last executing test programs: 6m41.526468718s ago: executing program 32 (id=1855): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) syz_emit_ethernet(0x86, &(0x7f0000000300)=ANY=[], 0x0) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async, rerun: 64) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0xfffffffffffffffd, {0x2, 0xf0}, 0xff}, 0x18) (async, rerun: 64) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000280), 0x4) (async, rerun: 32) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000240)=0x10000005, 0x4) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780080012400000000005001500", @ANYRESHEX], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000008be789ea1e0a07c7a39aae75662129394d4fb240a65d66534683374888ad9a1c18504152ce5f87dc74e67433", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r8 = socket(0x40000000015, 0x5, 0x0) (rerun: 32) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x5e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4000101}, 0x1c) (async) getsockname$packet(r8, 0x0, &(0x7f0000000240)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000100", @ANYRES16=r10, @ANYBLOB="0d0304000000fdffffff130000000c000980080002008c0e0000"], 0x20}, 0x1, 0x0, 0x0, 0x44011}, 0x20000800) clock_gettime(0x0, &(0x7f0000000840)) recvmmsg(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000580)=@nfc, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/97, 0x61}, {&(0x7f0000000100)=""/2, 0x2}, {&(0x7f0000000680)=""/177, 0xb1}, {&(0x7f0000000300)=""/45, 0x2d}, {&(0x7f0000000740)=""/98, 0x62}], 0x5, &(0x7f00000009c0)=""/144, 0x90}, 0x2}, {{&(0x7f0000000a80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}}, 0x80, &(0x7f0000000e40)=[{&(0x7f00000001c0)=""/33, 0x21}, {&(0x7f0000000480)=""/56, 0x38}, {&(0x7f0000000c40)=""/246, 0xd8}, {&(0x7f0000000d40)=""/197, 0xc5}, {&(0x7f0000000b00)=""/98, 0x62}], 0x5}, 0x80}], 0x2, 0x120, &(0x7f0000000940)) r11 = socket$kcm(0x10, 0x2, 0x4) close(r11) (async) r12 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) sendmsg$inet(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="1800000068006b0041000010000000003ac0dd909a4453eb", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48010) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@getqdisc={0x3c, 0x26, 0x800, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x5, 0xffff}, {0x6}, {0xffe0, 0xffff}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4040051) 2m7.900338822s ago: executing program 33 (id=4229): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000700)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9af, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000480)=ANY=[@ANYRESOCT=r0], 0x88}}], 0x2, 0x2400c044) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r2, r4, 0x0, 0x970b) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r6 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r6, 0x107, 0x12, &(0x7f0000000100)=0x4004b, 0x4) recvmmsg(r6, &(0x7f0000000480), 0x0, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0xfffffffe, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0x18}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x34}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000002000ffdbdf250100000014000200776731000000002e29cbc7af4faf600dc80000000000f5bc644c0e693fa6d031c74a1553b6e901b9ff131e7f9f19eaaeab2f518c7804ecf9f6a22fb542f8bf56229b31be09d118bec0e88651255bc70100010064dd5bac8759a386c95b7b8ce5ed2017fa256343c16ad74f0168cc770ea53d654eb093e8d35e914dac282b91d2449dcebebb535e23a2ebdabb94b470a9a307922000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x80000, 0x11, &(0x7f0000000500)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d80), &(0x7f0000000dc0), 0x10, 0x5}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 2m7.504552473s ago: executing program 34 (id=4239): socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000300)={'netdevsim0\x00', @random="f60f63971a2b"}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES16=r5], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000100), &(0x7f0000000180)='%pS \x00'}, 0x20) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r6, 0x0, 0x4000) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x98, 0x8, 0xfa04, 0x1b0, 0x6c02, 0x1b0, 0x194, 0x194, 0x1b0, 0x194, 0x3, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x0, 'veth0_to_hsr\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'vlan0\x00', {}, {}, 0x0, 0x1, 0x44}, 0x0, 0xb0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x5, 0x3, 0x1, 0x2, 0x4], 0x4}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1b, 0x5, 0x1, 0x9, 'syz0\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x7, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x5, 0x9}]}]}, {0x0, [0x5f, 0x0, 0x5f, 0x30, 0x2e]}}, &(0x7f0000000f40)=""/4080, 0x33, 0xff0, 0x8}, 0x28) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 2m5.868933415s ago: executing program 35 (id=4257): unshare(0x6a040000) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x400100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x5, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @private}, &(0x7f0000000280)=0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) sendmmsg(r0, 0x0, 0x0, 0xffe0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) r3 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x6a040000) close(0xffffffffffffffff) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x48040) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000600000008000000ad00000000000000", @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000505f4ddf042fe094aa3503af4ea607ffed34d4e2b8f48806a8aba33e6d4e519d0e83001b02479c34e31867c2c1f03090339983aeb16c8978f8c24cc388d71daead75c4b81d88e00e8622db50a8bd4644e6eb17835029048bad1fa00a33005d9671b211a5bc42200ce32ef560ac22969c83d612b6d4cfe07d795c6398310e734129825e11df36d95be191a29ab6000000000000000000"], 0x50) 1m59.797254057s ago: executing program 36 (id=4314): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4040) unshare(0x6a040000) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$igmp6(0xa, 0x3, 0x3a) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4], 0x38}}, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, 0x0, 0x4040) (async) unshare(0x6a040000) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$igmp6(0xa, 0x3, 0x3a) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x200000000000011, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4], 0x38}}, 0x0) (async) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094) (async) 1m38.464622381s ago: executing program 9 (id=4591): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="3f5e4a8e345482212cf7cd3702e8ea44dbc7f31fa2f2085e7c463d7e6498a414254ca1", 0x23}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/114, 0x72}], 0x1}, 0x7f}], 0x2, 0x0, 0x0) (fail_nth: 2) 1m38.122865903s ago: executing program 9 (id=4594): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfded, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100000000a40007e003a3e00160a98ef265880fc1d9645042ac78fee5f5203020001000000000000020000000900020073797a32000000000947f35c97740998d7b80df60d1a6555360001007379"], 0x68}}, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_emit_ethernet(0x49, &(0x7f0000000440)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x13, 0x29, 0x0, @ipv4, @local, {[], "1ce302d74f6ae54b8ea6c756cdf9a157b64679"}}}}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '\xff\xff'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$802154_raw(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f00000001c0)={&(0x7f0000000340)="89dfc272a2c13d88b91f702b09be95c15db864223a635699f6416827a721a8f942eeefd2c622193da3fd3ee645b919dc10ee0c3826d96f3af705995713035006e31c73b6947cc8d5dfb75003fecef1cba9046b6f6b4ff83e3dadb5dee64a73c0c88f4ef4f7b4ec88d1f81b3ac9c5ea6f6a4b2f2e525cc10c8baeb9c243a7ab89e50b3e8b97b95643151d9d18eedb66ec4d36712c3ca34950f4dfb58cb3c32e113bebd3f4677565067098", 0xaa}}, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r5, &(0x7f0000003d00)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x404c010) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000010900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001007767310000000000000000000000000014000000110001"], 0x80}}, 0x4000000) close(r0) 1m37.887442664s ago: executing program 9 (id=4599): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x4ca80, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x301, 0x7, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40845}, 0x8404) write(r2, &(0x7f0000000340)="0a000300010000", 0x7) (async) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) r6 = socket(0x10, 0x3, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r1, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0, 0x5c, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000780), 0x8, 0x71, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000980), &(0x7f00000009c0)=0x4) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newchain={0x34, 0x64, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xffe0, 0x3}, {0x3, 0xfff2}, {0x6}}, [@TCA_CHAIN={0x8, 0xb, 0xa0}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc880}, 0x4004000) connect$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x5, @any, 0x4, 0x2}, 0xe) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x60, r4, 0x5, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1, 0xaf}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3e4}]}, 0x60}}, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) (async) close(0x3) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r9, &(0x7f0000000580), &(0x7f0000000200)=""/166}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r10}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000019500000000000000"], &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) (async) socket(0x1e, 0x2, 0x0) 1m37.875475769s ago: executing program 9 (id=4600): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x1064, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x1050, 0x1, [@m_csum={0x104c, 0x9, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x10000, 0x5, 0x10000000, 0x2, 0x4}, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x1064}}, 0x0) 1m37.812064012s ago: executing program 37 (id=4457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2b8}, 0x1, 0x0, 0x0, 0x80}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100000000000000000000a48000000030a03000000000000000000020000020c00048008000240025c06e11c0008800c00014000000000000000040c0001400073797a31000000001400000000000000000000000a6efef4b9fca36c83edc25bf838231a8e36f51eecd48d0540e30f097b517073002a00"/133], 0x70}}, 0x4000) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000040b", @ANYRES32=0x0, @ANYRES32, @ANYRES8=r0], 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x50, &(0x7f00000a2000)={0x0, 0x0}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3, 0xffffffffffffffff}, 0x4) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x4000004) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(r3) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket(0x8, 0x3, 0x3) ioctl$sock_netrom_SIOCADDRT(r6, 0x6180, 0x0) sendmmsg$inet6(r6, &(0x7f0000003740), 0x0, 0xc6091) socket(0x840000000002, 0x3, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYRES64=r2], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xd}, 0x94) r7 = socket(0x29, 0x3, 0x120) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYRESHEX=r4, @ANYRES16=r5, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x24000800) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6cfeff8a2db6e9800147659dd2d47c2941666d74ff", @ANYRES16=r8, @ANYBLOB="00012abd7000fbdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4880) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmsg$kcm(r7, &(0x7f0000000300)={&(0x7f0000000240)=@ax25={{0x3, @bcast, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast]}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000b00)="2b5f2f7f32be6fcff20335d0b6fe7ec219ee4b4db24ba46805d50ea26a21bf004d96c7b9013040aa0251c2c58fff324d19b169df19b7d70f67c0664a97e78cbe861cc4c7ef72eb483446aab007ffacd2c1cade930541a7df23df3c411897844a3d5ad60a9ec0b69191ef5867ae1e50d4321d7ccd0ed3a2ea2297b3c33c71243495cc223545aa8a743c38ceb8deafd1984ad11b37699032165a66b498814233b54ef1557d1e6c60f96f45463d05000000000000004aeb714756b76bca215056f9086242c23fb5e42bcb4e47429dd9", 0xce}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="38000000000000008400000000000080990a01e467e5167b2540c9b2d2525ba3106f0c688db8ef1acf06c38bb23527b05ee79dbf436fa615b80000000000000001000000080000004a9cc08e4cb1ace72ca127e28cb3c3ca6da1675a3e81c322d566dc6c5b9d9e261373ce2d4e08349502932ec5b6df8d0cd57eaff991df6edd1571a3627fecf004fd940ae51849e660833d9242bbfb5c7931cbf9e987f49b2234ab4c68fa0fe3833e8fa2b6c197b4fa0604fa7bb10b83b5039e73f18fe5054bc4ddf9f9403295a3c087e8743f9c560806d035d49d14f266a7330130f0010ecf0da5656c77fffc43a874c91700000000"], 0xf0}, 0x200040c0) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r7, 0x0, 0x20, 0x0, 0x0) 1m37.795803592s ago: executing program 9 (id=4602): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x15482, 0x35288}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MTU={0x8, 0x4, 0x2000}]}, 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x240}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x20000002}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffe000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x801, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4004, 0xc4b0}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_MTU={0x8, 0x4, 0x43c}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) 1m37.477128247s ago: executing program 9 (id=4608): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xb0000000, 0x2, 0xd, 0x6, 0x8, 0x3}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xf0}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xb0000000, 0x2, 0xd, 0x6, 0x8, 0x3}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xf0}}, 0x0) (async) 1m28.007751136s ago: executing program 8 (id=4711): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x2000018c) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) (async) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000280)=0x2) (async) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000280)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b0400000000000000000200fffe2c0004802800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a300000deff0800020073797a3200000000140000001100010000000000000000000500000a39427fb017a258949db00b14847c02d73853ed8b169b4acfc53b31ddaa76de31f0d7de878c6d13586fcbb0519a81597778da66e83386f10722cdaf0eda8e7bfb39093754d1acc97b010aec200855bc767b975c3df1eee5f8d7021441"], 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b0400000000000000000200fffe2c0004802800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a300000deff0800020073797a3200000000140000001100010000000000000000000500000a39427fb017a258949db00b14847c02d73853ed8b169b4acfc53b31ddaa76de31f0d7de878c6d13586fcbb0519a81597778da66e83386f10722cdaf0eda8e7bfb39093754d1acc97b010aec200855bc767b975c3df1eee5f8d7021441"], 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f00000000c0)=0x2) (async) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f00000000c0)=0x2) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000240)={@private0, 0x58, r6}) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@remote, @in6=@mcast2}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f00000004c0)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x70bd25, 0x25dfdbfe, {0x80, 0x14, 0x80, 0x8, 0xfd, 0x1, 0x0, 0x2, 0x300}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r9, 0x8914, &(0x7f0000000000)) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r10, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, 0xffffffff, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r10, 0x101, 0x19, &(0x7f0000000180)=@netrom={'nr', 0x0}, 0x10) 1m27.795284666s ago: executing program 8 (id=4713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRESHEX=0x0], 0x7c}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 1m27.717342016s ago: executing program 8 (id=4715): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x1, 0xfffffffffffffffe, 0x40000000002, 0x2}, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x9, 0x0, 0x28000000000020, 0x7fffffff, 0x2}, 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x4000800) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x0, 0x0}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fcdbdf252100000008000300", @ANYRES32=r10, @ANYBLOB="24002d8005"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r7) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095", @ANYRES8=r2], &(0x7f0000000080)='syzkaller\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r12, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9a77}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000f658936ba392a0945bff7de60210000108", @ANYRES32=0x0, @ANYBLOB="31200000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, &(0x7f0000000200)={'wlan1\x00'}) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10) 1m26.695920628s ago: executing program 8 (id=4720): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x6, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x14, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x1ecd9d2c4ca2c4a5) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x40010, 0xffffffffffffffff, 0x0) unshare(0x62040200) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)}) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1c0000002c00070100000000fddbdf25087c0000080401801716c2e9"], 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001400030500008000ffdbdf25020151ff", @ANYRES32=r10, @ANYBLOB="080002007f00000108000400e0"], 0x30}, 0x1, 0x0, 0x0, 0xc090}, 0x0) 1m25.574469504s ago: executing program 8 (id=4730): bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2f}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="b700000028190000bca30000000000003403000040feffff720af1ff0000000071a4f1ff000000001f030000000000002e0a0200000000002604fdffffff000e61144400000000001d430000000000007a0a00fe0000001f61141c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x1490a90a8ef5c3f0, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r1, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) 1m25.351718493s ago: executing program 8 (id=4733): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x6a040000) (async) unshare(0x6a040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x64, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x3c, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8, 0xa, 0x21}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) (async) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x64, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x3c, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8, 0xa, 0x21}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000800)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000200)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000fe", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0xf, &(0x7f0000000600)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0xf, &(0x7f0000000600)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf2e8a000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="8eabd4c0c48034d70c6006aaf0e953151d41e3aa438ad0f818f3ca6e230aa5b077a897a5165d32bd5407444338d4e74dc23e09008a2002a672aaa2b99549da614d74314e1666d923815da827281bee2de6eda534b2496123977149b4e7a4868d036ec6dc798458742e9c158e0c7d81a62785", 0x72}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000b80)="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", 0x377}, {&(0x7f00000003c0)="fb0319e40c5ecd4b07a17171d28baee3657c915af8f87a68f1fab8aba155cd2f3fbf3905e9463e6b3dacb292462497dcc0271444fad6291651f12e0bb8c77600", 0x40}], 0x2}}], 0x2, 0x4048894) 1m22.455248687s ago: executing program 38 (id=4608): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xb0000000, 0x2, 0xd, 0x6, 0x8, 0x3}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xf0}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xb0000000, 0x2, 0xd, 0x6, 0x8, 0x3}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xf0}}, 0x0) (async) 1m12.646607636s ago: executing program 0 (id=4869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7f, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x20000092, '\x00'/12}, {0x5, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000002000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000005"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x1, 0x4) 1m12.550536803s ago: executing program 0 (id=4872): socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r0 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003400010000000009ffdbdf"], 0x14}], 0x1}, 0x0) (async) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async) listen(r0, 0x0) (async) r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x40800) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000280)=0x50, 0x4) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x10000000, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000180)=0x4) (async) accept4$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x2711}, 0x10, 0x80000) shutdown(r3, 0x1) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x107c80, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) r7 = accept4(r6, 0x0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="ad00"/12, 0xc) recvmmsg(r7, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) 1m12.435708742s ago: executing program 0 (id=4874): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf2509000280"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000780)={r1}, 0x8) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="16cb487743757fac787478549b8b528bcfae3702743fba765dcee076127afafccb3bb4b012fbabcedf1d97381edc5b71d72eee3b1a817bc9e0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r2}, 0x18) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01003400000000000000400000004000000004000000100082b83416000b02000000000000000e030000000000000206000000010000050900000005000000030000000008000000616100"/92], &(0x7f0000000400)=""/185, 0x5c, 0xb9, 0x1, 0x9}, 0x28) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1ef1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) (async, rerun: 64) r5 = socket$rds(0x15, 0x5, 0x0) (rerun: 64) connect$rds(r5, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x4, 0x4, 'veth0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x9c}}, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) (rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000007000000850000005e0000009500000000002200ce08b200000000006dc77d2ac94403e569eb508f5a4cf6e491fd623aa5247e9163db0a732cc939c42bd8de054956e7d0316916a84f77c70c69293c5525725e9d6600e20084"], &(0x7f00000001c0)='syzkaller\x00', 0x401, 0xc9, &(0x7f0000000280)=""/201, 0x41000, 0x52, '\x00', 0x0, 0x1a, r3, 0x8, &(0x7f0000000540)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x3779, r2, 0x5, &(0x7f0000000640)=[r4, r2, r7], &(0x7f0000000680)=[{0x2, 0x1, 0x2, 0xb}, {0x3, 0x1, 0xd, 0x3}, {0x2, 0x4, 0x5}, {0x3, 0x3, 0x6, 0x9}, {0x2, 0x3, 0x5, 0xc}], 0x10, 0x9}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) (async, rerun: 32) r9 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2, 0x0, 0xfffffffc}}, 0x2e) writev(r9, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000280)="8577c28b54", 0x5}], 0x2) (async) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8}, @val={0xc, 0x99, {0x9, 0x5a}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000) syz_genetlink_get_family_id$wireguard(&(0x7f0000000940), r4) 1m11.971691008s ago: executing program 0 (id=4878): bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) (async) close(r0) (async) r2 = socket(0x2, 0x80805, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r3, 0x89f2, &(0x7f0000000000)) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="faffff88b5c7eab51c027bad8bd28a7defd8e9c79a9a95dffdf5a95c011520b49677421f00"/49, @ANYRES16=0x0, @ANYBLOB="10002abd7000fedbdf252c0000000c0099003f0a000016000000"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x8844) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000800)={0xa0000006}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 1m11.842129218s ago: executing program 0 (id=4882): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000063418000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0xb}, 0x94) 1m11.789874581s ago: executing program 0 (id=4884): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) (async) unshare(0x6a040000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x61d0, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40010001, &(0x7f0000000340)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x8, @private1, 0x1000}}, 0x24) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40010001, &(0x7f0000000340)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x8, @private1, 0x1000}}, 0x24) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000230000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000dfb703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000230000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000dfb703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000030000000000002907800000000e400030004009078000000004542000400640002054b00a77f000001ac141c35197667601a7fe6f3e186afb724aa7e850d5277e3cbce1ea43bb5bc2736eb818d352d49026abc6f49293a27e38f5399c70439331433eb9ec0d44898481c7b7b5904932169b7ecb02c6b8ce4d9ef09e70431c71597203d8b36569ad7752aaee67ef9d254f721ec672da25e1d4326443ffb24d3cd33f3ab3eb4958491afa3104df6e5078454a00fec5df0a60ae562eacf98799b"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1f, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0x0, 0x6, 0x6}, 0x3c) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x4, 0x2) (async) r4 = socket(0x10, 0x4, 0x2) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000280)=@req3={0xe, 0x56, 0x4, 0x80, 0x3, 0xd7b, 0x76c}, 0x1c) socket(0x26, 0x2, 0x2) (async) r5 = socket(0x26, 0x2, 0x2) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req={0x3, 0x0, 0xe8c2, 0xffffffff}, 0x10) (async) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req={0x3, 0x0, 0xe8c2, 0xffffffff}, 0x10) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/254, 0xfe}, {&(0x7f0000000780)=""/199, 0xc7}, {&(0x7f0000000880)=""/142, 0x8e}], 0x3}, 0x20) close(0x4) 1m10.342841456s ago: executing program 39 (id=4733): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x6a040000) (async) unshare(0x6a040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x64, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x3c, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8, 0xa, 0x21}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) (async) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x64, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x3c, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8, 0xa, 0x21}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000800)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000200)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000fe", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0xf, &(0x7f0000000600)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0xf, &(0x7f0000000600)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf2e8a000) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="8eabd4c0c48034d70c6006aaf0e953151d41e3aa438ad0f818f3ca6e230aa5b077a897a5165d32bd5407444338d4e74dc23e09008a2002a672aaa2b99549da614d74314e1666d923815da827281bee2de6eda534b2496123977149b4e7a4868d036ec6dc798458742e9c158e0c7d81a62785", 0x72}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000b80)="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", 0x377}, {&(0x7f00000003c0)="fb0319e40c5ecd4b07a17171d28baee3657c915af8f87a68f1fab8aba155cd2f3fbf3905e9463e6b3dacb292462497dcc0271444fad6291651f12e0bb8c77600", 0x40}], 0x2}}], 0x2, 0x4048894) 1m2.724108852s ago: executing program 1 (id=4958): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) recvmmsg(r1, &(0x7f0000001c40)=[{{&(0x7f0000000100)=@l2, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000340)=""/41, 0x29}, 0x3}, {{&(0x7f0000001d00)=@can, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000440)=""/9, 0x9}, {&(0x7f00000004c0)=""/114, 0x72}, {&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/238, 0xee}], 0x5, &(0x7f0000000840)=""/185, 0xb9}, 0x7f}, {{&(0x7f0000000900)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000640)=""/24, 0x18}, {&(0x7f0000001a00)=""/134, 0x86}, {&(0x7f0000001ac0)=""/210, 0xd2}], 0x3, &(0x7f0000001bc0)=""/106, 0x6a}, 0x7}], 0x3, 0x0, 0x0) 1m1.851862645s ago: executing program 1 (id=4969): r0 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, &(0x7f0000000000)="20a8045aaab152524bf78b309c533418a8ba3431620e9cb73f8608065fd58123770ac45d04de96addaee85cca2db23917fd8404efeb9ee88bfba0e8ad1e6b84dc1d2", 0x42, 0x40000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 1m1.78773155s ago: executing program 1 (id=4972): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a4014"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtaction={0x14, 0x30, 0x400, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000000c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x5, 0x0, @void}, 0x10) close(r3) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m1.714253908s ago: executing program 1 (id=4973): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x34}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r0, 0x0, 0x0, 0x0}, 0x30) recvmsg$unix(r0, &(0x7f00000003c0)={&(0x7f0000000080), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000100)=""/183, 0xb7}, {&(0x7f00000001c0)=""/181, 0xb5}], 0x2, &(0x7f00000002c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}, 0x0) 1m1.595854935s ago: executing program 1 (id=4974): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) r6 = socket(0x8000000010, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write(r6, &(0x7f00000002c0)="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", 0xfc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r1, 0x2, 0x1, 0x8000ff, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4000000000000196, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)}, 0x40) sendmsg$nl_route(r5, 0x0, 0x400c0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, 0x0, 0xff00) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000440)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}, {&(0x7f0000000600)="9689ce1fff0f0297b07eef86b521b75595d6a8522eefd57b8fe47eb323247d3d43f65eea1cf2b8a1839abc278b110e88a0fc544d7fb3ea5d381d6c81a2f4c1e29e8a", 0x42}], 0x2) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) pwritev(r3, 0x0, 0x0, 0x8001, 0x80) 38.679708092s ago: executing program 40 (id=4884): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) (async) unshare(0x6a040000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x61d0, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40010001, &(0x7f0000000340)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x8, @private1, 0x1000}}, 0x24) (async) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40010001, &(0x7f0000000340)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x8, @private1, 0x1000}}, 0x24) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000230000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000dfb703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000230000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000dfb703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000030000000000002907800000000e400030004009078000000004542000400640002054b00a77f000001ac141c35197667601a7fe6f3e186afb724aa7e850d5277e3cbce1ea43bb5bc2736eb818d352d49026abc6f49293a27e38f5399c70439331433eb9ec0d44898481c7b7b5904932169b7ecb02c6b8ce4d9ef09e70431c71597203d8b36569ad7752aaee67ef9d254f721ec672da25e1d4326443ffb24d3cd33f3ab3eb4958491afa3104df6e5078454a00fec5df0a60ae562eacf98799b"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1f, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0x0, 0x6, 0x6}, 0x3c) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x4, 0x2) (async) r4 = socket(0x10, 0x4, 0x2) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000280)=@req3={0xe, 0x56, 0x4, 0x80, 0x3, 0xd7b, 0x76c}, 0x1c) socket(0x26, 0x2, 0x2) (async) r5 = socket(0x26, 0x2, 0x2) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req={0x3, 0x0, 0xe8c2, 0xffffffff}, 0x10) (async) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req={0x3, 0x0, 0xe8c2, 0xffffffff}, 0x10) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/254, 0xfe}, {&(0x7f0000000780)=""/199, 0xc7}, {&(0x7f0000000880)=""/142, 0x8e}], 0x3}, 0x20) close(0x4) 38.674511052s ago: executing program 1 (id=4991): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x144}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xfffffffffffffea4, 0x2, [@TCA_FQ_PLIMIT={0x0, 0x1, 0xffffffff}, @TCA_FQ_FLOW_DEFAULT_RATE={0x0, 0x6, 0x40004}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x2b3}]}}]}, 0x5f}}, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e", 0x3d}, {&(0x7f0000001400)="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", 0xd18}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd34", 0x92}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x645c, 0x4, 0x40, 0x0, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060018"], 0x4c}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) r6 = socket(0x8, 0x3, 0x0) (async) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000180)) 28.293989931s ago: executing program 7 (id=5101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000006c0)={0x9, 0x9, 0x5, 0xce}, 0x8) socketpair(0x23, 0x4, 0x5, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r3, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x47}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x22}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x80) (async) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r3, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x47}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x22}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x80) bind$rds(r2, &(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x30, 0xd, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x30, 0xd, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 28.115784037s ago: executing program 7 (id=5105): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000380)=""/250, &(0x7f0000000300)=0xfa) listen(r1, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x80, 0x40, 0x0, 0x6, {{0xd, 0x4, 0x0, 0x2, 0x34, 0x67, 0x0, 0x33, 0x2d, 0x0, @multicast2, @local, {[@ssrr={0x89, 0xb, 0x38, [@loopback, @remote]}, @lsrr={0x83, 0x7, 0xbb, [@multicast2]}, @rr={0x7, 0xb, 0x76, [@loopback, @private=0xa010100]}]}}}}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x18, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x7, 0x0, &(0x7f0000000040)) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x2}, 0x94) ioctl$int_in(r6, 0x5452, &(0x7f0000000540)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) r9 = accept$packet(r8, 0x0, &(0x7f0000000080)) r10 = accept4$packet(r8, 0x0, &(0x7f0000000240), 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x39, &(0x7f0000000000)='/proc/sys\x00s/sync_\x00le\xf44n\xfd\x9a\xbc\xff\xff\xff\xff\xff\xff\xff?\x11\xc8\xf7\x15\xcc\xd2\xf1\xfb\'%\xa0\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) write$tun(r11, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r11, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x64ed68c0c0d3dc21, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000680), r13) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000480)={r9, 0x5, 0x8000, 0x3}) openat$cgroup_ro(r14, &(0x7f00000004c0)='blkio.bfq.empty_time\x00', 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000104000000000400000000000000", @ANYRES32=r12, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r12], 0x48}}, 0x0) r15 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r15, &(0x7f0000000500)={0x2, 0x4e23, @remote}, 0x10) 27.982350666s ago: executing program 7 (id=5107): r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="1f0bf70a69aaac5ea4e6707bcea00a84a643e623b68b11fc699af9b0c31038b47eb04fd1a477814f80b1a3e2a080258248bd38d9cad50ff43741b2e4d0c4292ca11da4d70df788a0687924970427b843e9", @ANYRES16=r0, @ANYBLOB="00032dbd7000fcdbdf251b000000080015000000000008000100", @ANYRES32=r1, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8008054}, 0x40) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000001c0)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ffffff000085000000060000009500000000000000", @ANYBLOB="18080000000000000000000040010000851000000600000018020000a911d3a377c9b9154c0caf599f867ab0589513564d8e78de630c5e2d214c6bdfa41dab572161594da4927273297ed5861847279099ee5d645aec8227a70ac3d856fad8508a183e94bf8ddc8ef038d36962c04c0d898531e1a32c5de8453bbd75f34aab"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000018000000060000000000000700000000002e5f30002e615f00"], 0x0, 0x2d, 0x0, 0x1, 0xa1d9}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000200000000001200000085000000230000003f0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff378}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000000800004", @ANYRES16=r2, @ANYRES16=r1, @ANYRES16=r3, @ANYRESDEC=r3, @ANYRES64=r4], 0x48) getsockopt$rose(0xffffffffffffffff, 0x104, 0x4, 0x0, &(0x7f0000000040)) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r6, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e24, @broadcast}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000180)=0x9c) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b04, &(0x7f0000000040)={'ip6erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e23, 0x100, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x3c) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000500)={r7, 0xc0, &(0x7f00000006c0)=[@in6={0xa, 0x4e22, 0xd32a, @remote, 0xa}, @in6={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e20, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @in6={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @multicast1}]}, &(0x7f00000005c0)=0x10) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="bc0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028004000100000000002400168014000129912c18816fd2832f08000200ac1414aa0c000280050001000000000008000740000000004000068014000400fe88000000000000000f0000000004001400050000000000000000000000ffffac1e000114000500ff020d00000000000000000000020001"], 0xbc}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}], 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r9, &(0x7f0000000500), 0x0}, 0x20) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000180)=@req={0x28, &(0x7f0000000140)={'team_slave_0\x00', @ifru_data=&(0x7f0000000040)="2ed703d15739a631cd3e7c2598ecea0f0bc2f3230f27995796cbd6f4ab3df1ec"}}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) 27.368098678s ago: executing program 7 (id=5115): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x6, 0xfffff010}, {0x6, 0x0, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) recvfrom(r1, &(0x7f00000000c0)=""/247, 0xf7, 0x2000, &(0x7f00000001c0)=@phonet={0x23, 0x0, 0x9, 0xe}, 0x80) 27.23908376s ago: executing program 7 (id=5119): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f00000013c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r6, 0x7}, 0x14}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000004000140000000051400030076657468315f6d6163767461700000000900010073797a3100"], 0xe8}}, 0x24040800) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f0000000280)={{r7}, "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"}) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x2c, r8, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6}, @GTPA_FAMILY={0x5, 0xd, 0x26}, @GTPA_O_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) 26.975796383s ago: executing program 7 (id=5124): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) unshare(0x26030400) (async, rerun: 64) unshare(0x4e040400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x10010, r3, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) read(r4, &(0x7f0000000400)=""/155, 0x9b) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 32) r6 = accept(r0, 0x0, 0x0) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000002060568d76b815f82d1d848f3e983a6000000000000000000000e5f2b044f9ace4098af48bb8c2a3b0c000780d2be0000000000000500014c8500080006000000050005000200000005000400000000000900020073797a3100000000100003002861"], 0x54}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) (async, rerun: 32) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) (async, rerun: 32) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0xffff, 0x380000, @loopback}, 0x1c) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) ioctl$SIOCX25GFACILITIES(r6, 0x89e2, &(0x7f0000000200)) (async) accept4$unix(0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000340)=0xfffffffffffffd91, 0x80000) 23.591998902s ago: executing program 41 (id=4991): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x144}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xfffffffffffffea4, 0x2, [@TCA_FQ_PLIMIT={0x0, 0x1, 0xffffffff}, @TCA_FQ_FLOW_DEFAULT_RATE={0x0, 0x6, 0x40004}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x2b3}]}}]}, 0x5f}}, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9", 0x7b}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e", 0x3d}, {&(0x7f0000001400)="9af390e2aadb61017e08249a2485ad46a590a90910858e1ceefc66db2ed8f32bf6be0e2f94e7e4db6454393a128402ed26580c7c5ebc85db639da17c927c23dbde640ab030889e8b61f26d270bc73b21c9ac8ba542e6b4ad2cd147059128ba038e4b9ebb20537f437b23b46ec790720e1fb74cef3c677e9978662a84cf2fcf73c73a5e763358496737af6284226bad34fb9083f87d853ab78c816cf32c90bd5c40ff6446214552d29745d34e0c4bfa623d00e5cbb393972371503122a0f44135db5654ace67cddb85a12df91fcf994fc680afe5d34268b23447589ef3f5383d152bf6dd104984297180f896ec8b1ba50952c5ab76e144f5636692d7cf17922c9b447ed6d59553ec6085e07413034875c1ae0947280e1a6f0d5e7f23b32e56ead8590d3269fdcb624cc870968b2f100bf3bc3d2ab105a5f61456d4969181fbd207b6f4d6d9ca0a1920daabec06d0c5e276d18f2571e88373dd41af9080d72aa88b10f8900b48acb61a61007dd4dd0e9240af5382a26f68bd706a83d8df76a4a5d02b39d07f97c4f86dad9e14eb957cc4be52b027a462262589929e3d035188dd9f0561e3ba2de6bafe743d9ae397e9aa423644fba8b2d6425ac1cd78c76e52e04d3a29e74075625fb5e674bab02843991ce804e0d04961f2978f3749c5ad83f355ae5da936fd6e0178d2bd12aacbe0205aa9a15579fd61d738f8d36412e814ba500edaf28ea68b0e96fb1839acf8416d8f5df7fad3b663f68e2ee5784fd01c7021130a490e629b1348acf3479e0392ecabbeeb18ec421c26e76f6f5c480e7decc85a0583a56180f199d26090b10ee5057ec4c1e04be948a5960acda014d646cf91bfdfb9d327f8ab545f8b41e8dbab94f195b189a8642a6b95e0ceb36b640fbdfe21925cc110bd2ef2c3fe24f12f95771b60e2ffbc47e58b2237b5574cadc32aab0f0db3202e4adc44a0651ef97703957857cfb6022578c97802f486bd7f48129f0c120700d0b70e048618a9f1de9f34dbb1f92dadc86f09e6288eb1bdbd1f700cc2df781654dfd57d9da779607080d3bc6dede5818aa8d6c99fa1ffdbb6a1a43040fe1379cf2a8b4b862db428c29e388a6e6b863bc818c2139a0d4238f10baf22f498b6629181f997ac280547e92fe300d0f8dd8b6724df5aa14be73cd630b808a29bfb52707b8db7d0065bd753b3773f8df58c74ea56f4582caa2fa8532b8049fd9ba775afc5b92b767ed0b35d4c086d9af6f7b7ed96f5f9d3734e703fc683fe0ed82b7763c67734067759e27b60036a3b4c53526716c175d75a9fa6ed019d3e1047bcb9c6510665de23cc2802804a0c3a347faba392282df430e5e6141f9eb660f7cb0eaedb832a7880c953bc0188c1f28eb466799e2768886ef81096847f50159278b572b0cca7744d6a572a81ddd2bcea73da3c8a59680bcaaadaf95e1fe91e41a8036835975b072a9587c560e3da854c96c64011755d08fef5228bb2db62a445bc0b9e17dea88854cd6a7c8a288727d5690fc4941978dee5eda2dbdc85915e7a2fdae978adb217b3f6b31cf69b51b9f805f8b447a4868b442933fc0e03860a7084230ff8fdff70665717f9c0bade31f87f5de99643e800feceb0dfdd6d1b67d4056a52f0efa2ed2b1142132c6242d917b46d939aade6a362bf586058385d7fcef1b4e358a093d6781b9e9bf280520ff083a6026bf701237e38927ed21209dbf407a7944ef687b93619b181b9112477fa902f391a7163f93bec2d6369ffba644f4fd5139890fb66bd6017a61d9fd043154eb0ab0de3046cdb8a182a553cece0701a922518cf09cd1ab421ee8ec677a8d453cd8c21bdaa5f8dd804dfe80fffec8c4d778d5e260b65a2f0d3c1b09e9d6bd1f3746aa7fe07374a028a89fc96eb66affbcddfaa01a72058566e33af88e37f43fbba73c0423d54079fad54c136ec5fcd61d5134f833ab44f6cfbc2348871f190ac4c4bc20c97fcb29f4823a8e3bf76f85b10dfd33df0001646a7e0b2ee3e14455f6c8f225b80eed457e772cb2504ded46a24e911428decff4a130be797b6530c33ec1be7b0dd4df6206eca1c4c8dfda776336bcb876d80043195de773fbcf0d3abe53e9a38da0af7a6598815a71ffc937203f5a04e87eb532e579d66d42b06b791b6ebd50e7855f6645d29434bb0280fdf1511b163b12838f39ca864516711501bbe345d46b34ab2f0d8317d45376f73e302a90f5c362b18e1840668a9f27e90f2b715b4b6ae7a6dc387583110a42fd4977635275f7244a1912d0c67cf53d5da8a384839020d71db234fcc4388a735275763f01b2b4967e99f551e489bcc28f693a1e688ac8c39a971f8ae9d973cc7adac4a642a7a84ecca2d0bd24c300b94dff82fa4f95c1ce5fdb9128466443cb8442048e53cd46334d59774de0e2ceefcd4cd2e6c9da7cdc2162346111f7da236d72f33d509d73133951e1a3f84fa7e767cf56fc9bfb3986c5ec501634b92a780f63e0ee61e3d25f51c39b975ea587027a101059e9386f1eaaaab8ebfd5c453e9f86c851f9c78e4e06184f04fa9a54ba0bba5d18108c2973f50cb626eca6e3d5b2907b00d2ad4fff9546482815291bd220fa31c1d1a735562174644fe06131e31ce66064fa6a02d5bda756994f81163b97e854274183bbc4ddeb9bb823944afc3e07caf510732df2835fd11de82cb318b88f4d385adb57ac73ffe7f3d1e387848766e11000c94123f2a7d33a93d3b030ebb1206f26221a1ceef44a708693796ab80add7d9b6907c653c6becc21d49c380b3fea419276a387ad482fc3614fa7cac6ea9d07dffc85c1d3f01f57aa9816f32e3237b05d191c3f3d2ed31c313346176d18dc53307afc3aea306a5b44189b6fce062cd21319f1c0a5cf3bc84aaff275491d5fa26d12173e134bdb776478c27502dd4786cc079b6eb00d05f1c8c27a2e326ef11ad1866529b60e6a9e9ae776f01071e364a4604dfe79fbdfc9828628e50940398cc6b925ea8806ee3bbd22129c5d37551eb5e1ef613b027aebce0a83963888396f3e7c953e5416b522fd3a0660fefaea0fc97ca7d82191e2e8f23ca2aa56e8b9de2e1d3e093b8c3f4d7e700b7193b3d83c5b6bb1e7ff2a1c574c9d15ad79631573e41d46653601c510ec7cd0d6125c8e600ebb41247988c28305ac47eead817fecf4460c2221a399134d1d11363401090691a7bf1f58f27a09311d6591cef3d879570667e9e10eebf7df32ec9417f0132be9f1485b167b58b0bf88e31fb2d3957fa05a4d3f191c1d1caa189fc0c11c04287ceaee39a147aced6e3e9c2fe8f51a9823401ad4bf92b0fd4070aae1fe886b8c160a0d2a1507259e58c5608654f05f444877bf9ec215933d6f0a89a3f6199a23c535d8cf9541f2eb970261b12325884fe64330f67a8b07748522c58e5096a04afc67f08b4b0b3da2c9e010b8f079fabdbd187b3d1f69b9f8110e0ec3a488aa8b8563745f7e9fdc1faeaf542858f417d3a75d416e8f55c46cd962d9ac96ce8b56f7a0e22350d2b9e8a537780edddd519fd43baec4834aa6abb0b8c4007dfbb9dac74bf3802108966bf7d5a2999d16110ad0d2cab1c72c2d0ddce14e5043ee62fe9b722355dd2b7e728a589da59ef46dae95f1b89c22d5487a855bc1ee5f9d1427f643e2fa8748e07e6b51e365ab5e23e32401acc229c09f56868532ca611fa678b13f7f580392aee230878817f9dadc9b071245f75b7f626ab6f3342e8d80c3735e3a37646dfddeddec617fd3c155bb0735dd74eb1b71b957645978638f6bab555681b1e0047f7ccf370051f8fd42b171d16291a79ab5aad78940d12129d4de9f1d0a17f539fe333c7e3af31703dd147044ab4efd666cda9942c14cb25fae13cdb497bf7d71094192765df81234cf3dc9d38cdf373a06f5b723ab987708c8ed1b1b7c14cf55663298e752621be837d9e8f806552e0d605515dc0346354c76536d7681bac9dce48479abf18fc8b45862471ce1d75957a23c6bee5b2eb0022d557b6ad6153124e4594d26cc4a6e70de89086e0365039d215c2d9c7d881766b564b58be42104b4a4cad074eb1600be3a98fd7e19296066ee8a8d141d1b9f070c06c58c4f6e5c73b43022f39a13e701220064ceac7951818b1a88f68b2241efc57d37f224161533c75e279500896058aa03ce9571567172b57dbd40e1e14f8068cec77cde8da6aebf54039de9c7251289192616dca9d90bcc3ca24708dde9309d00d9a61c7be33f5858729ca3726fd8e8fdf911e58d3908797ec7b53cec49a8d51a3a30c3172b4277a8be98346488f10385ab3396ba34390f5f44a6f51606a392c25f4b6c65d3cee98004c5312b9f2a6349facbb7f0491fa0505ddc859e25963fae59e8ff05282c108be2a267690c8d53cd2ab7189b997cca8f0905ebcdc86a29b851546284870b348d54023e16262e78c034885696e931e1b2a7b2c23c59ef21393370a16f068ce46115e6b1c3ba9375bb9cb644ec9032bb2eb57eb4897284164af7a8b0a7019a610985dad9f1ce9f12a9a2399ee63fd6d21ee4adc8cbeb7ffe22b50e14c959042197ae45c8f8db2a5d03d6d9c2d5e826112a0bf6d21854a6d5fc77604e4117d7e9a92804c7db9f3eeca536b61a079654f8afbccc140602db833e537ac3c591b98549b5c70734e98b5a47eb9cc16ab2e0ed4f32ff69558e5dcfa2a3b54b8cf3326d4cdd7e9a0c19e4b703070a996acb40a882c2c512e38b4e3d31fe918a35", 0xd18}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd34", 0x92}, {&(0x7f0000000a40)}], 0x3}}], 0x2, 0x11) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x645c, 0x4, 0x40, 0x0, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060018"], 0x4c}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) r6 = socket(0x8, 0x3, 0x0) (async) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000180)) 20.57960973s ago: executing program 6 (id=5187): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)=@newqdisc={0x150, 0x24, 0x400, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0x1}, {0x3, 0x8}, {0x6, 0xa}}, [@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xa}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2d}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x29}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7ff}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x21}, @TCA_DSMARK_SET_TC_INDEX={0x81}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xa}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8000}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2a}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000}, 0x5) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000780)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000007c0)=0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x47e47}]}, 0x38}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000190001090000000000000000021800000000fd010000000008000100ac141400090005000a0101020c00168008000300e000000208000b0005"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$alg(0x26, 0x5, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x240, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) 20.38362028s ago: executing program 6 (id=5189): socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)='\b~', 0x2}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f00000007c0)=[{&(0x7f0000000340)="b7e7ed", 0x3}], 0x1, 0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70b529, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x33c13, 0x4440}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004840}, 0x20040000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x60, 0x1403, 0x100, 0x70bd2a, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x20004000) 20.313950105s ago: executing program 6 (id=5192): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)={0xc8, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xa0, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @loopback, 0x6d2}}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x4}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40804) 20.181700453s ago: executing program 6 (id=5193): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3, 0x80}, {0x94, 0x0, 0x0, 0xffffff81}, {0x6}]}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3ffffffffffffa) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r2, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000140)={r9, 0x3, 0x20}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r10}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r5, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) 19.15737786s ago: executing program 6 (id=5201): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x44011}, 0x2000004c) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x50042008}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffd}]}, 0x54}, 0x1, 0x0, 0x0, 0x840}, 0x44010) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r4, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd991}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x2400a050) (async) r5 = socket$inet6(0xa, 0x2, 0x2) connect$inet6(r5, &(0x7f0000000400)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000440)={@dev={0xac, 0x14, 0x14, 0x3a}, @broadcast, 0xffffffffffffffff, "bf3d15fba7a55dc2fd194f49c6b824f5abe1748e4a562cd59618e8f53e23f66b", 0x6, 0x80000000, 0x6, 0x10000}, 0x3c) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x5, '\x00', r3, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x50) (async) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x4, 0x0}, 0x8) (async) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_ext={0x1c, 0xa, &(0x7f0000000780)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_fd={0x18, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x2}], &(0x7f0000000800)='syzkaller\x00', 0x80, 0xe5, &(0x7f0000000840)=""/229, 0x40f00, 0x2d, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0xd, 0x10001, 0x100}, 0x10, 0x18a4a, 0xffffffffffffffff, 0x4, &(0x7f00000009c0)=[0x1, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x4, 0x5, 0xb, 0xb}, {0x2, 0x1, 0xe, 0x6}, {0x3, 0x3, 0x0, 0xa}, {0x5, 0x2, 0x9, 0x8}], 0x10, 0x1}, 0x94) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x15, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000580)='GPL\x00', 0x1, 0xad, &(0x7f00000005c0)=""/173, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, r7, 0x8, &(0x7f00000006c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0xa, 0x6, 0x1}, 0x10, r8, r9, 0x0, &(0x7f0000000b40)=[r5, r10, 0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r5, 0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)=r9}, 0x20) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x240080c1) (async) r12 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r12, 0x0, 0xd4, &(0x7f0000000e00)=0xd, 0x4) r13 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) clock_gettime(0x0, &(0x7f0000004740)={0x0, 0x0}) recvmmsg(r12, &(0x7f0000004540)=[{{&(0x7f0000000e40)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000ec0)=""/220, 0xdc}], 0x1, &(0x7f0000001000)=""/212, 0xd4}, 0x8}, {{&(0x7f0000001100)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001180), 0x0, &(0x7f00000011c0)=""/91, 0x5b}, 0x84}, {{&(0x7f0000001240)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000001580)=[{&(0x7f00000012c0)=""/42, 0x2a}, {&(0x7f0000001300)=""/24, 0x18}, {&(0x7f0000001340)=""/9, 0x9}, {&(0x7f0000001380)=""/27, 0x1b}, {&(0x7f00000013c0)=""/132, 0x84}, {&(0x7f0000001480)=""/143, 0x8f}, {&(0x7f0000001540)=""/53, 0x35}], 0x7, &(0x7f0000001600)=""/39, 0x27}}, {{&(0x7f0000001640)=@alg, 0x80, &(0x7f0000001b00)=[{&(0x7f00000016c0)=""/59, 0x3b}, {&(0x7f0000001700)=""/236, 0xec}, {&(0x7f0000001800)=""/241, 0xf1}, {&(0x7f0000001900)=""/184, 0xb8}, {&(0x7f00000019c0)=""/2, 0x2}, {&(0x7f0000001a00)=""/202, 0xca}], 0x6, &(0x7f0000001b80)=""/4096, 0x1000}, 0xfffffff7}, {{&(0x7f0000002b80)=@can={0x1d, 0x0}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002c00)=""/183, 0xb7}, {&(0x7f0000002cc0)=""/134, 0x86}, {&(0x7f0000002d80)=""/23, 0x17}, {&(0x7f0000002dc0)=""/150, 0x96}, {&(0x7f0000002e80)=""/56, 0x38}], 0x5, &(0x7f0000002f40)=""/150, 0x96}, 0x6}, {{&(0x7f0000003000)=@un=@abs, 0x80, &(0x7f00000030c0)=[{&(0x7f0000003080)=""/3, 0x3}], 0x1}, 0x1}, {{&(0x7f0000003100)=@qipcrtr, 0x80, &(0x7f0000004300)=[{&(0x7f0000003180)=""/185, 0xb9}, {&(0x7f0000003240)=""/17, 0x11}, {&(0x7f0000003280)=""/50, 0x32}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)}], 0x5, &(0x7f0000004380)=""/33, 0x21}, 0xe0}, {{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f00000043c0)=""/234, 0xea}], 0x1, &(0x7f0000004500)=""/40, 0x28}, 0x1}], 0x8, 0x10002, &(0x7f0000004780)={r14, r15+60000000}) (async) r17 = accept4(r13, &(0x7f00000047c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000004840)=0x80, 0x800) sendmsg$BATADV_CMD_GET_GATEWAYS(r17, &(0x7f0000004940)={&(0x7f0000004880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004900)={&(0x7f00000048c0)={0x24, r4, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x2000c880) (async) r18 = bpf$PROG_LOAD(0x5, &(0x7f0000004cc0)={0x1, 0xf, &(0x7f0000004a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xaef7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @generic={0xa, 0x1, 0x8, 0x1, 0xd}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000004b00)='GPL\x00', 0xffffffff, 0xc0, &(0x7f0000004b40)=""/192, 0x41100, 0x1, '\x00', r16, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000004c00)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, r8, r2, 0x3, &(0x7f0000004c40)=[r6, r6], &(0x7f0000004c80)=[{0x5, 0x5, 0xd, 0x9}, {0x0, 0x3, 0x2, 0x1}, {0x1, 0x1, 0x0, 0x5}], 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000004e40)={0x3, 0x8, &(0x7f0000004980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff1}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xac}]}, &(0x7f00000049c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x1, '\x00', r16, @fallback=0x17, r7, 0x8, &(0x7f0000004a00)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000004a40)={0x2, 0x5, 0xa, 0x1}, 0x10, r8, r18, 0x7, &(0x7f0000004d80)=[r10], &(0x7f0000004dc0)=[{0x5, 0x2, 0x5, 0x8}, {0x1, 0x4, 0x1}, {0x1, 0x3, 0x0, 0x6}, {0x2, 0x5, 0xf, 0xb}, {0x3, 0x4, 0x5, 0x5}, {0x3, 0x3, 0xd, 0x6}, {0x3, 0x1, 0x2}], 0x10, 0x7ff}, 0x94) 18.96665687s ago: executing program 6 (id=5202): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4421028040000100240001006c625f286173685f737461747300000000000000000000000000000000000000050003000b00000008010400080000000800070000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000076000d0b0000000000000000000000e8e70400000000000000007c9b2d9b2a05d663"], 0x20}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x18) r4 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r4, 0x61d1, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40010001, &(0x7f0000000340)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x8, @private1, 0x1000}}, 0x24) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r5}, 0xc) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)=@req3={0xe, 0x56, 0x4, 0x80, 0x3, 0xd7b, 0x76c}, 0x1c) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) close(0x4) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 14.682158807s ago: executing program 4 (id=5234): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) recvmmsg(r0, &(0x7f00000055c0), 0x0, 0x40000300, 0x0) (async) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x1) (async, rerun: 64) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async) unshare(0x6020400) (async) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd, 0x21}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}]}}}]}, 0x5c}}, 0x0) (async) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, &(0x7f0000000240)) (async) unshare(0x40060100) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x2e, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0xffffffff, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffd}}, 0xe8) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 14.432475221s ago: executing program 4 (id=5235): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r6, 0x101, 0x4, &(0x7f0000000180)=0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x5562, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfa, {0x0, 0x0, 0x0, r10, {0x3}, {}, {0x2, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8000000, 0x0, 0x5, 0x401, 0x0, 0x9, 0x18, 0x1, 0x80, 0x7000000, 0x5, 0x8, 0x9, 0x8, 0xd8c, 0x10f8000, 0x1, 0x4, 0x6, 0xf, 0x7ff, 0x1, 0x88d, 0x8, 0xfffffff9, 0x7, 0x6, 0x7f, 0x4, 0xc824, 0x5, 0x401, 0x6, 0x0, 0xe, 0x7, 0xe, 0x101, 0xf, 0x0, 0x7, 0x8, 0x6, 0x4, 0x3, 0x7ff, 0xe55, 0x5, 0x4b19, 0x8, 0x8, 0xc5c, 0x9, 0x3, 0x5, 0x8001, 0xfffffff8, 0x9, 0x5, 0x9, 0x2, 0x8, 0xfffffffa, 0xfffffff7, 0x1, 0x6a41, 0xffffffff, 0xf, 0x4, 0x3ff, 0x7f, 0x3, 0x81, 0x10, 0x3, 0x400, 0x9, 0x7ff, 0x5, 0x40, 0x2, 0x2e, 0x0, 0x1, 0x5, 0xcf9, 0x2, 0x0, 0x4, 0x4, 0x4, 0x4, 0x3, 0x7ff, 0x5, 0x0, 0x3, 0x2, 0x6, 0xa5, 0xfffff000, 0xb, 0x6, 0x1, 0x8, 0x80000000, 0x800, 0x9, 0x6, 0x2, 0x0, 0x80, 0x800009, 0xfffffffd, 0xfff, 0x7f, 0x7, 0x2, 0x7, 0x1, 0x89c, 0x9fae562, 0x6, 0x5, 0xff, 0x7, 0x401, 0x800, 0x6, 0x9, 0x7, 0x3ff, 0x800, 0x2, 0x3, 0x6, 0xc71, 0x81, 0x80000000, 0x3ff, 0x8, 0x7, 0x2, 0x800, 0x200, 0x2, 0x7, 0x8000, 0xe265, 0x7fffffff, 0x0, 0x0, 0x4, 0xc, 0x7, 0x0, 0xc88f, 0x2, 0xffffffff, 0x6, 0x5, 0x8000, 0xe, 0xfffffff9, 0x6, 0x40, 0x990, 0x801, 0x5, 0x7, 0x1, 0xfffffffa, 0xb, 0x9, 0x2, 0x3, 0x8000, 0x5, 0x1, 0x10000, 0xd41b, 0x128b5072, 0xf, 0x4, 0xf918, 0x7f, 0x3, 0x8, 0x2, 0x0, 0x0, 0xff, 0xb, 0x4, 0x96a3, 0x1, 0x8001, 0x7, 0x4, 0x1, 0x9, 0x6, 0x9, 0x3, 0x5, 0x631, 0x8001, 0x3, 0x10001, 0x44c, 0x5827, 0xa99, 0x3, 0x400, 0x0, 0x8, 0x7, 0x10000000, 0x3, 0x3, 0x0, 0x1d99, 0x3, 0x4, 0x0, 0x4ebe3ccc, 0x1, 0x3, 0x10000000, 0x7, 0x8, 0x4, 0x8, 0x7, 0x4, 0x5, 0x7, 0x0, 0xfffffff9, 0xffff, 0x81, 0x9, 0x6, 0x3, 0x19f2, 0x3, 0xe, 0x4259, 0x7, 0x3, 0x81, 0x58783dd6, 0xed2, 0x5, 0x5, 0x9]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r11 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r11, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r7, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13.499956195s ago: executing program 4 (id=5247): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) (async, rerun: 64) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f0000000040)="df3b46a1330000000000000000000000000000f1", 0x14}, {&(0x7f00000005c0)="b72abab9439ca41f5cf14d6435575ba774ee5f5c23ff2f5176f5773d08a15668ec280cfe4ea416cf769dbf978a8191bbe006e0da50029176c0f24e3ff4d3e895a2afbf52cef2fe1ca31edd842b126ec4be67e6e3624b9ddf806fc146c645ec1d37fe7e3b025c156d5d520104b53f7fb2af436201cfd5dca170edea5a190e4786bfaac544b60f514d7ef420526c467f14790dcfa5ab915d7dbcdf2765bbcad014c991f8b829c79f53586de79f0b987ad796f9de4a6e53136a07a39ab1f5a2ce30aded70a9b72d1beff7e8b6405fd6331e5635ee71e809be2d58f412dcd7b2e856d692dbfed19045ff13244acce351b6e450395568063569c71ea80a04f83fbe6ad1d0862fb97f816576c4844da65d751ee1fdc522ae1158670de297cdb2117bc0adc1486e016a6bcc922a162fce6a9ecc8c42b0c44c566004eda037864e5f339bbb0998cdaf2b8e49ae003659bc033668f7c8e550197ed95c420461254ba1883dbd9403672d579cee85c37f103ee9a350a768286017158784baeb063c8c684b91b022b0db2238b679092a1f6909f0cd9228500e088f5cc7bac4c0dc56e80fedac93554aec79715ce02e8bf3fcbd70382f619bfe3dcf06890d8542022ee58bdfb075d319c9fc8474cadc8de5c3dd3f682d3f68324d0af7a727064053ad84c94643eef190783c616467628f84620044c084b80e3e57bfcdf293c9c36b4474a52398b35e49e2ad4a4ac090bffc5cd27d3c69b4ae5f841d5b0766ccd36d25eb58d8f01621a05744b79ede39019ab9d7a1946353d8f3b7f833ce1a102a8c97a9e3f32138ffafd305448f2518ccdb7eef594a890eaeaff3f876f742fec22669a97085ed93b18228ecbe9e354e8f69967ca749fd2b1cf026665ca912e3fc0188b294519078b46676052de4fe22798290bd1e232c9791fc01ddb4ae776b5769143df2867042e8a3ddfa8e786bd8a244076956d4ab137939ad381650dd4fefd2b942a98d6f2edfd7019ae473e7608647b86d643e8ff3d7d4e89ed826e4b8c6e8fed224c528d805ade85c5b45261b2692c0f403dec050bd973b0999df214689f4402dd1598a16b0c7671e5e204a00b06376ddee7cb99292a8b835c0b451642b71f2ffa1aeea56255817b2384bfe4f8213ccfc1f762f250592896102e5f6d34cdd726bc0f86af52fd7c4483d32e23e5af770e960c7445b8e67b6086f0cadcd22d0d4bdadc31b5a94dd687379dc6e078210ccc71f8e67eb58d330394425ab17e55d1ca8f868f6bf738af291d2293c3dfa2ccff25061ded22878b3cc6532d19e5a00d1f0f1b9de35305fac2c6cfd5d77a2b02618735b7d392738bd5cd3eabb7039c790a9f193913f16e06605d405d6a0cf0011a2e5f935d8563fef1722692dd266c3d320b9f5eeb2a4b2f72155522f0ed72ff1efa0b6ee78e70d3d45241609e7f87d7bcfe1af71159baa11ad667a0ead3986b2b06500ba2615ee966ea86ca68d02de4802bd9ef18dac5ba53ca98b90df49ef4e3268ceee538973620e5a60513ea330989642626420b67dceebc569478657aedeb62c45b079348796923ad1fba5a99e6b150cf97ba2a570150053309c6dca7fa352fa1678c9b919fbc47ae0a84175a7fc25a00fa5888cb017e8d8225fadb29e34bd3c5bbccfb22a83255fec3967c991d5b3e6719ade82fb7ef85c8a4b9e7ad8ef2a3a7bc78de424572224affb1f9e0c5a969e61ee2ebb4f247bfa09384bdad04438f2efbfae303d47c3afe7e8d3a157b2a6f37572ea3ecc441dfb208ba755f781f144e58d80aea590abcfccbe8678ec6de47511f9d61cc408cbbe90eeab2cffe6d1a48dc3eb4e48e228fd43cafd7ff2c85c3ed52e99fe16887be28fcd2cd4ba4cac414c92c96294fa7d628e4356c748c173f790a7f30071d0bd53817c78d163249c7402b222b8f28668cae7afd17b97dbaf10b75b61409ca6f5b285d1ab09207c5a91c68b0d4b5da6d6b5a495c8debd7f4400e56d9e22d1cc330f782f2b5441a31b9ccf35aa1a151219cdcff5ab8b240af5b5a751eca67773c057412a935e3a7a367b2bcd28463904ee040a586d6f4f969cee56d55b6b4d97d1fe93b67e2f6bd47925054c4702ec8969a1a6211ea8f6783ca0e8ae333922ce19eceb24e2ff714a0208d2489a62f299aa50cdbfe5a826e872ab231bbddf5bd2fca92d4460379e05e13ff34a200fd921dcb67a002873bda8d86536cddaccb54eb72dd4e399fe9195ad5574ad85d9ed2eaae4106234f0a8db05a230ff377b59b54fd0919d1b86b938622ae6098f003db7f4d45d6874f54c33064ce6184dccc99fece2d994e9572d4840b0cbdd704fd70b4f625912d48a512339f883533768f09a4f614583dfb72defe713ee38f61184df279461b7d35becd8e67d01f0ec27e901d88215554d5a69db373a662085733d09ad9153e7d432c94f872ff7cd72995b3a581ea17722ed13a191b366208f75661112b1a7d42c252c907488ca8dd8f819d4618b0053d4bcddb3b5975cb8615ebc472e052552ee74d5253174a2b0cb96e1eaf6349b6c39be975123ee72b0ffe1367df7aba54de26c9135a3422d21067034551be5efc5daf8b8f59bc725e4fd171378fd9f16a785f1b0378823c85eec521e0b2aca70b7b72b719a20eb2fb0addc0b05851c8e181607f49dad7323bc255309097584c2099574db1ed7940fd16796aef19d30acd714dc1f898716df64db87d852eddf2f86e78fd7fd64868b4cb6cc626efcdea49c4a2779a0e777bbe23968e14233a810d9883680894de93023a8deae51ccbf32e6d1e53618ebee95c761221a33bc3263fff0f5ae23e14dba0418cf3f31effcb36956e06c57a17620044260419a208ae1d2296ec9472d44be74a8ed0a33a23181acdef8c7d2695ce9485ed8d17d9f6f30b9b128ee0ba15c42cbf6059bcfef008c09db8855343f79c3ce1c4d79077c8a62237d4e400a5aa88e7424f2f99df6c2070d6ed071f4968376581e20e52d64e9c4f8a6f73bb33f5b6b62c1deecc85bf789565fde14e4454306ed8f09af08afb360ee4fb40dd5dca0be43ccff75e5c0ef85ea7c521cb4840d61e99e1ce4661e721446d5a571cddffbc3643ec9b58237fd416376906bdca09485c2c80f82b23e8e7bbf22035fdbcacd804ae3771fd616901184ced46987d533017eef717e9b34a5531c3efe2d77c9b6cb0617382d69951545378a4118e71c64a1f16d096a8f933580922083d0536b90ae1715c63f682e8241b42e1646b0c52e34aa9c91efe2b6b787ce0747d4ff0dd07d6ebc9ce27e0ef35705eb7b78763a9829b464523ff3ed9078aff6ee29e6e7a59a5243825e8bb9235f8e49a9dfb5932536666c3dc75b29e515dbca4c84268cf23cd7b6da6814328a3cb26d7b1d6c28e20b36f9a2c9e2fcf663c314f72f37d2b8f405cfc686a6b35400435be0eab01709c2c4b3005491cbb0b560e33547b77ba9f25f01b194e20534199a3786ddfaf0a75aafb65cd4df4da7b5f98fe72a8bc7d045339fd41508cecca791c717a10d4fed8aa69eec80955bd899a6f8aaf3411be40568149e631ccbe17c68f85e87b58da81ba78def8b1a48c49b2dc7613f7d6ea8b158bed077666d37d1caba9a23b7cb2772e780f70872113e5bcaebaf9f9499f651dc894be3bba1e99d58b33d60c0eda397df91d7cf9fb072f247fa9a9f59c4f59c4284a3832ff0a1f9ce8f6346cb5c08a9dcb2851c7f169af688fc13f00cf9519ade547671698caaa3f4d4921fee83753b9ab0875707836343eddb5b87bec86aae023c9571b8e389ff3f4c692b6fb19686105249ce033116777d919ceb4559a67ee6b6ad9d4b53d2be24315429de3bf201107fe7dff9cbc92dbf9173391d555b0a1b8ea3252fd7d7fd15d8a3cc70cecdbdd43c4edcc4bb2fbbf646d5ec7dad0d3156a513d14184e0c316f8155e774f7dcea485f904828edf28510d692b66b1500c5a704371c2188a2812bd323de012f36a79674082b5f5e9f7f4ce1a75ed854b71555e9fcd1f0322c22a9e543674c79a74404e08e61860f505dc56e1b52977b9a9af18be4064b5f6aa7c891382bbbe65e70a4cee33176570341a525fb6b25c0b20bfa3f2ee4a01584f259f43c3b63a2dfc376f435827211379ab3ca8912cbe01e4f837920666fbda682f6954d1c156f21e12547b885f485c38f62e765013144be8ca92b1d4872790a5c02671517f6a8f0ceb247e08c64268ad8970b57bb6d077c9b8ebe7fb1183087c9a3baee06100609204be588621253b9b120c08db9f28c2d38c9bc3f59018bb7216d73186048770d1e556faa49df23a40a64b40cdda2041dccf5619db09b7a7795fd7eb631c0e0bffc3b64422bf6acd84b7fae8bd05b057260a4d7c4851829c7bbf0b6f27c5db0ff10f42df3528f79dc9bbd591965259cd0389deb124b1fadc5dfd3ade9742d29261379ea3d98929512371dec991f0636fbda5dac355a04e363beeb4751781d9cef3a0b6ac6500895d223ad43ed75cac8b0a868253fffa10bf6c2de99c687fd056e075cf0632b6d8ed2263ca08ad95b6f335a3b6d8ab7801422ac8597441ac1bbe289b50af31eb221d19a2d3177d4ad1056d616295e89471e65d811b8fa4fe2c0c12793f43ef7e75c7f657f6c26ca9cbae63ce99301069ab257ae77c38778d35afd326d569c626a68f3904b2c376dfaa05568892f346f86fb05e71fb751e09cd22525cb63512a7d2e4670bd31109b87818278e66dc73fa9667e35c5bc6588cd36d2b62592a4103803d93c194f8edd5d20c6597231321b909bbb3c1d13408e5cf27728883e333b391222e6b6665454892dfedd17a1066f1145163e1a31ba9a3e3cee925e55d794b89462a0a092a639ccd4a24514083cb68224c87c18f0bb39ff721cc598e686b5fef169bc30f9ec6df397905f8340f6ae7ad826aac774cc46bfb9dfe8192e9ef10e8355d7c2810269eb73c7ecb8d3ffa33437142b8e596cdb778cd3cdda5bbbd09a8ea919929adbc63ff1004490c45a9ea59def65fabc884c39beac1b74a218f59c5e31ba85dcc4b8bd81d7a66d8aaf0edb64b505f760442e16fb7f07a069aba88601c3ace27762cef8196da3d44b14796b04e7fa3bab37209190a1de6e6ecfd99353279ef643766814fa7fac7254eba59bff3546bf21afc7445a4f1bc92c7b013f34962ff029e0f2926acf6c8a25fecea5b0b810656c981535492a2a4159dcfd0bf98085dc9612159fa0ad837a22eaffce80405367931ef3eacbf5a663175acc306eb075c52265d0c6dfaab", 0xe8f}, {&(0x7f00000033c0)="d6d038091fcf458c47fa6bd5a8edbf8f968178124964b4b012f804", 0x1b}], 0x6}, 0x40000) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 13.343820586s ago: executing program 4 (id=5249): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r3, 0x1) connect$bt_rfcomm(r3, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa) close(r3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x6c, r2}, 0x38) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x9770, 0x4, 0x6}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x3, 0x8}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@const={0xe, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x30, 0x5f]}}, &(0x7f0000000400)=""/235, 0x28, 0xeb, 0x0, 0x400, 0x10000}, 0x28) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000740), 0x76, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0x1}, &(0x7f0000000540), &(0x7f0000000580)='%pB \x00'}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) 13.186327685s ago: executing program 4 (id=5251): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000240)={0x11, 0xf6, 0x0, 0x1, 0x10, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[], 0xfdef) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000080)={0x0, 0xfff}) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x1100, 0x0, 0x7ffffffffffffffc, 0x10002}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r4, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x48, 0x0}}, 0x10) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f0000006580)=0xd61, 0x4) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000012c0)=@bpf_lsm={0x1d, 0x1b, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x20}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7ff}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000200)=""/4096, 0x41100, 0x60, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001200)={0x3, 0xf, 0x81, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001240)=[r0, r0], &(0x7f0000001280)=[{0x5, 0x5, 0xb, 0xa}, {0x1, 0x1, 0x1, 0x3}], 0x10, 0x4}, 0x94) sendfile(r4, r6, &(0x7f0000001380)=0x1000, 0x0) 11.933081554s ago: executing program 42 (id=5124): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) unshare(0x26030400) (async, rerun: 64) unshare(0x4e040400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x10010, r3, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) read(r4, &(0x7f0000000400)=""/155, 0x9b) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 32) r6 = accept(r0, 0x0, 0x0) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000002060568d76b815f82d1d848f3e983a6000000000000000000000e5f2b044f9ace4098af48bb8c2a3b0c000780d2be0000000000000500014c8500080006000000050005000200000005000400000000000900020073797a3100000000100003002861"], 0x54}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) (async, rerun: 32) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) (async, rerun: 32) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0xffff, 0x380000, @loopback}, 0x1c) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) ioctl$SIOCX25GFACILITIES(r6, 0x89e2, &(0x7f0000000200)) (async) accept4$unix(0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000340)=0xfffffffffffffd91, 0x80000) 11.079896506s ago: executing program 4 (id=5268): socket$rds(0x15, 0x5, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0xffffffff, @loopback, 0x3}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@mcast2, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30, 0x16}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0x8, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffc, 0x0, 0x9}, 0xd6, 0x1, 0x1, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x210004, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1000, 0x0, 0x2, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) (async) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) socket$netlink(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) write$cgroup_devices(r4, &(0x7f0000000080)=ANY=[], 0x47) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r3, 0x0, r6, 0x0, 0x47, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) (async) unshare(0x6a040000) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="48e3000077621f8482e52924924e2842265021be0c47c4090c1d406a55c14790f414c777cfae242de0959dd9a547646f49b6af7e85b3bd96e46e265da2e791ba4d9b5451966db04d672213cf91052863cd2512ec6dc8974f053e3e676e", @ANYRES16=r2, @ANYBLOB="24042dbd7000fcdbdf250200000008000a01050000002c002580050005000a0000000600040009000000050005000900000005000100ef000000050005000b000000"], 0x48}, 0x1, 0x0, 0x0, 0x8845}, 0x40050) (async) listen(r9, 0x0) (async) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) 3.90326129s ago: executing program 43 (id=5202): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4421028040000100240001006c625f286173685f737461747300000000000000000000000000000000000000050003000b00000008010400080000000800070000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000076000d0b0000000000000000000000e8e70400000000000000007c9b2d9b2a05d663"], 0x20}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x18) r4 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r4, 0x61d1, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x40010001, &(0x7f0000000340)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x8, @private1, 0x1000}}, 0x24) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r5}, 0xc) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)=@req3={0xe, 0x56, 0x4, 0x80, 0x3, 0xd7b, 0x76c}, 0x1c) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) close(0x4) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.368012523s ago: executing program 5 (id=5346): r0 = socket$inet_icmp(0x2, 0x2, 0x1) unshare(0x24020400) unshare(0x6000100) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x604400, 0x0) vmsplice(r1, 0x0, 0x0, 0x8) sendmmsg$inet(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="fc94eeb529f378c9", 0x8}, {0x0}], 0x2}}], 0x1, 0x4008004) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0xfffffffffffffdf4) socket$inet_icmp(0x2, 0x2, 0x1) (async) unshare(0x24020400) (async) unshare(0x6000100) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x604400, 0x0) (async) vmsplice(r1, 0x0, 0x0, 0x8) (async) sendmmsg$inet(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="fc94eeb529f378c9", 0x8}, {0x0}], 0x2}}], 0x1, 0x4008004) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0xfffffffffffffdf4) (async) 3.305207756s ago: executing program 5 (id=5347): r0 = socket(0x15, 0x5, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="69ff00dd0000012056b4eb442a5471b93d1f0040004000"/32], 0x50) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) (async, rerun: 64) r4 = socket$key(0xf, 0x3, 0x2) (async, rerun: 64) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) (async) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r5}, 0x10) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (rerun: 32) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async, rerun: 64) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) (async, rerun: 64) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) (async) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x600000b, 0x6e071, 0xffffffffffffffff, 0x80000000) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@newtaction={0x19c, 0x32, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x188, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0xfffffffffffffffc}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x158, 0xd, 0x0, 0x0, {{0xa}, {0xa8, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_KEYS_EX={0xa0, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0xc}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x0, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x0, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x0, 0x1, 0x2}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD]}]}]}, {0x85, 0x6, "ffa449d9761ef16726776dec6241caa3f22d0d9342f80236f936bd3ef1e79546997569dfbd790cbe522afd4bdf460831192b2853ef4df2135f9b6b5af1ffb28ee7336385111fbf0e1c765859b2bdf9e1537a4456fc0734a7191bc790125b398f04f1fbe7d3747c05cd4ff46816004908d8a0a74e1faf0b4b6d152f699610ce759a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x20040011}, 0x0) 3.134407425s ago: executing program 5 (id=5350): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x2a, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100000000007c0000000000000a64000000060a0b0400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000340100000000800024000000000080001400000001508000440000000020900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d300000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014edb202002d900ef6853cc5242fbeb8c8cbd25831830d17571d8191dd745ee24da986e2a251946eed9f"], 0xfc}}, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r5, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000000)="8f4b", 0x2}], 0x1}}], 0x1, 0x20) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="833a06914bfd2d0f39190741f59256476b8af6f9be568d46d34e9e8e25d86b47e346c8f7b2e47b7ecbad6eb7419c6aa5d363ecc72d772af272fb5efe7e51f90128a24623ed07de3613df803f8631f9cfa604ffcc8b41ba429c912e5c4f3dec31ea67c22a29971470467da043c53d0cb1cd730cc662a0a4226e852eeecfcd80f179bba2194b871c008e64db4c071fb99d6705413e54a735"], 0xfdef) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000100000000000000000000007112bf000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x400, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x1, 0x6361, 0x7, 0xffffffff, 0x1}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 3.082873744s ago: executing program 3 (id=5351): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lblcr\x00', 0x0, 0x4, 0x408}, 0x2c) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x6, 0x41e}}, @TCA_TBF_PTAB={0x420, 0x3, [0x4, 0x2, 0x8, 0x1003, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x8000, 0x8, 0x255, 0x6, 0xa, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x23, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0x5, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x7fffffff, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x9e, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x1, 0x203, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x6, 0x5, 0x6cdf13a3, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x2, 0xfffffffa, 0x2, 0x18d1, 0x0, 0x3, 0x9486, 0x80, 0x2, 0x7ffffffc, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8, 0x6, 0x0, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0x3, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x3d, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0xfffd, 0xcbf, 0x4010000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0x2, 0x8dc3, 0x20000005, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x2, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x105, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x7, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0x7]}]}}]}, 0x468}}, 0x0) 3.012577361s ago: executing program 2 (id=5352): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="3f5e4a8e345482212cf7cd3702e8ea44dbc7f31f", 0x14}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) recvmmsg(r1, &(0x7f0000001c40)=[{{&(0x7f0000000100)=@l2, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000340)=""/41, 0x29}, 0x3}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {&(0x7f00000004c0)=""/114, 0x72}], 0x2, &(0x7f0000000840)=""/185, 0xb9}, 0x7f}], 0x2, 0x0, 0x0) 2.927029346s ago: executing program 3 (id=5353): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$kcm(0x2, 0x100000000000000a, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x7a28, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r3 = socket$inet6(0xa, 0x8000e, 0x800000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) accept4(r5, 0x0, 0x0, 0x80000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8b26, &(0x7f0000000100)={'wlan1\x00', @random='\x00\x00\x00\v\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8001}, @exit]}, &(0x7f0000000200)='syzkaller\x00', 0xfffffff4, 0xde, &(0x7f0000000340)=""/222, 0x41100, 0xa, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000280)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0xf, 0x2823, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0x1], &(0x7f0000000480)=[{0x5, 0x4, 0x0, 0x3}, {0x0, 0x1, 0x0, 0x8}, {0x0, 0x4, 0xa}, {0x1, 0x5, 0xd, 0x8}], 0x10, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0xa4) bind$ax25(r9, &(0x7f00000000c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1}, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@initdev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) ioctl$TUNSETOWNER(r0, 0x400454cc, r10) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000140)={0x5, 0x6, 0x3, 0x8, 0x5, 0x35, 0x2, 0x7, 0x9, 0x3, 0x81, 0xd4, 0x2, 0xf7}, 0xe) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x75150000) socket$nl_generic(0x10, 0x3, 0x10) 2.925904843s ago: executing program 2 (id=5354): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x8, 0x12, r0, 0xfffff000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0xd, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) 2.797299693s ago: executing program 2 (id=5355): bind$rds(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='b ', @ANYRESOCT=0x0], 0x44) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) splice(r1, 0x0, r4, 0x0, 0xb, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, r5, 0x25, 0x0, @void}, 0x10) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r6, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={r6, 0x1, 0x7ff, 0x9}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r7, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="85000ad68565165857b5e2efc0500000ab00000095000000000000703f2033a0be96aa96ce5200"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x6}, @window={0x3, 0x1, 0x401}, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r9) socket$inet6_udplite(0xa, 0x2, 0x88) 2.796495509s ago: executing program 3 (id=5356): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c0000000000b83048da0000000000000000001f000000000000000000ac1e0001000000000000000000000000d85e6a5a8c410132eeffce2dad0000ee00000000000a001f00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac0000000000000000000004000000000000000000000000040000c06b6e0000000000000000000a0010000100000000000000"], 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000f1c403fc00000000000000000000000000fffffffffffffffffeffffffffffffff000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000001000000000044000500fc0200001000000000000000000000000000000033000000"], 0xfc}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r7, 0x0, 0x1843}, 0x18) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x20008080) socket(0x15, 0x5, 0xffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r9, &(0x7f0000000200)={0x1d, r10}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0xc39, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r10, {0x1}, {0xffff, 0xa}, {0x1}}}, 0x24}}, 0x80) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) shutdown(r5, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) 2.681178109s ago: executing program 2 (id=5357): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) (async) setsockopt(r0, 0x7fffffff, 0x10000, &(0x7f0000000080)="ecf963c32c018bbdda8e70f8997ddb5a057ce49b3cde2cc19b379169843133b18fe6bb8a7b425f7e4ff7703ee0f2bbe9ae13b6a94cbfc3e2e861b781e287569b35fb543bf2ef70ad7f6835acebc63efad7ea29531e51557d3b304f73187995d334ae7f0030d02a3c5ac2972e736ae50545e53011e0d9272ad802c16127af318c849a5fbe7a7a078cbe1f7a481cedc237ba7952f642a2b309dc5de4e6713df81e7310143483f5adcff8a6154e91e59f012c4e0872de3f89294890ad908994c2c174f60716e15df12af23ddad2", 0xcc) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x80, 0x0, 0x81, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x28, 0x24, 0x4ee4e6a52ff56d41, 0x2000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xffe9}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) 923.968537ms ago: executing program 2 (id=5358): close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) (async) socket$kcm(0x2, 0xa, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000100)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) (async) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) (async) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @empty}}}, 0x108) socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x5, 0xffffffff, &(0x7f0000000000)={0xffffffffffffffff}) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$pppl2tp(0x18, 0x1, 0x1) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7, 0xa}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) connect$pppl2tp(r6, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @multicast2}, 0x2, 0x7, 0x3, 0x4}}, 0x2e) r8 = syz_init_net_socket$ax25(0x3, 0x0, 0xca) write(r8, &(0x7f00000001c0)="878fddcf6056d5ba88327afc732f477402f6663e9305d32020c617e901db20dfcb2ec9606912d7f5da1067399e2c558949f99630de2bfbf662fd03649d992f0f3d5289dd3dce0e952e01a26fa3c8761a05189eb3738d7a319fd5a9118711b9925c69da8a9e1428037d2f760829d0bcefff9483e6e661cac0d6784c227e108f33abfd53c6978b729576e95b8f1f21c7bc96ff2ef641638e35485d5f7f910644de23da3bc2d9ace88bb16d69663e8cbabc8a7e6c35ce7b81e56c67e5e902e11f03150b6c73791f3cdfc12f79963144f755c0bfd82cabb255bce97dd62aeab6a5b4ee7821af", 0xe4) 816.004955ms ago: executing program 5 (id=5359): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="980000000002010400000000000000000a00000504000180440003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb06000340000100003c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014004400fe8000000000000000000000000000aadb6a0fbe46d58e34bb275f99a78ae486f7059a4ae0f99da3f76aab71b8f3404006c73aa145dd079a38514bf78fc91534fb6382fd7a85e9ac3b46fdde886a08ec0407b6c5bdb0d93a22f641c29f71955a19d600ec51c679b02e261faa2c7097a939d694e9de578f8ca3c9d99a7bff3b483891b800261923a158ba93111fed573fad953894b3676a1433aed9eb32b7b87e9e87b1a21eb118fd7fa87dae44c24eed9e0bf7"], 0x98}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000340)=0xfff) connect$unix(r1, &(0x7f0000000280)=@abs={0x1, 0x0, 0x44e24}, 0x6e) connect$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) syz_emit_ethernet(0x39b, &(0x7f0000000980)={@random="66722ebc9d5d", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "829a10", 0x365, 0x3a, 0x0, @private2, @mcast2, {[@dstopts={0x5c, 0x31, '\x00', [@generic={0x9, 0xf2, "96141a8a5459ea0dc847a7cee4cfa95bc688dcd600ed7726ecec7bddc8588b0b71b0c875171e0cf26276b3cb3ccdd095cbc52b104be6d9eed6f6b422344f6124c893debf1b24695c8995d4857b0cde36142b81d5d85ae4ec6ae153ee90ee1331ce1fa869d7b86026f7b652a33dc22bd708297ecaf248b4eef65a16ff394a26f7007292fad9a328955cbc1f69c0e831597446a593032ae6126b90f8f9f0036954efbd31bf312b4fd1a8eacab9668e6099d6dc34bc9bc1370880d9ff9d2dfefceeb840e77d0cc66d03ce02d2c1dacb615416f7b1cbda9276fc846c68c68b05f54498a0ca0baa7e0aad298b0212653a31983076"}, @generic={0x8, 0x3d, "7989799a63d7aff3d03f6c2e3058260fb437272e2707bdc08d306e052daab5ca9863959244d1fc06f8e627dc30ea1e8f12afb2045bab6b68330e2e7fb4"}, @calipso={0x7, 0x50, {0x0, 0x12, 0x1, 0x4, [0x8c, 0x2, 0x7fffffff, 0x9d86, 0x9, 0x3, 0x8, 0xe, 0x1]}}, @pad1, @enc_lim={0x4, 0x1, 0x80}, @pad1]}, @fragment={0x0, 0x0, 0x6, 0x1, 0x0, 0x8, 0x67}], @ndisc_ra={0x86, 0x0, 0x0, 0x3714b77c57c2c77a, 0x9, 0xa5, 0xa, 0x8001, [{0x2, 0x6, "fbe3e1aa6b5b74a23b313984e45e09c81f590d5fae86ffba8596c2874be23cec5a4972ca3c49306a5a015c191b13"}, {0x1, 0x18, "ea5e0e7ac8fc3919ecd7263f279356937ac4810a1f095fdbde43f757aada483bd7a0b93ef38a5968c7a4198cabbdffb4bee00511a6212b4942a41e39d0e6ea99ac8406861b7f67e4a19e514fe01f16aa49e80d1fcd1b161179b415d2439bf3f3bffd3a2e4d265617096129d2730c1c2d4d910fcc83aa54668e694b9f332dabadeac5fc7786affe875399b5afa589bda23b063dd2ec0e05465f11971facec5226805702cb26a050ff95911116456453efc786837392b2d920c8681880a653"}, {0x1f, 0x10, "592dee6088842a8d320f3bca718a8d21a44c1ebff7ada721bef3dcd2add4b0635f6df06ab0332fb1b2e91273ee0e1fd697ba535e4983eabdc559e69fc93937e9ab417e69e08917f2b1000ab3ba6eca774153012e5d8478f04ad1126141a350831c844491730fb9188d759ff0e40299ac38a23bc0a678b72a6dbdf823cb0699aeb32c2b1f80"}, {0x1, 0x7, "9541bc37cf115b800c532846461ec3f6bd793b0997d62b4a16468171510f87f774ffb4fd2c6229bf787979eca9e5838c45aeda90b64ef4d04fb1a741"}]}}}}}}, 0x0) 770.665497ms ago: executing program 3 (id=5360): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) close(r2) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=[{0x10, 0x29, 0x43}], 0x10}}], 0x1, 0x4000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0xd, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x73, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x8, 0x10}, 0x20) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000040)=0x5f, 0x4) socket$nl_route(0x10, 0x3, 0x0) 765.011954ms ago: executing program 5 (id=5361): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x94) (async) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x80, '\x00', 0x0, r0, 0x0, 0x5, 0x4}, 0x50) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x33, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x26, &(0x7f0000000800)=[{&(0x7f0000000480)="336b8dc38b8bd8e24a8a509d14db585de2c8c2ebeaebb81c12ff66955959a58729", 0x21}], 0x1}}], 0x1, 0x4000011) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) (rerun: 32) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) (async) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) (async) setsockopt$inet_tcp_int(r6, 0x6, 0x15, &(0x7f0000000340)=0x3, 0x4) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb08004500452c00000000002f9078ac1e0001e00000010000655800189078040000000000000086ddfeff0000000028d3f105c5d5837110f9d8ff580782bbdf1a0017e774d99fbf125d8c1d430f206a1ceaca512223e1b4b3ae218558883bf87162807bc2a143833aa3dd7afe4f629d20c370ddd7b7967e78629b30e448d9239ba6a4655cef202c82b0b63f48685f2210f98a9505b52386a72fb3d7b32431892d15ca2358dfc1f598f18c5a67165b4609ad2aea8db1678f4701e3f2f49c5540ebbe6b666432fe5acad0c5c261f90bc64dc911808e428aa78041b0a18ac8c4cffd1af30cde"], 0xfdef) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x288, 0x1398, 0x1398, 0x288, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [], [0x0, 0x0, 0xff000000, 0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10, 0x61}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x16, 0x3f, 0x1, 0xe, 0x7d, 0x376d, 0x8}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x62b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 647.802821ms ago: executing program 3 (id=5362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf2e8a000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000ffdbdf2e02"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_EMATCHES={0x38, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0x67e6}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0x3, 0x9, 0x5}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x881}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) getsockname$packet(r6, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000001000370427bd7000fcdbdf2500000000", @ANYRES32=r8, @ANYBLOB="890c0400000000003400128009000100697069700000000024000280050005000300000005000a000000000006000f0003000000080002000a0101020800000001800000f012b612c8df49db5d6e81f947bd61e1"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) 436.862942ms ago: executing program 5 (id=5363): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x9}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r5, 0x1ff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={r5, @in6={{0xa, 0x4e24, 0xa4, @rand_addr=' \x01\x00', 0x5}}, 0xfffffff9, 0xffff, 0x4, 0x7, 0x2, 0xc35d, 0x6}, &(0x7f0000000040)=0x9c) (async) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="010000004008a300"/17, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ef1d62ee7e92"], 0x80}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x70, 0x10, 0x403, 0x70bd29, 0x2, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @gre={{0x8}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x10}, @IFLA_GRE_TTL={0x5}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_IKEY={0x8, 0x4, 0x5}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x483e}]}}}]}, 0x70}}, 0x0) 57.852606ms ago: executing program 3 (id=5364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYBLOB="0148"], 0xc4}}, 0x4004) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x18, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="571900000000", @ANYRES32=r5, @ANYBLOB="131401002b9201001c00128009000100626f6e64000000000c0002800500110001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="f6eb09454900000400000000a08f", 0x0, 0x804, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x4, "56cced6eba59c01298b0e73e0e6544cd"}}}]}, 0x48}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) getsockname(0xffffffffffffffff, &(0x7f00000001c0)=@nfc_llcp, &(0x7f0000000240)=0x80) r12 = accept$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @remote}, &(0x7f0000000300)=0x10) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000340)={{0x2, 0x4e21, @local}, {0x6, @multicast}, 0x4, {0x2, 0x4e22, @remote}, 'wg0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES64=r10, @ANYRES16=r10, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r11, @ANYBLOB="18005a8014000180050006"], 0x34}}, 0xc000) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00418848bd700000000600000000000000180008ac0f0004001e00"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 0s ago: executing program 2 (id=5365): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x0) (async, rerun: 32) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e1d, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5, 0x1}, &(0x7f00000000c0)=0x8) (async, rerun: 64) recvmmsg$unix(r3, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000680)=""/237, 0xed}], 0x1}}], 0x1, 0x142, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x64, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x20c89}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) kernel console output (not intermixed with test programs): (bridge_slave_1) entered disabled state [ 562.184112][T22354] bridge_slave_1: entered allmulticast mode [ 562.192915][T22354] bridge_slave_1: entered promiscuous mode [ 562.273511][T22354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.302243][T22354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.332298][T22385] tipc: Enabled bearer , priority 0 [ 562.378325][T22385] syzkaller0: entered promiscuous mode [ 562.383797][T22385] syzkaller0: entered allmulticast mode [ 562.396879][T22354] team0: Port device team_slave_0 added [ 562.412307][T22354] team0: Port device team_slave_1 added [ 562.438105][T22385] tipc: Resetting bearer [ 562.462478][T22384] tipc: Resetting bearer [ 563.445863][ T50] tipc: Node number set to 1955602699 [ 563.608900][ T5839] Bluetooth: hci4: command tx timeout [ 563.612386][ T5843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 563.631231][ T5843] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 563.644985][ T5843] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 563.653061][ T5843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 563.661260][ T5843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 563.945836][T22384] tipc: Disabling bearer [ 563.955797][T22354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.962764][T22354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.989299][T22354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.007756][T22354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.014960][T22354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.041390][T22354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.094601][T20839] Bluetooth: hci6: command tx timeout [ 564.201419][T22354] hsr_slave_0: entered promiscuous mode [ 564.210364][T22354] hsr_slave_1: entered promiscuous mode [ 564.218801][T22354] debugfs: 'hsr0' already exists in 'hsr' [ 564.225135][T22354] Cannot create hsr debugfs directory [ 564.232442][T22388] wg1 speed is unknown, defaulting to 1000 [ 564.266348][T22370] chnl_net:caif_netlink_parms(): no params data found [ 564.277426][T22395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4362'. [ 564.287471][T22395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4362'. [ 564.296940][T22395] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4362'. [ 564.503301][T22370] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.511415][T22370] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.519595][T22370] bridge_slave_0: entered allmulticast mode [ 564.528814][T22370] bridge_slave_0: entered promiscuous mode [ 564.570163][T22370] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.578878][T22370] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.588037][T22370] bridge_slave_1: entered allmulticast mode [ 564.597219][T22370] bridge_slave_1: entered promiscuous mode [ 564.661991][T22410] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4365'. [ 564.675692][T22410] x_tables: duplicate underflow at hook 3 [ 564.705557][T22370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.752608][T22370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.838869][T22370] team0: Port device team_slave_0 added [ 564.852730][T22370] team0: Port device team_slave_1 added [ 564.933605][T22388] chnl_net:caif_netlink_parms(): no params data found [ 564.946164][T22370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.953394][T22370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.980138][T22370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.994045][T22370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.001802][T22370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.028199][T22370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.099759][T22354] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 565.127878][T22354] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 565.177838][T22354] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 565.204882][T22370] hsr_slave_0: entered promiscuous mode [ 565.212171][T22370] hsr_slave_1: entered promiscuous mode [ 565.219536][T22370] debugfs: 'hsr0' already exists in 'hsr' [ 565.225793][T22370] Cannot create hsr debugfs directory [ 565.231380][T22354] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 565.252582][T22388] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.260214][T22388] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.267823][T22388] bridge_slave_0: entered allmulticast mode [ 565.276130][T22388] bridge_slave_0: entered promiscuous mode [ 565.287974][T22388] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.296147][T22388] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.303406][T22388] bridge_slave_1: entered allmulticast mode [ 565.310778][T22388] bridge_slave_1: entered promiscuous mode [ 565.366947][T22388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.392821][T22388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.438285][T22388] team0: Port device team_slave_0 added [ 565.456849][T22388] team0: Port device team_slave_1 added [ 565.517314][T22388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.524256][T22388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.551754][T22388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.578483][T22388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.585875][T22388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.612827][T22388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.684742][T20839] Bluetooth: hci4: command tx timeout [ 565.705220][T22388] hsr_slave_0: entered promiscuous mode [ 565.711648][T22388] hsr_slave_1: entered promiscuous mode [ 565.718042][T22388] debugfs: 'hsr0' already exists in 'hsr' [ 565.723781][T22388] Cannot create hsr debugfs directory [ 565.765235][T20839] Bluetooth: hci7: command tx timeout [ 565.888953][T22370] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 565.909408][T22370] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 565.936532][T22370] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 565.947553][T22370] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 565.981631][T22354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.055443][T22354] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.117153][T22388] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 566.129705][T22388] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 566.150141][T22388] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 566.160909][T22440] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4370'. [ 566.166622][ T8049] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.177012][ T8049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.186677][T20839] Bluetooth: hci6: command tx timeout [ 566.195202][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.202359][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.210414][T22388] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 566.373503][T22370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.463779][T22370] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.504217][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.511434][ T3509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.547380][T22388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.589429][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.596626][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.672468][T22388] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.704708][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.711884][ T3509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.767068][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.774214][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.969332][T22354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.150367][T22388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.364233][T22370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.468372][T22354] veth0_vlan: entered promiscuous mode [ 567.483619][T22354] veth1_vlan: entered promiscuous mode [ 567.517047][T22479] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 567.559223][T22354] veth0_macvtap: entered promiscuous mode [ 567.580919][T22354] veth1_macvtap: entered promiscuous mode [ 567.658222][T22354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.692035][T22354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.756506][ T8049] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.765733][T20839] Bluetooth: hci4: command tx timeout [ 567.769639][ T8049] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.801063][ T8049] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.809981][ T8049] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.846970][T20839] Bluetooth: hci7: command tx timeout [ 567.943236][T22388] veth0_vlan: entered promiscuous mode [ 568.029912][T22388] veth1_vlan: entered promiscuous mode [ 568.050698][T22370] veth0_vlan: entered promiscuous mode [ 568.070433][ T8049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.079226][ T8049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.104879][T22494] netlink: 1028 bytes leftover after parsing attributes in process `syz.3.4374'. [ 568.114137][T22494] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 568.139513][T22370] veth1_vlan: entered promiscuous mode [ 568.182574][T22388] veth0_macvtap: entered promiscuous mode [ 568.192449][ T8041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.206751][ T8041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.222871][T22388] veth1_macvtap: entered promiscuous mode [ 568.240434][T22370] veth0_macvtap: entered promiscuous mode [ 568.248727][T20839] Bluetooth: hci6: command tx timeout [ 568.269769][T22370] veth1_macvtap: entered promiscuous mode [ 568.312017][T22370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.327907][T22388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.348604][T22370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.377885][T22388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.387756][ T3509] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.401288][ T3509] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.424612][ T3509] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.433360][ T3509] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.466352][ T3509] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.475613][ T3509] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.499590][ T3509] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.523356][ T3509] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.669420][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.690603][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.719693][ T9590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.728819][ T3509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.738346][ T9590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.741088][ T3509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.797099][ T8041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.807566][ T8041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.037587][T22522] netlink: 'syz.8.4360': attribute type 1 has an invalid length. [ 569.047285][T22513] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4380'. [ 569.088561][T22522] gretap1: entered allmulticast mode [ 569.127754][T22535] netlink: 100 bytes leftover after parsing attributes in process `syz.8.4360'. [ 569.143113][T22534] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4381'. [ 569.152544][T22534] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4381'. [ 569.162371][T22534] netlink: 'syz.7.4381': attribute type 4 has an invalid length. [ 569.462932][T22539] nbd: device at index 8 is going down [ 569.839935][T22545] wg1 speed is unknown, defaulting to 1000 [ 569.847270][T20839] Bluetooth: hci4: command tx timeout [ 569.896696][ T5843] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 569.906250][ T5843] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 569.914193][ T5843] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 569.924715][ T5843] Bluetooth: hci7: command tx timeout [ 569.940722][ T5839] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 569.948790][ T5839] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 570.197205][T22554] wg1 speed is unknown, defaulting to 1000 [ 570.326931][ T5839] Bluetooth: hci6: command tx timeout [ 570.496746][T22575] wg1 speed is unknown, defaulting to 1000 [ 570.654179][T22554] chnl_net:caif_netlink_parms(): no params data found [ 570.998963][T22554] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.009118][T22554] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.024749][T22554] bridge_slave_0: entered allmulticast mode [ 571.035764][T22554] bridge_slave_0: entered promiscuous mode [ 571.053321][T22608] wg1 speed is unknown, defaulting to 1000 [ 571.093091][T22622] __nla_validate_parse: 1 callbacks suppressed [ 571.100250][T22622] netlink: 344 bytes leftover after parsing attributes in process `syz.6.4402'. [ 571.112721][T22622] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4402'. [ 571.383596][T22554] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.391071][T22554] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.399720][T22554] bridge_slave_1: entered allmulticast mode [ 571.409569][T22554] bridge_slave_1: entered promiscuous mode [ 571.502935][T22554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.558574][T22554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.667029][T22643] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4407'. [ 571.682043][T22554] team0: Port device team_slave_0 added [ 571.705045][T22554] team0: Port device team_slave_1 added [ 571.782635][T22652] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input13 [ 571.831532][T22554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.833014][T22654] netlink: 'syz.6.4412': attribute type 33 has an invalid length. [ 571.838815][T22554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.838844][T22554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.887912][T22654] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4412'. [ 571.899273][T22647] wg1 speed is unknown, defaulting to 1000 [ 571.900813][T22554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.912897][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.913571][T22554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.921182][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.949408][T22554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.976545][T22654] `: renamed from team0 (while UP) [ 572.009838][ T5839] Bluetooth: hci8: command tx timeout [ 572.017017][T20839] Bluetooth: hci7: command tx timeout [ 572.233387][T22554] hsr_slave_0: entered promiscuous mode [ 572.242883][T22554] hsr_slave_1: entered promiscuous mode [ 572.251433][T22554] debugfs: 'hsr0' already exists in 'hsr' [ 572.260191][T22554] Cannot create hsr debugfs directory [ 572.426553][T22663] wg1 speed is unknown, defaulting to 1000 [ 572.553548][T22671] wg1 speed is unknown, defaulting to 1000 [ 573.025470][T22700] syzkaller1: entered promiscuous mode [ 573.035479][T22700] syzkaller1: entered allmulticast mode [ 573.042431][T22704] netlink: 'syz.7.4424': attribute type 10 has an invalid length. [ 573.168785][T22709] netlink: 'syz.7.4426': attribute type 11 has an invalid length. [ 573.230623][T22709] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4426'. [ 573.311760][T22554] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 573.342484][T22554] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 573.403512][T22554] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 573.460003][T22719] tipc: Started in network mode [ 573.465979][T22719] tipc: Node identity 7ebc5fe871a4, cluster identity 4711 [ 573.473562][T22719] tipc: Enabled bearer , priority 0 [ 573.483748][T22554] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 573.525908][T22717] syzkaller0: entered promiscuous mode [ 573.531502][T22717] syzkaller0: entered allmulticast mode [ 573.598516][T22714] tipc: Resetting bearer [ 573.654946][T22714] tipc: Disabling bearer [ 573.670271][T22734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4429'. [ 573.680634][T22734] netlink: 'syz.3.4429': attribute type 12 has an invalid length. [ 573.699441][T22735] IPv6: addrconf: prefix option has invalid lifetime [ 573.779790][T22729] 8021q: adding VLAN 0 to HW filter on device bond1 [ 573.796234][T22731] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.813805][T22738] netlink: 'syz.6.4432': attribute type 1 has an invalid length. [ 573.822083][T22734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4429'. [ 573.822114][T22734] netlink: 'syz.3.4429': attribute type 12 has an invalid length. [ 573.822357][ T63] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.823218][ T63] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.893350][ T63] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.917642][ T63] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.958198][T22738] syzkaller0: entered promiscuous mode [ 573.963780][T22738] syzkaller0: entered allmulticast mode [ 574.086698][T20839] Bluetooth: hci8: command tx timeout [ 574.161515][T22746] wg1 speed is unknown, defaulting to 1000 [ 574.182959][T22753] netlink: 'syz.8.4436': attribute type 10 has an invalid length. [ 574.207176][T22753] netlink: 2 bytes leftover after parsing attributes in process `syz.8.4436'. [ 574.263044][T22554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.271943][T22748] wg1 speed is unknown, defaulting to 1000 [ 574.295060][T22753] team0: entered promiscuous mode [ 574.300270][T22753] team_slave_0: entered promiscuous mode [ 574.307760][T22753] team_slave_1: entered promiscuous mode [ 574.316578][T22753] bridge0: port 3(team0) entered blocking state [ 574.336942][T22753] bridge0: port 3(team0) entered disabled state [ 574.363924][T22753] team0: entered allmulticast mode [ 574.372830][T22753] team_slave_0: entered allmulticast mode [ 574.400740][T22753] team_slave_1: entered allmulticast mode [ 574.438806][T22753] bridge0: port 3(team0) entered blocking state [ 574.445269][T22753] bridge0: port 3(team0) entered forwarding state [ 574.570098][T22554] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.598096][ T8049] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.605297][ T8049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.646867][ T8049] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.654093][ T8049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.720934][T22774] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4441'. [ 574.873672][T22777] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.4442'. [ 575.238500][T22554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.811348][T22554] veth0_vlan: entered promiscuous mode [ 575.842257][T22811] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 575.878853][T22554] veth1_vlan: entered promiscuous mode [ 575.960364][T22554] veth0_macvtap: entered promiscuous mode [ 575.979175][T22554] veth1_macvtap: entered promiscuous mode [ 576.039186][T22554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.095832][T22554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.149944][ T3509] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.167757][T20839] Bluetooth: hci8: command tx timeout [ 576.172805][ T3509] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.221892][ T3509] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.231416][ T3509] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.403199][T22835] syzkaller0: entered promiscuous mode [ 576.426952][T22835] syzkaller0: entered allmulticast mode [ 576.508479][ T8041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.517616][T22838] wg1 speed is unknown, defaulting to 1000 [ 576.534618][ T8041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.630517][T22841] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4458'. [ 576.738020][T22841] bridge_slave_1: left allmulticast mode [ 576.766310][T22841] bridge_slave_1: left promiscuous mode [ 576.789562][T22841] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.841343][T22841] bridge_slave_0: left allmulticast mode [ 576.869947][T22841] bridge_slave_0: left promiscuous mode [ 576.902116][T22841] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.095591][ T8045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.105754][ T8045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.430662][T22869] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4464'. [ 577.487167][T22869] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.523418][T22871] sctp: [Deprecated]: syz.6.4465 (pid 22871) Use of struct sctp_assoc_value in delayed_ack socket option. [ 577.523418][T22871] Use struct sctp_sack_info instead [ 577.873015][T22888] netlink: 'syz.9.4471': attribute type 1 has an invalid length. [ 577.883027][T22892] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4470'. [ 577.891932][T22888] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4471'. [ 577.892477][T22888] netlink: 'syz.9.4471': attribute type 1 has an invalid length. [ 577.892494][T22888] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4471'. [ 577.893280][T22888] netlink: 'syz.9.4471': attribute type 1 has an invalid length. [ 577.906784][T22896] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4470'. [ 577.962453][T22888] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4471'. [ 577.971894][T22888] netlink: 'syz.9.4471': attribute type 1 has an invalid length. [ 577.980071][T22888] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4471'. [ 577.991440][T22888] netlink: 'syz.9.4471': attribute type 1 has an invalid length. [ 577.999887][T22888] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4471'. [ 578.025267][T22888] netlink: 'syz.9.4471': attribute type 1 has an invalid length. [ 578.080876][T22888] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4471'. [ 578.101747][T22901] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 578.119342][T22888] netlink: 'syz.9.4471': attribute type 1 has an invalid length. [ 578.120872][T22906] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 578.145398][T22888] netlink: 'syz.9.4471': attribute type 1 has an invalid length. [ 578.153404][T22888] netlink: 'syz.9.4471': attribute type 1 has an invalid length. [ 578.251013][T20839] Bluetooth: hci8: command tx timeout [ 578.370354][T22912] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 578.392524][ T3509] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 578.402062][ T3509] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 578.425179][ T3509] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 578.444916][ T3509] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 578.495163][T22912] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 578.518341][T22912] bond1 (unregistering): Released all slaves [ 578.582214][ T8041] netdevsim netdevsim7 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 578.591499][ T8041] netdevsim netdevsim7 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 578.605763][ T8041] netdevsim netdevsim7 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 578.624465][ T8041] netdevsim netdevsim7 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 578.979459][T22946] tipc: Enabling of bearer rejected, failed to enable media [ 579.565657][T23003] tipc: Started in network mode [ 579.570635][T23003] tipc: Node identity 0000000000002d210000000000000001, cluster identity 4711 [ 579.603364][T23003] tipc: Enabling of bearer rejected, failed to enable media [ 579.682993][T23009] validate_nla: 24 callbacks suppressed [ 579.683011][T23009] netlink: 'syz.9.4504': attribute type 178 has an invalid length. [ 579.877283][T23017] xt_CT: You must specify a L4 protocol and not use inversions on it [ 580.088008][T23024] erspan0: entered promiscuous mode [ 580.161078][T23022] netlink: 'syz.6.4511': attribute type 11 has an invalid length. [ 580.336800][ T5839] Bluetooth: hci8: command tx timeout [ 580.459336][T23038] netlink: 'syz.6.4514': attribute type 4 has an invalid length. [ 580.796389][T23050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.812959][T23051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.965880][T23056] wg1 speed is unknown, defaulting to 1000 [ 580.988729][T23055] pim6reg1: entered promiscuous mode [ 581.005203][T23055] pim6reg1: entered allmulticast mode [ 581.505242][T23080] x_tables: duplicate underflow at hook 2 [ 582.197698][T23089] __nla_validate_parse: 41 callbacks suppressed [ 582.197719][T23089] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4527'. [ 582.254003][T23089] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4527'. [ 582.285366][T23089] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4527'. [ 582.319969][T23089] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4527'. [ 582.344739][T23089] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4527'. [ 582.364067][T23089] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4527'. [ 582.384973][T23089] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4527'. [ 582.409844][ T5839] Bluetooth: hci8: command 0x0405 tx timeout [ 582.418122][T23089] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4527'. [ 582.427550][T23089] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4527'. [ 582.437472][T23089] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4527'. [ 582.691848][T23109] openvswitch: netlink: Duplicate key (type 32). [ 583.292627][T23138] xt_hashlimit: overflow, try lower: 2341871806232657920/9 [ 583.389230][T23141] wg1 speed is unknown, defaulting to 1000 [ 584.098852][T23174] netlink: 'syz.8.4554': attribute type 2 has an invalid length. [ 584.364100][T23183] xt_bpf: check failed: parse error [ 584.767668][T23201] ip6gretap0: default FDB implementation only supports local addresses [ 584.849610][T23203] tipc: Enabling of bearer rejected, failed to enable media [ 585.005676][T23209] sctp: [Deprecated]: syz.6.4563 (pid 23209) Use of struct sctp_assoc_value in delayed_ack socket option. [ 585.005676][T23209] Use struct sctp_sack_info instead [ 585.045161][T23209] netlink: 'syz.6.4563': attribute type 1 has an invalid length. [ 585.102535][T23209] bond1: entered promiscuous mode [ 585.124765][T23209] 8021q: adding VLAN 0 to HW filter on device bond1 [ 585.188215][T23214] 8021q: adding VLAN 0 to HW filter on device bond2 [ 585.199602][T23214] bond1: (slave bond2): making interface the new active one [ 585.207645][T23214] bond2: entered promiscuous mode [ 585.213844][T23214] bond1: (slave bond2): Enslaving as an active interface with an up link [ 585.223596][T23217] bridge_slave_1: left allmulticast mode [ 585.230855][T23217] bridge_slave_1: left promiscuous mode [ 585.237805][T23217] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.249238][T23217] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 585.541352][T23226] C: renamed from lo (while UP) [ 585.552141][T23226] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 585.610705][T23226] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.708225][T23226] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.801496][T23226] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.906336][T23226] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.051485][ T8041] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.062423][T23241] netlink: 'syz.9.4572': attribute type 13 has an invalid length. [ 586.070587][T23241] netlink: 'syz.9.4572': attribute type 17 has an invalid length. [ 586.136837][ T8041] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.238380][T23241] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 587.937115][T23255] batadv1: entered promiscuous mode [ 587.957359][ T8041] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.983612][ T8041] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.111759][T23264] __nla_validate_parse: 67 callbacks suppressed [ 588.111779][T23264] netlink: 14 bytes leftover after parsing attributes in process `syz.8.4580'. [ 588.144161][T23265] wg1 speed is unknown, defaulting to 1000 [ 588.221713][T23271] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4582'. [ 588.231452][T23271] openvswitch: netlink: Flow key attr not present in new flow. [ 588.265875][T23272] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4578'. [ 588.277431][T23272] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4578'. [ 588.309592][T23272] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4578'. [ 588.445441][T23280] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4584'. [ 588.493491][T23278] tipc: Started in network mode [ 588.502556][T23278] tipc: Node identity aa47c1fdfbda, cluster identity 4711 [ 588.510549][T23278] tipc: Enabled bearer , priority 0 [ 588.522345][T23278] tipc: Resetting bearer [ 588.612824][T23284] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4586'. [ 588.676105][T23284] syzkaller0: entered promiscuous mode [ 588.681585][T23284] syzkaller0: entered allmulticast mode [ 588.931502][T23286] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4587'. [ 589.526056][ T8673] tipc: Node number set to 1369293309 [ 590.485254][T23275] tipc: Disabling bearer [ 590.699359][T23301] FAULT_INJECTION: forcing a failure. [ 590.699359][T23301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 590.712980][T23301] CPU: 1 UID: 0 PID: 23301 Comm: syz.9.4591 Not tainted syzkaller #0 PREEMPT(full) [ 590.713002][T23301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 590.713013][T23301] Call Trace: [ 590.713019][T23301] [ 590.713026][T23301] dump_stack_lvl+0x189/0x250 [ 590.713050][T23301] ? __pfx____ratelimit+0x10/0x10 [ 590.713074][T23301] ? __pfx_dump_stack_lvl+0x10/0x10 [ 590.713096][T23301] ? __pfx__printk+0x10/0x10 [ 590.713114][T23301] ? __might_fault+0xb0/0x130 [ 590.713146][T23301] should_fail_ex+0x414/0x560 [ 590.713168][T23301] _copy_from_user+0x2d/0xb0 [ 590.713181][T23301] ___sys_recvmsg+0x12e/0x510 [ 590.713197][T23301] ? __pfx____sys_recvmsg+0x10/0x10 [ 590.713225][T23301] ? __might_fault+0xb0/0x130 [ 590.713240][T23301] do_recvmmsg+0x307/0x770 [ 590.713256][T23301] ? __pfx_do_recvmmsg+0x10/0x10 [ 590.713274][T23301] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 590.713294][T23301] __x64_sys_recvmmsg+0x190/0x240 [ 590.713308][T23301] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 590.713322][T23301] ? do_syscall_64+0xbe/0xfa0 [ 590.713334][T23301] do_syscall_64+0xfa/0xfa0 [ 590.713343][T23301] ? lockdep_hardirqs_on+0x9c/0x150 [ 590.713352][T23301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.713362][T23301] ? clear_bhb_loop+0x60/0xb0 [ 590.713374][T23301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.713383][T23301] RIP: 0033:0x7f7e9e38f6c9 [ 590.713394][T23301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.713403][T23301] RSP: 002b:00007f7e9c5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 590.713415][T23301] RAX: ffffffffffffffda RBX: 00007f7e9e5e5fa0 RCX: 00007f7e9e38f6c9 [ 590.713423][T23301] RDX: 0000000000000002 RSI: 0000200000001c40 RDI: 0000000000000004 [ 590.713429][T23301] RBP: 00007f7e9c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 590.713435][T23301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.713442][T23301] R13: 00007f7e9e5e6038 R14: 00007f7e9e5e5fa0 R15: 00007fffccba7238 [ 590.713459][T23301] [ 591.082591][T23309] wg1 speed is unknown, defaulting to 1000 [ 591.187374][T23321] veth1_to_bond: entered allmulticast mode [ 591.223347][T23323] Bluetooth: MGMT ver 1.23 [ 591.282248][T23320] veth1_to_bond: left allmulticast mode [ 591.429436][T23334] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4603'. [ 591.438729][T23334] netlink: 7 bytes leftover after parsing attributes in process `syz.6.4603'. [ 591.509626][T23332] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 591.782016][T23346] wg1 speed is unknown, defaulting to 1000 [ 591.850922][ T5839] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 591.870267][ T5839] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 591.878270][ T5839] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 591.887766][ T5839] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 591.896384][ T5839] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 592.013422][T23358] wg1 speed is unknown, defaulting to 1000 [ 592.376490][T23358] chnl_net:caif_netlink_parms(): no params data found [ 592.681384][T23400] team0: left allmulticast mode [ 592.692995][T23400] team_slave_0: left allmulticast mode [ 592.710795][T23400] team_slave_1: left allmulticast mode [ 592.728059][T23400] bridge0: port 3(team0) entered disabled state [ 592.729526][T23406] netlink: 'syz.8.4620': attribute type 11 has an invalid length. [ 592.790065][T23400] bridge_slave_0: left allmulticast mode [ 592.805392][T23400] bridge_slave_0: left promiscuous mode [ 592.820192][T23400] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.850720][T23400] bond0: (slave bond_slave_0): Releasing backup interface [ 592.892367][T23400] bond0: (slave bond_slave_1): Releasing backup interface [ 592.932851][T23400] team_slave_0: left promiscuous mode [ 592.955585][T23400] team0: Port device team_slave_0 removed [ 592.966635][T23400] team_slave_1: left promiscuous mode [ 592.980308][T23400] team0: Port device team_slave_1 removed [ 592.988717][T23400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.997748][T23400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.010476][T23400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.018606][T23400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.030374][T23400] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 593.049927][T23358] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.058370][T23358] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.070328][T23358] bridge_slave_0: entered allmulticast mode [ 593.079825][T23358] bridge_slave_0: entered promiscuous mode [ 593.134605][T23358] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.147381][T23358] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.157400][T23358] bridge_slave_1: entered allmulticast mode [ 593.171090][T23358] bridge_slave_1: entered promiscuous mode [ 593.181492][T23428] __nla_validate_parse: 4 callbacks suppressed [ 593.181511][T23428] netlink: 448 bytes leftover after parsing attributes in process `syz.7.4624'. [ 593.242160][T23358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.275319][T23358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.335679][T23433] syzkaller0: entered promiscuous mode [ 593.341312][T23433] syzkaller0: entered allmulticast mode [ 593.356370][T23358] team0: Port device team_slave_0 added [ 593.379718][T23437] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4628'. [ 593.381844][T23358] team0: Port device team_slave_1 added [ 593.464112][T23437] vlan0: entered allmulticast mode [ 593.530893][T23358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.548247][T23358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.565403][T23440] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4629'. [ 593.583861][T23358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.626831][T23440] ip6gretap0: entered promiscuous mode [ 593.637347][T23440] ip6gretap0: left promiscuous mode [ 593.674092][T23358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.681345][T23358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.708672][T23358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.715099][T23443] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4630'. [ 593.730553][T23443] openvswitch: netlink: Flow key attr not present in new flow. [ 593.849914][T23358] hsr_slave_0: entered promiscuous mode [ 593.862142][T23358] hsr_slave_1: entered promiscuous mode [ 593.869842][T23358] debugfs: 'hsr0' already exists in 'hsr' [ 593.876322][T23358] Cannot create hsr debugfs directory [ 593.919132][T23452] netlink: 'syz.8.4633': attribute type 83 has an invalid length. [ 593.930246][T23451] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4632'. [ 593.939272][T20839] Bluetooth: hci9: command tx timeout [ 593.946226][T23451] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4632'. [ 593.959406][T23451] nbd: socks must be embedded in a SOCK_ITEM attr [ 594.090825][T23458] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4635'. [ 594.299681][T23358] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.310645][T23358] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 594.348685][T23472] xt_CT: You must specify a L4 protocol and not use inversions on it [ 594.358916][T23473] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4637'. [ 594.370396][T23358] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.380630][T23358] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 594.407935][T23473] geneve2: entered promiscuous mode [ 594.439126][T23358] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.449046][T23358] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 594.500795][T23358] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.511376][T23358] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 594.643266][T23358] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 594.658517][T23358] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 594.668622][T23358] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 594.679481][T23358] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 594.771585][T23358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.797625][T23358] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.812353][ T8049] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.819555][ T8049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.827663][T23491] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4640'. [ 594.842163][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.849356][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.133546][T23358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.285204][T23358] veth0_vlan: entered promiscuous mode [ 595.368483][T23358] veth1_vlan: entered promiscuous mode [ 595.592802][T23358] veth0_macvtap: entered promiscuous mode [ 595.626773][T23358] veth1_macvtap: entered promiscuous mode [ 595.688796][T23358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.705716][T23358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.780431][T23521] netlink: 'syz.6.4646': attribute type 13 has an invalid length. [ 595.794466][T23521] netlink: 'syz.6.4646': attribute type 17 has an invalid length. [ 595.807284][ T3509] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.827442][ T3509] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.006159][T20839] Bluetooth: hci9: command tx timeout [ 596.045822][T23521] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 596.308647][T23520] wg1 speed is unknown, defaulting to 1000 [ 596.314500][ T3509] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.314558][ T3509] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.495637][T23529] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4649'. [ 596.515564][T23535] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 596.536061][ T8041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.547937][ T8041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.693846][ T8041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.706846][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.715162][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.726406][ T8041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.165681][T23568] wg1 speed is unknown, defaulting to 1000 [ 597.196793][T23572] wg1 speed is unknown, defaulting to 1000 [ 597.278263][T23574] netlink: 'syz.7.4661': attribute type 1 has an invalid length. [ 597.309017][T23574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 597.339943][T23574] bond1: (slave geneve3): making interface the new active one [ 597.349468][T23574] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 597.568585][T23581] x_tables: duplicate underflow at hook 1 [ 597.789071][T23599] wg1 speed is unknown, defaulting to 1000 [ 598.084050][T23609] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.091837][T23609] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.104372][T20839] Bluetooth: hci9: command tx timeout [ 598.199863][T23609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.216716][T23609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.329858][T23610] ip6erspan0: entered allmulticast mode [ 598.343728][ T3509] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.361670][ T3509] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.372034][ T3509] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.381361][ T3509] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.505560][T23622] __nla_validate_parse: 9 callbacks suppressed [ 598.505582][T23622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4676'. [ 598.656341][T23635] netlink: 'syz.8.4678': attribute type 10 has an invalid length. [ 598.679639][T23635] veth1_vlan: entered allmulticast mode [ 598.699097][T23635] team0: Device veth1_vlan failed to register rx_handler [ 598.711843][T23638] netlink: 'syz.8.4678': attribute type 10 has an invalid length. [ 598.736561][T23638] team0: Device veth1_vlan failed to register rx_handler [ 599.059109][T23660] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4684'. [ 599.070059][T23661] netlink: 128 bytes leftover after parsing attributes in process `syz.8.4685'. [ 599.087444][T23663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4684'. [ 599.107909][T23665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4686'. [ 599.120542][T23665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.173524][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.182308][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.210956][T23669] netlink: 'syz.7.4688': attribute type 13 has an invalid length. [ 599.222108][T23669] netlink: 'syz.7.4688': attribute type 17 has an invalid length. [ 599.503565][T23669] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.510848][T23669] bridge0: port 1(bridge_slave_0) entered listening state [ 599.559414][T23669] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 599.655318][T23680] 8021q: adding VLAN 0 to HW filter on device bond2 [ 599.752516][T23689] batadv1: entered promiscuous mode [ 599.841135][T23701] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4694'. [ 599.876508][T23689] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4691'. [ 600.175050][ T5839] Bluetooth: hci9: command tx timeout [ 600.418340][T23728] openvswitch: netlink: nsh attr 0 has unexpected len 8208 expected 0 [ 600.441179][T23728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 600.538239][T23735] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4703'. [ 600.572924][T23741] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4705'. [ 600.615242][T23734] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4703'. [ 601.218278][T23766] Can't find ip_set type hash:ip$mec [ 602.521070][T23807] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.752384][T23813] wg1 speed is unknown, defaulting to 1000 [ 602.823932][T23816] syzkaller1: entered promiscuous mode [ 602.830420][T23816] syzkaller1: entered allmulticast mode [ 602.909489][T23833] tap0: tun_chr_ioctl cmd 2148553947 [ 603.082751][T23846] wg1 speed is unknown, defaulting to 1000 [ 603.152040][T23848] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci9/hci9:200/input14 [ 603.827431][T23862] wg1 speed is unknown, defaulting to 1000 [ 603.900092][T23860] wg1 speed is unknown, defaulting to 1000 [ 603.931366][T23868] netlink: 'syz.1.4735': attribute type 1 has an invalid length. [ 604.063761][T23873] __nla_validate_parse: 7 callbacks suppressed [ 604.063778][T23873] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4736'. [ 604.256551][T23883] netlink: 9892 bytes leftover after parsing attributes in process `syz.1.4740'. [ 604.275029][T23879] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4739'. [ 604.295187][T23883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.317473][T23883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.419065][T23891] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4742'. [ 604.519462][T23889] pim6reg1: entered promiscuous mode [ 604.525305][T23889] pim6reg1: entered allmulticast mode [ 604.602177][T23894] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4743'. [ 604.723915][T23897] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4743'. [ 605.583394][T23949] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4758'. [ 605.636693][T23954] tipc: Enabling of bearer rejected, failed to enable media [ 605.778398][T23964] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4762'. [ 606.137582][T23977] syz_tun: entered allmulticast mode [ 606.191107][T23975] syz_tun: left allmulticast mode [ 606.475963][T23994] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.4770'. [ 606.542467][T23996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4771'. [ 606.837077][T24016] syzkaller1: entered promiscuous mode [ 606.842728][T24016] syzkaller1: entered allmulticast mode [ 606.901620][T24020] wg1 speed is unknown, defaulting to 1000 [ 607.019936][T24028] netlink: 'syz.6.4778': attribute type 39 has an invalid length. [ 607.037626][T24027] netlink: 'syz.6.4778': attribute type 39 has an invalid length. [ 607.113818][T20839] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 607.128735][T20839] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 607.137343][T20839] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 607.146563][T20839] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 607.156361][T20839] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 607.225712][T24031] wg1 speed is unknown, defaulting to 1000 [ 607.468605][T24031] chnl_net:caif_netlink_parms(): no params data found [ 607.712625][T24031] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.734076][T24031] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.745177][T24031] bridge_slave_0: entered allmulticast mode [ 607.753115][T24031] bridge_slave_0: entered promiscuous mode [ 607.763316][T24055] wg1 speed is unknown, defaulting to 1000 [ 607.764373][T24031] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.777441][T24031] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.785321][T24031] bridge_slave_1: entered allmulticast mode [ 607.793207][T24031] bridge_slave_1: entered promiscuous mode [ 607.896642][T24031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.976287][T24031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.098653][T24031] team0: Port device team_slave_0 added [ 608.128506][T24031] team0: Port device team_slave_1 added [ 608.236543][T24071] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 608.323315][T24067] wg1 speed is unknown, defaulting to 1000 [ 608.329317][T24031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.329335][T24031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.329357][T24031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.331587][T24031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.406602][T24031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.435107][T24031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.449028][T24079] netlink: 'syz.7.4788': attribute type 11 has an invalid length. [ 608.630615][T24031] hsr_slave_0: entered promiscuous mode [ 608.639978][T24031] hsr_slave_1: entered promiscuous mode [ 608.654976][T24031] debugfs: 'hsr0' already exists in 'hsr' [ 608.661340][T24031] Cannot create hsr debugfs directory [ 609.160333][T24031] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.184956][T24031] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.215010][ T5839] Bluetooth: hci10: command tx timeout [ 609.318775][T24031] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.328968][T24031] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.354804][T24104] wg1 speed is unknown, defaulting to 1000 [ 609.387481][T24031] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.397346][T24031] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.455390][T24031] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.467104][T24031] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.656957][T24031] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 609.673603][T24121] __nla_validate_parse: 3 callbacks suppressed [ 609.673620][T24121] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4801'. [ 609.694961][T24031] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 609.707547][T24031] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 609.725932][T24031] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 609.957495][T24031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.993610][T24031] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.013951][ T8041] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.021146][ T8041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.084024][T24134] wg1 speed is unknown, defaulting to 1000 [ 610.087982][ T8041] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.097067][ T8041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.141799][T24137] bond0: (slave sit0): Error: Device type is different from other slaves [ 610.510970][T24151] syzkaller0: entered promiscuous mode [ 610.516742][T24151] syzkaller0: entered allmulticast mode [ 610.639453][T24154] netlink: 'syz.1.4809': attribute type 3 has an invalid length. [ 610.810304][T24031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.951381][T24166] !: renamed from dummy0 [ 610.996411][T24031] veth0_vlan: entered promiscuous mode [ 611.196288][T24174] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4813'. [ 611.205768][T24031] veth1_vlan: entered promiscuous mode [ 611.229372][T24174] bridge_slave_1: left allmulticast mode [ 611.245412][T24174] bridge_slave_1: left promiscuous mode [ 611.266592][T24174] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.280188][T24174] bridge_slave_0: left promiscuous mode [ 611.286733][ T5839] Bluetooth: hci10: command tx timeout [ 611.292880][T24174] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.400822][T24176] wg1 speed is unknown, defaulting to 1000 [ 611.409273][T24031] veth0_macvtap: entered promiscuous mode [ 611.421760][T24031] veth1_macvtap: entered promiscuous mode [ 611.518982][T24031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.581355][T24031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.646121][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.660810][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.677006][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.693934][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.747891][T24184] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4817'. [ 611.755649][T24188] netlink: 'syz.1.4816': attribute type 1 has an invalid length. [ 611.773952][T24188] netlink: 'syz.1.4816': attribute type 1 has an invalid length. [ 611.784066][T24188] netlink: 'syz.1.4816': attribute type 1 has an invalid length. [ 611.792680][T24188] netlink: 'syz.1.4816': attribute type 1 has an invalid length. [ 611.802550][T24188] netlink: 'syz.1.4816': attribute type 1 has an invalid length. [ 611.811158][T24188] netlink: 'syz.1.4816': attribute type 1 has an invalid length. [ 611.819406][T24188] netlink: 'syz.1.4816': attribute type 1 has an invalid length. [ 611.827487][T24188] netlink: 'syz.1.4816': attribute type 1 has an invalid length. [ 611.836481][T24188] netlink: 'syz.1.4816': attribute type 1 has an invalid length. [ 611.872974][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.882059][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.934437][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.949249][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.142923][T24200] netlink: 244 bytes leftover after parsing attributes in process `syz.6.4820'. [ 612.197564][T24202] syzkaller1: entered promiscuous mode [ 612.203171][T24202] syzkaller1: entered allmulticast mode [ 612.289464][T24206] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4823'. [ 612.300452][T24206] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4823'. [ 612.311147][T24206] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4823'. [ 612.320908][T24206] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4823'. [ 612.332035][T24206] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4823'. [ 612.342247][T24206] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4823'. [ 612.362278][T24206] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 612.739021][T24215] IPVS: set_ctl: invalid protocol: 92 100.1.1.0:20004 [ 613.299313][T24237] vti0: entered promiscuous mode [ 613.365264][ T5839] Bluetooth: hci10: command tx timeout [ 613.490286][T24245] pim6reg1: entered promiscuous mode [ 613.503641][T24245] pim6reg1: entered allmulticast mode [ 614.730272][T24275] __nla_validate_parse: 16 callbacks suppressed [ 614.730293][T24275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4845'. [ 615.446139][ T5839] Bluetooth: hci10: command tx timeout [ 615.601797][T24304] wg1 speed is unknown, defaulting to 1000 [ 615.753666][T24316] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4856'. [ 615.980317][T24320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4858'. [ 616.012655][T24322] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4859'. [ 616.348936][T24337] x_tables: unsorted entry at hook 1 [ 616.483220][T24341] macsec0: entered promiscuous mode [ 616.507433][T24345] IPv6: addrconf: prefix option has invalid lifetime [ 616.671103][T24347] wg1 speed is unknown, defaulting to 1000 [ 616.728815][T24364] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4874'. [ 616.813297][T24372] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4875'. [ 616.873600][T24370] wg1 speed is unknown, defaulting to 1000 [ 617.120547][T24380] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4876'. [ 617.130781][T24380] netlink: 22 bytes leftover after parsing attributes in process `syz.7.4876'. [ 617.399816][T24405] bridge0: entered promiscuous mode [ 617.406141][T24405] bridge0: entered allmulticast mode [ 617.502018][T24403] wg1 speed is unknown, defaulting to 1000 [ 617.511440][T24406] wg1 speed is unknown, defaulting to 1000 [ 617.562685][T24414] FAULT_INJECTION: forcing a failure. [ 617.562685][T24414] name failslab, interval 1, probability 0, space 0, times 0 [ 617.576739][T24414] CPU: 1 UID: 0 PID: 24414 Comm: syz.1.4887 Not tainted syzkaller #0 PREEMPT(full) [ 617.576764][T24414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 617.576776][T24414] Call Trace: [ 617.576783][T24414] [ 617.576791][T24414] dump_stack_lvl+0x189/0x250 [ 617.576817][T24414] ? __pfx____ratelimit+0x10/0x10 [ 617.576842][T24414] ? __pfx_dump_stack_lvl+0x10/0x10 [ 617.576863][T24414] ? __pfx__printk+0x10/0x10 [ 617.576885][T24414] ? __pfx___might_resched+0x10/0x10 [ 617.576902][T24414] ? fs_reclaim_acquire+0x7d/0x100 [ 617.576923][T24414] should_fail_ex+0x414/0x560 [ 617.576961][T24414] should_failslab+0xa8/0x100 [ 617.576981][T24414] kmem_cache_alloc_node_noprof+0x77/0x710 [ 617.577004][T24414] ? __alloc_skb+0x112/0x2d0 [ 617.577027][T24414] __alloc_skb+0x112/0x2d0 [ 617.577050][T24414] alloc_skb_with_frags+0xca/0x890 [ 617.577083][T24414] sock_alloc_send_pskb+0x84d/0x980 [ 617.577124][T24414] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 617.577157][T24414] ? iov_iter_advance+0x8b/0x1c0 [ 617.577180][T24414] tun_get_user+0xa43/0x3e90 [ 617.577220][T24414] ? aa_file_perm+0x44d/0x1550 [ 617.577238][T24414] ? __pfx_tun_get_user+0x10/0x10 [ 617.577258][T24414] ? _parse_integer_limit+0x1ae/0x1f0 [ 617.577285][T24414] ? __lock_acquire+0xab9/0xd20 [ 617.577308][T24414] ? ref_tracker_alloc+0x318/0x460 [ 617.577323][T24414] ? __lock_acquire+0xab9/0xd20 [ 617.577342][T24414] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 617.577364][T24414] ? tun_get+0x1c/0x2f0 [ 617.577391][T24414] ? tun_get+0x1c/0x2f0 [ 617.577410][T24414] ? tun_get+0x1c/0x2f0 [ 617.577435][T24414] tun_chr_write_iter+0x113/0x200 [ 617.577459][T24414] vfs_write+0x5c9/0xb30 [ 617.577487][T24414] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 617.577509][T24414] ? __pfx_vfs_write+0x10/0x10 [ 617.577543][T24414] ? __fget_files+0x2a/0x420 [ 617.577570][T24414] ksys_write+0x145/0x250 [ 617.577595][T24414] ? __pfx_ksys_write+0x10/0x10 [ 617.577621][T24414] ? do_syscall_64+0xbe/0xfa0 [ 617.577643][T24414] do_syscall_64+0xfa/0xfa0 [ 617.577658][T24414] ? lockdep_hardirqs_on+0x9c/0x150 [ 617.577676][T24414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.577694][T24414] ? clear_bhb_loop+0x60/0xb0 [ 617.577716][T24414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.577733][T24414] RIP: 0033:0x7f675478f6c9 [ 617.577750][T24414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 617.577766][T24414] RSP: 002b:00007f6755591038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 617.577786][T24414] RAX: ffffffffffffffda RBX: 00007f67549e5fa0 RCX: 00007f675478f6c9 [ 617.577799][T24414] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003 [ 617.577812][T24414] RBP: 00007f6755591090 R08: 0000000000000000 R09: 0000000000000000 [ 617.577824][T24414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.577834][T24414] R13: 00007f67549e6038 R14: 00007f67549e5fa0 R15: 00007ffe7b264f78 [ 617.577864][T24414] [ 617.877444][T24416] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4886'. [ 617.887521][T24416] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4886'. [ 618.465850][T24437] 8021q: VLANs not supported on caif0 [ 618.719897][T24451] syzkaller0: entered promiscuous mode [ 618.727471][T24451] syzkaller0: entered allmulticast mode [ 618.996637][T20839] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 619.007027][T20839] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 619.015674][T20839] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 619.027943][T20839] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 619.036374][T20839] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 619.104256][T24456] wg1 speed is unknown, defaulting to 1000 [ 619.351057][T24456] chnl_net:caif_netlink_parms(): no params data found [ 619.403869][T24479] nbd: must specify an index to disconnect [ 619.433479][T24482] openvswitch: netlink: Flow key attr not present in new flow. [ 619.462438][T24482] netem: unknown loss type 0 [ 619.468864][T24482] netem: change failed [ 619.549280][T24486] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.593515][T24456] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.601735][T24456] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.610315][T24456] bridge_slave_0: entered allmulticast mode [ 619.627481][T24456] bridge_slave_0: entered promiscuous mode [ 619.701939][T24486] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.729299][T24456] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.737516][T24456] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.746057][T24456] bridge_slave_1: entered allmulticast mode [ 619.763564][T24497] netlink: 'syz.7.4910': attribute type 11 has an invalid length. [ 619.776594][T24456] bridge_slave_1: entered promiscuous mode [ 619.857681][T24486] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.972965][T24486] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.002812][T24456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.017442][T24456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.079462][T24456] team0: Port device team_slave_0 added [ 620.101112][T24456] team0: Port device team_slave_1 added [ 620.123938][ T8045] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.140865][ T8045] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.163392][T24456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.171548][T24456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.198733][T24456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.211931][T24456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.219096][T24456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.246664][T24456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.269847][ T63] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.289569][ T9590] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.333240][T24456] hsr_slave_0: entered promiscuous mode [ 620.346617][T24456] hsr_slave_1: entered promiscuous mode [ 620.353210][T24456] debugfs: 'hsr0' already exists in 'hsr' [ 620.360792][T24456] Cannot create hsr debugfs directory [ 620.572516][T24456] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.611772][T24504] macsec0: left promiscuous mode [ 620.618266][T24504] macsec0: entered allmulticast mode [ 620.637016][T24456] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.649689][T24506] __nla_validate_parse: 8 callbacks suppressed [ 620.649708][T24506] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4914'. [ 620.676138][T24508] veth1_macvtap: entered allmulticast mode [ 620.681990][T24508] macsec0: left allmulticast mode [ 620.688274][T24508] veth1_macvtap: left allmulticast mode [ 620.713284][T24456] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.771538][T24456] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.882675][T24518] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 620.938191][T24519] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4917'. [ 620.959985][T24519] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4917'. [ 620.970018][T24519] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4917'. [ 620.985584][T24519] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4917'. [ 620.995006][T24519] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4917'. [ 621.003963][T24519] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4917'. [ 621.015288][T24519] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4917'. [ 621.030348][T24519] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4917'. [ 621.039795][T24519] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4917'. [ 621.125468][ T5839] Bluetooth: hci11: command tx timeout [ 621.331309][T24519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.394088][T24519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 621.699632][ T8049] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.712181][ T8049] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.732344][ T8049] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.804781][T24456] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 621.830311][T24456] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 621.843477][T24456] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 621.890205][T24456] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 622.170591][T24552] wg1 speed is unknown, defaulting to 1000 [ 622.230989][T24456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.270068][T24456] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.288592][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.295781][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.315307][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.322490][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.339423][T24559] validate_nla: 60 callbacks suppressed [ 622.339437][T24559] netlink: 'syz.1.4926': attribute type 30 has an invalid length. [ 622.382412][T24559] bond1: option arp_missed_max: invalid value (0) [ 622.389913][T24559] bond1: option arp_missed_max: allowed values 1 - 255 [ 622.399366][T24559] bond1 (unregistering): Released all slaves [ 622.682961][T24456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.050120][T24456] veth0_vlan: entered promiscuous mode [ 623.086739][T24456] veth1_vlan: entered promiscuous mode [ 623.139480][T24456] veth0_macvtap: entered promiscuous mode [ 623.160826][T24456] veth1_macvtap: entered promiscuous mode [ 623.204819][ T5839] Bluetooth: hci11: command tx timeout [ 623.212629][T24456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.248953][T24456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.296956][ T3509] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.326267][ T3509] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.356483][ T3509] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.373998][ T3509] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.585927][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.593760][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.658872][T24596] wg1 speed is unknown, defaulting to 1000 [ 623.800061][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.812964][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.937899][T24600] netlink: 'syz.7.4933': attribute type 1 has an invalid length. [ 624.066734][T24606] bond2: entered promiscuous mode [ 624.071894][T24606] bond2: entered allmulticast mode [ 624.102423][T24606] 8021q: adding VLAN 0 to HW filter on device bond2 [ 624.219981][T24600] 8021q: adding VLAN 0 to HW filter on device bond3 [ 624.276727][T24600] bond3: entered promiscuous mode [ 624.282002][T24600] bond3: entered allmulticast mode [ 624.299200][T24600] bond2: (slave bond3): Enslaving as a backup interface with a down link [ 624.461129][T24615] pimreg3: entered allmulticast mode [ 624.481794][T24624] netlink: 'syz.6.4937': attribute type 1 has an invalid length. [ 624.490676][T24624] netlink: 'syz.6.4937': attribute type 4 has an invalid length. [ 625.295066][ T5839] Bluetooth: hci11: command tx timeout [ 625.665754][T24655] __nla_validate_parse: 139 callbacks suppressed [ 625.665772][T24655] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4948'. [ 625.701732][T24655] syzkaller0: left promiscuous mode [ 625.707171][T24655] syzkaller0: left allmulticast mode [ 625.712738][T24655] vti0: left promiscuous mode [ 625.718128][T24655] bridge0: left promiscuous mode [ 625.723078][T24655] bridge0: left allmulticast mode [ 625.730376][T24655] bond2: left promiscuous mode [ 625.736705][T24655] bond3: left promiscuous mode [ 625.742798][T24655] bond2: left allmulticast mode [ 625.749135][T24655] bond3: left allmulticast mode [ 625.976033][T24658] netlink: 'syz.1.4949': attribute type 10 has an invalid length. [ 626.060184][T24666] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4951'. [ 626.080892][T24666] vlan0: entered allmulticast mode [ 626.087366][T24666] gretap0: entered allmulticast mode [ 626.350204][T24685] netlink: 'syz.6.4957': attribute type 1 has an invalid length. [ 626.360441][T24685] netlink: 228 bytes leftover after parsing attributes in process `syz.6.4957'. [ 626.418129][T24685] wg1 speed is unknown, defaulting to 1000 [ 626.510804][T24689] wg1 speed is unknown, defaulting to 1000 [ 626.527200][T24685] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4957'. [ 626.798379][T24702] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4962'. [ 626.814251][ T12] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.814450][T24702] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4962'. [ 626.822674][ T12] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.843189][ T12] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.852893][ T12] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.039980][T24727] dummy0: entered promiscuous mode [ 627.052147][T24727] bond0: entered promiscuous mode [ 627.056624][T24730] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4966'. [ 627.057516][T24727] bond_slave_0: entered promiscuous mode [ 627.074136][T24727] bond_slave_1: entered promiscuous mode [ 627.082214][T24727] debugfs: 'hsr1' already exists in 'hsr' [ 627.088641][T24727] Cannot create hsr debugfs directory [ 627.094756][T24727] hsr1: entered allmulticast mode [ 627.099781][T24727] dummy0: entered allmulticast mode [ 627.105657][T24727] bond0: entered allmulticast mode [ 627.110762][T24727] bond_slave_0: entered allmulticast mode [ 627.116623][T24727] bond_slave_1: entered allmulticast mode [ 627.160730][T24730] bond3 (unregistering): Released all slaves [ 627.362472][T24745] netlink: 'syz.1.4972': attribute type 5 has an invalid length. [ 627.366392][ T5843] Bluetooth: hci11: command tx timeout [ 627.633083][T24766] netlink: 'syz.1.4974': attribute type 12 has an invalid length. [ 627.647983][T24766] netlink: 'syz.1.4974': attribute type 4 has an invalid length. [ 627.990562][T24762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.991837][T24778] netlink: 71 bytes leftover after parsing attributes in process `syz.6.4982'. [ 628.000453][T24762] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.019458][T24762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 629.447661][ T5843] Bluetooth: hci11: command 0x0411 tx timeout [ 631.525219][ T5839] Bluetooth: hci11: command 0x0411 tx timeout [ 650.552802][T24804] bond0: Device is already in use. [ 650.626910][T24808] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4993'. [ 650.643073][T24801] wg1 speed is unknown, defaulting to 1000 [ 650.908863][T24826] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4997'. [ 651.165858][T24839] netlink: 'syz.6.5001': attribute type 10 has an invalid length. [ 651.184234][ T5843] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 651.197005][ T5843] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 651.210253][ T5843] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 651.219419][ T5843] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 651.227372][ T5843] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 651.293653][T24836] wg1 speed is unknown, defaulting to 1000 [ 651.392810][T24850] wg1 speed is unknown, defaulting to 1000 [ 651.497996][T24857] netlink: 'syz.5.5005': attribute type 16 has an invalid length. [ 651.506480][T24857] netlink: 'syz.5.5005': attribute type 3 has an invalid length. [ 651.515875][T24857] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.5005'. [ 651.558535][T24857] syzkaller0: entered promiscuous mode [ 651.564038][T24857] syzkaller0: entered allmulticast mode [ 651.752802][T24836] chnl_net:caif_netlink_parms(): no params data found [ 651.790597][T15024] IPVS: starting estimator thread 0... [ 651.827152][T24872] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5008'. [ 651.836707][T24873] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5008'. [ 651.884583][T24874] IPVS: using max 27 ests per chain, 64800 per kthread [ 651.901406][T24878] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5009'. [ 651.922564][T24878] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5009'. [ 651.979908][T24836] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.995776][T24836] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.003135][T24836] bridge_slave_0: entered allmulticast mode [ 652.011603][T24836] bridge_slave_0: entered promiscuous mode [ 652.022372][T24836] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.030358][T24836] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.038495][T24836] bridge_slave_1: entered allmulticast mode [ 652.047435][T24836] bridge_slave_1: entered promiscuous mode [ 652.107270][T24836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.129918][T24836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.244688][T24836] team0: Port device team_slave_0 added [ 652.253894][T24836] team0: Port device team_slave_1 added [ 652.335884][T24895] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5015'. [ 652.369739][T24836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.377551][T24836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.406749][T24836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.428584][T24836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.436594][T24836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.465602][T24836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.801017][T24836] hsr_slave_0: entered promiscuous mode [ 652.807734][T24836] hsr_slave_1: entered promiscuous mode [ 652.813969][T24836] debugfs: 'hsr0' already exists in 'hsr' [ 652.820422][T24836] Cannot create hsr debugfs directory [ 652.860077][T24899] wg1 speed is unknown, defaulting to 1000 [ 653.130361][T24836] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.230857][T24836] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.282685][T24836] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.294815][ T5839] Bluetooth: hci12: command tx timeout [ 653.339893][T24933] wg1 speed is unknown, defaulting to 1000 [ 653.381086][T24836] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.607363][T24836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 653.619940][T24836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 653.651254][T24836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 653.664218][T24947] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5027'. [ 653.675515][T24947] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5027'. [ 653.687494][T24836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 653.881585][T24836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.928628][T24836] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.949329][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.956563][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.977148][T24723] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.984328][T24723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.046755][T24961] syzkaller0: entered promiscuous mode [ 654.052885][T24961] syzkaller0: entered allmulticast mode [ 654.136195][T24968] syzkaller0: entered promiscuous mode [ 654.141779][T24968] syzkaller0: entered allmulticast mode [ 654.419228][T24977] netlink: 'syz.6.5034': attribute type 1 has an invalid length. [ 654.503859][T24977] 8021q: adding VLAN 0 to HW filter on device bond3 [ 654.540489][T24981] 8021q: adding VLAN 0 to HW filter on device bond3 [ 654.561585][T24981] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 654.606159][T24981] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 654.696400][T24977] veth5: entered promiscuous mode [ 654.719883][T24977] bond3: (slave veth5): Enslaving as an active interface with a down link [ 654.759600][T24836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.784162][T24723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.793127][T24723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.951501][T24836] veth0_vlan: entered promiscuous mode [ 654.995132][ T981] IPVS: starting estimator thread 0... [ 655.016756][T24836] veth1_vlan: entered promiscuous mode [ 655.094987][T24994] IPVS: using max 27 ests per chain, 64800 per kthread [ 655.116360][T24836] veth0_macvtap: entered promiscuous mode [ 655.199318][T24836] veth1_macvtap: entered promiscuous mode [ 655.285208][T24836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.323814][T25001] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 655.344880][T24836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.368660][ T5843] Bluetooth: hci12: command tx timeout [ 655.388738][T24723] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.409415][T24723] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.421573][T24723] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.430998][T24723] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.585786][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.606022][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.652432][T25010] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5039'. [ 655.662698][T24723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.673753][T24723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.082149][T25022] pimreg: entered allmulticast mode [ 656.425548][T25033] wg1 speed is unknown, defaulting to 1000 [ 656.469881][ T8049] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 656.488022][ T8049] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 656.511898][ T8049] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 656.560596][T25053] netlink: 'syz.2.5054': attribute type 3 has an invalid length. [ 656.613408][T25051] wg1 speed is unknown, defaulting to 1000 [ 656.637756][T25053] syz_tun: entered allmulticast mode [ 656.685594][T25053] siw: device registration error -23 [ 656.711590][T25056] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5055'. [ 656.722453][T25056] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5055'. [ 656.768655][T25053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 656.907605][T25052] syz_tun: left allmulticast mode [ 656.920263][T25062] wg1 speed is unknown, defaulting to 1000 [ 657.158840][T25084] batadv_slave_1: entered promiscuous mode [ 657.241781][T25087] macsec1: entered promiscuous mode [ 657.267575][T25087] ip6gretap0: entered promiscuous mode [ 657.298651][T25087] ip6gretap0: left promiscuous mode [ 657.317794][T25092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5063'. [ 657.337388][T25084] batadv_slave_1: left promiscuous mode [ 657.449878][ T5843] Bluetooth: hci12: command 0x040f tx timeout [ 657.843149][T25106] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5067'. [ 657.952437][T25109] netlink: 'syz.6.5068': attribute type 12 has an invalid length. [ 657.962605][T25109] netlink: 'syz.6.5068': attribute type 4 has an invalid length. [ 658.329451][T25114] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5069'. [ 658.345763][T25114] bridge_slave_1: left allmulticast mode [ 658.351431][T25114] bridge_slave_1: left promiscuous mode [ 658.357385][T25114] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.376829][T25114] bridge_slave_0: left allmulticast mode [ 658.382503][T25114] bridge_slave_0: left promiscuous mode [ 658.427014][T25114] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.813478][T25120] tun0: tun_chr_ioctl cmd 1074025675 [ 658.823195][T25120] tun0: persist enabled [ 658.844024][T25122] tun0: tun_chr_ioctl cmd 1074025675 [ 658.864009][T25122] tun0: persist disabled [ 659.026559][T25129] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5073'. [ 659.026893][T25130] pimreg1: tun_chr_ioctl cmd 1074025677 [ 659.041890][T25130] pimreg1: linktype set to 776 [ 659.095203][T25132] tipc: Started in network mode [ 659.100191][T25132] tipc: Node identity a69057bcf15, cluster identity 4711 [ 659.114225][T25132] tipc: Enabled bearer , priority 0 [ 659.123456][T25132] syzkaller0: entered promiscuous mode [ 659.130892][T25132] syzkaller0: entered allmulticast mode [ 659.281051][T25132] tipc: Resetting bearer [ 659.308009][T25132] tipc: Disabling bearer [ 659.355603][T25134] netlink: 'syz.7.5076': attribute type 66 has an invalid length. [ 659.375719][T25138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5077'. [ 659.525036][ T5843] Bluetooth: hci12: command 0x040f tx timeout [ 659.625269][T25154] wg1 speed is unknown, defaulting to 1000 [ 659.709021][T25162] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5082'. [ 659.732341][T25159] wg1 speed is unknown, defaulting to 1000 [ 659.740777][T25161] netlink: 'syz.2.5084': attribute type 64 has an invalid length. [ 659.943919][T25166] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5085'. [ 660.041209][T25172] macvlan2: entered promiscuous mode [ 660.049999][T25172] macvlan2: entered allmulticast mode [ 660.060406][T25172] veth1_vlan: entered allmulticast mode [ 660.070971][T25172] veth1_vlan: left allmulticast mode [ 660.359563][T25186] netlink: 'syz.6.5090': attribute type 11 has an invalid length. [ 660.377492][T25189] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 660.588196][T25201] bond0: (slave bond_slave_0): Releasing backup interface [ 660.599232][T25201] bond0: (slave bond_slave_1): Releasing backup interface [ 660.609819][T25201] team0: Port device team_slave_0 removed [ 660.618862][T25201] team0: Port device team_slave_1 removed [ 660.625786][T25201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.634122][T25201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 660.642651][T25201] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 661.015188][T25231] IPVS: set_ctl: invalid protocol: 115 100.1.1.0:20003 [ 661.022690][T25231] IPVS: length: 82 != 24 [ 661.027496][T25231] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003 [ 661.584088][T25259] netlink: 'syz.5.5111': attribute type 1 has an invalid length. [ 661.605646][ T5843] Bluetooth: hci12: command 0x040f tx timeout [ 661.743101][T25269] netlink: 'syz.5.5114': attribute type 8 has an invalid length. [ 661.931389][T25280] __nla_validate_parse: 6 callbacks suppressed [ 661.931407][T25280] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.5120'. [ 661.964878][T25282] syz_tun: entered allmulticast mode [ 661.982075][T25282] netlink: 'syz.7.5119': attribute type 1 has an invalid length. [ 662.020600][T25282] dvmrp6: entered allmulticast mode [ 662.055713][T25281] syz_tun: left allmulticast mode [ 662.217593][T25297] ip6gre2: entered allmulticast mode [ 662.229093][T25294] wg1 speed is unknown, defaulting to 1000 [ 662.269394][T25297] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5123'. [ 662.279564][T25297] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5123'. [ 662.473076][T24714] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 663.213534][T25333] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5131'. [ 663.237709][T25333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5131'. [ 663.314897][T25341] netlink: 'syz.5.5134': attribute type 4 has an invalid length. [ 663.342341][T25341] netlink: 'syz.5.5134': attribute type 4 has an invalid length. [ 663.423665][T25344] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5135'. [ 663.697323][ T5843] Bluetooth: hci12: command 0x040f tx timeout [ 663.727321][T25357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5138'. [ 663.762035][T25357] wg1 speed is unknown, defaulting to 1000 [ 663.870328][ T981] IPVS: starting estimator thread 0... [ 663.910866][T25364] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.5140'. [ 663.964359][T25362] IPVS: using max 30 ests per chain, 72000 per kthread [ 664.041045][T25364] netlink: 112 bytes leftover after parsing attributes in process `syz.5.5140'. [ 664.054128][T25364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.302562][T25384] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.5146'. [ 664.318481][T25384] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 664.328362][T25386] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 664.374060][T25393] wg1: entered promiscuous mode [ 664.380581][T25393] wg1: entered allmulticast mode [ 665.649724][T25434] syzkaller1: entered promiscuous mode [ 665.656556][T25434] syzkaller1: entered allmulticast mode [ 665.996960][ T5839] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 666.008464][ T5839] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 666.021490][T25446] batman_adv: batadv0: Adding interface: vlan2 [ 666.029023][ T5839] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 666.038371][ T5839] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 666.046464][ T5839] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 666.070284][T25446] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1569 would solve the problem. [ 666.139550][T25446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.151380][T25446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.162342][T25446] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 666.236178][T25453] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.302768][T25447] wg1 speed is unknown, defaulting to 1000 [ 666.377511][T25453] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.442275][T25453] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.465094][T25461] IPv6: Can't replace route, no match found [ 666.539895][T25453] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.687573][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.720249][T24714] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.751220][T24714] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.760885][T25447] chnl_net:caif_netlink_parms(): no params data found [ 666.805511][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.936743][T25481] __nla_validate_parse: 13 callbacks suppressed [ 666.936759][T25481] netlink: 136 bytes leftover after parsing attributes in process `syz.6.5171'. [ 666.952738][T25481] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 666.990093][T25447] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.000802][T25447] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.016042][T25447] bridge_slave_0: entered allmulticast mode [ 667.031525][T25447] bridge_slave_0: entered promiscuous mode [ 667.041738][T25447] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.050465][T25447] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.058263][T25447] bridge_slave_1: entered allmulticast mode [ 667.067542][T25447] bridge_slave_1: entered promiscuous mode [ 667.093999][T25485] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5173'. [ 667.154588][T25447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.187499][T25447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.348969][T25447] team0: Port device team_slave_0 added [ 667.363707][T25447] team0: Port device team_slave_1 added [ 667.457964][T25447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.481845][T25447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.516509][T25447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.530531][T25447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.540111][T25447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.574192][T25447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.587230][T25495] wg1 speed is unknown, defaulting to 1000 [ 667.612003][T25499] wg1 speed is unknown, defaulting to 1000 [ 667.786375][T25447] hsr_slave_0: entered promiscuous mode [ 667.793731][T25447] hsr_slave_1: entered promiscuous mode [ 667.801522][T25447] debugfs: 'hsr0' already exists in 'hsr' [ 667.808954][T25447] Cannot create hsr debugfs directory [ 667.960416][T25510] xt_addrtype: ipv6 does not support BROADCAST matching [ 667.970604][T25510] xt_addrtype: ipv6 does not support BROADCAST matching [ 667.977957][T25510] xt_addrtype: ipv6 does not support BROADCAST matching [ 667.986229][T25510] xt_addrtype: ipv6 does not support BROADCAST matching [ 667.993361][T25510] xt_addrtype: ipv6 does not support BROADCAST matching [ 668.000757][T25510] xt_addrtype: ipv6 does not support BROADCAST matching [ 668.009585][T25510] xt_addrtype: ipv6 does not support BROADCAST matching [ 668.020232][T25510] xt_addrtype: ipv6 does not support BROADCAST matching [ 668.111272][T25517] netlink: 80 bytes leftover after parsing attributes in process `syz.6.5181'. [ 668.116758][T25447] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 668.131671][T25447] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 668.175592][ T5843] Bluetooth: hci13: command tx timeout [ 668.207507][T25447] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 668.218924][T25447] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 668.302006][T25447] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 668.312784][T25447] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 668.393436][T25525] sctp: [Deprecated]: syz.6.5184 (pid 25525) Use of int in maxseg socket option. [ 668.393436][T25525] Use struct sctp_assoc_value instead [ 668.459410][T25447] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 668.478414][T25447] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 668.596882][T25539] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 668.612433][T25539] bond1 (unregistering): Released all slaves [ 668.653893][T25538] netlink: 'syz.6.5187': attribute type 5 has an invalid length. [ 668.881683][T25447] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 668.909502][T25447] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 668.929166][T25447] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 668.958055][T25447] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 669.233628][T25574] tipc: Invalid UDP bearer configuration [ 669.233683][T25574] tipc: Enabling of bearer rejected, failed to enable media [ 669.259675][T25447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.259935][T25574] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5195'. [ 669.287114][T25447] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.307763][ T8049] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.314920][ T8049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.330094][ T8049] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.337294][ T8049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.423791][T25447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 669.589486][T25587] wg1 speed is unknown, defaulting to 1000 [ 669.745617][T25447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.265951][ T5843] Bluetooth: hci13: command tx timeout [ 670.351577][T25447] veth0_vlan: entered promiscuous mode [ 670.365689][T25447] veth1_vlan: entered promiscuous mode [ 670.395785][T25447] veth0_macvtap: entered promiscuous mode [ 670.419938][T25620] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5202'. [ 670.495499][T25620] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5202'. [ 670.619784][T25447] veth1_macvtap: entered promiscuous mode [ 670.687567][T25618] wg1 speed is unknown, defaulting to 1000 [ 670.783669][T25447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.803743][T25447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.829585][T24714] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.839138][T24714] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.868511][T25620] wg1 speed is unknown, defaulting to 1000 [ 670.877984][T24714] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.895078][T24714] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.137053][T25630] wg1 speed is unknown, defaulting to 1000 [ 671.210851][ T8049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.229540][ T8049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.318406][ T9590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.330924][ T9590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.534439][T25636] veth0: entered promiscuous mode [ 671.619694][T25635] veth0: left promiscuous mode [ 671.727017][T25641] syzkaller0: entered promiscuous mode [ 671.732516][T25641] syzkaller0: entered allmulticast mode [ 672.007237][T25652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 672.219976][T25657] wg1 speed is unknown, defaulting to 1000 [ 672.325749][ T5839] Bluetooth: hci13: command tx timeout [ 672.612415][T25668] sctp: [Deprecated]: syz.4.5215 (pid 25668) Use of struct sctp_assoc_value in delayed_ack socket option. [ 672.612415][T25668] Use struct sctp_sack_info instead [ 672.984649][T25681] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5217'. [ 673.458742][T25688] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 673.530470][T25700] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5222'. [ 673.567477][T25702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5223'. [ 673.662124][T25710] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5225'. [ 673.807763][T25720] netlink: 277 bytes leftover after parsing attributes in process `syz.2.5228'. [ 673.836943][T25717] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.886228][T25722] wg1 speed is unknown, defaulting to 1000 [ 673.943951][T25717] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.043249][T25717] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.140763][T25717] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.250188][ T8049] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.281927][T24723] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.306680][T24723] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.330369][T24723] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.404376][ T5843] Bluetooth: hci13: command tx timeout [ 674.661623][T25738] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.730848][T25747] syz_tun: entered promiscuous mode [ 674.737507][T25747] macvtap1: entered promiscuous mode [ 674.788656][T25738] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.848125][T25760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5237'. [ 674.860491][T25760] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5237'. [ 674.912814][T25738] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.993383][T25738] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.122089][T24714] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.151470][ T8049] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.177607][ T8049] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.197685][ T8049] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.305776][T25770] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5240'. [ 675.403750][T25774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5242'. [ 675.726361][T25794] syzkaller0: entered promiscuous mode [ 675.762531][T25794] syzkaller0: entered allmulticast mode [ 676.201788][T25811] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5253'. [ 676.358330][T25822] tipc: Enabled bearer , priority 0 [ 676.367438][T25822] syzkaller0: entered promiscuous mode [ 676.372935][T25822] syzkaller0: entered allmulticast mode [ 676.407595][T25822] tipc: Resetting bearer [ 676.419476][T25821] tipc: Resetting bearer [ 676.441901][T25821] tipc: Disabling bearer [ 676.556788][T25826] nbd: must specify a size in bytes for the device [ 676.589109][T25829] siw: device registration error -23 [ 676.651848][T25829] xt_TCPMSS: Only works on TCP SYN packets [ 677.389976][ T5839] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 677.401286][ T5839] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 677.413911][ T5839] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 677.423416][ T5839] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 677.433264][ T5839] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 677.483872][T25839] wg1 speed is unknown, defaulting to 1000 [ 677.613920][T25847] netlink: 'syz.2.5265': attribute type 1 has an invalid length. [ 677.659058][T25847] 8021q: adding VLAN 0 to HW filter on device bond1 [ 677.780067][T25849] bond1 (unregistering): Released all slaves [ 677.852199][T25839] chnl_net:caif_netlink_parms(): no params data found [ 677.912065][T25853] netlink: 'syz.2.5266': attribute type 29 has an invalid length. [ 677.931376][T25853] netlink: 'syz.2.5266': attribute type 29 has an invalid length. [ 678.008572][T25839] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.025785][T25839] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.033209][T25839] bridge_slave_0: entered allmulticast mode [ 678.052359][T25839] bridge_slave_0: entered promiscuous mode [ 678.062255][T25839] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.074540][T25839] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.081942][T25839] bridge_slave_1: entered allmulticast mode [ 678.095105][T25839] bridge_slave_1: entered promiscuous mode [ 678.162723][T25839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.192129][T25839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.210546][T25872] __nla_validate_parse: 2 callbacks suppressed [ 678.210563][T25872] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5270'. [ 678.230478][T25867] wg1 speed is unknown, defaulting to 1000 [ 678.251218][T25872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5270'. [ 678.251606][T25839] team0: Port device team_slave_0 added [ 678.270399][T25839] team0: Port device team_slave_1 added [ 678.326730][T25872] syzkaller0: entered promiscuous mode [ 678.332758][T25872] syzkaller0: entered allmulticast mode [ 678.341681][T25839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.349613][T25839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.376324][T25839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.416347][T25839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.423293][T25839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.450268][T25839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.551671][T25839] hsr_slave_0: entered promiscuous mode [ 678.559180][T25839] hsr_slave_1: entered promiscuous mode [ 678.565835][T25839] debugfs: 'hsr0' already exists in 'hsr' [ 678.571629][T25839] Cannot create hsr debugfs directory [ 678.770399][T25839] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.842325][T25839] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.898754][T25839] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.946632][T25839] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 679.106128][T25839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 679.116818][T25839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 679.128048][T25839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 679.141447][T25839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 679.191630][T25896] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5276'. [ 679.206110][T25896] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5276'. [ 679.230609][T25896] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5276'. [ 679.237100][ T36] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.241078][T25896] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5276'. [ 679.259819][ T36] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.269434][ T36] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.279830][ T36] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 679.285799][T25896] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5276'. [ 679.345431][T25839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.385154][T25839] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.403084][ T8049] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.410261][ T8049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.429720][ T9590] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.436923][ T9590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.449901][ T5839] Bluetooth: hci14: command tx timeout [ 679.738582][T25839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.819475][T25839] veth0_vlan: entered promiscuous mode [ 679.836837][T25839] veth1_vlan: entered promiscuous mode [ 679.851329][T25912] lo: entered allmulticast mode [ 679.887688][T25839] veth0_macvtap: entered promiscuous mode [ 679.911671][T25839] veth1_macvtap: entered promiscuous mode [ 679.945223][T25911] lo: left allmulticast mode [ 679.964120][T25839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 679.983941][T25839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 680.028154][ T63] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.044899][ T63] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.076987][ T63] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.106091][ T63] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.205927][T25916] tipc: Enabled bearer , priority 0 [ 680.219361][ T8049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.229824][ T8049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.289919][T25915] tipc: Disabling bearer [ 680.317159][ T8049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.329356][ T8049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.547748][T25928] wg1 speed is unknown, defaulting to 1000 [ 680.826586][T25928] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5284'. [ 680.841361][T25939] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 680.867940][T25928] wg1 speed is unknown, defaulting to 1000 [ 681.361868][T25954] netlink: 'syz.2.5291': attribute type 3 has an invalid length. [ 681.380045][T25954] netlink: 'syz.2.5291': attribute type 3 has an invalid length. [ 681.401990][T25954] netlink: 'syz.2.5291': attribute type 3 has an invalid length. [ 681.410566][T25954] netlink: 'syz.2.5291': attribute type 3 has an invalid length. [ 681.527670][ T5839] Bluetooth: hci14: command tx timeout [ 681.622129][T25967] ip6t_REJECT: ECHOREPLY is not supported [ 682.335303][T25959] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 682.345492][T25999] netlink: 'syz.5.5303': attribute type 1 has an invalid length. [ 682.353360][T25999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5303'. [ 682.742948][T26017] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5309'. [ 682.842373][T26019] wg1 speed is unknown, defaulting to 1000 [ 683.062894][T26030] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.135602][T26030] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.219365][T26030] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.336695][T26030] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.565101][T26055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 683.596777][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.615465][ T5839] Bluetooth: hci14: command tx timeout [ 683.641601][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.719813][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.777945][ T9590] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.888168][T26060] __nla_validate_parse: 2 callbacks suppressed [ 683.888188][T26060] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.5322'. [ 684.130367][T26066] netlink: 165 bytes leftover after parsing attributes in process `syz.3.5324'. [ 684.190380][T26066] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.198047][T26066] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.227195][T26066] bridge2: entered promiscuous mode [ 684.232438][T26066] bridge2: entered allmulticast mode [ 684.242156][T26066] team0: Port device bridge2 added [ 684.257423][T26066] bridge0: port 3(team0) entered blocking state [ 684.264418][T26066] bridge0: port 3(team0) entered disabled state [ 684.271070][T26066] team0: entered allmulticast mode [ 684.277144][T26066] team_slave_0: entered allmulticast mode [ 684.282929][T26066] team_slave_1: entered allmulticast mode [ 684.329168][T26066] team0: entered promiscuous mode [ 684.338399][T26066] team_slave_0: entered promiscuous mode [ 684.344248][T26066] team_slave_1: entered promiscuous mode [ 684.376480][T26073] ipvlan2: entered promiscuous mode [ 684.381809][T26073] ipvlan2: entered allmulticast mode [ 684.387380][T26073] geneve1: entered allmulticast mode [ 684.720155][T26087] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5329'. [ 684.735856][T26086] 8021q: VLANs not supported on tunl0 [ 684.776945][T26089] netlink: 'syz.2.5330': attribute type 1 has an invalid length. [ 684.807712][T26089] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5330'. [ 684.829971][T26089] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5330'. [ 685.048094][T26103] wg1 speed is unknown, defaulting to 1000 [ 685.081988][T26106] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5335'. [ 685.349735][T26119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5339'. [ 685.428479][T26128] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5340'. [ 685.608943][T26135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5344'. [ 685.619290][T26135] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5344'. [ 685.696259][ T5839] Bluetooth: hci14: command tx timeout [ 685.733514][ T5843] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 685.745467][ T5843] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 685.757100][ T5843] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 685.791712][T26152] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 685.801154][T26152] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 685.857571][T26142] wg1 speed is unknown, defaulting to 1000 [ 686.109324][T26169] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 686.119284][T15024] IPVS: starting estimator thread 0... [ 686.212528][T26164] syzkaller0: entered promiscuous mode [ 686.218891][T26164] syzkaller0: entered allmulticast mode [ 686.224836][T26170] IPVS: using max 25 ests per chain, 60000 per kthread [ 686.242068][T26142] chnl_net:caif_netlink_parms(): no params data found [ 687.849693][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 687.856477][T26152] Bluetooth: hci6: command 0x0406 tx timeout [ 687.856579][T26152] Bluetooth: hci15: command tx timeout [ 687.856978][T26152] Bluetooth: hci7: command 0x0406 tx timeout [ 688.253460][T26142] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.261007][T26142] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.270663][T26142] bridge_slave_0: entered allmulticast mode [ 688.278808][T26142] bridge_slave_0: entered promiscuous mode [ 688.290163][T26142] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.297550][T26142] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.306457][T26142] bridge_slave_1: entered allmulticast mode [ 688.315115][T26142] bridge_slave_1: entered promiscuous mode [ 688.392143][T26142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.417485][T26142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.480444][T26142] team0: Port device team_slave_0 added [ 688.505241][T26142] team0: Port device team_slave_1 added [ 688.559562][T26142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.569517][T26142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.598382][T26142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.613059][T26207] wg1 speed is unknown, defaulting to 1000 [ 688.628185][T26142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.636410][T26142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.665936][T26142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.748870][T26142] hsr_slave_0: entered promiscuous mode [ 688.756173][T26142] hsr_slave_1: entered promiscuous mode [ 688.762988][T26142] debugfs: 'hsr0' already exists in 'hsr' [ 688.769990][T26142] Cannot create hsr debugfs directory [ 689.017764][T26142] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.118460][T26142] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.285436][T26142] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.331598][T26221] wg1 speed is unknown, defaulting to 1000 [ 689.371167][T26142] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.743593][T26142] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 689.762551][T26142] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 689.778515][T26142] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 689.790455][T26142] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 689.804976][T26234] __nla_validate_parse: 6 callbacks suppressed [ 689.804994][T26234] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5368'. [ 689.925125][T20839] Bluetooth: hci15: command tx timeout [ 690.002170][T26142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.057690][T26142] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.083561][ T8043] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.090819][ T8043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.133408][ T9590] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.140621][ T9590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.278821][T26252] bond0: option all_slaves_active: invalid value (7) [ 690.417878][T26257] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5372'. [ 690.530951][T26262] netlink: 140 bytes leftover after parsing attributes in process `syz.5.5373'. [ 690.536176][T26142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.011380][T26142] veth0_vlan: entered promiscuous mode [ 691.026528][T26142] veth1_vlan: entered promiscuous mode [ 691.068866][T26142] veth0_macvtap: entered promiscuous mode [ 691.079511][T26142] veth1_macvtap: entered promiscuous mode [ 691.104233][T26142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.122377][T26142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.145731][ T36] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.154710][ T36] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.163512][ T36] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.176952][ T36] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.257933][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.266790][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.302723][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.313449][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.004633][T20839] Bluetooth: hci15: command tx timeout [ 694.088476][T20839] Bluetooth: hci15: command tx timeout [ 703.045817][ T31] INFO: task kworker/u8:1:13 blocked for more than 143 seconds. [ 703.054042][ T31] Not tainted syzkaller #0 [ 703.060471][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 703.069294][ T31] task:kworker/u8:1 state:D stack:21752 pid:13 tgid:13 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 703.081870][ T31] Workqueue: netns cleanup_net [ 703.086719][ T31] Call Trace: [ 703.089992][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 703.092905][ T31] __schedule+0x1798/0x4cc0 [ 703.098268][ T31] ? __lock_acquire+0xab9/0xd20 [ 703.104049][ T31] ? __lock_acquire+0xab9/0xd20 [ 703.109227][ T31] ? __pfx___schedule+0x10/0x10 [ 703.114124][ T31] ? schedule+0x91/0x360 [ 703.119260][ T31] schedule+0x165/0x360 [ 703.164626][ T31] schedule_preempt_disabled+0x13/0x30 [ 703.170139][ T31] __mutex_lock+0x7e6/0x1350 [ 703.206569][ T31] ? __mutex_lock+0x5bb/0x1350 [ 703.211399][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 703.236720][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 703.241785][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 703.250011][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 703.256134][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 703.261683][ T31] ? _raw_spin_unlock+0x28/0x50 [ 703.267239][ T31] rdma_dev_change_netns+0x39/0x300 [ 703.272465][ T31] rdma_dev_exit_net+0x203/0x340 [ 703.277622][ T31] ? __pfx___might_resched+0x10/0x10 [ 703.282921][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 703.289045][ T31] ? net_generic+0x1e/0x240 [ 703.293563][ T31] ? mutex_is_locked+0x17/0x50 [ 703.298935][ T31] ? rtnl_is_locked+0x15/0x20 [ 703.303627][ T31] ops_undo_list+0x49a/0x990 [ 703.308379][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 703.313506][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 703.318945][ T31] cleanup_net+0x4d8/0x820 [ 703.323377][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 703.331393][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 703.336705][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 703.342444][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 703.348413][ T31] process_scheduled_works+0xae1/0x17b0 [ 703.353998][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 703.360998][ T31] worker_thread+0x8a0/0xda0 [ 703.366649][ T31] kthread+0x711/0x8a0 [ 703.370747][ T31] ? __pfx_worker_thread+0x10/0x10 [ 703.375967][ T31] ? __pfx_kthread+0x10/0x10 [ 703.380569][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 703.386488][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 703.391696][ T31] ? __pfx_kthread+0x10/0x10 [ 703.396488][ T31] ret_from_fork+0x4bc/0x870 [ 703.401111][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 703.406408][ T31] ? __switch_to_asm+0x39/0x70 [ 703.411177][ T31] ? __switch_to_asm+0x33/0x70 [ 703.416545][ T31] ? __pfx_kthread+0x10/0x10 [ 703.421154][ T31] ret_from_fork_asm+0x1a/0x30 [ 703.426080][ T31] [ 703.454680][ T31] INFO: task syz.0.4229:21897 blocked for more than 143 seconds. [ 703.462732][ T31] Not tainted syzkaller #0 [ 703.498027][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 703.507422][ T31] task:syz.0.4229 state:D stack:23584 pid:21897 tgid:21896 ppid:16794 task_flags:0x400140 flags:0x00080003 [ 703.519522][ T31] Call Trace: [ 703.522813][ T31] [ 703.526086][ T31] __schedule+0x1798/0x4cc0 [ 703.530626][ T31] ? __lock_acquire+0xab9/0xd20 [ 703.536240][ T31] ? __lock_acquire+0xab9/0xd20 [ 703.541135][ T31] ? __pfx___schedule+0x10/0x10 [ 703.546275][ T31] ? schedule+0x91/0x360 [ 703.550548][ T31] schedule+0x165/0x360 [ 703.554927][ T31] schedule_preempt_disabled+0x13/0x30 [ 703.560402][ T31] __mutex_lock+0x7e6/0x1350 [ 703.567181][ T31] ? __mutex_lock+0x5bb/0x1350 [ 703.571970][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 703.577421][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 703.582461][ T31] ? kobject_put+0x270/0x480 [ 703.587196][ T31] ? kfree+0x19a/0x6d0 [ 703.591289][ T31] rdma_dev_change_netns+0x39/0x300 [ 703.597134][ T31] rdma_dev_exit_net+0x203/0x340 [ 703.602106][ T31] ? __pfx___might_resched+0x10/0x10 [ 703.607698][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 703.613165][ T31] ? net_generic+0x1e/0x240 [ 703.617857][ T31] ? mutex_is_locked+0x17/0x50 [ 703.622641][ T31] ? rtnl_is_locked+0x15/0x20 [ 703.644368][ T31] ops_undo_list+0x49a/0x990 [ 703.649007][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 703.654128][ T31] ? ops_init+0x469/0x5c0 [ 703.674718][ T31] setup_net+0x2d6/0x320 [ 703.679008][ T31] ? __pfx_setup_net+0x10/0x10 [ 703.683779][ T31] ? copy_net_ns+0x337/0x4e0 [ 703.715155][ T31] ? down_read_killable+0x1d1/0x350 [ 703.720395][ T31] ? preinit_net+0x47d/0x780 [ 703.734420][ T31] copy_net_ns+0x34e/0x4e0 [ 703.738888][ T31] create_new_namespaces+0x3f3/0x720 [ 703.744202][ T31] ? security_capable+0x7e/0x2e0 [ 703.749826][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 703.755750][ T31] ksys_unshare+0x4c8/0x8c0 [ 703.760292][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 703.765945][ T31] __x64_sys_unshare+0x38/0x50 [ 703.771029][ T31] do_syscall_64+0xfa/0xfa0 [ 703.776073][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 703.781290][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.787492][ T31] ? clear_bhb_loop+0x60/0xb0 [ 703.792186][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.798366][ T31] RIP: 0033:0x7f6f8198f6c9 [ 703.802815][ T31] RSP: 002b:00007f6f8283d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 703.811835][ T31] RAX: ffffffffffffffda RBX: 00007f6f81be5fa0 RCX: 00007f6f8198f6c9 [ 703.819973][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 703.828205][ T31] RBP: 00007f6f81a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 703.836928][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 703.845547][ T31] R13: 00007f6f81be6038 R14: 00007f6f81be5fa0 R15: 00007ffdd2978e18 [ 703.853556][ T31] [ 703.858570][ T31] INFO: task syz.5.4239:21937 blocked for more than 144 seconds. [ 703.867824][ T31] Not tainted syzkaller #0 [ 703.873400][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 703.884211][ T31] task:syz.5.4239 state:D stack:23640 pid:21937 tgid:21929 ppid:13480 task_flags:0x400140 flags:0x00080003 [ 703.897108][ T31] Call Trace: [ 703.900405][ T31] [ 703.903325][ T31] __schedule+0x1798/0x4cc0 [ 703.907944][ T31] ? validate_chain+0x897/0x2140 [ 703.912877][ T31] ? __lock_acquire+0xab9/0xd20 [ 703.917860][ T31] ? __pfx___schedule+0x10/0x10 [ 703.922808][ T31] ? schedule+0x91/0x360 [ 703.928031][ T31] schedule+0x165/0x360 [ 703.932202][ T31] schedule_timeout+0x9a/0x270 [ 703.937094][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 703.942459][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 703.947734][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 703.952929][ T31] ? wait_for_completion+0x267/0x5d0 [ 703.958513][ T31] wait_for_completion+0x2bf/0x5d0 [ 703.963627][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 703.969264][ T31] ? up_write+0x1c4/0x420 [ 703.973773][ T31] ? remove_client_context+0xc0/0x1e0 [ 703.979238][ T31] disable_device+0x1c6/0x320 [ 703.983935][ T31] ? __pfx_disable_device+0x10/0x10 [ 703.989641][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 703.995067][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 704.001051][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 704.007303][ T31] nldev_dellink+0x2d1/0x320 [ 704.011906][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 704.017350][ T31] ? apparmor_capable+0x137/0x1b0 [ 704.022359][ T31] ? bpf_lsm_capable+0x9/0x20 [ 704.027050][ T31] ? security_capable+0x7e/0x2e0 [ 704.031975][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 704.037132][ T31] rdma_nl_rcv+0x6ae/0x980 [ 704.041545][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 704.046867][ T31] ? __lock_acquire+0xab9/0xd20 [ 704.051803][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 704.057023][ T31] netlink_unicast+0x82f/0x9e0 [ 704.061779][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 704.067079][ T31] ? netlink_sendmsg+0x642/0xb30 [ 704.072023][ T31] ? skb_put+0x11b/0x210 [ 704.076844][ T31] netlink_sendmsg+0x805/0xb30 [ 704.081631][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 704.087143][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 704.092185][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 704.097553][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 704.102828][ T31] __sock_sendmsg+0x21c/0x270 [ 704.107785][ T31] ____sys_sendmsg+0x505/0x830 [ 704.112537][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 704.117854][ T31] ? import_iovec+0x74/0xa0 [ 704.122346][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 704.127067][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 704.132284][ T31] ? __fget_files+0x2a/0x420 [ 704.137144][ T31] ? __fget_files+0x3a0/0x420 [ 704.141812][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 704.146790][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 704.152257][ T31] ? do_syscall_64+0xbe/0xfa0 [ 704.157064][ T31] do_syscall_64+0xfa/0xfa0 [ 704.161556][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 704.168496][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.174728][ T31] ? clear_bhb_loop+0x60/0xb0 [ 704.179612][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.186473][ T31] RIP: 0033:0x7f3fa3b8f6c9 [ 704.190902][ T31] RSP: 002b:00007f3fa4a5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 704.199610][ T31] RAX: ffffffffffffffda RBX: 00007f3fa3de6090 RCX: 00007f3fa3b8f6c9 [ 704.207627][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009 [ 704.215659][ T31] RBP: 00007f3fa3c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 704.223615][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.231867][ T31] R13: 00007f3fa3de6128 R14: 00007f3fa3de6090 R15: 00007ffcccbcaf98 [ 704.239901][ T31] [ 704.243006][ T31] INFO: task syz.2.4257:21992 blocked for more than 144 seconds. [ 704.252124][ T31] Not tainted syzkaller #0 [ 704.258193][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 704.267296][ T31] task:syz.2.4257 state:D stack:26248 pid:21992 tgid:21991 ppid:17155 task_flags:0x400140 flags:0x00080003 [ 704.279389][ T31] Call Trace: [ 704.282856][ T31] [ 704.286130][ T31] __schedule+0x1798/0x4cc0 [ 704.290634][ T31] ? __lock_acquire+0xab9/0xd20 [ 704.295728][ T31] ? __lock_acquire+0xab9/0xd20 [ 704.300587][ T31] ? __pfx___schedule+0x10/0x10 [ 704.305572][ T31] ? schedule+0x91/0x360 [ 704.309821][ T31] schedule+0x165/0x360 [ 704.313968][ T31] schedule_preempt_disabled+0x13/0x30 [ 704.319822][ T31] __mutex_lock+0x7e6/0x1350 [ 704.325587][ T31] ? __mutex_lock+0x5bb/0x1350 [ 704.330379][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 704.335859][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 704.340884][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 704.347517][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 704.353501][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 704.358810][ T31] ? _raw_spin_unlock+0x28/0x50 [ 704.363669][ T31] rdma_dev_change_netns+0x39/0x300 [ 704.368955][ T31] rdma_dev_exit_net+0x203/0x340 [ 704.373975][ T31] ? __pfx___might_resched+0x10/0x10 [ 704.379716][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 704.385470][ T31] ? net_generic+0x1e/0x240 [ 704.389982][ T31] ? mutex_is_locked+0x17/0x50 [ 704.394878][ T31] ? rtnl_is_locked+0x15/0x20 [ 704.399543][ T31] ops_undo_list+0x49a/0x990 [ 704.404133][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 704.410433][ T31] ? ops_init+0x469/0x5c0 [ 704.414802][ T31] setup_net+0x2d6/0x320 [ 704.419027][ T31] ? __pfx_setup_net+0x10/0x10 [ 704.423766][ T31] ? copy_net_ns+0x337/0x4e0 [ 704.428398][ T31] ? down_read_killable+0x1d1/0x350 [ 704.433600][ T31] ? preinit_net+0x47d/0x780 [ 704.438480][ T31] copy_net_ns+0x34e/0x4e0 [ 704.442891][ T31] create_new_namespaces+0x3f3/0x720 [ 704.448217][ T31] ? security_capable+0x7e/0x2e0 [ 704.453173][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 704.458915][ T31] ksys_unshare+0x4c8/0x8c0 [ 704.463405][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 704.468857][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 704.474173][ T31] __x64_sys_unshare+0x38/0x50 [ 704.478984][ T31] do_syscall_64+0xfa/0xfa0 [ 704.483474][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 704.489055][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.495419][ T31] ? clear_bhb_loop+0x60/0xb0 [ 704.500085][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.506079][ T31] RIP: 0033:0x7fda1158f6c9 [ 704.510490][ T31] RSP: 002b:00007fda124ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 704.518936][ T31] RAX: ffffffffffffffda RBX: 00007fda117e5fa0 RCX: 00007fda1158f6c9 [ 704.527225][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 704.535261][ T31] RBP: 00007fda11611f91 R08: 0000000000000000 R09: 0000000000000000 [ 704.543251][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.551237][ T31] R13: 00007fda117e6038 R14: 00007fda117e5fa0 R15: 00007ffde5ec0c38 [ 704.559611][ T31] [ 704.562722][ T31] INFO: task syz.2.4257:21996 blocked for more than 144 seconds. [ 704.571590][ T31] Not tainted syzkaller #0 [ 704.576753][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 704.586299][ T31] task:syz.2.4257 state:D stack:26152 pid:21996 tgid:21991 ppid:17155 task_flags:0x400140 flags:0x00080003 [ 704.598607][ T31] Call Trace: [ 704.601893][ T31] [ 704.605351][ T31] __schedule+0x1798/0x4cc0 [ 704.609862][ T31] ? __lock_acquire+0xab9/0xd20 [ 704.614889][ T31] ? __lock_acquire+0xab9/0xd20 [ 704.619743][ T31] ? __pfx___schedule+0x10/0x10 [ 704.625361][ T31] ? schedule+0x91/0x360 [ 704.629605][ T31] schedule+0x165/0x360 [ 704.633750][ T31] schedule_preempt_disabled+0x13/0x30 [ 704.639309][ T31] __mutex_lock+0x7e6/0x1350 [ 704.643910][ T31] ? __mutex_lock+0x5bb/0x1350 [ 704.650584][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 704.656143][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 704.661180][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 704.667611][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 704.673611][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 704.678857][ T31] ? _raw_spin_unlock+0x28/0x50 [ 704.683699][ T31] rdma_dev_change_netns+0x39/0x300 [ 704.689461][ T31] rdma_dev_exit_net+0x203/0x340 [ 704.695194][ T31] ? __pfx___might_resched+0x10/0x10 [ 704.700503][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 704.706216][ T31] ? net_generic+0x1e/0x240 [ 704.710739][ T31] ? mutex_is_locked+0x17/0x50 [ 704.715556][ T31] ? rtnl_is_locked+0x15/0x20 [ 704.720231][ T31] ops_undo_list+0x49a/0x990 [ 704.725562][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 704.730661][ T31] ? ops_init+0x469/0x5c0 [ 704.735690][ T31] setup_net+0x2d6/0x320 [ 704.739952][ T31] ? __pfx_setup_net+0x10/0x10 [ 704.744874][ T31] ? copy_net_ns+0x337/0x4e0 [ 704.749469][ T31] ? down_read_killable+0x1d1/0x350 [ 704.755168][ T31] ? preinit_net+0x47d/0x780 [ 704.759774][ T31] copy_net_ns+0x34e/0x4e0 [ 704.764179][ T31] create_new_namespaces+0x3f3/0x720 [ 704.769560][ T31] ? security_capable+0x7e/0x2e0 [ 704.775426][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 704.781169][ T31] ksys_unshare+0x4c8/0x8c0 [ 704.785743][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 704.791023][ T31] __x64_sys_unshare+0x38/0x50 [ 704.796641][ T31] do_syscall_64+0xfa/0xfa0 [ 704.801154][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 704.808856][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.815102][ T31] ? clear_bhb_loop+0x60/0xb0 [ 704.819783][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.825718][ T31] RIP: 0033:0x7fda1158f6c9 [ 704.830134][ T31] RSP: 002b:00007fda124a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 704.838977][ T31] RAX: ffffffffffffffda RBX: 00007fda117e6180 RCX: 00007fda1158f6c9 [ 704.847143][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 704.855771][ T31] RBP: 00007fda11611f91 R08: 0000000000000000 R09: 0000000000000000 [ 704.863843][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.872328][ T31] R13: 00007fda117e6218 R14: 00007fda117e6180 R15: 00007ffde5ec0c38 [ 704.880368][ T31] [ 704.883475][ T31] INFO: task syz.4.4314:22190 blocked for more than 145 seconds. [ 704.891815][ T31] Not tainted syzkaller #0 [ 704.897656][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 704.906661][ T31] task:syz.4.4314 state:D stack:26472 pid:22190 tgid:22189 ppid:17738 task_flags:0x400140 flags:0x00080003 [ 704.918635][ T31] Call Trace: [ 704.921903][ T31] [ 704.924958][ T31] __schedule+0x1798/0x4cc0 [ 704.929455][ T31] ? __lock_acquire+0xab9/0xd20 [ 704.934952][ T31] ? __lock_acquire+0xab9/0xd20 [ 704.939826][ T31] ? __pfx___schedule+0x10/0x10 [ 704.944716][ T31] ? schedule+0x91/0x360 [ 704.948944][ T31] schedule+0x165/0x360 [ 704.953080][ T31] schedule_preempt_disabled+0x13/0x30 [ 704.958703][ T31] __mutex_lock+0x7e6/0x1350 [ 704.963299][ T31] ? __mutex_lock+0x5bb/0x1350 [ 704.972283][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 704.977843][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 704.982885][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 704.988666][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 704.995412][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 705.000926][ T31] ? _raw_spin_unlock+0x28/0x50 [ 705.005873][ T31] rdma_dev_change_netns+0x39/0x300 [ 705.011092][ T31] rdma_dev_exit_net+0x203/0x340 [ 705.016129][ T31] ? __pfx___might_resched+0x10/0x10 [ 705.021422][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 705.027181][ T31] ? net_generic+0x1e/0x240 [ 705.031683][ T31] ? mutex_is_locked+0x17/0x50 [ 705.036508][ T31] ? rtnl_is_locked+0x15/0x20 [ 705.041172][ T31] ops_undo_list+0x49a/0x990 [ 705.046068][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 705.051182][ T31] ? ops_init+0x469/0x5c0 [ 705.055798][ T31] setup_net+0x2d6/0x320 [ 705.060052][ T31] ? __pfx_setup_net+0x10/0x10 [ 705.064930][ T31] ? copy_net_ns+0x337/0x4e0 [ 705.069505][ T31] ? down_read_killable+0x1d1/0x350 [ 705.074765][ T31] ? preinit_net+0x47d/0x780 [ 705.079389][ T31] copy_net_ns+0x34e/0x4e0 [ 705.083817][ T31] create_new_namespaces+0x3f3/0x720 [ 705.089450][ T31] ? security_capable+0x7e/0x2e0 [ 705.094512][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 705.100455][ T31] ksys_unshare+0x4c8/0x8c0 [ 705.105043][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 705.110081][ T31] __x64_sys_unshare+0x38/0x50 [ 705.115256][ T31] do_syscall_64+0xfa/0xfa0 [ 705.119746][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 705.125253][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.131320][ T31] ? clear_bhb_loop+0x60/0xb0 [ 705.136026][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.141900][ T31] RIP: 0033:0x7f30f298f6c9 [ 705.146597][ T31] RSP: 002b:00007f30f37eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 705.155134][ T31] RAX: ffffffffffffffda RBX: 00007f30f2be5fa0 RCX: 00007f30f298f6c9 [ 705.163103][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 705.171139][ T31] RBP: 00007f30f2a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 705.179778][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.187794][ T31] R13: 00007f30f2be6038 R14: 00007f30f2be5fa0 R15: 00007fffd08610f8 [ 705.195852][ T31] [ 705.199310][ T31] [ 705.199310][ T31] Showing all locks held in the system: [ 705.207930][ T31] 4 locks held by kworker/u8:1/13: [ 705.213065][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 705.225595][ T31] #1: ffffc90000127ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 705.236267][ T31] #2: ffffffff8f2bf0b0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 705.245898][ T31] #3: ffff8880282fc700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 705.257218][ T31] 1 lock held by khungtaskd/31: [ 705.262067][ T31] #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 705.271942][ T31] 2 locks held by getty/5586: [ 705.276896][ T31] #0: ffff8880338550a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 705.286987][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 705.297366][ T31] 2 locks held by syz.0.4229/21897: [ 705.302562][ T31] #0: ffffffff8f2bf0b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 705.312498][ T31] #1: ffff8880282fc700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 705.323821][ T31] 2 locks held by syz.5.4239/21937: [ 705.329077][ T31] #0: ffffffff99b68938 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 705.339650][ T31] #1: ffff8880282fc700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 705.351151][ T31] 2 locks held by syz.2.4257/21992: [ 705.356481][ T31] #0: ffffffff8f2bf0b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 705.366807][ T31] #1: ffff8880282fc700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 705.378102][ T31] 2 locks held by syz.2.4257/21996: [ 705.383279][ T31] #0: ffffffff8f2bf0b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 705.392713][ T31] #1: ffff8880282fc700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 705.404213][ T31] 2 locks held by syz.4.4314/22190: [ 705.409717][ T31] #0: ffffffff8f2bf0b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 705.419237][ T31] #1: ffff8880282fc700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 705.430751][ T31] 2 locks held by syz.3.4457/22838: [ 705.435977][ T31] #0: ffffffff8f2bf0b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 705.446230][ T31] #1: ffff8880282fc700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 705.457883][ T31] 2 locks held by syz.9.4608/23346: [ 705.463069][ T31] #0: ffffffff8f2bf0b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 705.472512][ T31] #1: ffff8880282fc700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 705.483851][ T31] 2 locks held by syz.8.4733/23860: [ 705.489636][ T31] #0: ffffffff8f2bf0b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 705.499858][ T31] #1: ffff8880282fc700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 705.511311][ T31] 2 locks held by syz.8.4733/23862: [ 705.516966][ T31] #0: ffffffff8f2bf0b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 705.526509][ T31] #1: ffff8880282fc700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 705.537838][ T31] 2 locks held by syz.0.4884/24403: [ 705.543017][ T31] #0: ffffffff8f2bf0b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 705.552697][ T31] #1: ffff8880282fc700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 705.563944][ T31] 2 locks held by syz.0.4884/24406: [ 705.569153][ T31] #0: ffffffff8f2bf0b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 705.578872][ T31] #1: ffff8880282fc700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 705.590117][ T31] 2 locks held by syz-executor/24456: [ 705.595568][ T31] #0: ffffffff8f2cc048 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 705.607113][ T31] #1: ffffffff8df430f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 705.618524][ T31] 2 locks held by kworker/u8:5/24714: [ 705.623902][ T31] #0: ffff8880b893a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 705.633946][ T31] #1: ffff8880b8924048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 705.643102][ T31] 2 locks held by syz.1.4991/24801: [ 705.648320][ T31] #0: ffffffff8f2bf0b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 705.657792][ T31] #1: ffff8880282fc700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 705.669342][ T31] 2 locks held by syz.7.5124/25294: [ 705.674599][ T31] #0: ffffffff8f2bf0b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 705.684043][ T31] #1: ffff8880282fc700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 705.696043][ T31] 2 locks held by syz.6.5202/25620: [ 705.701252][ T31] #0: ffffffff8f2bf0b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 705.710686][ T31] #1: ffff8880282fc700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 705.722636][ T31] 5 locks held by syz-executor/25839: [ 705.728410][ T31] #0: ffff888081d08dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 705.738492][ T31] #1: ffff888081d080b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 705.748249][ T31] #2: ffffffff8f436028 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 705.758552][ T31] #3: ffff888036f6db38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 705.770662][ T31] #4: ffffffff8df430f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 705.782436][ T31] 2 locks held by syz.4.5268/25867: [ 705.787809][ T31] #0: ffffffff8f2bf0b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 705.797555][ T31] #1: ffff8880282fc700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 705.808854][ T31] 3 locks held by syz-executor/26142: [ 705.814241][ T31] #0: ffff8880a33f8dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 705.824472][ T31] #1: ffff8880a33f80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 705.834186][ T31] #2: ffffffff8f436028 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 705.845545][ T31] 2 locks held by syz.2.5365/26221: [ 705.850757][ T31] #0: ffffffff8f2bf0b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 705.860514][ T31] #1: ffff8880282fc700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 705.874114][ T31] [ 705.877025][ T31] ============================================= [ 705.877025][ T31] [ 705.886293][ T31] NMI backtrace for cpu 1 [ 705.886310][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 705.886328][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 705.886337][ T31] Call Trace: [ 705.886345][ T31] [ 705.886353][ T31] dump_stack_lvl+0x189/0x250 [ 705.886388][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 705.886407][ T31] ? __pfx__printk+0x10/0x10 [ 705.886435][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 705.886458][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 705.886479][ T31] ? __pfx__printk+0x10/0x10 [ 705.886498][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 705.886523][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 705.886544][ T31] watchdog+0xf60/0xfa0 [ 705.886565][ T31] ? watchdog+0x1e2/0xfa0 [ 705.886585][ T31] kthread+0x711/0x8a0 [ 705.886607][ T31] ? __pfx_watchdog+0x10/0x10 [ 705.886622][ T31] ? __pfx_kthread+0x10/0x10 [ 705.886642][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 705.886663][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 705.886677][ T31] ? __pfx_kthread+0x10/0x10 [ 705.886696][ T31] ret_from_fork+0x4bc/0x870 [ 705.886715][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 705.886737][ T31] ? __switch_to_asm+0x39/0x70 [ 705.886750][ T31] ? __switch_to_asm+0x33/0x70 [ 705.886761][ T31] ? __pfx_kthread+0x10/0x10 [ 705.886781][ T31] ret_from_fork_asm+0x1a/0x30 [ 705.886810][ T31] [ 705.886816][ T31] Sending NMI from CPU 1 to CPUs 0: [ 706.033771][ C0] NMI backtrace for cpu 0 [ 706.033786][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 706.033804][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 706.033814][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 706.033835][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 21 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 706.033849][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 706.033865][ C0] RAX: 7444c8b3bc5c0e00 RBX: ffffffff81967bf7 RCX: 7444c8b3bc5c0e00 [ 706.033878][ C0] RDX: 0000000000000001 RSI: ffffffff8d70fa71 RDI: ffffffff8bbf0760 [ 706.033889][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 706.033901][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7cf770 [ 706.033913][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 706.033924][ C0] FS: 0000000000000000(0000) GS:ffff888126138000(0000) knlGS:0000000000000000 [ 706.033937][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 706.033948][ C0] CR2: 000055d163f36000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 706.033964][ C0] Call Trace: [ 706.033970][ C0] [ 706.033977][ C0] default_idle+0x13/0x20 [ 706.033994][ C0] default_idle_call+0x73/0xb0 [ 706.034012][ C0] do_idle+0x1e7/0x510 [ 706.034029][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 706.034046][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 706.034062][ C0] ? __pfx_do_idle+0x10/0x10 [ 706.034084][ C0] ? do_idle+0x4ed/0x510 [ 706.034101][ C0] cpu_startup_entry+0x44/0x60 [ 706.034117][ C0] rest_init+0x2de/0x300 [ 706.034136][ C0] start_kernel+0x3ae/0x410 [ 706.034157][ C0] x86_64_start_reservations+0x24/0x30 [ 706.034173][ C0] x86_64_start_kernel+0x143/0x1c0 [ 706.034189][ C0] common_startup_64+0x13e/0x147 [ 706.034217][ C0]