0x0, &(0x7f0000000b00)}}], 0x2, 0x24000045) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80), 0x0, 0x10, 0x5}, 0x94) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000680)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fedbdf251500000008002c000400000014002b800500020002000000080001000200000008002a000100000008000300", @ANYRES32=r6], 0x6c}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r9, &(0x7f0000000480)={0x1f, @any, 0xd}, 0xa) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f0000000100)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x20, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) recvfrom$inet6(r10, 0x0, 0x0, 0x0, &(0x7f00000017c0)={0xa, 0x4e29, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000020601030000000000400000000000000900020073797a3000000000050001000600000005006c1155ac158d800000008000000000080012400000ffcb9f0087ff0d000300686133683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x79, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x7}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x20000000) unshare(0x62040200) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x38, 0x68, 0x100, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x9}}, @NHA_OIF={0x8}]}, 0x38}}, 0x0) 8.155740443s ago: executing program 5 (id=5415): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007", @ANYRES32=0xffffffffffffffff], 0x38}}, 0x0) r1 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86", 0x11}, {&(0x7f0000000200)="c67f", 0x2}], 0x2) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x2c, r8, 0x921, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000b40)={'wpan0\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r11, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x38, r13, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008894}, 0x40000) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000580)={@dev={0xfe, 0x80, '\x00', 0x22}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x2000001, 0x0, 0x7d, 0x200, 0xfffffffffffffffe, 0x930311}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x43}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) 8.115874793s ago: executing program 6 (id=5416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x20050800) 7.365111039s ago: executing program 6 (id=5417): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000000)=ANY=[@ANYRES16], 0x8) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) (async) socket$packet(0x11, 0x3, 0x300) (async) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x5aa) sendto$inet6(r1, &(0x7f00000003c0)="e489a45dc3", 0x5, 0x0, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9, 0x1000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff16000300686173683a6e6574"], 0x64}}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0xffffb54a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000}, 0x10, 0x0, r2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x1) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x81, 0x1c}, &(0x7f0000000300)=0xc) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 7.139668842s ago: executing program 6 (id=5418): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xff00}, 0x80) 7.12257718s ago: executing program 5 (id=5419): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@deltclass={0x24, 0x29, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xf, 0x10}, {0xffff, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x54}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) r1 = socket(0x15, 0x5, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x10001, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}]}, 0x1c}}, 0x20000080) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, 0x14, 0x4, 0x70bd27, 0x25dfdbff, {0x18, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xa4, 0x1, "54c2fd4030849f13a392e3a27f77f3aed833dfd64d180e62ab175e055b847bf8c4d13a93dbd0d9d6635d327f52eafcc2082940baa58de7cdc5a48a83974f47a0007d421ad35631db92802573f8edfb2b556082a870c00be7781e228c41b6c822da8984e0addb8bb0d150bfa5549d7ae3fcaf5ddf88058881d52804d08aeea32bf13b9439c0a67e0fcff5db51df582df6ccda2092066286145c78371be434fb20"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x8800) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x14, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x24}}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.959741138s ago: executing program 6 (id=5421): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2b, 0x801, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x45}, {0x6, 0x37, 0x0, 0x6}]}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x31, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x5c, r4, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x40, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x5c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x28, r7, 0x813, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c080}, 0x4000000) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) unshare(0x400) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x403, 0x70bd2d, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x100, 0xa608}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x8000}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_getmulticast={0x14, 0x3a, 0x300, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4c001) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) r13 = openat$cgroup_int(r12, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pread64(r13, &(0x7f00000000c0)=""/244, 0xf4, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840) 6.959510093s ago: executing program 5 (id=5422): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x23, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0104000000000000000004740906080002007f000001140006"], 0x44}, 0x1, 0xffffffff00000003}, 0x0) 6.850445435s ago: executing program 5 (id=5423): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r0 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 6.726392495s ago: executing program 6 (id=5424): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000000), &(0x7f00000000c0)=r2}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000000140), {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xff000000, 0xffffff00, 0xffffffff], [0xffffff00, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x33, 0x4b, 0xc, 0x45}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@eui64={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) unshare(0x62040200) socket$inet_smc(0x2b, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000700000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d0000001801000020786c2500000000902020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0xa) unshare(0x10060300) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x6, 0xb}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5b}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x800) recvmmsg$unix(r8, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRES64], &(0x7f0000000380)=""/216, 0x26, 0xd8, 0xfff7ffff, 0x0, 0x10000, @value=r0}, 0x28) 6.696512032s ago: executing program 5 (id=5425): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r1, 0x4, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfb17}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf78}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000206010000000000000000000100000214000780080012400000000505001500060000000500010006000000050005000a00000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) 6.541639791s ago: executing program 5 (id=5427): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020600000000000000000000000500000000000000001b7f5b920d6a47d20c0000000900020200000000000000001100030068f733e31f58"], 0x58}}, 0x0) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) sendmsg$nl_generic(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x39, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) socketpair(0x1a, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20048010}, 0x30) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3.080298571s ago: executing program 0 (id=5428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000002"], 0x48}, 0x300}, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000bf080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r3, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x800) 2.923544264s ago: executing program 9 (id=5429): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x38) (async) recvmmsg(r2, &(0x7f0000000b80), 0x682, 0x10020, 0x0) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x2, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, r3}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESHEX=r6, @ANYRESOCT=r6, @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r7}, 0x10) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) 2.875766509s ago: executing program 0 (id=5430): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd26, 0x8000006, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0xa, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x3, 0x2, 0x1}}}, @TCF_EM_CONTAINER={0x14, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}, "8f81a8656329"}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24008004}, 0x8014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x10, 0x803, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd26, 0x8000006, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0xa, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x3, 0x2, 0x1}}}, @TCF_EM_CONTAINER={0x14, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}, "8f81a8656329"}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24008004}, 0x8014) (async) 2.392422615s ago: executing program 9 (id=5431): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x18}, 0x80) 2.325043256s ago: executing program 0 (id=5432): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000f23b000000080000e5c5b9bf5b5a158b643f5d4e112554ae7a64aa09f12f7fe0a4040d391b51", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000"], 0x3c}}, 0x10) 2.234127316s ago: executing program 9 (id=5433): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000040)={0x7, 'gretap0\x00', {0x3}, 0x765}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00'}, 0x90) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0xfd45}}, 0x0) write$nci(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, 0x0, &(0x7f0000000500)) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x18, 0x31, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) close(0x3) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r10, &(0x7f0000000000), 0x2a979d) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r12}, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, r13, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0) ioctl$PPPIOCSMAXCID(r10, 0x40047451, &(0x7f00000002c0)=0x953) write$nci(r7, &(0x7f0000001140)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x1, 0x2, 0x1, 0x1, 0x1}, 0x4) 2.132051562s ago: executing program 0 (id=5434): socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) accept(r1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xa, 0x9, 0x0, 0x0, 0x7fffffff, 0x400}, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) 1.59794855s ago: executing program 9 (id=5435): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r0 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.437841455s ago: executing program 9 (id=5436): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r5) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000240)={r4}, &(0x7f0000000340)=0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x5c}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r10, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r10, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f22", 0x4}], 0x1}}], 0x2, 0x240080e4) write$tun(r1, &(0x7f00000017c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x65, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @broadcast, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x3}]}}, {0x4e20, 0x4e23, 0x18, 0x0, @wg=@data={0x4, 0x2, 0x8, "e8771ac366586e56f446dcd22ec94c672f1cd650516a2fbeddd0cb5cffc4ef63a1c2be9551171e48bb8559ac9077c099289048d76d"}}}}, 0x73) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 1.135967186s ago: executing program 0 (id=5437): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000a00851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000409500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 1.062534608s ago: executing program 0 (id=5438): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00007f8a9679394092d57ed35f00ccdeb8903548d402bcbf3927d53f4ad90d24b71826f0e2666479a624f41e6f36349380a94f7677a10fec62d34faec8eef2fcfe99903b6bc37ea54bc87378a7400603cf7b7f0e17f24ac9f5b5d9557464a4a4564fe3a00a830e503a94c5c80bc31e532fac4302979efe56934baca35d9fc68f1832d11787dad68afd7569f291405d65ad7cb233b5", @ANYRES16=r2, @ANYBLOB="010080000000000000000800000008000300", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) r3 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000000100)=0x306, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x24009045) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x6}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) shutdown(r7, 0x1) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYRES32=r2, @ANYRES32=r6, @ANYBLOB="0005000084080000400012800e00010069703665727370616e0000002c00028014000700fe8000000000000000000000000000340600020000000000080005003c0000000400120008000a00", @ANYRES32, @ANYBLOB="0a000100000000ff001f"], 0x84}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 701.74956ms ago: executing program 8 (id=5439): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x20, 0x8000, 0x10, 0x3, {{0x2d, 0x4, 0x1, 0x2, 0xb4, 0x64, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@end, @cipso={0x86, 0x28, 0x2, [{0x1, 0x11, "94152fa50f1d8053d126e2a76baed9"}, {0x7, 0x11, "9fd0968b4d45e855dbb8918bd0fe41"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0x9, "e9010d4582d159"}, @cipso={0x86, 0x35, 0x3, [{0x7, 0x11, "2149a93ddd9a1fb17d67ab06a631b8"}, {0x0, 0x9, "3df20f638b4e96"}, {0x5, 0x4, "847f"}, {0x2, 0x3, "ce"}, {0x6, 0xe, "35c52fd73a1ef229bf1e410b"}]}, @cipso={0x86, 0x10, 0x2, [{0x5, 0xa, "c00013a58de3e81b"}]}, @generic={0x44, 0x12, "d191081ca90de553ca3c6dc145e277a4"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x4d, 0x3, 0x8, [{@rand_addr=0x64010102, 0x10001}]}]}}}}}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f0000000280)={&(0x7f00000001c0)=""/106, 0x6a}) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x31, &(0x7f0000001600), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private1}}, &(0x7f00000003c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000540)={{{@in=@dev={0xac, 0x14, 0x14, 0x32}, @in6=@empty, 0x4e22, 0x1, 0x4e22, 0x1be, 0x2, 0x40, 0x0, 0x62, r2, r6}, {0x2, 0xe, 0x0, 0x16af, 0x1, 0x7, 0xaa6, 0x8}, {0x6, 0x8000, 0x4, 0x1}, 0x92, 0x6e6bb0, 0x1, 0x1, 0x3}, {{@in=@rand_addr=0x64010102, 0x4d4, 0x2b}, 0xa, @in6=@private1, 0x0, 0x0, 0x1, 0x5d, 0x3, 0x9, 0x101}}, 0xe8) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1a, r2}) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DONE(r8, 0x29, 0xc9, 0x12, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001600010000000000400000000a0000fd", @ANYRES32, @ANYBLOB="1400010000000000000000000000000000000000140002"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 551.662662ms ago: executing program 8 (id=5440): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x19, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_INDEX={0x8, 0x2, 0x190}}}}]}, 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d00)={&(0x7f0000000cc0)='xen_mmu_flush_tlb_one_user\x00', r0, 0x0, 0x2}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c80)={@map=r2, 0x36, 0x0, 0x401, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0]}, 0x40) 528.464211ms ago: executing program 6 (id=5441): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000001d711875000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0xac, r7, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x50, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) clock_gettime(0x0, &(0x7f0000000200)) socket$inet_sctp(0x2, 0x5, 0x84) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 320.209642ms ago: executing program 9 (id=5442): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xa, 0x5, 0x4}}}}]}, 0x44}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000280)=""/33, &(0x7f0000000240)=0x21) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/290, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0xd76}, 0x18) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_int(r8, 0x1, 0xe, 0x0, &(0x7f0000004d40)) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000100000f3f049233f200a0e0000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000023000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r9}, 0x10) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f00000002c0)) 265.942974ms ago: executing program 8 (id=5443): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1f}, 0x80) 0s ago: executing program 8 (id=5444): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x0, 0x0, 0x100}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0x3}]}}}}}}, 0x3a) socket$igmp6(0xa, 0x3, 0x2) write(r0, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000005000f40fe00000e", 0x24) kernel console output (not intermixed with test programs): efaulting to 1000 [ 592.651915][T20408] lo speed is unknown, defaulting to 1000 [ 593.862501][T20439] lo speed is unknown, defaulting to 1000 [ 593.895072][T20432] lo speed is unknown, defaulting to 1000 [ 594.551440][T20464] lo speed is unknown, defaulting to 1000 [ 594.632940][T20474] lo speed is unknown, defaulting to 1000 [ 594.905344][T20460] lo speed is unknown, defaulting to 1000 [ 595.993818][T20483] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4367'. [ 596.105405][T20487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4368'. [ 596.753293][T20494] IPVS: rr: FWM 3 0x00000003 - no destination available [ 597.193297][T20480] lo speed is unknown, defaulting to 1000 [ 598.017539][T20515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4378'. [ 598.035543][T20515] netlink: 'syz.4.4378': attribute type 13 has an invalid length. [ 598.105423][T20515] gretap0: refused to change device tx_queue_len [ 598.116506][T20515] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 598.229752][T20479] lo speed is unknown, defaulting to 1000 [ 598.243903][T20517] netlink: 'syz.4.4379': attribute type 1 has an invalid length. [ 598.367603][T20496] lo speed is unknown, defaulting to 1000 [ 598.473107][T20512] lo speed is unknown, defaulting to 1000 [ 599.154230][T20526] IPVS: rr: FWM 3 0x00000003 - no destination available [ 599.211379][T20519] lo speed is unknown, defaulting to 1000 [ 600.625740][T20550] tipc: Enabled bearer , priority 0 [ 600.670849][T20550] syzkaller0: entered promiscuous mode [ 600.687807][T20550] syzkaller0: entered allmulticast mode [ 600.761958][T20563] IPVS: rr: FWM 3 0x00000003 - no destination available [ 600.829256][T20560] tipc: Resetting bearer [ 600.946125][T20547] tipc: Resetting bearer [ 601.059890][T20547] tipc: Disabling bearer [ 601.139451][T20569] batman_adv: batadv0: Interface deactivated: dummy0 [ 601.183210][T20569] batman_adv: batadv0: Removing interface: dummy0 [ 601.328103][T20569] bridge_slave_0: left allmulticast mode [ 601.372933][T20569] bridge_slave_0: left promiscuous mode [ 601.406201][T20569] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.485420][T20569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.536908][T20569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.655618][T20569] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 601.681846][T20569] batman_adv: batadv0: Removing interface: ip6gretap1 [ 601.713043][T20569] bond0: (slave ip6gretap2): Releasing backup interface [ 602.278281][T20603] netlink: 'syz.5.4405': attribute type 13 has an invalid length. [ 602.291365][T20556] lo speed is unknown, defaulting to 1000 [ 602.312627][T20605] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4406'. [ 602.326694][T20603] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4405'. [ 602.352435][T20603] netlink: 'syz.5.4405': attribute type 13 has an invalid length. [ 602.382625][ T973] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.391612][ T973] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.403162][T20603] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4405'. [ 602.410608][ T973] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.455231][T20605] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4406'. [ 602.569044][T20608] syzkaller0: entered promiscuous mode [ 602.574588][T20608] syzkaller0: entered allmulticast mode [ 602.594014][ T973] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.614179][T20611] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4405'. [ 602.810183][T20620] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4409'. [ 605.395273][T20577] lo speed is unknown, defaulting to 1000 [ 605.829258][T20648] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4417'. [ 605.965506][T20651] tipc: Enabled bearer , priority 0 [ 605.975477][T20649] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4417'. [ 605.982420][T20651] syzkaller0: entered promiscuous mode [ 606.003191][T20651] syzkaller0: entered allmulticast mode [ 606.030400][T20631] lo speed is unknown, defaulting to 1000 [ 606.050881][T20651] tipc: Resetting bearer [ 606.124472][T20650] tipc: Resetting bearer [ 606.158387][T20650] tipc: Disabling bearer [ 606.900431][T20654] lo speed is unknown, defaulting to 1000 [ 607.546331][T20688] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4427'. [ 608.063761][T20696] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.282932][T20701] netlink: 'syz.4.4430': attribute type 10 has an invalid length. [ 608.361759][T20696] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.534958][T20709] IPVS: rr: FWM 3 0x00000003 - no destination available [ 608.572039][T20696] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.833014][T20696] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.900560][T20699] lo speed is unknown, defaulting to 1000 [ 609.022915][ T36] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 609.088793][T20723] xt_l2tp: unknown flags: 51 [ 609.226865][T20729] FAULT_INJECTION: forcing a failure. [ 609.226865][T20729] name failslab, interval 1, probability 0, space 0, times 0 [ 609.276212][T20729] CPU: 0 UID: 0 PID: 20729 Comm: syz.6.4437 Not tainted syzkaller #0 PREEMPT(full) [ 609.276243][T20729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 609.276256][T20729] Call Trace: [ 609.276265][T20729] [ 609.276275][T20729] dump_stack_lvl+0x189/0x250 [ 609.276304][T20729] ? __pfx____ratelimit+0x10/0x10 [ 609.276326][T20729] ? __pfx_dump_stack_lvl+0x10/0x10 [ 609.276350][T20729] ? __pfx__printk+0x10/0x10 [ 609.276389][T20729] ? __pfx___might_resched+0x10/0x10 [ 609.276406][T20729] ? fs_reclaim_acquire+0x7d/0x100 [ 609.276430][T20729] should_fail_ex+0x414/0x560 [ 609.276460][T20729] should_failslab+0xa8/0x100 [ 609.276489][T20729] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 609.276515][T20729] ? __alloc_skb+0x112/0x2d0 [ 609.276541][T20729] __alloc_skb+0x112/0x2d0 [ 609.276565][T20729] netlink_ack+0x146/0xa50 [ 609.276583][T20729] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 609.276601][T20729] ? ref_tracker_free+0x63a/0x7d0 [ 609.276627][T20729] ? __asan_memcpy+0x40/0x70 [ 609.276648][T20729] ? __pfx_ref_tracker_free+0x10/0x10 [ 609.276686][T20729] netlink_rcv_skb+0x28c/0x470 [ 609.276707][T20729] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 609.276726][T20729] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 609.276759][T20729] ? netlink_deliver_tap+0x2e/0x1b0 [ 609.276787][T20729] netlink_unicast+0x82f/0x9e0 [ 609.276826][T20729] ? __pfx_netlink_unicast+0x10/0x10 [ 609.276856][T20729] ? netlink_sendmsg+0x642/0xb30 [ 609.276874][T20729] ? skb_put+0x11b/0x210 [ 609.276899][T20729] netlink_sendmsg+0x805/0xb30 [ 609.276931][T20729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.276956][T20729] ? aa_sock_msg_perm+0xf1/0x1d0 [ 609.276978][T20729] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 609.276999][T20729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.277022][T20729] __sock_sendmsg+0x21c/0x270 [ 609.277054][T20729] ____sys_sendmsg+0x52d/0x830 [ 609.277099][T20729] ? __pfx_____sys_sendmsg+0x10/0x10 [ 609.277133][T20729] ? import_iovec+0x74/0xa0 [ 609.277160][T20729] ___sys_sendmsg+0x21f/0x2a0 [ 609.277187][T20729] ? __pfx____sys_sendmsg+0x10/0x10 [ 609.277253][T20729] ? __fget_files+0x2a/0x420 [ 609.277270][T20729] ? __fget_files+0x3a0/0x420 [ 609.277300][T20729] __sys_sendmmsg+0x227/0x430 [ 609.277329][T20729] ? __pfx___sys_sendmmsg+0x10/0x10 [ 609.277349][T20729] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 609.277403][T20729] ? ksys_write+0x22a/0x250 [ 609.277431][T20729] ? __pfx_ksys_write+0x10/0x10 [ 609.277454][T20729] ? rcu_is_watching+0x15/0xb0 [ 609.277482][T20729] __x64_sys_sendmmsg+0xa0/0xc0 [ 609.277508][T20729] do_syscall_64+0xfa/0x3b0 [ 609.277529][T20729] ? lockdep_hardirqs_on+0x9c/0x150 [ 609.277550][T20729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.277569][T20729] ? clear_bhb_loop+0x60/0xb0 [ 609.277594][T20729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.277613][T20729] RIP: 0033:0x7f175b38ebe9 [ 609.277632][T20729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.277649][T20729] RSP: 002b:00007f17595f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 609.277671][T20729] RAX: ffffffffffffffda RBX: 00007f175b5c5fa0 RCX: 00007f175b38ebe9 [ 609.277686][T20729] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 609.277699][T20729] RBP: 00007f17595f6090 R08: 0000000000000000 R09: 0000000000000000 [ 609.277712][T20729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.277724][T20729] R13: 00007f175b5c6038 R14: 00007f175b5c5fa0 R15: 00007fff36830cb8 [ 609.277757][T20729] [ 609.726293][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.782707][T14275] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.840188][T20735] sctp: [Deprecated]: syz.6.4440 (pid 20735) Use of int in max_burst socket option. [ 609.840188][T20735] Use struct sctp_assoc_value instead [ 609.870484][T14275] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.959249][T20739] FAULT_INJECTION: forcing a failure. [ 609.959249][T20739] name failslab, interval 1, probability 0, space 0, times 0 [ 609.989265][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.041433][T20740] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4440'. [ 610.056875][T20739] CPU: 1 UID: 0 PID: 20739 Comm: syz.5.4442 Not tainted syzkaller #0 PREEMPT(full) [ 610.056905][T20739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 610.056917][T20739] Call Trace: [ 610.056926][T20739] [ 610.056935][T20739] dump_stack_lvl+0x189/0x250 [ 610.056964][T20739] ? __pfx____ratelimit+0x10/0x10 [ 610.056987][T20739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 610.057008][T20739] ? __pfx__printk+0x10/0x10 [ 610.057035][T20739] ? __pfx___might_resched+0x10/0x10 [ 610.057053][T20739] ? fs_reclaim_acquire+0x7d/0x100 [ 610.057077][T20739] should_fail_ex+0x414/0x560 [ 610.057108][T20739] should_failslab+0xa8/0x100 [ 610.057137][T20739] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 610.057182][T20739] ? __alloc_skb+0x112/0x2d0 [ 610.057206][T20739] __alloc_skb+0x112/0x2d0 [ 610.057231][T20739] alloc_skb_with_frags+0xca/0x890 [ 610.057264][T20739] ? is_bpf_text_address+0x26/0x2b0 [ 610.057297][T20739] sock_alloc_send_pskb+0x857/0x990 [ 610.057321][T20739] ? __lock_acquire+0xab9/0xd20 [ 610.057369][T20739] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 610.057395][T20739] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 610.057423][T20739] ? lockdep_hardirqs_on+0x9c/0x150 [ 610.057444][T20739] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 610.057472][T20739] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 610.057504][T20739] __ip_append_data+0x2ce8/0x40c0 [ 610.057553][T20739] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 610.057601][T20739] ? __pfx___ip_append_data+0x10/0x10 [ 610.057623][T20739] ? ipv4_mtu+0x53b/0x650 [ 610.057649][T20739] ? ip_setup_cork+0x577/0x9a0 [ 610.057677][T20739] ip_make_skb+0x1de/0x3f0 [ 610.057710][T20739] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 610.057736][T20739] ? __pfx_ip_make_skb+0x10/0x10 [ 610.057785][T20739] udp_sendmsg+0x1925/0x2170 [ 610.057833][T20739] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 610.057862][T20739] ? __pfx_udp_sendmsg+0x10/0x10 [ 610.057915][T20739] ? get_random_u32+0x155/0x940 [ 610.057951][T20739] ? register_lock_class+0x51/0x320 [ 610.057974][T20739] ? get_random_u32+0x155/0x940 [ 610.058001][T20739] ? __lock_acquire+0xab9/0xd20 [ 610.058039][T20739] udpv6_sendmsg+0xbf0/0x24b0 [ 610.058086][T20739] ? udp_lib_get_port+0x164b/0x1b10 [ 610.058112][T20739] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 610.058146][T20739] ? __lock_acquire+0xab9/0xd20 [ 610.058218][T20739] ? __local_bh_enable_ip+0x12d/0x1c0 [ 610.058238][T20739] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 610.058267][T20739] ? inet_send_prepare+0x1b9/0x270 [ 610.058297][T20739] ? inet_send_prepare+0x1b9/0x270 [ 610.058328][T20739] ? inet6_sendmsg+0xe4/0x120 [ 610.058354][T20739] __sock_sendmsg+0xe5/0x270 [ 610.058385][T20739] ____sys_sendmsg+0x505/0x830 [ 610.058416][T20739] ? __pfx_____sys_sendmsg+0x10/0x10 [ 610.058450][T20739] ? import_iovec+0x74/0xa0 [ 610.058479][T20739] ___sys_sendmsg+0x21f/0x2a0 [ 610.058505][T20739] ? __pfx____sys_sendmsg+0x10/0x10 [ 610.058571][T20739] ? __fget_files+0x2a/0x420 [ 610.058588][T20739] ? __fget_files+0x3a0/0x420 [ 610.058618][T20739] __x64_sys_sendmsg+0x19b/0x260 [ 610.058645][T20739] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 610.058680][T20739] ? __pfx_ksys_write+0x10/0x10 [ 610.058702][T20739] ? rcu_is_watching+0x15/0xb0 [ 610.058728][T20739] ? do_syscall_64+0xbe/0x3b0 [ 610.058755][T20739] do_syscall_64+0xfa/0x3b0 [ 610.058774][T20739] ? lockdep_hardirqs_on+0x9c/0x150 [ 610.058793][T20739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.058813][T20739] ? clear_bhb_loop+0x60/0xb0 [ 610.058837][T20739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.058856][T20739] RIP: 0033:0x7f7ed7d8ebe9 [ 610.058875][T20739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.058891][T20739] RSP: 002b:00007f7ed8c6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 610.058914][T20739] RAX: ffffffffffffffda RBX: 00007f7ed7fc5fa0 RCX: 00007f7ed7d8ebe9 [ 610.058928][T20739] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000008 [ 610.058940][T20739] RBP: 00007f7ed8c6c090 R08: 0000000000000000 R09: 0000000000000000 [ 610.058953][T20739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.058964][T20739] R13: 00007f7ed7fc6038 R14: 00007f7ed7fc5fa0 R15: 00007ffe55c99548 [ 610.058997][T20739] [ 610.132761][T20735] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 610.264411][T20740] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4440'. [ 610.774734][T20738] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.788267][T20738] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.871084][T20749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4444'. [ 610.880521][T20749] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4444'. [ 610.945335][T20738] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.971957][T20738] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.135125][T20738] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.166199][T20738] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.439996][T20738] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.460840][T20738] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.642858][T20771] FAULT_INJECTION: forcing a failure. [ 611.642858][T20771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 611.668670][T20771] CPU: 1 UID: 0 PID: 20771 Comm: syz.5.4450 Not tainted syzkaller #0 PREEMPT(full) [ 611.668704][T20771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 611.668715][T20771] Call Trace: [ 611.668724][T20771] [ 611.668733][T20771] dump_stack_lvl+0x189/0x250 [ 611.668763][T20771] ? __pfx____ratelimit+0x10/0x10 [ 611.668784][T20771] ? __pfx_dump_stack_lvl+0x10/0x10 [ 611.668807][T20771] ? __pfx__printk+0x10/0x10 [ 611.668834][T20771] ? __might_fault+0xb0/0x130 [ 611.668875][T20771] should_fail_ex+0x414/0x560 [ 611.668908][T20771] _copy_from_user+0x2d/0xb0 [ 611.668933][T20771] ___sys_sendmsg+0x158/0x2a0 [ 611.668960][T20771] ? __pfx____sys_sendmsg+0x10/0x10 [ 611.669038][T20771] ? __might_fault+0xb0/0x130 [ 611.669070][T20771] __sys_sendmmsg+0x227/0x430 [ 611.669100][T20771] ? __pfx___sys_sendmmsg+0x10/0x10 [ 611.669119][T20771] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 611.669174][T20771] ? ksys_write+0x22a/0x250 [ 611.669203][T20771] ? __pfx_ksys_write+0x10/0x10 [ 611.669225][T20771] ? rcu_is_watching+0x15/0xb0 [ 611.669253][T20771] __x64_sys_sendmmsg+0xa0/0xc0 [ 611.669279][T20771] do_syscall_64+0xfa/0x3b0 [ 611.669300][T20771] ? lockdep_hardirqs_on+0x9c/0x150 [ 611.669320][T20771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.669340][T20771] ? clear_bhb_loop+0x60/0xb0 [ 611.669373][T20771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.669391][T20771] RIP: 0033:0x7f7ed7d8ebe9 [ 611.669410][T20771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.669427][T20771] RSP: 002b:00007f7ed8c6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 611.669449][T20771] RAX: ffffffffffffffda RBX: 00007f7ed7fc5fa0 RCX: 00007f7ed7d8ebe9 [ 611.669464][T20771] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 611.669478][T20771] RBP: 00007f7ed8c6c090 R08: 0000000000000000 R09: 0000000000000000 [ 611.669491][T20771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.669503][T20771] R13: 00007f7ed7fc6038 R14: 00007f7ed7fc5fa0 R15: 00007ffe55c99548 [ 611.669538][T20771] [ 611.891216][T14276] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.899851][T14276] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.912131][ T6114] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.920510][ T6114] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.929983][ T6114] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.938301][ T6114] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.947603][T14276] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.956323][T14276] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.071534][T20760] lo speed is unknown, defaulting to 1000 [ 612.796144][T20768] lo speed is unknown, defaulting to 1000 [ 614.152449][T20795] lo speed is unknown, defaulting to 1000 [ 614.192575][T20819] FAULT_INJECTION: forcing a failure. [ 614.192575][T20819] name failslab, interval 1, probability 0, space 0, times 0 [ 614.230810][T20819] CPU: 0 UID: 0 PID: 20819 Comm: syz.6.4462 Not tainted syzkaller #0 PREEMPT(full) [ 614.230839][T20819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 614.230851][T20819] Call Trace: [ 614.230860][T20819] [ 614.230869][T20819] dump_stack_lvl+0x189/0x250 [ 614.230897][T20819] ? __pfx____ratelimit+0x10/0x10 [ 614.230918][T20819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 614.230939][T20819] ? __pfx__printk+0x10/0x10 [ 614.230971][T20819] ? netlink_unicast+0x82f/0x9e0 [ 614.230999][T20819] ? ___sys_sendmsg+0x21f/0x2a0 [ 614.231019][T20819] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 614.231054][T20819] should_fail_ex+0x414/0x560 [ 614.231087][T20819] should_failslab+0xa8/0x100 [ 614.231119][T20819] kmem_cache_alloc_noprof+0x73/0x3c0 [ 614.231145][T20819] ? skb_clone+0x212/0x3a0 [ 614.231173][T20819] skb_clone+0x212/0x3a0 [ 614.231201][T20819] __netlink_deliver_tap+0x404/0x850 [ 614.231236][T20819] ? netlink_deliver_tap+0x2e/0x1b0 [ 614.231264][T20819] netlink_deliver_tap+0x19c/0x1b0 [ 614.231285][T20819] netlink_sendskb+0x68/0x140 [ 614.231312][T20819] netlink_unicast+0x397/0x9e0 [ 614.231335][T20819] ? __asan_memcpy+0x40/0x70 [ 614.231365][T20819] ? __pfx_netlink_unicast+0x10/0x10 [ 614.231404][T20819] netlink_rcv_skb+0x28c/0x470 [ 614.231424][T20819] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 614.231447][T20819] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 614.231481][T20819] ? netlink_deliver_tap+0x2e/0x1b0 [ 614.231506][T20819] netlink_unicast+0x82f/0x9e0 [ 614.231543][T20819] ? __pfx_netlink_unicast+0x10/0x10 [ 614.231573][T20819] ? netlink_sendmsg+0x642/0xb30 [ 614.231591][T20819] ? skb_put+0x11b/0x210 [ 614.231616][T20819] netlink_sendmsg+0x805/0xb30 [ 614.231646][T20819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.231670][T20819] ? aa_sock_msg_perm+0xf1/0x1d0 [ 614.231691][T20819] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 614.231711][T20819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.231731][T20819] __sock_sendmsg+0x21c/0x270 [ 614.231763][T20819] ____sys_sendmsg+0x52d/0x830 [ 614.231793][T20819] ? __pfx_____sys_sendmsg+0x10/0x10 [ 614.231827][T20819] ? import_iovec+0x74/0xa0 [ 614.231855][T20819] ___sys_sendmsg+0x21f/0x2a0 [ 614.231882][T20819] ? __pfx____sys_sendmsg+0x10/0x10 [ 614.231946][T20819] ? __fget_files+0x2a/0x420 [ 614.231964][T20819] ? __fget_files+0x3a0/0x420 [ 614.231994][T20819] __sys_sendmmsg+0x227/0x430 [ 614.232024][T20819] ? __pfx___sys_sendmmsg+0x10/0x10 [ 614.232042][T20819] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 614.232094][T20819] ? ksys_write+0x22a/0x250 [ 614.232123][T20819] ? __pfx_ksys_write+0x10/0x10 [ 614.232144][T20819] ? rcu_is_watching+0x15/0xb0 [ 614.232173][T20819] __x64_sys_sendmmsg+0xa0/0xc0 [ 614.232199][T20819] do_syscall_64+0xfa/0x3b0 [ 614.232220][T20819] ? lockdep_hardirqs_on+0x9c/0x150 [ 614.232240][T20819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.232267][T20819] ? clear_bhb_loop+0x60/0xb0 [ 614.232291][T20819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.232308][T20819] RIP: 0033:0x7f175b38ebe9 [ 614.232327][T20819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.232344][T20819] RSP: 002b:00007f17595f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 614.232367][T20819] RAX: ffffffffffffffda RBX: 00007f175b5c5fa0 RCX: 00007f175b38ebe9 [ 614.232381][T20819] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 614.232395][T20819] RBP: 00007f17595f6090 R08: 0000000000000000 R09: 0000000000000000 [ 614.232407][T20819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.232419][T20819] R13: 00007f175b5c6038 R14: 00007f175b5c5fa0 R15: 00007fff36830cb8 [ 614.232454][T20819] [ 615.248756][T20827] lo speed is unknown, defaulting to 1000 [ 615.522687][T20844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4469'. [ 615.541963][T20844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4469'. [ 615.573013][T20844] netlink: 'syz.0.4469': attribute type 10 has an invalid length. [ 615.635157][T20844] veth0_vlan: left promiscuous mode [ 615.654680][T20844] veth0_vlan: entered promiscuous mode [ 615.699518][T20844] team0: Device veth0_vlan failed to register rx_handler [ 616.318921][T20863] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.377173][T20866] FAULT_INJECTION: forcing a failure. [ 616.377173][T20866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.403236][T20866] CPU: 0 UID: 0 PID: 20866 Comm: syz.7.4477 Not tainted syzkaller #0 PREEMPT(full) [ 616.403275][T20866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 616.403287][T20866] Call Trace: [ 616.403297][T20866] [ 616.403306][T20866] dump_stack_lvl+0x189/0x250 [ 616.403337][T20866] ? __pfx____ratelimit+0x10/0x10 [ 616.403359][T20866] ? __pfx_dump_stack_lvl+0x10/0x10 [ 616.403381][T20866] ? __pfx__printk+0x10/0x10 [ 616.403408][T20866] ? __might_fault+0xb0/0x130 [ 616.403449][T20866] should_fail_ex+0x414/0x560 [ 616.403481][T20866] _copy_from_user+0x2d/0xb0 [ 616.403506][T20866] ___sys_sendmsg+0x158/0x2a0 [ 616.403534][T20866] ? __pfx____sys_sendmsg+0x10/0x10 [ 616.403611][T20866] ? __might_fault+0xb0/0x130 [ 616.403642][T20866] __sys_sendmmsg+0x227/0x430 [ 616.403672][T20866] ? __pfx___sys_sendmmsg+0x10/0x10 [ 616.403693][T20866] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 616.403748][T20866] ? ksys_write+0x22a/0x250 [ 616.403778][T20866] ? __pfx_ksys_write+0x10/0x10 [ 616.403801][T20866] ? rcu_is_watching+0x15/0xb0 [ 616.403829][T20866] __x64_sys_sendmmsg+0xa0/0xc0 [ 616.403856][T20866] do_syscall_64+0xfa/0x3b0 [ 616.403876][T20866] ? lockdep_hardirqs_on+0x9c/0x150 [ 616.403896][T20866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.403916][T20866] ? clear_bhb_loop+0x60/0xb0 [ 616.403940][T20866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.403964][T20866] RIP: 0033:0x7f413d38ebe9 [ 616.403982][T20866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.403998][T20866] RSP: 002b:00007f413e13a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 616.404021][T20866] RAX: ffffffffffffffda RBX: 00007f413d5c5fa0 RCX: 00007f413d38ebe9 [ 616.404035][T20866] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 616.404048][T20866] RBP: 00007f413e13a090 R08: 0000000000000000 R09: 0000000000000000 [ 616.404060][T20866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.404072][T20866] R13: 00007f413d5c6038 R14: 00007f413d5c5fa0 R15: 00007ffc07ec2df8 [ 616.404106][T20866] [ 616.635502][T20863] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.677235][T20850] lo speed is unknown, defaulting to 1000 [ 616.735286][T20870] IPVS: rr: FWM 3 0x00000003 - no destination available [ 616.752013][T20863] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.933013][T20863] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.666683][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.698087][T20872] lo speed is unknown, defaulting to 1000 [ 617.734687][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.891157][ T30] audit: type=1800 audit(1757139921.197:3): pid=20886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4482" name="cgroup.controllers" dev="tmpfs" ino=2616 res=0 errno=0 [ 618.041181][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.134690][ T973] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.365427][T20892] IPVS: rr: FWM 3 0x00000003 - no destination available [ 619.380047][T20929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4494'. [ 619.401763][ T6114] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 619.594691][T20911] lo speed is unknown, defaulting to 1000 [ 620.561201][T20953] : entered promiscuous mode [ 620.862101][T20962] IPVS: persistence engine module ip_vs_pe_qip not found [ 621.014588][T20972] FAULT_INJECTION: forcing a failure. [ 621.014588][T20972] name failslab, interval 1, probability 0, space 0, times 0 [ 621.031356][T20972] CPU: 0 UID: 0 PID: 20972 Comm: syz.5.4510 Not tainted syzkaller #0 PREEMPT(full) [ 621.031386][T20972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 621.031398][T20972] Call Trace: [ 621.031407][T20972] [ 621.031416][T20972] dump_stack_lvl+0x189/0x250 [ 621.031445][T20972] ? __pfx____ratelimit+0x10/0x10 [ 621.031468][T20972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 621.031492][T20972] ? __pfx__printk+0x10/0x10 [ 621.031526][T20972] ? __pfx___might_resched+0x10/0x10 [ 621.031552][T20972] should_fail_ex+0x414/0x560 [ 621.031585][T20972] should_failslab+0xa8/0x100 [ 621.031616][T20972] __kmalloc_cache_noprof+0x70/0x3d0 [ 621.031641][T20972] ? tcf_proto_create+0x65/0x330 [ 621.031671][T20972] tcf_proto_create+0x65/0x330 [ 621.031702][T20972] tc_new_tfilter+0x11aa/0x15b0 [ 621.031758][T20972] ? __pfx_tc_new_tfilter+0x10/0x10 [ 621.031823][T20972] ? __pfx_tc_new_tfilter+0x10/0x10 [ 621.031845][T20972] rtnetlink_rcv_msg+0x7cc/0xb70 [ 621.031865][T20972] ? __lock_acquire+0xab9/0xd20 [ 621.031897][T20972] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 621.031915][T20972] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 621.031957][T20972] netlink_rcv_skb+0x208/0x470 [ 621.031976][T20972] ? __lock_acquire+0xab9/0xd20 [ 621.032004][T20972] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 621.032026][T20972] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 621.032062][T20972] ? netlink_deliver_tap+0x2e/0x1b0 [ 621.032093][T20972] netlink_unicast+0x82f/0x9e0 [ 621.032135][T20972] ? __pfx_netlink_unicast+0x10/0x10 [ 621.032175][T20972] ? netlink_sendmsg+0x642/0xb30 [ 621.032192][T20972] ? skb_put+0x11b/0x210 [ 621.032218][T20972] netlink_sendmsg+0x805/0xb30 [ 621.032249][T20972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.032274][T20972] ? aa_sock_msg_perm+0xf1/0x1d0 [ 621.032296][T20972] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 621.032317][T20972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.032338][T20972] __sock_sendmsg+0x21c/0x270 [ 621.032369][T20972] ____sys_sendmsg+0x52d/0x830 [ 621.032401][T20972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 621.032437][T20972] ? import_iovec+0x74/0xa0 [ 621.032464][T20972] ___sys_sendmsg+0x21f/0x2a0 [ 621.032490][T20972] ? __pfx____sys_sendmsg+0x10/0x10 [ 621.032567][T20972] ? __might_fault+0xb0/0x130 [ 621.032597][T20972] __sys_sendmmsg+0x227/0x430 [ 621.032628][T20972] ? __pfx___sys_sendmmsg+0x10/0x10 [ 621.032649][T20972] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 621.032705][T20972] ? ksys_write+0x22a/0x250 [ 621.032735][T20972] ? __pfx_ksys_write+0x10/0x10 [ 621.032756][T20972] ? rcu_is_watching+0x15/0xb0 [ 621.032786][T20972] __x64_sys_sendmmsg+0xa0/0xc0 [ 621.032812][T20972] do_syscall_64+0xfa/0x3b0 [ 621.032832][T20972] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.032852][T20972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.032871][T20972] ? clear_bhb_loop+0x60/0xb0 [ 621.032895][T20972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.032913][T20972] RIP: 0033:0x7f7ed7d8ebe9 [ 621.032933][T20972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.032949][T20972] RSP: 002b:00007f7ed8c6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 621.032971][T20972] RAX: ffffffffffffffda RBX: 00007f7ed7fc5fa0 RCX: 00007f7ed7d8ebe9 [ 621.032985][T20972] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 621.032999][T20972] RBP: 00007f7ed8c6c090 R08: 0000000000000000 R09: 0000000000000000 [ 621.033011][T20972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 621.033023][T20972] R13: 00007f7ed7fc6038 R14: 00007f7ed7fc5fa0 R15: 00007ffe55c99548 [ 621.033059][T20972] [ 621.033342][T20972] netlink: 400 bytes leftover after parsing attributes in process `syz.5.4510'. [ 621.969964][T20967] lo speed is unknown, defaulting to 1000 [ 621.998219][T21001] netlink: 'syz.0.4521': attribute type 1 has an invalid length. [ 622.230825][T21014] FAULT_INJECTION: forcing a failure. [ 622.230825][T21014] name failslab, interval 1, probability 0, space 0, times 0 [ 622.243928][T21014] CPU: 0 UID: 0 PID: 21014 Comm: syz.6.4526 Not tainted syzkaller #0 PREEMPT(full) [ 622.243957][T21014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 622.243969][T21014] Call Trace: [ 622.243979][T21014] [ 622.243988][T21014] dump_stack_lvl+0x189/0x250 [ 622.244017][T21014] ? __pfx____ratelimit+0x10/0x10 [ 622.244039][T21014] ? __pfx_dump_stack_lvl+0x10/0x10 [ 622.244063][T21014] ? __pfx__printk+0x10/0x10 [ 622.244093][T21014] ? __lock_acquire+0xab9/0xd20 [ 622.244134][T21014] should_fail_ex+0x414/0x560 [ 622.244166][T21014] should_failslab+0xa8/0x100 [ 622.244197][T21014] kmem_cache_alloc_noprof+0x73/0x3c0 [ 622.244223][T21014] ? skb_clone+0x212/0x3a0 [ 622.244253][T21014] skb_clone+0x212/0x3a0 [ 622.244283][T21014] __netlink_deliver_tap+0x404/0x850 [ 622.244320][T21014] ? netlink_deliver_tap+0x2e/0x1b0 [ 622.244344][T21014] netlink_deliver_tap+0x19c/0x1b0 [ 622.244366][T21014] netlink_unicast+0x7fa/0x9e0 [ 622.244407][T21014] ? __pfx_netlink_unicast+0x10/0x10 [ 622.244438][T21014] ? netlink_sendmsg+0x642/0xb30 [ 622.244457][T21014] ? skb_put+0x11b/0x210 [ 622.244483][T21014] netlink_sendmsg+0x805/0xb30 [ 622.244516][T21014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 622.244541][T21014] ? aa_sock_msg_perm+0xf1/0x1d0 [ 622.244564][T21014] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 622.244585][T21014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 622.244608][T21014] __sock_sendmsg+0x21c/0x270 [ 622.244640][T21014] ____sys_sendmsg+0x52d/0x830 [ 622.244672][T21014] ? __pfx_____sys_sendmsg+0x10/0x10 [ 622.244707][T21014] ? import_iovec+0x74/0xa0 [ 622.244735][T21014] ___sys_sendmsg+0x21f/0x2a0 [ 622.244762][T21014] ? __pfx____sys_sendmsg+0x10/0x10 [ 622.244847][T21014] ? __might_fault+0xb0/0x130 [ 622.244879][T21014] __sys_sendmmsg+0x227/0x430 [ 622.244918][T21014] ? __pfx___sys_sendmmsg+0x10/0x10 [ 622.244939][T21014] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 622.244996][T21014] ? ksys_write+0x22a/0x250 [ 622.245025][T21014] ? __pfx_ksys_write+0x10/0x10 [ 622.245048][T21014] ? rcu_is_watching+0x15/0xb0 [ 622.245077][T21014] __x64_sys_sendmmsg+0xa0/0xc0 [ 622.245104][T21014] do_syscall_64+0xfa/0x3b0 [ 622.245125][T21014] ? lockdep_hardirqs_on+0x9c/0x150 [ 622.245144][T21014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.245164][T21014] ? clear_bhb_loop+0x60/0xb0 [ 622.245189][T21014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.245207][T21014] RIP: 0033:0x7f175b38ebe9 [ 622.245226][T21014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.245242][T21014] RSP: 002b:00007f17595f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 622.245264][T21014] RAX: ffffffffffffffda RBX: 00007f175b5c5fa0 RCX: 00007f175b38ebe9 [ 622.245278][T21014] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 622.245292][T21014] RBP: 00007f17595f6090 R08: 0000000000000000 R09: 0000000000000000 [ 622.245304][T21014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 622.245316][T21014] R13: 00007f175b5c6038 R14: 00007f175b5c5fa0 R15: 00007fff36830cb8 [ 622.245351][T21014] [ 623.406009][T21027] lo speed is unknown, defaulting to 1000 [ 624.399487][T21062] netlink: 'syz.6.4543': attribute type 1 has an invalid length. [ 625.459591][T21046] lo speed is unknown, defaulting to 1000 [ 626.227630][T21121] openvswitch: netlink: IP tunnel dst address not specified [ 626.917901][T21140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4565'. [ 627.221531][T21144] dvmrp1: entered allmulticast mode [ 627.273642][T21147] dvmrp1: left allmulticast mode [ 627.661434][T21163] netlink: 'syz.5.4568': attribute type 3 has an invalid length. [ 627.718438][T21165] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4570'. [ 627.756272][T21165] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4570'. [ 627.991208][T21168] IPVS: rr: FWM 3 0x00000003 - no destination available [ 628.018160][T21142] lo speed is unknown, defaulting to 1000 [ 628.801383][T21201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4578'. [ 629.547351][T21221] IPVS: rr: FWM 3 0x00000003 - no destination available [ 630.198211][T21252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4591'. [ 630.687345][T21277] IPVS: rr: FWM 3 0x00000003 - no destination available [ 631.003989][T21287] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 631.013693][T21280] dvmrp8: entered allmulticast mode [ 631.350941][T21299] netlink: 'syz.7.4606': attribute type 2 has an invalid length. [ 631.396812][T21299] ţ: entered promiscuous mode [ 631.774871][T21313] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 631.848789][T21323] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4611'. [ 632.144551][T21291] lo speed is unknown, defaulting to 1000 [ 632.335628][T21326] lo speed is unknown, defaulting to 1000 [ 635.812785][T21358] netlink: 'syz.5.4619': attribute type 1 has an invalid length. [ 635.821569][T21358] netlink: 'syz.5.4619': attribute type 4 has an invalid length. [ 635.830982][T21358] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4619'. [ 635.848264][T21369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4621'. [ 636.455359][T21379] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4625'. [ 636.472529][T21379] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4625'. [ 636.537291][T21384] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4625'. [ 636.553388][T21384] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4625'. [ 636.579306][T21384] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4625'. [ 636.596122][T21384] netlink: 540 bytes leftover after parsing attributes in process `syz.5.4625'. [ 637.255296][T21407] netlink: 'syz.0.4636': attribute type 5 has an invalid length. [ 637.614687][T21388] lo speed is unknown, defaulting to 1000 [ 637.691480][T21417] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4638'. [ 637.732517][T21417] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4638'. [ 637.768953][T21417] netlink: 'syz.6.4638': attribute type 10 has an invalid length. [ 637.841654][T21417] veth0_vlan: left promiscuous mode [ 637.843701][T21421] IPVS: rr: FWM 3 0x00000003 - no destination available [ 637.861891][T21417] veth0_vlan: entered promiscuous mode [ 637.903834][T21417] team0: Device veth0_vlan failed to register rx_handler [ 638.288155][T21405] lo speed is unknown, defaulting to 1000 [ 638.912985][T21455] IPVS: rr: FWM 3 0x00000003 - no destination available [ 639.652223][T21484] Bluetooth: MGMT ver 1.23 [ 639.779285][T21490] FAULT_INJECTION: forcing a failure. [ 639.779285][T21490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 639.817233][T21490] CPU: 1 UID: 0 PID: 21490 Comm: syz.5.4666 Not tainted syzkaller #0 PREEMPT(full) [ 639.817264][T21490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 639.817276][T21490] Call Trace: [ 639.817284][T21490] [ 639.817294][T21490] dump_stack_lvl+0x189/0x250 [ 639.817323][T21490] ? __pfx____ratelimit+0x10/0x10 [ 639.817345][T21490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 639.817368][T21490] ? __pfx__printk+0x10/0x10 [ 639.817405][T21490] should_fail_ex+0x414/0x560 [ 639.817437][T21490] _copy_to_user+0x31/0xb0 [ 639.817464][T21490] simple_read_from_buffer+0xe1/0x170 [ 639.817497][T21490] proc_fail_nth_read+0x1b3/0x220 [ 639.817524][T21490] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 639.817551][T21490] ? rw_verify_area+0x2a6/0x4d0 [ 639.817575][T21490] ? __lock_acquire+0xab9/0xd20 [ 639.817600][T21490] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 639.817623][T21490] vfs_read+0x200/0xa30 [ 639.817648][T21490] ? fdget_pos+0x247/0x320 [ 639.817671][T21490] ? __pfx___mutex_lock+0x10/0x10 [ 639.817694][T21490] ? __pfx_vfs_read+0x10/0x10 [ 639.817722][T21490] ? __fget_files+0x2a/0x420 [ 639.817745][T21490] ? __fget_files+0x3a0/0x420 [ 639.817760][T21490] ? __fget_files+0x2a/0x420 [ 639.817789][T21490] ksys_read+0x145/0x250 [ 639.817818][T21490] ? __pfx_ksys_read+0x10/0x10 [ 639.817840][T21490] ? rcu_is_watching+0x15/0xb0 [ 639.817866][T21490] ? do_syscall_64+0xbe/0x3b0 [ 639.817893][T21490] do_syscall_64+0xfa/0x3b0 [ 639.817913][T21490] ? lockdep_hardirqs_on+0x9c/0x150 [ 639.817932][T21490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.817952][T21490] ? clear_bhb_loop+0x60/0xb0 [ 639.817976][T21490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.818005][T21490] RIP: 0033:0x7f7ed7d8d5fc [ 639.818025][T21490] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 639.818042][T21490] RSP: 002b:00007f7ed8c6c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 639.818064][T21490] RAX: ffffffffffffffda RBX: 00007f7ed7fc5fa0 RCX: 00007f7ed7d8d5fc [ 639.818078][T21490] RDX: 000000000000000f RSI: 00007f7ed8c6c0a0 RDI: 0000000000000005 [ 639.818089][T21490] RBP: 00007f7ed8c6c090 R08: 0000000000000000 R09: 0000000000000000 [ 639.818101][T21490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 639.818112][T21490] R13: 00007f7ed7fc6038 R14: 00007f7ed7fc5fa0 R15: 00007ffe55c99548 [ 639.818145][T21490] [ 640.222174][T21503] IPVS: rr: FWM 3 0x00000003 - no destination available [ 640.399052][T21505] macvlan1: entered promiscuous mode [ 640.447573][T21505] ipvlan0: entered promiscuous mode [ 640.465240][T21505] ipvlan0: left promiscuous mode [ 640.495817][T21505] macvlan1: left promiscuous mode [ 640.558527][T21507] team0: Device ipip0 is of different type [ 640.623283][T21511] IPVS: persistence engine module ip_vs_pe_qip not found [ 640.754517][T21520] netlink: 'syz.0.4675': attribute type 10 has an invalid length. [ 640.980805][T21514] netlink: 'syz.0.4675': attribute type 10 has an invalid length. [ 641.046856][T21514] __nla_validate_parse: 3 callbacks suppressed [ 641.046879][T21514] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4675'. [ 641.144456][T21514] batadv0: entered promiscuous mode [ 641.162802][T21514] batadv0: entered allmulticast mode [ 641.197854][T21514] bridge0: port 1(batadv0) entered blocking state [ 641.227194][T21514] bridge0: port 1(batadv0) entered disabled state [ 641.467129][T21537] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4682'. [ 641.503357][T21537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4682'. [ 641.523257][T21537] netlink: 'syz.5.4682': attribute type 13 has an invalid length. [ 641.556680][T21537] netlink: 'syz.5.4682': attribute type 12 has an invalid length. [ 641.561829][T21540] sit0: left promiscuous mode [ 641.659517][T21540] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.659901][ T6114] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 641.675803][ T6114] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 641.692689][T21540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 641.711748][T21518] lo speed is unknown, defaulting to 1000 [ 642.134870][T21554] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4687'. [ 642.182493][T21515] lo speed is unknown, defaulting to 1000 [ 642.270649][T21556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4688'. [ 642.286932][T21556] netlink: 'syz.5.4688': attribute type 1 has an invalid length. [ 642.309430][T21556] syzkaller1: entered promiscuous mode [ 642.314953][T21556] syzkaller1: entered allmulticast mode [ 642.324373][T21558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4688'. [ 642.334210][T21558] netlink: 'syz.5.4688': attribute type 1 has an invalid length. [ 642.540407][T21525] lo speed is unknown, defaulting to 1000 [ 642.547447][T21539] lo speed is unknown, defaulting to 1000 [ 642.564725][T21539] lo speed is unknown, defaulting to 1000 [ 642.586099][T21539] lo speed is unknown, defaulting to 1000 [ 643.583347][T21539] infiniband syz0: set active [ 643.588916][ T3091] lo speed is unknown, defaulting to 1000 [ 643.625642][T21539] infiniband syz0: added lo [ 643.634953][T21539] syz0: rxe_create_cq: returned err = -12 [ 643.651889][T21539] infiniband syz0: Couldn't create ib_mad CQ [ 643.676790][T21539] infiniband syz0: Couldn't open port 1 [ 643.799263][T21539] RDS/IB: syz0: added [ 643.803363][T21539] smc: adding ib device syz0 with port count 1 [ 643.854184][T21539] smc: ib device syz0 port 1 has no pnetid [ 643.876920][T13383] lo speed is unknown, defaulting to 1000 [ 643.889954][T21539] lo speed is unknown, defaulting to 1000 [ 644.243468][T21577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4694'. [ 644.308428][T21577] netlink: 'syz.5.4694': attribute type 4 has an invalid length. [ 644.402095][T21569] lo speed is unknown, defaulting to 1000 [ 644.530429][T21569] lo speed is unknown, defaulting to 1000 [ 644.960073][T21589] syzkaller1: left promiscuous mode [ 644.965339][T21589] syzkaller1: left allmulticast mode [ 644.974517][T21590] netlink: 'syz.5.4698': attribute type 1 has an invalid length. [ 644.985592][T21590] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4698'. [ 644.996729][T21590] netlink: 'syz.5.4698': attribute type 1 has an invalid length. [ 645.004626][T21590] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4698'. [ 645.014170][T21590] netlink: 'syz.5.4698': attribute type 1 has an invalid length. [ 645.046213][T21590] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4698'. [ 645.065745][T21590] netlink: 'syz.5.4698': attribute type 1 has an invalid length. [ 645.080106][T21539] lo speed is unknown, defaulting to 1000 [ 646.013194][T21539] lo speed is unknown, defaulting to 1000 [ 646.469997][T21539] lo speed is unknown, defaulting to 1000 [ 647.142462][ T6114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 647.152319][ T6114] bond_slave_0: left allmulticast mode [ 647.168373][ T6114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.179496][ T6114] bond_slave_1: left allmulticast mode [ 647.186016][ T6114] bond0 (unregistering): Released all slaves [ 647.332534][ T6114] bond1 (unregistering): Released all slaves [ 647.478260][ T6114] bond2 (unregistering): (slave vlan2): Releasing active interface [ 647.489378][ T6114] bond2 (unregistering): Released all slaves [ 647.629347][ T6114] bond3 (unregistering): Released all slaves [ 647.643442][T21539] lo speed is unknown, defaulting to 1000 [ 647.747510][ T6114] _ĐZ`Ô€@: left promiscuous mode [ 647.799754][ T6114] : left promiscuous mode [ 647.878980][ T6114] tipc: Disabling bearer [ 647.894741][ T6114] tipc: Left network mode [ 647.952870][T21539] lo speed is unknown, defaulting to 1000 [ 648.241333][T21539] lo speed is unknown, defaulting to 1000 [ 648.501467][T21539] lo speed is unknown, defaulting to 1000 [ 648.686148][T21539] lo speed is unknown, defaulting to 1000 [ 648.873878][T21539] lo speed is unknown, defaulting to 1000 [ 649.060993][T21539] lo speed is unknown, defaulting to 1000 [ 649.247779][T21594] lo speed is unknown, defaulting to 1000 [ 649.490166][T21605] lo speed is unknown, defaulting to 1000 [ 650.541827][ T6114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.550021][ T6114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.971916][ T6114] team0 (unregistering): Port device team_slave_1 removed [ 651.025057][ T6114] team0 (unregistering): Port device team_slave_0 removed [ 651.565659][T21608] lo speed is unknown, defaulting to 1000 [ 651.573014][T21608] lo speed is unknown, defaulting to 1000 [ 652.053758][ T6114] IPVS: stop unused estimator thread 0... [ 653.214258][T21625] vlan2: entered promiscuous mode [ 653.220479][T21625] vlan2: entered allmulticast mode [ 653.286037][T21627] __nla_validate_parse: 99 callbacks suppressed [ 653.286060][T21627] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4706'. [ 653.673373][T21619] lo speed is unknown, defaulting to 1000 [ 653.681650][T21619] lo speed is unknown, defaulting to 1000 [ 654.413375][T21643] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4711'. [ 654.597226][T21641] tipc: Enabled bearer , priority 0 [ 654.622573][T21641] syzkaller0: entered promiscuous mode [ 654.636516][T21641] syzkaller0: entered allmulticast mode [ 654.654358][T21623] lo speed is unknown, defaulting to 1000 [ 654.662719][T21623] lo speed is unknown, defaulting to 1000 [ 654.782398][T21641] tipc: Resetting bearer [ 654.868783][T21653] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4714'. [ 655.166785][T21638] tipc: Resetting bearer [ 655.216231][T21638] tipc: Disabling bearer [ 655.538813][ T5875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 655.549698][ T5875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 655.600874][ T5875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 655.615130][ T5875] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 655.625958][ T5875] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 656.033542][T21668] GUP no longer grows the stack in syz.4.4717 (21668): 200000006000-20000000a000 (200000005000) [ 656.044686][T21668] CPU: 1 UID: 0 PID: 21668 Comm: syz.4.4717 Not tainted syzkaller #0 PREEMPT(full) [ 656.044725][T21668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 656.044739][T21668] Call Trace: [ 656.044748][T21668] [ 656.044758][T21668] dump_stack_lvl+0x189/0x250 [ 656.044793][T21668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 656.044819][T21668] ? __pfx__printk+0x10/0x10 [ 656.044844][T21668] ? find_vma+0xe7/0x160 [ 656.044891][T21668] __get_user_pages+0x24d0/0x2ce0 [ 656.044915][T21668] ? __lock_acquire+0xab9/0xd20 [ 656.044979][T21668] ? __gup_longterm_locked+0xc68/0x1660 [ 656.045015][T21668] __gup_longterm_locked+0xde9/0x1660 [ 656.045050][T21668] ? try_grab_folio_fast+0x1be/0x4f0 [ 656.045091][T21668] ? gup_fast_fallback+0x195f/0x2010 [ 656.045123][T21668] gup_fast_fallback+0x1e6a/0x2010 [ 656.045191][T21668] ? __pfx_gup_fast_fallback+0x10/0x10 [ 656.045214][T21668] ? __mutex_lock+0x335/0x1350 [ 656.045243][T21668] ? futex_unqueue+0x22/0x240 [ 656.045267][T21668] ? futex_unqueue+0x22/0x240 [ 656.045287][T21668] ? futex_unqueue+0x22/0x240 [ 656.045308][T21668] ? is_valid_gup_args+0x11f/0x200 [ 656.045338][T21668] ? get_user_pages_fast+0x4d/0xb0 [ 656.045367][T21668] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 656.045402][T21668] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 656.045433][T21668] ? wait_for_space+0x24d/0x2d0 [ 656.045464][T21668] iov_iter_get_pages2+0x5e/0xa0 [ 656.045493][T21668] __se_sys_vmsplice+0x548/0x10d0 [ 656.045550][T21668] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 656.045580][T21668] ? __pfx_futex_wait+0x10/0x10 [ 656.045628][T21668] ? __lock_acquire+0xab9/0xd20 [ 656.045720][T21668] ? rcu_is_watching+0x15/0xb0 [ 656.045749][T21668] ? do_syscall_64+0xbe/0x3b0 [ 656.045779][T21668] do_syscall_64+0xfa/0x3b0 [ 656.045799][T21668] ? lockdep_hardirqs_on+0x9c/0x150 [ 656.045820][T21668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.045840][T21668] ? clear_bhb_loop+0x60/0xb0 [ 656.045866][T21668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.045886][T21668] RIP: 0033:0x7f71dab8ebe9 [ 656.045906][T21668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.045924][T21668] RSP: 002b:00007f71dbac1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 656.045947][T21668] RAX: ffffffffffffffda RBX: 00007f71dadc5fa0 RCX: 00007f71dab8ebe9 [ 656.045961][T21668] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000010 [ 656.045975][T21668] RBP: 00007f71dac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 656.045988][T21668] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 656.046000][T21668] R13: 00007f71dadc6038 R14: 00007f71dadc5fa0 R15: 00007ffd6744ccc8 [ 656.046037][T21668] [ 656.953412][T21690] validate_nla: 98 callbacks suppressed [ 656.953433][T21690] netlink: 'syz.6.4723': attribute type 13 has an invalid length. [ 657.406295][T13382] lo speed is unknown, defaulting to 1000 [ 657.406503][T21692] syzkaller0: Caught tx_queue_len zero misconfig [ 657.446035][T21660] lo speed is unknown, defaulting to 1000 [ 657.577632][T21660] lo speed is unknown, defaulting to 1000 [ 657.737569][ T5875] Bluetooth: hci2: command tx timeout [ 658.976868][T21697] lo speed is unknown, defaulting to 1000 [ 659.028161][T21697] lo speed is unknown, defaulting to 1000 [ 659.279983][T21700] lo speed is unknown, defaulting to 1000 [ 659.408355][T21660] chnl_net:caif_netlink_parms(): no params data found [ 659.769765][T21726] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4735'. [ 659.783001][T21660] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.810952][T21660] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.818533][ T5875] Bluetooth: hci2: command tx timeout [ 659.828982][T21726] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4735'. [ 659.834526][T21660] bridge_slave_0: entered allmulticast mode [ 659.851304][T21660] bridge_slave_0: entered promiscuous mode [ 659.868918][T21700] lo speed is unknown, defaulting to 1000 [ 659.869921][T21660] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.892594][T21660] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.902814][T21660] bridge_slave_1: entered allmulticast mode [ 659.918628][T21660] bridge_slave_1: entered promiscuous mode [ 660.120057][T21660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.169417][T21660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.406055][T21660] team0: Port device team_slave_0 added [ 660.468967][T21660] team0: Port device team_slave_1 added [ 660.705708][T21660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.717074][T21660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.804787][T21660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.932246][T21660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.946545][T21660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.963761][T21738] IPVS: rr: FWM 3 0x00000003 - no destination available [ 661.036971][T21660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.270433][T21660] hsr_slave_0: entered promiscuous mode [ 661.281531][T21660] hsr_slave_1: entered promiscuous mode [ 661.293402][T21660] debugfs: 'hsr0' already exists in 'hsr' [ 661.309495][T21660] Cannot create hsr debugfs directory [ 661.896582][ T5875] Bluetooth: hci2: command tx timeout [ 662.573896][T21761] netlink: 'syz.6.4747': attribute type 1 has an invalid length. [ 662.583756][T21761] netlink: 'syz.6.4747': attribute type 4 has an invalid length. [ 662.830087][T21660] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 662.896234][T21660] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 662.938841][T21660] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 663.001301][T21660] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 663.064768][ T6114] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 663.070187][T21778] sctp: [Deprecated]: syz.5.4753 (pid 21778) Use of struct sctp_assoc_value in delayed_ack socket option. [ 663.070187][T21778] Use struct sctp_sack_info instead [ 663.091304][ T6114] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 663.100735][ T3091] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 663.173913][T21788] tipc: Invalid UDP bearer configuration [ 663.173979][T21788] tipc: Enabling of bearer rejected, failed to enable media [ 663.357273][T21800] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4757'. [ 663.402848][T21800] netlink: 'syz.5.4757': attribute type 30 has an invalid length. [ 663.589666][T21660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.749544][T21660] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.793270][T14275] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.800628][T14275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.901088][T13382] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 663.916767][T13382] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 663.934374][T21804] lo speed is unknown, defaulting to 1000 [ 663.942706][T21804] lo speed is unknown, defaulting to 1000 [ 663.954972][ T973] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.962262][ T973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.986834][ T5875] Bluetooth: hci2: command tx timeout [ 664.279443][T21833] IPVS: rr: FWM 3 0x00000003 - no destination available [ 664.643333][T21847] netlink: 'syz.4.4771': attribute type 1 has an invalid length. [ 664.741925][T21660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.843596][T21850] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4773'. [ 665.079282][T21863] netlink: 'syz.0.4776': attribute type 1 has an invalid length. [ 665.502554][T21863] 8021q: adding VLAN 0 to HW filter on device bond6 [ 665.951522][T21660] veth0_vlan: entered promiscuous mode [ 665.966217][T21884] IPVS: rr: FWM 3 0x00000003 - no destination available [ 666.120402][T21660] veth1_vlan: entered promiscuous mode [ 666.208911][T21660] veth0_macvtap: entered promiscuous mode [ 666.238902][T21660] veth1_macvtap: entered promiscuous mode [ 666.342320][T21660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.404696][T21660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.462706][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.472386][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.549607][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.589724][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.934407][T21899] vxcan1: entered allmulticast mode [ 666.943587][T14275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.979496][T14275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.089354][T21909] syzkaller0: entered promiscuous mode [ 667.107065][T21909] syzkaller0: entered allmulticast mode [ 667.212964][T21913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4778'. [ 667.229444][T21905] sit0: left promiscuous mode [ 667.252178][T21905] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.259243][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 667.273646][T21905] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 667.309282][T21880] lo speed is unknown, defaulting to 1000 [ 667.355362][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.367477][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.375079][T21880] lo speed is unknown, defaulting to 1000 [ 667.576641][ T5183] Bluetooth: hci1: command 0x0405 tx timeout [ 667.997916][T21899] rdma_rxe: rxe_newlink: failed to add lo [ 668.148652][T21936] netlink: 'syz.0.4790': attribute type 1 has an invalid length. [ 668.160826][T21937] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4789'. [ 668.198768][T21936] netlink: 'syz.0.4790': attribute type 4 has an invalid length. [ 668.249963][T21936] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4790'. [ 669.158866][T21954] syzkaller0: left promiscuous mode [ 669.165265][T21954] syzkaller0: left allmulticast mode [ 669.187941][ T5875] Bluetooth: hci2: command tx timeout [ 669.388386][T21941] lo speed is unknown, defaulting to 1000 [ 669.451271][T21941] lo speed is unknown, defaulting to 1000 [ 669.713011][T21979] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4801'. [ 669.796576][T21976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4801'. [ 669.931403][T21984] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4803'. [ 670.369798][T22002] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4808'. [ 670.815915][T21998] netlink: 'syz.0.4806': attribute type 1 has an invalid length. [ 670.847904][T21998] netlink: 'syz.0.4806': attribute type 4 has an invalid length. [ 670.879077][T21998] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4806'. [ 671.178321][T22019] 8021q: VLANs not supported on bond0 [ 671.964816][T22052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4820'. [ 672.072419][T22029] bond2: left promiscuous mode [ 672.114496][T13383] lo speed is unknown, defaulting to 1000 [ 672.120844][T13383] syz0: Port: 1 Link DOWN [ 672.179459][ T7574] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 672.191979][ T7574] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.220311][T13383] lo speed is unknown, defaulting to 1000 [ 672.232428][ T7574] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 672.251115][ T7574] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.266255][ T7574] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 672.286031][ T7574] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.313247][ T7574] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 672.327758][ T7574] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.396178][T22056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4821'. [ 672.724754][T22068] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4823'. [ 672.934314][T22073] netlink: 400 bytes leftover after parsing attributes in process `syz.5.4826'. [ 672.959200][T22073] netlink: 400 bytes leftover after parsing attributes in process `syz.5.4826'. [ 673.162593][T22085] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4830'. [ 673.417862][T22060] lo speed is unknown, defaulting to 1000 [ 673.441945][T22060] lo speed is unknown, defaulting to 1000 [ 673.519011][T22096] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4833'. [ 673.562502][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.588951][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.838408][T22108] netlink: 'syz.0.4836': attribute type 10 has an invalid length. [ 674.250923][T22130] tipc: Enabled bearer , priority 0 [ 674.304061][T22130] tipc: Disabling bearer [ 674.451675][T22132] infiniband sLň2: RDMA CMA: cma_listen_on_dev, error -98 [ 674.682935][T22140] 8021q: adding VLAN 0 to HW filter on device bond7 [ 675.306087][T22164] __nla_validate_parse: 4 callbacks suppressed [ 675.306107][T22164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4851'. [ 675.470763][T22162] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 675.522155][T22164] bridge0: port 1(batadv0) entered disabled state [ 675.739672][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 675.768628][T22173] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4854'. [ 675.907605][T22178] netlink: 'syz.0.4856': attribute type 2 has an invalid length. [ 675.963868][T22168] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.971795][T22168] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.983263][T22183] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4855'. [ 676.154514][T22168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.173947][T22168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.358574][T22178] k›*·]‘: entered promiscuous mode [ 676.414443][T22181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 676.434625][T22186] veth0_to_team: entered promiscuous mode [ 676.441636][T22186] veth0_to_team: entered allmulticast mode [ 676.452155][ T36] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.471420][ T36] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.516734][ T36] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.525774][ T36] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.050032][ T12] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.095363][ T5183] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 678.107155][ T5183] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 678.115616][ T5183] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 678.128809][ T5183] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 678.142636][ T5183] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 678.211909][ T12] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.311394][ T12] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.479606][ T12] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.513067][T22242] lo speed is unknown, defaulting to 1000 [ 678.583935][T22242] lo speed is unknown, defaulting to 1000 [ 678.875665][ T12] bridge_slave_1: left allmulticast mode [ 678.886642][ T12] bridge_slave_1: left promiscuous mode [ 678.903683][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.934130][ T12] bridge_slave_0: left allmulticast mode [ 678.957385][ T12] bridge_slave_0: left promiscuous mode [ 678.966801][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.386975][T22276] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4880'. [ 679.396335][T22276] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4880'. [ 679.412766][T22276] netlink: 'syz.6.4880': attribute type 15 has an invalid length. [ 679.904041][ T12] bond1 (unregistering): (slave bond2): Releasing backup interface [ 679.912940][ T12] bond1 (unregistering): Released all slaves [ 680.088253][ T12] bond2 (unregistering): Released all slaves [ 680.217158][ T5875] Bluetooth: hci5: command tx timeout [ 680.263150][ T12] bond3 (unregistering): (slave veth7): Releasing active interface [ 680.273636][ T12] bond3 (unregistering): Released all slaves [ 680.332676][T22245] lo speed is unknown, defaulting to 1000 [ 680.370252][T22245] lo speed is unknown, defaulting to 1000 [ 680.483575][ T12] ţ: left promiscuous mode [ 680.637067][T22283] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4881'. [ 680.745944][ T12] : left promiscuous mode [ 680.795756][T22282] tipc: Started in network mode [ 680.803126][T22282] tipc: Node identity 36244e6f8a09, cluster identity 4711 [ 680.811833][T22282] tipc: Enabled bearer , priority 0 [ 680.948635][T22282] syzkaller0: entered promiscuous mode [ 680.954263][T22282] syzkaller0: entered allmulticast mode [ 680.969373][T22282] tipc: Resetting bearer [ 680.976052][ T12] tipc: Left network mode [ 680.997616][T22282] tipc: Resetting bearer [ 681.009955][T22281] tipc: Resetting bearer [ 681.849698][T11571] tipc: Node number set to 3157085807 [ 682.300040][ T5875] Bluetooth: hci5: command tx timeout [ 683.516071][T22281] tipc: Disabling bearer [ 683.546013][T22254] lo speed is unknown, defaulting to 1000 [ 683.569581][T22254] lo speed is unknown, defaulting to 1000 [ 683.752624][T22294] FAULT_INJECTION: forcing a failure. [ 683.752624][T22294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.806636][T22294] CPU: 0 UID: 0 PID: 22294 Comm: syz.8.4885 Not tainted syzkaller #0 PREEMPT(full) [ 683.806668][T22294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 683.806679][T22294] Call Trace: [ 683.806688][T22294] [ 683.806697][T22294] dump_stack_lvl+0x189/0x250 [ 683.806726][T22294] ? __pfx____ratelimit+0x10/0x10 [ 683.806748][T22294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 683.806771][T22294] ? __pfx__printk+0x10/0x10 [ 683.806813][T22294] should_fail_ex+0x414/0x560 [ 683.806845][T22294] _copy_to_user+0x31/0xb0 [ 683.806872][T22294] simple_read_from_buffer+0xe1/0x170 [ 683.806906][T22294] proc_fail_nth_read+0x1b3/0x220 [ 683.806934][T22294] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 683.806960][T22294] ? rw_verify_area+0x2a6/0x4d0 [ 683.806984][T22294] ? __lock_acquire+0xab9/0xd20 [ 683.807010][T22294] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 683.807034][T22294] vfs_read+0x200/0xa30 [ 683.807058][T22294] ? fdget_pos+0x247/0x320 [ 683.807095][T22294] ? __pfx___mutex_lock+0x10/0x10 [ 683.807119][T22294] ? __pfx_vfs_read+0x10/0x10 [ 683.807146][T22294] ? __fget_files+0x2a/0x420 [ 683.807169][T22294] ? __fget_files+0x3a0/0x420 [ 683.807186][T22294] ? __fget_files+0x2a/0x420 [ 683.807214][T22294] ksys_read+0x145/0x250 [ 683.807242][T22294] ? __pfx_ksys_read+0x10/0x10 [ 683.807264][T22294] ? rcu_is_watching+0x15/0xb0 [ 683.807291][T22294] ? do_syscall_64+0xbe/0x3b0 [ 683.807318][T22294] do_syscall_64+0xfa/0x3b0 [ 683.807336][T22294] ? lockdep_hardirqs_on+0x9c/0x150 [ 683.807357][T22294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.807376][T22294] ? clear_bhb_loop+0x60/0xb0 [ 683.807400][T22294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.807419][T22294] RIP: 0033:0x7f61b7f8d5fc [ 683.807438][T22294] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 683.807455][T22294] RSP: 002b:00007f61b8d61030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 683.807479][T22294] RAX: ffffffffffffffda RBX: 00007f61b81c5fa0 RCX: 00007f61b7f8d5fc [ 683.807493][T22294] RDX: 000000000000000f RSI: 00007f61b8d610a0 RDI: 0000000000000004 [ 683.807505][T22294] RBP: 00007f61b8d61090 R08: 0000000000000000 R09: 0000000000000000 [ 683.807517][T22294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.807528][T22294] R13: 00007f61b81c6038 R14: 00007f61b81c5fa0 R15: 00007ffcbb1d7e98 [ 683.807563][T22294] [ 684.383081][ T5875] Bluetooth: hci5: command tx timeout [ 684.786303][T22312] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4890'. [ 684.816645][T22312] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4890'. [ 684.905937][T22312] ip6tnl2: entered promiscuous mode [ 684.916647][T22312] ip6tnl2: entered allmulticast mode [ 685.521287][T22254] chnl_net:caif_netlink_parms(): no params data found [ 685.725661][T22331] netlink: 276 bytes leftover after parsing attributes in process `syz.0.4894'. [ 685.906015][T22331] tipc: Enabled bearer , priority 0 [ 685.924239][T22336] syzkaller0: entered promiscuous mode [ 685.933017][T22336] syzkaller0: entered allmulticast mode [ 686.212235][ T12] hsr_slave_0: left promiscuous mode [ 686.227755][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.244488][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.458921][ T5875] Bluetooth: hci5: command tx timeout [ 686.914126][T13383] tipc: Node number set to 384915 [ 687.050997][ T12] team0 (unregistering): Port device team_slave_1 removed [ 687.087678][ T12] team0 (unregistering): Port device team_slave_0 removed [ 687.456339][ T12] vxcan1 (unregistering): left allmulticast mode [ 687.727155][T22254] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.734581][T22254] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.742458][T22254] bridge_slave_0: entered allmulticast mode [ 687.754751][T22254] bridge_slave_0: entered promiscuous mode [ 687.764285][T22254] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.771664][T22254] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.779253][T22254] bridge_slave_1: entered allmulticast mode [ 687.789306][T22254] bridge_slave_1: entered promiscuous mode [ 687.895357][T22364] netlink: 'syz.6.4899': attribute type 83 has an invalid length. [ 687.984004][T22254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.023086][T22367] netlink: 'syz.8.4900': attribute type 1 has an invalid length. [ 688.027882][T22254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.036688][T22367] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4900'. [ 688.094472][T22367] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4900'. [ 688.206317][T22254] team0: Port device team_slave_0 added [ 688.243576][T22254] team0: Port device team_slave_1 added [ 688.505546][T22254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.527308][T22254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.612090][T22254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.640595][T22254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.659729][T22254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.695340][T22363] delete_channel: no stack [ 688.716634][T22254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.762889][T22330] tipc: Resetting bearer [ 688.862831][T22330] tipc: Disabling bearer [ 688.987233][ T12] IPVS: stop unused estimator thread 0... [ 689.454134][T22393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4905'. [ 689.525600][T22254] hsr_slave_0: entered promiscuous mode [ 689.574955][T22254] hsr_slave_1: entered promiscuous mode [ 689.600074][T22254] debugfs: 'hsr0' already exists in 'hsr' [ 689.652148][T22254] Cannot create hsr debugfs directory [ 689.811507][T22401] netlink: 172 bytes leftover after parsing attributes in process `syz.6.4906'. [ 689.866854][T22401] netlink: 172 bytes leftover after parsing attributes in process `syz.6.4906'. [ 690.197554][T22378] lo speed is unknown, defaulting to 1000 [ 690.226508][T22378] lo speed is unknown, defaulting to 1000 [ 690.396038][T22413] netlink: 'syz.6.4911': attribute type 1 has an invalid length. [ 690.666189][T22254] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 690.692810][T22254] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 690.727524][T22254] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 690.754580][T22254] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 690.826092][T22384] lo speed is unknown, defaulting to 1000 [ 690.876265][T22384] lo speed is unknown, defaulting to 1000 [ 691.043851][T22429] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4914'. [ 691.139890][T22254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.183978][T22254] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.251264][ T6114] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.258562][ T6114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.297856][ T6114] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.305068][ T6114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.400545][ C0] Unknown status report in ack skb [ 691.840882][T22446] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4918'. [ 692.123845][T22453] netlink: 'syz.4.4920': attribute type 32 has an invalid length. [ 692.623411][T22254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.663887][T22468] ip6tnl0: Caught tx_queue_len zero misconfig [ 692.930715][T22476] netlink: 'syz.6.4926': attribute type 29 has an invalid length. [ 692.940610][T22476] netlink: 'syz.6.4926': attribute type 29 has an invalid length. [ 692.949307][T22476] netlink: 'syz.6.4926': attribute type 29 has an invalid length. [ 692.973139][T22476] netlink: 'syz.6.4926': attribute type 29 has an invalid length. [ 692.994050][T22476] netlink: 'syz.6.4926': attribute type 29 has an invalid length. [ 693.018862][T22476] netlink: 'syz.6.4926': attribute type 29 has an invalid length. [ 693.045896][T22478] bond0: entered promiscuous mode [ 693.078513][T22478] bond_slave_0: entered promiscuous mode [ 693.104570][T22478] bond_slave_1: entered promiscuous mode [ 693.134700][T22476] netlink: 'syz.6.4926': attribute type 29 has an invalid length. [ 693.144494][T22476] netlink: 'syz.6.4926': attribute type 29 has an invalid length. [ 693.172521][T22476] netlink: 'syz.6.4926': attribute type 29 has an invalid length. [ 693.193373][T22476] netlink: 'syz.6.4926': attribute type 29 has an invalid length. [ 693.468112][T22254] veth0_vlan: entered promiscuous mode [ 693.534824][T22254] veth1_vlan: entered promiscuous mode [ 693.664599][T22497] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4930'. [ 693.697277][T22254] veth0_macvtap: entered promiscuous mode [ 693.742088][T22254] veth1_macvtap: entered promiscuous mode [ 693.865023][T22254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.931457][T22254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.987019][ T6117] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.015290][ T6117] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.084089][ T6117] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.104800][ T6117] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.423575][ T973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.434334][ T973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.565269][T14275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.606785][T14275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.766729][T22526] delete_channel: no stack [ 694.782634][T22489] lo speed is unknown, defaulting to 1000 [ 694.828218][T22529] tipc: Enabled bearer , priority 0 [ 694.858972][T22529] syzkaller0: entered promiscuous mode [ 694.885468][T22529] syzkaller0: entered allmulticast mode [ 694.911160][T22489] lo speed is unknown, defaulting to 1000 [ 695.222656][T22547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4943'. [ 695.372731][T22550] 8021q: VLANs not supported on sit0 [ 695.843292][T22538] IPVS: length: 163 != 33288 [ 696.646663][T22490] lo speed is unknown, defaulting to 1000 [ 696.704655][T22490] lo speed is unknown, defaulting to 1000 [ 696.843185][T22588] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4951'. [ 696.910800][T22589] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4952'. [ 696.962186][T22589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4952'. [ 697.023041][T22589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4952'. [ 698.212905][T22587] lo speed is unknown, defaulting to 1000 [ 698.221141][T22587] lo speed is unknown, defaulting to 1000 [ 698.470914][T22606] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4955'. [ 698.779061][T22533] lo speed is unknown, defaulting to 1000 [ 698.825239][T22533] lo speed is unknown, defaulting to 1000 [ 700.651233][T22624] lo speed is unknown, defaulting to 1000 [ 700.660072][T22624] lo speed is unknown, defaulting to 1000 [ 702.954356][T22631] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 703.031439][T22631] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4963'. [ 703.081572][T22631] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4963'. [ 703.102726][T22633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4964'. [ 703.156696][T22633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4964'. [ 703.376834][T22642] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4966'. [ 703.596643][T22651] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4968'. [ 703.980793][T22667] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4971'. [ 704.024363][T22651] bridge_slave_1: left allmulticast mode [ 704.030656][T22651] bridge_slave_1: left promiscuous mode [ 704.045390][T22651] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.071310][T22651] bridge_slave_0: left allmulticast mode [ 704.077339][T22651] bridge_slave_0: left promiscuous mode [ 704.083259][T22651] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.057095][T22723] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4985'. [ 706.456697][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 707.081552][T22756] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 707.241201][T22742] lo speed is unknown, defaulting to 1000 [ 707.248697][T22762] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4996'. [ 707.279268][T22742] lo speed is unknown, defaulting to 1000 [ 707.289080][T22762] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4996'. [ 707.316653][T22762] validate_nla: 24 callbacks suppressed [ 707.316677][T22762] netlink: 'syz.8.4996': attribute type 6 has an invalid length. [ 708.054666][T22745] lo speed is unknown, defaulting to 1000 [ 708.149733][T22781] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5000'. [ 708.254931][T22745] lo speed is unknown, defaulting to 1000 [ 709.187465][T22780] lo speed is unknown, defaulting to 1000 [ 709.281492][T22780] lo speed is unknown, defaulting to 1000 [ 709.699239][T22809] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 710.424342][T22791] lo speed is unknown, defaulting to 1000 [ 710.516615][T22791] lo speed is unknown, defaulting to 1000 [ 710.932556][T22823] bond0 (unregistering): Released all slaves [ 711.320965][T22817] lo speed is unknown, defaulting to 1000 [ 711.539220][T22817] lo speed is unknown, defaulting to 1000 [ 711.632436][T22828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5009'. [ 711.820677][T22832] netlink: 'syz.4.5010': attribute type 1 has an invalid length. [ 711.833882][T22832] netlink: 600 bytes leftover after parsing attributes in process `syz.4.5010'. [ 713.382747][T22835] gtp0: left promiscuous mode [ 713.419440][ T6114] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.438690][ T6114] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.483612][ T6114] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.509585][ T6114] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.539611][ T6114] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.551481][ T6114] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.560564][ T6114] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.578879][ T6114] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.895795][T22839] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5012'. [ 713.953317][T22839] netlink: 'syz.6.5012': attribute type 13 has an invalid length. [ 713.961499][T22839] netlink: 'syz.6.5012': attribute type 17 has an invalid length. [ 714.464276][T22857] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5017'. [ 714.790113][T22838] lo speed is unknown, defaulting to 1000 [ 714.821024][T22838] lo speed is unknown, defaulting to 1000 [ 714.982931][T22868] syzkaller1: entered promiscuous mode [ 715.004666][T22868] syzkaller1: entered allmulticast mode [ 715.384728][T22843] lo speed is unknown, defaulting to 1000 [ 715.573459][T22843] lo speed is unknown, defaulting to 1000 [ 716.439876][T22883] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5025'. [ 716.756047][T22886] netlink: 204 bytes leftover after parsing attributes in process `syz.8.5026'. [ 716.904116][T22870] lo speed is unknown, defaulting to 1000 [ 716.930187][T22889] can: request_module (can-proto-0) failed. [ 716.941372][T22889] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5027'. [ 716.949496][T22845] lo speed is unknown, defaulting to 1000 [ 716.951163][T22889] bond0: left promiscuous mode [ 716.964132][T22889] bond_slave_0: left promiscuous mode [ 716.972359][T22889] bond_slave_1: left promiscuous mode [ 716.980206][T22845] lo speed is unknown, defaulting to 1000 [ 717.383167][T22868] lo speed is unknown, defaulting to 1000 [ 717.389239][T22870] lo speed is unknown, defaulting to 1000 [ 718.250321][T22868] lo speed is unknown, defaulting to 1000 [ 718.404368][T22900] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5030'. [ 718.591644][T22900] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 719.122401][T22909] netlink: 'syz.0.5033': attribute type 10 has an invalid length. [ 719.171291][T22909] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5033'. [ 719.205884][T22909] veth0_vlan: left promiscuous mode [ 719.211549][T22909] veth0_vlan: entered promiscuous mode [ 719.225982][T22909] veth0_vlan: entered allmulticast mode [ 719.241465][T22909] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 719.600936][T22897] lo speed is unknown, defaulting to 1000 [ 719.690585][T22897] lo speed is unknown, defaulting to 1000 [ 719.706711][T22924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5038'. [ 719.877798][T22929] Can't find ip_set type bitmap:ip,mac [ 720.491446][T22945] netlink: 'syz.0.5042': attribute type 10 has an invalid length. [ 720.583211][T22947] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode [ 721.802344][T22971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5046'. [ 721.811659][T22971] netlink: 'syz.0.5046': attribute type 7 has an invalid length. [ 721.838869][T22971] netlink: 'syz.0.5046': attribute type 8 has an invalid length. [ 721.847021][T22971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5046'. [ 722.544556][T22937] lo speed is unknown, defaulting to 1000 [ 722.573479][T22937] lo speed is unknown, defaulting to 1000 [ 722.991299][T22981] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5050'. [ 723.023929][T22985] tipc: Enabled bearer , priority 0 [ 723.042169][T22985] syzkaller0: entered promiscuous mode [ 723.048414][T22985] syzkaller0: entered allmulticast mode [ 723.125868][T22985] tipc: Resetting bearer [ 723.182954][T22982] tipc: Resetting bearer [ 723.183112][T22989] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5052'. [ 723.221416][T22982] tipc: Disabling bearer [ 723.295050][T22989] netlink: 'syz.5.5052': attribute type 1 has an invalid length. [ 723.487430][T22996] netlink: zone id is out of range [ 723.516082][T22996] netlink: zone id is out of range [ 723.535449][T22996] netlink: zone id is out of range [ 723.542404][T22996] netlink: zone id is out of range [ 723.557967][T22998] netlink: del zone limit has 4 unknown bytes [ 723.567550][T22996] netlink: zone id is out of range [ 723.572714][T22996] netlink: zone id is out of range [ 723.596849][T22996] netlink: zone id is out of range [ 723.602099][T22996] netlink: zone id is out of range [ 723.914788][T23000] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5055'. [ 724.225264][T23009] syzkaller0: entered promiscuous mode [ 724.230886][T23009] syzkaller0: entered allmulticast mode [ 724.625532][T23022] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5063'. [ 725.061078][T23027] FAULT_INJECTION: forcing a failure. [ 725.061078][T23027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 725.074513][T23027] CPU: 0 UID: 0 PID: 23027 Comm: syz.4.5064 Not tainted syzkaller #0 PREEMPT(full) [ 725.074541][T23027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 725.074554][T23027] Call Trace: [ 725.074563][T23027] [ 725.074571][T23027] dump_stack_lvl+0x189/0x250 [ 725.074602][T23027] ? __pfx____ratelimit+0x10/0x10 [ 725.074624][T23027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 725.074647][T23027] ? __pfx__printk+0x10/0x10 [ 725.074674][T23027] ? __might_fault+0xb0/0x130 [ 725.074713][T23027] should_fail_ex+0x414/0x560 [ 725.074745][T23027] _copy_from_user+0x2d/0xb0 [ 725.074779][T23027] __sys_connect+0x123/0x440 [ 725.074800][T23027] ? __fget_files+0x3a0/0x420 [ 725.074818][T23027] ? __pfx___sys_connect+0x10/0x10 [ 725.074851][T23027] ? __pfx_ksys_write+0x10/0x10 [ 725.074874][T23027] ? rcu_is_watching+0x15/0xb0 [ 725.074903][T23027] __x64_sys_connect+0x7a/0x90 [ 725.074924][T23027] do_syscall_64+0xfa/0x3b0 [ 725.074945][T23027] ? lockdep_hardirqs_on+0x9c/0x150 [ 725.074966][T23027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.074985][T23027] ? clear_bhb_loop+0x60/0xb0 [ 725.075009][T23027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.075028][T23027] RIP: 0033:0x7f71dab8ebe9 [ 725.075046][T23027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 725.075063][T23027] RSP: 002b:00007f71dbac1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 725.075084][T23027] RAX: ffffffffffffffda RBX: 00007f71dadc5fa0 RCX: 00007f71dab8ebe9 [ 725.075099][T23027] RDX: 0000000000000014 RSI: 0000200000000140 RDI: 0000000000000004 [ 725.075111][T23027] RBP: 00007f71dbac1090 R08: 0000000000000000 R09: 0000000000000000 [ 725.075124][T23027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.075136][T23027] R13: 00007f71dadc6038 R14: 00007f71dadc5fa0 R15: 00007ffd6744ccc8 [ 725.075169][T23027] [ 725.352997][T23029] netlink: 6028 bytes leftover after parsing attributes in process `syz.4.5065'. [ 727.242108][T22994] lo speed is unknown, defaulting to 1000 [ 727.309435][T22994] lo speed is unknown, defaulting to 1000 [ 727.380346][T23032] netlink: 'syz.8.5066': attribute type 4 has an invalid length. [ 727.438916][T23032] netlink: 'syz.8.5066': attribute type 4 has an invalid length. [ 727.529145][T23041] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5068'. [ 727.780080][T23047] netlink: 766 bytes leftover after parsing attributes in process `syz.6.5068'. [ 727.862085][T23046] tipc: Started in network mode [ 727.875966][T23046] tipc: Node identity 3ed452bf9ff8, cluster identity 4711 [ 727.915023][T23046] tipc: Enabled bearer , priority 0 [ 728.074864][T23048] syzkaller0: entered promiscuous mode [ 728.088646][T23048] syzkaller0: entered allmulticast mode [ 728.408515][T23048] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.046797][T11574] tipc: Node number set to 2704036543 [ 729.236326][T23045] tipc: Resetting bearer [ 729.298322][T23045] tipc: Disabling bearer [ 729.483136][T23048] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.509904][T23087] netlink: 844 bytes leftover after parsing attributes in process `syz.8.5079'. [ 729.732354][T23048] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.065955][T23048] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.510033][T23093] lo speed is unknown, defaulting to 1000 [ 730.545896][T14276] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.567073][T14276] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.575631][T23093] lo speed is unknown, defaulting to 1000 [ 730.613989][ T6114] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.668897][ T7574] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.902756][T23112] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5088'. [ 731.305744][ T5871] IPVS: starting estimator thread 0... [ 731.417426][T23133] IPVS: using max 27 ests per chain, 64800 per kthread [ 731.465983][T23137] vlan2: entered allmulticast mode [ 731.485059][T23137] bridge_slave_0: entered allmulticast mode [ 731.608697][T23144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5098'. [ 732.464014][T23168] netlink: 'syz.0.5103': attribute type 1 has an invalid length. [ 732.702035][T23173] bond8: entered promiscuous mode [ 732.716599][T23173] bond8: entered allmulticast mode [ 732.730119][T23173] 8021q: adding VLAN 0 to HW filter on device bond8 [ 732.807982][T23176] 8021q: adding VLAN 0 to HW filter on device bond9 [ 732.820819][T23176] bond9: entered promiscuous mode [ 732.826730][T23176] bond9: entered allmulticast mode [ 732.832778][T23176] bond8: (slave bond9): Enslaving as a backup interface with a down link [ 733.329642][T23185] lo speed is unknown, defaulting to 1000 [ 733.338622][T23185] lo speed is unknown, defaulting to 1000 [ 733.657797][T23196] netlink: 'syz.6.5111': attribute type 4 has an invalid length. [ 733.769296][T23210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5113'. [ 733.870521][T23211] batman_adv: batadv0: Adding interface: dummy0 [ 733.877041][T23211] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 733.904705][T23211] batman_adv: batadv0: Interface activated: dummy0 [ 733.996587][T23211] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5113'. [ 734.061630][T23210] net_ratelimit: 241 callbacks suppressed [ 734.061655][T23210] batadv0: mtu less than device minimum [ 734.078757][T23210] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 734.090974][T23210] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 734.101329][T23216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5115'. [ 734.101362][T23216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5115'. [ 734.121204][T23210] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 734.133435][T23210] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 734.145570][T23210] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 734.157869][T23210] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 734.170119][T23210] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 734.182564][T23210] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 734.194529][T23210] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 734.304636][T23220] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5117'. [ 734.453184][T23234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5118'. [ 735.509164][T23225] lo speed is unknown, defaulting to 1000 [ 735.594351][T23225] lo speed is unknown, defaulting to 1000 [ 735.704614][T23276] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5128'. [ 736.060455][T23281] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5129'. [ 736.082250][T23281] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5129'. [ 736.275733][T23287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5130'. [ 736.428231][T23272] lo speed is unknown, defaulting to 1000 [ 736.463249][T23272] lo speed is unknown, defaulting to 1000 [ 737.269883][T23307] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 737.324922][T23307] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5137'. [ 737.336683][T23307] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5137'. [ 737.731706][ T5871] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 737.757029][ T5871] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 737.823105][ T5871] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 737.930671][T23325] tipc: Enabling of bearer rejected, failed to enable media [ 739.162317][T23356] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5147'. [ 739.163962][T23357] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5147'. [ 739.722338][T23368] vlan0: entered allmulticast mode [ 739.742675][T23368] dummy0: entered allmulticast mode [ 739.980137][T23379] netlink: 'syz.0.5151': attribute type 83 has an invalid length. [ 740.071427][T23378] netlink: 'syz.4.5153': attribute type 7 has an invalid length. [ 740.188172][T23378] : entered promiscuous mode [ 740.351389][T23387] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5156'. [ 740.477010][T23392] netlink: 'syz.6.5159': attribute type 1 has an invalid length. [ 740.493852][T23392] netlink: 'syz.6.5159': attribute type 1 has an invalid length. [ 741.370228][T23385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 741.409700][T23385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 741.857439][T23399] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5160'. [ 741.867731][T23399] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5160'. [ 741.894235][T23379] lo speed is unknown, defaulting to 1000 [ 741.913701][T14276] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.936572][T14276] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.964159][T23379] lo speed is unknown, defaulting to 1000 [ 741.970350][T14276] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.000705][T14276] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.300060][T23420] block nbd3: shutting down sockets [ 742.454820][T23428] netlink: 'syz.8.5167': attribute type 2 has an invalid length. [ 742.480162][T23428] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5167'. [ 742.630369][T23432] macvlan3: entered promiscuous mode [ 742.635841][T23432] vlan0: entered promiscuous mode [ 742.741915][T23393] lo speed is unknown, defaulting to 1000 [ 742.754272][T23393] lo speed is unknown, defaulting to 1000 [ 743.180148][T23444] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5173'. [ 743.207138][T23444] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5173'. [ 743.220488][T23444] net_ratelimit: 10 callbacks suppressed [ 743.220510][T23444] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 743.485628][T23454] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5178'. [ 743.812549][T23459] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5179'. [ 743.944320][T23466] netlink: 'syz.5.5180': attribute type 29 has an invalid length. [ 743.966935][T23466] netlink: 'syz.5.5180': attribute type 29 has an invalid length. [ 744.016279][T23466] netlink: 500 bytes leftover after parsing attributes in process `syz.5.5180'. [ 744.977432][T23494] syzkaller0: entered allmulticast mode [ 745.008329][T23496] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5187'. [ 745.090823][T23494] syzkaller0 (unregistering): left allmulticast mode [ 745.391429][T23506] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5189'. [ 746.181587][T23540] tipc: Enabled bearer , priority 0 [ 746.298327][T23540] tipc: Disabling bearer [ 746.515972][T23554] tipc: Enabled bearer , priority 0 [ 746.537922][T23522] lo speed is unknown, defaulting to 1000 [ 746.546114][T23522] lo speed is unknown, defaulting to 1000 [ 746.598264][T23557] syzkaller0: entered promiscuous mode [ 746.603873][T23557] syzkaller0: entered allmulticast mode [ 746.667527][T23554] tipc: Resetting bearer [ 746.801992][T23535] lo speed is unknown, defaulting to 1000 [ 747.227186][T23535] lo speed is unknown, defaulting to 1000 [ 747.242662][T23553] tipc: Resetting bearer [ 747.284060][T23553] tipc: Disabling bearer [ 747.439280][T23568] syzkaller0: left promiscuous mode [ 747.451651][T23568] syzkaller0: left allmulticast mode [ 748.878512][T23583] __nla_validate_parse: 1 callbacks suppressed [ 748.878533][T23583] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5210'. [ 750.989958][T23614] lo speed is unknown, defaulting to 1000 [ 751.020992][T23614] lo speed is unknown, defaulting to 1000 [ 752.168697][T23667] veth0_vlan: left promiscuous mode [ 752.175512][T23667] veth0_vlan: entered promiscuous mode [ 752.224892][T23664] netlink: 'syz.6.5231': attribute type 2 has an invalid length. [ 752.998176][T23691] dvmrp8: entered allmulticast mode [ 753.004024][T23690] pim6reg1: entered promiscuous mode [ 753.010317][T23690] pim6reg1: entered allmulticast mode [ 753.108634][T23690] dvmrp8: left allmulticast mode [ 753.255329][T23695] netlink: 'syz.6.5243': attribute type 13 has an invalid length. [ 753.266259][T23695] netlink: 'syz.6.5243': attribute type 17 has an invalid length. [ 753.332845][T23695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.355467][T23695] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.377144][T23695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 753.393766][T13361] lo speed is unknown, defaulting to 1000 [ 753.408260][T13361] syz0: Port: 1 Link ACTIVE [ 753.422905][T13383] lo speed is unknown, defaulting to 1000 [ 753.562367][T23712] netlink: 'syz.0.5247': attribute type 29 has an invalid length. [ 753.581856][T23712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5247'. [ 753.845378][T23724] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5251'. [ 753.963807][T23730] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5253'. [ 753.982804][T23730] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5253'. [ 753.992478][T23734] netlink: 'syz.6.5252': attribute type 16 has an invalid length. [ 754.000974][T23734] netlink: 'syz.6.5252': attribute type 17 has an invalid length. [ 754.031067][T23734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 754.317984][T23745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5257'. [ 754.327215][T23745] batman_adv: batadv0: Interface deactivated: dummy0 [ 754.333935][T23745] batman_adv: batadv0: Removing interface: dummy0 [ 754.463579][T23744] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 754.535181][T23753] netlink: 'syz.5.5259': attribute type 26 has an invalid length. [ 754.618231][T23755] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 754.619689][ T5183] Bluetooth: hci3: command 0x0406 tx timeout [ 755.160706][T23787] tipc: Enabled bearer , priority 0 [ 755.192959][T23787] syzkaller0: entered promiscuous mode [ 755.220488][T23787] syzkaller0: entered allmulticast mode [ 755.409890][T23788] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 755.448229][T23802] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5270'. [ 755.469409][T23787] tipc: Resetting bearer [ 755.478688][T23786] tipc: Resetting bearer [ 755.550746][T23786] tipc: Disabling bearer [ 755.889028][T23779] lo speed is unknown, defaulting to 1000 [ 755.897451][T23779] lo speed is unknown, defaulting to 1000 [ 756.781752][ T5183] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 756.803621][ T5183] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 756.814180][ T5183] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 756.826864][ T5183] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 756.835268][ T5183] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 757.017948][T23783] lo speed is unknown, defaulting to 1000 [ 757.190425][T23783] lo speed is unknown, defaulting to 1000 [ 757.498046][T23849] netlink: 'syz.0.5282': attribute type 3 has an invalid length. [ 757.509379][T23849] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5282'. [ 757.616251][T23828] lo speed is unknown, defaulting to 1000 [ 757.824070][T23859] sch_tbf: burst 5 is lower than device lo mtu (65550) ! [ 757.865149][T23862] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.5285'. [ 757.897113][T23861] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5286'. [ 757.914251][T23828] lo speed is unknown, defaulting to 1000 [ 757.963882][T23861] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 758.936699][ T5875] Bluetooth: hci4: command tx timeout [ 759.485864][T23828] chnl_net:caif_netlink_parms(): no params data found [ 760.065599][T23828] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.075078][T23828] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.091781][T23828] bridge_slave_0: entered allmulticast mode [ 760.104743][T23828] bridge_slave_0: entered promiscuous mode [ 760.125744][T23828] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.134824][T23828] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.143871][T23828] bridge_slave_1: entered allmulticast mode [ 760.153222][T23828] bridge_slave_1: entered promiscuous mode [ 760.231679][T23828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.246994][T23828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.403534][T23828] team0: Port device team_slave_0 added [ 760.425235][T23828] team0: Port device team_slave_1 added [ 760.520777][T23828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.535916][T23828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.565345][T23828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.597590][T23828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 760.604772][T23828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.632029][T23828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 760.809015][T23946] netlink: 180 bytes leftover after parsing attributes in process `syz.5.5305'. [ 760.828032][T23828] hsr_slave_0: entered promiscuous mode [ 760.835929][T23828] hsr_slave_1: entered promiscuous mode [ 760.845015][T23828] debugfs: 'hsr0' already exists in 'hsr' [ 760.851920][T23828] Cannot create hsr debugfs directory [ 760.860240][T23946] netem: change failed [ 761.019859][ T5875] Bluetooth: hci4: command tx timeout [ 761.191072][T23959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5307'. [ 761.216635][T23959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5307'. [ 761.277712][T23963] netlink: 'syz.8.5309': attribute type 15 has an invalid length. [ 761.285890][T23963] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5309'. [ 761.362701][T23967] netlink: 'syz.8.5309': attribute type 15 has an invalid length. [ 761.371218][T23967] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5309'. [ 761.707546][T23980] veth1_to_bond: entered allmulticast mode [ 761.733376][T23979] veth1_to_bond: left allmulticast mode [ 761.739373][T23828] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 761.762614][T23828] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 761.800834][T23828] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 761.836215][T23828] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 762.054656][T23828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.129880][T23828] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.141147][T24006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5320'. [ 762.162614][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.169903][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.191819][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.199014][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.255042][T24010] syzkaller0: entered promiscuous mode [ 762.262213][T24010] syzkaller0: entered allmulticast mode [ 763.089194][T24019] block nbd3: server does not support multiple connections per device. [ 763.114140][ T5183] Bluetooth: hci4: command tx timeout [ 763.128500][T24019] block nbd3: shutting down sockets [ 765.176828][ T5183] Bluetooth: hci4: command 0x0419 tx timeout [ 765.545902][T24027] lo speed is unknown, defaulting to 1000 [ 765.572828][T24027] lo speed is unknown, defaulting to 1000 [ 765.633662][T23828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.169925][T23828] veth0_vlan: entered promiscuous mode [ 766.192775][T23828] veth1_vlan: entered promiscuous mode [ 766.324757][T23828] veth0_macvtap: entered promiscuous mode [ 766.355291][T23828] veth1_macvtap: entered promiscuous mode [ 766.419625][T23828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 766.460722][T23828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 766.500188][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.524576][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.564182][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.574455][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.745578][T24062] netlink: 'syz.8.5332': attribute type 13 has an invalid length. [ 766.760520][T24062] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5332'. [ 766.834939][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.857168][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.963016][ T7574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.991500][ T7574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.263843][ T5183] Bluetooth: hci4: command 0x0419 tx timeout [ 767.475539][T24062] lo speed is unknown, defaulting to 1000 [ 767.527180][T24062] lo speed is unknown, defaulting to 1000 [ 767.563817][T24081] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5338'. [ 768.725248][ T5183] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 768.737568][ T5183] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 768.746729][ T5183] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 768.756123][ T5183] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 768.765019][ T5183] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 768.870754][T24107] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 768.970922][T24110] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5345'. [ 769.115623][T24113] batman_adv: batadv0: Adding interface: gretap1 [ 769.126584][T24113] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 769.308327][T24120] delete_channel: no stack [ 769.439438][T24125] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5351'. [ 769.518891][T24091] lo speed is unknown, defaulting to 1000 [ 769.623596][T24091] lo speed is unknown, defaulting to 1000 [ 770.510749][T24101] lo speed is unknown, defaulting to 1000 [ 770.560108][T24101] lo speed is unknown, defaulting to 1000 [ 770.621049][T24145] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5357'. [ 770.857370][ T5875] Bluetooth: hci7: command tx timeout [ 770.957012][T24145] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5357'. [ 771.637803][T24159] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5360'. [ 771.943069][T24159] bridge_slave_1: left allmulticast mode [ 771.967473][T24159] bridge_slave_1: left promiscuous mode [ 771.996846][T24159] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.059949][T24159] bridge_slave_0: left allmulticast mode [ 772.065660][T24159] bridge_slave_0: left promiscuous mode [ 772.103204][T24159] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.369306][T24139] lo speed is unknown, defaulting to 1000 [ 772.413364][T24139] lo speed is unknown, defaulting to 1000 [ 772.413480][T24148] lo speed is unknown, defaulting to 1000 [ 772.736295][T24101] chnl_net:caif_netlink_parms(): no params data found [ 772.912806][T24101] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.932976][T24101] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.936473][ T5875] Bluetooth: hci7: command tx timeout [ 772.944465][T24101] bridge_slave_0: entered allmulticast mode [ 772.955996][T24101] bridge_slave_0: entered promiscuous mode [ 772.965963][T24148] lo speed is unknown, defaulting to 1000 [ 772.967100][T24101] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.979405][T24101] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.987195][T24101] bridge_slave_1: entered allmulticast mode [ 772.995494][T24101] bridge_slave_1: entered promiscuous mode [ 773.105445][T24101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.137860][T24101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.274229][T24101] team0: Port device team_slave_0 added [ 773.295983][T24101] team0: Port device team_slave_1 added [ 773.391236][T24101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.406750][T24101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 773.455976][T24101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.536178][T24101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.568453][T24101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 773.675488][T24101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.185154][T24101] hsr_slave_0: entered promiscuous mode [ 774.194992][T24101] hsr_slave_1: entered promiscuous mode [ 774.203272][T24101] debugfs: 'hsr0' already exists in 'hsr' [ 774.209242][T24101] Cannot create hsr debugfs directory [ 774.529568][T24182] tipc: Enabled bearer , priority 0 [ 774.555980][T24181] syzkaller0: entered promiscuous mode [ 774.565184][T24181] syzkaller0: entered allmulticast mode [ 774.608765][T24181] tipc: Resetting bearer [ 774.755749][T24187] netlink: 'syz.5.5367': attribute type 1 has an invalid length. [ 774.775912][T24187] netlink: 144 bytes leftover after parsing attributes in process `syz.5.5367'. [ 774.798392][T24180] tipc: Resetting bearer [ 774.814969][T24188] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5367'. [ 774.841305][T24187] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5367'. [ 774.876162][T24180] tipc: Disabling bearer [ 775.018587][ T5875] Bluetooth: hci7: command tx timeout [ 775.273703][T24101] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 775.345085][T24101] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 775.389851][T24101] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 775.437764][T24101] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 775.543782][T24220] siw: device registration error -23 [ 775.553887][T24220] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5378'. [ 775.564394][T24220] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5378'. [ 775.569882][T24219] netlink: 'syz.0.5377': attribute type 29 has an invalid length. [ 775.576528][T24220] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5378'. [ 775.591553][T24219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5377'. [ 775.667781][T24220] netlink: 'syz.5.5378': attribute type 2 has an invalid length. [ 775.749573][T24101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.789925][T24220] netlink: 'syz.5.5378': attribute type 4 has an invalid length. [ 775.815257][T24101] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.861207][ T6114] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.868447][ T6114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.949941][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.957256][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.277149][T24243] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5384'. [ 776.319793][T24245] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5385'. [ 776.497911][T24251] netlink: 16215 bytes leftover after parsing attributes in process `syz.8.5387'. [ 776.796120][T24266] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 776.847378][T24258] syzkaller0: entered promiscuous mode [ 776.853246][T24258] syzkaller0: entered allmulticast mode [ 777.098181][ T5875] Bluetooth: hci7: command tx timeout [ 779.937417][T24296] netlink: 'syz.5.5397': attribute type 1 has an invalid length. [ 779.960963][T24101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 780.061934][T24296] 8021q: adding VLAN 0 to HW filter on device bond2 [ 780.174457][T24300] veth3: entered promiscuous mode [ 780.185009][T24300] bond2: (slave veth3): Enslaving as an active interface with a down link [ 780.224868][T24313] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.5400'. [ 780.325482][T24318] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5401'. [ 780.384378][T24318] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5401'. [ 780.493413][T24323] 8021q: VLANs not supported on bond0 [ 780.507356][T24323] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5402'. [ 780.584740][T24311] lo speed is unknown, defaulting to 1000 [ 780.593250][T24311] lo speed is unknown, defaulting to 1000 [ 781.053760][T24101] veth0_vlan: entered promiscuous mode [ 781.098636][T24101] veth1_vlan: entered promiscuous mode [ 781.207214][T24101] veth0_macvtap: entered promiscuous mode [ 781.224569][T24101] veth1_macvtap: entered promiscuous mode [ 781.254702][T24101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 781.319935][T24101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.365322][T14275] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.382598][T14275] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.442388][T14275] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.471531][T14275] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.690240][ T6114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.700517][ T6114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.918168][ T7574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.973894][ T7574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.255063][T24356] netlink: 16215 bytes leftover after parsing attributes in process `syz.5.5411'. [ 782.722182][T24366] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5414'. [ 782.922122][T24368] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5414'. [ 782.929981][T24358] lo speed is unknown, defaulting to 1000 [ 782.941161][T24358] lo speed is unknown, defaulting to 1000 [ 783.387417][T24351] macvtap1: entered allmulticast mode [ 783.419226][T24351] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 783.477562][T24351] mac80211_hwsim hwsim28 wlan0: left allmulticast mode [ 784.177153][T24400] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5422'. [ 784.189664][T24368] lo speed is unknown, defaulting to 1000 [ 784.243230][T24368] lo speed is unknown, defaulting to 1000 [ 784.580233][T24410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 784.904381][T24416] netlink: 'syz.5.5427': attribute type 1 has an invalid length. [ 784.927659][T24416] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5427'. [ 787.952170][T24406] lo speed is unknown, defaulting to 1000 [ 787.965418][T24406] lo speed is unknown, defaulting to 1000 [ 788.321591][T24432] bridge_slave_0: left allmulticast mode [ 788.337757][T24432] bridge_slave_0: left promiscuous mode [ 788.344872][T24432] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.396137][T24432] bridge_slave_1: left allmulticast mode [ 788.403069][T24432] bridge_slave_1: left promiscuous mode [ 788.410152][T24432] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.429695][T24432] bond0: (slave bond_slave_0): Releasing backup interface [ 788.459664][T24432] bond0: (slave bond_slave_1): Releasing backup interface [ 788.501693][T24432] team0: Port device team_slave_0 removed [ 788.524403][T24432] team0: Port device team_slave_1 removed [ 788.538324][T24432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 788.556989][T24432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 788.575669][T24432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 788.584232][T24432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 788.822604][T24414] lo speed is unknown, defaulting to 1000 [ 788.847016][T24414] lo speed is unknown, defaulting to 1000 [ 788.879906][T24442] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5432'. [ 789.020335][ T6117] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 789.984663][T24469] IPv6: Can't replace route, no match found [ 790.173522][T24462] syzkaller1: entered promiscuous mode [ 790.182111][T24462] syzkaller1: entered allmulticast mode [ 790.463557][ T5875] Bluetooth: hci2: command 0x0406 tx timeout [ 790.845883][T24484] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5442'. [ 791.253119][T24492] netlink: 'syz.8.5444': attribute type 15 has an invalid length. Connection to 10.128.1.26 closed by remote host. [ 791.727380][T24474] lo speed is unknown, defaulting to 1000 [ 791.735228][T24474] lo speed is unknown, defaulting to 1000 [ 793.672715][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 793.683785][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 793.693550][ T12] bond0 (unregistering): Released all slaves [ 793.708733][ T12] bond1 (unregistering): Released all slaves [ 793.859477][ T12] bond2 (unregistering): (slave veth3): Releasing active interface [ 793.870399][ T12] bond2 (unregistering): Released all slaves [ 793.963503][ T12] tipc: Left network mode [ 794.555195][ T12] hsr_slave_0: left promiscuous mode [ 794.573558][ T12] hsr_slave_1: left promiscuous mode [ 794.580812][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 794.589518][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 794.600292][ T12] veth0_vlan: left promiscuous mode [ 795.125758][ T12] team0 (unregistering): Port device team_slave_1 removed [ 795.183165][ T12] team0 (unregistering): Port device team_slave_0 removed [ 797.431411][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.520598][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.586177][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.677217][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.801981][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.879567][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.937505][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.977352][ T31] INFO: task syz.7.4665:21491 blocked for more than 143 seconds. [ 797.985319][ T31] Not tainted syzkaller #0 [ 797.991153][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 798.000208][ T31] task:syz.7.4665 state:D stack:25896 pid:21491 tgid:21488 ppid:19481 task_flags:0x400140 flags:0x00004004 [ 798.012520][ T31] Call Trace: [ 798.015832][ T31] [ 798.018831][ T31] __schedule+0x1798/0x4cc0 [ 798.023360][ T31] ? __lock_acquire+0xab9/0xd20 [ 798.028505][ T31] ? __lock_acquire+0xab9/0xd20 [ 798.033406][ T31] ? __pfx___schedule+0x10/0x10 [ 798.038432][ T31] ? schedule+0x91/0x360 [ 798.042711][ T31] schedule+0x165/0x360 [ 798.047291][ T31] schedule_preempt_disabled+0x13/0x30 [ 798.052797][ T31] __mutex_lock+0x7e6/0x1350 [ 798.057733][ T31] ? __mutex_lock+0x5bb/0x1350 [ 798.062536][ T31] ? nfsd_nl_version_get_doit+0x16e/0xb60 [ 798.068489][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 798.073577][ T31] ? __nlmsg_put+0xef/0x1b0 [ 798.078203][ T31] ? genlmsg_put+0x137/0x2e0 [ 798.082839][ T31] nfsd_nl_version_get_doit+0x16e/0xb60 [ 798.088767][ T31] ? __local_bh_enable_ip+0x12d/0x1c0 [ 798.094186][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 798.100460][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 798.106023][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 798.112296][ T31] genl_rcv_msg+0x60e/0x790 [ 798.117004][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 798.122070][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 798.128465][ T31] ? __asan_memcpy+0x40/0x70 [ 798.133092][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 798.139112][ T31] netlink_rcv_skb+0x208/0x470 [ 798.143902][ T31] ? __lock_acquire+0xab9/0xd20 [ 798.149009][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 798.154059][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 798.159523][ T31] ? down_read+0x1ad/0x2e0 [ 798.163960][ T31] genl_rcv+0x28/0x40 [ 798.168220][ T31] netlink_unicast+0x82f/0x9e0 [ 798.173019][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 798.178985][ T31] ? netlink_sendmsg+0x642/0xb30 [ 798.183947][ T31] ? skb_put+0x11b/0x210 [ 798.188680][ T31] netlink_sendmsg+0x805/0xb30 [ 798.193539][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 798.199027][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 798.204014][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 798.210293][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 798.215601][ T31] __sock_sendmsg+0x21c/0x270 [ 798.220906][ T31] ____sys_sendmsg+0x505/0x830 [ 798.225713][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 798.231339][ T31] ? import_iovec+0x74/0xa0 [ 798.235884][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 798.240621][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 798.245893][ T31] ? __fget_files+0x2a/0x420 [ 798.250752][ T31] ? __fget_files+0x3a0/0x420 [ 798.255470][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 798.260492][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 798.265800][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 798.271508][ T31] ? rcu_is_watching+0x15/0xb0 [ 798.276544][ T31] ? do_syscall_64+0xbe/0x3b0 [ 798.281319][ T31] do_syscall_64+0xfa/0x3b0 [ 798.286036][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 798.291688][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.297953][ T31] ? clear_bhb_loop+0x60/0xb0 [ 798.302700][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.309038][ T31] RIP: 0033:0x7f413d38ebe9 [ 798.313586][ T31] RSP: 002b:00007f413e13a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 798.322660][ T31] RAX: ffffffffffffffda RBX: 00007f413d5c5fa0 RCX: 00007f413d38ebe9 [ 798.331014][ T31] RDX: 0000000000008800 RSI: 00002000000001c0 RDI: 0000000000000008 [ 798.339113][ T31] RBP: 00007f413d411e19 R08: 0000000000000000 R09: 0000000000000000 [ 798.347260][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 798.355366][ T31] R13: 00007f413d5c6038 R14: 00007f413d5c5fa0 R15: 00007ffc07ec2df8 [ 798.363931][ T31] [ 798.367398][ T31] [ 798.367398][ T31] Showing all locks held in the system: [ 798.375241][ T31] 8 locks held by kworker/u8:0/12: [ 798.381128][ T31] 1 lock held by khungtaskd/31: [ 798.386016][ T31] #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 798.397631][ T31] 2 locks held by getty/5629: [ 798.402430][ T31] #0: ffff88814dc0f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 798.412746][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 798.423327][ T31] 3 locks held by kworker/1:3/5871: [ 798.428866][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 798.440025][ T31] #1: ffffc9000425fbc0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 798.452791][ T31] #2: ffff888027c32240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x26b/0x3180 [ 798.463617][ T31] 2 locks held by syz.2.3980/19080: [ 798.468899][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 798.477180][ T31] #1: ffffffff8e418708 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 798.487624][ T31] 2 locks held by syz.7.4665/21491: [ 798.492841][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 798.501074][ T31] #1: ffffffff8e418708 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60 [ 798.511191][ T31] 2 locks held by syz.4.5238/23684: [ 798.516526][ T31] #0: ffffffff8f59ea90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 798.524793][ T31] #1: ffffffff8e418708 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 798.535093][ T31] [ 798.537488][ T31] ============================================= [ 798.537488][ T31] [ 798.546197][ T31] NMI backtrace for cpu 0 [ 798.546218][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 798.546240][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 798.546251][ T31] Call Trace: [ 798.546260][ T31] [ 798.546270][ T31] dump_stack_lvl+0x189/0x250 [ 798.546307][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 798.546330][ T31] ? __pfx__printk+0x10/0x10 [ 798.546369][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 798.546401][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 798.546431][ T31] ? __pfx__printk+0x10/0x10 [ 798.546463][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 798.546496][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 798.546527][ T31] watchdog+0xf93/0xfe0 [ 798.546560][ T31] ? watchdog+0x1de/0xfe0 [ 798.546593][ T31] kthread+0x70e/0x8a0 [ 798.546619][ T31] ? __pfx_watchdog+0x10/0x10 [ 798.546653][ T31] ? __pfx_kthread+0x10/0x10 [ 798.546678][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 798.546707][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 798.546725][ T31] ? __pfx_kthread+0x10/0x10 [ 798.546750][ T31] ret_from_fork+0x3fc/0x770 [ 798.546772][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 798.546798][ T31] ? __switch_to_asm+0x39/0x70 [ 798.546818][ T31] ? __switch_to_asm+0x33/0x70 [ 798.546839][ T31] ? __pfx_kthread+0x10/0x10 [ 798.546863][ T31] ret_from_fork_asm+0x1a/0x30 [ 798.546903][ T31] [ 798.688648][ T31] Sending NMI from CPU 0 to CPUs 1: [ 798.693897][ C1] NMI backtrace for cpu 1 [ 798.693914][ C1] CPU: 1 UID: 0 PID: 14275 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 798.693932][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 798.693943][ C1] Workqueue: bat_events batadv_nc_worker [ 798.693972][ C1] RIP: 0010:check_preemption_disabled+0x5c/0x120 [ 798.693992][ C1] Code: 2e 26 07 48 3b 4c 24 08 0f 85 cc 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d e9 41 ca 02 00 cc 48 c7 04 24 00 00 00 00 9c 8f 04 24 04 24 00 02 00 00 74 c8 65 4c 8b 3c 25 08 c0 a0 92 41 f6 47 2f [ 798.694006][ C1] RSP: 0018:ffffc9000aa0f980 EFLAGS: 00000046 [ 798.694020][ C1] RAX: 0000000000000001 RBX: 0000000000000202 RCX: 0000000080000000 [ 798.694031][ C1] RDX: 0000000000000000 RSI: ffffffff8d9cd8fe RDI: ffffffff8be33880 [ 798.694042][ C1] RBP: fffffffffffffe38 R08: 0000000000000000 R09: ffffffff8b4808d2 [ 798.694052][ C1] R10: dffffc0000000000 R11: ffffffff8b480800 R12: dffffc0000000000 [ 798.694064][ C1] R13: ffffffff8b4808d2 R14: ffffffff8e139f20 R15: ffff88807e850000 [ 798.694075][ C1] FS: 0000000000000000(0000) GS:ffff888125d14000(0000) knlGS:0000000000000000 [ 798.694087][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 798.694098][ C1] CR2: 00007f1b80ff84c0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 798.694115][ C1] Call Trace: [ 798.694123][ C1] [ 798.694133][ C1] lock_release+0xbc/0x3e0 [ 798.694157][ C1] ? batadv_nc_worker+0xd2/0x610 [ 798.694178][ C1] batadv_nc_worker+0x28c/0x610 [ 798.694199][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 798.694216][ C1] process_scheduled_works+0xae1/0x17b0 [ 798.694242][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 798.694264][ C1] worker_thread+0x8a0/0xda0 [ 798.694290][ C1] kthread+0x70e/0x8a0 [ 798.694309][ C1] ? __pfx_worker_thread+0x10/0x10 [ 798.694324][ C1] ? __pfx_kthread+0x10/0x10 [ 798.694342][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 798.694364][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 798.694378][ C1] ? __pfx_kthread+0x10/0x10 [ 798.694396][ C1] ret_from_fork+0x3fc/0x770 [ 798.694413][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 798.694431][ C1] ? __switch_to_asm+0x39/0x70 [ 798.694449][ C1] ? __switch_to_asm+0x33/0x70 [ 798.694466][ C1] ? __pfx_kthread+0x10/0x10 [ 798.694484][ C1] ret_from_fork_asm+0x1a/0x30 [ 798.694510][ C1] [ 798.695814][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 798.931490][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 798.940703][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 798.950848][ T31] Call Trace: [ 798.954133][ T31] [ 798.957178][ T31] dump_stack_lvl+0x99/0x250 [ 798.961782][ T31] ? __asan_memcpy+0x40/0x70 [ 798.966430][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 798.971634][ T31] ? __pfx__printk+0x10/0x10 [ 798.976242][ T31] vpanic+0x281/0x750 [ 798.980240][ T31] ? __pfx_vpanic+0x10/0x10 [ 798.984848][ T31] ? preempt_schedule+0xae/0xc0 [ 798.989823][ T31] ? preempt_schedule_common+0x83/0xd0 [ 798.995379][ T31] panic+0xb9/0xc0 [ 798.999110][ T31] ? __pfx_panic+0x10/0x10 [ 799.003531][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 799.008906][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 799.015158][ T31] watchdog+0xfd2/0xfe0 [ 799.019325][ T31] ? watchdog+0x1de/0xfe0 [ 799.023669][ T31] kthread+0x70e/0x8a0 [ 799.027791][ T31] ? __pfx_watchdog+0x10/0x10 [ 799.032480][ T31] ? __pfx_kthread+0x10/0x10 [ 799.037250][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 799.042552][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 799.047794][ T31] ? __pfx_kthread+0x10/0x10 [ 799.052420][ T31] ret_from_fork+0x3fc/0x770 [ 799.057027][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 799.062157][ T31] ? __switch_to_asm+0x39/0x70 [ 799.066930][ T31] ? __switch_to_asm+0x33/0x70 [ 799.071704][ T31] ? __pfx_kthread+0x10/0x10 [ 799.076300][ T31] ret_from_fork_asm+0x1a/0x30 [ 799.081095][ T31] [ 799.084412][ T31] Kernel Offset: disabled [ 799.088905][ T31] Rebooting in 86400 seconds..