last executing test programs: 3.521889656s ago: executing program 3 (id=134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31040000000900010073797a30000000000800054000000021380000001d0a03000000000000000000070000000900010073797a3000000000090002"], 0xbc}, 0x1, 0x0, 0x0, 0x20008800}, 0x48004) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200}, [@map_fd={0x18, 0x3, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x1f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0xa, 0x9, 0xf, 0x19, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_spirange={0x2, 0x10, 0x4d5, 0x4d2}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd25, 0x3500}, @sadb_sa={0x2, 0x1, 0x4d3, 0x8, 0x8, 0x76, 0x1, 0x60000000}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e21, 0x100, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}, @sadb_x_filter={0x5, 0x1a, @in=@multicast2, @in6=@mcast2, 0x27, 0x0, 0x10}, @sadb_sa={0x2, 0x1, 0x4d4, 0xff, 0xd4, 0x72, 0x1, 0x80000000}, @sadb_x_nat_t_type={0x1, 0x14, 0x4}, @sadb_ident={0x2, 0xa, 0x3, 0x0, 0x4}]}, 0xc8}}, 0x20000000) 2.792268379s ago: executing program 2 (id=146): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x66cfa1062dfa2bd4) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000180)="223f7468bc117356fadc554bbb70b4fc", 0x10) sendmmsg(0xffffffffffffffff, &(0x7f000000a200)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x60000800) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x18, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000004000000000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="80a4000000000400b70500000800000085000000a5000000950000000000000053fca24ea477a286984d504eedbe330feafdaef6662647e3f128fa254cb54ee2c5c76d99332a98964379fc5189c30c811474dcecc0f37df25ca4932b716acd596524808f87f356a0152023942075ac8403470e9eaf1674b7bbb696f892ded9a6c767"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x94) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000002c0)={0x41, 0x3, 0x2}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000600)="87585d85da215305627e5695c108", 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.706689715s ago: executing program 2 (id=147): socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x7, 0x80, 0x0, 0xfe, {{0x6, 0x4, 0x0, 0x10, 0x18, 0x0, 0x0, 0xd7, 0x5e55b37311de6d89, 0x0, @broadcast, @loopback, {[@timestamp_prespec={0x44, 0x4, 0x4b}]}}}}}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r6, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000000000009400000007000000"], 0xfe61}}], 0x2, 0xc88c4) r7 = socket(0x28, 0x2, 0xfffffffd) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYRES32=r4, @ANYRESOCT=0x0, @ANYBLOB="0500000000000000001700030000000000210000", @ANYRES32=r3, @ANYBLOB="ff78e805c248da81ab97a0bdb79aa3f069946f828a7bfadfab1f603a45e8460d94f49586aedf7291f05c18a9f9f1e41b19cbb2e32f1d85e2b7eca5f771a5a6e7d1a6fbac7d2c753683aee6a828c95d9b2959f9d8ba9c17e56cf7883aaaebdb92e5edfb54abc5119cf438bac19161049a2b5e1858a439bffeb88ed7246e1878cab90fa6c9c5d2354a58c72c4ac15da3859905e4fbed65dfc7de2edba2fb60ad7ea4c06b284597f914f0a97f281b040affac8a0e75d935cb68328cb7baff49cc278214d83d805f5a603dc736e81d9595bf938e393d7076ee30f0c8e5ee9add1e34077a6ed858bd03da714b3d040b", @ANYRESOCT=r8], 0x50) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) close(0x3) r11 = socket(0x2, 0x80805, 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r12, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r12, 0x84, 0x7a, &(0x7f0000001240)={r13, @in={{0x2, 0x4e24, @multicast2}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r11, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001600)=@getqdisc={0x24, 0x26, 0x8, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x85755cd3cca4866c, 0x10}, {0x8, 0xc}, {0xb, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.580341245s ago: executing program 4 (id=149): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) socket$can_j1939(0x1d, 0x2, 0x7) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000280)=[{0x3, 0x2, {0x1, 0xf0, 0x1}, {0x1, 0x0, 0x1}, 0x0, 0x1}, {0x2, 0x2, {0x1, 0x0, 0x1}, {0x0, 0xff, 0x4}, 0x0, 0x1}, {0x1, 0x2, {0x0, 0x0, 0x3}, {0x1, 0x1}, 0x2}], 0x60) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES64=r1], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES64=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r2, {0xa, 0x9}, {0xb, 0xfff3}, {0xffff, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) listen(r0, 0x2) 2.557583608s ago: executing program 0 (id=150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50102008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000007f000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000085000000110000009500"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000013c0)="b9ff03316844268cb89e14f00800", 0x0, 0x51, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.45417158s ago: executing program 3 (id=151): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}], 0x1, 0x40800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000180)={'veth0', 0x32, 0x33}, 0x8) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/239, 0xef}, {&(0x7f0000000100)=""/114, 0x72}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000240)=""/109, 0x6d}], 0x4, 0x0, 0xfffffffffffffe08}, 0x40000040) 2.357974095s ago: executing program 4 (id=153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x3}) (async, rerun: 64) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000200)) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0c00, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x9) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001a40)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYBLOB="06001c00"], 0x150}, 0x1, 0x0, 0x0, 0x2000c895}, 0x4040084) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) unshare(0x20000400) (async) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) close(r5) (async, rerun: 64) r8 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffb, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000740)={'wg2\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="28120000", @ANYRES16=0x0, @ANYBLOB="793c27bd7000ffdbdf250000000008000100", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="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"], 0x1228}, 0x1, 0x0, 0x0, 0x801}, 0x20004000) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) (async) preadv(r12, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/166, 0xa6}, {&(0x7f0000000000)=""/24, 0x18}, {&(0x7f0000000300)=""/75, 0x4b}, {&(0x7f0000000380)=""/145, 0x91}, {&(0x7f0000000440)=""/251, 0xfb}, {&(0x7f0000000540)=""/225, 0xe1}], 0x6, 0x245ebd91, 0x10000) 2.344637083s ago: executing program 0 (id=154): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000600)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf2509000000240004"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000450000000000000003000000580001800d0001007564703a73797a310000000044000400200009000a004e2400000040ff0200000000000000000000000000010300000020001c000a004e2100000fff00000000000000000000000000000000500000ffb5868e7259237b96ed7ba960f1c3fd"], 0x6c}}, 0x0) 2.284352545s ago: executing program 3 (id=155): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000900041122000b00000001"], 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f0000000100)="23830014", 0x4) unshare(0x20000400) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)="38482a2e84a319213c446c033e050831bb6d13a3b0bfceb24ce134a1b28506000000b5b9a6aa2ead08f9425372ccb7682583278b1df09adacf44d0de32358eac470c9bf247c91f0166bedcbf2145aee05ae2b9bf2ffa73016b527890c14de9ba57008a0c335b560f7c0e13", &(0x7f00000000c0), 0x5, r0}, 0x38) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="9b28eb7ec96ef805", 0x8) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x58, 0x800000, 0x8, 0x7, 0x8dd}) unshare(0x10040a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fce5ffff000000000900000018100000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000fcffffff000000008000000085000000a800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/56, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r0}, 0x38) 2.126946535s ago: executing program 0 (id=156): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x4000804}, 0x8004) recvfrom$packet(r1, &(0x7f00000001c0)=""/182, 0xb6, 0x40, 0x0, 0x0) 2.097819544s ago: executing program 2 (id=157): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="280000001e00010000000000000000000720"], 0x28}}, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x4e) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x60000) r4 = socket(0x10, 0x80002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth1_to_hsr\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000cd8da66002b8008000100632f56aed91a17cf56994286f63967f54a40a7088d593c741c0c06fd56e7c95773a35bf619aab0a836f75d139997ff75b7f88e49b69f38bd28cff6333e68df69c685476e902f237fe3b84ebeb72d400ca27a8b39d74a0b67418ad865511d6690e7a359e20fb79f23e67dfa15642d2ea2559fd69a99ea11152c063308d44cef", @ANYRES32=r8, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000340)=""/12, 0xc}], 0x1}, 0x1) r10 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r11) sendmsg$MPTCP_PM_CMD_REMOVE(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="03a42dbd7000fcdbdf250900000070c9b92ce64c697170a1c572886e54e0dac07efcb10081c26896da0a8ee378d78f8f4026b8338202065fa3d8df61f966acb5a1cd8ad7cddfd6102cce167ddcdd4968317410c028b5538e425699e60554b17f5c6f15cddad46fbb61474527a04bc5065b43d6a1ebf844742e62b209f58d3081dc06f1dbfa2bfc"], 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x48800) r13 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r10, &(0x7f0000000240)={0x30000014}) 1.956363927s ago: executing program 0 (id=158): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0x9}}}, 0x24}}, 0x14000000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x6, 0x3, "109809"}, 0xb) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000908a97d7bbd7af1822aea2904ff3660018ff7f000000000000b04b14011695587c34fb868900000003130000010002130800000003041145bc1d2942d78ac0871b10db96378281b2a39e18849a2bcac96a971c1ca2b39d61639d5a3d474f3f0b9b8094ee3c54807c37018a7047b9bf22ffb832f1f4503886"], 0x0, 0x36, 0x0, 0x1, 0x9b2987a6}, 0x28) unshare(0x24060400) unshare(0x2c060000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r2, 0x952de000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="a3d90000a3b5e96dde0333538d6dd5ad890000000000f9ffffff1bc9efdcc1dab202", @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf25020000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="b444a514ac6c71fd5da1ae880000", @ANYRES16=r9, @ANYBLOB="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"], 0x4b4}, 0x1, 0x0, 0x0, 0x40800}, 0x80) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$alg(r7, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000800)="5fb623d119f3e4da2db9b4553af0677977ea12f6b73b8ff595ab9ed7ff94bae363a6e6ac214704763d6ae69b8ae86ccfc8cee1cb621c7f97ef33c6d82611267c78567544c15d491118cee3ebde4c03cd07fdf428420476d020968bec7c7b0a2be6eecf1d117a", 0x66}], 0x1, 0x0, 0x0, 0x4040000}], 0x1, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x50, &(0x7f00000a2000)={0x0, 0x0}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x30, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0xf}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1.839268555s ago: executing program 4 (id=161): close(0x4) (async) close(0x4) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040) (async) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in6=@private2, 0x0, 0x966, 0x0, 0xfffc, 0xa}, {0x1, 0x4, 0x0, 0x80000000, 0x6, 0x9, 0x0, 0x40000000000000}, {0x0, 0x9, 0x53e5, 0x23}, 0x0, 0x6e6bb4, 0x1, 0x1, 0x3, 0x1}, {{@in6=@mcast1, 0x2, 0x32}, 0x2, @in=@multicast1, 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8) getsockopt(r0, 0x101, 0x4, &(0x7f00000003c0)=""/150, &(0x7f0000000540)=0x96) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) recvmmsg$unix(r7, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) (async) recvmmsg$unix(r7, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000100)=0x20, 0x4) connect$pptp(r7, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x14, r4, 0x1, 0xfffffffd, 0x0, {{0x2}, {@void, @void}}}, 0x14}, 0x1, 0x6c00}, 0x24050800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x3c, r3, 0x400, 0xfffffffe, 0x2, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x3c}}, 0x20000000) socket$netlink(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, &(0x7f0000000180)='GPL\x00', 0x9, 0xc5, &(0x7f0000000580)=""/197, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, &(0x7f0000000180)='GPL\x00', 0x9, 0xc5, &(0x7f0000000580)=""/197, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000190001000100000000000a0080201400000400050000081e0e000900"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x38, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0x20040800) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x38, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0x20040800) 1.607789673s ago: executing program 3 (id=163): r0 = socket(0x1e, 0x4, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$inet(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0xd0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000440)='connect aa:aa:aa:aa:aa:11 1', 0x1b) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e750025d", @ANYRES16=r6, @ANYBLOB="00042cbd7000fedbdf256c0000000c009900fd9e0000400000000800a000f7ffffff0800a1000100000008009f00040000000800270002000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) unshare(0x26020480) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000100)={r8}, &(0x7f00000002c0)=0x8) setsockopt(r2, 0x400, 0x4, &(0x7f0000000380)="80c4a8a5f18285787d781a5e4007fc88b2abe6c71ce1", 0x16) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc000000000000000000000000000000ac1e000100"], 0xb8}}, 0x0) close(0x4) 1.548779468s ago: executing program 0 (id=164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="2800000002010102000000000000000000000005140019800c0001"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8800) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000000)) 1.508750762s ago: executing program 2 (id=165): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="0000040001000000", 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000140)="10e2d47b2b9ba443b77619f20f20", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000140)={0x8, 'macvtap0\x00', {'netdevsim0\x00'}, 0x2}) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg(r3, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x4000) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f00000001c0)={'tunl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x44084) 1.441898831s ago: executing program 4 (id=167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400fffb0700e843963e000000000008", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x10) syz_emit_ethernet(0x4f, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c370c890019840141000000000000000000020000000000fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000000)={0x1100, 0x1, 0x400000, 0x8}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b000000080400000001000000c39ac9c8e0ee69d75c6b8f47d2f5d3ba9a26aca1d4895480a44842e377bb0448fbcec9d005bc9cc0980a2b4f8e2b50959993b7d64b54db89aa3c07476fa2e61c5a381dc9d1144a9587c03d7772f4518637cba5b4ac5f32d2f3b8c1b2e613139a68c5025ca12e96f6b7913b5fa3707df801cac6c619b2e3015a6fd5de46f5b87c5fc83efe2cc67fb31e550dc9105cb4d6aecd70b799d87c6892c8ef0dffbc8e8a2dfe7738d4e77913a8bb", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1800"/17], 0x0}, 0x90) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000180), 0x2ae, 0x0) close(0x3) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r7, 0x0, 0x2b, &(0x7f0000000640)={0xffffffff, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e22, @remote}}}, 0x108) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0400000004000000040000000c00000000100000", @ANYRES16=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000000000000000000000000e6d2f0d0000000000000000000", @ANYRES32=r6, @ANYRESDEC], 0x50) unshare(0x26020480) r8 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r8, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000080)=0x20) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000180)) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4400, 0x52e3, @mcast1, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000000440)={0x0, 0x0, "9b09d888f027cc1f9fcc3a9d2e6c57cd"}) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r10, 0x8b2c, &(0x7f0000000040)) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0200000000000000b7080000410000007b5af8ff00000000bfa200000000000007020004f8ffffffb703000008000000b70400000000000085f5ffff310000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.383694304s ago: executing program 0 (id=168): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000076000d0b004000000000000003001b00000000000800010002f2000000"], 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 1.301806461s ago: executing program 4 (id=169): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}]}, 0x38}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10003300, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14150092", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14150092", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000140)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x8}, @device_a, @from_mac=@device_b, @from_mac=@broadcast, {0x8}, "", @value={0x5, 0x1, 0x0, 0x1, 0x8}}, @random="09e4f21b40b639bb2dc84294eadb28e68693c2f62e423baf9c04c705904eb5db2e9cbcd4a9b519c8f9a678e91dc3558fa81d070c149d"}, 0x50) (async) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000140)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x8}, @device_a, @from_mac=@device_b, @from_mac=@broadcast, {0x8}, "", @value={0x5, 0x1, 0x0, 0x1, 0x8}}, @random="09e4f21b40b639bb2dc84294eadb28e68693c2f62e423baf9c04c705904eb5db2e9cbcd4a9b519c8f9a678e91dc3558fa81d070c149d"}, 0x50) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f0000000340)=@ctrl_frame=@cts={{}, {0xff}}, 0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001053ea000943f3f72f71850600"/28, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKMODE={0x5, 0x11, 0x9}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xd}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.116238393s ago: executing program 1 (id=170): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}, {}, 0x7}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x14, r4, 0x341, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x14) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8ded54a1b9d05872, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000003c0)={{r5}, "cfd6a47b2e12e475be8ed12804851380a52c2e56b56271e1dad3aa71878353209b4157d56ee8189a6f33d7deb2c5695bd16f0b4f2045039a803d495c7b5308a77ec29ce01fe1f287867961e63d8beae01d73554be048bc586f59dbeec86097b7be466290559a6f66198da883d4cc4eff3b7c82b4a5a3ad1f880e62d4ddcb1a4a4b19daec434ad96f38edf791d0aed0311bb41643713b683360d092fc9454d0c5bf972a036fa5ee86a2e2d823a19cb885fafc8b8873d67b82ef850eb7771e33e99ef980e1999271528f8f9670837c8fae41c0e774d1903706fe1d6269b07945f3ec60ddf9e7ad0f854d64725e68e4bdbd996297dc8b2c3077c11b6f302304955e7265e5a0a1c09f5cbb3ae91fb42f87b38fea8c36da4599b34b08ca11a887e6e7a0894f657544fd1189d37e513fec87e9d53ff5f2e5638e9ab7cc9b291d6864b06d289f5f8643ae10efe0af8bc0d9b7734c7534d308e3a3681e186f563f5e2754060230565813c63b15b5129d26bee82b504f06ff86c7d5e20358fea5d8ed4b88e453bc5f1a5ee08775324df039a1bbc0b67f89ba23a218d8ba99a99682f1df41f35f0f1e3417fdb4349bfcefdf3f5a82827b8762060227ce40160a011e1b18c5eb892235f5372f15067b8e19952e3172ea005965d183fd1ff24c91093e0967264fb8d824058d49f95753e07d1c4f5b583d9b3c83009cad4bc0d447119773362afc2ee785b207694266f4c015e7da989d801a65756df33fba4fb38fb233a53267918616dfa8b693368a49a0f1f894189b1e68ad434f3f5a380e5a3dc048f8d0aab21915e99640bf23e6910abff6763149053fef4a2abe4effe73d5fd0dab6f4864af0f063e5ec5961f6ef4174dc52dfcc803459e5b8c9f4a00fc0279a207adf846da82475e89f614416db36b06b42491df7efa3dda51df861c4be8ec844414939825360a99c16299f521c80e7216dd2fdb449abef67f0706d0e108ac54f77f719c8e40bdcfd7568405ce899decd6d1a54416d3dc7d8a256b72368506be4af787d8bc5ed9cb0abf3360deadd62b80e3b82da66fc49606dc0a9c9ea5075d2ec141af0679fab28ee22502e99f8e9ae50f9312688b65b5b2e8958c774ab37331ac4379700fcfe07de46ce49e524122ec354742878fae770dfbd9154ecb3516b3d8705fbfc6294f15fc5a79d80b8a5a405b56a0d4af5a016c6b7803e55c12ec48cd4a3afeae0900bc91b0a3ad05c140062698371d727cba97fa0a46ac001e9fbc23a7f56cf9acf2ab5db7e748d126787a863b4c3629a0ad877391911b1045419d0f2b645974f2921542ee742734a4fa2fbb595afb726688d407e47b8c173bf4648c1d900e5a003032d2c852320adb08438a34768cfe492a4d2586c985a8e72cc19f5fea7fecd5826b929cbea7059890da0702ffc157f113fc883aecfb7815f53974f2fe2ea8530615e22f545c6d930b52c6e969677caa5ae4fbc6266389a1704c715e4bb49bdab928a438fd3558e4166658dae38f166cd8205fe391adaef621c95e9a32d019d0074b9d814e4356acfa0c796c5a0387f62309fab857ce5925019db2fb298f4cfa8a87f081e74fe6ba8085c2a55be145f4d844a836abdc98290b933cafa0a87b6cf823cb62aee0ab2f97e145e59e80313e90e84eee9d8b14e5a5f575215cdd94c314a989a20aa1c71fbca4a19f7f535e179e86f541525a14424059681ff869f1a0c55e6a17537f9364f122515420d59cb58cdf7ce3b464abbce2b63bc10ef8c45cc3105176e47cf0af9b41536ecee4bdc73761e1bee8978389dcb56daf2825dbe1c276968d5cb509ea2cd269504788edaed21d1cc3005cf8c29a7ac45377aa254c71b1790184b001767841e1b5752f811954ee84266f824c073f1dee21973258d1678763b0c24f73ca7705718c40a294afe6d3563a2ff35ab3dbbb4e2872c3fe4a85053efd91f74ce40a1120d563a4e4f2bd631d7cf9320369ec3cc94c255bb13672bcb19cc50e1dcb0530da7f272046f26af3fcd0a17a15b1e3706195a554a980549d42c8b6a9156f25f15c15f60c37a62f80119d9766c4a35889feec8e2d5c6ec4203798ee581b545876e19f2d7ad6bc38cf58a0b3539e331124ca46c12a729f50ea87642c958b142768e1880728a961d436a1e281f4c2324c9a7cc7b843d74fdc7a4065d62d3c8da9880ec89a9a9c54b5ca5b120973e0fe4eb8fff95ea1991dd1b4e57ef51b28010614bf4ae075e34f89a73832972d973e4807a1dc3562051374e78b42cd651aecd13610ddf2ef336cddffc240bc3a557903fc086faae905aab5d8f2aa868d86560692a4b78fef7e592f80db65612b98bd207b6f7c8a0f8fae2b619c1ab2421619c03517bccb3bc89966d2a0533a74044f8463cb1d5f41004e4e08854b2408170fbe5cdcbba92d4acc8a4f559a870fce270ce8fc85a542f6b22e1011f8dd8e1155392b2f4addd42224a37c66e375868116f785169237a8d7ded00421f7816e833624671a58c6f2691387afd924ef417b2119ac8a4e55abfbbe1b6de8bc9449148ed6fe39ec1b165b65d6d1bb92bfea7f8ce701a807229c4b61b31fe1ae919cd8e210a01d20defb5715fd5e98a9d390c80ab741e5be43a4c2b65feb1e1cbf87dd328fab7670b0e3293c75669663ea50eef7923ee53903ced105d3647d2ef5b624825b7d4c5ff88887d7c7d29bf2f78f5010d0daf61c51a53bf00a9882501572a2110f1220e4ac1b28d48cbf980bad0e595527be66beff241d2010ca836292be4e7b4505e00bcfe3e0e7219432a53e7ebbe2cb0c754f8f9767dfd1b93ce791d3f3d8383dbe603a8a45b4254b9d0b3ae0f7fd91f27744a68f1aa4e165092be193418647d2044dc28eab42c2dcd4c371a72066a685fcbfad7072bdb0ca789fddf4a0a12265c2804a9d421b4e2cfb701368fc7d08d5dac81977752f860e7aa9facb4ec7f3d8a0d572094884210bc095022fdffa16eae6de4b418ab80084b2c53f5eb4ff73a8c9fce6ed16a6fd01dda01181ba29dcfc633eb4983305a6b5cc6c8126de988fa1077fd3a02396c03e767692e6b4634b5b769af181a6699cad41810e2f9056358015d68244f4c59732db298dbca0ea28a0ee5656a12e9dbc07f25560b7eb2a8b389c599e2280eb2fe31b4facf83752775d659af4c58ea6b0243ec932c4d4c2856fb4053f0df08750ad1eae132a811443a7aa387fba386115c1664f5d410ac832a9bf32706f18717781b843afe5d2d5ea02ff538ec2dce94b481808cb98b6dec3834195dcf83d0d0d06650f9f9c2bbd8a2eeb67c3415f703b5025d90e24be25982810b8ac4bac28abfce1e0207be2464d1a6ae87e59d82898430352039555f4512133bdc0b4650267d9a99206ba7fce9c0de71f98d2ab2204d5ce61f92600911806e88e451ffe09d762588c5700b3b5aa27a82a1c2f01e6b6a1ed08137bc8c513587c458658a793b825571521d63a47982b4e698b54fb54a0b55f8aa16aff20859f11af397fdd93f4527beca65fbf8d697071a0287f28645fad0210f5c18a82cfb3ad6e138cad56795c17264882e5b59d8b8c15ba7afdfb2fd30d3410b53b9026748c4643988eb510bdcd034db6a622769958ae568d9f394c0af45af1fe6127dbda1ebf377fba0e7d7dfd5687877b81eb48d2d13d44c81ec639edf6d3937453eb388f15e218f574bbc86b50b9f62240280f6cc737b6e08d8da518d38372022a1851682d67199caaf56d1674f9240c0c8a5dd0e12e437215ccd0698796b75ba2345e8e31acdafdf95ef055d1cae5a31966f2def1f5ca3f8408420c4357a5c8b79e4afd2a3364b332e28746ef37e375dfaffa26c7971110a8187afa8663d6c5adf052182556a1fbe8567e55610c6b84cc1cf8ddd6377c757459c0cf0d0384f83f2e60e055404c15f892d613a4f7aa34c5de465e9effc9e63a03cadd2545d8e92b35b3521e6aaf30953dfafc9ae0c19f643114cad2e772264acd13033dcb38d1216b12e2f6d0e778bf2c574a91433940e87541650384c6267a22bc37201b5c4a00e19f4e11df3dcc28cbe4e7f11164a7b7fb9560fec01a7a1b462217c8a1b4be54e9e741ed265038680f45f8c8c96647fc2d17a4e6f04402e7f31d75e20db002cf8fcbf3ade96b507f1c21e00923b264d5c11fb651830c4b294974c95406791b3b3187ab7b3da1e2eb70fa323ccf39ec15c1f9337b841b8d4b75e5d94a849de7d6f0e3b7f77c0c137881c21cf130e3a561abe771a0f801d3f0ce14e05e971d0cacd3057712e625765ce6b25d160db74a9256d69afc744222ccaa7fee3720c07f481e5a9be4e7976dae6f5adfff0b80207146741ced6355f3e15a9d75ae05dff2250352b40452c5062aad38ffb98d7ac64a91ecb30b76094bc85c2e783052ddcc10ac12bf8880322c9fc649e28fb30101d78c7db4f88cdd28fbfbc91908b65cf4de2c87ebb4975edf9ad90325657f47e734fe4295a87ac58974630390fab73a8e23c63bd6ec66ba427065e063fd698931ee0852ad30f2b17a16b90a18b39c9816500e4035a86a887106f1a4d5835a28c9434aae4ee3322e2f609099ddb5aec15404672a26aa9510b682b89c6ad27e809a6224d1c4d63aee11d058eb49b3b88c85d9b03a192e8bf5fb22f113f6bb443a26739fa1f77cdd25b98e9ee305a4cbc66ed8ed5400ce6137751553e16f162a96902f4235123305f84f761959e143d5d12e10d35e99738f6f4e5a6fbffe82198aac0f1dd128fb70d8496ffb6c46034e85a9e4ab8231f3578bf1de9e7fd37fea87939a56fab1af42666c205aa37f38689c2c479aee8c1f97cd7266e6f86409ca45b135e2f75ad326cda9acbddc30f0ae40795257d149669fe384a5dbad94e423f81303753b4f5bb28d24653cad108f59b38a238d56747c6eceda35fb910b3a28444001f57f4ef5c2e4a3b739196d7748188db33a9c9b75336a863ea68952a71bf6cd811c0c1116ee9808b9a02e7e688271502a3e288fbe418b5d3e0238f46d762d6256e9768bac2ad71f34a7ca77fd246f75680b4b2d351ec0012a88c12fc4dea7dc30d210df84e9ee72fb0b2d3be3a4026d9112fa2c8e3f1970c148365b22277b32ca0854ff917553601c7f500e959f16378f1494f40f10f7252012487243ba891800cb468eb6458a589c5e7cb7043059dfb1f4f2efa936a014db8b3aa27ab8991d62cbb7cbef759bbeccf46c9669e9bc7ab498a70bbd983cf846d5ad95ce7b649b1b3f0aecbf6fdbabd0d443ede7b1e018bf1624b3cf8ddf2cfabf1f2cd3906b9b1691324f015997bad60f1499b1871d127c99d133d654a27f7cca6e7edccf2f5d7bf5c045063accdef932477419d1aa2a83cce2e877c131186e9a042be7f1c46f688cdb59726fbba206481afc81058c7d70a71f1ef624abde10d97d4dd225fda2c0164a2e5f634e3091c45686ce9632bc335af8bb64a5a0712b8765ffba744e749262e7d0677c50f9d9ac91ea13bebd44e2f421738b8760765120760b42dfc589c7311c11d134da75b40317fd3e1a2961f564cc04efedcaafac8dbd82e19ad08911e70725f5a176263e356c7e784bd6b9f0c1652b5b4ec3f62e8cf2eeaff495cb9895b1928c85d1ace3a31bb0d4441559469d60fe444b61ba3a50b7b3c87f458a7fb9d7c40635fa0f779e2e47956fcca326051d51d6cecc0e91ce631e540748530563f4b45a93fe4f3d490b5f2d2d3871a55d4f26d4e9cf62aa96c72b9811e4bd9fbf0c4eaaf4f5a6451bba9375ab7be7ecbef147c83139f19da7435514c"}) 980.963047ms ago: executing program 1 (id=171): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) syz_emit_ethernet(0x33, &(0x7f0000000000)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @opaque="24dc6170e1e0318539"}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r2, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6}, @void, @val={0xc, 0x99, {0x3, 0x64}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc041}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b2a, &(0x7f0000000040)) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)=@isdn={0x22, 0x5, 0x6, 0x9, 0x8}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="c404e455a5eba87f736624fbda6c30a300948a58a8f17860ded0c04574b191c6344c811bbbcae135af6c102066c63938563d6d235f08cc7b90381b7476367189470c0235797257813215605ffedbfe5d8ed2ad2aef323de97ca40aa3ab7359d1b19303b7f674d1fdec6c56a9fa55114229de8649e63b616059e52cf1eef52c7e9612513ddd50e08ef4e5b2e3ddebadb3a2fca08fe9ecb8869f098c5e3f1a167d4413d142339a5b47d8410c99766c9e4043f23e892e5d4736974d8094b2a9c197f55cfeb94e839e34149960", 0xcb}, {&(0x7f00000000c0)="3f84fde18f5807223a60fc9da67918788e5cf1d3fbfc9f465a182932179fc70d8aacdcf9eb5051e4f5c7653a", 0x2c}, {&(0x7f0000000240)="c3c39770cee5d0a61bc87eb3bc2f2b9789f6bd1feaff26c29e695cf2c8b64b3683737da790848bda347a66f7d1497464465c55eb345406d09fca6a9a18a2f7b5fe14193e43258e883c335e9d6eefa02ec95bda8fde3dfc3f0a95f731c921bcc1181f33b027af3ef1667125718ac3e332804f603561d2fa5482c3707c35b7fc0097471f54867c4226dd8603cc3fcdf1d1e301ac168268ae879a564a641c456c754ddb1d624724db0610ba3856591809a28b93340ac3ed1aa810576a39be3b064fa8b945cc5ebf11ed642bee87a86e5bc0483c409ee9e447427503457ede49012d74f469389041901e2613b78d903ed8501867962666", 0xf5}, {&(0x7f0000000340)="e19f44", 0x3}, {&(0x7f0000000380)="e03ef0", 0x3}, {&(0x7f00000003c0)="33c0ba03be6c94b8037b540981e13b07ee3c76b98345b25c2d7a236e8f4a9b51ba0b2e309176299ad13c03b51deb10ea1e9fc6423d0eace62095c31ef9359877002511f94426bb540a8d082ce017fb6525ffa895c46f82e09dd2327e5c941fde7434e2e7e78a085d55c5fc28f2bb20c73a80573069c74ff632d03794c34683adb77d8dc435b773dc8c561dc339cf9e5cc2a9db4af358163be8b34327426c49b918b7e220df1b8960c47b434773aa6aef0f72130e43fa36dd60fdc37cfc5c44c70e7be48e790e43d79067355c61ebe32452a7a64c4fc584d4b4995c51edc7d352ef27c29722", 0xe5}, {&(0x7f00000004c0)="30c226ecda279766d9202a7cd6acb2c01aef7ef26695acaaf7a924275f297785c671794ddd3121f023bd", 0x2a}, {&(0x7f0000000500)="f403e238982dfecb18d79706a78afa57b7594bbd80f350ae14477de11312516af173c7414a557b437adde3e51b3f0c9c5638defec05dd1a8a51291635076f6ef0b8cf585d683cbf07788", 0x4a}], 0x8}, 0x810) syz_emit_ethernet(0x35, &(0x7f0000000b40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x13, 0x0, @gue={{0x1, 0x1, 0x3, 0xb, 0x100, @void}, "c9eb9499fa1240"}}}}}}, 0x0) 890.386968ms ago: executing program 1 (id=172): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) 711.905873ms ago: executing program 1 (id=173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) (async) close(r0) (async) r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@full={0xb, @remote, @null, 0x0, [@default, @null, @null, @null, @netrom, @default]}, &(0x7f00000000c0)=0x40, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000100)={{0x0, 0x2, 0xfffffffffffffffa, 0x1000, 0x1, 0x2, 0x0, 0x4, 0x6, 0x0, 0x4, 0x1, 0x55b, 0x7, 0xd}}) r2 = socket$l2tp6(0xa, 0x2, 0x73) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) (async) sendmsg$rds(r0, &(0x7f0000001700)={&(0x7f0000001100)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000001140)=""/253, 0xfd}, {&(0x7f0000001240)=""/51, 0x33}, {&(0x7f0000001280)}], 0x3, &(0x7f00000015c0)=[@rdma_dest={0x18, 0x114, 0x2, {0x9, 0x9}}, @rdma_args={0x48, 0x114, 0x1, {{0x5}, {&(0x7f0000001300)=""/210, 0xd2}, &(0x7f0000001480)=[{&(0x7f0000001400)=""/101, 0x65}], 0x1, 0x20, 0x7}}, @mask_cswp={0x58, 0x114, 0x9, {{0x9, 0x7fff}, &(0x7f00000014c0)=0x3, &(0x7f0000001500)=0x5, 0x7, 0x8000000000000000, 0x7, 0x3, 0x21, 0x5}}, @mask_cswp={0x58, 0x114, 0x9, {{0x4b, 0x37c00000}, &(0x7f0000001540)=0x2, &(0x7f0000001580)=0xff, 0x9db8, 0x8001, 0xfffffffffffffff7, 0xffffffffffffffff, 0x10, 0x9}}], 0x110, 0x44000}, 0x4000) (async) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000001740), &(0x7f0000001780)=0x10) getsockname$llc(0xffffffffffffffff, &(0x7f00000017c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000001800)=0x10) (async) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000001840)={0x6, 0x400, 0x2}) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) close(r3) r5 = accept4$inet(r4, &(0x7f0000001880)={0x2, 0x0, @multicast2}, &(0x7f00000018c0)=0x10, 0x800) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001900)={0x0, 0x3f, "65f04621fec8a06f8bc974e869a660f64c786a8d23dc624ac1925343d56bad01a64f0233a8f754f15509b87ea689e033e83d5c17c574f92171038a44995825"}, &(0x7f0000001980)=0x47) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f00000019c0)={r6, 0xa1, "ae1328c3a329c5b5b82d07b9c79bef265137a81196460b659e520da41a1142e34bf6046aaaca11cf2d8dc4c25c2928408005d587bb50e6a895b4255ecd94fd1cd7924128eb942c16072fd93b914a50c94f6e2aa8855bc04d5a382c1826ee02a20745deda588d19553aebb50356b10f75141dfcf165fdf5529435369e8ec69b2cc5a8cd7d56154b4138b625154e626e3272e266bf7e995c4a701d448d25a3bb2c41"}, &(0x7f0000001a80)=0xa9) preadv(r4, &(0x7f0000002d80)=[{&(0x7f0000001ac0)=""/15, 0xf}, {&(0x7f0000001b00)=""/150, 0x96}, {&(0x7f0000001bc0)=""/113, 0x71}, {&(0x7f0000001c40)=""/230, 0xe6}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/42, 0x2a}], 0x6, 0x4, 0xffffffff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002e00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000002e40)='blkio.throttle.io_serviced\x00', 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002e80), 0x1, 0x0) (async) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000002ec0), 0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002f40)={&(0x7f0000002f00)='io_uring_queue_async_work\x00', r8, 0x0, 0x2}, 0x18) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) getsockopt$X25_QBITINCL(r8, 0x106, 0x1, &(0x7f0000002f80), &(0x7f0000002fc0)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f00000030c0)={'syztnl1\x00', &(0x7f0000003040)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x3, 0x80000000, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x40, 0x700, 0x5, 0x7}}) sendmsg$nl_route_sched(r8, &(0x7f0000003180)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003140)={&(0x7f0000003100)=@getqdisc={0x2c, 0x26, 0x800, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x7, 0xc}, {0x4}, {0x0, 0xffe0}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) (async) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f00000031c0)={0x0, 0x7, 0x9, 0x8, 0x80000001, 0xe6c}, 0x14) (async) getsockopt(r3, 0x4, 0x9, &(0x7f0000003200)=""/215, &(0x7f0000003300)=0xd7) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000003380), 0x4) 698.966562ms ago: executing program 3 (id=174): listen(0xffffffffffffffff, 0x80000000) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) close(0xffffffffffffffff) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c98798eb62000"/22, @ANYRES32=0x0, @ANYBLOB="3a000000a01103002000128009000100766c616e000000001000028006000100000000000400038008000500", @ANYRES32=r2, @ANYBLOB="04003480"], 0x4c}}, 0x800) (async) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000080)=0x1, 0x4) 657.119453ms ago: executing program 1 (id=175): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001bc0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x31}, @in=@private=0xa010101, 0x4e23, 0x0, 0x4e21, 0x179d, 0xa, 0x80, 0xa0, 0x89}, {0xffffffffffff55be, 0x8c26, 0x200, 0x7ce9, 0x3, 0xc2, 0xffffffffffffcd66, 0x2}, {0x100000000, 0x2, 0x4, 0x6}, 0xff, 0x6e6bb0, 0x0, 0x1, 0x3, 0x2}, {{@in=@loopback, 0x4d5, 0xdca9d64b87e08d94}, 0x2, @in=@loopback, 0x3503, 0x3, 0x0, 0x5, 0x7fff, 0x205}}, 0xe8) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf251d00000008000300", @ANYRES32=r4, @ANYBLOB='$\x00/'], 0x40}, 0x1, 0x0, 0x0, 0x20008800}, 0x2000808) 476.231769ms ago: executing program 2 (id=176): socket$alg(0x26, 0x5, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000004c0)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1100000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="5f82970c86718dbcd365451804d81a4d8d8d29000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x9, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x6, 0x2}]}, @typedef={0x7, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x30, 0x2e, 0x5f, 0x30, 0x61, 0x5f]}}, 0x0, 0x41}, 0x28) close(r6) (async) socket$unix(0x1, 0x5, 0x0) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r7) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000080)={0xbf, 0x99, 0x15, 0x5, 0xff, 0x5, 0xfb, 0x8, 0xec, 0x2, 0x81, 0x84, 0x8, 0x5}, 0xe) (async) sendto$inet6(r8, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) (async) shutdown(r8, 0x1) (async) recvmmsg(r8, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/214, 0xd6}], 0x1}, 0x5}], 0x1, 0x20, 0x0) (async) shutdown(r7, 0x0) (async) recvmmsg(r7, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000003c0)={@empty}, &(0x7f0000000440)=0x14) 475.907079ms ago: executing program 1 (id=177): socket(0x1e, 0x4, 0x7ffffffe) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="c0000000000200000074000180260001800800654f0000020c00028005000100000000004300028005000100060000000c00038014bead05000100000000000c00028005000100000000002c00018014000300fe88000000000000000000000000000114000400fe8000000000000000001000000000aa240002800c00028005000600000000001400018008000100ac1e00df070002000000000000000000000000000000000000000091145a1475474d76"], 0xc0}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x101}, 0x50) 458.293418ms ago: executing program 4 (id=178): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='hrtimer_expire_entry\x00', r0, 0x0, 0x4100000000000000}, 0x18) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async, rerun: 32) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) (async, rerun: 64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) (async, rerun: 64) pwrite64(r4, &(0x7f0000000040)="43572654b114b1a9e187499a3907", 0xe, 0x6) (rerun: 64) write(r2, &(0x7f0000000340), 0x11000) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x3, "9ef33a"}, &(0x7f0000000080)=0xb) (async) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 424.105402ms ago: executing program 3 (id=179): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r1, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, 0x0, 0x0, 0x4004}], 0x1, 0x40800) setsockopt$MRT6_ASSERT(r2, 0x29, 0xcf, &(0x7f0000000040), 0x4) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={r3, 0x94, &(0x7f0000000340)=[@in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}, @in6={0xa, 0x4e23, 0x8, @empty, 0xfffffffe}, @in6={0xa, 0xfff8, 0xc65, @empty, 0x3}, @in6={0xa, 0x4e23, 0x0, @private1, 0x7}, @in={0x2, 0x4e23, @broadcast}]}, &(0x7f0000000240)=0x10) 0s ago: executing program 2 (id=180): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r1, 0x0, 0xfffffffffffffffe}, 0x10) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000b, 0x3032, 0xffffffffffffffff, 0x5fc4d000) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002740)=""/4090, 0xffa}, {&(0x7f0000000300)=""/121, 0x79}], 0x2}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/96, 0x60}, {&(0x7f0000001740)=""/4080, 0xff0}, {&(0x7f0000003740)=""/4083, 0xff3}], 0x3}, 0x8}], 0x3, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01fdfdffff000000000003000000200001800d000100657468a639dc17e27f"], 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x80) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="e73fe8fd", @ANYRES16=r6, @ANYBLOB="040026bd7000fcdbdf2514000000200002801c0003800800010004000000080001000600000008000100ffffffff0c00058007000100696200009c0001802c000280080001000800000008000400020000000800030000000080080004000080000008000100080000000d0001007564703a73797a32000000001500010069623a76657468315f746f5f7465616d00000000080003000040020008000300030000002c0004001400010002004e22e000000200000000000000001400020002004e200a01010000000000000000000800030001000000e00006803d00040067636d2861657329000000000000000000000000000000000000000000000000150000007141bab21484105640be7501c82dfd984960bd5f90000000950003009af72ab0b47402a3d9b3cd90dd2ccc5c80d87f55c0e5553466b713191bf67a49e00cb4dba4f57e120bb20df19b58a021c758ec51c5930a149c99c1ff58ce93a49c5a14037130c78d57c53a7e59c3abea8e4de8742d7cc3259ffbe2dec4499c85484bf5e1701e4a1d131d53a386dc3b6d810ad6da8e06980610925ec5df57f859cbd4c94776d846e3c5bd7600584fa1ac11000000040005002c00038008000300050000000800020005000000080002000000000008000300070000000800020084b60000"], 0x1e8}, 0x1, 0x0, 0x0, 0x800}, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x80000, 0x6) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r8, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r9], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r8, {0xfff2}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000a00)={0x0, "edf2ed324df3b2b409c49a8468ead457"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.167' (ED25519) to the list of known hosts. [ 67.067196][ T5850] cgroup: Unknown subsys name 'net' [ 67.177215][ T5850] cgroup: Unknown subsys name 'cpuset' [ 67.186099][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.606944][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.983699][ T5874] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.992317][ T5874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.001389][ T5874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.025470][ T5874] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.044069][ T5874] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.063870][ T5874] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.070214][ T5882] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.078878][ T5874] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.079746][ T5881] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.087205][ T5884] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.101879][ T5882] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.101881][ T5874] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.102914][ T5881] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.110702][ T5874] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.116204][ T5882] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.123474][ T5874] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.131747][ T5881] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.138313][ T5874] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.145652][ T5881] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.152379][ T5874] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.167321][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.172900][ T5874] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.178866][ T5881] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.197490][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.207897][ T5881] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.440247][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.446856][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.793144][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 71.986755][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 71.999576][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 72.060259][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 72.123765][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 72.180884][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.188145][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.196618][ T5866] bridge_slave_0: entered allmulticast mode [ 72.203922][ T5866] bridge_slave_0: entered promiscuous mode [ 72.265638][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.272853][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.280488][ T5866] bridge_slave_1: entered allmulticast mode [ 72.287630][ T5866] bridge_slave_1: entered promiscuous mode [ 72.362444][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.369735][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.377916][ T5864] bridge_slave_0: entered allmulticast mode [ 72.384997][ T5864] bridge_slave_0: entered promiscuous mode [ 72.392532][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.399854][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.407109][ T5863] bridge_slave_0: entered allmulticast mode [ 72.414321][ T5863] bridge_slave_0: entered promiscuous mode [ 72.425018][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.450233][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.457951][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.465237][ T5864] bridge_slave_1: entered allmulticast mode [ 72.472179][ T5864] bridge_slave_1: entered promiscuous mode [ 72.479745][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.486956][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.494381][ T5863] bridge_slave_1: entered allmulticast mode [ 72.501286][ T5863] bridge_slave_1: entered promiscuous mode [ 72.510192][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.579196][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.586395][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.594200][ T5873] bridge_slave_0: entered allmulticast mode [ 72.601133][ T5873] bridge_slave_0: entered promiscuous mode [ 72.651323][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.658584][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.666884][ T5873] bridge_slave_1: entered allmulticast mode [ 72.674577][ T5873] bridge_slave_1: entered promiscuous mode [ 72.684331][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.695952][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.707667][ T5866] team0: Port device team_slave_0 added [ 72.714587][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.721714][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.729459][ T5865] bridge_slave_0: entered allmulticast mode [ 72.736449][ T5865] bridge_slave_0: entered promiscuous mode [ 72.757457][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.769011][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.797188][ T5866] team0: Port device team_slave_1 added [ 72.803119][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.810347][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.817872][ T5865] bridge_slave_1: entered allmulticast mode [ 72.824913][ T5865] bridge_slave_1: entered promiscuous mode [ 72.889656][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.911531][ T5863] team0: Port device team_slave_0 added [ 72.941646][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.953264][ T5864] team0: Port device team_slave_0 added [ 72.961533][ T5863] team0: Port device team_slave_1 added [ 72.968792][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.975913][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.001848][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.016147][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.050959][ T5864] team0: Port device team_slave_1 added [ 73.068461][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.075518][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.101975][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.116137][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.140095][ T5873] team0: Port device team_slave_0 added [ 73.189556][ T5873] team0: Port device team_slave_1 added [ 73.194480][ T5869] Bluetooth: hci3: command tx timeout [ 73.195384][ T5875] Bluetooth: hci2: command tx timeout [ 73.226438][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.233444][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.260102][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.272600][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.274039][ T5875] Bluetooth: hci4: command tx timeout [ 73.279833][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.285543][ T5869] Bluetooth: hci0: command tx timeout [ 73.311060][ T5881] Bluetooth: hci1: command tx timeout [ 73.317104][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.335046][ T5865] team0: Port device team_slave_0 added [ 73.351422][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.358545][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.386105][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.428887][ T5865] team0: Port device team_slave_1 added [ 73.435526][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.442469][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.469523][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.481147][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.488252][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.514238][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.541238][ T5866] hsr_slave_0: entered promiscuous mode [ 73.547789][ T5866] hsr_slave_1: entered promiscuous mode [ 73.565558][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.572519][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.598739][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.684588][ T5863] hsr_slave_0: entered promiscuous mode [ 73.690921][ T5863] hsr_slave_1: entered promiscuous mode [ 73.697413][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 73.703194][ T5863] Cannot create hsr debugfs directory [ 73.709516][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.716676][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.742607][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.780208][ T5864] hsr_slave_0: entered promiscuous mode [ 73.786472][ T5864] hsr_slave_1: entered promiscuous mode [ 73.792483][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 73.798348][ T5864] Cannot create hsr debugfs directory [ 73.805534][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.812482][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.838518][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.867595][ T5873] hsr_slave_0: entered promiscuous mode [ 73.874190][ T5873] hsr_slave_1: entered promiscuous mode [ 73.880216][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 73.886012][ T5873] Cannot create hsr debugfs directory [ 74.024592][ T5865] hsr_slave_0: entered promiscuous mode [ 74.030794][ T5865] hsr_slave_1: entered promiscuous mode [ 74.037089][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 74.042814][ T5865] Cannot create hsr debugfs directory [ 74.477572][ T5866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.489448][ T5866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.499976][ T5866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.518134][ T5866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.569965][ T5863] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.580245][ T5863] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.590378][ T5863] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.615603][ T5863] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.673366][ T5864] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.689869][ T5864] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.701630][ T5864] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.713361][ T5864] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.822450][ T5873] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.835234][ T5873] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.846283][ T5873] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.858312][ T5873] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.998404][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.011568][ T5865] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.035719][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.042599][ T5865] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.055513][ T5865] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.067237][ T5865] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.104408][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.133577][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.140867][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.160158][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.189390][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.196632][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.207776][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.214910][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.250908][ T2971] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.258050][ T2971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.276609][ T5881] Bluetooth: hci2: command tx timeout [ 75.282134][ T5875] Bluetooth: hci3: command tx timeout [ 75.287461][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.355451][ T5875] Bluetooth: hci4: command tx timeout [ 75.360900][ T5875] Bluetooth: hci1: command tx timeout [ 75.367303][ T5881] Bluetooth: hci0: command tx timeout [ 75.373502][ T5866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.407631][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.440671][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.517826][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.525053][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.540046][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.584893][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.592070][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.606072][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.613215][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.622904][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.630030][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.645647][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.756096][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.795262][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.802400][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.851361][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.858556][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.902807][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.927967][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.159767][ T5866] veth0_vlan: entered promiscuous mode [ 76.232077][ T5863] veth0_vlan: entered promiscuous mode [ 76.247541][ T5866] veth1_vlan: entered promiscuous mode [ 76.297213][ T5863] veth1_vlan: entered promiscuous mode [ 76.353487][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.376878][ T5866] veth0_macvtap: entered promiscuous mode [ 76.403527][ T5866] veth1_macvtap: entered promiscuous mode [ 76.431300][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.454397][ T5863] veth0_macvtap: entered promiscuous mode [ 76.474192][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.484787][ T5863] veth1_macvtap: entered promiscuous mode [ 76.509188][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.531918][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.565982][ T2971] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.576908][ T2971] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.609270][ T2971] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.619157][ T2971] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.632461][ T5864] veth0_vlan: entered promiscuous mode [ 76.689737][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.733305][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.749498][ T5864] veth1_vlan: entered promiscuous mode [ 76.760909][ T5873] veth0_vlan: entered promiscuous mode [ 76.827311][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.837205][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.849193][ T5873] veth1_vlan: entered promiscuous mode [ 76.862948][ T2971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.863660][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.876781][ T2971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.892631][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.971881][ T2971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.987184][ T2971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.027477][ T5873] veth0_macvtap: entered promiscuous mode [ 77.036245][ T5864] veth0_macvtap: entered promiscuous mode [ 77.083431][ T5873] veth1_macvtap: entered promiscuous mode [ 77.119675][ T5864] veth1_macvtap: entered promiscuous mode [ 77.127730][ T5866] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.152852][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.170786][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.205533][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.215029][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.216897][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.235244][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.260708][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.297522][ T5865] veth0_vlan: entered promiscuous mode [ 77.321157][ T2971] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.340949][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.354058][ T5875] Bluetooth: hci3: command tx timeout [ 77.359495][ T5875] Bluetooth: hci2: command tx timeout [ 77.372511][ T5865] veth1_vlan: entered promiscuous mode [ 77.385945][ T2971] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.395652][ T2971] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.434655][ T5875] Bluetooth: hci1: command tx timeout [ 77.435294][ T5881] Bluetooth: hci4: command tx timeout [ 77.440087][ T5875] Bluetooth: hci0: command tx timeout [ 77.487561][ T2971] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.507096][ T2971] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.547235][ T2971] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.562130][ T2971] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.586430][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 77.616325][ T5984] netlink: 'syz.2.3': attribute type 5 has an invalid length. [ 77.619745][ T2971] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.630869][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 77.650941][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 77.682128][ T5984] Zero length message leads to an empty skb [ 77.775710][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.799579][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.807593][ T5865] veth0_macvtap: entered promiscuous mode [ 77.857654][ T5865] veth1_macvtap: entered promiscuous mode [ 77.907516][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.989912][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.016352][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.031121][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.107162][ T3528] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.168927][ T3528] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.186753][ T3528] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.213751][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.229197][ T3528] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.263689][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.289834][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.317214][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.427985][ T6007] syz.0.11 uses obsolete (PF_INET,SOCK_PACKET) [ 78.470685][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.505458][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.647344][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.669192][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.730340][ T6013] netlink: 'syz.1.2': attribute type 13 has an invalid length. [ 78.750891][ T6013] netlink: 'syz.1.2': attribute type 17 has an invalid length. [ 78.870190][ T6019] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13'. [ 78.955405][ T6013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.286821][ T6033] warning: `syz.0.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.418004][ T6036] netlink: 'syz.4.5': attribute type 4 has an invalid length. [ 79.438298][ T5875] Bluetooth: hci2: command tx timeout [ 79.438408][ T5881] Bluetooth: hci3: command tx timeout [ 79.493767][ T6039] netlink: 'syz.4.5': attribute type 4 has an invalid length. [ 79.515882][ T5881] Bluetooth: hci4: command tx timeout [ 79.515912][ T5875] Bluetooth: hci1: command tx timeout [ 79.521359][ T5869] Bluetooth: hci0: command tx timeout [ 80.159464][ T6053] netlink: 'syz.1.18': attribute type 1 has an invalid length. [ 80.179849][ T6056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.999239][ T6084] netlink: 'syz.1.26': attribute type 12 has an invalid length. [ 81.565573][ T6110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.690941][ T6118] netlink: 'syz.1.33': attribute type 4 has an invalid length. [ 81.870466][ T6120] netlink: 'syz.0.35': attribute type 13 has an invalid length. [ 81.879587][ T6120] netlink: 'syz.0.35': attribute type 17 has an invalid length. [ 82.022438][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39'. [ 82.096024][ T6120] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 82.459455][ T6141] vlan2: entered promiscuous mode [ 82.492857][ T6141] macvtap0: entered promiscuous mode [ 82.530717][ T6144] netlink: 104 bytes leftover after parsing attributes in process `syz.3.41'. [ 82.863596][ T6162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.875551][ T49] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.100855][ T6170] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.112970][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.50'. [ 83.601131][ T6192] netlink: 'syz.1.54': attribute type 1 has an invalid length. [ 83.937053][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 84.313440][ T6218] netlink: 'syz.2.62': attribute type 2 has an invalid length. [ 84.322590][ T6218] netlink: 24 bytes leftover after parsing attributes in process `syz.2.62'. [ 84.455536][ T6232] netlink: 104 bytes leftover after parsing attributes in process `syz.0.67'. [ 84.792014][ T6248] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.291966][ T6264] netlink: 48 bytes leftover after parsing attributes in process `syz.4.80'. [ 85.383486][ T6259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.79'. [ 85.421441][ T6259] netlink: 20 bytes leftover after parsing attributes in process `syz.0.79'. [ 85.553440][ T6285] netlink: 32 bytes leftover after parsing attributes in process `syz.3.82'. [ 85.612217][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.85'. [ 85.627066][ T6286] netlink: 'syz.4.85': attribute type 5 has an invalid length. [ 85.662256][ T6286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.85'. [ 85.929322][ T6303] vlan2: entered allmulticast mode [ 85.935191][ T6303] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 86.532790][ T6337] netlink: 'syz.2.97': attribute type 1 has an invalid length. [ 86.669700][ T6337] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 86.677215][ T6337] IPv6: NLM_F_CREATE should be set when creating new route [ 86.684482][ T6337] IPv6: NLM_F_CREATE should be set when creating new route [ 86.704651][ T6337] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 86.800443][ T1207] cfg80211: failed to load regulatory.db [ 86.900743][ T6347] tipc: Started in network mode [ 86.905960][ T6347] tipc: Node identity 2e843114791a, cluster identity 4711 [ 86.926992][ T6347] tipc: Enabled bearer , priority 0 [ 86.952731][ T6347] tipc: Resetting bearer [ 86.982243][ T6351] syzkaller0: entered promiscuous mode [ 87.000644][ T6351] syzkaller0: entered allmulticast mode [ 87.045565][ T6346] tipc: Resetting bearer [ 87.085584][ T6346] tipc: Disabling bearer [ 88.104585][ T6407] sctp: [Deprecated]: syz.4.116 (pid 6407) Use of struct sctp_assoc_value in delayed_ack socket option. [ 88.104585][ T6407] Use struct sctp_sack_info instead [ 88.368422][ T6412] ip6gretap0: entered promiscuous mode [ 88.374378][ T6412] macsec1: entered promiscuous mode [ 88.464018][ T6417] __nla_validate_parse: 10 callbacks suppressed [ 88.464038][ T6417] netlink: 6 bytes leftover after parsing attributes in process `syz.2.119'. [ 88.509442][ T6392] netlink: 'syz.3.112': attribute type 1 has an invalid length. [ 88.518853][ T6392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.112'. [ 88.529182][ T6417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.571533][ T6425] netlink: 'syz.4.120': attribute type 4 has an invalid length. [ 88.620212][ T6429] tipc: Started in network mode [ 88.643172][ T6429] tipc: Node identity b24b4c06bc09, cluster identity 4711 [ 88.697905][ T6429] tipc: Enabled bearer , priority 0 [ 88.709425][ T6430] syzkaller0: entered promiscuous mode [ 88.752517][ T6430] syzkaller0: entered allmulticast mode [ 88.911352][ T6431] tipc: Resetting bearer [ 88.975370][ T6431] tipc: Disabling bearer [ 89.178126][ T6456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.373148][ T6471] netlink: 24 bytes leftover after parsing attributes in process `syz.4.131'. [ 89.399023][ T6461] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.410484][ T6461] bridge0: port 3(bond1) entered blocking state [ 89.417158][ T6461] bridge0: port 3(bond1) entered disabled state [ 89.424654][ T6461] bond1: entered allmulticast mode [ 89.432376][ T6461] bond1: entered promiscuous mode [ 89.439376][ T6461] bridge0: port 3(bond1) entered blocking state [ 89.445963][ T6461] bridge0: port 3(bond1) entered forwarding state [ 89.456452][ T6475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 89.465457][ T6475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 89.511939][ T36] bridge0: port 3(bond1) entered disabled state [ 89.531042][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.133'. [ 89.561845][ T6465] netlink: 20 bytes leftover after parsing attributes in process `syz.4.131'. [ 89.634909][ T6479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.134'. [ 89.655801][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.658520][ T6479] netlink: 'syz.3.134': attribute type 6 has an invalid length. [ 89.685433][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.696069][ T6479] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.134'. [ 89.834403][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.853424][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.114993][ T6500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.141'. [ 90.276217][ T6510] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 90.987629][ T6548] Bluetooth: MGMT ver 1.23 [ 91.168411][ T6552] veth1_to_hsr: entered promiscuous mode [ 91.174770][ T6552] macvtap1: entered promiscuous mode [ 91.189693][ T6552] macvtap1: entered allmulticast mode [ 91.195768][ T6552] veth1_to_hsr: entered allmulticast mode [ 91.254868][ T6552] macvtap2: entered promiscuous mode [ 91.261389][ T30] audit: type=1800 audit(1759175289.660:2): pid=6556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.158" name="memory.events" dev="tmpfs" ino=234 res=0 errno=0 [ 91.310894][ T6552] macvtap2: entered allmulticast mode [ 91.377473][ T6556] netlink: 'syz.0.158': attribute type 1 has an invalid length. [ 91.394162][ T30] audit: type=1804 audit(1759175289.710:3): pid=6556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.158" name="memory.events" dev="tmpfs" ino=234 res=1 errno=0 [ 91.648531][ T6573] netlink: 'syz.0.164': attribute type 1 has an invalid length. [ 91.904862][ T6585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.508341][ T6591] netlink: 'syz.0.168': attribute type 6 has an invalid length. [ 92.693089][ T6610] tipc: Started in network mode [ 92.721530][ T6610] tipc: Node identity 0ac7bef46fd1, cluster identity 4711 [ 92.749847][ T6610] tipc: Enabled bearer , priority 0 [ 92.775413][ T6614] syzkaller0: entered promiscuous mode [ 92.791442][ T6614] syzkaller0: entered allmulticast mode [ 92.955639][ T6614] tipc: Resetting bearer [ 92.991474][ T6614] tipc: Disabling bearer Connection to 10.128.1.167 closed by remote host. [ 93.323908][ T6623] [ 93.326280][ T6623] ===================================== [ 93.331815][ T6623] WARNING: bad unlock balance detected! [ 93.337361][ T6623] syzkaller #0 Not tainted [ 93.341766][ T6623] ------------------------------------- [ 93.347300][ T6623] syz.2.180/6623 is trying to release lock (&sighand->siglock) at: [ 93.355196][ T6623] [] copy_process+0x2793/0x3c00 [ 93.361608][ T6623] but there are no more locks to release! [ 93.367300][ T6623] [ 93.367300][ T6623] other info that might help us debug this: [ 93.375341][ T6623] 1 lock held by syz.2.180/6623: [ 93.380261][ T6623] #0: ffffffff8e171810 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x212a/0x3c00 [ 93.390620][ T6623] [ 93.390620][ T6623] stack backtrace: [ 93.396506][ T6623] CPU: 1 UID: 0 PID: 6623 Comm: syz.2.180 Not tainted syzkaller #0 PREEMPT(full) [ 93.396525][ T6623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 93.396538][ T6623] Call Trace: [ 93.396547][ T6623] [ 93.396554][ T6623] dump_stack_lvl+0x189/0x250 [ 93.396576][ T6623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.396592][ T6623] ? __pfx__printk+0x10/0x10 [ 93.396615][ T6623] ? copy_process+0x2793/0x3c00 [ 93.396630][ T6623] print_unlock_imbalance_bug+0xdc/0xf0 [ 93.396647][ T6623] lock_release+0x269/0x3e0 [ 93.396667][ T6623] ? copy_process+0x2793/0x3c00 [ 93.396683][ T6623] _raw_spin_unlock+0x16/0x50 [ 93.396697][ T6623] copy_process+0x2793/0x3c00 [ 93.396718][ T6623] ? copy_process+0x97f/0x3c00 [ 93.396735][ T6623] ? __pfx_copy_process+0x10/0x10 [ 93.396754][ T6623] kernel_clone+0x21e/0x840 [ 93.396772][ T6623] ? __pfx_kernel_clone+0x10/0x10 [ 93.396790][ T6623] ? __lock_acquire+0xab9/0xd20 [ 93.396813][ T6623] __se_sys_clone3+0x256/0x2d0 [ 93.396830][ T6623] ? __might_fault+0xb0/0x130 [ 93.396850][ T6623] ? __pfx___se_sys_clone3+0x10/0x10 [ 93.396872][ T6623] ? _copy_to_user+0x8a/0xb0 [ 93.396897][ T6623] ? do_user_addr_fault+0xc8a/0x1390 [ 93.396920][ T6623] ? do_syscall_64+0xbe/0x3b0 [ 93.396939][ T6623] do_syscall_64+0xfa/0x3b0 [ 93.396955][ T6623] ? lockdep_hardirqs_on+0x9c/0x150 [ 93.396971][ T6623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.396986][ T6623] ? clear_bhb_loop+0x60/0xb0 [ 93.397003][ T6623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.397018][ T6623] RIP: 0033:0x7f6493bc3609 [ 93.397035][ T6623] Code: d7 08 00 48 8d 3d 9c d7 08 00 e8 e2 28 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 93.397049][ T6623] RSP: 002b:00007fff61fb2a08 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 93.397065][ T6623] RAX: ffffffffffffffda RBX: 00007f6493b459f0 RCX: 00007f6493bc3609 [ 93.397077][ T6623] RDX: 00007f6493b459f0 RSI: 0000000000000058 RDI: 00007fff61fb2a50 [ 93.397087][ T6623] RBP: 00007f6494a756c0 R08: 00007f6494a756c0 R09: 00007fff61fb2b37 [ 93.397098][ T6623] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 93.397108][ T6623] R13: 000000000000000b R14: 00007fff61fb2a50 R15: 00007fff61fb2b38 [ 93.397125][ T6623] [ 93.667181][ T6623] ------------[ cut here ]------------ [ 93.672682][ T6623] pvqspinlock: lock 0xffff88802b852e40 has corrupted value 0x0! [ 93.696962][ T6623] WARNING: CPU: 0 PID: 6623 at kernel/locking/qspinlock_paravirt.h:506 __pv_queued_spin_unlock_slowpath+0x1fe/0x2a0 [ 93.709459][ T6623] Modules linked in: [ 93.713389][ T6623] CPU: 0 UID: 0 PID: 6623 Comm: syz.2.180 Not tainted syzkaller #0 PREEMPT(full) [ 93.722715][ T6623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 93.732913][ T6623] RIP: 0010:__pv_queued_spin_unlock_slowpath+0x1fe/0x2a0 [ 93.739986][ T6623] Code: 78 aa ac f6 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 93 00 00 00 8b 13 48 c7 c7 00 0c 8b 8b 48 89 de e8 d3 c1 0c f6 90 <0f> 0b 90 90 eb 95 48 c7 c7 90 c5 00 8e 4c 89 f6 4c 89 fa e8 ca 54 [ 93.759698][ T6623] RSP: 0018:ffffc9000c20f8c0 EFLAGS: 00010246 [ 93.765895][ T6623] RAX: 821ab94729a0e500 RBX: ffff88802b852e40 RCX: ffff88802a915a00 [ 93.773894][ T6623] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 93.781863][ T6623] RBP: 1ffff1100570a5c9 R08: 0000000000000003 R09: 0000000000000004 [ 93.790357][ T6623] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: dffffc0000000000 [ 93.798747][ T6623] R13: dffffc0000000000 R14: ffff88802b852e50 R15: ffff88802b852e48 [ 93.806764][ T6623] FS: 000055558d675500(0000) GS:ffff888125c39000(0000) knlGS:0000000000000000 [ 93.815735][ T6623] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.822318][ T6623] CR2: 000020000027f030 CR3: 00000000750fa000 CR4: 00000000003526f0 [ 93.830325][ T6623] Call Trace: [ 93.834395][ T6623] [ 93.837338][ T6623] __raw_callee_save___pv_queued_spin_unlock_slowpath+0x15/0x30 [ 93.845342][ T6623] .slowpath+0x9/0x18 [ 93.849332][ T6623] do_raw_spin_unlock+0x122/0x240 [ 93.854385][ T6623] _raw_spin_unlock+0x1e/0x50 [ 93.859058][ T6623] copy_process+0x2793/0x3c00 [ 93.863763][ T6623] ? copy_process+0x97f/0x3c00 [ 93.868527][ T6623] ? __pfx_copy_process+0x10/0x10 [ 93.873600][ T6623] kernel_clone+0x21e/0x840 [ 93.878105][ T6623] ? __pfx_kernel_clone+0x10/0x10 [ 93.883137][ T6623] ? __lock_acquire+0xab9/0xd20 [ 93.888017][ T6623] __se_sys_clone3+0x256/0x2d0 [ 93.893306][ T6623] ? __might_fault+0xb0/0x130 [ 93.898387][ T6623] ? __pfx___se_sys_clone3+0x10/0x10 [ 93.903751][ T6623] ? _copy_to_user+0x8a/0xb0 [ 93.908357][ T6623] ? do_user_addr_fault+0xc8a/0x1390 [ 93.913780][ T6623] ? do_syscall_64+0xbe/0x3b0 [ 93.918465][ T6623] do_syscall_64+0xfa/0x3b0 [ 93.922970][ T6623] ? lockdep_hardirqs_on+0x9c/0x150 [ 93.928213][ T6623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.934319][ T6623] ? clear_bhb_loop+0x60/0xb0 [ 93.938996][ T6623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.944927][ T6623] RIP: 0033:0x7f6493bc3609 [ 93.949340][ T6623] Code: d7 08 00 48 8d 3d 9c d7 08 00 e8 e2 28 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 93.969015][ T6623] RSP: 002b:00007fff61fb2a08 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 93.977724][ T6623] RAX: ffffffffffffffda RBX: 00007f6493b459f0 RCX: 00007f6493bc3609 [ 93.985917][ T6623] RDX: 00007f6493b459f0 RSI: 0000000000000058 RDI: 00007fff61fb2a50 [ 93.994109][ T6623] RBP: 00007f6494a756c0 R08: 00007f6494a756c0 R09: 00007fff61fb2b37 [ 94.003332][ T6623] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 94.011992][ T6623] R13: 000000000000000b R14: 00007fff61fb2a50 R15: 00007fff61fb2b38 [ 94.020487][ T6623] [ 94.023510][ T6623] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.030788][ T6623] CPU: 0 UID: 0 PID: 6623 Comm: syz.2.180 Not tainted syzkaller #0 PREEMPT(full) [ 94.039977][ T6623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 94.050026][ T6623] Call Trace: [ 94.053301][ T6623] [ 94.056224][ T6623] dump_stack_lvl+0x99/0x250 [ 94.060816][ T6623] ? __asan_memcpy+0x40/0x70 [ 94.065405][ T6623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.070620][ T6623] ? __pfx__printk+0x10/0x10 [ 94.075217][ T6623] vpanic+0x281/0x750 [ 94.079202][ T6623] ? __pfx__printk+0x10/0x10 [ 94.083792][ T6623] ? __pfx_vpanic+0x10/0x10 [ 94.088295][ T6623] ? is_bpf_text_address+0x26/0x2b0 [ 94.093503][ T6623] panic+0xb9/0xc0 [ 94.097221][ T6623] ? __pfx_panic+0x10/0x10 [ 94.101647][ T6623] __warn+0x31b/0x4b0 [ 94.105633][ T6623] ? __pv_queued_spin_unlock_slowpath+0x1fe/0x2a0 [ 94.112038][ T6623] ? __pv_queued_spin_unlock_slowpath+0x1fe/0x2a0 [ 94.118441][ T6623] report_bug+0x2be/0x4f0 [ 94.122763][ T6623] ? __pv_queued_spin_unlock_slowpath+0x1fe/0x2a0 [ 94.129163][ T6623] ? __pv_queued_spin_unlock_slowpath+0x1fe/0x2a0 [ 94.135571][ T6623] ? __pv_queued_spin_unlock_slowpath+0x200/0x2a0 [ 94.141969][ T6623] handle_bug+0x84/0x160 [ 94.146200][ T6623] exc_invalid_op+0x1a/0x50 [ 94.150694][ T6623] asm_exc_invalid_op+0x1a/0x20 [ 94.155527][ T6623] RIP: 0010:__pv_queued_spin_unlock_slowpath+0x1fe/0x2a0 [ 94.162536][ T6623] Code: 78 aa ac f6 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 93 00 00 00 8b 13 48 c7 c7 00 0c 8b 8b 48 89 de e8 d3 c1 0c f6 90 <0f> 0b 90 90 eb 95 48 c7 c7 90 c5 00 8e 4c 89 f6 4c 89 fa e8 ca 54 [ 94.182127][ T6623] RSP: 0018:ffffc9000c20f8c0 EFLAGS: 00010246 [ 94.188185][ T6623] RAX: 821ab94729a0e500 RBX: ffff88802b852e40 RCX: ffff88802a915a00 [ 94.196142][ T6623] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 94.204102][ T6623] RBP: 1ffff1100570a5c9 R08: 0000000000000003 R09: 0000000000000004 [ 94.212059][ T6623] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: dffffc0000000000 [ 94.220015][ T6623] R13: dffffc0000000000 R14: ffff88802b852e50 R15: ffff88802b852e48 [ 94.227982][ T6623] __raw_callee_save___pv_queued_spin_unlock_slowpath+0x15/0x30 [ 94.235607][ T6623] .slowpath+0x9/0x18 [ 94.239576][ T6623] do_raw_spin_unlock+0x122/0x240 [ 94.244591][ T6623] _raw_spin_unlock+0x1e/0x50 [ 94.249250][ T6623] copy_process+0x2793/0x3c00 [ 94.253914][ T6623] ? copy_process+0x97f/0x3c00 [ 94.258665][ T6623] ? __pfx_copy_process+0x10/0x10 [ 94.263676][ T6623] kernel_clone+0x21e/0x840 [ 94.268171][ T6623] ? __pfx_kernel_clone+0x10/0x10 [ 94.273180][ T6623] ? __lock_acquire+0xab9/0xd20 [ 94.278020][ T6623] __se_sys_clone3+0x256/0x2d0 [ 94.282773][ T6623] ? __might_fault+0xb0/0x130 [ 94.287438][ T6623] ? __pfx___se_sys_clone3+0x10/0x10 [ 94.292712][ T6623] ? _copy_to_user+0x8a/0xb0 [ 94.297293][ T6623] ? do_user_addr_fault+0xc8a/0x1390 [ 94.302569][ T6623] ? do_syscall_64+0xbe/0x3b0 [ 94.307235][ T6623] do_syscall_64+0xfa/0x3b0 [ 94.311725][ T6623] ? lockdep_hardirqs_on+0x9c/0x150 [ 94.316908][ T6623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.322960][ T6623] ? clear_bhb_loop+0x60/0xb0 [ 94.327623][ T6623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.333500][ T6623] RIP: 0033:0x7f6493bc3609 [ 94.337900][ T6623] Code: d7 08 00 48 8d 3d 9c d7 08 00 e8 e2 28 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 94.357490][ T6623] RSP: 002b:00007fff61fb2a08 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 94.365890][ T6623] RAX: ffffffffffffffda RBX: 00007f6493b459f0 RCX: 00007f6493bc3609 [ 94.373847][ T6623] RDX: 00007f6493b459f0 RSI: 0000000000000058 RDI: 00007fff61fb2a50 [ 94.381802][ T6623] RBP: 00007f6494a756c0 R08: 00007f6494a756c0 R09: 00007fff61fb2b37 [ 94.389755][ T6623] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 94.397711][ T6623] R13: 000000000000000b R14: 00007fff61fb2a50 R15: 00007fff61fb2b38 [ 94.405674][ T6623] [ 94.408936][ T6623] Kernel Offset: disabled [ 94.413253][ T6623] Rebooting in 86400 seconds..