last executing test programs: 5m30.028835318s ago: executing program 32 (id=326): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000009c00)={r3, @in6={{0xa, 0x4e21, 0x6, @private2, 0x3}}}, &(0x7f0000009cc0)=0x84) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="05000000d97e94090000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xc48e, 0x4, 0x1, 0x0, r4, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r6}, 0x38) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x400000000000290, 0x0, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000160c00000002000000000000000000000d000000000000"], &(0x7f0000000f80)=""/4096, 0x26, 0x1000, 0x1, 0x80}, 0x1f) r10 = socket(0xa, 0x3, 0x3a) bind$alg(r10, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(lrw-twofish-3way,sha384-generic)\x00'}, 0x58) pread64(r9, &(0x7f0000000040)=""/162, 0xa2, 0x2) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r12, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r13, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c00178004000500040004"], 0x138}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000001f80)=ANY=[], 0x0) 1m44.376234712s ago: executing program 33 (id=1923): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) unshare(0x2040400) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x18, r3, 0x30d, 0x4, 0xfffffffd, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44011}, 0x20000880) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x1}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x7}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xfffffffd}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r8, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={@map, 0xffffffffffffffff, 0x17, 0x1, 0xffffffffffffffff, @void, @value, @void, @void, r9}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x34, 0x0, @val=@tcx={@void, @value=r10, @void, @void, r9}}, 0x1c) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x4, 0x18}, 0xc) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000010000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r12, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r13}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@map=r11, r1, 0x6, 0x20, 0x0, @void, @void, @void, @value=r13, r9}, 0x20) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r7, 0x0, {0x0, 0xff, 0x3}, 0x1}, 0x18) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c0100001000130700000000fbdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 1m43.307326741s ago: executing program 34 (id=1927): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES8=r0, @ANYRESOCT=0x0], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x35, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r6, 0x0, 0xf00000000000000}, 0x38) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x34}]}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x10000, 0x1, 0x0, 0x0, 0x7, 0x1, 0x2, 0x20}}) bind$tipc(r7, &(0x7f00000001c0)=@id={0x1e, 0x3, 0x1, {0x4e20, 0x3}}, 0x10) unshare(0x6a040000) r8 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) readv(r8, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/217, 0xd9}], 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) 1m25.873085151s ago: executing program 35 (id=2061): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x3, 0x7, 0x1000, 0xffffffffffffffff, 0xfffffffd}, 0x50) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8}]}, 0x40}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, 0x0) pipe(&(0x7f0000000040)) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xd0f, 0x200000, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x7, 0xfff3}}}, 0x24}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') close(0x4) unshare(0x6a040000) socket$rxrpc(0x21, 0x2, 0x2) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003ec0)={0x1, [], 0x7, "3113d84c0ab819"}) 1m19.14444829s ago: executing program 6 (id=2215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}}, 0x0) close(r0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r3) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r4, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x579}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x49}]}, 0x64}, 0x1, 0x0, 0x0, 0x48044}, 0x24004000) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r5, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xf4f}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x44040) 1m18.97436992s ago: executing program 6 (id=2216): r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) unshare(0x22020600) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_create1(0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e25, 0xffffffff, @loopback}, 0x13) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000e00)=0x14, 0x4) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) unshare(0x6020480) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xf, &(0x7f0000000800)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "7174f92a912ce7c5", "b69a1d55049ff7c98e9892b0b714e500", "c4f8eaae", "0a0ae23ccd3a7f47"}, 0x28) writev(r5, &(0x7f0000000600)=[{&(0x7f0000000200)='f', 0x1}], 0x1) 1m17.644356364s ago: executing program 36 (id=2122): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, 0x0, &(0x7f0000000180)=0x38) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000001080)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @empty}}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}}}], 0x50}}], 0x1, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000030000000700000000100000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00#\x00'/28], 0x50) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000064feffff620af0fff8ffffff71a417ff000000001f030000000000002e100200000000002604fdffff02000014010000030003001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, 0x0) pipe(&(0x7f0000000040)) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xd0f, 0x200000, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x7, 0xfff3}}}, 0x24}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') close(0x4) unshare(0x6a040000) socket$rxrpc(0x21, 0x2, 0x2) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000f80)=ANY=[@ANYBLOB="aa75846d4a4e9dbe54faff7c77aa342e227a000028006400000402900000fa09c8cb4a0100b30000008a59c086df00"/59], 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003ec0)={0x1, [], 0x7, "3113d84c0ab819"}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r3, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, 0x1000000, 0x2, 0x0}}, 0x10) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r8, &(0x7f0000000000)={&(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@dstopts_2292={{0x18, 0x29, 0x3b}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x89, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x68}, 0x0) 1m17.452926205s ago: executing program 6 (id=2221): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000240)="5e49746c998a48e7fa3a8030b174ba0b4a99209e9ec1a5dd41d6b525e976f3b59d33f0982e62e2d5af79f48480d0f9bc9d4fd710455c9f8d25e49aa1cf3f6225107a8f8caa0794d01ca90ae6b10824a82e996b9cfa4a75dfa69f85842cf5bb67318d6841f9ffffff2cc3d90c513e476d589168759d8040a1e01aa203e0287fb8d86d3000"/142, 0x8e, 0x0, &(0x7f0000004ff0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, 0xffffff1d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000001600000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x24}, 0x94) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x4855}, 0x24000052) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) listen(r0, 0xda90) 1m17.179614836s ago: executing program 6 (id=2223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={r2}, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000440)=0x8, &(0x7f0000000480)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r1, @ANYRESOCT=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = epoll_create(0x4) r5 = socket(0x28, 0x801, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000280)={0x30000010}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xb}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x1000, 0x800, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r10, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x2e}, 0x10) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast2}, &(0x7f0000000180)=0xc) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r12, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r12, 0x84, 0x17, &(0x7f00000001c0)=ANY=[], 0x9) 1m16.171244552s ago: executing program 6 (id=2229): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) unshare(0x6a040000) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000070000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="0300000022000000400073700187192b0dde0000"], 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) (async) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000080)={'bond0\x00'}) (async) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000029c0)=ANY=[], 0x14}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r5, 0x0) (async) mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r7, 0x0) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0xfffff000) (async) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0) (async) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000060601"], 0x14}}, 0x810) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000000010000000200000000000000005f"], &(0x7f0000001540)=""/4096, 0x58, 0x1000, 0xa}, 0x28) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) (async) write(0xffffffffffffffff, 0x0, 0x0) 1m11.92882609s ago: executing program 8 (id=2255): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0xd8, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_USERDATA={0x8a, 0xc, "037f865135ec566e18551128c702c952d218d67c552efba77b3db346a4dc1ac4a6b0ecf8038ebc19eda06f594ab35092b296fc1dd3fe960ce96b8b29f5d8af23fbae24ddc9eafbdc3e223b21e39266ce8650db55b9b899f06d5f783479f132abef749d72d04f2e13be757f23c7734675f50b0f5b6583ec18f9dc64c954888936fc416421cf36"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x148}}, 0x20008000) 1m11.858033419s ago: executing program 8 (id=2256): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f0000000400)={{0x3, @default, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, 0x0, 0x8000) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) syz_emit_ethernet(0x7a, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x10000) shutdown(r4, 0x0) r6 = accept(r5, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000280)="a5", 0x1, 0x11, 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSPASS(r7, 0x40107447, 0x0) write$ppp(r7, &(0x7f0000000300)="5af9", 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x3ff, 0xbd, 0x13, 0x9}]}, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m10.910550934s ago: executing program 8 (id=2259): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x84) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000340)="b9cd14c222ee", 0x6}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000b40)="e760d69964e685f8b2d2bddd1d55eb978b77e7b451e77ff1ff499f296487825326bfb3d9ca47b73d3faa11279adeec1eddc83f7fa34374cbb394fa85048edef1d8da212092da7cf2c39d027173b0301c81bf8c87d169cde3c2324d932358ebff48fdbbda84dfbd26d8d3156ee198d6ae49f0d445da3021ca250751", 0x7b}], 0x1, &(0x7f00000002c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x79d13066}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6d4f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x60}}, {{&(0x7f0000000380)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000003c0)="e41aa051e4c224f4979242b6c580331b632b09cf039769977a51eb46756b285425c84cb8554ac8c046e340e29171df6c74d486839c738a87cc33a899bd12eeecfdc90ccfc1a5a7ac3a2338bccd5f10bd266893e38a5f2fcb3a55f723fb6fb3dfa320b33578b644c4ade9d12717ff0d1e9e32abf7576c6e236eda5c1e223e53601d8ae51223cd7ffdda7d49391f0b6e09f5919d17ec4cca72693730", 0x9b}, {&(0x7f0000000480)="f86e20a3fcff3ea9f81378e4cdc9162dbec7dcea60e9b82f3f09f9ce9312ef78b58e1b406f6cf73282112cedee0aaa191cd31ee1545eecab9b01738eb18f815f35c214bb84b23d00d48bca7c3015360702f5bcc188380761af44aa2d88b18b77", 0x60}, {&(0x7f0000000500)="d137180c39e45a89f264fdb4f46d9a62ca72208c2c511171bf2df208058e9374a11052198faff099814a9afa0ac2be4c7b5750079a9493b75d8dbae567a09d53865bc5c128f9", 0x46}, {&(0x7f0000000580)="0d389cc73423b76b821489415a757dcc8432ed8d6308ccd780105594286d54f3", 0x20}], 0x4, &(0x7f0000000980)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x37c2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @private=0xa010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0xf0}}], 0x3, 0x2400c801) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", '\x00', "f8dde5bf3eba23db"}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000e7c10000009502000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xab, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80) 1m10.844348312s ago: executing program 8 (id=2260): r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) unshare(0x22020600) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_create1(0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e25, 0xffffffff, @loopback}, 0x13) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000e00)=0x14, 0x4) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) unshare(0x6020480) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="d9e81fb433fbce0c1e00020000000000181101000fa64d11ed31a4c1d686f909bdbaf79d1546b9cfca718219a384884cb7c9dc817800b3efe3e9cd31971ed8aafbb93d4361f78c86dfae532ba656fac1d963a68fb38863c7ac82d13c7eb72a8ea6d264320348", @ANYRES16=r7, @ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "7174f92a912ce7c5", "b69a1d55049ff7c98e9892b0b714e500", "c4f8eaae", "0a0ae23ccd3a7f47"}, 0x28) writev(r5, &(0x7f0000000600)=[{&(0x7f0000000200)='f', 0x1}], 0x1) 1m9.561582287s ago: executing program 8 (id=2263): syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x10, 0x3a, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x9, 0x2, 0xbd, 0x7ff}}}}}}, 0x0) (async) r0 = socket$isdn_base(0x22, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x3, 0x6) (rerun: 64) r2 = socket(0x10, 0x3, 0x0) (async) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) unshare(0x2020400) (async) connect$rxrpc(r4, 0x0, 0x0) ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f0000000680)={0x0, @bcast, @bpq0, 0x86, 'syz1\x00', @null, 0x0, 0xa, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) (async) unshare(0x10000000) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) syz_init_net_socket$ax25(0x3, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x800, 0x0, 0x0) (async) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x4e23, 0x7000, @mcast2, 0x1be0000}, 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xb8410608002e4972, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xc1, 0x0, 0x0, 0x7, 0x0, 0x1000]}, [@TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x90}}, 0x20000000) bind$isdn_base(r0, &(0x7f0000000000)={0x22, 0x1, 0x7, 0x4, 0xa2}, 0x6) 1m9.444487715s ago: executing program 8 (id=2265): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) unshare(0x6a040000) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xffffffff, 0x4e, 0x567}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x88, 0x16, 0xa01, 0x0, 0x1, {0x2}, [@nested={0x74, 0x122, 0x0, 0x1, [@nested={0x2c, 0x17, 0x0, 0x1, [@nested={0x20, 0xd0, 0x0, 0x1, [@typed={0xb, 0x13b, 0x0, 0x0, @str='TCPMSS\x00'}, @typed={0x4, 0x1b}, @nested={0x4, 0x119}, @typed={0x5, 0x27, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0xb8, 0x0, 0x0, @ipv4=@local}]}, @typed={0x44, 0x55, 0x0, 0x0, @binary="cb0db6b082bc50c0e34dbe0bb92fb82fa8311ec616baa19aafe6525ab0ea667ade0abf146b514d745268a599e3663af711714287f229ee2890b07423a1646fde"}]}]}, 0x88}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) unshare(0x44000000) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) (async) r3 = socket$key(0xf, 0x3, 0x2) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x1d0, 0x1d0, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x3b, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5c, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x652}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) (async) sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7f}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000045, &(0x7f0000000100)={0xa, 0x4e21, 0xfffa, @empty, 0x3}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000000c0)=""/50, &(0x7f0000000140)=0x32) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r6, 0x852ac000) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x4c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000020000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24044011}, 0x20000890) (async) socket$netlink(0x10, 0x3, 0x0) 1m6.74481995s ago: executing program 37 (id=2196): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000c00078008000640000000070500010005000400020000000900030073797a310000000011000300686173683a69702c6d61726b00000000000000000000000000000000a4a2a60f063dec0eb52b4cf6d8c99eff44230d1c781b98a4508c40e3d3224fda8bd7e4e1415553cdf020a7a887837252cbc4a9ada93562bca65ba7d1c1bddd24d7d7cd586f723f70a6371f34c3d4331b0f8dd953db515c0446cf264c043235f72a7bde185ce6e954aabcb9841d65f6"], 0x58}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x800003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x20000000000000, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) close(0x4) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') unshare(0x6a040000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r5, 0x5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r6, &(0x7f0000000300)="75128188f9987b8db3a7cec5e103807ed700000000000004013cf26541b1701a371eca35a38b827ff401ee99058b9a72a20f8b773f9ec3a2d10259549e329ad7d6f4a0f6bbbe7c577e84c4027e0a6272c38480f30d51ac5e8db01d867a2355a6abb18444bf07437ed14c5a8a7acc1a7b4e7f7fe18f0626e5a935a14e7683ff779ac5239362c6a92025df292113de247e5456bcb640ac4bd939c68a6aefe40f64abbe1e7c0bf58e7063b0609a12456c607e4edabc4c84d667e481e2ca01cd410538f0c550fdcde8535143073990ada5f944b7b361e326a0a5a2d64f4798900ea2a11b78e0e8e4ed", 0xe7, 0x20064000, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, 0x1}, 0x1c) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, 0x0, 0x0) connect$inet(r7, 0x0, 0x0) 1m0.891925774s ago: executing program 38 (id=2229): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) unshare(0x6a040000) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000070000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="0300000022000000400073700187192b0dde0000"], 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) (async) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000080)={'bond0\x00'}) (async) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000029c0)=ANY=[], 0x14}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r5, 0x0) (async) mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r7, 0x0) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0xfffff000) (async) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r6, 0x0) (async) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000060601"], 0x14}}, 0x810) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000000010000000200000000000000005f"], &(0x7f0000001540)=""/4096, 0x58, 0x1000, 0xa}, 0x28) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) (async) write(0xffffffffffffffff, 0x0, 0x0) 59.474165973s ago: executing program 4 (id=2301): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x114}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"/104], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) poll(&(0x7f0000000140)=[{r5, 0x14}], 0x1, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IP_VS_SO_GET_DAEMON(r8, 0x0, 0x30, 0x0, &(0x7f0000000040)=0x90) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000070500030001000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a03000000000000000000020000000900010073797a30000000000900020073797a32000000002c000480280001800b00010064796e7365740000180002800900010073797a320000000000140000001100010000000000000000000000000a"], 0x80}}, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x2, 0x9, 0x14, @remote, @private0, 0x8, 0x1, 0x4, 0xd}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x8, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0xc0, 0xa, 0x1}}) 58.992565496s ago: executing program 39 (id=2246): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000280)="f5", 0x1) listen(r2, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESHEX=r3, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000052b4092dfbb12199b20b3484c44712fb1268c9aedb6890fc6fcabea6e9cb6bfcd3760ea02af1d230328a97a5d4a88467e2df6be349081e7055694fb46aff8a3ae4c2a89a8a4cd88e3a2c3c9d0316a8929819bfbce3857cec3c1e747a095e4377b3a009c1e5bdc7abd4e9047c301dabe1534a732de4fb00"], 0x31) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) unshare(0x64000600) r6 = gettid() r7 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r6, @ANYBLOB="140003002e"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xfa156000) 58.637307986s ago: executing program 4 (id=2304): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad6706000002000000200200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f750000000000006154000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56600a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8ddaf2cdad3d1a74a2f078aa6402483856a6e495408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae06e394c9639564f000fc3cdd05a157544d0200000000000000ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f88e80ef80c6ed3e1ff91ff111000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcbacec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0ddd932d838ff651023853d42210642986f8bbc7340bc8393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d68124674478186edd036f15bf847c33f79e1a0ad3d2b5080ecb01420c9f1b534e969fce97ffff07000009000000bfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a823e28f359608ea326c77a1aa17318f392a0ec6c188916f4149c503027feccfd68ec826da90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8e68f076c659f56d6c7f97a94d604f45cfe88b30c170000000001000000ef931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f0400000000000000d23b48bb38b31a14ffcddd92ce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f1300007d6072f0cf120ad2ba519afdd43a14000000000000000000000000007ef2f3c58d045f0700000094069acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d000000000000000000007758b1267669ded883b5867c5916a74843b784955108f750c57744c76a09629dd0aaca5cb0f14f49db80a1aa2692c18fbb31cbdb3f2e138e6d5ba3491fc3617b511f24bad26466407e39000000000000d7a1bf4624d31c13a6840f45a7f4e01a50d790132abb36915e35b1ac35bf3921357f638684bba17b8fe1e2123153ecd6d1f76820d4f8fa0b96b50c457ae8d5f2351cdb7bc8170380557bc11cf6ee3395974e37018a2a7473312cb32affb8ff72a253e0d36099e460f13694b9891af526d9608271838e83d17103887f34210dd4c0cf60dec608b4ca5ba2f3037bf381e7b5d5b27820000000000000000000000b719bd34f3244730f708fdd532640edc6b82dd4ad72ecbaccafef806f5447aba2246d56a601bbd8c24ba1e16dda3296ce10de683000"/1782], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 58.16613912s ago: executing program 4 (id=2305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0xd8, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_USERDATA={0x8a, 0xc, "037f865135ec566e18551128c702c952d218d67c552efba77b3db346a4dc1ac4a6b0ecf8038ebc19eda06f594ab35092b296fc1dd3fe960ce96b8b29f5d8af23fbae24ddc9eafbdc3e223b21e39266ce8650db55b9b899f06d5f783479f132abef749d72d04f2e13be757f23c7734675f50b0f5b6583ec18f9dc64c954888936fc416421cf36"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_XOR={0x8, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1b4}}, 0x20008000) 57.857073705s ago: executing program 4 (id=2306): r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) unshare(0x22020600) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_create1(0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e25, 0xffffffff, @loopback}, 0x13) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000e00)=0x14, 0x4) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) unshare(0x6020480) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="d9e81fb433fbce0c1e00020000000000181101000fa64d11ed31a4c1d686f909bdbaf79d1546b9cfca718219a384884cb7c9dc817800b3efe3e9cd31971ed8aafbb93d4361f78c86dfae532ba656fac1d963a68fb38863c7ac82d13c7eb72a8ea6d264320348", @ANYRES16=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "7174f92a912ce7c5", "b69a1d55049ff7c98e9892b0b714e500", "c4f8eaae", "0a0ae23ccd3a7f47"}, 0x28) writev(r5, &(0x7f0000000600)=[{&(0x7f0000000200)='f', 0x1}], 0x1) 55.999597717s ago: executing program 4 (id=2309): r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) unshare(0x22020600) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_create1(0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e25, 0xffffffff, @loopback}, 0x13) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000e00)=0x14, 0x4) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) unshare(0x6020480) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "7174f92a912ce7c5", "b69a1d55049ff7c98e9892b0b714e500", "c4f8eaae", "0a0ae23ccd3a7f47"}, 0x28) writev(r5, &(0x7f0000000600)=[{&(0x7f0000000200)='f', 0x1}], 0x1) 54.55130896s ago: executing program 4 (id=2313): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x3, 0x7, 0x1000, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r3 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x18, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x5}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @alu={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x10}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000fc0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x41, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x6}, 0x94) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, 0x0) pipe(&(0x7f0000000040)) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xd0f, 0x200000, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x7, 0xfff3}}}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001880)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), r5) sendmsg$NL80211_CMD_GET_POWER_SAVE(r5, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x40000) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) setsockopt$inet6_tcp_int(r8, 0x6, 0xa, &(0x7f0000000f80)=0x2, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') close(0x4) unshare(0x6a040000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x34, r10, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080) unshare(0x40000) socket$rxrpc(0x21, 0x2, 0x2) socket$inet(0x2, 0x3, 0x2) 54.353522211s ago: executing program 40 (id=2265): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) unshare(0x6a040000) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xffffffff, 0x4e, 0x567}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x88, 0x16, 0xa01, 0x0, 0x1, {0x2}, [@nested={0x74, 0x122, 0x0, 0x1, [@nested={0x2c, 0x17, 0x0, 0x1, [@nested={0x20, 0xd0, 0x0, 0x1, [@typed={0xb, 0x13b, 0x0, 0x0, @str='TCPMSS\x00'}, @typed={0x4, 0x1b}, @nested={0x4, 0x119}, @typed={0x5, 0x27, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0xb8, 0x0, 0x0, @ipv4=@local}]}, @typed={0x44, 0x55, 0x0, 0x0, @binary="cb0db6b082bc50c0e34dbe0bb92fb82fa8311ec616baa19aafe6525ab0ea667ade0abf146b514d745268a599e3663af711714287f229ee2890b07423a1646fde"}]}]}, 0x88}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) unshare(0x44000000) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) (async) r3 = socket$key(0xf, 0x3, 0x2) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x1d0, 0x1d0, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x3b, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5c, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x652}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) (async) sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7f}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000045, &(0x7f0000000100)={0xa, 0x4e21, 0xfffa, @empty, 0x3}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000000c0)=""/50, &(0x7f0000000140)=0x32) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r6, 0x852ac000) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x4c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000020000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24044011}, 0x20000890) (async) socket$netlink(0x10, 0x3, 0x0) 46.380188686s ago: executing program 1 (id=2297): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x2000c040) epoll_create1(0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (fail_nth: 40) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0xfffffffffffffffc, 0x0, 0x8, 0x9, 0x400, 0x23, 0x4, 0x36a58e4a, 0x9, 0x5, 0x72, 0x1}}) 46.051080445s ago: executing program 1 (id=2328): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"/1782], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 46.000988247s ago: executing program 1 (id=2329): r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) unshare(0x22020600) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_create1(0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e25, 0xffffffff, @loopback}, 0x13) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000e00)=0x14, 0x4) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) unshare(0x6020480) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "7174f92a912ce7c5", "b69a1d55049ff7c98e9892b0b714e500", "c4f8eaae", "0a0ae23ccd3a7f47"}, 0x28) writev(r5, &(0x7f0000000600)=[{&(0x7f0000000200)='f', 0x1}], 0x1) 44.448159916s ago: executing program 1 (id=2334): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0x10605}}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000180)={'syztnl0\x00', r2, 0x8000, 0x7, 0x3ff, 0xd, {{0x2e, 0x4, 0x3, 0x2, 0xb8, 0x67, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @rand_addr=0x64010101, {[@rr={0x7, 0x1f, 0xf5, [@broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x3d}, @multicast1, @loopback, @multicast2, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x44, 0xc9, 0x3, 0x7, [{@multicast2, 0x9}, {@private=0xa010101}, {@multicast2, 0xf6}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0xb}, {@dev={0xac, 0x14, 0x14, 0x11}, 0xff}, {@local, 0x7}, {@private=0xa010101, 0xffff}, {@local, 0x8}]}, @rr={0x7, 0xb, 0x79, [@multicast1, @rand_addr=0x64010101]}, @rr={0x7, 0xf, 0x2a, [@multicast1, @local, @private=0xa010101]}, @end, @lsrr={0x83, 0x13, 0x4a, [@rand_addr=0x64010100, @broadcast, @rand_addr=0x64010100, @broadcast]}, @timestamp={0x44, 0x10, 0x24, 0x0, 0xa, [0x4, 0x7, 0x1000]}]}}}}}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x98, r0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x70}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x98}, 0x1, 0x0, 0x0, 0x24004880}, 0x11) (async) close(r1) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0xfeb3d975f6d798a5, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x2, @bearer=@l2={'ib', 0x3a, 'caif0\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x24008080) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r3) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000005c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r5, 0x600, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x24000084) (async) r7 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, &(0x7f00000006c0)=0x32, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xb8, 0x14, 0x100, 0x70bd27, 0x25dfdbfb, {0x1f, 0x5f}, [@INET_DIAG_REQ_BYTECODE={0xa4, 0x1, "7f2095dc2c8257629678c0aec5a4f6507f7ee2064ed1155745f3066c8ea47afc9fa90b37a4fecafd5adfe8e31005a552d2ebe58a98571747582c4c5cd186050fcf61c71f4f522f3d1623c80c344637c1a5d2070280f976c206a13649a826d4d41dbba0ce8ab782045e0b22265a8f61ba8a1584c34ad8a2e40b929bff30ecf4bfacda13c71236d4570c184446d28e16956d2f8ea3655d9581a1e486127e8a6f1e"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4044814}, 0x20008884) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(r8, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x8}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x24004000) (async) r10 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r10, &(0x7f0000000980)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x2, 0x2}}, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a00), r4) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r11, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x17, 0x20}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) (async) r12 = accept$netrom(0xffffffffffffffff, &(0x7f0000000b40)={{}, [@remote, @bcast, @bcast, @null, @rose, @remote, @remote, @default]}, &(0x7f0000000bc0)=0x48) ioctl$SIOCGSTAMP(r12, 0x8906, &(0x7f0000000c00)) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x2, 0x3) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000c40)) (async) socket$nl_route(0x10, 0x3, 0x0) r13 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_POWER(r13, 0x112, 0x9, &(0x7f0000000c80)=0x4, 0x1) 44.166533288s ago: executing program 1 (id=2335): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0xfffffffe, 0x8, 0x5}, 0x50) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x153}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x800}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x8801) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x30000000}, 0x4000010) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r1, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x24}}, 0x44800) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000001140)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000040)={0x1d, r6, 0x1, {0x2, 0xf0}}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000140)=0x80) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="11850000400000000000090000000800040000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40850}, 0x0) 43.972618117s ago: executing program 1 (id=2336): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x62040200) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r5, 0x0) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r9, 0x0) (async) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x1, 0x3}, 0x6) (async) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) 41.558569328s ago: executing program 5 (id=2350): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000940)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20, 0x1, 0x40000000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x11, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb5cf}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000003bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 41.427083602s ago: executing program 5 (id=2352): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0x6}, {0xc, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8d, 0xc}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0x6}, {0xc, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8d, 0xc}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket(0x2, 0x5, 0x0) (async) socket(0x2, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x64c, @bcast, @netrom={'nr', 0x0}, 0x3, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x64c, @bcast, @netrom={'nr', 0x0}, 0x3, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) socket$unix(0x1, 0x2, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000540, 0x0, 0x0, 0x20000570, 0x200005a0], 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB]}, 0x78) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r8, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, 0x0, 0x0) listen(0xffffffffffffffff, 0x50) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f00000002c0)) (async) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f00000002c0)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0) 41.270953724s ago: executing program 5 (id=2353): sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000107010200000000000001000500000514000783080001400000ec5e080002400000007fec1dda874d70a8b6cdc133279c37f6da8a70dd07bb1f1553d1f1e5c40c3a9089bec0537c8de966d1b6017bf24573a30ec702568430c4d87f2bfd6bbf2eaf8940fa8963f813bd762f5318784b1feec2ce67a8557bc6dd7df18437defbc3e25b00a2b513851b6c7d509c114a7cd9cd3656ba33e031812c800ccfd7a35e507c7705008be2ea2a6f35446182b31f3176d814a3c9f99bfaac6425159dc45b2d239928fb53047a78072c5a"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c4) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000012c0)={0x0}, &(0x7f0000001300)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d00000000009500030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) poll(0x0, 0x0, 0x7) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)=r1}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000fc0)={&(0x7f0000000e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x0, 0x5}, {0xb, 0x4}, {0x9, 0x2}, {0x8, 0x2}, {0xd, 0x4}, {0xb, 0x3}, {0x6, 0x1}]}]}, {0x0, [0x0, 0x2e, 0x61, 0x0, 0x0, 0x2e]}}, &(0x7f0000000ec0)=""/225, 0x64, 0xe1, 0x0, 0x1}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x18, 0x550, 0x2, 0x3, 0x1, 0x1, 0xffff0000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x9, 0xd, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x9}, [@exit, @call={0x85, 0x0, 0x0, 0x6a}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000e00)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000002380)=""/4096, 0x41000, 0x40, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000001000)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001040)={0x4, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001100)=[r6, r3], &(0x7f00000011c0)=[{0x3, 0x2, 0x7, 0x3}, {0x1, 0x3, 0x9, 0x8}], 0x10, 0x1}, 0x94) sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{&(0x7f0000000b80)={0xa, 0x4e20, 0x0, @empty, 0x9}, 0x1c, &(0x7f0000000d40)=[{0x0}], 0x1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="200000000000000029000000360000003c01000000000000010009000502000418000000000000002900360001001600000000000000400000000000000029000000360000003304000000000000000041c9102001000000000000000000000000000200000000cb5c6095c57dd1aaea2edc4abd4291ba4baa1ee2be97ae8a9e043d6ca77312c677716ccf19cec84e0343f68aec00e5fe6389d87a270c5f38c02ec3d3512afc0bab68fb2a212b1262e765f468c139540b36"], 0x78}}], 0x2, 0x4040005) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000010000107000004416f1800000a0000000c0002006e6c383032313100"], 0x20}}, 0x0) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r10, 0x112, 0x13, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r0, 0x1ad72f7) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={r2, r6, 0x0, 0x4, &(0x7f0000000b00)='GPL\x00', 0x0}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000ac0)={@fallback=r3, 0xffffffffffffffff, 0x2, 0x1035, r7, @void, @void, @void, @value=r11}, 0x20) 41.0508138s ago: executing program 5 (id=2357): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'gre0\x00'}) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c0008000200080000003e120000080002001040e5"], 0x44}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r9) r10 = socket(0x840000000002, 0x3, 0x100) connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r10, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r10, 0x0, 0x24, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1800000, 0x22051, r4, 0x10000000) 39.518767928s ago: executing program 5 (id=2364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x7c}}, 0x20000800) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000035c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x1a4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x178, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}, {0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x1cc}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) 39.463492126s ago: executing program 41 (id=2313): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x3, 0x7, 0x1000, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000064feffff620af0fff8ffffff71a417ff000000001f030000000000002e100200000000002604fdffff02000014010000030003001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r3 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x18, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x5}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @alu={0x7, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x10}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000fc0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x41, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x6}, 0x94) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, 0x0) pipe(&(0x7f0000000040)) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xd0f, 0x200000, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x7, 0xfff3}}}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001880)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), r5) sendmsg$NL80211_CMD_GET_POWER_SAVE(r5, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x40000) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) setsockopt$inet6_tcp_int(r8, 0x6, 0xa, &(0x7f0000000f80)=0x2, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') close(0x4) unshare(0x6a040000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x34, r10, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080) unshare(0x40000) socket$rxrpc(0x21, 0x2, 0x2) socket$inet(0x2, 0x3, 0x2) 39.250532499s ago: executing program 5 (id=2367): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x62040200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x19}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe58d600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f00000000c0)) 30.035486779s ago: executing program 2 (id=2431): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f0000000400)={{0x3, @default, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, 0x0, 0x8000) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_emit_ethernet(0x7a, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x10000) shutdown(r5, 0x0) r7 = accept(r6, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000280)="a5", 0x1, 0x11, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSPASS(r8, 0x40107447, 0x0) write$ppp(r8, &(0x7f0000000300)="5af9", 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x3ff, 0xbd, 0x13, 0x9}]}, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f406", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 29.116883763s ago: executing program 2 (id=2439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x15, 0x5, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) (async) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="01ea620000000800"]) (async) socket$igmp(0x2, 0x3, 0x2) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x2081, 0x4) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) getsockopt(r1, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000029c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) 28.994693926s ago: executing program 2 (id=2442): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x3c, 0x29, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8042}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r1 = socket(0x11, 0x2, 0x10001) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5}, {}, {0xffff, 0x0, 0x6}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x420008}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x43}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890c, &(0x7f0000000000)) sendmmsg$inet6(r1, &(0x7f0000000f40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xc6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="042713a11cb1904fefa6481abe597c488d4f10bf4c96a71730c02472ccc547aa45cea4d93f73ea032d0289082667494901", 0x31}, {&(0x7f0000000080)="845944de2e70859c347fcc86d3be8d044f6c66bd69ba785ba6829ec2cc50d0b757f50b3182ffc2ee7c5762cfea64fed009e2821e09052b3640fe4484b2df7905bef7d1a586ea7c045514e3b31beaa94398e96bf95f4cd93989961abc0da2a15145828a47d1bef015bfb2b09f1afde8f7694b170c12e6683fce6124e262b06b32469bddecc70644bc887f28cb8ea327bbee406d34d1d6295a1e0b5ce46a3a7067f1047bb8237d85263333de37b52937d601b9766d7bfc45187c7e541b07100783b87f0138984ce7e6ce9c23e98bbfe9093b960de7", 0xd4}, {&(0x7f0000000180)="01e2597543aef861eba9a89a2f967dc1a28c4e19d6d6461c9b196ae7", 0x1c}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="ab8ecc4d392deab3519d31658116458a434baa907c304f7aa5cd5e4b4e5eec01ed91b5a590bece7785ead769562951cb0bc0", 0x32}], 0x5, &(0x7f00000002c0)=[@rthdr={{0x98, 0x29, 0x39, {0x2b, 0x10, 0x1, 0x5, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @private0, @private2, @loopback, @private2, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @rthdrdstopts={{0xa0, 0x29, 0x37, {0x2b, 0x10, '\x00', [@hao={0xc9, 0x10, @local}, @generic={0x7, 0x5b, "ea801b18016f01a13e1fa0b570e70e536324d8304b3c25d6865e6f20912bba1116266c1f9d26a2af4f5619a290234990c5fc4dd1cedc742a133d9b0a1312fde3cd0c9dcf4a1a2576daf3ce8bf8f515ed0b11d141c4ec7212e9f19c"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}], 0x138}}, {{&(0x7f0000000400)={0xa, 0x4e20, 0x1, @local, 0x80}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000440)="40d5016504f86f55e2e52142e424d0551e8e535a540a28f08da096fc7c57431e96ddb832db7f07d5d97db270e7aa48534e770d147e49e1a2afd96282160e33a1d8bda73bad66ff5a83fe7f1fbbd7907241612ac7a7f1ee327f6314c528fe3866fdcbe583da6dc6eb40652e7e2cc2a93e93de6934e83f09ba060815249629b8a9d5cf3b0f87856827f94b24206831d7df9d60941dc066d246c5091cbac6fcf1067f0f8173e42590d0e5aa48591bc1d4ce23c80e71e3a92cf6201509b750d6f92fdffa36c838288c372524044ae17322c62fbd080191b50363a1f9124881753eb999b5f8fcb32ce047bbc8c690449328bcf284", 0xf2}, {&(0x7f0000000540)="d012ad15d6200714af5a88cab2522a505465fb8cae8b295eba3f8dfa50dd841d84f9a8ed2ecc08108047bae0dd775c95ea171062d6bc98dfd5cc86cd8e3ea4dc841a376b563f54fc36c41f299493a82de8303620ce59eab4c19c00ef12eb92eefe0330c00414c5aaff233a03be9279424cbe4d7ecdc200c71590ed0b8e89b3fa60579d55968e804a3783d03ae7101c6e73be23f716525e0f8dbda7ac363e2e23dedb641d10e09467907217d190822dc815b7c5d5eefd9b26a626fe5efe9a82d312fc3b860930886497886267a05a576f6b2d354a5630dc0e2ac0646c1e78d9af4117d1", 0xe3}, {&(0x7f0000000640)="37dc3d5ea2e148bf780232f42203576afa56d4d96291c90134218ab33fb6db59f14b56aa4e2912212555921f69c6b8664450a47457d69b812f9f7b67a39797c19e2742874c2bc99bf7aa94", 0x4b}, {&(0x7f00000006c0)="7927c21dfe8c598b21a264cfa8d409ac98fc4564b75e161518800b3bd17673d24c37bad04d4a4d3a7ee42e98bbfae17c31b094d526b4dcd5f078f08b5d54e616e146f8e97a5442c95618e6836a3c4ced14ca3e570b3426cbc3c165330135311b0706762a938ad14848fb8e6550166efc5998696c432f", 0x76}, {&(0x7f0000000740)="71eb9523385e629d309b6cf703b379fb582a1eb6483629e9b425995e0c24c9448175f09afd3ca0b5875c4a0ed51c41d1d442967925333d5f7ac606c6d39533a82eff5e1868111d542fb469b41cfc02766680dfd5", 0x54}], 0x5, &(0x7f0000000840)=[@rthdr_2292={{0x78, 0x29, 0x39, {0x89, 0xc, 0x1, 0x81, 0x0, [@rand_addr=' \x01\x00', @remote, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @empty, @mcast2]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x1d, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x7}]}}}, @hopopts_2292={{0x118, 0x29, 0x36, {0x0, 0x1f, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x0, 0xfff, [0x8]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x1c, 0xdb, "4e7e8c49f2534b692ad615ff8da93582feb7878f085b0f4f15b3ae2cb274967485064214e3ea57793134341f40b2aed19b7a9f22aaaca914239101b40a679de94e39a0885b5c03acefb2b466dbf029779586363c55444c2a08431ea850e660ea9953f9627662da9a8f3206720b759a77dd04c604ebe97c3b294c17b353f77cd5483852d32f35d294cddf100451ed43b6559c1c4990bd8a54c36e7fcc71d751dd397c8621fde99744dbccee8c85a32e95969a4ea828bb38d71d473a570b9610f856ede0a21a879a0b3c838c6e718ff470fbb8d297afac7de0dbae40"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x58, 0x29, 0x4, {0x2c, 0x7, '\x00', [@ra={0x5, 0x2, 0xf08}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x30, {0x2, 0xa, 0x1, 0x8, [0xffffffffffffffeb, 0x10, 0x5a10, 0xc095, 0xf]}}]}}}], 0x210}}, {{&(0x7f0000000a80)={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000ac0)="0855068bc055c1a48156a6a526371eef1161723aa71a3415a36e60c10bedbf152c51f73ced334a0a89e472770368edea1973dfe5180e214072bd3f7f6adaa96f4c54efd1fb5c8bf2f905b42af2dace2a40876f5017da74b82b7e0b7a5359daa660651e9e275800e05393cdc39976e1f92ace8359d4d43e5d6c751697df245199558e488f46eae5b0c2e5ddcdc3375c4e5596e341117ed98086aaf5938e962a77d1a8e059c4", 0xa5}], 0x1, &(0x7f0000000bc0)=[@hopopts={{0x30, 0x29, 0x36, {0x62, 0x2, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}], 0x30}}, {{&(0x7f0000000c00)={0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x401}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000c40)="f239ddd8a5a19f1794bc51f3d5e8c207a37e3c", 0x13}, {&(0x7f0000000c80)="6551eec332d3b9153a147462786aeb01f5b8cc598e6c1342f457cc22d459067de4dd640d2b9a457417353146367699615fc89ed5c3d6bbe698f1f1eded0afe400b7f57270c3c7bdc7f8d879cf9070bc3fc392f268d12cb83b7b5f7c481944dc400e97e8923f13c0f39c3957f534d9c87783f64197104214211a179b7ac02aeb6dd534f18d20402492958e81a04ffefba2e243211a20224bb9e4806c90ffa56872c34e5c14e01525f80279fe9a4d1af20d9897fe2", 0xb4}, {&(0x7f0000000d40)="755556cfe24866bdccfc0b9f87f15d164b876b7b0bb37886f09cca76b3333d53bff2a67da9eaa11820640c193febfa740494df223d270325d6a25a97a892c13bf23def6ae01a80f32d3caa541749c06465dc33035b51d3e6c132452c9c04a49c9f293583", 0x64}, {&(0x7f0000000dc0)="7ebfbfd52ab9438e36c00f53f99d1d2dab8a9661ee", 0x15}], 0x4, &(0x7f0000000e40)=[@hopopts={{0x50, 0x29, 0x36, {0x3b, 0x6, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x2, 0x6, 0xe8, 0x6, [0xffffffffffffffff, 0x0, 0x4]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @pad1]}}}, @rthdr={{0x48, 0x29, 0x39, {0x1, 0x6, 0x0, 0xa, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xffff}}, @rthdr={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x1, 0xf2, 0x0, [@remote]}}}], 0xd8}}], 0x4, 0x80) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x3c, 0x29, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8042}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) (async) socket(0x11, 0x2, 0x10001) (async) socket$kcm(0xa, 0x5, 0x0) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5}, {}, {0xffff, 0x0, 0x6}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x420008}]}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x43}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890c, &(0x7f0000000000)) (async) sendmmsg$inet6(r1, &(0x7f0000000f40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xc6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="042713a11cb1904fefa6481abe597c488d4f10bf4c96a71730c02472ccc547aa45cea4d93f73ea032d0289082667494901", 0x31}, {&(0x7f0000000080)="845944de2e70859c347fcc86d3be8d044f6c66bd69ba785ba6829ec2cc50d0b757f50b3182ffc2ee7c5762cfea64fed009e2821e09052b3640fe4484b2df7905bef7d1a586ea7c045514e3b31beaa94398e96bf95f4cd93989961abc0da2a15145828a47d1bef015bfb2b09f1afde8f7694b170c12e6683fce6124e262b06b32469bddecc70644bc887f28cb8ea327bbee406d34d1d6295a1e0b5ce46a3a7067f1047bb8237d85263333de37b52937d601b9766d7bfc45187c7e541b07100783b87f0138984ce7e6ce9c23e98bbfe9093b960de7", 0xd4}, {&(0x7f0000000180)="01e2597543aef861eba9a89a2f967dc1a28c4e19d6d6461c9b196ae7", 0x1c}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="ab8ecc4d392deab3519d31658116458a434baa907c304f7aa5cd5e4b4e5eec01ed91b5a590bece7785ead769562951cb0bc0", 0x32}], 0x5, &(0x7f00000002c0)=[@rthdr={{0x98, 0x29, 0x39, {0x2b, 0x10, 0x1, 0x5, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @private0, @private2, @loopback, @private2, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @rthdrdstopts={{0xa0, 0x29, 0x37, {0x2b, 0x10, '\x00', [@hao={0xc9, 0x10, @local}, @generic={0x7, 0x5b, "ea801b18016f01a13e1fa0b570e70e536324d8304b3c25d6865e6f20912bba1116266c1f9d26a2af4f5619a290234990c5fc4dd1cedc742a133d9b0a1312fde3cd0c9dcf4a1a2576daf3ce8bf8f515ed0b11d141c4ec7212e9f19c"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}], 0x138}}, {{&(0x7f0000000400)={0xa, 0x4e20, 0x1, @local, 0x80}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000440)="40d5016504f86f55e2e52142e424d0551e8e535a540a28f08da096fc7c57431e96ddb832db7f07d5d97db270e7aa48534e770d147e49e1a2afd96282160e33a1d8bda73bad66ff5a83fe7f1fbbd7907241612ac7a7f1ee327f6314c528fe3866fdcbe583da6dc6eb40652e7e2cc2a93e93de6934e83f09ba060815249629b8a9d5cf3b0f87856827f94b24206831d7df9d60941dc066d246c5091cbac6fcf1067f0f8173e42590d0e5aa48591bc1d4ce23c80e71e3a92cf6201509b750d6f92fdffa36c838288c372524044ae17322c62fbd080191b50363a1f9124881753eb999b5f8fcb32ce047bbc8c690449328bcf284", 0xf2}, {&(0x7f0000000540)="d012ad15d6200714af5a88cab2522a505465fb8cae8b295eba3f8dfa50dd841d84f9a8ed2ecc08108047bae0dd775c95ea171062d6bc98dfd5cc86cd8e3ea4dc841a376b563f54fc36c41f299493a82de8303620ce59eab4c19c00ef12eb92eefe0330c00414c5aaff233a03be9279424cbe4d7ecdc200c71590ed0b8e89b3fa60579d55968e804a3783d03ae7101c6e73be23f716525e0f8dbda7ac363e2e23dedb641d10e09467907217d190822dc815b7c5d5eefd9b26a626fe5efe9a82d312fc3b860930886497886267a05a576f6b2d354a5630dc0e2ac0646c1e78d9af4117d1", 0xe3}, {&(0x7f0000000640)="37dc3d5ea2e148bf780232f42203576afa56d4d96291c90134218ab33fb6db59f14b56aa4e2912212555921f69c6b8664450a47457d69b812f9f7b67a39797c19e2742874c2bc99bf7aa94", 0x4b}, {&(0x7f00000006c0)="7927c21dfe8c598b21a264cfa8d409ac98fc4564b75e161518800b3bd17673d24c37bad04d4a4d3a7ee42e98bbfae17c31b094d526b4dcd5f078f08b5d54e616e146f8e97a5442c95618e6836a3c4ced14ca3e570b3426cbc3c165330135311b0706762a938ad14848fb8e6550166efc5998696c432f", 0x76}, {&(0x7f0000000740)="71eb9523385e629d309b6cf703b379fb582a1eb6483629e9b425995e0c24c9448175f09afd3ca0b5875c4a0ed51c41d1d442967925333d5f7ac606c6d39533a82eff5e1868111d542fb469b41cfc02766680dfd5", 0x54}], 0x5, &(0x7f0000000840)=[@rthdr_2292={{0x78, 0x29, 0x39, {0x89, 0xc, 0x1, 0x81, 0x0, [@rand_addr=' \x01\x00', @remote, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @empty, @mcast2]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x1d, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x7}]}}}, @hopopts_2292={{0x118, 0x29, 0x36, {0x0, 0x1f, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x0, 0xfff, [0x8]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x1c, 0xdb, "4e7e8c49f2534b692ad615ff8da93582feb7878f085b0f4f15b3ae2cb274967485064214e3ea57793134341f40b2aed19b7a9f22aaaca914239101b40a679de94e39a0885b5c03acefb2b466dbf029779586363c55444c2a08431ea850e660ea9953f9627662da9a8f3206720b759a77dd04c604ebe97c3b294c17b353f77cd5483852d32f35d294cddf100451ed43b6559c1c4990bd8a54c36e7fcc71d751dd397c8621fde99744dbccee8c85a32e95969a4ea828bb38d71d473a570b9610f856ede0a21a879a0b3c838c6e718ff470fbb8d297afac7de0dbae40"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x58, 0x29, 0x4, {0x2c, 0x7, '\x00', [@ra={0x5, 0x2, 0xf08}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x30, {0x2, 0xa, 0x1, 0x8, [0xffffffffffffffeb, 0x10, 0x5a10, 0xc095, 0xf]}}]}}}], 0x210}}, {{&(0x7f0000000a80)={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c, &(0x7f0000000b80)=[{&(0x7f0000000ac0)="0855068bc055c1a48156a6a526371eef1161723aa71a3415a36e60c10bedbf152c51f73ced334a0a89e472770368edea1973dfe5180e214072bd3f7f6adaa96f4c54efd1fb5c8bf2f905b42af2dace2a40876f5017da74b82b7e0b7a5359daa660651e9e275800e05393cdc39976e1f92ace8359d4d43e5d6c751697df245199558e488f46eae5b0c2e5ddcdc3375c4e5596e341117ed98086aaf5938e962a77d1a8e059c4", 0xa5}], 0x1, &(0x7f0000000bc0)=[@hopopts={{0x30, 0x29, 0x36, {0x62, 0x2, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}], 0x30}}, {{&(0x7f0000000c00)={0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x401}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000c40)="f239ddd8a5a19f1794bc51f3d5e8c207a37e3c", 0x13}, {&(0x7f0000000c80)="6551eec332d3b9153a147462786aeb01f5b8cc598e6c1342f457cc22d459067de4dd640d2b9a457417353146367699615fc89ed5c3d6bbe698f1f1eded0afe400b7f57270c3c7bdc7f8d879cf9070bc3fc392f268d12cb83b7b5f7c481944dc400e97e8923f13c0f39c3957f534d9c87783f64197104214211a179b7ac02aeb6dd534f18d20402492958e81a04ffefba2e243211a20224bb9e4806c90ffa56872c34e5c14e01525f80279fe9a4d1af20d9897fe2", 0xb4}, {&(0x7f0000000d40)="755556cfe24866bdccfc0b9f87f15d164b876b7b0bb37886f09cca76b3333d53bff2a67da9eaa11820640c193febfa740494df223d270325d6a25a97a892c13bf23def6ae01a80f32d3caa541749c06465dc33035b51d3e6c132452c9c04a49c9f293583", 0x64}, {&(0x7f0000000dc0)="7ebfbfd52ab9438e36c00f53f99d1d2dab8a9661ee", 0x15}], 0x4, &(0x7f0000000e40)=[@hopopts={{0x50, 0x29, 0x36, {0x3b, 0x6, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x2, 0x6, 0xe8, 0x6, [0xffffffffffffffff, 0x0, 0x4]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @pad1]}}}, @rthdr={{0x48, 0x29, 0x39, {0x1, 0x6, 0x0, 0xa, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xffff}}, @rthdr={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x1, 0xf2, 0x0, [@remote]}}}], 0xd8}}], 0x4, 0x80) (async) 28.910040232s ago: executing program 42 (id=2336): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x62040200) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r5, 0x0) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r9, 0x0) (async) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x1, 0x3}, 0x6) (async) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) 28.889558199s ago: executing program 2 (id=2444): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x90000, 0x0, 0x0, 0x0, 0x3ff}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000003c0)={0x6}, 0x8) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x4080) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x24, r4, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x24}}, 0x20000000) 28.626148189s ago: executing program 2 (id=2447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0xd0, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_USERDATA={0x8a, 0xc, "037f865135ec566e18551128c702c952d218d67c552efba77b3db346a4dc1ac4a6b0ecf8038ebc19eda06f594ab35092b296fc1dd3fe960ce96b8b29f5d8af23fbae24ddc9eafbdc3e223b21e39266ce8650db55b9b899f06d5f783479f132abef749d72d04f2e13be757f23c7734675f50b0f5b6583ec18f9dc64c954888936fc416421cf36"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}, @NFTA_BITWISE_XOR={0x8, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1b8}}, 0x20008000) 27.928736296s ago: executing program 2 (id=2451): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet(0x2, 0xa, 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x0, 0xb28e, @vifc_lcl_ifindex=r2, @loopback}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid\x00') unshare(0x6a040000) r3 = socket(0x8, 0x6, 0x3) ioctl$sock_netrom_SIOCADDRT(r3, 0x6180, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x88}}, 0x40) 23.913371091s ago: executing program 43 (id=2367): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x62040200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x19}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe58d600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f00000000c0)) 13.796317332s ago: executing program 6 (id=2473): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getsockname(r0, &(0x7f0000000340)=@ethernet={0x0, @local}, &(0x7f00000003c0)=0x80) r2 = socket$netlink(0x10, 0x3, 0x0) unshare(0x62040200) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xb0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0}}, {}, [@call={0x85, 0x0, 0x0, 0xb5}], {{}, {}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f0000000480)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x48}, 0x94) r3 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x6a, 0x4, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000100)={0x29, 0xa, 0x1, 0xa6, 0x0, [@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, @empty, @mcast2]}, 0x58) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704"], 0x68}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r4, 0x0, 0x4, &(0x7f0000000040)="440910bc996c301c8107070400", 0x28) getsockopt$inet_opts(r4, 0x0, 0x4, 0x0, &(0x7f0000000240)) recvmmsg(r3, &(0x7f0000005b40)=[{{&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/52, 0x34}, {&(0x7f0000000300)=""/42, 0x2a}, {&(0x7f0000005cc0)=""/189, 0xbd}, {&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f0000000640)=""/146, 0x92}], 0x5, &(0x7f0000000800)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000000700)=@ethernet, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001800)=""/185, 0xb9}, {&(0x7f00000018c0)=""/169, 0xa9}, {&(0x7f0000001980)=""/101, 0x65}, {&(0x7f0000001a00)=""/187, 0xbb}, {&(0x7f0000001ac0)=""/170, 0xaa}, {&(0x7f0000001b80)=""/159, 0x9f}, {&(0x7f0000001c40)=""/73, 0x49}, {&(0x7f0000001cc0)=""/253, 0xfd}, {&(0x7f0000001dc0)=""/133, 0x85}], 0x9, &(0x7f0000001f40)=""/111, 0x6f}, 0x7fff}, {{&(0x7f0000001fc0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000002040)=""/200, 0xc8}, {&(0x7f0000002140)=""/230, 0xe6}, {&(0x7f0000002240)=""/86, 0x56}, {&(0x7f00000022c0)=""/96, 0x60}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000003340)=""/240, 0xf0}, {&(0x7f0000003440)=""/107, 0x6b}], 0x7, &(0x7f0000003540)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f00000005c0)=""/60, 0x3c}, {&(0x7f0000004540)=""/11, 0xb}], 0x2, &(0x7f00000045c0)=""/228, 0xe4}, 0x2038}, {{0x0, 0x0, &(0x7f0000005a40)=[{&(0x7f00000046c0)=""/180, 0xb4}, {&(0x7f0000004780)=""/194, 0xc2}, {&(0x7f0000004880)=""/203, 0xcb}, {&(0x7f0000004980)=""/4096, 0x1000}, {&(0x7f0000005980)=""/141, 0x8d}], 0x5, &(0x7f0000005ac0)=""/89, 0x59}, 0x1}], 0x5, 0x41, &(0x7f0000005c80)={0x0, 0x989680}) 12.723414988s ago: executing program 44 (id=2451): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet(0x2, 0xa, 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x0, 0xb28e, @vifc_lcl_ifindex=r2, @loopback}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid\x00') unshare(0x6a040000) r3 = socket(0x8, 0x6, 0x3) ioctl$sock_netrom_SIOCADDRT(r3, 0x6180, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x88}}, 0x40) 12.127132953s ago: executing program 3 (id=2530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) write$ppp(r1, 0x0, 0x0) unshare(0x22020600) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x8, &(0x7f0000000180)="d857a580", 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x8, 0x0, &(0x7f0000001b80)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x1d8, 0x6, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}]}, @NFTA_RULE_USERDATA={0x9f, 0x7, 0x1, 0x0, "79a5179e0420889f1e6b7662a8dc06b6d25232d43b873e53f2ca22cb52c3bf223ae20f25fcaaa3ace8cd2e7be3bd7215030293a419853c3281da751b6e7f1824ead067980d405fd0e50e157078364e08fb00023a9c0d821d6eaef035d5b1e0d922734fe6af93f3b592236847e493f112b34a3a7ae0f02dd5d7c57a8632bd18ba9a77d8df43bf78d5954b8150406833898903c42424b426cdb1502a"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x100, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x38, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SYNPROXY_FLAGS={0x8}]}}}, {0x48, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0x40, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x2dc}}, 0x20008000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f0000000040)=r5, 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f0000000100)=r5, 0x4) r7 = accept$unix(0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000000c0)=0x6e) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000280)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000540)=0xe8) sendmmsg$unix(r7, &(0x7f0000002b00)=[{{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, &(0x7f0000002b80)=ANY=[@ANYBLOB="220000c2e6000000000000", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32, @ANYBLOB='\x00\x00'], 0x38, 0x4000}}, {{&(0x7f0000000940)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002ac0)=[{&(0x7f00000009c0)}, {&(0x7f00000019c0)="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", 0x1000}, {&(0x7f00000029c0)}, {&(0x7f0000000640)="af4846fd3364f9892d007ecaa8f7f73c29e181bff7a869e203aad5add05cee99f40fd08ae5822a", 0x27}], 0x4, 0x0, 0x0, 0x40}}], 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0xe, 0x4e23, 0x0, 0xa, 0x20, 0x20, 0x4, r4, r9}, {0x100000000, 0x5, 0xffffffffffff7fff, 0x5, 0x5, 0x4, 0x4, 0x7}, {0x9, 0xc, 0x5, 0x6}, 0x2, 0x6e6bb2, 0x2, 0x1, 0x3, 0x2}, {{@in=@local, 0x4d2, 0xcd}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3506, 0x2, 0x2, 0x7, 0xdd40, 0x2e1, 0x23}}, 0xe8) 11.619819755s ago: executing program 3 (id=2532): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f1ea3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b2213fdc2881e1a6ec9d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232f0485a2ca9f37fc9c3d2688efcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdcdeb2af1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f925f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308c"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x6}, 0xaf) socket$inet(0x2, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x88, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x88}}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000a0001010800"/20, @ANYRES32=0x0, @ANYBLOB="332000000000000004002b8008001b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0x1a0, 0x1403, 0x200, 0x70bd2c, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_batadv\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bridge\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'gretap0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg1\x00'}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000010) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 10.918503835s ago: executing program 3 (id=2534): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB="608c3810", @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400080000000800070000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x7, 0x1, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x80, 0x20, 0x14, 0x4}}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x5b, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a3100000000540004802c0001800e000100696d6d656469617465000000180002800c00028005000100fd0000000800014000000014240001800a0001007265646972000000140202800800014000000004080002400000fa0b0900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x4c}}, 0x800) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) bind$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2, 0x2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0}, 0x94) r10 = socket$pppl2tp(0x18, 0x1, 0x1) unshare(0x22020400) r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) pwritev(r12, 0x0, 0x0, 0x8040000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r11, 0x100000000) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r12, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) 10.594985384s ago: executing program 3 (id=2537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000080000a54000000060a0b040000000000184bbb7bc9a0be16ce031c0000000200000028000480240001801b0001007470726f7879000014000280080003400000000008000140000000020900010073797a30000000000000020073567a321100010000000000000000000300000a0000000000000000"], 0x7c}}, 0x0) 10.444757365s ago: executing program 3 (id=2538): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_XOR={0x8, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x20008000) 10.340215543s ago: executing program 3 (id=2539): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) recvmsg(r2, &(0x7f000000b680)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r1, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) socket$pptp(0x18, 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000000217b8af8ff00000000bf2d9542222da200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000f00000007"], 0x13) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x8, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) socket$key(0xf, 0x3, 0x2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x96, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x67) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r7, 0x800442d3, &(0x7f00000001c0)={0xd6d3, 0x1ff, 0x9, @random="852fb8b1feea", 'netdevsim0\x00'}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYRES64=r4, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x20000000000000f8, &(0x7f0000000580)=ANY=[@ANYRES8=r7, @ANYRES32=r9, @ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0xfffffffffffffe87, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0xfaf7304ba2867348, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendto$inet6(r1, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10042, 0x0) 7.659339046s ago: executing program 9 (id=2545): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000380)=0xfffffffe, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) unshare(0x20000400) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x4c000) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x700, 0x40, 0x7, 0x0, {{0x6, 0x4, 0x0, 0x3, 0x18, 0x67, 0x0, 0x8, 0x4, 0x0, @multicast2, @multicast1, {[@end, @noop]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x8, 0x5, 0x3, 0x4810, 0xffffffffffffffff, 0x6, '\x00', r6, r2, 0x5, 0x1, 0x0, 0x1}, 0x50) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000340)={0x40, 0x4, 0x2}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7}, &(0x7f0000000080), &(0x7f0000000280)=r8}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x80040005, 0x0, 0x0, 0x41100, 0x18}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_int(r5, 0x1, 0x1e, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl(r9, 0x8b1a, &(0x7f0000000040)) 7.531233781s ago: executing program 9 (id=2546): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad56bec5820fae9d6dcd3292ea54d7be915d564c90c20158f2fab0bf00390c0000000000001b7d8600", 0x29) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1800"], 0x18, 0x4004048}], 0x1, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000080)=@hci={0x1f, 0x0, 0x47}, 0x80, 0x0}, 0x8000) r3 = socket(0x6, 0x80000, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d", 0x44}, {&(0x7f0000000900)="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", 0x3ee}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896", 0x1f}], 0x3}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000000040)=[{{&(0x7f00000003c0)={0xa, 0xe21, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}], 0x1, 0x0) listen(r5, 0xfff) accept(r5, 0xfffffffffffffffd, &(0x7f0000000680)=0x12) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000540), 0x8e23733bdb6aa000) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f00000002c0)=0x5, 0x4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="310300000000fcdbdf2509000000040003"], 0x24}}, 0x8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES32=r6, @ANYRES16=r6, @ANYBLOB="000625bd7000fedbdf2506000000c2fe2e0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffff"], 0x6c}}, 0x40000) 7.304723114s ago: executing program 9 (id=2548): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_XOR={0x8, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x20008000) 7.136551927s ago: executing program 9 (id=2549): r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000340)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x404}, {0x1, 0x0, 0x0, 0x6cc, 0xffffffffffffffa4}, {0x0, 0x0, 0x0, 0x7}, 0x9, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x6c}, 0x2, @in=@private=0xa010102, 0x0, 0x4, 0x1, 0x0, 0x0, 0x93}}, 0xe8) 6.470435799s ago: executing program 9 (id=2552): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000318230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.301834373s ago: executing program 9 (id=2554): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1e, 0x80005, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000300), 0x0, 0x4000000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000001700)={0x0, 0x8, 0x1, 0x1, 0x81, 0x3, 0x6, 0x5, {0x0, @in={{0x2, 0x4e24, @empty}}, 0xf, 0x40, 0x10001, 0x6, 0x807}}, &(0x7f0000000400)=0xb0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000480)={r4, 0x4, 0xffff}, 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r5, 0xc7, 0x1}, 0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x8, 0x9a2f, 0x20c, 0x0, 0x80000001, 0x5, 0x3, 0x10, r5}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7000000010008105001100"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x250a9, 0x1400e}}, 0x20}}, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000340)=@nfc_llcp, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x2, &(0x7f0000001640)=""/150, 0x96}, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x6, 0xffff, 0x7, 0x10, 0xffffffffffffffff, 0x9, '\x00', 0x0, r7, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.848913607s ago: executing program 0 (id=2579): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x0, 0x80, 0x2, 0x0, {{0x2d, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr, @rand_addr=0x64010102, {[@rr={0x7, 0x7, 0x40, [@local]}, @noop, @cipso={0x86, 0x6d, 0xffffffffffffffff, [{0x1, 0x3, "a6"}, {0xe677d1cd00793580, 0x5, "925b10"}, {0x5, 0x10, "a53d5e55cb90c5fc02b1ea395dca"}, {0x7, 0x5, "a7ce15"}, {0x0, 0xc, "b78bffc49d94680c9fa9"}, {0x7, 0xb, "613f9089b6e00aca15"}, {0x5, 0x12, "0019ffbbbc11ae728ec67d5c00f9d29d"}, {0x6, 0x6, "162dc85f"}, {0x7, 0x9, "916e28e5d4c691"}, {0x7, 0x12, "839a9047478452365e90b99811bc7fe7"}]}, @cipso={0x86, 0x27, 0x3, [{0x6, 0x10, "91f6ef0b65ec3013474ffa0a05eb"}, {0x5, 0x8, "3078451b941e"}, {0x1, 0x4, "c6dc"}, {0x6, 0x5, "c7e3de"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.513949272s ago: executing program 0 (id=2582): socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050", @ANYRES8=r0], 0x3c}}, 0x10) 1.436107261s ago: executing program 0 (id=2583): r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000340)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x404}, {0x1, 0x0, 0x0, 0x6cc, 0xffffffffffffffa4}, {0x0, 0x0, 0x0, 0x7}, 0x9, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x6c}, 0x2, @in=@private=0xa010102, 0x0, 0x4, 0x1, 0x0, 0x0, 0x93}}, 0xe8) (fail_nth: 1) 1.147294325s ago: executing program 0 (id=2584): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) accept4(r2, 0x0, 0x0, 0x800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000004a80)=0x2, 0x4) r5 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000001c0)=ANY=[], 0x9) sendto$inet6(r6, &(0x7f0000000080), 0x0, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000080)=0x9, 0x4) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r7, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.005756551s ago: executing program 0 (id=2585): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000a80)={0x9, {{0x2, 0x4e26, @multicast2}}, 0x0, 0x3, [{{0x2, 0x4e24, @rand_addr=0x64010102}}, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e21, @rand_addr=0x64010101}}]}, 0x210) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="850000f8ac00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) pipe(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x80, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) write(r4, 0x0, 0x0) write(r2, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r9, 0x0, 0xd}, 0x18) 736.481057ms ago: executing program 7 (id=2588): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r4, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x37, &(0x7f00000007c0)=ANY=[], 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 616.765499ms ago: executing program 7 (id=2589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x13, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x20008000) 467.426714ms ago: executing program 7 (id=2590): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000940)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20, 0x1, 0x40000000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x11, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb5cf}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000010bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 439.131773ms ago: executing program 7 (id=2591): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x90, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x100}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x90, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x100}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 355.206834ms ago: executing program 7 (id=2592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000050000fb510000000a00"], &(0x7f0000000100)=""/141, 0x4e, 0x8d, 0x1, 0x7}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x20008000) 103.286049ms ago: executing program 7 (id=2593): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x2000c040) epoll_create1(0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (fail_nth: 57) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0xfffffffffffffffc, 0x0, 0x8, 0x9, 0x400, 0x23, 0x4, 0x36a58e4a, 0x9, 0x5, 0x72, 0x1}}) 0s ago: executing program 0 (id=2594): socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000000a1a040900000093549bc3634334351796bd7ba200010000000100000819000100643afbee274ca892"], 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x8040) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="05f300000000000000002000000004000380"], 0x18}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x400, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x20, 0x4, 0x8, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44800}, 0x40800) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e80)=@newtfilter={0x5c0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x7, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xa, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x1, 0xb}]}}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @filter_kind_options=@f_flow={{0x9}, {0x540, 0x2, [@TCA_FLOW_ACT={0x52c, 0x9, 0x0, 0x1, [@m_mpls={0x74, 0x16, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x86}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88f5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xffffffff, 0xb, 0x5, 0x9}, 0x2}}, @TCA_MPLS_TC={0x5, 0x6, 0x5}]}, {0x14, 0x6, "eaeeadd842879ca9bd2061bea7c21cef"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x108, 0x1d, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3aec00, 0xad7b, 0x10000000, 0x4, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1fd6, 0x3}}]}, {0xb8, 0x6, "bfb2303d2718119914ba353825cdcc4060c9b9e24e852f33256e68502fb1e500cf3a960eb6a06d78794a4e0921885e6874c164f41fcfaf292fc4b8a075703428e2ad36de36c3d7b8a3f4241bfdb99af0e95985a41da56373454665232f73798b81c0d325faf82be59e2602e4c54d6cf90dd0804278102795e2556f142881b616bf64c4358a443740145b304e4a9db228b52061da8a2162636bc911f6dfc69a572f2c2bee32392d5ef6467f0cb2624e0b78ce7602"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0xc4, 0x14, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_TYPE={0x6, 0x5, 0x2}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x84, 0x6, "3b78f34317deecf3bafa238bae974d0ee57f2a2318932089e5fd9d540358f66ebae576dcf71c2efcd04d0c4d6c3cc3732dce299190100a4f0cd00cb38a628addfddb8019f9251e5b59f02b6ea775e82a6f34bba7be692440edfc9374a38e33f801b491805ecb65e2b8bb160ab1858b33f8fa18a0c95e3d9059db3ade6844617d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x4c, 0x0, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x0, 0x2, 0x9, 0x80000001}}]}, {0x7, 0x6, "b78e17"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_gact={0x168, 0x5, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x6, 0x6, 0x8, 0x80000001}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x58, 0x7, 0x8, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x6, 0x0, 0xffff, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1eb2, 0x6}}]}, {0xe7, 0x6, "507b9fe5a0a88da4bb4fa39d01ed1cd88102223df0e9d38dcad6d78ac533e04943d36e6a4cc9ac0c736f909e11960c388599294be14089da8eb44f25dac853b6842a0798ee9cd9405e533fce1b31f692ae4bc027599c2851e1c036d449c14a3d56dc2eb02f5c5da7420997704907e0c4fcd3ec6d121be9b5b4affc95ab604ecdc984f777e0450bfe611451e864bdbf72690de39c4d0acb7413f6838edd1369aeb47be974c9a394f3825d2c4fb1f95d1abe66ce81b8f04240fb9b5b696f78a4bb9c8e5115b0fb575ce98c089df30773a8a05736ecb609a3cb0d13b13cc6fb95e52c79d1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x134, 0x13, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7fff, 0xcd7dfdff4ca9b93f, 0x2, 0x8}, @remote, @private=0xa010102, 0xff, 0x2}}]}, {0xe4, 0x6, "bdcd4fb17e25b8e6af5658c11a2e5ae7b472aa64ef9363dd418525020a099cd74085ce4c7d3651f5ce7a8e99ee011d4375d98d695ef08e1a3c0d9324f9e7342651a31a7f55a6edfa08ce60d0394337049d3fd068266e43fa86b7cd6b4a32d618aff6c5fa31b4e3f42f130c216800ae6ff31b1ac5e1bc8ec5c0b54d4418b16fe4584c732f33d24cd43ff281317d7c98c367661ff174d9da56353e5ca79628ba39aa8fb0f5d59e14a395159d0d2dda1ec7134ea1d9e9ebbc8682ca20b20f5772401cddd55c7a703eef10209a0e5817e0592769b9497742bea70a595957a07ad5f3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d5a9}, @TCA_FLOW_MASK={0x8, 0x6, 0xfe9}]}}, @TCA_CHAIN={0x8, 0xb, 0xec}, @TCA_RATE={0x6, 0x5, {0x81, 0x5}}]}, 0x5c0}}, 0x404c004) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0xc04, 0xfffffffb, 0x47371924, 0x2c28, r1, 0x3, '\x00', r6, r1, 0x4, 0x0, 0x3, 0xe}, 0x50) kernel console output (not intermixed with test programs): 196229][T14081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.196250][T14081] RIP: 0033:0x7fe512b8f749 [ 390.196271][T14081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.196291][T14081] RSP: 002b:00007fe513aa6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 390.196314][T14081] RAX: ffffffffffffffda RBX: 00007fe512de5fa0 RCX: 00007fe512b8f749 [ 390.196331][T14081] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000006 [ 390.196345][T14081] RBP: 00007fe513aa6090 R08: 0000000000000000 R09: 0000000000000000 [ 390.196359][T14081] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 390.196372][T14081] R13: 00007fe512de6038 R14: 00007fe512de5fa0 R15: 00007fff45189f18 [ 390.196409][T14081] [ 390.433725][T14085] ip6_vti0 speed is unknown, defaulting to 1000 [ 390.628238][T14092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2164'. [ 390.638942][T14092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2164'. [ 390.942570][T14085] wg1 speed is unknown, defaulting to 1000 [ 391.404991][T14112] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2172'. [ 391.415214][T14112] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2172'. [ 391.432643][T14112] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2172'. [ 391.978077][ T5836] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 391.991246][ T5836] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 391.999391][ T5836] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 392.020899][T14128] FAULT_INJECTION: forcing a failure. [ 392.020899][T14128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.034752][T14128] CPU: 0 UID: 0 PID: 14128 Comm: syz.6.2176 Not tainted syzkaller #0 PREEMPT(full) [ 392.034786][T14128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 392.034801][T14128] Call Trace: [ 392.034810][T14128] [ 392.034819][T14128] dump_stack_lvl+0x189/0x250 [ 392.034857][T14128] ? __pfx____ratelimit+0x10/0x10 [ 392.034889][T14128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.034920][T14128] ? __pfx__printk+0x10/0x10 [ 392.034943][T14128] ? __might_fault+0xb0/0x130 [ 392.034989][T14128] should_fail_ex+0x414/0x560 [ 392.035030][T14128] _copy_from_user+0x2d/0xb0 [ 392.035062][T14128] ___sys_recvmsg+0x12e/0x510 [ 392.035098][T14128] ? __pfx____sys_recvmsg+0x10/0x10 [ 392.035161][T14128] ? __might_fault+0xb0/0x130 [ 392.035197][T14128] do_recvmmsg+0x307/0x770 [ 392.035235][T14128] ? __pfx_do_recvmmsg+0x10/0x10 [ 392.035278][T14128] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 392.035324][T14128] __x64_sys_recvmmsg+0x190/0x240 [ 392.035357][T14128] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 392.035392][T14128] ? do_syscall_64+0xbe/0xfa0 [ 392.035420][T14128] do_syscall_64+0xfa/0xfa0 [ 392.035442][T14128] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.035465][T14128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.035488][T14128] ? clear_bhb_loop+0x60/0xb0 [ 392.035514][T14128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.035536][T14128] RIP: 0033:0x7fe512b8f749 [ 392.035557][T14128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.035576][T14128] RSP: 002b:00007fe513aa6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 392.035600][T14128] RAX: ffffffffffffffda RBX: 00007fe512de5fa0 RCX: 00007fe512b8f749 [ 392.035617][T14128] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000006 [ 392.035631][T14128] RBP: 00007fe513aa6090 R08: 0000000000000000 R09: 0000000000000000 [ 392.035645][T14128] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 392.035659][T14128] R13: 00007fe512de6038 R14: 00007fe512de5fa0 R15: 00007fff45189f18 [ 392.035694][T14128] [ 392.035899][ T5836] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 392.117586][T14130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.161423][ T5836] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 392.361811][T14122] ip6_vti0 speed is unknown, defaulting to 1000 [ 392.756344][T14122] wg1 speed is unknown, defaulting to 1000 [ 393.116986][T14171] __nla_validate_parse: 2 callbacks suppressed [ 393.117012][T14171] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2181'. [ 393.238779][T14175] netlink: 'syz.7.2183': attribute type 1 has an invalid length. [ 393.322639][T14178] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2183'. [ 393.380209][T14178] netlink: 'syz.7.2183': attribute type 10 has an invalid length. [ 393.389259][T14178] netlink: 228 bytes leftover after parsing attributes in process `syz.7.2183'. [ 393.858852][T14122] chnl_net:caif_netlink_parms(): no params data found [ 394.334479][ T5836] Bluetooth: hci7: command tx timeout [ 394.389835][T14122] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.403265][T14122] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.412393][T14122] bridge_slave_0: entered allmulticast mode [ 394.420923][T14122] bridge_slave_0: entered promiscuous mode [ 394.433325][T14122] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.440849][T14122] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.450023][T14122] bridge_slave_1: entered allmulticast mode [ 394.459064][T14122] bridge_slave_1: entered promiscuous mode [ 394.564538][T14212] bond3 (unregistering): Released all slaves [ 394.687239][T14122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.702733][T14122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.809028][T14122] team0: Port device team_slave_0 added [ 394.833568][T14122] team0: Port device team_slave_1 added [ 394.857270][T14227] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2196'. [ 394.878806][T14228] netlink: 'syz.7.2198': attribute type 1 has an invalid length. [ 394.919826][T14122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.951485][T14231] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2198'. [ 394.970672][T14122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.030870][T14122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.067871][T14235] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2197'. [ 395.073883][T14122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.111012][T14122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.165634][T14122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.178986][T14228] netlink: 'syz.7.2198': attribute type 10 has an invalid length. [ 395.187948][T14228] netlink: 228 bytes leftover after parsing attributes in process `syz.7.2198'. [ 395.443114][T14122] hsr_slave_0: entered promiscuous mode [ 395.452451][T14122] hsr_slave_1: entered promiscuous mode [ 395.459797][T14122] debugfs: 'hsr0' already exists in 'hsr' [ 395.465956][T14122] Cannot create hsr debugfs directory [ 395.567440][T14222] ip6_vti0 speed is unknown, defaulting to 1000 [ 395.567747][T14242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.624541][T14242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.709268][T14243] ip_vti0: entered promiscuous mode [ 395.718132][T14243] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2199'. [ 395.975788][T14222] wg1 speed is unknown, defaulting to 1000 [ 395.999211][T14245] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2200'. [ 396.021914][T14249] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2201'. [ 396.309409][T14122] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 396.324160][T14122] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 396.339520][T14122] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 396.369666][T14122] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 396.373848][T14262] FAULT_INJECTION: forcing a failure. [ 396.373848][T14262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.389910][T14262] CPU: 0 UID: 0 PID: 14262 Comm: syz.7.2205 Not tainted syzkaller #0 PREEMPT(full) [ 396.389940][T14262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 396.389954][T14262] Call Trace: [ 396.389963][T14262] [ 396.389971][T14262] dump_stack_lvl+0x189/0x250 [ 396.390011][T14262] ? __pfx____ratelimit+0x10/0x10 [ 396.390034][T14262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.390063][T14262] ? __pfx__printk+0x10/0x10 [ 396.390085][T14262] ? __might_fault+0xb0/0x130 [ 396.390129][T14262] should_fail_ex+0x414/0x560 [ 396.390171][T14262] _copy_from_user+0x2d/0xb0 [ 396.390201][T14262] ___sys_recvmsg+0x12e/0x510 [ 396.390239][T14262] ? __pfx____sys_recvmsg+0x10/0x10 [ 396.390319][T14262] ? __might_fault+0xb0/0x130 [ 396.390354][T14262] do_recvmmsg+0x307/0x770 [ 396.390392][T14262] ? __pfx_do_recvmmsg+0x10/0x10 [ 396.390433][T14262] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 396.390476][T14262] __x64_sys_recvmmsg+0x190/0x240 [ 396.390509][T14262] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 396.390542][T14262] ? do_syscall_64+0xbe/0xfa0 [ 396.390570][T14262] do_syscall_64+0xfa/0xfa0 [ 396.390591][T14262] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.390612][T14262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.390633][T14262] ? clear_bhb_loop+0x60/0xb0 [ 396.390661][T14262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.390682][T14262] RIP: 0033:0x7fc00c58f749 [ 396.390702][T14262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.390728][T14262] RSP: 002b:00007fc00d343038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 396.390752][T14262] RAX: ffffffffffffffda RBX: 00007fc00c7e5fa0 RCX: 00007fc00c58f749 [ 396.390768][T14262] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000007 [ 396.390782][T14262] RBP: 00007fc00d343090 R08: 0000000000000000 R09: 0000000000000000 [ 396.390796][T14262] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 396.390809][T14262] R13: 00007fc00c7e6038 R14: 00007fc00c7e5fa0 R15: 00007fff34bc5278 [ 396.390847][T14262] [ 396.571728][T14122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.615697][ T5836] Bluetooth: hci7: command tx timeout [ 396.665392][T14122] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.734884][ T6213] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.743014][ T6213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.783481][ T6213] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.792007][ T6213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.291063][T14294] can: request_module (can-proto-3) failed. [ 397.463806][T14122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.006623][T14122] veth0_vlan: entered promiscuous mode [ 398.023874][T14122] veth1_vlan: entered promiscuous mode [ 398.080840][T14122] veth0_macvtap: entered promiscuous mode [ 398.100283][T14122] veth1_macvtap: entered promiscuous mode [ 398.154564][T14122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.193051][T14122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.206991][ T6214] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.220049][ T6214] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.229193][ T6214] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.245653][ T6214] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.658688][ T5836] Bluetooth: hci7: command tx timeout [ 398.707297][ T6215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.720654][ T6215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.790762][ T6223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.798727][ T6223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.203333][T14342] ip6_vti0: entered promiscuous mode [ 399.225881][T14342] __nla_validate_parse: 2 callbacks suppressed [ 399.225908][T14342] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2220'. [ 399.532636][ T52] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 399.543026][ T52] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 399.552260][ T52] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 399.567899][ T52] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 399.578032][ T52] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 399.683146][T14354] ip6_vti0 speed is unknown, defaulting to 1000 [ 400.007025][T14363] syzkaller1: entered promiscuous mode [ 400.017051][T14363] syzkaller1: entered allmulticast mode [ 400.048118][T14354] wg1 speed is unknown, defaulting to 1000 [ 400.549073][T14383] netlink: 'syz.8.2230': attribute type 10 has an invalid length. [ 400.600209][T14383] team0: Device veth1_macvtap failed to register rx_handler [ 400.619564][T14377] ip6_vti0 speed is unknown, defaulting to 1000 [ 400.643062][T14383] netlink: 'syz.8.2230': attribute type 13 has an invalid length. [ 400.666324][T14389] FAULT_INJECTION: forcing a failure. [ 400.666324][T14389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.679944][T14389] CPU: 0 UID: 0 PID: 14389 Comm: syz.7.2232 Not tainted syzkaller #0 PREEMPT(full) [ 400.679974][T14389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 400.679988][T14389] Call Trace: [ 400.679997][T14389] [ 400.680006][T14389] dump_stack_lvl+0x189/0x250 [ 400.680042][T14389] ? __pfx____ratelimit+0x10/0x10 [ 400.680065][T14389] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.680095][T14389] ? __pfx__printk+0x10/0x10 [ 400.680118][T14389] ? __might_fault+0xb0/0x130 [ 400.680159][T14389] should_fail_ex+0x414/0x560 [ 400.680199][T14389] _copy_from_user+0x2d/0xb0 [ 400.680238][T14389] ___sys_recvmsg+0x12e/0x510 [ 400.680277][T14389] ? __pfx____sys_recvmsg+0x10/0x10 [ 400.680343][T14389] ? __might_fault+0xb0/0x130 [ 400.680379][T14389] do_recvmmsg+0x307/0x770 [ 400.680419][T14389] ? __pfx_do_recvmmsg+0x10/0x10 [ 400.680460][T14389] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 400.680502][T14389] __x64_sys_recvmmsg+0x190/0x240 [ 400.680533][T14389] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 400.680566][T14389] ? do_syscall_64+0xbe/0xfa0 [ 400.680592][T14389] do_syscall_64+0xfa/0xfa0 [ 400.680613][T14389] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.680636][T14389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.680658][T14389] ? clear_bhb_loop+0x60/0xb0 [ 400.680686][T14389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.680708][T14389] RIP: 0033:0x7fc00c58f749 [ 400.680729][T14389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.680749][T14389] RSP: 002b:00007fc00d343038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 400.680774][T14389] RAX: ffffffffffffffda RBX: 00007fc00c7e5fa0 RCX: 00007fc00c58f749 [ 400.680791][T14389] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000007 [ 400.680805][T14389] RBP: 00007fc00d343090 R08: 0000000000000000 R09: 0000000000000000 [ 400.680819][T14389] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 400.680832][T14389] R13: 00007fc00c7e6038 R14: 00007fc00c7e5fa0 R15: 00007fff34bc5278 [ 400.680871][T14389] [ 400.742179][ T52] Bluetooth: hci7: command tx timeout [ 400.963298][T14394] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2233'. [ 401.016482][T14354] chnl_net:caif_netlink_parms(): no params data found [ 401.099217][T14377] wg1 speed is unknown, defaulting to 1000 [ 401.399068][T14354] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.407064][T14354] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.418328][T14354] bridge_slave_0: entered allmulticast mode [ 401.432824][T14354] bridge_slave_0: entered promiscuous mode [ 401.444354][T14354] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.452792][T14354] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.460938][T14354] bridge_slave_1: entered allmulticast mode [ 401.469557][T14354] bridge_slave_1: entered promiscuous mode [ 401.533894][T14354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.550038][T14354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.612315][ T52] Bluetooth: hci8: command tx timeout [ 401.628193][T14354] team0: Port device team_slave_0 added [ 401.639539][T14354] team0: Port device team_slave_1 added [ 401.642708][T14412] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2239'. [ 401.669339][T14412] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.677006][T14412] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.699807][T14412] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2239'. [ 401.714062][T14354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.722708][T14354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.751328][T14354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.766120][T14354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.774389][T14354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.802609][T14354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.811376][T14414] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2240'. [ 401.877804][T14354] hsr_slave_0: entered promiscuous mode [ 401.888658][T14354] hsr_slave_1: entered promiscuous mode [ 401.896482][T14354] debugfs: 'hsr0' already exists in 'hsr' [ 401.903671][T14354] Cannot create hsr debugfs directory [ 402.012426][T14423] FAULT_INJECTION: forcing a failure. [ 402.012426][T14423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.030245][T14423] CPU: 1 UID: 0 PID: 14423 Comm: syz.7.2242 Not tainted syzkaller #0 PREEMPT(full) [ 402.030283][T14423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 402.030298][T14423] Call Trace: [ 402.030307][T14423] [ 402.030317][T14423] dump_stack_lvl+0x189/0x250 [ 402.030358][T14423] ? __pfx____ratelimit+0x10/0x10 [ 402.030380][T14423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.030413][T14423] ? __pfx__printk+0x10/0x10 [ 402.030435][T14423] ? __might_fault+0xb0/0x130 [ 402.030479][T14423] should_fail_ex+0x414/0x560 [ 402.030520][T14423] _copy_from_user+0x2d/0xb0 [ 402.030551][T14423] ___sys_recvmsg+0x12e/0x510 [ 402.030588][T14423] ? __pfx____sys_recvmsg+0x10/0x10 [ 402.030648][T14423] ? __might_fault+0xb0/0x130 [ 402.030681][T14423] do_recvmmsg+0x307/0x770 [ 402.030715][T14423] ? __pfx_do_recvmmsg+0x10/0x10 [ 402.030756][T14423] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 402.030801][T14423] __x64_sys_recvmmsg+0x190/0x240 [ 402.030832][T14423] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 402.030874][T14423] ? do_syscall_64+0xbe/0xfa0 [ 402.030901][T14423] do_syscall_64+0xfa/0xfa0 [ 402.030922][T14423] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.030945][T14423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.030965][T14423] ? clear_bhb_loop+0x60/0xb0 [ 402.030991][T14423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.031010][T14423] RIP: 0033:0x7fc00c58f749 [ 402.031029][T14423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.031047][T14423] RSP: 002b:00007fc00d343038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 402.031071][T14423] RAX: ffffffffffffffda RBX: 00007fc00c7e5fa0 RCX: 00007fc00c58f749 [ 402.031086][T14423] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000007 [ 402.031100][T14423] RBP: 00007fc00d343090 R08: 0000000000000000 R09: 0000000000000000 [ 402.031112][T14423] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 402.031124][T14423] R13: 00007fc00c7e6038 R14: 00007fc00c7e5fa0 R15: 00007fff34bc5278 [ 402.031156][T14423] [ 402.512549][T14354] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 402.527510][T14354] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 402.564969][T14354] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 402.584543][T14354] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 402.743413][T14434] ip6_vti0 speed is unknown, defaulting to 1000 [ 402.848567][T14354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.926737][T14447] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 402.971931][ T52] Bluetooth: hci7: command tx timeout [ 403.036860][T14354] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.261846][ T6214] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.269208][ T6214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.285919][T14434] wg1 speed is unknown, defaulting to 1000 [ 403.306652][ T6214] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.313959][ T6214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.691353][ T52] Bluetooth: hci8: command tx timeout [ 403.838798][T14354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.190285][T14354] veth0_vlan: entered promiscuous mode [ 404.205670][T14354] veth1_vlan: entered promiscuous mode [ 404.247914][T14354] veth0_macvtap: entered promiscuous mode [ 404.262419][T14354] veth1_macvtap: entered promiscuous mode [ 404.269268][T14473] FAULT_INJECTION: forcing a failure. [ 404.269268][T14473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.283850][T14473] CPU: 1 UID: 0 PID: 14473 Comm: syz.8.2253 Not tainted syzkaller #0 PREEMPT(full) [ 404.283881][T14473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 404.283896][T14473] Call Trace: [ 404.283905][T14473] [ 404.283914][T14473] dump_stack_lvl+0x189/0x250 [ 404.283954][T14473] ? __pfx____ratelimit+0x10/0x10 [ 404.283979][T14473] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.284008][T14473] ? __pfx__printk+0x10/0x10 [ 404.284030][T14473] ? __might_fault+0xb0/0x130 [ 404.284076][T14473] should_fail_ex+0x414/0x560 [ 404.284119][T14473] _copy_to_iter+0x1de/0x1790 [ 404.284142][T14473] ? __pfx_drbg_kcapi_random+0x10/0x10 [ 404.284183][T14473] ? __lock_acquire+0xab9/0xd20 [ 404.284201][T14473] ? __pfx__copy_to_iter+0x10/0x10 [ 404.284221][T14473] ? __pfx___might_resched+0x10/0x10 [ 404.284257][T14473] rng_recvmsg+0x1ba/0x260 [ 404.284291][T14473] ? __pfx_rng_recvmsg+0x10/0x10 [ 404.284334][T14473] ? aa_sock_msg_perm+0xf1/0x1d0 [ 404.284367][T14473] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 404.284388][T14473] ? security_socket_recvmsg+0x7e/0x2e0 [ 404.284413][T14473] ? __pfx_rng_recvmsg+0x10/0x10 [ 404.284442][T14473] sock_recvmsg+0x22c/0x270 [ 404.284478][T14473] ____sys_recvmsg+0x1c9/0x460 [ 404.284515][T14473] ? __pfx_____sys_recvmsg+0x10/0x10 [ 404.284560][T14473] ? import_iovec+0x74/0xa0 [ 404.284590][T14473] ___sys_recvmsg+0x1b5/0x510 [ 404.284623][T14473] ? __pfx____sys_recvmsg+0x10/0x10 [ 404.284679][T14473] ? __fget_files+0x3a0/0x420 [ 404.284712][T14473] __x64_sys_recvmsg+0x198/0x260 [ 404.284742][T14473] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 404.284792][T14473] ? __pfx_ksys_write+0x10/0x10 [ 404.284828][T14473] ? do_syscall_64+0xbe/0xfa0 [ 404.284855][T14473] do_syscall_64+0xfa/0xfa0 [ 404.284876][T14473] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.284901][T14473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.284922][T14473] ? clear_bhb_loop+0x60/0xb0 [ 404.284950][T14473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.284972][T14473] RIP: 0033:0x7f3fdff8f749 [ 404.284991][T14473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.285011][T14473] RSP: 002b:00007f3fe0dfe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 404.285034][T14473] RAX: ffffffffffffffda RBX: 00007f3fe01e5fa0 RCX: 00007f3fdff8f749 [ 404.285050][T14473] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 404.285063][T14473] RBP: 00007f3fe0dfe090 R08: 0000000000000000 R09: 0000000000000000 [ 404.285076][T14473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.285089][T14473] R13: 00007f3fe01e6038 R14: 00007f3fe01e5fa0 R15: 00007ffe196f5568 [ 404.285127][T14473] [ 404.301161][T14354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.594945][T14354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.618085][ T6215] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.649000][ T6215] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.665436][ T6215] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.689551][ T6215] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.798658][ T6198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.809538][ T6198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.848637][ T6223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.857115][ T6223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.864231][T14480] netlink: 1624 bytes leftover after parsing attributes in process `syz.8.2256'. [ 405.100071][T14484] ip6_vti0 speed is unknown, defaulting to 1000 [ 405.316048][T14484] wg1 speed is unknown, defaulting to 1000 [ 405.774650][ T52] Bluetooth: hci8: command tx timeout [ 406.872298][T14501] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2261'. [ 406.890273][T14501] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.899518][T14501] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.921595][T14501] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2261'. [ 407.204057][T14512] ip6_vti0 speed is unknown, defaulting to 1000 [ 407.404129][T14512] wg1 speed is unknown, defaulting to 1000 [ 407.628929][T14522] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2268'. [ 407.743917][T14528] netlink: 'syz.9.2269': attribute type 10 has an invalid length. [ 407.772652][T14528] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 407.850752][ T52] Bluetooth: hci8: command tx timeout [ 409.152573][T14538] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2273'. [ 409.163313][T14538] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2273'. [ 409.542588][T14547] netlink: 'syz.9.2277': attribute type 1 has an invalid length. [ 409.607823][T14550] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2277'. [ 409.645054][T14547] netlink: 'syz.9.2277': attribute type 10 has an invalid length. [ 409.654456][T14547] netlink: 228 bytes leftover after parsing attributes in process `syz.9.2277'. [ 409.866190][T14552] tipc: Started in network mode [ 409.872178][T14552] tipc: Node identity 965d90b2dbe6, cluster identity 4711 [ 409.879758][T14552] tipc: Enabled bearer , priority 0 [ 409.894433][T14551] tipc: Disabling bearer [ 409.931589][ T52] Bluetooth: hci8: command tx timeout [ 410.186372][T14559] netlink: 'syz.9.2282': attribute type 1 has an invalid length. [ 410.234576][ T5836] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 410.244664][ T5836] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 410.254314][ T5836] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 410.264963][ T5836] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 410.273451][ T5836] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 410.304844][T14563] netlink: 'syz.9.2282': attribute type 10 has an invalid length. [ 410.329939][T14563] netlink: 228 bytes leftover after parsing attributes in process `syz.9.2282'. [ 410.392864][T14561] ip6_vti0 speed is unknown, defaulting to 1000 [ 410.608767][T14561] wg1 speed is unknown, defaulting to 1000 [ 410.617041][T14568] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 410.703571][T14569] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2284'. [ 410.902054][T14561] chnl_net:caif_netlink_parms(): no params data found [ 411.046407][T14561] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.054325][T14561] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.062311][T14561] bridge_slave_0: entered allmulticast mode [ 411.069989][T14561] bridge_slave_0: entered promiscuous mode [ 411.081074][T14561] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.088431][T14561] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.121174][T14561] bridge_slave_1: entered allmulticast mode [ 411.132781][T14561] bridge_slave_1: entered promiscuous mode [ 411.198985][T14561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.215795][T14561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.365063][T14561] team0: Port device team_slave_0 added [ 411.378610][T14561] team0: Port device team_slave_1 added [ 411.457042][T14561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.466047][T14561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.493442][T14561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.511908][T14561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.519148][T14561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.555002][T14561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.641525][T14561] hsr_slave_0: entered promiscuous mode [ 411.656177][T14561] hsr_slave_1: entered promiscuous mode [ 411.668202][T14561] debugfs: 'hsr0' already exists in 'hsr' [ 411.674451][T14561] Cannot create hsr debugfs directory [ 411.962857][T14561] netdevsim netdevsim4 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.099225][T14561] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.237401][T14561] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.337825][ T5836] Bluetooth: hci9: command tx timeout [ 412.353117][T14561] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.386862][T14597] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2288'. [ 412.407873][T14597] netlink: 35 bytes leftover after parsing attributes in process `syz.9.2288'. [ 412.425797][T14597] netlink: 'syz.9.2288': attribute type 6 has an invalid length. [ 412.437090][T14597] netlink: 'syz.9.2288': attribute type 5 has an invalid length. [ 412.445224][T14597] netlink: 35 bytes leftover after parsing attributes in process `syz.9.2288'. [ 412.669473][T14561] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 412.708382][T14561] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 412.737562][T14561] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 412.779520][T14561] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 412.906956][T14619] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2292'. [ 413.025445][T14561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.069099][T14561] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.086481][ T6215] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.087261][T14626] netlink: 'syz.9.2293': attribute type 1 has an invalid length. [ 413.093841][ T6215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.124030][ T6223] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.131270][ T6223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.253176][T14629] netlink: 'syz.9.2293': attribute type 10 has an invalid length. [ 413.268723][T14561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 413.282155][T14629] netlink: 228 bytes leftover after parsing attributes in process `syz.9.2293'. [ 413.742474][T14561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.425600][ T5836] Bluetooth: hci9: command tx timeout [ 415.209469][T14561] veth0_vlan: entered promiscuous mode [ 415.254737][T14561] veth1_vlan: entered promiscuous mode [ 415.319124][T14561] veth0_macvtap: entered promiscuous mode [ 415.354291][T14561] veth1_macvtap: entered promiscuous mode [ 415.380005][T14561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.402237][T14561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.419009][ T6198] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.447233][ T6198] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.501452][ T6198] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.521744][ T6198] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.895475][ T6215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.936211][ T6215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.084338][ T6225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.093872][ T6225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.478302][T14690] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2298'. [ 416.496175][ T5836] Bluetooth: hci9: command tx timeout [ 416.507385][T14690] openvswitch: netlink: Flow actions attr not present in new flow. [ 416.646282][ T52] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 416.664299][ T52] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 416.674990][ T52] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 416.686807][ T52] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 416.694852][ T52] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 416.796382][T14693] ip6_vti0 speed is unknown, defaulting to 1000 [ 417.270790][T14704] netlink: 'syz.4.2301': attribute type 1 has an invalid length. [ 417.358076][T14693] wg1 speed is unknown, defaulting to 1000 [ 417.441140][T14708] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2301'. [ 417.520135][T14708] netlink: 'syz.4.2301': attribute type 10 has an invalid length. [ 417.575165][T14708] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2301'. [ 418.512892][T14693] chnl_net:caif_netlink_parms(): no params data found [ 418.571255][ T5836] Bluetooth: hci9: command tx timeout [ 418.787279][ T52] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 418.805508][ T52] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 418.821811][ T52] Bluetooth: hci10: command tx timeout [ 418.828746][ T52] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 418.837996][ T52] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 418.846768][ T52] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 418.933761][T14693] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.951024][T14693] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.968630][T14693] bridge_slave_0: entered allmulticast mode [ 418.987730][T14693] bridge_slave_0: entered promiscuous mode [ 419.001546][T14693] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.019075][T14693] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.032256][T14693] bridge_slave_1: entered allmulticast mode [ 419.042327][T14693] bridge_slave_1: entered promiscuous mode [ 419.069288][T14736] ip6_vti0 speed is unknown, defaulting to 1000 [ 419.334801][T14693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.365732][T14693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.658603][T14693] team0: Port device team_slave_0 added [ 419.726928][T14693] team0: Port device team_slave_1 added [ 420.109578][T14736] wg1 speed is unknown, defaulting to 1000 [ 420.169540][T14693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.180640][T14693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.240700][T14693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.298054][T14693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.316929][T14693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.385845][T14693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.614689][T14693] hsr_slave_0: entered promiscuous mode [ 420.624436][T14693] hsr_slave_1: entered promiscuous mode [ 420.631688][T14693] debugfs: 'hsr0' already exists in 'hsr' [ 420.637876][T14693] Cannot create hsr debugfs directory [ 420.661383][ T5836] Bluetooth: hci9: command tx timeout [ 420.892496][ T5836] Bluetooth: hci11: command tx timeout [ 420.898848][ T5836] Bluetooth: hci10: command tx timeout [ 421.678224][T14786] tipc: Enabled bearer , priority 0 [ 421.693083][T14792] tipc: Resetting bearer [ 421.800187][T14779] tipc: Disabling bearer [ 422.047294][T14693] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.061748][T14693] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 422.123129][T14736] chnl_net:caif_netlink_parms(): no params data found [ 422.210766][T14806] netlink: 'syz.9.2312': attribute type 1 has an invalid length. [ 422.422493][T14693] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.460312][T14693] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 422.536123][T14809] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2312'. [ 422.825761][T14693] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.844344][T14693] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 422.844964][ T52] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 422.866392][ T52] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 422.875440][ T52] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 422.875927][T14804] ip6_vti0 speed is unknown, defaulting to 1000 [ 422.898441][ T52] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 422.906853][ T52] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 422.974919][ T5836] Bluetooth: hci10: command tx timeout [ 422.974930][ T52] Bluetooth: hci11: command tx timeout [ 423.054816][T14736] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.078178][T14736] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.105096][T14736] bridge_slave_0: entered allmulticast mode [ 423.123343][T14736] bridge_slave_0: entered promiscuous mode [ 423.217360][T14693] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.260091][T14693] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 423.311196][T14736] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.328699][T14736] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.354354][T14736] bridge_slave_1: entered allmulticast mode [ 423.374293][T14736] bridge_slave_1: entered promiscuous mode [ 423.727850][T14736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.763352][T14804] wg1 speed is unknown, defaulting to 1000 [ 423.763951][T14821] ip6_vti0 speed is unknown, defaulting to 1000 [ 423.781163][T14736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.987570][T14736] team0: Port device team_slave_0 added [ 424.062340][T14736] team0: Port device team_slave_1 added [ 424.340206][T14736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.358763][T14736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.419064][T14736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.447876][T14693] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 424.474152][T14821] wg1 speed is unknown, defaulting to 1000 [ 424.546797][T14736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.562205][T14736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.606412][T14736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.619453][T14693] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 424.660337][T14854] xt_CT: You must specify a L4 protocol and not use inversions on it [ 424.689499][T14693] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 424.771820][T14693] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 424.857068][T14736] hsr_slave_0: entered promiscuous mode [ 424.870359][T14736] hsr_slave_1: entered promiscuous mode [ 424.879148][T14736] debugfs: 'hsr0' already exists in 'hsr' [ 424.886135][T14736] Cannot create hsr debugfs directory [ 424.971755][ T52] Bluetooth: hci12: command tx timeout [ 425.050604][ T52] Bluetooth: hci10: command tx timeout [ 425.064471][ T52] Bluetooth: hci11: command tx timeout [ 425.411851][T14881] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2320'. [ 425.429091][T14881] bridge_slave_1: left allmulticast mode [ 425.445780][T14881] bridge_slave_1: left promiscuous mode [ 425.457788][T14881] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.470890][T14881] bridge_slave_0: left allmulticast mode [ 425.478100][T14881] bridge_slave_0: left promiscuous mode [ 425.487835][T14881] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.589277][T14821] chnl_net:caif_netlink_parms(): no params data found [ 426.183271][T14821] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.193980][T14821] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.204167][T14821] bridge_slave_0: entered allmulticast mode [ 426.218202][T14821] bridge_slave_0: entered promiscuous mode [ 426.283351][T14821] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.292540][T14821] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.300304][T14821] bridge_slave_1: entered allmulticast mode [ 426.311093][T14821] bridge_slave_1: entered promiscuous mode [ 426.359980][T14693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.439502][T14693] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.540347][T14821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.578463][ T6223] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.585740][ T6223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.617946][T14821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.778908][T14821] team0: Port device team_slave_0 added [ 427.050866][ T5836] Bluetooth: hci12: command tx timeout [ 427.131109][ T5836] Bluetooth: hci11: command tx timeout [ 427.136708][ T5836] Bluetooth: hci10: command tx timeout [ 427.223846][T14821] team0: Port device team_slave_1 added [ 427.289768][T14821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.298298][T14821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.335885][T14821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.359183][T14821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.366506][T14821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.398405][T14821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.478467][ T6225] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.485731][ T6225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.626888][T14821] hsr_slave_0: entered promiscuous mode [ 427.634640][T14821] hsr_slave_1: entered promiscuous mode [ 427.642338][T14821] debugfs: 'hsr0' already exists in 'hsr' [ 427.648204][T14821] Cannot create hsr debugfs directory [ 427.718225][T14736] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 427.760166][T14736] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 427.772746][T14924] sit0: entered promiscuous mode [ 427.784054][T14924] netlink: 'syz.9.2322': attribute type 1 has an invalid length. [ 427.792057][T14924] netlink: 1 bytes leftover after parsing attributes in process `syz.9.2322'. [ 427.813897][T14736] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 427.861234][T14924] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2322'. [ 427.863039][T14736] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 427.873110][T14924] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2322'. [ 428.061966][ T6198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.071065][ T6198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.139090][T14821] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.170801][T14821] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.346181][T14821] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.360560][T14821] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.455572][T14821] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.466476][T14821] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.503768][T14736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.528997][T14821] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.539457][T14821] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.607826][T14693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.634811][T14736] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.725100][ T6225] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.732475][ T6225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.743959][ T6225] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.751196][ T6225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.904216][T14693] veth0_vlan: entered promiscuous mode [ 428.976569][T14693] veth1_vlan: entered promiscuous mode [ 428.995100][T14821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 429.019561][T14821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 429.061038][T14821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 429.131676][ T5836] Bluetooth: hci12: command tx timeout [ 429.162244][T14821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 429.183234][T14693] veth0_macvtap: entered promiscuous mode [ 429.211405][ T5836] Bluetooth: hci11: command tx timeout [ 429.266350][T14693] veth1_macvtap: entered promiscuous mode [ 429.353689][T14693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.404133][T14693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.431459][ T6215] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.454439][ T6215] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.465348][ T6215] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.493669][T14736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.501734][ T6215] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.556493][T14821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.662162][T14821] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.729102][ T6222] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.736398][ T6222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.784863][ T6198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.805816][ T6222] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.813287][ T6222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.826360][ T6198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.882130][T14961] netlink: 'syz.9.2325': attribute type 8 has an invalid length. [ 430.031570][ T6225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.039467][ T6225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.057631][T14821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 430.190274][T14968] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2326'. [ 430.232688][T14736] veth0_vlan: entered promiscuous mode [ 430.283803][T14736] veth1_vlan: entered promiscuous mode [ 430.330068][T14971] FAULT_INJECTION: forcing a failure. [ 430.330068][T14971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.364680][T14971] CPU: 1 UID: 0 PID: 14971 Comm: syz.1.2297 Not tainted syzkaller #0 PREEMPT(full) [ 430.364714][T14971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 430.364733][T14971] Call Trace: [ 430.364742][T14971] [ 430.364752][T14971] dump_stack_lvl+0x189/0x250 [ 430.364790][T14971] ? __pfx____ratelimit+0x10/0x10 [ 430.364812][T14971] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.364843][T14971] ? __pfx__printk+0x10/0x10 [ 430.364867][T14971] ? __might_fault+0xb0/0x130 [ 430.364913][T14971] should_fail_ex+0x414/0x560 [ 430.364954][T14971] _copy_from_user+0x2d/0xb0 [ 430.364986][T14971] ___sys_recvmsg+0x12e/0x510 [ 430.365023][T14971] ? __pfx____sys_recvmsg+0x10/0x10 [ 430.365088][T14971] ? __might_fault+0xb0/0x130 [ 430.365124][T14971] do_recvmmsg+0x307/0x770 [ 430.365161][T14971] ? __pfx_do_recvmmsg+0x10/0x10 [ 430.365201][T14971] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 430.365246][T14971] __x64_sys_recvmmsg+0x190/0x240 [ 430.365277][T14971] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 430.365308][T14971] ? do_syscall_64+0xbe/0xfa0 [ 430.365335][T14971] do_syscall_64+0xfa/0xfa0 [ 430.365357][T14971] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.365379][T14971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.365402][T14971] ? clear_bhb_loop+0x60/0xb0 [ 430.365426][T14971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.365460][T14971] RIP: 0033:0x7f0f5c58f749 [ 430.365480][T14971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.365501][T14971] RSP: 002b:00007f0f5d478038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 430.365525][T14971] RAX: ffffffffffffffda RBX: 00007f0f5c7e5fa0 RCX: 00007f0f5c58f749 [ 430.365541][T14971] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000007 [ 430.365556][T14971] RBP: 00007f0f5d478090 R08: 0000000000000000 R09: 0000000000000000 [ 430.365570][T14971] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 430.365584][T14971] R13: 00007f0f5c7e6038 R14: 00007f0f5c7e5fa0 R15: 00007fffd71976c8 [ 430.365621][T14971] [ 430.373405][T14736] veth0_macvtap: entered promiscuous mode [ 430.665784][T14736] veth1_macvtap: entered promiscuous mode [ 430.896280][T14736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.043724][T14736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.099408][ T6225] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.127821][ T6225] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.148053][ T6225] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.157942][ T6225] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.213925][ T5836] Bluetooth: hci12: command tx timeout [ 431.263333][T14821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.320145][T14821] veth0_vlan: entered promiscuous mode [ 431.336737][T14821] veth1_vlan: entered promiscuous mode [ 431.749476][T14821] veth0_macvtap: entered promiscuous mode [ 431.848817][T14821] veth1_macvtap: entered promiscuous mode [ 431.900658][ T6222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.908645][ T6222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.012227][T14821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.036629][T14821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.072744][ T6225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.082232][ T6214] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.100946][ T6214] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.109807][ T6225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.146899][ T6214] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.160125][ T6214] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.406440][ T6225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.422551][ T6225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.516540][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.526149][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.077932][T15012] ip6_vti0 speed is unknown, defaulting to 1000 [ 433.282788][T15023] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2340'. [ 433.294446][T15023] netlink: 'syz.5.2340': attribute type 13 has an invalid length. [ 433.303658][ T5836] Bluetooth: hci12: command tx timeout [ 433.320710][T15023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2340'. [ 433.379030][ T6215] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.382100][T15023] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2340'. [ 433.393218][ T6215] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.407406][T15023] netlink: 'syz.5.2340': attribute type 13 has an invalid length. [ 433.432009][ T6215] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.454472][ T6215] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.590698][T15023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2340'. [ 434.290826][T15012] wg1 speed is unknown, defaulting to 1000 [ 434.899494][T15048] tipc: Started in network mode [ 434.906479][T15048] tipc: Node identity 3e2a52ccfc14, cluster identity 4711 [ 434.917120][T15048] tipc: Enabled bearer , priority 0 [ 434.932749][T15048] tipc: Resetting bearer [ 434.945268][T15047] tipc: Disabling bearer [ 435.449819][T15071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.569323][T15071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.644815][T15072] ip6_vti0: entered promiscuous mode [ 435.655607][T15072] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2355'. [ 437.232322][T15107] netlink: 'syz.2.2366': attribute type 29 has an invalid length. [ 437.284814][T15107] netlink: 'syz.2.2366': attribute type 29 has an invalid length. [ 437.321617][T15107] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2366'. [ 437.333503][T15107] unsupported nla_type 58 [ 437.430861][ T30] audit: type=1804 audit(1763998661.478:3): pid=15107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2366" name="/newroot/9/cgroup.controllers" dev="tmpfs" ino=63 res=1 errno=0 [ 437.495804][ T30] audit: type=1800 audit(1763998661.478:4): pid=15107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2366" name="cgroup.controllers" dev="tmpfs" ino=63 res=0 errno=0 [ 437.528483][ T30] audit: type=1800 audit(1763998661.478:5): pid=15107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2366" name="cgroup.controllers" dev="tmpfs" ino=63 res=0 errno=0 [ 437.676365][T15117] ip6_vti0 speed is unknown, defaulting to 1000 [ 437.801829][T15111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2367'. [ 437.826838][T15111] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2367'. [ 437.873572][T15118] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2367'. [ 437.912691][T15120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.098314][ T52] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 438.110075][ T52] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 438.113114][T15120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.127284][ T52] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 438.136836][ T52] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 438.147311][ T52] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 438.246320][T15123] ip6_vti0: entered promiscuous mode [ 438.270016][T15123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2369'. [ 438.479948][T15117] wg1 speed is unknown, defaulting to 1000 [ 438.486358][T15124] ip6_vti0 speed is unknown, defaulting to 1000 [ 438.574864][T15133] tipc: Started in network mode [ 438.646910][T15133] tipc: Node identity 5690ab6e1dba, cluster identity 4711 [ 438.701144][T15133] tipc: Enabled bearer , priority 0 [ 438.732895][T15136] syzkaller0: entered promiscuous mode [ 438.780985][T15136] syzkaller0: entered allmulticast mode [ 438.997208][T15136] tipc: Resetting bearer [ 439.009937][T15124] wg1 speed is unknown, defaulting to 1000 [ 439.010272][T15143] tipc: Enabled bearer , priority 0 [ 439.032940][T15131] tipc: Resetting bearer [ 439.050228][T15131] tipc: Disabling bearer [ 439.065928][T15141] tipc: Resetting bearer [ 439.115397][T15140] tipc: Disabling bearer [ 439.276078][T15148] netlink: 'syz.9.2377': attribute type 1 has an invalid length. [ 439.458035][T15124] chnl_net:caif_netlink_parms(): no params data found [ 439.485579][ T30] audit: type=1804 audit(1763998663.548:6): pid=15157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2379" name="/newroot/15/cgroup.controllers" dev="tmpfs" ino=94 res=1 errno=0 [ 439.560935][ T30] audit: type=1800 audit(1763998663.548:7): pid=15157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2379" name="cgroup.controllers" dev="tmpfs" ino=94 res=0 errno=0 [ 439.709253][T15124] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.727670][T15124] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.745268][T15124] bridge_slave_0: entered allmulticast mode [ 439.755407][T15124] bridge_slave_0: entered promiscuous mode [ 439.766034][T15124] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.776373][T15124] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.785996][T15124] bridge_slave_1: entered allmulticast mode [ 439.798553][T15124] bridge_slave_1: entered promiscuous mode [ 439.899058][T15124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.915950][T15124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.981367][T15172] netlink: 'syz.2.2383': attribute type 1 has an invalid length. [ 439.999842][T15124] team0: Port device team_slave_0 added [ 440.016301][T15124] team0: Port device team_slave_1 added [ 440.137919][T15124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.147154][T15124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.189316][T15124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.225835][T15124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.226093][T15178] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20001 [ 440.236869][T15124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.270020][T15124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.283735][ T5836] Bluetooth: hci13: command tx timeout [ 440.304897][T15172] netlink: 'syz.2.2383': attribute type 10 has an invalid length. [ 440.314862][T15172] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2383'. [ 440.502980][T15124] hsr_slave_0: entered promiscuous mode [ 440.509921][T15124] hsr_slave_1: entered promiscuous mode [ 440.518169][T15124] debugfs: 'hsr0' already exists in 'hsr' [ 440.528745][T15124] Cannot create hsr debugfs directory [ 440.803213][T15124] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.821299][T15124] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.914604][T15124] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.925420][T15124] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.008234][T15124] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.026816][T15124] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.043464][ T5945] IPVS: starting estimator thread 0... [ 441.108497][T15124] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.119482][T15124] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.145251][T15198] IPVS: using max 24 ests per chain, 57600 per kthread [ 441.351245][T15204] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2392'. [ 441.381854][T15204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2392'. [ 441.381920][T15124] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 441.399913][T15204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2392'. [ 441.430011][T15124] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 441.475723][T15206] netlink: 'syz.9.2393': attribute type 1 has an invalid length. [ 441.488917][T15206] netlink: 1 bytes leftover after parsing attributes in process `syz.9.2393'. [ 441.548280][T15124] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 441.555528][T15206] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2393'. [ 441.555561][T15206] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2393'. [ 441.588574][T15124] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 441.762561][T15223] netlink: 'syz.2.2396': attribute type 1 has an invalid length. [ 441.778930][T15124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.816286][T15226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.833963][T15226] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2397'. [ 441.833997][T15124] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.877181][T15227] netlink: 'syz.2.2396': attribute type 10 has an invalid length. [ 441.885756][T15227] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2396'. [ 441.888226][ T6222] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.902482][ T6222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.998728][ T6222] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.006146][ T6222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.343116][ T5836] Bluetooth: hci13: command tx timeout [ 442.418428][T15124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.513521][T15124] veth0_vlan: entered promiscuous mode [ 442.544933][T15241] netlink: 'syz.2.2398': attribute type 3 has an invalid length. [ 442.554256][T15241] netlink: 'syz.2.2398': attribute type 3 has an invalid length. [ 442.567891][T15124] veth1_vlan: entered promiscuous mode [ 442.648192][T15124] veth0_macvtap: entered promiscuous mode [ 442.669724][T15124] veth1_macvtap: entered promiscuous mode [ 442.823712][T15124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.860356][T15124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.918673][ T6222] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.930937][ T6222] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.959266][ T6222] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.968766][ T6222] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.118227][ T6213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.137502][ T6213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.217419][ T6213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.227148][ T6213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.347067][T15259] netlink: 'syz.9.2406': attribute type 1 has an invalid length. [ 443.365134][T15262] netlink: 'syz.2.2407': attribute type 1 has an invalid length. [ 443.536692][T15266] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2407'. [ 444.344372][T15282] batadv0: entered promiscuous mode [ 444.364797][T15282] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 444.375671][T15282] batadv0: left promiscuous mode [ 444.411828][ T5836] Bluetooth: hci13: command tx timeout [ 445.168629][T15311] validate_nla: 1 callbacks suppressed [ 445.168654][T15311] netlink: 'syz.0.2422': attribute type 1 has an invalid length. [ 445.329195][T15315] netlink: 'syz.0.2422': attribute type 10 has an invalid length. [ 445.357381][T15315] __nla_validate_parse: 1 callbacks suppressed [ 445.357402][T15315] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2422'. [ 445.858085][T15332] netlink: 'syz.0.2427': attribute type 12 has an invalid length. [ 445.879787][T15332] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 445.922919][T15332] netlink: 'syz.0.2427': attribute type 4 has an invalid length. [ 445.931129][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 445.945012][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.951782][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.293015][T15339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2429'. [ 446.305724][T15339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2429'. [ 446.493636][ T5836] Bluetooth: hci13: command tx timeout [ 447.034180][T15360] netlink: 'syz.0.2437': attribute type 1 has an invalid length. [ 447.137597][T15363] netlink: 'syz.0.2437': attribute type 10 has an invalid length. [ 447.147448][T15363] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2437'. [ 447.926329][T15386] FAULT_INJECTION: forcing a failure. [ 447.926329][T15386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.015472][T15386] CPU: 0 UID: 0 PID: 15386 Comm: syz.9.2446 Not tainted syzkaller #0 PREEMPT(full) [ 448.015506][T15386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 448.015521][T15386] Call Trace: [ 448.015530][T15386] [ 448.015540][T15386] dump_stack_lvl+0x189/0x250 [ 448.015579][T15386] ? __pfx____ratelimit+0x10/0x10 [ 448.015603][T15386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.015633][T15386] ? __pfx__printk+0x10/0x10 [ 448.015657][T15386] ? __might_fault+0xb0/0x130 [ 448.015703][T15386] should_fail_ex+0x414/0x560 [ 448.015751][T15386] _copy_from_iter+0x1de/0x1790 [ 448.015775][T15386] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 448.015807][T15386] ? kmalloc_reserve+0xbd/0x290 [ 448.015847][T15386] ? __pfx__copy_from_iter+0x10/0x10 [ 448.015869][T15386] ? __alloc_skb+0x2f1/0x430 [ 448.015896][T15386] ? __pfx___alloc_skb+0x10/0x10 [ 448.015922][T15386] ? netlink_sendmsg+0x642/0xb30 [ 448.015945][T15386] ? skb_put+0x11b/0x210 [ 448.015973][T15386] netlink_sendmsg+0x6b2/0xb30 [ 448.016011][T15386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.016041][T15386] ? aa_sock_msg_perm+0xf1/0x1d0 [ 448.016076][T15386] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 448.016098][T15386] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.016126][T15386] __sock_sendmsg+0x21c/0x270 [ 448.016163][T15386] ____sys_sendmsg+0x505/0x830 [ 448.016197][T15386] ? __pfx_____sys_sendmsg+0x10/0x10 [ 448.016236][T15386] ? import_iovec+0x74/0xa0 [ 448.016275][T15386] ___sys_sendmsg+0x21f/0x2a0 [ 448.016305][T15386] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.016375][T15386] ? __fget_files+0x2a/0x420 [ 448.016396][T15386] ? __fget_files+0x3a0/0x420 [ 448.016430][T15386] __x64_sys_sendmsg+0x19b/0x260 [ 448.016461][T15386] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 448.016500][T15386] ? __pfx_ksys_write+0x10/0x10 [ 448.016537][T15386] ? do_syscall_64+0xbe/0xfa0 [ 448.016565][T15386] do_syscall_64+0xfa/0xfa0 [ 448.016586][T15386] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.016611][T15386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.016633][T15386] ? clear_bhb_loop+0x60/0xb0 [ 448.016662][T15386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.016684][T15386] RIP: 0033:0x7f95c618f749 [ 448.016703][T15386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.016723][T15386] RSP: 002b:00007f95c6fdc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.016747][T15386] RAX: ffffffffffffffda RBX: 00007f95c63e5fa0 RCX: 00007f95c618f749 [ 448.016764][T15386] RDX: 000000000404c004 RSI: 0000200000006040 RDI: 0000000000000006 [ 448.016779][T15386] RBP: 00007f95c6fdc090 R08: 0000000000000000 R09: 0000000000000000 [ 448.016793][T15386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.016806][T15386] R13: 00007f95c63e6038 R14: 00007f95c63e5fa0 R15: 00007fff8feaefb8 [ 448.016845][T15386] [ 448.461463][ T52] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 448.484718][ T52] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 448.501647][ T52] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 448.519209][ T52] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 448.538552][ T52] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 448.612755][T15391] ip6_vti0 speed is unknown, defaulting to 1000 [ 448.867670][T15406] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2452'. [ 448.930196][T15407] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2452'. [ 448.964779][T15406] ipvlan2: entered promiscuous mode [ 448.970214][T15406] ipvlan2: entered allmulticast mode [ 448.992660][T15406] geneve1: entered allmulticast mode [ 449.007064][T15402] ip6_vti0 speed is unknown, defaulting to 1000 [ 449.053178][T15391] wg1 speed is unknown, defaulting to 1000 [ 449.403235][T15417] Bluetooth: MGMT ver 1.23 [ 449.486577][T15391] chnl_net:caif_netlink_parms(): no params data found [ 449.501537][ T30] audit: type=1800 audit(1763998673.558:8): pid=15416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2455" name="memory.events" dev="tmpfs" ino=555 res=0 errno=0 [ 449.563380][T15402] wg1 speed is unknown, defaulting to 1000 [ 449.813182][T15426] 8021q: VLANs not supported on wg2 [ 449.876890][T15431] FAULT_INJECTION: forcing a failure. [ 449.876890][T15431] name failslab, interval 1, probability 0, space 0, times 0 [ 449.903233][T15431] CPU: 0 UID: 0 PID: 15431 Comm: syz.0.2459 Not tainted syzkaller #0 PREEMPT(full) [ 449.903265][T15431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 449.903279][T15431] Call Trace: [ 449.903288][T15431] [ 449.903297][T15431] dump_stack_lvl+0x189/0x250 [ 449.903343][T15431] ? __pfx____ratelimit+0x10/0x10 [ 449.903366][T15431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.903397][T15431] ? __pfx__printk+0x10/0x10 [ 449.903415][T15431] ? kmalloc_reserve+0xbd/0x290 [ 449.903447][T15431] ? __lock_acquire+0xab9/0xd20 [ 449.903489][T15431] should_fail_ex+0x414/0x560 [ 449.903530][T15431] should_failslab+0xa8/0x100 [ 449.903555][T15431] kmem_cache_alloc_noprof+0x74/0x6e0 [ 449.903587][T15431] ? skb_clone+0x212/0x3a0 [ 449.903621][T15431] skb_clone+0x212/0x3a0 [ 449.903654][T15431] __netlink_deliver_tap+0x404/0x850 [ 449.903696][T15431] ? netlink_deliver_tap+0x2e/0x1b0 [ 449.903723][T15431] netlink_deliver_tap+0x19c/0x1b0 [ 449.903751][T15431] netlink_unicast+0x7fa/0x9e0 [ 449.903785][T15431] ? __pfx_netlink_unicast+0x10/0x10 [ 449.903816][T15431] ? netlink_sendmsg+0x642/0xb30 [ 449.903839][T15431] ? skb_put+0x11b/0x210 [ 449.903867][T15431] netlink_sendmsg+0x805/0xb30 [ 449.903904][T15431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.903935][T15431] ? aa_sock_msg_perm+0xf1/0x1d0 [ 449.903971][T15431] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 449.903992][T15431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.904020][T15431] __sock_sendmsg+0x21c/0x270 [ 449.904062][T15431] ____sys_sendmsg+0x505/0x830 [ 449.904124][T15431] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.904163][T15431] ? import_iovec+0x74/0xa0 [ 449.904196][T15431] ___sys_sendmsg+0x21f/0x2a0 [ 449.904226][T15431] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.904297][T15431] ? __fget_files+0x2a/0x420 [ 449.904318][T15431] ? __fget_files+0x3a0/0x420 [ 449.904358][T15431] __x64_sys_sendmsg+0x19b/0x260 [ 449.904393][T15431] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 449.904432][T15431] ? __pfx_ksys_write+0x10/0x10 [ 449.904468][T15431] ? do_syscall_64+0xbe/0xfa0 [ 449.904497][T15431] do_syscall_64+0xfa/0xfa0 [ 449.904518][T15431] ? lockdep_hardirqs_on+0x9c/0x150 [ 449.904541][T15431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.904563][T15431] ? clear_bhb_loop+0x60/0xb0 [ 449.904589][T15431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.904611][T15431] RIP: 0033:0x7f3eb758f749 [ 449.904631][T15431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.904650][T15431] RSP: 002b:00007f3eb8349038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.904679][T15431] RAX: ffffffffffffffda RBX: 00007f3eb77e5fa0 RCX: 00007f3eb758f749 [ 449.904696][T15431] RDX: 000000000404c004 RSI: 0000200000006040 RDI: 0000000000000006 [ 449.904710][T15431] RBP: 00007f3eb8349090 R08: 0000000000000000 R09: 0000000000000000 [ 449.904724][T15431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.904737][T15431] R13: 00007f3eb77e6038 R14: 00007f3eb77e5fa0 R15: 00007ffe59afca78 [ 449.904775][T15431] [ 450.378849][T15391] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.387030][T15391] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.395423][T15391] bridge_slave_0: entered allmulticast mode [ 450.404628][T15391] bridge_slave_0: entered promiscuous mode [ 450.417934][T15391] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.426558][T15391] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.434513][T15391] bridge_slave_1: entered allmulticast mode [ 450.443951][T15391] bridge_slave_1: entered promiscuous mode [ 450.506471][T15391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.522212][T15391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.582475][ T52] Bluetooth: hci14: command tx timeout [ 450.613839][T15391] team0: Port device team_slave_0 added [ 450.673004][T15391] team0: Port device team_slave_1 added [ 450.703364][T15449] netlink: 'syz.0.2464': attribute type 1 has an invalid length. [ 451.150812][T15391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.240777][T15391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.290897][T15391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.315677][T15391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.324095][T15391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.384906][T15391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.654338][T15457] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2466'. [ 451.722926][T15391] hsr_slave_0: entered promiscuous mode [ 451.733307][T15391] hsr_slave_1: entered promiscuous mode [ 451.740061][T15391] debugfs: 'hsr0' already exists in 'hsr' [ 451.746793][T15391] Cannot create hsr debugfs directory [ 451.754653][T15458] syzkaller0: entered promiscuous mode [ 451.761527][T15458] syzkaller0: entered allmulticast mode [ 452.148456][T15391] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.180732][T15391] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.218860][T15469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2470'. [ 452.239697][T15471] FAULT_INJECTION: forcing a failure. [ 452.239697][T15471] name failslab, interval 1, probability 0, space 0, times 0 [ 452.258404][T15471] CPU: 1 UID: 0 PID: 15471 Comm: syz.9.2471 Not tainted syzkaller #0 PREEMPT(full) [ 452.258432][T15471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 452.258445][T15471] Call Trace: [ 452.258453][T15471] [ 452.258463][T15471] dump_stack_lvl+0x189/0x250 [ 452.258499][T15471] ? __pfx____ratelimit+0x10/0x10 [ 452.258518][T15471] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.258545][T15471] ? __pfx__printk+0x10/0x10 [ 452.258567][T15471] ? __pfx___might_resched+0x10/0x10 [ 452.258589][T15471] ? fs_reclaim_acquire+0x7d/0x100 [ 452.258616][T15471] should_fail_ex+0x414/0x560 [ 452.258655][T15471] should_failslab+0xa8/0x100 [ 452.258677][T15471] kmem_cache_alloc_node_noprof+0x77/0x710 [ 452.258709][T15471] ? __alloc_skb+0x255/0x430 [ 452.258739][T15471] ? napi_skb_cache_get+0x4a5/0x790 [ 452.258761][T15471] ? napi_skb_cache_get+0x151/0x790 [ 452.258789][T15471] __alloc_skb+0x255/0x430 [ 452.258815][T15471] ? __pfx___alloc_skb+0x10/0x10 [ 452.258846][T15471] ? netlink_ack_tlv_len+0x6c/0x210 [ 452.258874][T15471] netlink_ack+0x146/0xa50 [ 452.258904][T15471] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 452.258927][T15471] ? ref_tracker_free+0x63a/0x7d0 [ 452.258950][T15471] ? __asan_memcpy+0x40/0x70 [ 452.258979][T15471] ? __pfx_ref_tracker_free+0x10/0x10 [ 452.259014][T15471] netlink_rcv_skb+0x28c/0x470 [ 452.259041][T15471] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 452.259066][T15471] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 452.259105][T15471] ? netlink_deliver_tap+0x2e/0x1b0 [ 452.259138][T15471] netlink_unicast+0x82f/0x9e0 [ 452.259170][T15471] ? __pfx_netlink_unicast+0x10/0x10 [ 452.259195][T15471] ? netlink_sendmsg+0x642/0xb30 [ 452.259218][T15471] ? skb_put+0x11b/0x210 [ 452.259246][T15471] netlink_sendmsg+0x805/0xb30 [ 452.259282][T15471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.259310][T15471] ? aa_sock_msg_perm+0xf1/0x1d0 [ 452.259341][T15471] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 452.259359][T15471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.259380][T15471] __sock_sendmsg+0x21c/0x270 [ 452.259410][T15471] ____sys_sendmsg+0x505/0x830 [ 452.259436][T15471] ? __pfx_____sys_sendmsg+0x10/0x10 [ 452.259466][T15471] ? import_iovec+0x74/0xa0 [ 452.259494][T15471] ___sys_sendmsg+0x21f/0x2a0 [ 452.259518][T15471] ? __pfx____sys_sendmsg+0x10/0x10 [ 452.259573][T15471] ? __fget_files+0x2a/0x420 [ 452.259589][T15471] ? __fget_files+0x3a0/0x420 [ 452.259615][T15471] __x64_sys_sendmsg+0x19b/0x260 [ 452.259641][T15471] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 452.259672][T15471] ? __pfx_ksys_write+0x10/0x10 [ 452.259704][T15471] ? do_syscall_64+0xbe/0xfa0 [ 452.259728][T15471] do_syscall_64+0xfa/0xfa0 [ 452.259748][T15471] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.259769][T15471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.259790][T15471] ? clear_bhb_loop+0x60/0xb0 [ 452.259814][T15471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.259830][T15471] RIP: 0033:0x7f95c618f749 [ 452.259847][T15471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.259863][T15471] RSP: 002b:00007f95c6fdc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.259891][T15471] RAX: ffffffffffffffda RBX: 00007f95c63e5fa0 RCX: 00007f95c618f749 [ 452.259904][T15471] RDX: 000000000404c004 RSI: 0000200000006040 RDI: 0000000000000006 [ 452.259915][T15471] RBP: 00007f95c6fdc090 R08: 0000000000000000 R09: 0000000000000000 [ 452.259925][T15471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.259935][T15471] R13: 00007f95c63e6038 R14: 00007f95c63e5fa0 R15: 00007fff8feaefb8 [ 452.259966][T15471] [ 452.651560][ T52] Bluetooth: hci14: command tx timeout [ 452.695465][T15391] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.740217][T15391] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.836503][T15391] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.848020][T15391] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.909922][T15391] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.922174][T15391] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.190196][ T5836] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 453.204342][ T5836] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 453.214428][ T5836] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 453.226477][ T5836] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 453.237927][ T5836] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 453.307581][T15391] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 453.366796][T15391] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 453.391852][T15391] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 453.399687][T15484] ip6_vti0 speed is unknown, defaulting to 1000 [ 453.404453][T15487] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2475'. [ 453.425761][T15487] netlink: 'syz.9.2475': attribute type 13 has an invalid length. [ 453.438115][T15391] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 453.453035][T15487] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2475'. [ 453.465538][T15487] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2475'. [ 453.476333][T15487] netlink: 'syz.9.2475': attribute type 13 has an invalid length. [ 453.487441][T15487] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2475'. [ 453.749464][T15391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.813489][T15391] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.835055][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.842665][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.893837][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.901179][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.014591][T15484] wg1 speed is unknown, defaulting to 1000 [ 454.363339][T15510] netlink: 196 bytes leftover after parsing attributes in process `syz.9.2480'. [ 454.543546][T15391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.567571][T15484] chnl_net:caif_netlink_parms(): no params data found [ 454.732190][ T5836] Bluetooth: hci14: command tx timeout [ 455.266971][T15484] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.290880][ T5836] Bluetooth: hci15: command tx timeout [ 455.465569][T15484] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.491481][T15484] bridge_slave_0: entered allmulticast mode [ 455.522019][T15484] bridge_slave_0: entered promiscuous mode [ 455.770183][T15525] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20002 [ 455.781842][T15484] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.800941][T15484] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.808644][T15484] bridge_slave_1: entered allmulticast mode [ 455.818674][T15484] bridge_slave_1: entered promiscuous mode [ 455.919454][T15391] veth0_vlan: entered promiscuous mode [ 455.996454][T15391] veth1_vlan: entered promiscuous mode [ 456.017530][T15484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.047102][T15484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.145766][T15484] team0: Port device team_slave_0 added [ 456.189518][T15484] team0: Port device team_slave_1 added [ 456.364593][T15484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.381963][T15484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.439602][T15484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.458781][T15484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.466505][T15484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.498061][T15484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.524352][T15391] veth0_macvtap: entered promiscuous mode [ 456.557362][T15391] veth1_macvtap: entered promiscuous mode [ 456.695333][T15484] hsr_slave_0: entered promiscuous mode [ 456.710166][T15484] hsr_slave_1: entered promiscuous mode [ 456.720020][T15484] debugfs: 'hsr0' already exists in 'hsr' [ 456.726525][T15484] Cannot create hsr debugfs directory [ 456.792160][T15391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.821243][ T5836] Bluetooth: hci14: command tx timeout [ 456.945824][T15391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.994590][ T1134] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.038730][ T1134] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.073577][ T1134] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.095435][ T1134] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.152349][T15537] netlink: 'syz.0.2486': attribute type 1 has an invalid length. [ 457.235237][T15541] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2486'. [ 457.299956][ T6222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.344975][ T6222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.371042][ T52] Bluetooth: hci15: command tx timeout [ 457.511991][T15541] netlink: 'syz.0.2486': attribute type 10 has an invalid length. [ 457.519108][ T6213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.544731][ T6213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.545755][T15541] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2486'. [ 457.663561][T15484] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.818342][T15484] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.915859][T15557] Cannot find set identified by id 0 to match [ 457.976689][T15484] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.015282][T15557] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2490'. [ 458.145854][T15484] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.645726][T15484] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 458.672258][T15484] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 458.688379][T15484] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 458.721031][T15576] 8021q: VLANs not supported on ip6tnl0 [ 458.774831][T15484] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 459.106038][T15484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.154629][T15484] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.179989][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.187311][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.238895][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.246191][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.389455][T15601] FAULT_INJECTION: forcing a failure. [ 459.389455][T15601] name failslab, interval 1, probability 0, space 0, times 0 [ 459.413783][T15603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2504'. [ 459.439445][T15601] CPU: 1 UID: 0 PID: 15601 Comm: syz.0.2505 Not tainted syzkaller #0 PREEMPT(full) [ 459.439476][T15601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 459.439489][T15601] Call Trace: [ 459.439498][T15601] [ 459.439507][T15601] dump_stack_lvl+0x189/0x250 [ 459.439545][T15601] ? __pfx____ratelimit+0x10/0x10 [ 459.439566][T15601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.439593][T15601] ? __pfx__printk+0x10/0x10 [ 459.439701][T15601] ? __pfx___might_resched+0x10/0x10 [ 459.439746][T15601] should_fail_ex+0x414/0x560 [ 459.439786][T15601] should_failslab+0xa8/0x100 [ 459.439810][T15601] __kmalloc_noprof+0xcb/0x7f0 [ 459.439838][T15601] ? nft_pernet+0x23/0x240 [ 459.439868][T15601] ? nf_tables_newrule+0x150b/0x28a0 [ 459.439906][T15601] nf_tables_newrule+0x150b/0x28a0 [ 459.439962][T15601] ? __pfx_nf_tables_newrule+0x10/0x10 [ 459.439992][T15601] ? nfnl_pernet+0x23/0x240 [ 459.440030][T15601] ? __nla_parse+0x40/0x60 [ 459.440056][T15601] nfnetlink_rcv+0x11d9/0x2590 [ 459.440118][T15601] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 459.440157][T15601] ? ref_tracker_free+0x63a/0x7d0 [ 459.440211][T15601] ? __netlink_deliver_tap+0x807/0x850 [ 459.440235][T15601] ? netlink_deliver_tap+0x2e/0x1b0 [ 459.440278][T15601] netlink_unicast+0x82f/0x9e0 [ 459.440309][T15601] ? __pfx_netlink_unicast+0x10/0x10 [ 459.440332][T15601] ? netlink_sendmsg+0x642/0xb30 [ 459.440352][T15601] ? skb_put+0x11b/0x210 [ 459.440385][T15601] netlink_sendmsg+0x805/0xb30 [ 459.440417][T15601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.440446][T15601] ? aa_sock_msg_perm+0xf1/0x1d0 [ 459.440484][T15601] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 459.440508][T15601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.440546][T15601] __sock_sendmsg+0x21c/0x270 [ 459.440585][T15601] ____sys_sendmsg+0x505/0x830 [ 459.440620][T15601] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.440659][T15601] ? import_iovec+0x74/0xa0 [ 459.440692][T15601] ___sys_sendmsg+0x21f/0x2a0 [ 459.440720][T15601] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.440790][T15601] ? __fget_files+0x2a/0x420 [ 459.440811][T15601] ? __fget_files+0x3a0/0x420 [ 459.440845][T15601] __x64_sys_sendmsg+0x19b/0x260 [ 459.440876][T15601] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 459.440917][T15601] ? __pfx_ksys_write+0x10/0x10 [ 459.440954][T15601] ? do_syscall_64+0xbe/0xfa0 [ 459.440982][T15601] do_syscall_64+0xfa/0xfa0 [ 459.441004][T15601] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.441029][T15601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.441053][T15601] ? clear_bhb_loop+0x60/0xb0 [ 459.441081][T15601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.441103][T15601] RIP: 0033:0x7f3eb758f749 [ 459.441125][T15601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.441147][T15601] RSP: 002b:00007f3eb8349038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.441171][T15601] RAX: ffffffffffffffda RBX: 00007f3eb77e5fa0 RCX: 00007f3eb758f749 [ 459.441187][T15601] RDX: 0000000020008000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 459.441200][T15601] RBP: 00007f3eb8349090 R08: 0000000000000000 R09: 0000000000000000 [ 459.441214][T15601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 459.441226][T15601] R13: 00007f3eb77e6038 R14: 00007f3eb77e5fa0 R15: 00007ffe59afca78 [ 459.441264][T15601] [ 459.783010][T15604] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 459.784648][ T52] Bluetooth: hci15: command tx timeout [ 459.962520][T15612] netlink: 'syz.3.2506': attribute type 1 has an invalid length. [ 460.029109][T15617] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2506'. [ 460.124290][T15617] netlink: 'syz.3.2506': attribute type 10 has an invalid length. [ 460.165616][T15617] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2506'. [ 460.281614][T15484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.577267][T15633] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2510'. [ 461.173640][T15484] veth0_vlan: entered promiscuous mode [ 461.205653][T15484] veth1_vlan: entered promiscuous mode [ 461.236543][T15651] tipc: Enabled bearer , priority 0 [ 461.264114][T15651] tipc: Resetting bearer [ 461.286635][T15650] tipc: Disabling bearer [ 461.348006][T15653] tipc: Started in network mode [ 461.364770][T15653] tipc: Node identity e6e02c924282, cluster identity 4711 [ 461.396055][T15653] tipc: Enabled bearer , priority 0 [ 461.433611][T15484] veth0_macvtap: entered promiscuous mode [ 461.458764][T15484] veth1_macvtap: entered promiscuous mode [ 461.475802][T15653] syzkaller0: entered promiscuous mode [ 461.484029][T15653] syzkaller0: entered allmulticast mode [ 461.585906][T15653] tipc: Resetting bearer [ 461.673500][T15484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.703299][T15484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.767087][ T1134] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.851520][ T52] Bluetooth: hci15: command tx timeout [ 461.897866][ T1134] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.911168][ T1134] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.943579][ T1134] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.211752][ T6215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.219727][ T6215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.401579][T15652] tipc: Resetting bearer [ 462.482183][T15652] tipc: Disabling bearer [ 462.658643][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.671681][T15671] netlink: 'syz.9.2521': attribute type 1 has an invalid length. [ 462.682111][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.763265][T15675] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2521'. [ 462.782656][T15674] netlink: 'syz.3.2522': attribute type 10 has an invalid length. [ 462.805558][T15674] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2522'. [ 462.840345][T15675] netlink: 'syz.9.2521': attribute type 10 has an invalid length. [ 462.877570][T15674] dummy0: entered promiscuous mode [ 462.902744][T15675] netlink: 228 bytes leftover after parsing attributes in process `syz.9.2521'. [ 462.924362][T15674] bridge0: port 3(dummy0) entered blocking state [ 462.932410][T15674] bridge0: port 3(dummy0) entered disabled state [ 462.939622][T15674] dummy0: entered allmulticast mode [ 462.962569][T15674] bridge0: port 3(dummy0) entered blocking state [ 462.969293][T15674] bridge0: port 3(dummy0) entered forwarding state [ 463.439168][T15682] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2522'. [ 463.483859][T15679] ip6_vti0 speed is unknown, defaulting to 1000 [ 464.239894][T15679] wg1 speed is unknown, defaulting to 1000 [ 464.244973][T15700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2529'. [ 464.345142][T15700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2529'. [ 464.888537][ T5836] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 464.918721][ T5836] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 464.928222][ T5836] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 464.939699][ T5836] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 464.949334][ T5836] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 465.017463][T15706] ip6_vti0 speed is unknown, defaulting to 1000 [ 465.106518][T15714] syz_tun: entered allmulticast mode [ 465.252922][T15717] netlink: 'syz.9.2533': attribute type 1 has an invalid length. [ 465.341560][T15719] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2533'. [ 465.444847][T15719] netlink: 'syz.9.2533': attribute type 10 has an invalid length. [ 465.482216][T15719] netlink: 228 bytes leftover after parsing attributes in process `syz.9.2533'. [ 465.497375][T15706] wg1 speed is unknown, defaulting to 1000 [ 465.505137][T15714] siw: device registration error -23 [ 465.583349][T15713] syz_tun: left allmulticast mode [ 465.796800][T15724] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2534'. [ 465.833105][T15724] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2534'. [ 466.091385][T15706] chnl_net:caif_netlink_parms(): no params data found [ 466.122283][T15733] syzkaller0: entered promiscuous mode [ 466.135409][T15733] syzkaller0: entered allmulticast mode [ 466.517541][T15706] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.528885][T15706] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.540138][T15706] bridge_slave_0: entered allmulticast mode [ 466.555683][T15706] bridge_slave_0: entered promiscuous mode [ 466.577255][T15740] ip6_vti0 speed is unknown, defaulting to 1000 [ 466.652825][T15706] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.661452][T15706] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.669277][T15706] bridge_slave_1: entered allmulticast mode [ 466.679205][T15706] bridge_slave_1: entered promiscuous mode [ 466.914211][T15706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.953135][T15706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.063967][ T5836] Bluetooth: hci16: command tx timeout [ 467.126802][T15706] team0: Port device team_slave_0 added [ 467.164780][T15749] syzkaller0: entered promiscuous mode [ 467.170342][T15749] syzkaller0: entered allmulticast mode [ 467.192844][T15706] team0: Port device team_slave_1 added [ 467.264100][T15740] wg1 speed is unknown, defaulting to 1000 [ 467.360042][T15706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.376389][T15706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.435983][T15706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.494341][T15706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.511192][T15706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.596421][T15706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.844065][T15706] hsr_slave_0: entered promiscuous mode [ 467.855649][T15706] hsr_slave_1: entered promiscuous mode [ 467.863284][T15706] debugfs: 'hsr0' already exists in 'hsr' [ 467.876309][T15706] Cannot create hsr debugfs directory [ 468.289599][T15706] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.418382][T15706] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.462879][T15751] gtp1: entered promiscuous mode [ 468.468234][T15751] gtp1: entered allmulticast mode [ 468.527658][T15706] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.626857][T15706] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.855249][T15756] netlink: 'syz.0.2544': attribute type 1 has an invalid length. [ 468.932868][T15760] __nla_validate_parse: 1 callbacks suppressed [ 468.932894][T15760] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2544'. [ 469.021542][T15760] netlink: 'syz.0.2544': attribute type 10 has an invalid length. [ 469.029669][T15760] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2544'. [ 469.133229][ T5836] Bluetooth: hci16: command tx timeout [ 469.158278][T15706] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 469.177551][T15706] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 469.190978][T15706] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 469.222602][T15706] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 469.345121][T15772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2547'. [ 469.361585][T15772] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2547'. [ 469.498016][T15706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.575164][T15706] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.593044][ T6214] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.600489][ T6214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.653844][ T6214] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.661223][ T6214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.962965][T15784] netlink: 'syz.0.2551': attribute type 13 has an invalid length. [ 469.989271][ T6222] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.999435][T15784] netlink: 'syz.0.2551': attribute type 13 has an invalid length. [ 470.008666][ T6222] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.045763][ T6222] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.077785][ T6222] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.163263][T15706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.466029][T15794] ip6_vti0: left promiscuous mode [ 470.475406][T15794] sit0: left promiscuous mode [ 470.519447][T15804] netlink: 'syz.0.2556': attribute type 1 has an invalid length. [ 470.642636][T15808] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2556'. [ 470.678439][T15794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.729953][T15806] netlink: 'syz.0.2556': attribute type 10 has an invalid length. [ 470.742441][T15806] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2556'. [ 470.875112][T15794] ipvlan2: left promiscuous mode [ 470.880345][T15794] ipvlan2: left allmulticast mode [ 470.888607][T15794] geneve1: left allmulticast mode [ 470.904034][T15794] gtp1: left promiscuous mode [ 470.910039][T15794] gtp1: left allmulticast mode [ 471.052467][ T6215] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.062318][ T6215] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 471.071812][ T6215] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.085592][ T6215] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 471.108121][ T6215] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.117575][ T6215] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 471.135850][T15801] ip6_vti0 speed is unknown, defaulting to 1000 [ 471.153881][ T6215] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.163349][ T6215] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 471.215135][ T5836] Bluetooth: hci16: command tx timeout [ 471.286961][T15706] veth0_vlan: entered promiscuous mode [ 471.312853][T15706] veth1_vlan: entered promiscuous mode [ 471.419471][T15706] veth0_macvtap: entered promiscuous mode [ 471.448619][T15706] veth1_macvtap: entered promiscuous mode [ 471.506568][T15706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.527954][T15706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.572148][ T1134] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.584629][ T1134] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.613821][ T6213] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.624402][T15801] wg1 speed is unknown, defaulting to 1000 [ 471.632332][ T6213] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.846306][ T6225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.869222][ T6225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.948763][ T6215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.958529][ T6215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.119490][T15827] bond1: option resend_igmp: invalid value (2878) [ 472.129922][T15827] bond1: option resend_igmp: allowed values 0 - 255 [ 472.141566][T15827] bond1 (unregistering): Released all slaves [ 472.255259][T15833] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2564'. [ 472.460166][T15843] netlink: 'syz.0.2568': attribute type 13 has an invalid length. [ 472.481438][T15843] netlink: 'syz.0.2568': attribute type 13 has an invalid length. [ 473.295073][ T5836] Bluetooth: hci16: command tx timeout [ 473.943551][T15872] ip6_vti0 speed is unknown, defaulting to 1000 [ 474.272487][T15872] wg1 speed is unknown, defaulting to 1000 [ 474.784316][ T1134] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.807028][T15889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2579'. [ 474.907308][T15889] bond1: entered promiscuous mode [ 474.913602][T15889] 8021q: adding VLAN 0 to HW filter on device bond1 [ 474.964191][T15892] 8021q: adding VLAN 0 to HW filter on device bond2 [ 474.977817][T15892] bond2: entered promiscuous mode [ 474.986498][T15892] bond1: (slave bond2): Enslaving as an active interface with an up link [ 475.309560][T15903] FAULT_INJECTION: forcing a failure. [ 475.309560][T15903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.324983][T15903] CPU: 0 UID: 0 PID: 15903 Comm: syz.0.2583 Not tainted syzkaller #0 PREEMPT(full) [ 475.325017][T15903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 475.325032][T15903] Call Trace: [ 475.325041][T15903] [ 475.325051][T15903] dump_stack_lvl+0x189/0x250 [ 475.325091][T15903] ? __pfx____ratelimit+0x10/0x10 [ 475.325115][T15903] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.325145][T15903] ? __pfx__printk+0x10/0x10 [ 475.325169][T15903] ? __might_fault+0xb0/0x130 [ 475.325215][T15903] should_fail_ex+0x414/0x560 [ 475.325257][T15903] _copy_from_user+0x2d/0xb0 [ 475.325288][T15903] do_ipv6_setsockopt+0x23e/0x2eb0 [ 475.325326][T15903] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 475.325364][T15903] ? aa_label_sk_perm+0x4cd/0x630 [ 475.325395][T15903] ? get_pid_task+0x20/0x1f0 [ 475.325434][T15903] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 475.325480][T15903] ? vfs_write+0x956/0xb30 [ 475.325516][T15903] ? __pfx___might_resched+0x10/0x10 [ 475.325550][T15903] ? __lock_acquire+0xab9/0xd20 [ 475.325582][T15903] ipv6_setsockopt+0x59/0x170 [ 475.325612][T15903] rawv6_setsockopt+0x23b/0x5b0 [ 475.325643][T15903] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 475.325669][T15903] ? aa_sock_opt_perm+0xff/0x1b0 [ 475.325710][T15903] ? sock_common_setsockopt+0x36/0xc0 [ 475.325746][T15903] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 475.325789][T15903] do_sock_setsockopt+0x17c/0x1b0 [ 475.325828][T15903] __x64_sys_setsockopt+0x13f/0x1b0 [ 475.325861][T15903] do_syscall_64+0xfa/0xfa0 [ 475.325883][T15903] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.325908][T15903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.325930][T15903] ? clear_bhb_loop+0x60/0xb0 [ 475.325958][T15903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.325979][T15903] RIP: 0033:0x7f3eb758f749 [ 475.326000][T15903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.326018][T15903] RSP: 002b:00007f3eb57f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 475.326041][T15903] RAX: ffffffffffffffda RBX: 00007f3eb77e6090 RCX: 00007f3eb758f749 [ 475.326057][T15903] RDX: 0000000000000043 RSI: 0000000000000029 RDI: 0000000000000003 [ 475.326070][T15903] RBP: 00007f3eb57f6090 R08: 00000000000000e8 R09: 0000000000000000 [ 475.326085][T15903] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 475.326099][T15903] R13: 00007f3eb77e6128 R14: 00007f3eb77e6090 R15: 00007ffe59afca78 [ 475.326138][T15903] [ 475.375909][ T5836] Bluetooth: hci16: command tx timeout [ 475.765129][T15907] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.782634][T15907] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.897996][T15907] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.915370][T15907] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.035062][T15907] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.046317][T15907] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.178626][T15907] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.189469][T15907] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.362523][ T6215] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.376263][ T6215] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.397665][ T1134] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.408166][ T1134] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.463556][ T6215] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.496318][ T6215] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.516983][T15925] FAULT_INJECTION: forcing a failure. [ 476.516983][T15925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.523000][ T6215] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.540047][ T6215] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.551313][T15925] CPU: 1 UID: 0 PID: 15925 Comm: syz.7.2593 Not tainted syzkaller #0 PREEMPT(full) [ 476.551345][T15925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 476.551360][T15925] Call Trace: [ 476.551369][T15925] [ 476.551379][T15925] dump_stack_lvl+0x189/0x250 [ 476.551417][T15925] ? __pfx____ratelimit+0x10/0x10 [ 476.551439][T15925] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.551468][T15925] ? __pfx__printk+0x10/0x10 [ 476.551490][T15925] ? __might_fault+0xb0/0x130 [ 476.551535][T15925] should_fail_ex+0x414/0x560 [ 476.551578][T15925] _copy_from_user+0x2d/0xb0 [ 476.551610][T15925] ___sys_recvmsg+0x12e/0x510 [ 476.551647][T15925] ? __pfx____sys_recvmsg+0x10/0x10 [ 476.551709][T15925] ? __might_fault+0xb0/0x130 [ 476.551744][T15925] do_recvmmsg+0x307/0x770 [ 476.551780][T15925] ? __pfx_do_recvmmsg+0x10/0x10 [ 476.551832][T15925] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 476.551880][T15925] __x64_sys_recvmmsg+0x190/0x240 [ 476.551913][T15925] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 476.551947][T15925] ? do_syscall_64+0xbe/0xfa0 [ 476.551974][T15925] do_syscall_64+0xfa/0xfa0 [ 476.551994][T15925] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.552016][T15925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.552038][T15925] ? clear_bhb_loop+0x60/0xb0 [ 476.552066][T15925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.552087][T15925] RIP: 0033:0x7f66b838f749 [ 476.552107][T15925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.552127][T15925] RSP: 002b:00007f66b924e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 476.552150][T15925] RAX: ffffffffffffffda RBX: 00007f66b85e5fa0 RCX: 00007f66b838f749 [ 476.552166][T15925] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000007 [ 476.552180][T15925] RBP: 00007f66b924e090 R08: 0000000000000000 R09: 0000000000000000 [ 476.552193][T15925] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 476.552206][T15925] R13: 00007f66b85e6038 R14: 00007f66b85e5fa0 R15: 00007fffcce5d178 [ 476.552238][T15925] [ 476.857523][T15929] netlink: 'syz.7.2595': attribute type 13 has an invalid length. [ 476.889861][T15931] FAULT_INJECTION: forcing a failure. [ 476.889861][T15931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.912274][T15931] CPU: 0 UID: 0 PID: 15931 Comm: syz.0.2596 Not tainted syzkaller #0 PREEMPT(full) [ 476.912308][T15931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 476.912322][T15931] Call Trace: [ 476.912330][T15931] [ 476.912340][T15931] dump_stack_lvl+0x189/0x250 [ 476.912377][T15931] ? __pfx____ratelimit+0x10/0x10 [ 476.912400][T15931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.912430][T15931] ? __pfx__printk+0x10/0x10 [ 476.912454][T15931] ? __might_fault+0xb0/0x130 [ 476.912499][T15931] should_fail_ex+0x414/0x560 [ 476.912538][T15931] _copy_from_iter+0x1de/0x1790 [ 476.912563][T15931] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 476.912661][T15931] ? kmalloc_reserve+0xbd/0x290 [ 476.912702][T15931] ? __pfx__copy_from_iter+0x10/0x10 [ 476.912723][T15931] ? __alloc_skb+0x2f1/0x430 [ 476.912750][T15931] ? __pfx___alloc_skb+0x10/0x10 [ 476.912776][T15931] ? netlink_sendmsg+0x642/0xb30 [ 476.912800][T15931] ? skb_put+0x11b/0x210 [ 476.912824][T15931] netlink_sendmsg+0x6b2/0xb30 [ 476.912975][T15931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.913009][T15931] ? aa_sock_msg_perm+0xf1/0x1d0 [ 476.913048][T15931] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 476.913072][T15931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.913101][T15931] __sock_sendmsg+0x21c/0x270 [ 476.913142][T15931] ____sys_sendmsg+0x505/0x830 [ 476.913180][T15931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 476.913223][T15931] ? import_iovec+0x74/0xa0 [ 476.913273][T15931] ___sys_sendmsg+0x21f/0x2a0 [ 476.913307][T15931] ? __pfx____sys_sendmsg+0x10/0x10 [ 476.913397][T15931] ? __fget_files+0x2a/0x420 [ 476.913420][T15931] ? __fget_files+0x3a0/0x420 [ 476.913453][T15931] __x64_sys_sendmsg+0x19b/0x260 [ 476.913483][T15931] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 476.913528][T15931] ? __pfx_ksys_write+0x10/0x10 [ 476.913570][T15931] ? do_syscall_64+0xbe/0xfa0 [ 476.913732][T15931] do_syscall_64+0xfa/0xfa0 [ 476.913773][T15931] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.913798][T15931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.913820][T15931] ? clear_bhb_loop+0x60/0xb0 [ 476.913847][T15931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.913869][T15931] RIP: 0033:0x7f3eb758f749 [ 476.913890][T15931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.913909][T15931] RSP: 002b:00007f3eb8349038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 476.913934][T15931] RAX: ffffffffffffffda RBX: 00007f3eb77e5fa0 RCX: 00007f3eb758f749 [ 476.913951][T15931] RDX: 0000000020008000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 476.913966][T15931] RBP: 00007f3eb8349090 R08: 0000000000000000 R09: 0000000000000000 [ 476.913980][T15931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.913994][T15931] R13: 00007f3eb77e6038 R14: 00007f3eb77e5fa0 R15: 00007ffe59afca78 [ 476.914030][T15931] [ 477.312605][T15929] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.320517][T15929] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.466408][T15929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.485635][T15929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.695638][T15932] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2595'. [ 477.710792][ T6213] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.731091][ T6213] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.740039][ T6213] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.785758][T15942] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2599'. [ 477.974762][T15950] nbd: must specify an index to disconnect [ 478.216089][ T52] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 478.225954][ T52] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 478.237519][ T52] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 478.248346][ T52] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 478.262266][ T52] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 478.304411][T15951] ip6_vti0 speed is unknown, defaulting to 1000 [ 478.477448][T15951] wg1 speed is unknown, defaulting to 1000 [ 478.665537][T15951] chnl_net:caif_netlink_parms(): no params data found [ 478.786298][T15951] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.795350][T15951] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.803937][T15951] bridge_slave_0: entered allmulticast mode [ 478.814992][T15951] bridge_slave_0: entered promiscuous mode [ 478.827444][T15951] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.836118][T15951] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.844386][T15951] bridge_slave_1: entered allmulticast mode [ 478.852589][T15951] bridge_slave_1: entered promiscuous mode [ 478.896366][T15951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.910217][T15951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.957634][T15951] team0: Port device team_slave_0 added [ 478.966526][T15951] team0: Port device team_slave_1 added [ 479.004214][T15951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.011962][T15951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.043568][T15951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.058659][T15951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.065907][T15951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.093030][T15951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.159713][T15951] hsr_slave_0: entered promiscuous mode [ 479.167354][T15951] hsr_slave_1: entered promiscuous mode [ 479.174467][T15951] debugfs: 'hsr0' already exists in 'hsr' [ 479.180228][T15951] Cannot create hsr debugfs directory [ 479.362916][T15951] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.455862][T15951] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.557488][T15951] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.637737][T15951] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.806233][T15951] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 479.820079][T15951] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 479.832721][T15951] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 479.845089][T15951] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 479.967148][T15951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.990937][T15951] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.004813][ T6223] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.012155][ T6223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.038041][ T6215] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.045397][ T6215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.101623][T15951] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 480.112889][T15951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 480.299166][T15951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.332255][ T5836] Bluetooth: hci17: command tx timeout [ 480.607874][T15951] veth0_vlan: entered promiscuous mode [ 480.624053][T15951] veth1_vlan: entered promiscuous mode [ 480.662673][T15951] veth0_macvtap: entered promiscuous mode [ 480.676444][T15951] veth1_macvtap: entered promiscuous mode [ 480.702772][T15951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.719549][T15951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.738308][ T6223] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.747569][ T6223] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.758718][ T6223] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.771696][ T6223] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.869532][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.884463][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.934137][ T6213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.942752][ T6213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.411739][ T5836] Bluetooth: hci17: command tx timeout [ 484.491100][ T5836] Bluetooth: hci17: command tx timeout [ 486.571115][ T5836] Bluetooth: hci17: command tx timeout [ 499.211046][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 507.384558][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 514.411827][ T31] INFO: task kworker/u8:36:6228 blocked for more than 143 seconds. [ 514.419809][ T31] Not tainted syzkaller #0 [ 514.426840][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 514.436421][ T31] task:kworker/u8:36 state:D stack:23240 pid:6228 tgid:6228 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 514.448908][ T31] Workqueue: netns cleanup_net [ 514.454232][ T31] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 514.460013][ T31] [ 514.466032][ T31] __schedule+0x1798/0x4cc0 [ 514.470832][ T31] ? __lock_acquire+0xab9/0xd20 [ 514.476686][ T31] ? __lock_acquire+0xab9/0xd20 [ 514.483838][ T31] ? __pfx___schedule+0x10/0x10 [ 514.488763][ T31] ? schedule+0x91/0x360 [ 514.498267][ T31] schedule+0x165/0x360 [ 514.503067][ T31] schedule_preempt_disabled+0x13/0x30 [ 514.508668][ T31] __mutex_lock+0x7e6/0x1350 [ 514.514861][ T31] ? __mutex_lock+0x5bb/0x1350 [ 514.519959][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 514.573419][ T5836] Bluetooth: hci6: command 0x0406 tx timeout [ 514.579738][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 514.630724][ T31] ? kobject_put+0x270/0x480 [ 514.635425][ T31] ? kfree+0x19a/0x6d0 [ 514.640152][ T31] rdma_dev_change_netns+0x39/0x300 [ 514.691231][ T31] rdma_dev_exit_net+0x203/0x340 [ 514.696441][ T31] ? __pfx___might_resched+0x10/0x10 [ 514.710691][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 514.716259][ T31] ? net_generic+0x1e/0x240 [ 514.731036][ T31] ? mutex_is_locked+0x17/0x50 [ 514.735893][ T31] ? rtnl_is_locked+0x15/0x20 [ 514.750631][ T31] ops_undo_list+0x49a/0x990 [ 514.755330][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 514.770589][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 514.780813][ T31] cleanup_net+0x4d8/0x820 [ 514.785322][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 514.801196][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 514.806712][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 514.830608][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 514.836435][ T31] process_scheduled_works+0xae1/0x17b0 [ 514.850662][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 514.857000][ T31] worker_thread+0x8a0/0xda0 [ 514.880886][ T31] kthread+0x711/0x8a0 [ 514.885156][ T31] ? __pfx_worker_thread+0x10/0x10 [ 514.900868][ T31] ? __pfx_kthread+0x10/0x10 [ 514.906009][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 514.930564][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.936008][ T31] ? __pfx_kthread+0x10/0x10 [ 514.960698][ T31] ret_from_fork+0x4bc/0x870 [ 514.965403][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 514.990556][ T31] ? __switch_to_asm+0x39/0x70 [ 514.995415][ T31] ? __switch_to_asm+0x33/0x70 [ 515.000231][ T31] ? __pfx_kthread+0x10/0x10 [ 515.020624][ T31] ret_from_fork_asm+0x1a/0x30 [ 515.025524][ T31] [ 515.031118][ T31] INFO: task syz.1.1923:13286 blocked for more than 143 seconds. [ 515.039694][ T31] Not tainted syzkaller #0 [ 515.045217][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.056022][ T31] task:syz.1.1923 state:D stack:23640 pid:13286 tgid:13282 ppid:5825 task_flags:0x400140 flags:0x00080002 [ 515.077888][ T31] Call Trace: [ 515.081398][ T31] [ 515.084560][ T31] __schedule+0x1798/0x4cc0 [ 515.089209][ T31] ? validate_chain+0x897/0x2140 [ 515.095110][ T31] ? __lock_acquire+0xab9/0xd20 [ 515.100112][ T31] ? __pfx___schedule+0x10/0x10 [ 515.106995][ T31] ? schedule+0x91/0x360 [ 515.112039][ T31] schedule+0x165/0x360 [ 515.116320][ T31] schedule_timeout+0x9a/0x270 [ 515.121405][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 515.127007][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 515.133256][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 515.138502][ T31] ? wait_for_completion+0x267/0x5d0 [ 515.143952][ T31] wait_for_completion+0x2bf/0x5d0 [ 515.149112][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 515.155219][ T31] ? up_write+0x1c4/0x420 [ 515.159753][ T31] ? remove_client_context+0xc0/0x1e0 [ 515.165555][ T31] disable_device+0x1c6/0x320 [ 515.170274][ T31] ? __pfx_disable_device+0x10/0x10 [ 515.180687][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 515.186148][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 515.193765][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 515.199660][ T31] nldev_dellink+0x2d1/0x320 [ 515.205062][ T31] ? __lock_acquire+0xab9/0xd20 [ 515.210000][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 515.216458][ T31] ? apparmor_capable+0x137/0x1b0 [ 515.221808][ T31] ? bpf_lsm_capable+0x9/0x20 [ 515.226539][ T31] ? security_capable+0x7e/0x2e0 [ 515.231870][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 515.237076][ T31] rdma_nl_rcv+0x6ae/0x980 [ 515.241612][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 515.246673][ T31] ? __lock_acquire+0xab9/0xd20 [ 515.251887][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 515.257175][ T31] netlink_unicast+0x82f/0x9e0 [ 515.262155][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 515.267487][ T31] ? plist_check_list+0x30f/0x330 [ 515.272764][ T31] ? netlink_sendmsg+0x642/0xb30 [ 515.282024][ T31] ? skb_put+0x11b/0x210 [ 515.286344][ T31] netlink_sendmsg+0x805/0xb30 [ 515.295795][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.305265][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 515.311281][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 515.316717][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.322487][ T31] __sock_sendmsg+0x21c/0x270 [ 515.327426][ T31] ____sys_sendmsg+0x505/0x830 [ 515.332676][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 515.338056][ T31] ? import_iovec+0x74/0xa0 [ 515.343131][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 515.347873][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 515.353264][ T31] ? __fget_files+0x2a/0x420 [ 515.357923][ T31] ? __fget_files+0x3a0/0x420 [ 515.362859][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 515.367892][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 515.375617][ T31] ? do_syscall_64+0xbe/0xfa0 [ 515.383031][ T31] do_syscall_64+0xfa/0xfa0 [ 515.387867][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 515.393340][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.399557][ T31] ? clear_bhb_loop+0x60/0xb0 [ 515.404627][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.410959][ T31] RIP: 0033:0x7f949d78f749 [ 515.415411][ T31] RSP: 002b:00007f949e615038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.424106][ T31] RAX: ffffffffffffffda RBX: 00007f949d9e6090 RCX: 00007f949d78f749 [ 515.432549][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 515.440750][ T31] RBP: 00007f949d813f91 R08: 0000000000000000 R09: 0000000000000000 [ 515.448969][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.460138][ T31] R13: 00007f949d9e6128 R14: 00007f949d9e6090 R15: 00007ffefa149de8 [ 515.468709][ T31] [ 515.471873][ T31] INFO: task syz.5.1927:13299 blocked for more than 144 seconds. [ 515.530909][ T31] Not tainted syzkaller #0 [ 515.535937][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.547317][ T31] task:syz.5.1927 state:D stack:25656 pid:13299 tgid:13296 ppid:7296 task_flags:0x400140 flags:0x00080003 [ 515.566154][ T31] Call Trace: [ 515.569537][ T31] [ 515.574617][ T31] __schedule+0x1798/0x4cc0 [ 515.579220][ T31] ? __lock_acquire+0xab9/0xd20 [ 515.591824][ T31] ? __lock_acquire+0xab9/0xd20 [ 515.596865][ T31] ? __pfx___schedule+0x10/0x10 [ 515.603799][ T31] ? schedule+0x91/0x360 [ 515.608215][ T31] schedule+0x165/0x360 [ 515.615297][ T31] schedule_preempt_disabled+0x13/0x30 [ 515.625104][ T31] __mutex_lock+0x7e6/0x1350 [ 515.629789][ T31] ? __mutex_lock+0x5bb/0x1350 [ 515.638448][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 515.644669][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 515.649859][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 515.656965][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 515.663708][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 515.669102][ T31] ? _raw_spin_unlock+0x28/0x50 [ 515.677342][ T31] rdma_dev_change_netns+0x39/0x300 [ 515.685035][ T31] rdma_dev_exit_net+0x203/0x340 [ 515.708889][ T31] ? __pfx___might_resched+0x10/0x10 [ 515.715946][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 515.722670][ T31] ? net_generic+0x1e/0x240 [ 515.727235][ T31] ? mutex_is_locked+0x17/0x50 [ 515.732504][ T31] ? rtnl_is_locked+0x15/0x20 [ 515.737246][ T31] ops_undo_list+0x49a/0x990 [ 515.750579][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 515.755783][ T31] ? ops_init+0x469/0x5c0 [ 515.760195][ T31] setup_net+0x2d6/0x320 [ 515.765850][ T31] ? __pfx_setup_net+0x10/0x10 [ 515.771028][ T31] ? copy_net_ns+0x337/0x4e0 [ 515.775942][ T31] ? down_read_killable+0x1d1/0x350 [ 515.781962][ T31] ? preinit_net+0x47d/0x780 [ 515.786614][ T31] copy_net_ns+0x34e/0x4e0 [ 515.795303][ T31] create_new_namespaces+0x3f3/0x720 [ 515.801399][ T31] ? security_capable+0x7e/0x2e0 [ 515.806417][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 515.812413][ T31] ksys_unshare+0x4c8/0x8c0 [ 515.819048][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 515.825026][ T31] __x64_sys_unshare+0x38/0x50 [ 515.829977][ T31] do_syscall_64+0xfa/0xfa0 [ 515.835062][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 515.841278][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.847669][ T31] ? clear_bhb_loop+0x60/0xb0 [ 515.855933][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.862507][ T31] RIP: 0033:0x7fba7cb8f749 [ 515.866997][ T31] RSP: 002b:00007fba7d9f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 515.876236][ T31] RAX: ffffffffffffffda RBX: 00007fba7cde6090 RCX: 00007fba7cb8f749 [ 515.885318][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 515.896103][ T31] RBP: 00007fba7cc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 515.904796][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.913261][ T31] R13: 00007fba7cde6128 R14: 00007fba7cde6090 R15: 00007ffe9230d278 [ 515.921428][ T31] [ 515.924822][ T31] [ 515.924822][ T31] Showing all locks held in the system: [ 515.934531][ T31] 2 locks held by ksoftirqd/0/15: [ 515.939622][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 515.948921][ T31] #0: ffff8880b883a218 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 515.959795][ T31] 1 lock held by khungtaskd/31: [ 515.966524][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 515.977244][ T31] 2 locks held by getty/5584: [ 515.982287][ T31] #0: ffff88814df050a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 515.992413][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 516.006988][ T31] 3 locks held by kworker/u8:24/6213: [ 516.013236][ T31] #0: ffff8880b893a218 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 516.023600][ T31] #1: ffff8880b8924048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 516.033311][ T31] #2: ffff888025898788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 516.043668][ T31] 4 locks held by kworker/u8:36/6228: [ 516.049400][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 516.061131][ T31] #1: ffffc9000b527ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 516.072069][ T31] #2: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 516.081771][ T31] #3: ffff88807d9a4700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 516.093990][ T31] 2 locks held by syz.1.1923/13286: [ 516.101073][ T31] #0: ffffffff99b6b958 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 516.116119][ T31] #1: ffff88807d9a4700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 516.128673][ T31] 2 locks held by syz.5.1927/13299: [ 516.134333][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 516.144283][ T31] #1: ffff88807d9a4700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 516.156011][ T31] 2 locks held by syz.2.2061/13706: [ 516.161538][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 516.171754][ T31] #1: ffff88807d9a4700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 516.183712][ T31] 2 locks held by syz.0.2122/13938: [ 516.189037][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 516.201144][ T31] #1: ffff88807d9a4700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 516.214647][ T31] 2 locks held by syz.3.2196/14222: [ 516.219904][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 516.230835][ T31] #1: ffff88807d9a4700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 516.243155][ T31] 2 locks held by syz.6.2229/14377: [ 516.248490][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 516.258536][ T31] #1: ffff88807d9a4700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 516.270516][ T31] 2 locks held by syz.7.2246/14434: [ 516.275850][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 516.285835][ T31] #1: ffff88807d9a4700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 516.297603][ T31] 2 locks held by syz.8.2265/14512: [ 516.307421][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 516.317546][ T31] #1: ffff88807d9a4700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 516.329682][ T31] 2 locks held by syz.4.2313/14804: [ 516.344097][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 516.355872][ T31] #1: ffff88807d9a4700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 516.367732][ T31] 2 locks held by syz.1.2336/15012: [ 516.373581][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 516.383708][ T31] #1: ffff88807d9a4700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 516.395402][ T31] 2 locks held by syz.5.2367/15117: [ 516.401104][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 516.416073][ T31] #1: ffff88807d9a4700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 516.427755][ T31] 3 locks held by syz-executor/15124: [ 516.433649][ T31] #0: ffff8880573f4dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 516.443727][ T31] #1: ffff8880573f40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 516.453712][ T31] #2: ffffffff8f436808 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 516.463916][ T31] 2 locks held by syz.2.2451/15402: [ 516.469133][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 516.479017][ T31] #1: ffff88807d9a4700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 516.492497][ T31] 2 locks held by syz.6.2473/15679: [ 516.497753][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 516.512032][ T31] #1: ffff88807d9a4700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 516.523479][ T31] 4 locks held by syz-executor/15706: [ 516.528951][ T31] #0: ffff88808c9c4dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 516.539436][ T31] #1: ffff88808c9c40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 516.549337][ T31] #2: ffffffff8f436808 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 516.559915][ T31] #3: ffff888048725338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 516.572169][ T31] 2 locks held by syz.3.2539/15740: [ 516.577427][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 516.587240][ T31] #1: ffff88807d9a4700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 516.599099][ T31] 2 locks held by syz.9.2554/15801: [ 516.604936][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 516.618882][ T31] #1: ffff88807d9a4700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 516.634206][ T31] 3 locks held by syz-executor/15951: [ 516.639645][ T31] #0: ffff88803059cdc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 516.650270][ T31] #1: ffff88803059c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 516.661049][ T31] #2: ffffffff8df43178 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 516.672601][ T31] 2 locks held by dhcpcd/15982: [ 516.677480][ T31] #0: ffff888058f73b88 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 516.687896][ T31] #1: ffffffff8df43178 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 516.699430][ T31] [ 516.702871][ T31] ============================================= [ 516.702871][ T31] [ 516.717007][ T31] NMI backtrace for cpu 1 [ 516.717039][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 516.717064][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 516.717077][ T31] Call Trace: [ 516.717085][ T31] [ 516.717095][ T31] dump_stack_lvl+0x189/0x250 [ 516.717137][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.717169][ T31] ? __pfx__printk+0x10/0x10 [ 516.717205][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 516.717239][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 516.717273][ T31] ? __pfx__printk+0x10/0x10 [ 516.717298][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 516.717335][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 516.717363][ T31] watchdog+0xf60/0xfa0 [ 516.717386][ T31] ? watchdog+0x1e2/0xfa0 [ 516.717408][ T31] kthread+0x711/0x8a0 [ 516.717434][ T31] ? __pfx_watchdog+0x10/0x10 [ 516.717451][ T31] ? __pfx_kthread+0x10/0x10 [ 516.717475][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 516.717503][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.717520][ T31] ? __pfx_kthread+0x10/0x10 [ 516.717543][ T31] ret_from_fork+0x4bc/0x870 [ 516.717565][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 516.717589][ T31] ? __switch_to_asm+0x39/0x70 [ 516.717631][ T31] ? __switch_to_asm+0x33/0x70 [ 516.717644][ T31] ? __pfx_kthread+0x10/0x10 [ 516.717668][ T31] ret_from_fork_asm+0x1a/0x30 [ 516.717697][ T31] [ 516.717704][ T31] Sending NMI from CPU 1 to CPUs 0: [ 516.872312][ C0] NMI backtrace for cpu 0 [ 516.872353][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 516.872374][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 516.872392][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 516.872438][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 f1 20 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 516.872455][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 516.872474][ C0] RAX: 311636b4d910c100 RBX: ffffffff81967b47 RCX: 311636b4d910c100 [ 516.872489][ C0] RDX: 0000000000000001 RSI: ffffffff8d7113f9 RDI: ffffffff8bbf08e0 [ 516.872502][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 516.872520][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7d0470 [ 516.872539][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 516.872557][ C0] FS: 0000000000000000(0000) GS:ffff888126135000(0000) knlGS:0000000000000000 [ 516.872573][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 516.872590][ C0] CR2: 000056502a0f7168 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 516.872608][ C0] Call Trace: [ 516.872616][ C0] [ 516.872624][ C0] default_idle+0x13/0x20 [ 516.872646][ C0] default_idle_call+0x73/0xb0 [ 516.872670][ C0] do_idle+0x1e7/0x510 [ 516.872695][ C0] ? __pfx_do_idle+0x10/0x10 [ 516.872724][ C0] cpu_startup_entry+0x44/0x60 [ 516.872745][ C0] rest_init+0x2de/0x300 [ 516.872771][ C0] start_kernel+0x3ae/0x410 [ 516.872803][ C0] x86_64_start_reservations+0x24/0x30 [ 516.872827][ C0] x86_64_start_kernel+0x143/0x1c0 [ 516.872849][ C0] common_startup_64+0x13e/0x147 [ 516.872885][ C0]