last executing test programs: 2m21.071028201s ago: executing program 32 (id=1623): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="8b38ca0481f4e8113d36d2b17aa78f6627d4af4632669d13f9993be63b8b7aec3954db8da1bda6f7bdbe1debb9ac4875dd874cffeed96e2a9d2900cc27ba8d5b66fe7eb38df8220af34547514cdfde993dd79c9e56de8b2172354fc25aa6bc7d0d5ab5764daa10b54d4ced6d79367923946854263ec46cd4a86f343aff7a4567c9411dbe801bd4ccf9373cd489826206bb595fa2a30393107261e42c49e03c581a37769c44228e78a0a18b75b62a0cd79d", 0xb1) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r5, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={@map=r3, 0xffffffffffffffff, 0x17, 0x1, r4, @void, @value=r4, @void, @void, r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r2, 0x34, 0x0, @val=@tcx={@void, @value=r7, @void, @void, r6}}, 0x1c) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000007c0)={@dev, @local, 0x0}, &(0x7f0000000880)=0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@ifindex=r8, r1, 0xd, 0x2, 0x0, @void, @value=r1, @void, @void, r6}, 0x20) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@o_path={0x0, 0x0, 0xc018}, 0x18) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f00000001c0)={@mcast2={0xff, 0x5}, @ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x0, 0x0, 0x0, 0x100, 0x0, 0x140192}) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x7, 0x400, 0x80000000, {{0x1b, 0x4, 0x3, 0xf, 0x6c, 0x67, 0x0, 0x0, 0x29, 0x0, @remote, @broadcast, {[@noop, @rr={0x7, 0xf, 0x7a, [@loopback, @multicast2, @local]}, @lsrr={0x83, 0xf, 0xb6, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @timestamp_addr={0x44, 0x34, 0x73, 0x1, 0x8, [{@empty, 0x6}, {@rand_addr=0x64010101, 0x8}, {@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@rand_addr=0x64010100, 0x9}]}, @end, @end]}}}}}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a"], 0x34}}, 0x0) r15 = syz_genetlink_get_family_id$batadv(0x0, r12) r16 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYRES32=r14, @ANYRES32, @ANYRES8, @ANYRESHEX=r16, @ANYRES32=r15, @ANYRESOCT=r16, @ANYRES32=0x0, @ANYBLOB="9f92089203f4d121ae4c45a0b2190c88cf5213d6743e858f8af1ee82ef6c6587ff2169da1204af5b077d0dea2adc0a4034d7eedbeeaf9cca4d125e230bb0dc4f6992d59082567785d26f2d9ceced5d2d3a7467ebbd65d8ed850aa50c621b2b5c4cd4a6a4a131026e78f96f02072b14230ab9c2c7faed60"], 0x250}, 0x1, 0x0, 0x0, 0x2004c010}, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x238, 0x10, 0x1, 0x4, 0x25dfdbfe, {{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {@in=@broadcast, 0x0, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1ff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x38}}}, @sa={0xe4, 0x6, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@empty, 0x4e23, 0xb, 0x4e20, 0x0, 0xa, 0x0, 0x20, 0x3c, r11, r16}, {@in=@local, 0x4d3, 0x3c}, @in6=@remote, {0xe, 0x400, 0x4e, 0xfffffffffffff029, 0x10, 0xb, 0x9, 0xa74a}, {0x5, 0x2, 0x2c, 0xcef}, {0x0, 0x3, 0x2}, 0x70bd27, 0x0, 0x2, 0x0, 0xb7, 0x8}}]}, 0x238}}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c"], 0x34c}}, 0x0) 2m14.535507137s ago: executing program 33 (id=1710): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000700)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x9}, 0x1c, &(0x7f00000004c0)}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9af, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000800)=ANY=[], 0x88}}], 0x2, 0x2400c044) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x970b) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f00000001c0)={@val={0x0, 0x17}, @void, @eth={@broadcast, @empty, @val={@void, {0x8100, 0x6, 0x0, 0x5}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0xe4, 0x0, 0x8, 0x84, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @private=0xa010102}}}}}}, 0x2a) r7 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmmsg(r7, &(0x7f0000000480), 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000002040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000002000ffdbdf2501000000140002007767310000000000000000000000fbff24000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c780c2fb542"], 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x80000, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0), 0x10, 0x5}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) 2m5.113019856s ago: executing program 34 (id=1820): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/cgroup\x00') unshare(0x6a040000) r1 = socket(0x8, 0x0, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040), &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)}, {&(0x7f00000012c0)="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", 0x65e}], 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r4], 0x20, 0x6044}, 0x6) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x3, 0x71, 0x20c, 0x1, 0x5, 0x101, 0x1, 0x0, r4}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000480)={r4, 0xef, "809f422e4c95961fd582251468a77aa70134875003c244ec57ea8a82bbb7ccce106b476fe99bb49c81e6e47dcd4b5916b7f597156fcfa87ece7eae9cf892d283236321d90a5ee7233e298705f436957aaf789898f816168d42d1e967c463e936a2bda20f1130ab8fdbac89440b29d27a9d1c677e7fdd39121c32ad23b2339b7f57adb8d73da09a8aba1ce27e3486f975535bdb0a79085c87da2a1b8188251f40a584def037a3accd55d34604e9999ac92dc486ff0f48f02ebc09a61d78126f4f1d6ce190b168e84ab7236ffbf23031db057bcbafd72ab140657a722d8baab6e1a26c7512e4e07f46f1ce190bd5b9eb"}, &(0x7f0000000040)=0xf7) setsockopt$inet_mreq(r2, 0x0, 0x23, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES64=r3, @ANYRES32, @ANYRES32=r0], 0x0) socket(0x27, 0x1, 0x3) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1f, @multicast2=0xe000031f, 0x4, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0x1ff, 0x6, 0x6}, 0x3c) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)=@req3={0xe, 0x56, 0x4, 0x80, 0x3, 0xd7b, 0x76c}, 0x1c) socket(0x26, 0x2, 0x2) close(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x30}}, 0x0) 1m47.880119s ago: executing program 35 (id=1991): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x62040400) unshare(0x44000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) close(0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000030000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x80}, 0x8, 0x10, &(0x7f0000000040)={0x2}, 0x10}, 0x94) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) sendto$inet(r5, 0x0, 0x0, 0x40, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0xffff, 0x380000, @loopback, 0x1e}, 0x1c) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x10814) 1m34.069658851s ago: executing program 8 (id=2254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000202010200000000000000000200000e4e0002802c00018014000300ff0100000000000000000000000000011400040000000000000000000000ffff0a010101"], 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fc0400ff370001000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20}, 0x94) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') unshare(0x6a040000) (async) unshare(0x6a040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000d3836b788f1e7e764d140100010000000000fffbdbdf250200000061e4534911940000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20) socket(0x8, 0x3, 0x0) (async) r4 = socket(0x8, 0x3, 0x0) shutdown(r4, 0x1) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x20, 0x10, 0x9, 0x10, {{0x5, 0x4, 0x1, 0x12, 0x14, 0x67, 0x0, 0x9, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x3b}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x20, 0x10, 0x9, 0x10, {{0x5, 0x4, 0x1, 0x12, 0x14, 0x67, 0x0, 0x9, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x3b}}}}}) recvfrom$rxrpc(r4, &(0x7f0000000340)=""/226, 0xe2, 0x80000041, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aea", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffff60000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040"], 0x294}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aea", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffff60000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040"], 0x294}}, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001e008d2a", @ANYRES64=r0, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYRES32=r3, @ANYBLOB="8901ceca1ad3bc0776ab21a9b5ab7b870184bd291a3697b672e191b16a4d"], 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x40000c0) (async) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001e008d2a", @ANYRES64=r0, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYRES32=r3, @ANYBLOB="8901ceca1ad3bc0776ab21a9b5ab7b870184bd291a3697b672e191b16a4d"], 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x40000c0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc010000190001000000000001000000fe8800000000000000000000000001010000000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="0000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010500ac1414aa000000000000000000000000000000003300000000000000ffffffff0000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003300000000000000fe8000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa000000003300000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000033000000445408c26b14b422000000000000ffff0a010101013500000500"], 0x1bc}, 0x1, 0x0, 0x0, 0x204c891}, 0x0) syz_open_procfs$namespace(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="0300007c6c973a89a80000000000000000000800", @ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000000ff1400050000000800000000970b000000000000001700183a39cf60396f1db3d77efb5ecb6fe3f7694e511a963584bfb0fca66dbafac15ec3267a31c4cd25828ffa7976b27befb28172456eaad4be15c64996700a5806f7dd5cc6fd93e71545a1c00f2fb74398599060903d135ee012c7dc2e428cefe105a50a4a70d137446a31ba037f69989fb0c5d6e777d837378e4e80e33a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 1m32.037990322s ago: executing program 5 (id=2273): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004700)=""/4093, 0xffd}, {&(0x7f0000000840)=""/4078, 0xfee}, {&(0x7f0000003540)=""/4130, 0x1022}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f0000000340)=""/174, 0xae}, {&(0x7f0000000400)=""/193, 0xc1}], 0x7}, 0x102) 1m31.13398055s ago: executing program 5 (id=2276): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}]}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1, 0x0, 0xfdef}}], 0x3, 0x0) 1m31.133481721s ago: executing program 5 (id=2277): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x1000) socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="090000000000000002004e26e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000200000002004e24"], 0x190) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x6, 0x12, r0, 0xfffff000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) (async) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x2000) (async) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x2000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, 0x0, &(0x7f0000000000)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) connect$can_bcm(r3, &(0x7f0000000140), 0x57) sendmsg$can_bcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="05000000020d0000ff01ed0000000006", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000004001000000040000a03a010000aa3abe49d72ce87b3043c7e1303839726fec2c08393986d3aebf45272bb8ce9a19262b82c290bc780b42feac79779d57af00405066beceeb6d20b14c76e46f11"], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) (async) sendmsg$can_bcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="05000000020d0000ff01ed0000000006", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000004001000000040000a03a010000aa3abe49d72ce87b3043c7e1303839726fec2c08393986d3aebf45272bb8ce9a19262b82c290bc780b42feac79779d57af00405066beceeb6d20b14c76e46f11"], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'veth0_to_hsr\x00', 0x10}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)={0x28, r8, 0x301, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x28}}, 0x20000004) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x100, 0x2, 0xadf, 0x0, 0x7, 0x9, 0x10003, 0x7, 0x10000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x8, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0xfff2, 0x2}, {0xa, 0xb}, {0x8, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008004) (async) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x8, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0xfff2, 0x2}, {0xa, 0xb}, {0x8, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008004) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) 1m30.850585501s ago: executing program 5 (id=2280): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfff8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8, 0x20}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m30.69416742s ago: executing program 5 (id=2282): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130720000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x10) 1m30.573800637s ago: executing program 5 (id=2283): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) (async) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000040)={0x2}) (async) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) (async) unshare(0x12000500) 1m26.879799254s ago: executing program 36 (id=2197): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x8}, 0x18) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x46) close(0x4) unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="540100001900010000000000000000001d01000008000500f880000015010400010000800202000031171e44b2b50e8f0400"], 0x154}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, 0x0, 0x32658) read(r7, 0x0, 0x0) 1m24.386402057s ago: executing program 37 (id=2215): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="140000000301010300000000000000"], 0x14}}, 0x20020084) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000005f40)=ANY=[@ANYBLOB="14000000150a0103000000000000000004"], 0x14}, 0x1, 0x0, 0x0, 0x400c054}, 0x44004080) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x2a}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x8000) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r10, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @empty, 0x80ad}, 0x1c) r11 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r11, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) ioctl$sock_proto_private(r11, 0x89e0, &(0x7f0000001080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095", @ANYRES8=r11, @ANYRESDEC=r5, @ANYRES16=r2, @ANYRES64=r4, @ANYRES32=r8], &(0x7f0000000140)='GPL\x00', 0x1ff, 0x0, 0x0, 0x41000}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) 1m19.026440409s ago: executing program 38 (id=2254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000202010200000000000000000200000e4e0002802c00018014000300ff0100000000000000000000000000011400040000000000000000000000ffff0a010101"], 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x13, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fc0400ff370001000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20}, 0x94) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') unshare(0x6a040000) (async) unshare(0x6a040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000d3836b788f1e7e764d140100010000000000fffbdbdf250200000061e4534911940000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20) socket(0x8, 0x3, 0x0) (async) r4 = socket(0x8, 0x3, 0x0) shutdown(r4, 0x1) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x20, 0x10, 0x9, 0x10, {{0x5, 0x4, 0x1, 0x12, 0x14, 0x67, 0x0, 0x9, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x3b}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x20, 0x10, 0x9, 0x10, {{0x5, 0x4, 0x1, 0x12, 0x14, 0x67, 0x0, 0x9, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x3b}}}}}) recvfrom$rxrpc(r4, &(0x7f0000000340)=""/226, 0xe2, 0x80000041, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aea", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffff60000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040"], 0x294}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aea", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffff60000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040"], 0x294}}, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001e008d2a", @ANYRES64=r0, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYRES32=r3, @ANYBLOB="8901ceca1ad3bc0776ab21a9b5ab7b870184bd291a3697b672e191b16a4d"], 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x40000c0) (async) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001e008d2a", @ANYRES64=r0, @ANYRESHEX=r5, @ANYRESDEC=0x0, @ANYRES32=r3, @ANYBLOB="8901ceca1ad3bc0776ab21a9b5ab7b870184bd291a3697b672e191b16a4d"], 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x40000c0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc010000190001000000000001000000fe8800000000000000000000000001010000000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="0000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010500ac1414aa000000000000000000000000000000003300000000000000ffffffff0000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003300000000000000fe8000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa000000003300000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000033000000445408c26b14b422000000000000ffff0a010101013500000500"], 0x1bc}, 0x1, 0x0, 0x0, 0x204c891}, 0x0) syz_open_procfs$namespace(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="0300007c6c973a89a80000000000000000000800", @ANYBLOB="f26333609e5cd94dac1f8a0963d63a3bb8b30ad10efa45f6b15a601a68bdd5f74b43444675dec59adf5164f21b90a543b460da183da8ad532625a034c3ce6d077dc4e711708fbcc8dbbc857a0435a43d902341e2e1ceab253010e68c156fceeab85b363b4cf455319dd7c0e7e43fc024815034fc353e97a8f00ce5955a36ffeda074bfc4e1f973cca71c47a4c77034704b288539551a40b816379edc40b4997eeef151a9c957395d8f2243ce31036b08944900c5ddde8d43134b1731ce8d29e365d3e788eb02f14b41c815e292907fb8208a7aabbf6893694dd66405279990fe8726ece3e9f198b7dcd86c88fed14944cc691b07a39385520b490ab9c26b5e7c46fc7ce864ff3fc6b83c84ab3506942bece21b1c6631d2297d149c7e870697befb2701cfb92d1833ed10fc9910419c9b677720fedbef1b524835f7e1a5b4407331eb6eb558ad84f4a34b41a017afa4dde3d2737b0e75cc452bc2a4f768948347fd847ae2b0f2d254f851d2f399dffdeb1110015c58f9ce51e11a01bfb71fa61341a2849fcf36d86de228ee74fed2801db90c8b27bb4d39ef9fedf351c7ec9658f121163adca666bbac1334b1a4c4bf8277f11a8f48d78dd79f0fbc66ff1895151ba94088922f745aed618c4055c76cb8ff96de9e3192f0d355fc21f4615d4d73d0023265dd09d50a379c3b3627e63fb932ba8ee2b5509b644499e811fed50d46535f10f2f80368a7365d43e33d85f51c1b62ca555cf45b6094fd462f5bf6ad67c5ceb4d7ba2c7d55c6f9238d62bbf5fc327c3390879bd83fc9248471c2f3d46183bf3adb078900e3bf6b1ba6130d68377901641318d9e28b1304143a53c3559740173312d7e7c27865b5cb08cea3d03cfa085589dcf6e884ae586b3bb16fd7482f5656763b1d94aea3460c1d505c635b731bbbc1487c89ff93835cb2436bd9fee1a11efcb6781514ac2568f8876c2a277c3204f70988cb97cb929f4a2073ae78ddae2d66849d092aaf60f7a1a6bf3c16654fa575c72ad86566d2f6e67654b50d2cbf5abf97a45e97f09ca0e96595cd999c553c887f1dc2eb41d6797cebc0642dab84645739efae2b8688681a1469dda18f5424eed186477bf34d8f117166695bef03ebb6584e409d29a9e0d9bfdbafcdf23f7a73404e95ca2b2aff4a27f2ba7c221f5f1c822053b41736ad83420c37a1ca9ec6de6f8cdb0c2cca24de127189af34f6e9c812579f9bc797b04a41e8ee42795c339a43a910408d0134530e6562cc63fbd70fb6f529d694abf27c7c4e0b3fbf50543266576fdce39a27b1d191cf9547e2d1136ecd702d4ad5237461e849bdd0551c2d7182be41d7501dd08d0ab328acf715b5eadbdcc3e89e86392a1d5ebf88df0a856052efeb44b120aec14dd37db9e9ef75ac9f97bb8d5547f5b9f7726e19b8e6160cd194fe85e4ee68d6fceebfbbb390192ee6d96fff76871e40aa43dc1fc513ac2fc7c74d3b42ef6732a97ff84acfdcb61d46e034dd7f8ee4d8de1f69f1cea21c484821959a4a9e41360d4e7fd025a4587d1659cd676761263166acec37b001156d1d84984e0047ac5850538b00db91bfe2d734126a6fad6264088ea512fe4b46bd6eb834980dc60c41ee4fb3112e34eec6c0fed739b08f960e04619548968c5fab8f34f3fb191cb57051af8efefa2c5bbc673a2f47fe413abf3ac84996abf5eaec515883325f107737b77f8ad40367f31434fa23f7a358eb745d47ae300280f1abd35f8b1c53d938a802658e15df5545a3f400923150cf700b24a9469974ab38f1369f2b3eea078a6193f5531038b59d8e22e54023eddd76d400246bf2bfaa99a1fa7da5019ec1a891ef23218a4d2c984939f176ae32e396276ec0e548f045a3e0f5ab4706d36605398deb4b284b8d39c1a6df12323a3403d704a7ead50cad247540029aa3e1e34ce7969457719b083b051b490a21b61a5c1636f1e2df25c9634529522760f9801fc9cd637ea8fdb4a394fd0ce1dd79e786e7f0bb41f38ba2743d5c8b2a0239fbb689c88183b4a8b30e7ffe444c2aa89c5fc1a7f2792dc4d89be8977367f96cdc54ac49e9fc3f807408418cec1f1be3a9515f26f9f9e6089dab9c257488252bf66750d729aaa9081236e7d5a9f4360ed05686b34125de6a12bc9c13d1e42d5802a001dbb9f0296b881a056263e901625f6973aa50c6a92c6527204c63bc9140be6a808829d162077495757ebe654388d8ebc6efaeac0095d38dea38243628cee1a5e4faec79cf3765f14378b1399d4dc91ffcacfc05040f619a0a55a564f720a20a00c6c3629e6526dc0a4faf01112bff23f72a72b41c85473802cc68844d101e4c05952e3cb2bbdce7a9265d30a7eede59fde836544c4a1afdebb693a62c7bba1d94366f8b6797e41f8a9629f39163602c1c35b5b934b6be202c0396924c7254f4af1433f255be84ba721caaddd7a7ce405c3aeefcfb8ac63177f9c0852de2f0eb3fafd90a271af7646c9afdae38b4c2056cb16c72403667bdc61bc9a40d53c341a735423f200ac6ce23d74318e36e93c1dbc924509c1f55746b5ee6964911d99620f23425ca101f7a5b1b705a60e92b33c8c83659d3e2f92068d409dab91dc181ed2c7ec48c56db7681ebca5686f73eedc98d4186ee7a705727e2a4ef24a5d82ab2f2ff0c3dbaacf0bdf096c852d496770b2431b52249ffc7d788f4b19fd2d390121a4cfd01491d9171f44316b731a746bbc67b772df85fbcdd556e63030ef317e7e8345ea0d984dba3cbc9c5e1607f92223b21449815bc5a608d30cdd474b047c2b18c27543cf1c33b750eb74966ce6a2aa1f712181f21cae3c5440ad657c6970ebfb897f9af2e5b2f83db9efe1468d7dbfbf0cd96c98f34c0f7c5ffe7336a4bceee35201af344e6bb0b67f34daab385e899af6f04f8a5ae65973e3c85bfc23f0ac5c664d010279601587d017af36338bd19ec1a2d68bcbba0d0a3958656517b0af272e061e519e0f512c940e98a7347352e525c2f9e12788a53cff7af899840c8837e6bf1769575ba8bcca651830e4bd403b9a938a3e1cc3d20ad2708113f17ff34f693bd96de744695ed383978be9a80c1c74c93d4d608c9962a6be598d68b40a73f4baf93eaa2358e8e0cb1cc2defc4e3ed386d02738f314830c1e5846a7f58e69ebfaabef2c7a90f8e42f9d398a7723565a9ac9c74f48fa3fa5bc867b2d40059ddaacef406cbf040f5ebf8b4b1c47f441404e213ac1a12c22a0719b932fc0d4b8758657ae91acaeaeb56634760878184a769d6d81471ea529db366a19e629a1c8c042e88b318cb0f7515e453001f7af9c1c1ef97429f90c2ddaae36adea3e79723143524cd28569d7edb4a485cbd2d7664b316c8a3dffcbeb6d694adcb1a7d776e7266f66c364fcd6cb266424b7409edd31a8a46eb00d3a02215b72a1a2e3e082883ba571d3de7ad7b0d11344407df368ec975b6b646494f6fa655faf9acc6fe8653a26e4b58f494edb16323859f18822d2dc61fea1285da7eb2b189f7e0e2c3f02bf21af33180c81183967cfb76a4899cc008aa86c94f9dc02e15cd63abc2be3367f3ca2de6e8d2bab18c6fad6e9a7bd00ba22eb1e3205fa4f9faebcc98acb3a3b5de67ef50e5db870b67994b55382e901f6d21d449a7fbb8bfcb138f23390eabfba6c89b4fe6f80ae61a350cc904912ea4244f5297dd0f1a4b6dabeb0ede3391ba701df372226b60dcbf4c41b99ed864badec5598d201b9d660fb5932aac62967fa75baf5fea64b203804732b3b42ce6726b0ca5d2cd8e0af17229825639cf51a42bb1ddec5851a29c081b63d7482a2356ec7613bd0d8b43026462b04ef95217f0af8e97ac5812905930c8422edb185ab6f1b4e7d5abc48c9c3afc634e2297ed1fa45b94a49e5180cf36c0d4cbe49c6d29ced4e730512eef1a94d594fbaa9b1c5957e61ecc5e3cd6faa6d367e46d890ac73bc9d2f77d123da04a63faee15dac77f9e8dd0e672af6b56c628db907c9aec11b852f62099169c6d8fd219a43bd6ee3ade5fe97e59353db19263ba02599eb758981bbc2bf3e053d34ecd090c23e23bfd982a1a43d8d3fb12001f6f6a53f33873ce1d3705354c737a95f2494f052531c934c7df23780b7100ae703c15ae53cc6d58bbcc99b2881819a51faaccd0413114fb1f2470e242a4ef447348fd4ffa91403b6e516eaf36fc8607e6be4b6e6c3e597bb99e695b8b668d4ac020ddc45e052db9536e946b0fe92406fbe3bfa6498bc1ac5dea36a31877f3df85706d3bf6b177668f5b6845c06738fa50ef13d40d1f2781eb11cfdecd3b004ed8dd7432396592100e2d681ccee32bf59f802de2f4dcad368622c68c6ac3a1c4cf02137143088d9e889f55c1f0621de0bd09be546cc5df2bab8376e8aa9933ea8b49be2dd797f6e56528381c1a63537ef60f7cc18d05ab22c601a4fdae92e043fc3ba488f4edde2b490e3ba37dccf5fdcdb81c1ef7a816dabd6e1de0bc58db13e147817e95459eea0911871e30ca3c143e9376235a4f7235f40ab391bc6f324eb1e9ae5efee555644eb60280fc8e129a30822730e0b5015e2ee073da0f13bbd249a05c24d2261d1ed447bf84f9f27642deeacc405bddac8968b259f81e13696c39af98ec8dbcf6ce512fb8c5ae09e91c61dba93d8d9add29447cb4b9e75d6f535e27373df8630c9d94a91e5a21cfa063ff26d7c649291421a8ba867aac2713f338ce5b463daace611d5cce8a1807fe9d281e25aa5f62ade8332d3da741bf98deb489ed5ac19593b313dbd5a4d8c52d087e86f4594a31eedc03318675f2140a26e5da7d06cc544175f4bd7fb63b4edc433deb517f4f748b6bfc3081ea0fd3921ed95e34b60b086168d1dd07347d2ae7ae2d8582586cd024fdd4876bbd5ce25da0cf40ed14dab2e78df11ffd94e590beff58be0d909afc7e807f928ed57c0e8f32099ad61b6854831f963315c04e8aa8ad1b98a582559c5be5fef8bfcaf6f9a0e67ff3991f0cc93567550164e21037b98916067fd91ea2b815f2c111fa6a9d4e5d655e2ba4ceced64b7ab22bebb66d645611aa96a37c51dfc53cfd05aac1ae1a6084dceb35cb77e268903c259663d12e0fd7f775a5d1ff562b4c5400e6010be6830d955a1b5cd7c83c449b72fe0e79bae8cdc75efa7ae8177fc5e2baa3e0d91405e5f2b92dbedd42fc096c4e55581d0aaaa713bd71e3798bc897bb49ea7adc12ac46515c9488dd13140b52f1714c2db3502797b3a17cea340cec48c6b2cdb01572f7ebb35aef62b589260ca38521af6054b04c027a1a86d5ad8f961cab26c6d3ba3bfd46017d7827c88fbb360ba2720c5cea25b9cdc37f2f408db414d218299d8af59d173bc7f48664f68517f095330ede7af516f46e7eff2a720893215143856a73c5647ebe730606cbf5420e887d377ee08c8f0c5ad02c042cee8d3bfe7140adf76dce69ca9970b40cfb82fe9c37f1f84b511c471377004a1aea3543a9cd3e68be6fe40262c8cda75b041aaeefeb28475fb7d3e7b639000db9f9555a5c7ecc18100405565e8686ab29e43ddb72803c132cbcb80256d3feeab790e6fb7c6c114278035afa1bb1dba825654562f1787a3aca6bfcbbf735c5464249f93231e50b68d914f17437109e47e8c1ed9e77fbb993f9eb44fd8cde3fb9bbac82959a2bd6462f2d52cecf5cfbc96a0f4c58f9020911a58c7c967509e423f810a545df3490e6bb1edcc5d525e8001e95e892fd00d7cb1077f5840becf15bec624374d2f3d4dd1e670af1a6560cf1496f9d79b11043de298056fe7a3df4", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0000000000ff1400050000000800000000970b000000000000001700183a39cf60396f1db3d77efb5ecb6fe3f7694e511a963584bfb0fca66dbafac15ec3267a31c4cd25828ffa7976b27befb28172456eaad4be15c64996700a5806f7dd5cc6fd93e71545a1c00f2fb74398599060903d135ee012c7dc2e428cefe105a50a4a70d137446a31ba037f69989fb0c5d6e777d837378e4e80e33a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 1m18.916394272s ago: executing program 3 (id=2339): setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), 0x4a) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000000c0)=0x1000000e, 0x4) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x9}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000140)=0x4) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) (async) socket(0x1, 0x5, 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'hsr0\x00'}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r7], 0x20}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10020}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 1m17.553721193s ago: executing program 3 (id=2346): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x5d6, 0x0, 0x40000}, 0x8000) 1m17.27769851s ago: executing program 3 (id=2349): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00'], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004700)=""/4093, 0xffd}, {&(0x7f0000000840)=""/4078, 0xfee}, {&(0x7f0000003540)=""/4130, 0x1022}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f0000000340)=""/174, 0xae}, {&(0x7f0000000400)=""/193, 0xc1}], 0x7}, 0x102) 1m16.4236337s ago: executing program 3 (id=2354): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x2a, &(0x7f0000000200)}, 0x10) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x325) r5 = socket$inet_sctp(0x2, 0x0, 0x84) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0xb4, 0x754d, 0x4, 0xc, 0xf, r8}, 0x20) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f00000001c0)={r8, 0xdd, "0e17b45eb7c7cda099c96d4f93e8bdb2d1a253448559e2bbcdb74293a70433f2ed8d490f58f54a34e1f33e837549c2c56554aa13034cbb219686c5ce78890db8d8ac465ee5433089108116960a0d0c3f74590415adfa4a1a2f7f66cb27f0ec778276c90e83e0c49bbcc56cb5e77736fa314b61ddd32e7cfaef91138263dff935e55ec6369e113c685ebf62a256444ab03620782657e356b1a37edbdc6b6067e5b9a6e9c5e3c60ec99ec524e1af6dc47923dacbacf3c8f8dc6af1876a44fa2768a1b1142d490cc86d228ee446ddd96c9c79e2e64bc9265e47c28f89e942"}, &(0x7f00000000c0)=0xe5) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000080)={0x0, 'team_slave_0\x00', {0x1}, 0xcf48}) unshare(0x2c020400) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0xfffffffffffffffb, 0x8, 0x80000006, 0x5}, 0x0, 0x0, 0x0, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) 1m15.430857373s ago: executing program 39 (id=2283): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) (async) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000040)={0x2}) (async) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) (async) unshare(0x12000500) 1m11.905006661s ago: executing program 3 (id=2375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c00000003"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0) 1m11.804715151s ago: executing program 3 (id=2376): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x7}, 0x1c) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x80ff) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r2, 0x1) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_type(r3, &(0x7f0000000080), 0x2, 0x0) connect$bt_rfcomm(r2, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa) close(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x2}]}, {0x0, [0x2e, 0x5f, 0x5f]}}, &(0x7f0000000280)=""/47, 0x29, 0x2f, 0x1, 0xffffffff}, 0x28) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) 1m0.278151473s ago: executing program 2 (id=2493): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0xef, 0x2, 0x0, 0x1, 0x2}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000180), &(0x7f0000000200)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x6b}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4854}, 0x20004000) r4 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000400)={'vxcan1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711811000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m0.075878653s ago: executing program 2 (id=2498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000004180)={0x0, 0x0, &(0x7f0000004140)={&(0x7f0000004100)=ANY=[@ANYBLOB="180000002500050326bd7008fedbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r5, 0x5421, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x19, 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0x4) recvmsg$unix(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x102) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000fe00000000e00000020000000000000000000000000000000000000000000000000000000000000000fffd00000a"], 0xb8}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="08007715e050e9ce", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000070b"], 0x40}, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) 59.910810848s ago: executing program 2 (id=2501): socket$nl_route(0x10, 0x3, 0x0) 59.734709183s ago: executing program 2 (id=2504): socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000314010026bd7000ffcbdf250900020073797a1b0000000008004100736977001400330077673100"/56], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES16=r3], 0x7c}}, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)={0x12bc, 0x16, 0x400, 0x3, 0x8, {0xa}, [@nested={0x12a5, 0xbb, 0x0, 0x1, [@nested={0x16d, 0xbd, 0x0, 0x1, [@nested={0x4, 0x8f}, @typed={0x14, 0x69, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x4, 0x147}, @typed={0x8, 0x9e, 0x0, 0x0, @uid}, @typed={0x8, 0xd8, 0x0, 0x0, @ipv4=@empty}, @generic="93fa1c3f22b8be3402674b0b28f076bc7fde1d44fd0fc354628eb6edb8a53dce11cecc1df685ffed38c1bf399ab61c90d6aedeff6f1692bad325046e30edf001b21af0717dfb9a7f452e7c756b2dbdfcb82af4cfde9bbe2f9e9cc0d7fa9b0ac671fb6793d6ba36bf38ac2677fa2e1d272066881fb3baf973c023b5cbfa1ff3400e5a47bc63e4805592fd77a0d57c2bafcdc18cfa141af27407e15ca13799cbcb5e8552f86f6ba612ef57813fdf916bdf23e4a20e8a4d22d606103d29fff58013a591bece28ff50a2db54f55951a2d3ddc5b829497ef5b89ae93f01b9b59b6c3522b238ccb1274118ac83a8939a3b7070bf1716", @typed={0x4, 0xfe}, @typed={0x8, 0x36, 0x0, 0x0, @u32=0x5}, @generic="085387b48ae690f2edf63ce3bce305357697f03301c72b7e8827ede1e42e18eec565ed2eab6a00fdff0b54187e4c82c5949444f797bc8ce0744fe3d73e02"]}, @typed={0x8, 0x107, 0x0, 0x0, @fd=r3}, @nested={0x14, 0x8c, 0x0, 0x1, [@typed={0x8, 0x9b, 0x0, 0x0, @fd=r2}, @typed={0x8, 0xce, 0x0, 0x0, @ipv4=@private=0xa010102}]}, @generic="ed561f3a280691a6dcbe8ba765d88d2239f3b119045d89e0e74fcf3732e553379205c99b4e36c88b6a15e132e9aa12da92745a56ea2f7ef0971b98bdbfec709f797023e8989f85602454ce5f62dbfb047628e91f0d307aabd299ff4064be0fc3f9a520f6bde997e03a1e2e94ea773b0bd5c5248594b0ae6d58e011600667e5dbc15ef731807ad7200ac6d01b8c3bb307f1d047c496ae8294032255c72cd394e06f51af58783f6ddf396b78465a4b6f81a7e06c9030ce158f8b90ce79b6f8b7845510b5ee74d76b381ea65352967937e894754a9b4083c639d3780e6c04d9205ab88c", @typed={0x8, 0x108, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="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", @typed={0x8, 0xc9, 0x0, 0x0, @pid}, @typed={0xc, 0xd6, 0x0, 0x0, @u64=0x10}, @generic="77af3c88572759", @nested={0x10, 0x1a, 0x0, 0x1, [@typed={0xc, 0xd1, 0x0, 0x0, @u64=0x1}]}]}]}, 0x12bc}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb8}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) unshare(0x2020600) ppoll(&(0x7f0000000640)=[{r5, 0x8009}], 0x1, &(0x7f0000000700)={0x0, 0x989680}, 0x0, 0x0) socket(0x10, 0x3, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'veth0_to_team\x00', 0x2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000100), &(0x7f0000000180)='%pS \x00'}, 0x20) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e23, 0xa, 0x4e23, 0x0, 0x2, 0xa0, 0x0, 0x3b, r8, 0xffffffffffffffff}, {0x5, 0x5, 0x4, 0x5, 0xcc, 0x1, 0x4, 0x1}, {0x0, 0x8, 0x66296995, 0x9}, 0x3, 0x6e6bb7, 0x1, 0x1, 0x2, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d5, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xe}, 0x3501, 0x0, 0x0, 0x7, 0x7, 0x9, 0x1}}, 0xe8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) 58.840540794s ago: executing program 2 (id=2517): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000500)}, 0x10) write(r0, &(0x7f0000000040)="07000000010001", 0x7) 58.770312091s ago: executing program 2 (id=2519): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x4ca80, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x1c, 0x48, 0xb, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x78, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) readv(r9, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f00000002c0)=0x5) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0xb, 0xf}, [@INET_DIAG_REQ_BYTECODE={0x69, 0x1, "ecc67075cf95c9489390680a92bd08aad8d4db3570ae7b6f28b76a3ae2bd127709a3120f789c977b5fdf6d845f664bdd88fb06d64fa8fef7bb2a09d593fd2fb9c56763981db8bd656d217005b39671c6c642b88bdf3286e274ceb51a2fae6979685284b1a3"}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r10, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2008040}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0xd, 0x4000040, &(0x7f00000001c0)={0x11, 0x81e7, r7, 0x1, 0xdb, 0x6, @broadcast}, 0x14) 56.708377034s ago: executing program 40 (id=2376): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x7}, 0x1c) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x80ff) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r2, 0x1) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_type(r3, &(0x7f0000000080), 0x2, 0x0) connect$bt_rfcomm(r2, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa) close(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x2}]}, {0x0, [0x2e, 0x5f, 0x5f]}}, &(0x7f0000000280)=""/47, 0x29, 0x2f, 0x1, 0xffffffff}, 0x28) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) 44.648080636s ago: executing program 9 (id=2640): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='neigh_create\x00'}, 0x18) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000008c0)={r6, &(0x7f0000000300), 0x0}, 0x20) sendfile(r3, r2, 0x0, 0xf2) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002200010600000000a1dd3f6e0c000024"], 0x1c}], 0x1}, 0x0) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000001540)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x14}, {}, {0x4}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x24}}}, &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x54, 0x66, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0x1}, {0x3, 0xf}}, [{0x8, 0xb, 0x67}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x93}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0xfff}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x44040) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x10, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e23, 0x18, 0x0, @wg=@data={0x4, 0x101, 0x430a}}}}}}, 0x0) 44.481507769s ago: executing program 9 (id=2642): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000010000000000000000850000002800d0ff180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001010000850000009b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff001}, 0x94) 44.325637862s ago: executing program 9 (id=2643): r0 = socket(0x40000000015, 0x5, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x18, r0}, 0x18) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x7, 0x10}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%pK \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x2, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0xe}], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x3, 0xc, 0xff, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[r2, r3, r4, r0], &(0x7f0000000400)=[{0x4, 0x3, 0x7, 0x6}, {0x1, 0x5, 0x5, 0x6}, {0x2, 0x2, 0xa, 0x2}, {0x1, 0x4, 0xd, 0xa}], 0x10, 0x44}, 0x94) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1a030}}, 0x0) 44.090155681s ago: executing program 9 (id=2645): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/86, 0x56}, 0x9}], 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x5c}}, 0x0) 43.677248805s ago: executing program 41 (id=2519): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x4ca80, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x1c, 0x48, 0xb, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x78, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) readv(r9, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r6, 0x40089413, &(0x7f00000002c0)=0x5) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0xb, 0xf}, [@INET_DIAG_REQ_BYTECODE={0x69, 0x1, "ecc67075cf95c9489390680a92bd08aad8d4db3570ae7b6f28b76a3ae2bd127709a3120f789c977b5fdf6d845f664bdd88fb06d64fa8fef7bb2a09d593fd2fb9c56763981db8bd656d217005b39671c6c642b88bdf3286e274ceb51a2fae6979685284b1a3"}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r10, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2008040}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0xd, 0x4000040, &(0x7f00000001c0)={0x11, 0x81e7, r7, 0x1, 0xdb, 0x6, @broadcast}, 0x14) 43.574012213s ago: executing program 9 (id=2652): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000004c0), 0x1000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x28}, [@ldst={0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x10}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 43.316021213s ago: executing program 9 (id=2655): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x62040400) unshare(0x44000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) close(0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}, 0x1, 0x3000}, 0x0) sendto$inet(r5, 0x0, 0x0, 0x40, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0xffff, 0x380000, @loopback, 0x1e}, 0x1c) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x10814) 43.1497523s ago: executing program 1 (id=2656): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a4014"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES64=r0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}}, 0x48002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x500, 0xf8, 0x3d0, 0x1c8, 0x3d0, 0x300, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0xff, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x1, 0x6}, {0x0, 0x3, 0x1}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0, 0x48000000}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="50020000", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b800800"], 0x250}}, 0x4c000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtaction={0x14, 0x30, 0x400, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c", 0x6}, {&(0x7f00000001c0)='f', 0x1}], 0x2}], 0x1, 0x0) 42.897318491s ago: executing program 1 (id=2657): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$FIONCLEX(r0, 0x5450) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000004c0)={r2, 0x0, 0x0, 0x4}, 0x20) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000240)={0x0, 0x0, "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", "88882c229a2d8bdc30c2d923b93899d799fd61da1b131fca74b5eb202246b122b6c2bda751331c82b851a5544c088c1827f7cbb82dce7f546cd66fb6f69683a96829a5a4eb0bfc45b9bf5ec2d5170a2d6120295a5693d175d0564ac2eeddc9690bf634ef17d456ac1906263ab3986aed6c4656689cfaafa7b875963a8ef79795ca2bdcae95ca359866618a5b1a50d67c04d9b17ffd417abc05e4df891e5afed66b8822045bf4aabd0cc0fd45b69c67183833982df4c76d6f6ed0f304a2374435a7a9f4ce14ca4a487ddbde02fa071f653d8ffe74ed8b0fe91230561a259cc35506356282be3441a626001c926f632db9fffc37ad156a6fcb6511a1e06b68f57c7799242fb147035f0048686c84c5a3f676e1f76a9d19a2a71a1b9006d1b6af745e498c75434a3e8aa241a01c381bd762a3cd022518d8ace865c54507d26ab0fb069d3aa48845ccb7962225ff651129a470d51afbb8d2cf1381c956d41ad7c9092d023ccfd5ce245f179474746812f6d716516edadbdac5657d30873410730589371d41fb17b104da4235d7917e87ce3a5f37d81fce67860109a378d84f287ee1d32f9b8e5519d3a5200a5925a11d9ddbaa3dcaa635f544ad3b9e2413c4a9f3b6a4e65fbe7e28e8f26ce0b8268d21626c112b5130564f6f9b77606999a7794f4a69b2d274b7c42bcdf8e6782d6e8a3f75414b39a96b03369713b56163058d559efc02174bd9f16012d87fa8b2f6bf3cd855e6ed18c087d617559290c964b588baa6373569ef91ab93c2be89fd0df6910af3804f4267a9281fc69af3e552bae8b9cf5d0d0741eb792bae9e3241850dbb9fca145df27c3fc1666bfe82455bfecfb12d9df8b52843af00d55aec0f0db4af63078edc57e3f498991503b497bb1a34ac99d4f8bf0ef75c7eb72384d43c9c8b2c8102d56eca970571b1b1ecce280231366405dcc42acbad3fc168664eef5a56df02fc8af122278fa3fb6bcd47026a87a9d1df2ce27a8ca25eb362d8d8ab2e9760fdfa4efcb92dd0a068021b471d24b72c97eddae6fb8ce8d5fd01bb83ea7df653231b32d0b6318030b1d76f96886d61aafe634f949d15c1425711fa17ff6da68dd1952f0b124660cee2cb834ae93af4e38149b502e30bcf54f234948ad0841ac649a4ab22f4fe7bbdc318d9af9ad04c984056030e76a84f4f1fe32c62497f73e7b5060b2271b0b7de3d4f7e9da97a8a3238ef440f3a7f9ec2aed46b070bfef54692250796cecaebc91b6661bec6bc280dad930420a2227e3adab51fedb3937cd87a9bf91197badfc243fc2a563eed9792cabba75db4974e9c93d7b052df51a6a10c7f009496fade2e08183c8025b96383e13ecc5fbf4787a63770df355af8429dfb3fb908bd3ff11f8e3b97e84bb1b8ce7d3ef666aebd0813d63f9499ceeb5f1764700da94e818df27976d90bab685fc983bea988ea89d6a03b0afd10b325490ce7c809858ae2c2fce07c25bec1f3234a743153ae34fa39cdae9bf2106c4ba6050fd27a0b5152a746b45cce3c0420ce83781b1963e620cc73a43b46473ad9458de379ff6e11ad406304804732f09e1e6feacd52e514d2c28f5ee501755ce653df19260705971196f4553f9dd0bc94b89b7dc78ef627795ead87a5646eb558c71c8efdd66cc9cb4145d5ce9a72a79b4c4b3688a23afd11e68d61763eaf64f98d62a628ae239c76feb99b161c0b50af02d43e053529d845fab388f5284934d51d6a12be96af5458e09ca9ec079b508ea4db72f4ffc7ff1abda8421310d385d7de39d153adc0fdb32fbac4c30dbd9cff22c41c40343874fbc14f5adfc5c965014861c60db0cbaf792dd20c0852ff7b3acf1aeb14ab84112c41765fb954d0ec59532045c32d0cdb059ba2d0cae2103423783ef2e9b976973a28a5486fdfb8b9fa73f29eabeccf9467507d4b13d2ceb59b8344f0330d9d83d2ef9775ff98469f962cf00419d8642c74a0a55be130eaaf50c9d428cf29eb1066658928eaca6e54d75a014028e983f5a23722c66155fe3f01f00872910b4c15191b60280130e3f21a83025242ab14ebb4f023dde013e82aee2cc551eb38e9a23b38ad8e071d280a46f594f9469b03f3c30e161aeab4ee065ce3cafe16de39d1d292bb51c9d9ba2ecc671f776b059782dedc01a56c694ec11c69a8f578b162584b50c2917515ed0e42a12e431cd5cb325229c967975fea82c9852aa0926d7013371f6542eb3eacf8bdd8ca5aa51c68c4024bcfb1f6a2a081a527d15f3c29dbcae41872e16463b1fb943bddaf009307f7252ca11b227a8b2019c4f6b14833d6596b088b88482485f4fea86a0cfab8987f46cfd0149abd5a3ac3e1a12158c80c5f66424f414df29c365656d8a7a3da7b3db8ad1ae5f626ce8e235bd31d5a8cd0a3c116db5d0ca990d7858ed38172ff1cfa557c20e16f332182108a6dcfa427bfe6ae434e08de5570ce7ecd46ec59f0cffa382f8eec2cd7dabdc3e2725c873dc37c527196bc7e586947ce7971c7d482a80412176889ec3b80567b189da71aa602a9686c3e77e31cce484e7e10d1a39c4ed85605ebd8ae81669d1116e0337845ad112c06b2bf8fe194c0a03497e83742c1c8f3d3c9514a878e3b9d994abe5a6c1b8281ab8ee3c1ca27775fdef9240dfc278ff99edd35ef2200b01e58571de4380702b9748780e0ebe08d697a8b046214e34f873d1494db47a0c0c319937eb77fc9c4c0bc2e8a696baab38de427644f64a312fb081219245d27c0af9449c2611972b5655df68ac5aee0c90216fa7e0a2a2038f33f61ee2fdb5e2c5bc97f078f0f83efe9edf21f7ab6d3b7af008f87a809543487539f3039c904c09753f6151644013660c15778b69b2cb118c5239b460a3365b37437f8117c976a37d7eb02d32198c120734069b9d02d9bd97e6adf522f91b79a8b491e8bcb47bc7514cffb098c3e89110394f2f5d68bac92a61026cf7c39712042209c737ee8f1a36a32aec77013945bae25922b04b65aa2bc10b5c4f2eefa5f8350fb4c108b44e108d371d56f5572e0bb2f524add3042524c9c74f3af6a5a2c82dc1edfcb6ea912931b1d72d2271a6fec8000d287405d988d74389a2043cc10906e242d09ed4fdb5f43638d2b2e882a6dea777dd559bbfb8c434955681197e10778180451cff98df9c842b1e0848c417fc8a913b5cf5dd4c6d57abf278ec9bfba018cdcd4f096995022e74fb569ba76d695ec22d5005b1770fa9af09182b9e37aa74e9f8429500cece37d2716aef47c8ed144a1a1541df90b595d02ef1bed3e4055b09dda523e25464e0f0711153ffbe8942873fb99c58abc0128ecd88777b99ff0c0cacf944f8e0402976492f88be3b6ff9ef5dcc6b76a14320731707526abc33712ceac5a32733f632b5cc79b57669dfb33171b59dac3f1d9770d2348ab78cb94ddd3b17a4159328014b9a1c09761de426c00748b0edda97c525f349a1bee383eca8860c2ddf7e34ccfa5b6a2c5779e7330ef54814d2dd484505fb4ba282607a2d9997d86771353aa27815d6bca0c68875903e5de387418fe2a5695300bca5614a3f1b376927767458df988ec4f86ee456af887887e7ac0b4714cf3c764c288efb94a4996b0ef60325bb46346e817d9046cfc7f4e2c67066aeda7484fa134dd7d011fffcdb0e67812e86d86df05da3060cf667092013fb4cef6195b459c939a19cdf278bc301881d2176dee0fe7391018a65bf781ac14b1a048a297f8acff1aaf101b8d47fd8e56170529c931959aec2df1e2fc4733b0de1fb55aed7e36e3b0bc87fe5fd8cfef93ece3044cad5aaf0cbe89b45f5d0de76a585091f312e0da817ab5ebe8652f79105843c273c8f5c913cb69cf3ebb6599089910c194b00149c799c0407a99625501465ac0b5279be3555aedb7c9c0d8c4afc79dd7ecb7974de8876725728ef1cc8f3670fc7eaf9ff84a56e62a31110e20eca0e0ad3d55fce0f4137274e5d663debd23429c7b7bf2d2acff6d8ea405923c33a987c4c5fb27ef90f209becc79db252f481ccd2cd49021fc8791b7ee5da176bcf2d110fc4f9fc0dbbd3da457062b51619c1dac8215bc7329873ca3f3d4d3a0131bc3a8efa7f261e05fb72b85478d98f72fc75f508b743bd15f50b270aa4009e7b419f544b670d6ef9ccbcc343b6c7afeee26c7702d791f77d830829825638bf1bbd9bc8bc366fa9fcd895948aeec11e901bce2897ff697d9206f92b19fd043ab1789b3389a74b901269a1629702fa4fc33f5d75deb169f44fbb1dc9a555c532f78537e0860a06677322e9e320b1a0a45c4813e988318758f5587dbb1816b9b48e296a497999dd83715df47ed0f08f26cbb45965002cc9b542402c7f5320437620e83f657a3a1f9758698ea141c18e5e75b2ae42f90079076e9f5ee9c04edf423599fb1fd389ee7359f79442d81d409bc49ec5afc4bd68d0546b5c42cd680ec05d3e81174e7d84462e2d2853aa3c333d36fd026eed7becc654d5b377ab1ae9403e4d70faef2bf52b9d37e50802090b91bd0219fd54a90a137bf033b5f367a2148f507820d0dc1143845caa93ec83ee45e0829c7cb72fd7712462880dbf5c39eb132a453da367f1146ea3cfcd9ae2e265ab14052e5ce3460e6f308975d5d210dc4b28ee35693cec65bcbf910b46945ef40137da02b6210ad2501e68dfc3ff2846395557451785d9af045406f41e0fa7bf38ca50a6d8d63b1a4a1e41d0352a8108b7d7dda47524b943515657d605888057dbccf381ef287f753623d62abede1c8ad8432179cc6def017dd0f687c8ed17d2b93561e619d30e83d1ccaab553ca1c0a99cf729b0f92ccaa077ba9b9a8fb43e0f4870638c66ba8444d070768bcde0f7dc5b34952216c64ebf6e0b27b055d6dedd20b203e33f14bcd94a8b6cad22974cacede01def740a6c5f74635b428b88dcbd66a28a98c980ea9b74e8be7d1269510021b1186fbed4ddd6ca72aec7688dbacd7991f5df4f715170969caca71ab715da74a6850856a423fcb1bf3dd2cad820fcea7afe11cfb3469f8c4e913617f536ab19cf0864925caf7aae5b2f3ce950dc862078dff4471037ba5fd7f10f1223a6937c3fdda4e14665d73fb70d8e32f7a5438054dac55ef2908fe6f1ffd2bdabb87ed13ad899bf59ff2a82016f6dc5f7268d2ec3cb9ab43c6e459eb9c0e9e829195fc238edb8fe7667fd1c63b8ba5d2e0e7cef33482c7c9481efa23fb0cd9ec7164d923ec8072e602f0bdcbb8593a4b3c7530740632629a63d38b45da82c9e4afa387cd1af3b8126495b538eb9ee822b53969848dd69c50110b315389031c3778eafa5771672710ee3cc6efa236141453dc1d048a0ef2e8b3a2b3202ec5f76fc919ea58840e79fa12b25eee61dcd37d3d3e6fb137bd099f7dbe300ed1f744deb211503"}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) listen(r1, 0x79) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf250100000008000100ffffffff340004800500120001000000050003000200000005000300180000000500030080ff000005000300050000008a55049d4983a6200800020002"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r7, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400410000001400020076657468315f746f5f7465616d0000000900030073797a3200000000090001"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002240), r5) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f0000002300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x24, r10, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x15}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x884) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r5) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001240)={r4, 0x9}) getsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x2, 0x0, &(0x7f0000000000)=0x45) 41.637932791s ago: executing program 1 (id=2664): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000040)={'virt_wifi0\x00', @multicast}) 41.422576593s ago: executing program 1 (id=2665): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) splice(r6, 0x0, r1, 0x0, 0x100000003, 0xa) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x4, 0x12}]}, 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) 38.133104112s ago: executing program 1 (id=2673): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000103000000000000007110b7000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc9357f57f741c167, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 37.905926546s ago: executing program 1 (id=2674): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=@alg={0xe8, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {{'xts(twofish)\x00'}, '\x00', '\x00', 0x400, 0x2000}, [{0x8, 0x1, 0x5}]}, 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x8, 0x4, 0x8}, 0x2c) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}]}, 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x300) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000004aa0f0e0000000000000000"], 0x48) unshare(0x600) socket$can_raw(0x1d, 0x3, 0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x0, [0x4, 0x400, 0xac5]}, &(0x7f00000003c0)=0x44) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000440)={r2}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000028c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r8, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002b40)={0x20, r9, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) ioctl$sock_ax25_SIOCADDRT(r7, 0x890b, &(0x7f0000000480)={@null, @null, 0xfd, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b700000000000000"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x2e994000) unshare(0x62040200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xb2, 0x6a, 0xa, 0xff00}, [@ldst={0x0, 0x3, 0x6, 0x9, 0x8, 0x100, 0x10}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x8}, 0x2d) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000000)=0x93f, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r10}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r11}, &(0x7f0000000640), &(0x7f0000000680)=r10}, 0x20) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "1cada39d8690addcb6140ef0a44c891e2d40e66b93b2b009201faa8ec90551b7", "3187e62928c7c00b5a52d7c01805bdeab782f786926372aae781bc595c127637", "cfb986fae0e47196b31895f0302c37c54b016cbc89e90b58b1cefd387128b81b", "8c4d641ac35e562e37b307d5d78b6a2a424a7665f5a48b650109a6c7a2ef3685", "bf694a58936b5ed42e7ffa6bb9355cb78162d91fdfbc64ede4da0bda732f084f", "dd9bc8b0908e05e3ec595076", 0x0, 0x1, 0xc9f, 0x6, 0x80000000}}) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@caif=@rfm={0x25, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) 28.267907195s ago: executing program 42 (id=2655): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x62040400) unshare(0x44000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) close(0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000030000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}, 0x1, 0x3000}, 0x0) sendto$inet(r5, 0x0, 0x0, 0x40, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0xffff, 0x380000, @loopback, 0x1e}, 0x1c) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x10814) 22.793618133s ago: executing program 43 (id=2674): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=@alg={0xe8, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {{'xts(twofish)\x00'}, '\x00', '\x00', 0x400, 0x2000}, [{0x8, 0x1, 0x5}]}, 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x8, 0x4, 0x8}, 0x2c) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}]}, 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x300) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000004aa0f0e0000000000000000"], 0x48) unshare(0x600) socket$can_raw(0x1d, 0x3, 0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x0, [0x4, 0x400, 0xac5]}, &(0x7f00000003c0)=0x44) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000440)={r2}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000028c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r8, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002b40)={0x20, r9, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) ioctl$sock_ax25_SIOCADDRT(r7, 0x890b, &(0x7f0000000480)={@null, @null, 0xfd, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b700000000000000"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x2e994000) unshare(0x62040200) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xb2, 0x6a, 0xa, 0xff00}, [@ldst={0x0, 0x3, 0x6, 0x9, 0x8, 0x100, 0x10}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x8}, 0x2d) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000000)=0x93f, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r10}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r11}, &(0x7f0000000640), &(0x7f0000000680)=r10}, 0x20) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "1cada39d8690addcb6140ef0a44c891e2d40e66b93b2b009201faa8ec90551b7", "3187e62928c7c00b5a52d7c01805bdeab782f786926372aae781bc595c127637", "cfb986fae0e47196b31895f0302c37c54b016cbc89e90b58b1cefd387128b81b", "8c4d641ac35e562e37b307d5d78b6a2a424a7665f5a48b650109a6c7a2ef3685", "bf694a58936b5ed42e7ffa6bb9355cb78162d91fdfbc64ede4da0bda732f084f", "dd9bc8b0908e05e3ec595076", 0x0, 0x1, 0xc9f, 0x6, 0x80000000}}) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@caif=@rfm={0x25, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) 22.685397866s ago: executing program 4 (id=2795): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x100001, 0xfffffffffffffc2c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, '\x00', "ec094e071cc80f218d360356a936a7e3971a8c35c47e580400", "cf00", "fffffffffffffffd"}, 0x38) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x9}, 0x8}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) unshare(0x8040600) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000024c0)=@newchain={0x18c4, 0x64, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xd}, {0xffe0, 0x4}, {0x4, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0xffc00000}, @filter_kind_options=@f_basic={{0xa}, {0x187c, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0x7}}, @TCA_BASIC_POLICE={0x1014, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x200, 0x1, 0x8, 0x810, 0xbe, 0x4, 0x6, 0x141, 0x1, 0xb95, 0x9, 0x3, 0x1, 0x400, 0x2a42, 0x1, 0x9, 0x8000, 0x9, 0x5, 0x4, 0x73, 0x8, 0x10000, 0x4, 0x4, 0xfc, 0x80001, 0x9, 0x284, 0xa64d, 0x7, 0x81, 0x7, 0x7, 0xd0e, 0x6, 0x9, 0x8, 0x0, 0xa63, 0x5, 0x6, 0x10001, 0x1, 0x4f28, 0xe, 0x7, 0x6, 0x4, 0x8, 0xffffff46, 0x8, 0x8, 0x1, 0x3, 0x3, 0x1, 0xb1, 0x7, 0xffffffff, 0xf9, 0x1, 0x9, 0x9, 0x19, 0x4, 0x5, 0x7, 0x0, 0xffffffff, 0x8bcb, 0x13, 0xc3, 0x2, 0x1, 0xfffffffa, 0x8, 0x80, 0xffffff81, 0xfffffff8, 0x6, 0x10001, 0x7fffffff, 0xffffffff, 0x1ff, 0x1000, 0x1, 0x5, 0x3, 0xfff, 0xd, 0x80ba, 0xd7a, 0x5, 0x9, 0xa81f, 0x9, 0x7, 0x8001, 0x4, 0x80, 0x1, 0x3, 0x6, 0x1000, 0x6, 0x3ff, 0x6, 0x2000, 0x1, 0x8, 0x2, 0xb, 0x7, 0x7, 0x3bb, 0x10001, 0x6, 0x3, 0x8, 0x851, 0x1, 0xfff, 0x1, 0x3, 0xffffffff, 0x2, 0xa9d, 0x200, 0x0, 0x4, 0xc59f, 0x10000, 0xffffffff, 0x0, 0x9, 0x2, 0x4, 0xfff, 0x3f, 0x0, 0xa, 0xfffffff7, 0x6, 0x2, 0x8000, 0x3, 0x6, 0x1, 0x850, 0x7, 0x12, 0x3, 0x401, 0x7, 0x5ab, 0x7a5, 0x4, 0x4, 0x2, 0x6, 0x87, 0x3, 0x0, 0x4, 0x1, 0x8, 0x8, 0xfffffffa, 0x0, 0x1, 0x6, 0x2, 0x4, 0x9034, 0x7, 0x10, 0x6, 0x9, 0xfffff000, 0x1, 0x7, 0x8, 0x2, 0x100, 0x6, 0x7fffffff, 0x6, 0x0, 0x9, 0x3, 0x7, 0x49a, 0x2, 0x1, 0x2, 0x10001, 0x2, 0x40, 0x6, 0x4, 0x5, 0x2, 0x8, 0x8, 0x9, 0x8, 0x7, 0xfffffffd, 0x80000001, 0x4, 0x80b, 0x682, 0x2, 0x0, 0x5, 0x2, 0x401, 0x9, 0x80000004, 0x1, 0x7fff, 0x200, 0x5, 0x8, 0x7fff, 0x575, 0x0, 0x11, 0xff, 0x8000, 0x8c, 0x39a, 0xdc3b, 0x0, 0x8, 0x7, 0x80000001, 0x10, 0xff000000, 0x7, 0x8000, 0x9, 0x1, 0x5a, 0x1, 0x7, 0x9, 0x2, 0x0, 0x2, 0x9, 0x1c00, 0x1, 0x401]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xba1, 0x401, 0x2, 0x6b38, 0x10001, 0x3, 0x401, 0x2, 0x7, 0x100, 0x5, 0x0, 0x0, 0x3, 0x21f8, 0x0, 0xfff, 0x6, 0x7, 0x2, 0x7, 0x56a7c236, 0x6, 0x1, 0x7, 0x7d, 0x2, 0x4, 0x1ff, 0x1, 0x4, 0xb34, 0x2, 0x8, 0x4, 0x80, 0x10001, 0x160, 0x1, 0x60, 0x7, 0x3, 0x5, 0x1, 0x234e, 0x101, 0x9, 0xc, 0x10001, 0x61be4718, 0x200, 0xa, 0x9, 0x9, 0xfffffffd, 0xd, 0x81, 0xffff, 0x81, 0x0, 0x4, 0x5, 0xfffffc01, 0x9, 0x8, 0x80, 0x5, 0x5, 0x2, 0x81, 0x1, 0x3332, 0x6, 0x3, 0x101, 0x4, 0x7ff, 0x3ff, 0x6, 0x5, 0x1, 0xcdf, 0x7e5, 0xe443, 0x4, 0x1, 0x93c, 0x2, 0x6195, 0xffffffff, 0x1, 0x101, 0x7f, 0x8, 0x2, 0x24, 0x8, 0x7, 0x3, 0x5, 0x1, 0x3, 0xf, 0x5, 0x3, 0x5, 0x5, 0x3, 0x4, 0xbc8f, 0x4, 0xae8, 0x81, 0x1, 0x38a9, 0x2, 0xe0, 0x68, 0xb, 0x579, 0x6, 0x2, 0x3, 0xdb, 0x4, 0x9, 0xe9, 0x9, 0x3, 0x1, 0x5, 0x2, 0x200, 0x3, 0xfe, 0x9f, 0x2, 0x13c, 0x5, 0x81, 0x9, 0x0, 0x4, 0xf, 0x6, 0xc, 0x8, 0x1, 0x4dee, 0x80, 0x3225, 0xd5, 0x101, 0xb, 0x7, 0x40, 0x2, 0xfffffffa, 0x5, 0x1, 0x8001, 0x6, 0xffffffff, 0x1, 0x70, 0xfffffff3, 0x0, 0x4, 0x9, 0x7fffffff, 0x3, 0x0, 0x4, 0x9, 0x8, 0x7, 0x5, 0xffffffff, 0xbbe, 0x0, 0x5, 0xca, 0x32ae54b7, 0x4, 0xffffffff, 0x2, 0xf36b, 0x0, 0x7, 0x6, 0x6000, 0x7, 0xf60, 0x3, 0x9, 0x9, 0x2, 0x800, 0x1, 0xa6a, 0x4, 0x60d3, 0xa0d, 0x5, 0x8000, 0x7, 0x0, 0x0, 0x3, 0x7fffffff, 0x6, 0x1, 0xb7, 0x6, 0x5, 0x3, 0x80, 0xfffffffa, 0x0, 0x5, 0xdef, 0x506, 0xc, 0x0, 0x3, 0x1, 0x1ba, 0x4, 0x101, 0x3, 0x7fff, 0x4, 0x7, 0x3, 0x5, 0x2a, 0x9, 0x554, 0x4, 0x8001, 0xa51a, 0x2, 0x9, 0x8, 0x4, 0x3, 0xfffffff6, 0x4, 0x9, 0x6, 0xd, 0x7, 0x3, 0x9, 0x7, 0xc]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x1, 0x8, 0x8, 0x1, 0x8, 0x401, 0x1, 0x9, 0x6, 0xffffffff, 0x2, 0x1, 0x6, 0xfffffffa, 0xd, 0x3, 0x6, 0x7f, 0x4, 0x2, 0xfffffffe, 0x0, 0x0, 0x5, 0xec3, 0x0, 0x2dd, 0x401, 0x6, 0x6, 0x4, 0x1, 0x3, 0xf8000000, 0x3, 0x4, 0x0, 0x7fffffff, 0x7, 0x2c, 0x0, 0xb, 0x0, 0x400, 0xaa58, 0xff, 0x4, 0x5, 0x4, 0xb0, 0x272, 0x6, 0x9, 0x8, 0xdc26, 0x8, 0x6, 0x3, 0x10, 0x9, 0x7fff, 0x8, 0x9, 0x7fff, 0xfffff6e2, 0x1, 0x9, 0x4, 0xc, 0x3, 0x1ff, 0x9, 0xffffffff, 0x101, 0x8, 0x6be0, 0x1, 0xe, 0x8ee, 0x5, 0x4, 0x7, 0x9, 0x7fff, 0x400, 0x6, 0x8, 0x3, 0x3ff, 0x3, 0x8, 0x9213, 0x9, 0x7, 0x1000, 0x3, 0xfffffffb, 0x9, 0x3, 0x0, 0x5, 0x7f, 0x3ff, 0x1, 0xb, 0x10, 0xfffffff8, 0x7fffffff, 0x7, 0x80000001, 0x5, 0x3ff, 0x101, 0xac, 0xd2, 0x0, 0x6, 0x401, 0x7fffffff, 0x200, 0x37, 0xd6f, 0x0, 0x58, 0xfb, 0x10, 0xfffffc00, 0xf4b6, 0x4, 0x8000, 0x81, 0x0, 0x2, 0x7, 0xc4, 0x800, 0xc, 0x4, 0x0, 0x8, 0x20, 0x3, 0x3901, 0x9, 0x4, 0x4, 0xf0, 0xa, 0x9, 0x3, 0x3, 0x1, 0x6, 0xe1, 0xffff, 0x4, 0x7fffffff, 0x1, 0x9, 0x100, 0x1, 0x3, 0x0, 0x351f, 0x80000001, 0x6, 0xffffd52f, 0x8, 0x7, 0x4573, 0x4, 0x7, 0x7, 0x1, 0x2, 0xa4, 0x3, 0x3, 0x7, 0x5e7e08e1, 0x8, 0x80000001, 0xece, 0x88, 0x7, 0xe0000000, 0x9, 0x1, 0x8, 0x3cfb, 0x5, 0xc, 0x2, 0x5, 0x4000000, 0x6, 0xe2a1, 0x0, 0x1, 0x4595, 0xf0, 0x2, 0x9, 0x4, 0x9, 0xfffffffc, 0x7f, 0x1095, 0x2, 0x1, 0x10001, 0x1, 0xb, 0x5, 0x7fffffff, 0x4, 0x4, 0x6, 0x9, 0x8000, 0x2, 0x10001, 0x10000, 0x3, 0x8, 0x5f, 0x905, 0x7, 0xa97c, 0x400, 0x7f, 0xffffffee, 0x200, 0xffffffff, 0x5, 0x7, 0x10000, 0xffffffff, 0x7, 0x6, 0x2, 0x4, 0x7fffffff, 0x5, 0xfffffd89, 0x3ff, 0x7, 0x8, 0x42a, 0x44f2564, 0x6, 0x8, 0xd009, 0x6, 0x80000000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x9, 0xda3, 0x800, 0x5, 0x8, 0x6, 0x24, 0xffff, 0x1, 0x3, 0x101, 0x10000, 0xff, 0x1000, 0x1, 0x3, 0x2, 0x4, 0x17e, 0x5, 0xeb, 0xc1c, 0x8000, 0x9, 0xcd00, 0x0, 0xde0, 0x0, 0x9, 0xff, 0x9, 0xc8c2, 0x6, 0x5, 0xd, 0x1, 0x9, 0x9, 0xe9, 0xfffffffe, 0x5, 0xbc, 0x4, 0x200, 0x2, 0x7, 0x2, 0x36, 0x8001, 0x7, 0x10000, 0x4, 0x63, 0x8, 0x3, 0xb, 0x7, 0xfffffff9, 0x5, 0x9, 0x2, 0x5, 0x6, 0x2, 0x2, 0xc, 0x8, 0x1, 0x0, 0x0, 0x7, 0x6, 0x0, 0x5, 0x0, 0x3, 0x1, 0x65, 0x3, 0x800, 0x8, 0x40, 0x4, 0x5, 0x0, 0x1, 0x5, 0x2, 0x901, 0x7, 0x4, 0x46, 0x5, 0x3, 0x4705, 0xc, 0x5, 0x3, 0x8, 0x2, 0x200, 0x0, 0xb, 0x6, 0x5, 0x1, 0x6, 0x5, 0x7, 0x5, 0x7ff, 0x5, 0xfffffffe, 0x200, 0x1, 0x4, 0x8, 0xab9, 0x9e2, 0xb, 0xfffffff8, 0xbea, 0x1, 0x5, 0x6, 0x2, 0x7, 0x800, 0x80000001, 0xffffffff, 0x1ff, 0xe2, 0x7fffffff, 0x4, 0x51, 0x9, 0x1, 0xfffffffd, 0x0, 0x5, 0x8001, 0x9, 0x3, 0x21, 0xfffff302, 0x80, 0x4, 0xef, 0x0, 0x8001, 0xe234, 0x4, 0x22, 0x3, 0xffffffff, 0x10, 0xffff, 0xf0, 0x661d7dd3, 0x8, 0x1, 0x10000, 0x6, 0x400000, 0x0, 0x13, 0x2, 0x6, 0x3, 0xde95, 0xfffff000, 0x4, 0xff6, 0xfff, 0x1, 0x6, 0x7f, 0x4, 0x6, 0x3, 0x8, 0x2, 0x83, 0x5, 0x24, 0x4, 0x1, 0xffffffff, 0x0, 0x2, 0x8, 0xfffffff8, 0xffffff7f, 0x0, 0x8, 0xc, 0x9, 0xffffff88, 0x0, 0xffffffff, 0x10b, 0x8000, 0x6, 0x8000, 0x10001, 0x8, 0xd, 0x4, 0xb4a, 0x9, 0x0, 0x6, 0x3, 0x0, 0x7fff, 0xfffffffa, 0x9, 0x0, 0x10000, 0x6, 0x8, 0xff, 0xb, 0x800, 0x8, 0x3, 0x1, 0x8, 0xfffffffe, 0x6, 0x9, 0x7ebc, 0x87, 0xfffffff5, 0x9, 0xb, 0xe5be, 0x8000, 0x7, 0x1, 0xa7a8490, 0x3, 0x0, 0x4b, 0x1, 0x1, 0xa, 0x5, 0x3, 0x4, 0x9, 0x8, 0xffff, 0x200, 0x4]}]}, @TCA_BASIC_ACT={0x1a4, 0x3, [@m_skbmod={0xe8, 0xf, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xa, 0x1, 0x0, 0x6207, 0x7}, 0x10}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}]}, {0x78, 0x6, "d08b2ca1429619c0a8e812c572b333833d41909c43c7593310989cc92af45fff51be2b45f40e410f546c5f04a158c82567c6dbc01fc05b8c7871058a72eced1ddcda41fd6ecb99d2ecb020048f3226c5418290c8aa750835efdfc2781a9845235de6fe6928ca381eb44beb78501cb796c17388bf"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0xb8, 0x5, 0x0, 0x0, {{0x7}, {0x80, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "a5907e157972cdd7dd274b4bb6c8f864"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_LABELS={0x14, 0x7, "2b883f47305c15b64b6c1e7ea19b8919"}, @TCA_CT_LABELS={0x14, 0x7, "b0092c2ec95d4008593abc0ba432d8eb"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "6912667504e60ee911e6ac9b5da7ec18"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @remote}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast1}]}, {0x12, 0x6, "111476a6e6fd59f885bce3c5bbb1"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BASIC_ACT={0x7c, 0x3, [@m_nat={0x78, 0x1f, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7fff, 0x3, 0x2, 0x1, 0x1}, @remote, @remote, 0xff}}]}, {0x28, 0x6, "6ec931414c6d324e4b32017181f72c60c69334c9427ce32e0ecfdaf912e2608e1cfc37f6"}, {0xc, 0x7, {0x1}}, {0xc}}}]}, @TCA_BASIC_EMATCHES={0x84, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x80, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x2, 0x7, 0x3}, {{0x3, 0x0, 0x1, 0x1}, {0x3, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x2, 0x1, 0x7}, {0x8, 0x717, 0x3d1, 0x1, 0x8, 0x0, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x7, 0x8, 0xf}, {0xffffffffffffffff, 0x0, 0x1}}}, @TCF_EM_IPT={0x10, 0x1, 0x0, 0x0, {{0x1000, 0x9, 0x8}, [@TCA_EM_IPT_MATCH_DATA={0x4}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x5e7, 0x1, 0x5}, {0xffffc810, 0xfffffbff, 0xb8be, 0x6, 0x9, 0x2, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x441, 0x1, 0x1000}, {0x0, 0x7, 0x4, 0x1, 0x8, 0x1, 0x2}}}]}]}, @TCA_BASIC_EMATCHES={0x5b8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x168, 0x2, 0x0, 0x1, [@TCF_EM_META={0xcc, 0x2, 0x0, 0x0, {{0x9, 0x4, 0x78b}, [@TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="5c11e3456b8f13e860", @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0xf, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="c9c834e570dca4"]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfff, 0x95, 0x1}, {0x0, 0x2, 0x2}}}, @TCA_EM_META_LVALUE={0x27, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="4392e315b33c23de26", @TCF_META_TYPE_VAR="f98aee5160ce857ec4c3", @TCF_META_TYPE_VAR="bea32341fb", @TCF_META_TYPE_VAR="c766b2255afd3a", @TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_VAR="ffee7e5d16c5ce3b"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x40}, {0x0, 0x43, 0x1}}}, @TCA_EM_META_LVALUE={0x33, 0x2, [@TCF_META_TYPE_VAR="2a13", @TCF_META_TYPE_VAR="4f01ca586ae4d1d39e", @TCF_META_TYPE_VAR="e0a1a090", @TCF_META_TYPE_VAR="0f", @TCF_META_TYPE_VAR="887f", @TCF_META_TYPE_VAR="e3c4260115c76a63", @TCF_META_TYPE_VAR="5bad07569a9e7f2e08fc", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="be19a407a2100f"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x8}, {0x9, 0x9, 0x1}}}]}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x2, 0x4, 0x406}, [@TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="44fe82ac3be1941e07"]}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9, 0x1, 0xac}, {0xfff, 0x5, 0x7, 0x2, 0xa, 0x2, 0x7}}}, @TCF_EM_CONTAINER={0x34, 0x1, 0x0, 0x0, {{0xaff, 0x0, 0xe}, "375ea35a4bfc44a753fc8a7d845e8df75e30c99cdf64f63f568c4fbc78c3fbc2401d49fefb2ded"}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xb9c8}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x147, 0x3, 0x9}, {0x378b, 0x555e0b7b, 0x5, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x1fc, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x4, 0x9, 0x5}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}, @TCF_EM_CONTAINER={0xe8, 0x1, 0x0, 0x0, {{0xeca2, 0x0, 0x1}, "475746e3b7ae88c9806d621b99a7db89c6b0b1088b0753799dc9588f2b1018be7d4a0c77dc8ed7bb53b296696c10b705ef913b750b08a6c7d4612e3dfdf3c731a9d38af446f4e8ddbba7775558b3467d8f52eb08db9a245b33194b23d97a84d9b6a33bf8bcb2779b66feb78ffa5712979039a52c77522cdc575af926c85fe3fae2fb0a11402fb6a9bd0d022a667bfd8312fb6a0cf1783ea5a381f67c789367ce4406d4a33f32ce952eab379b6475e57cf9cd2b39b35722ec38566951a08930d9a89da56cbb1d2aa6adf5f8cb4e9a61ee228eadf58111265431294f"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7f, 0x7, 0x7}, {{0x3}, {0x2, 0x1, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x2, 0x7, 0x6}, {{0x2, 0x0, 0x1, 0x1}, {0x2}}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x0, 0x2, 0x8000}, {0xe40b, 0x1, 0x2, "c3"}}}, @TCF_EM_CONTAINER={0x5c, 0x3, 0x0, 0x0, {{0x401, 0x0, 0x5}, "809d79ee6b7e709cd66c1dd6e16ed2bd5a93c24d663af50fb377a933c9512785cad73e81b94beb6ec1b2ea1e3debd1517912b3c2b52c0b525ad6911b5eeddc8abaf37e4521461207bbfd5ccb5211f776"}}, @TCF_EM_META={0x64, 0x3, 0x0, 0x0, {{0x6, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0x29, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="13", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="b142453084f76064d5", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="d77e13", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="4b5e8e0617b21dda", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x2a, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="ab688fb5c81ca6db00", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="a16bada8698a686a51", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="0187194e"]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x29}}, @TCA_EMATCH_TREE_LIST={0x1e0, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc4, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_VAR="a4", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="43c9bbd9b37e", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x1f, 0x3, [@TCF_META_TYPE_VAR="88b17ad4", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="8690a0a17a9bcac808", @TCF_META_TYPE_VAR="d71b60613ac0", @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x2, 0x2}, {0x1, 0x8}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x100, 0x81}, {0x2, 0x7, 0x2}}}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="62cf", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="c405"]}, @TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="feb8e03bcfc2", @TCF_META_TYPE_VAR="8c5eea65fb23aac1", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_VAR="b3b3fe46ee", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="06aa4958de2ac8ac27a1"]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_LVALUE={0x7, 0x2, [@TCF_META_TYPE_VAR='[C1']}]}}, @TCF_EM_CONTAINER={0xec, 0x3, 0x0, 0x0, {{0x7, 0x0, 0x8}, "99ce4b8077ab10c187c5dbcbe0c9849032662eea9f48f0945b5852239abf8393e4d86c717d8f680e7d39b5573355ff55e0cea23d77d91d6338ba722c5a39e172ae2536c37465d6681f64baf38029172c61bf58330a81d825bea0b6c14a8bf3b4dc0c51f4a5380a6070674319be541f4966d8e16ddc3529d7d4c837ad5d46e75381dfbb6c77bea7cad3d995ddbdfe13611692097f2652bba2f1daac16a3fe3ac87c9b87342492385f2081a5ffa7e23b59af75f04081a69f0102b3dec8e0101480410fc7440fc42177efd543d88d0a79fe09e308dafaae75eeac7de0607ed13c"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xf70d, 0x1, 0x6}, {0x0, 0x47d, 0xc, 0x6, 0x0, 0x2, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xff01, 0x7, 0x4}, {{0x4, 0x1, 0x1, 0x1}, {0x2}}}}]}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x4, 0x1, 0x3f9c}, {0xfffffffe, 0x4, 0x61, 0x0, 0x4, 0x1}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x8, 0x2, 0x3}, {0x7, 0x8, 0x0, "c8242695656385ef"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9cf5, 0x3, 0x1}, {0x0, 0xfffeffff, 0x4, 0x7ff}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x1}, {0x2, 0x2, 0x4}}}]}]}]}}]}, 0x18c4}}, 0x0) accept4$llc(r3, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x44801}, 0x1010) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, @val=@tracing={0x0, 0x2}}, 0x20) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) socket(0x1d, 0x2, 0x6) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r6}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r7, 0x4}, 0x38) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x74, r8, {0xfffd, 0xffeb}, {0xa, 0xc}, {0xc, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x400c012}, 0x8850) socket$packet(0x11, 0x2, 0x300) 21.494476403s ago: executing program 4 (id=2799): bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x5, 0x5}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60040d0}, 0x40000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) openat$ppp(0xffffffffffffff9c, 0x0, 0x12040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) write(r4, &(0x7f0000000540)="b7d022835c200982c0b86fb9b76c424db9644e496040e1d2e3b83848524261d3802fbe6e6f015ff915b9777d3c21b63926da62b4026f50196de3d3fac39fc98259f6a17a2b1a39c7d630eb3a61acb30d0a307a2a2bef8fcdd0dc4cd2d157b3ce686b1c6b7dc66dae5ba9b542671332210142c4f7364fe7df68e390de0000eef393c199f1aa74c156f81487e4ff8d886fda4184eeef9802643c7df04469ea4d1e42249cc0af4728ba955168971c933127efa0cf9170b442de4a1a04b9d4de910910609385c78d694f7e0b58edda3a273eb8be4d3f26b2ca212b7d3f9903311479509a4887436bf5b9b99f92cf", 0xec) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 21.425773867s ago: executing program 4 (id=2802): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0xc}, 0x38) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000500)=[{0x6}]}, 0x10) write(0xffffffffffffffff, &(0x7f0000000040)="07000000010001", 0x7) 21.273009058s ago: executing program 4 (id=2805): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000004180)={0x0, 0x0, &(0x7f0000004140)={&(0x7f0000004100)=ANY=[@ANYBLOB="180000002500050326bd7008fedbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r5, 0x5421, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x19, 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0x4) recvmsg$unix(r2, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x102) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x40}, 0x20000000) socket$nl_xfrm(0x10, 0x3, 0x6) 21.077962108s ago: executing program 4 (id=2806): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000018000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000003000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 20.999866277s ago: executing program 4 (id=2807): socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r4, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @remote}, &(0x7f00000000c0)=0xc) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x18, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r9, &(0x7f0000000580)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000180)={'geneve0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x1000003, 0x80, 0xe698, 0xf37, 0x6, 0x400, 0x4, 0x94a, 0xd12, 0x9, 0x13b6, 0x714, 0x1, 0x2, 0x8, 0x0, 0x40, 0x4, 0x800, 0x2, 0x81}}) 10.137712367s ago: executing program 8 (id=2793): r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0x8c, 0x1, 0x2, 0x80000000, 0x51, 0x8}) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0x0, 0xffffffff}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r2, @ANYBLOB="7fff000000000000"], 0x20}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10000001) (async) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10000001) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_PORT_SELF={0x34, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '\'\x00'}, @IFLA_PORT_PROFILE={0x9, 0x2, 'bond\x00'}, @IFLA_PORT_PROFILE={0x9, 0x2, 'bond\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x40}]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x5c}}, 0x0) 9.795433931s ago: executing program 8 (id=2850): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x4000010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0xe, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000200)=r0}, 0x20) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x1, 0x6778, 0x6, 0xc500, 0x1, 0x6, '\x00', r2, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x7}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r8, &(0x7f0000000040)}, 0x20) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0xffffffffffffffff, 0xf, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)=r3}, 0x20) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0x21, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ef6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000340)='GPL\x00', 0x1000, 0xe0, &(0x7f0000000580)=""/224, 0x41000, 0x1d, '\x00', r2, 0x0, r1, 0x8, &(0x7f00000006c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0x9, 0x3, 0xfffffffe}, 0x10, 0x657f, r0, 0x4, &(0x7f00000008c0)=[r8, 0xffffffffffffffff, r9, r10, 0xffffffffffffffff, r11], &(0x7f0000000900)=[{0x0, 0x1, 0x3, 0x8}, {0x5, 0x4, 0xf, 0x6}, {0x2, 0x5, 0x10}, {0x4, 0x4, 0x2, 0x6}], 0x10, 0xc}, 0x94) r12 = socket$packet(0x11, 0x2, 0x300) bind$packet(r12, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="27738d50c7f5"}, 0x14) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000000), 0x8) 9.010350336s ago: executing program 8 (id=2857): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000480)={@fallback=r0, r0, 0x2f, 0x14}, 0x20) 8.761745536s ago: executing program 8 (id=2858): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e00010026bd7000fbdbdf2507000000", @ANYRES32=r0, @ANYBLOB="000002000a"], 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000800) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x121c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x1202, 0x133, 0x0, 0x1, [@typed={0x8, 0xa1, 0x0, 0x0, @u32=0x8}, @generic="8d669a72f3dec08c95de3c8cce6a0e642eddfaf5d0f51d456a81406ef7d665f024934dd6d64e0633e524348ac698f2e9f0ab36632d887d728e423921f0ce5acec975d55b", @typed={0x8, 0x62, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x63, 0x0, 0x0, @fd=r0}, @generic="0a4c298dc013fe33e2ef1a488a15d2c53c7316a0badf432cbf8ce6dbb54c1dfdf57805f7889544e68ea40918f2e17371521ccf0e4d7cc1f969f9beceb1dcdecc75323f1bb69702e1fe47cd332d532950714445a098459e118b9a9704509843321eeda77d494717bb79a0e485adb6c0a82343d628142b9bba1e17", @typed={0xc, 0xe2, 0x0, 0x0, @u64=0x1}, @nested={0x110d, 0x1c, 0x0, 0x1, [@generic='o\aqO ', @generic="f775211220e41f868cd1160dbebbd01917ce96ec226c1c46b950441df10d2eaea8547b2ad77d10a3c0106a7e26", @generic="e852b4ddc84fd43a47c5be0e793c2775af5343c3f5c600ab7aa56a4f6b80ec2e3528cbf3c811843ece3d7a238b2d4832c916cd045be278adacd2036680a4f6b6d8d6d3b8c8f20b0862e677cfbdbcaf12bfdc044bf0d2616599d7c794666e17f7c75f95dcd64b7302ad73dbce647629ec139f8e47632ee2bcff60df5d29844b641e8b5864aeafaf982a150ee36db3f18ea38965a3398de6f535e25db0901630da0fd82924a7a128a270aa35edef2f86f3b5381ea2930a77a1db6303f4380e9ee0ed6c4589dffeb8c2af27772ec4991664ea0c29", @generic="e3a744d8cf917a7aa7b9956d4a4d7be345c011bf593e8a47c24c67093855cab5c55fb36a058367af18ffc7c8bdc5c73af4ab6c8ee7d96afc0459d85ceac77f6d99d5013b00af09f1ebb2931b57b1b8ea8f4539e03fdc434a4178c4146557c2321fe96cac3770f3804b8d9c4a573cfb324868d23f1fd93cceaa299cfd0b5e7e61e4f4f90e1cdafc463922a00116253bbf2c2f2e0fac229cb47d024c3ffb95a969db236f538581881f4398841801d3ed34e114050773a3a11cf0c66e6bb4e525c1aee27b1a30576d8386b6cb169f055e18d013b5c2c83966dc342ed087de21ac3de50f3115b44edfd1a3f746d1072cef0fcb710bd421d2a614ec6a551fab613f770099c0f6f5aa5b18c267d52f51c90ce444f432df70d4e113bed9d88315c796c2fb0139b1a3deec41086a6faadf616af5507f7dca782cb7f0a801ba9323cd01979194feb83a6c8f8b6b30b23bd9a945017309dc738a21b0321ee328b42e7895d8711b164feefd97146359465a0087c4de79d939b1ca297d222ef4e117742eb90cd508793cbd457589a2937c50dad3ad539b2cbab71c961724bce975e3c50bec3c6ba6d4995f18a389e3b32b1833c3a62ea7aa60e97710afd0510daf511c5cb565e28ee6086df34797d3c99c42237dd730ca11c9f2e9ed131d954592cf6290d7bf7d6aea7c562fa77dd3fb8d6664b56c203f93820ce319c409bdb696d4196b5ad2cccad1ea314a57f2790bf5ae845911ef102bafcfda635e4ca665f03bd28a57f2da79d6908f01eb12eecdb202a7bc68bf656bac6e9e920e7235bda38e4c726be1972ce281bfb03b55d1966d001c02ccb95941bc75e6fe05a5f0553ddbaf784f28a9b8e2ac04059c58ecb4517202a95cdb9983db6f8e79455960cb627fb0ca3d893e2c433f3532d89521f5bc9edc3c68aeb842976016284279e27af067185a4147289c68bb66268702d64f05cd957df67b81a4871475a262e501a7c79070f5f5c617135798596b90fb5eed58068e188ffeceb4cd05e2aac2f2c06fc6a8a0a2debc25c320e6cde5344d403547a9f59d4f04efac79969ff3e42580203b88fb0d1e4843aee7078e6c3808a141ce98a807a03ce6d1d2458ed26748b8e876aa94a91ac0d18b45df2648e6e502727c8f4031a327058f3c9fc9f6dd2040bf54902454fa4ece968061bd7e63b1697b8fabba3c823652a200045366c527c027b618615c7acc531a38b2204216c70dc5848fa5bc5c931cdb975380e6185a32c5376639986b57dcd2357e4e7aba4dc4d07542e01ac08e09bbf7bc6cec228097dc88e06cded3fa43b6fad1cca5b3adaa95b5c9105e5bb4500510f2dd1758a6e6fe0433452b56679797f375110db7c63e4802c71834d46f9f51c521c2d78dbfef3f04cd354724650647f18b4b583365863dc0a17b4ef67ae9e07b3d7ce40af036b6190cb4e1d9baaac445d9ae437cc8d9ac386f4ba23cc5f3a4985e173e3d89155193ebf55e6d82caccda3f39d66a3a11552a9a286bdae5d29a7e2fcd3a667b2a9542de2018f02192ef0b92cf7173b11bce25b945917439e151a3647a818721680050a916140e4e01248c314eaa593e32b6d53a71734c8af802e913157e8ebd2dfd00571afcaf360cf36c27546cf80627e4c8df23a258d1c38841d4115cedef0a685ec2b54bfc58baeb3cb66ca741f41704dca5e339972d3cff2be1cfd24ba402e77165415f87056d33b214f77970455b377106dca107efeb720781ee57671891a1c8b29256be129be391fa539a6dafb5acdee1099df6dca79da807b38dd116df76a4d8fbbc951f17519be26304e7e03f3c83af8aaa5d5a5e31d8bb7b11287e6fa03ca865416853d94a3df2c9a8399b766d582103845c3b3797d2bde9fbc92baad8fdcb3d072800a9f2804b150188a6b1713e377c701ce0cd0c86ab86b396f4d2575620c663d9b7e8c95832d0b28a29633798f8b0b751f520d3691b04b6f21226a96069e48c331d163ee2105bfb63912fa98d4188bd24b4c54992351d328c39c57c75ec331df0276743e9fe52750e576b9a1319ff38824ffabaf0901d32cf011bcd1c3d025d06eb4775b24b23e699586a867716229ef2a4e0058732fb10d4a20a929eab9f48f9e3c220f156fca9a42be807e3a8cd53e4c7ce929ffde6761b048b3e8c4bc0dd983992a26f75ad673a7cab953fb4365771e624274379f9bcaacddf436fc9dae112f4f252a7eac933d766c7716855dd3ab008a49e6cffc9576729db7b3a8d6928e9628328231d151d614f686a797919338111e0252ffd2f1ff2bf5ccb7ef219552ac7a413e534ee037c6fa00ac6a2c20229cd5c81276f700d3b9f7af6228e571d391bc1fb13a2f16ff00468514389d5bf7205b8946daf4ac1778e267287ad5a78deb6a4d1dc62a691e4a807eb35ba7da756d2780ba76380d9967658bb432a2e0d87847387ec3f3a767002b7f0078eb14ee8feed3088c7cab2a4c6566bde9113d1d4ff974c2cdb9ff317fb86d271c14df719bc6c04f402b2ea98af9347c998f4caab9eb30b490ca5286a320867e47084570ad439be833f47f90b3d631dfb8114be5cde1ad63c3bf36a010505504a4b6ae1d0fd67f9d49641304b69078f24faab9b4d4ceb3599c09937071dd5ba5d442a5f0490002c30d6abe73441c60d437536af5299627c07930216ff31fbe07a089d76b089f97dcf61451781eb10dcb32ce42a5603189973f118a9a8b20dd2182612b35871b394b9fd9eba9a9add661c8190febf1bf838df82b0d368280065a9041d7759acc32a7d62163d85b6ff5d0bfb1e565f3f9bd03d78160a02f9aef1b4f3e17f02a857dda2f1f52d8997ab185aec1ae46cfe3ccf41e4c32e44d470e3ac664e37869a482a824a0e2b2cdd77fbbfa5de3e1e81ff56024677c1410449a761c9d17619a559a39b673e752986ff25a5e7cd8b435149eb0aa725e15175c4da341d1f06623de3a109374cc70c0c98a4fce99463c5931e584fd13fe55b3470eb37f24e8f621bde8b337f36b53b925b62051d21c29997336fa1de3de663e0d706c17acca79677c1a6f5014face4df756aa954e9b06aa3dca16798941d7d485d783290669533fba284983d4980d3842d4860824efc16dc9ad6b2cf1b000a030457df36b4120fa04028360fa1a392c5f47e58c25a483ffdc0a85f6c6592ad25c1c600cefe4824bbc0c340ae8551aa7df0d07f0b111b9ac4a36b809460e532f1e8efa230ab8cea2492aa7f8ca63abc6b46f89007df2dee2a6c248c29dcf2d333c8acb63c4c3510978ca7ba83200e389abf8dd18fd658fa8c2d45e2d6deaf77e17607b35636b6893082d2b3d45ac9a8a7e0a26c47eff406f98a107da92b64c392df0a6549e0ad1f3197125b02bbd894ef7c3a842bbcf92e15272898d9a8a1e844fa40d28a752b97d356b6aee9d74923c7fdd288d6382986b14efde2e96b51b2ea30c0b61436baadd19db037a9c8e08685d78273dd2bb3e11e303b443274509da83e8b8c8be2538d1708caac5db64f41d11048cd15e607ac721c48bb3826a1d58da56e87f5390ad2397b8f09a483e67ebe0274f2e4f9554b3c5534b458582e04b85008f691bf6a8c4d585d681f4efb7f10570570332e6aa8e35d722c305f0e63bdd0effcad7e38dab155ea87a26761a9d291d4a8d593ac75ab67ca1fd08e2207e68b7381b30ed9005269cf37d704674622fad1f4ce3ba2b4c600c3b676029e9d188a8d08bb7f758f4f230c5b8bd458413a8e9eaf4487ff2e1f889a59d3c4fddcde96dd0355a2d59f87b9c28fd74ed127e76aa027a015b87de1bf605ed4cb29bee8a231f0a7dd9a66695258352eb0775e4b8e2ca94a77fb4ecc2aed82778f2414f7700f74c26d8ecfc0aa64bb7be7b0e3f90b43a8ae4e7cebc087aaa8ea431a2f18d7d2c299bd7c7f6d1912490be50a804af74fc370a6a4aeaedae2289ec1002fdb37340458792c50edc0ed72fdd82bb23200b08b458ed64626240a2c831f59fe8467363b25453d0ae90b9381ced3f1d3573b28b256f6be369b5ab456ec3414876a9991a2a71db768366ea878a52238a0f8b70a7f92cfa99da4bdea6497bd37582f129c019f5b26c746717f4f5cb1bf09e4111b95e8e86ea0fb74b035377ea78c0ae745dafc799897bbc7421e79e1fc979b6b686cdaae9c62cccd9b996d86c5b39eef1df75d569fe8ffb37235b89e73d09f8a0e78df9ce393f07acf01619374093d56f3768af7972de6de85ef3d4f24149132f53a31bb9ca3f6e8423e631dcff5dd39dece1dd9e54f41763694803367e12deb60a8fac3432dce6bfbfbb45d98f4b10aad63fa2b54764b5f118cf17e4886075eaa12300c5a4b81280520e74e75d3f1bd8d3b6d981bed4ff1d068e3d3602a0ecc344c222cf2b02731c7cca86fa87e79c5c31eec61c8f7b12a6359d9d3b2d38ade8b769cfc69f3bd6a2300d0d426f0f000ad9c3efc5bf7f6012609b2923c47af3482cf2f0a030924b99dafae6b147cdad30dc91420c31ff5e5fb529d99277a1ddf901a6ea9ee44fe85e612ac9ce9e3220fec1c7bb4aeefcc9c04739ed4cde8ad70e3ec32000b66e9c36ae938563c8c5b2d93c9f8552b33b7fdd55bd6b9d4af98dc0537fd8a26b7b5803858b43b2c02ab6e364add065b245db978198c3444b75f7e617fe4d657c60ea2d40a5fa9f24f835fdb08859429ad8027a02aac2bbce383ddb4f8daf57920a038e1881b169340f716d36c80bedb1bf5e5e4800897316fdf34653b89e983db75fa9abaacfd037902e18ece0a9eac5fc93a7bd2b1b2f0f376c88934c4901076d19453011ada038e0abfe3e4efc84c56b4abdd21d9fb8758f1a18cf22a1543821b012ea9280c91c1afe670a7156d15ed14b83b6c82a03f6bb8038664bfd2565e79aa3be887b2209213af823838251124b3a7fd8c35e43ce19a2d8f7feb255253acb6009c30d52dfdfa4971824759c752d76913c69af760209d77c27bb266f527a768330cda7e45df96ddb702b19621e27ef89fb13ab1d2c86e13db11f9796928f2f853e6a052e8e3a77d75bed684be567a81d78da9d27a91da92d7bba469281a27502801bd2035f93a77533eef72235fff26281fd83f2a2472ec5104281c62d2043824479ed88d0fa8bd0383156f39c452ab8e1aee14df3064628989914dcc7acac5352f3049a7a1fe242b835f18065bd5e320448063600aecb5d114f04a13cd7fbaccc46f4fcf78167edcf98b45039273ec6a117c89379f8de33392d4071e3d1fdb84e3db2b1eb8317b2272c687c90789dd0315bc3985aa709f251e34a119cf8fd6a7cd605bd52de248cace7b471d4854d2c0b32f6d1cdd317d18a18d4b62eb0b7518c131ae733bf4ab40d69b7586eb0da3bad0a501f963be27f825ab9fda2067640b4b4d2394f5d75b2f57c5a76835c5f66cf1ba6d3b95538a69a7bfe1eaa81ae46a0fe3e55ed6bf6e5bd010cf9ce018fcabffbb92cfced63fae51c81629d9e0377edc5a0441d592a9372e0b8341bf8b7c51b17ce290ec8d093de8596c36476727b6edc3e063638f3f6a0f1ebbfb4da16befe25bec2d2b7eb21c0679d839a793b76c3b5b13a35820c02252d3cb6609b3633bd45ba1beaead7cba66e20e21788c0da7160f7f0339811cb23e318166e7779aae3595cb1e9581baafe703d6fe9b9bdddf1eefbfc88f6a548315e681f8ce7b6cf880c9e7b4c6ce6e3bf4e3bfc9384a837ce9c0c02ecbc4a2252e0fa33877a346e19b62701a2c3f7a1000a8f2d40096488b4182c6930d12405f304bbdc48dc764f040308a042f2366da1b7c17fa15eb", @nested={0x4, 0x4}]}, @nested={0xc, 0x110, 0x0, 0x1, [@typed={0x8, 0x130, 0x0, 0x0, @uid}]}]}, @typed={0x4, 0x1e}]}, 0x121c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 8.465614816s ago: executing program 8 (id=2860): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="140000000301010300000000000000"], 0x14}}, 0x20020084) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000005f40)=ANY=[@ANYBLOB="14000000150a0103000000000000000004"], 0x14}, 0x1, 0x0, 0x0, 0x400c054}, 0x44004080) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @empty, 0x80ad}, 0x1c) r4 = socket(0x400000000010, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000006, 0x12, r4, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) sendfile(r4, r6, 0x0, 0x9cba) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) ioctl$sock_proto_private(r7, 0x89e0, &(0x7f0000001080)) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@loopback, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000, 0x8000}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4d2, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x1, 0xb7, 0x5, 0xfffffffe}}, 0xe8) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x1c) 5.752505069s ago: executing program 44 (id=2807): socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r4, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @remote}, &(0x7f00000000c0)=0xc) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x18, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r9, &(0x7f0000000580)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000180)={'geneve0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x1000003, 0x80, 0xe698, 0xf37, 0x6, 0x400, 0x4, 0x94a, 0xd12, 0x9, 0x13b6, 0x714, 0x1, 0x2, 0x8, 0x0, 0x40, 0x4, 0x800, 0x2, 0x81}}) 2.630423502s ago: executing program 6 (id=2897): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d, 0x2000}, 0x20) 2.377732447s ago: executing program 7 (id=2900): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) unshare(0x26020480) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x8001, 0x2, 0x800, 0x0, 0x800010100000}, 0x0, &(0x7f00000000c0)={0x1c, 0x40002, 0x0, 0x0, 0x3ff, 0x200000000, 0x6ab}, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c0000003b15b1a9587f7895d227bfe8f3480edf8b604de0c33d7fa98b61d5b26480f6c9941a8aeffac9127ebb2b5a3989f433b930f9fe033e616715f7019201c7a597625f97fac27016aa5bed89f8997c6c64a43e7730e690f2cd1de8b630a057ef450c0b2e3879987ec4c98733849ef5d3e2d46391a47628724e0ef2121ef9a2d8c78297", @ANYRES16=0x0, @ANYBLOB="080029bd7000fddbdf250d000000080004000400000008000600070000001c000280080009003c140000080004000500000006000f00050000000c00038005000800030000000800050002000000340002800800080081000000080005000104000008000600f9ffffff0800070001010000080006000100000008000800010001001400038006000400ab00000008000300010000"], 0x9c}}, 0x40010) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000a80)={0x268, 0x0, 0x231, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "defb941edf4f33b0c50258863dad17f83b78ef69b4"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xb208}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfe}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x51}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7680000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2e2}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x29f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x226}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xaa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791028000000000069004c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80) r6 = socket$kcm(0x1e, 0x4, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000240)={0x2, [0x0, 0x0]}, &(0x7f0000000280)=0xc) write$cgroup_subtree(r6, &(0x7f00000001c0)=ANY=[], 0xfdef) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, r4, 0x1, 0x0, 0x0, {0x54}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80000001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) 2.377484693s ago: executing program 6 (id=2901): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000000)=0x4) getsockopt$inet6_int(r2, 0x29, 0xce, 0x0, &(0x7f00000007c0)=0xffffff78) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newchain={0x34, 0x64, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x9}, {0xfff1}, {0x0, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20844) 2.216081867s ago: executing program 6 (id=2902): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc99}, 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rxrpc_timer\x00', r0}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) socket$inet(0xa, 0x801, 0x84) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r3, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.025894867s ago: executing program 0 (id=2904): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x4000010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0xe, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a0102e8ffffff00000000020000000900010073797a30000000000900030073797a320000000020000000020a03"], 0xa0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) bind$alg(r6, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000040)={@val={0x0, 0x88f7}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0x8000, 0x8100, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x5865, @void}}}}}}}}, 0x32) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) r8 = socket$packet(0x11, 0x2, 0x300) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x336, '\x00', 0x0, 0x0}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r9}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$packet(r8, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="27738d50c7f5"}, 0x14) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000), 0x8) 1.550496454s ago: executing program 0 (id=2905): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="d800000043000701feffffff00000000017c000004004280b80001"], 0xd8}, 0x1, 0x0, 0x0, 0x4008811}, 0xc000) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4004c812}, 0x40014) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000004c0)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000500000000000014003500776c616e30000000000000000000000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x1, 0xe}, &(0x7f0000000240)=0x90) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r12, 0x40047451, &(0x7f0000000200)=0x400007) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000005c0)={r11, @in6={{0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}}, 0x84) sendmsg$nl_route(r6, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@bridge_getvlan={0x30, 0x72, 0x100, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4050) sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r9, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r13 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r13, 0x65, 0x8, 0xfffffffffffffffe, &(0x7f0000001280)=0x5a) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="c44c8647a1271c000000", @ANYRES16=r2, @ANYBLOB="00042cbd7000fedbdf251d00000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20004880) 1.290586458s ago: executing program 7 (id=2906): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x4000) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x2c, 0x19, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8004) (fail_nth: 7) 1.252122644s ago: executing program 6 (id=2907): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000b397c4e0000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r5, &(0x7f0000000200), 0x0, 0x840, &(0x7f0000000240)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', r4, 0x2f, 0x92, 0x1, 0xd092, 0x4, @private2, @dev={0xfe, 0x80, '\x00', 0xb}, 0x7, 0x7880, 0xc0000000, 0x7ff}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b0f, &(0x7f0000000040)={'virt_wifi0\x00', @multicast}) 1.12780454s ago: executing program 7 (id=2908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x4000) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x500, 0x4000000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="f000000000000000290000000b0000007e"], 0xf0}}], 0x2, 0x880) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$bt_hci(r2, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="2e000300010000", 0x7) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x488, 0x30, 0xffff, 0x3, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x4, 0xf, 0xfffffffe, 0x0, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000000, 0x52, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x2000000, 0xffffffff, 0x4, 0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3453, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14880, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaf46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x0, 0x4, 0x20000000, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x8, 0x0, 0xe36, 0x0, 0x0, 0x200, 0x0, 0xfffffffc, 0xfffffffc, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, 0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2}, 0x0, 0x3, 0x2}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x48844) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}, @TCA_EGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9a}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="e03f030025"], 0x33fe0) bind$alg(r4, &(0x7f0000000b00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvfrom$llc(r8, &(0x7f0000001a80)=""/4096, 0x1000, 0x1, &(0x7f00000000c0)={0x1a, 0x2, 0x4, 0xff, 0x9, 0x0, @multicast}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000280)="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", 0xfd}], 0x2}}], 0x1, 0xc001) socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r10, 0x0, 0x0) 1.009612256s ago: executing program 6 (id=2909): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0xb0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8, 0x20}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 869.389364ms ago: executing program 0 (id=2910): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000800000005"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r4, 0x25, 0x0, @val=@tcx}, 0x1c) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x18, r8, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x4000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r9 = socket(0x22, 0x2, 0x2) setsockopt$netrom_NETROM_T1(r9, 0x103, 0x1, &(0x7f0000000040)=0x9, 0x4) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000500)={0x44, r8, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, 'syz_tun\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x50) syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[], 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010080ffffff00000000010000000c000480040003000200000008000100020000000800020003"], 0x30}}, 0x20000000) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r10 = socket(0x2a, 0x2, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x1, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x8000}]}}]}, 0x60}}, 0x4000) r12 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000780)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf8, 0xfffffffc, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00'/12}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "00000000000000000000000200000000000000000000000000008879e66485201a0015ca837400000000000000000000001c0000000000"}, {0xe, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001700010327bd7002fadbdf2501000041"], 0x14}}, 0x4000000) 797.947778ms ago: executing program 6 (id=2911): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x8915, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9efffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x201, 0x70bd27, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0x8e, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x200440c5}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$sock(r4, &(0x7f00000007c0)={&(0x7f00000003c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000600)="3bd8d3139c355736406a9c86617e17a52e50be7827d0726d98737ff266619c62774063428376d7b59f2cef5a14c8db8a59e578e63f4ff2233fa6576523ce3280a3498eaf8a9f776e8fbb173677837a197c4628149ebd7be9c21fadb9d065cafd23d7d6ed46cf3616b083021b8446b4248749bf1cbcffe8098e41bc6975ff309445911580c268e7f8272a1b61d7b76eac552c0d", 0x93}, {&(0x7f0000000340)="6b36f756c797dd82c2edc91c784e075d3aa42c80a0b578b3b16b507f356288a2069800f4666d723160871b66b6b1ffc235285d98f31e9ab80a66", 0x3a}, {0xffffffffffffffff}, {0x0}], 0x4, &(0x7f0000000780)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x18}, 0x40840) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffe0}, {0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0xa, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {}, {0x10, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @remote}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24020000}, 0x44010) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'pim6reg1\x00', 0x2000}) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) close(0x4) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x2b}}}}, [""]}, 0x28}}, 0x48d1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 797.679612ms ago: executing program 7 (id=2912): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x4000010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0xe, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560284606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtaction={0xe0, 0x30, 0x20, 0x8, 0x0, {}, [{0xcc, 0x1, [@m_bpf={0xc8, 0x1f, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x4, 0x2, 0x7, 0x1}}]}, {0x86, 0x6, "345ced7dbd801de14b17ab32b781c7db03455f75d90a73db8ceab55f7b3f17754c6b14da64ab2f62a28ac26edd329fa8e542b4b14433f284e1f7a1af727f39d5e167fa8cebf8f71a5817362dac30fd3845266e4117e06a1c79b76ee960b1ee7d5b98e9dcf66d74d442bfa0148179365128458553569a3f6c0421c7a98baa855235be"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe0}}, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r6, &(0x7f00000001c0)={0x2c, 0x20}, 0x10) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) r7 = socket$packet(0x11, 0x2, 0x300) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="27738d50c7f5"}, 0x14) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000), 0x8) 545.071641ms ago: executing program 0 (id=2913): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x4, {0x2, 0x1df, 0x4}, 0xfe}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r3, &(0x7f0000000a40)=[{&(0x7f00000007c0)='T', 0x1}], 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x134, 0x6, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_USERDATA={0x18, 0x7, 0x1, 0x0, "ad94e78af1b9646325464783801d63923190fd66"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0xb4, 0x7, 0x1, 0x0, "549cb1c1b8cfa8e62ee66f696ebbf7eeb71ef9a4ed970c48ba6ad76b526f3bf7bff86717babe42a42ab95bf7f28e1febff2fc0d163f8030315cb63061b40dcd859d6430b4edcee6da3406832cd0fd8c57c30ab34b95f831fecff3f3a254a4078fe9de9513f7005957f9b1a4db5536bbb87d09b7fa4e6dba2d7e900f500342cc8a53af75227ab8c87d3ef4c314bccccc04bba0ec983eef812dd8f904f07df1e10bee62848472e3f509306c1ea6f3de382"}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "375fbf"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xd}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0x1e, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x1c0}}, 0x0) sendmsg$sock(r0, &(0x7f0000000200)={&(0x7f0000000000)=@vsock={0x28, 0x0, 0x2711}, 0x80, 0x0}, 0x8810) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x8, &(0x7f0000000240)=[{0xf000, 0x1, 0x9, 0x8}, {0x1e1, 0x2c, 0x90, 0x2}, {0xe, 0x7, 0x80, 0x1}, {0x40, 0x6, 0xf, 0x37}, {0x3, 0x1, 0x6d, 0x3}, {0xffff, 0xfb, 0x1, 0x1000}, {0x1, 0x3a, 0x81, 0xb00}, {0xfc01, 0x18, 0xaf, 0x5be}]}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x700, 0x2}, 0x50) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="d800000043000701feffffff00000000017c000004004280b80001"], 0xd8}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r5) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r12, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r13, r11, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x100000000}}, 0x30) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @val={@void, {0x8100, 0x5, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x30, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, @ipv4={'\x00', '\xff\xff', @broadcast}}}}}}}}, 0x0) r14 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r14, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x42, 0x4, 0x410, 0xffffffff, 0x2a8, 0x210, 0x2a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc5a, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x9, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x11, 0x1, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r8, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000029bd7000ffdbdf25060000000c000180060001000a000000080002000200000008000400050000080000000000000000280002000200000008000400ff0f000008000300030000000c00068008000600100100000800040006000000"], 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x80) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r15, @ANYBLOB="ff0100"/20, @ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="04ce40229c9f0a070ed420000004000000000000000000000000e9ffdeffffff000000000000bf6af7f94c497d7ba100002bff41de952d68af0f8f228b"], 0x50) 443.502129ms ago: executing program 7 (id=2914): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000480)={@fallback=r0, r0, 0x2f, 0x14}, 0x20) 310.043063ms ago: executing program 7 (id=2915): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) unshare(0x26020480) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x8001, 0x2, 0x800, 0x0, 0x800010100000}, 0x0, &(0x7f00000000c0)={0x1c, 0x40002, 0x0, 0x0, 0x3ff, 0x200000000, 0x6ab}, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c0000003b15b1a9587f7895d227bfe8f3480edf8b604de0c33d7fa98b61d5b26480f6c9941a8aeffac9127ebb2b5a3989f433b930f9fe033e616715f7019201c7a597625f97fac27016aa5bed89f8997c6c64a43e7730e690f2cd1de8b630a057ef450c0b2e3879987ec4c98733849ef5d3e2d46391a47628724e0ef2121ef9a2d8c78297", @ANYRES16=0x0, @ANYBLOB="080029bd7000fddbdf250d000000080004000400000008000600070000001c000280080009003c140000080004000500000006000f00050000000c00038005000800030000000800050002000000340002800800080081000000080005000104000008000600f9ffffff0800070001010000080006000100000008000800010001001400038006000400ab00000008000300010000"], 0x9c}}, 0x40010) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000a80)={0x268, 0x0, 0x231, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "defb941edf4f33b0c50258863dad17f83b78ef69b4"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xb208}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfe}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x51}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7680000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2e2}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x29f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x226}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791028000000000069004c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80) r6 = socket$kcm(0x1e, 0x4, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000240)={0x2, [0x0, 0x0]}, &(0x7f0000000280)=0xc) write$cgroup_subtree(r6, &(0x7f00000001c0)=ANY=[], 0xfdef) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, r4, 0x1, 0x0, 0x0, {0x54}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80000001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) 146.869068ms ago: executing program 0 (id=2916): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f0000000400000004000000a2d5b610163d2bbb96cc7755b449cf70c17b16acb0aeb3991717ea65cbd5b4b7e1ecd479a8cb17bee9a5f94a6bed4f0d5864635e00d9d6cedb49f797b4ad390c8df1b182e8a3a7ee81982f1efb4c5e620dfe4bc78e70d3e9eb85e4d0228ade4047453183bbe27c2f3c5fd32409b9e45e03e8ed7ae87c056928e4117b08968a9b33c4e422b11d20fdbda06bb3f1e82f169a16c0d1ea7376a0c53462"], 0x50) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0x48, 0x1e, 0x109, 0x102, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x2000c000) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000880), &(0x7f0000000500)=r0, 0xa2}, 0x20) 0s ago: executing program 0 (id=2917): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000038010000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000003000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 83] netlink: 'syz.9.2300': attribute type 11 has an invalid length. [ 490.070597][T13748] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.077783][T13748] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.088939][T13748] bridge_slave_0: entered allmulticast mode [ 490.122722][T13748] bridge_slave_0: entered promiscuous mode [ 490.132618][T13748] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.140710][T13748] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.148043][T13748] bridge_slave_1: entered allmulticast mode [ 490.156238][T13748] bridge_slave_1: entered promiscuous mode [ 490.188251][T13785] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2301'. [ 490.197461][T13785] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2301'. [ 490.206802][T13785] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2301'. [ 490.216153][T13785] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2301'. [ 490.237445][T13748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.256970][T13748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.361397][T13748] team0: Port device team_slave_0 added [ 490.378184][T13748] team0: Port device team_slave_1 added [ 490.473026][T13748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.489779][ T5825] Bluetooth: hci9: command tx timeout [ 490.490175][T13748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.531374][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2304'. [ 490.543012][T13748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.561067][T13793] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2305'. [ 490.568341][T13748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.582145][T13748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.612391][T13748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.740802][T13748] hsr_slave_0: entered promiscuous mode [ 490.747926][T13748] hsr_slave_1: entered promiscuous mode [ 490.756266][T13748] debugfs: 'hsr0' already exists in 'hsr' [ 490.765871][T13748] Cannot create hsr debugfs directory [ 490.855428][T13804] sch_fq: defrate 128 ignored. [ 490.963091][T13806] bridge1: entered promiscuous mode [ 491.182715][T13748] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.210244][ T5825] Bluetooth: hci10: command tx timeout [ 491.262588][T13748] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.329076][T13748] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.358307][T13812] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 491.411973][T13748] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.532184][T13748] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 491.544627][T13748] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 491.555876][T13748] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 491.566506][T13748] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 491.666185][T13748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.688574][T13748] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.712583][ T6298] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.719781][ T6298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.729490][ T6298] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.736584][ T6298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.903890][T13810] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 491.942141][T13748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.046324][T13748] veth0_vlan: entered promiscuous mode [ 492.068907][T13748] veth1_vlan: entered promiscuous mode [ 492.126572][T13748] veth0_macvtap: entered promiscuous mode [ 492.134028][T13835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2316'. [ 492.164525][T13748] veth1_macvtap: entered promiscuous mode [ 492.220673][T13748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.248449][T13748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.268205][ T147] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.306655][ T147] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.338760][T13841] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2320'. [ 492.340529][ T147] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.368977][ T147] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.516532][ T6298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.534257][ T6298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.570402][ T5825] Bluetooth: hci9: command tx timeout [ 492.578310][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.588200][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.832050][T13856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2325'. [ 492.918551][T13859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2327'. [ 492.928982][T13859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2327'. [ 493.290208][ T5825] Bluetooth: hci10: command tx timeout [ 493.568550][T13851] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 493.649236][T13877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2332'. [ 493.991292][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2338'. [ 494.005723][T13890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2338'. [ 494.092664][T13893] syz.3.2339: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 494.136170][T13893] CPU: 1 UID: 0 PID: 13893 Comm: syz.3.2339 Not tainted syzkaller #0 PREEMPT(full) [ 494.136195][T13893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 494.136207][T13893] Call Trace: [ 494.136215][T13893] [ 494.136223][T13893] dump_stack_lvl+0x189/0x250 [ 494.136257][T13893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.136284][T13893] ? __pfx__printk+0x10/0x10 [ 494.136305][T13893] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 494.136332][T13893] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 494.136361][T13893] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 494.136390][T13893] warn_alloc+0x214/0x310 [ 494.136425][T13893] ? __pfx_warn_alloc+0x10/0x10 [ 494.136464][T13893] ? __get_vm_area_node+0x28f/0x300 [ 494.136499][T13893] ? hash_netportnet_create+0x354/0xf90 [ 494.136530][T13893] __vmalloc_node_range_noprof+0x690/0x12d0 [ 494.136585][T13893] ? alloc_pages_mpol+0x3cd/0x4a0 [ 494.136607][T13893] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 494.136640][T13893] ? rcu_is_watching+0x15/0xb0 [ 494.136663][T13893] ? hash_netportnet_create+0x354/0xf90 [ 494.136690][T13893] __kvmalloc_node_noprof+0x674/0x910 [ 494.136724][T13893] ? hash_netportnet_create+0x354/0xf90 [ 494.136748][T13893] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 494.136775][T13893] ? hash_netportnet_create+0x2fa/0xf90 [ 494.136807][T13893] hash_netportnet_create+0x354/0xf90 [ 494.136841][T13893] ? __nla_parse+0x40/0x60 [ 494.136863][T13893] ? __pfx_hash_netportnet_create+0x10/0x10 [ 494.136891][T13893] ip_set_create+0xa97/0x1940 [ 494.136911][T13893] ? ip_set_create+0x4a2/0x1940 [ 494.136943][T13893] ? __pfx_ip_set_create+0x10/0x10 [ 494.137002][T13893] nfnetlink_rcv_msg+0xb4d/0x1130 [ 494.137024][T13893] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 494.137063][T13893] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 494.137081][T13893] ? kmem_cache_free+0x19b/0x690 [ 494.137160][T13893] netlink_rcv_skb+0x208/0x470 [ 494.137184][T13893] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 494.137206][T13893] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 494.137240][T13893] ? bpf_lsm_capable+0x9/0x20 [ 494.137264][T13893] ? security_capable+0x7e/0x2e0 [ 494.137298][T13893] nfnetlink_rcv+0x282/0x2590 [ 494.137319][T13893] ? __dev_queue_xmit+0x284/0x3740 [ 494.137345][T13893] ? __dev_queue_xmit+0x1bfb/0x3740 [ 494.137387][T13893] ? __dev_queue_xmit+0x284/0x3740 [ 494.137424][T13893] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 494.137462][T13893] ? ref_tracker_free+0x63a/0x7d0 [ 494.137482][T13893] ? __asan_memcpy+0x40/0x70 [ 494.137514][T13893] ? __pfx_ref_tracker_free+0x10/0x10 [ 494.137551][T13893] ? skb_clone+0x246/0x3a0 [ 494.137579][T13893] ? __netlink_deliver_tap+0x807/0x850 [ 494.137601][T13893] ? netlink_deliver_tap+0x2e/0x1b0 [ 494.137630][T13893] ? netlink_deliver_tap+0x2e/0x1b0 [ 494.137660][T13893] netlink_unicast+0x82f/0x9e0 [ 494.137690][T13893] ? __pfx_netlink_unicast+0x10/0x10 [ 494.137712][T13893] ? netlink_sendmsg+0x642/0xb30 [ 494.137733][T13893] ? skb_put+0x11b/0x210 [ 494.137758][T13893] netlink_sendmsg+0x805/0xb30 [ 494.137790][T13893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.137817][T13893] ? aa_sock_msg_perm+0xf1/0x1d0 [ 494.137848][T13893] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.137866][T13893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.137890][T13893] __sock_sendmsg+0x21c/0x270 [ 494.137922][T13893] ____sys_sendmsg+0x505/0x830 [ 494.137953][T13893] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.137987][T13893] ? import_iovec+0x74/0xa0 [ 494.138016][T13893] ___sys_sendmsg+0x21f/0x2a0 [ 494.138042][T13893] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.138103][T13893] ? __fget_files+0x2a/0x420 [ 494.138121][T13893] ? __fget_files+0x3a0/0x420 [ 494.138152][T13893] __x64_sys_sendmsg+0x19b/0x260 [ 494.138178][T13893] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 494.138221][T13893] ? do_syscall_64+0xbe/0xfa0 [ 494.138246][T13893] do_syscall_64+0xfa/0xfa0 [ 494.138264][T13893] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.138286][T13893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.138304][T13893] ? clear_bhb_loop+0x60/0xb0 [ 494.138328][T13893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.138347][T13893] RIP: 0033:0x7f7d7618f749 [ 494.138364][T13893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.138381][T13893] RSP: 002b:00007f7d77031038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.138401][T13893] RAX: ffffffffffffffda RBX: 00007f7d763e6090 RCX: 00007f7d7618f749 [ 494.138415][T13893] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 494.138428][T13893] RBP: 00007f7d76213f91 R08: 0000000000000000 R09: 0000000000000000 [ 494.138440][T13893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.138452][T13893] R13: 00007f7d763e6128 R14: 00007f7d763e6090 R15: 00007ffe173c09e8 [ 494.138486][T13893] [ 494.138616][T13893] Mem-Info: [ 494.433127][ T5835] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 494.516708][T13893] active_anon:8702 inactive_anon:0 isolated_anon:0 [ 494.516708][T13893] active_file:3754 inactive_file:40051 isolated_file:0 [ 494.516708][T13893] unevictable:768 dirty:211 writeback:0 [ 494.516708][T13893] slab_reclaimable:12990 slab_unreclaimable:215560 [ 494.516708][T13893] mapped:73768 shmem:1381 pagetables:1680 [ 494.516708][T13893] sec_pagetables:0 bounce:0 [ 494.516708][T13893] kernel_misc_reclaimable:0 [ 494.516708][T13893] free:1107723 free_pcp:26853 free_cma:0 [ 494.516780][T13893] Node 0 active_anon:34808kB inactive_anon:0kB active_file:15016kB inactive_file:160008kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:295072kB dirty:840kB writeback:0kB shmem:3988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16864kB pagetables:6584kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 494.516834][T13893] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 494.516884][T13893] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 494.537530][ T5835] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 494.566774][T13893] lowmem_reserve[]: [ 494.582387][ T5835] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 494.641839][T13893] 0 [ 494.693727][ T5835] Bluetooth: hci9: command tx timeout [ 494.739558][T13893] 2504 [ 494.823686][ T5835] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 494.825309][T13893] 2505 2505 2505 [ 494.838201][T13893] Node 0 DMA32 free:518320kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34908kB inactive_anon:0kB active_file:15016kB inactive_file:160008kB unevictable:1536kB writepending:840kB zspages:0kB present:3129332kB managed:2565100kB mlocked:0kB bounce:0kB free_pcp:94928kB local_pcp:17908kB free_cma:0kB [ 494.839231][ T5835] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 494.881663][T13893] lowmem_reserve[]: 0 0 0 0 0 [ 494.886592][T13893] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 494.959466][T13893] lowmem_reserve[]: 0 0 0 0 0 [ 494.969731][T13893] Node 1 Normal free:3897212kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11424kB local_pcp:4096kB free_cma:0kB [ 495.001724][T13903] wg1 speed is unknown, defaulting to 1000 [ 495.002865][T13893] lowmem_reserve[]: 0 0 0 0 0 [ 495.017019][T13893] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 495.030651][T13893] Node 0 DMA32: 3*4kB (ME) 2*8kB (ME) 2*16kB (UM) 67*32kB (UM) 28*64kB (UM) 17*128kB (UM) 7*256kB (UME) 5*512kB (ME) 2*1024kB (ME) 3*2048kB (UME) 122*4096kB (M) = 518428kB [ 495.048102][T13893] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 495.061558][T13893] Node 1 Normal: 185*4kB (UME) 57*8kB (UME) 39*16kB (UME) 187*32kB (UME) 56*64kB (UME) 12*128kB (UME) 5*256kB (UM) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3897212kB [ 495.080411][T13893] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 495.090101][T13893] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 495.099655][T13893] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 495.139439][T13893] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 495.148776][T13893] 45182 total pagecache pages [ 495.175238][T13893] 0 pages in swap cache [ 495.189781][T13893] Free swap = 124996kB [ 495.193964][T13893] Total swap = 124996kB [ 495.204797][T13893] 2097051 pages RAM [ 495.218832][T13893] 0 pages HighMem/MovableOnly [ 495.221896][T13910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2343'. [ 495.225112][T13893] 424134 pages reserved [ 495.249552][T13893] 0 pages cma reserved [ 495.372617][ T5825] Bluetooth: hci10: command tx timeout [ 495.443159][T13921] netlink: 'syz.3.2346': attribute type 8 has an invalid length. [ 495.453225][T13921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2346'. [ 495.517206][T13903] chnl_net:caif_netlink_parms(): no params data found [ 495.598665][T13923] netlink: 'syz.9.2347': attribute type 4 has an invalid length. [ 495.650603][T13928] netlink: 'syz.9.2347': attribute type 4 has an invalid length. [ 495.789118][T13903] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.807458][T13903] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.827978][T13903] bridge_slave_0: entered allmulticast mode [ 495.842986][T13903] bridge_slave_0: entered promiscuous mode [ 495.866118][T13903] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.876903][T13903] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.884905][T13903] bridge_slave_1: entered allmulticast mode [ 495.893627][T13903] bridge_slave_1: entered promiscuous mode [ 496.047047][T13903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.074446][T13903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.195928][T13903] team0: Port device team_slave_0 added [ 496.204046][T13944] netlink: 'syz.9.2352': attribute type 3 has an invalid length. [ 496.206799][T13903] team0: Port device team_slave_1 added [ 496.282467][T13903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.292038][T13903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.320252][T13903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.351722][T13903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.363620][T13903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.390618][T13903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.558201][T13903] hsr_slave_0: entered promiscuous mode [ 496.575980][T13903] hsr_slave_1: entered promiscuous mode [ 496.584733][T13903] debugfs: 'hsr0' already exists in 'hsr' [ 496.591462][T13903] Cannot create hsr debugfs directory [ 496.971170][ T5825] Bluetooth: hci11: command tx timeout [ 497.381299][T13966] xfrm1: entered allmulticast mode [ 497.456930][ T5825] Bluetooth: hci10: command tx timeout [ 497.584507][T13903] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.644501][T13971] __nla_validate_parse: 2 callbacks suppressed [ 497.644521][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2360'. [ 497.688080][T13971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2360'. [ 497.892306][T13903] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.995338][T13903] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.086238][T13903] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.238929][ T5835] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 498.253196][ T5835] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 498.274062][ T5835] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 498.300873][ T5835] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 498.301457][T13982] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2364'. [ 498.332423][ T5835] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 498.467239][T13903] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 498.523289][T13903] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 498.557636][T13979] wg1 speed is unknown, defaulting to 1000 [ 498.565376][T13903] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 498.608803][T13903] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 498.977948][T13999] tipc: Started in network mode [ 498.983592][T13999] tipc: Node identity 2e017808f86c, cluster identity 4711 [ 498.991105][T13999] tipc: Enabled bearer , priority 0 [ 499.050019][ T5825] Bluetooth: hci11: command tx timeout [ 499.073155][T14000] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2367'. [ 499.163909][T13999] syzkaller0: entered promiscuous mode [ 499.170854][T13999] syzkaller0: entered allmulticast mode [ 499.195411][T13999] tipc: Resetting bearer [ 499.271448][T13998] tipc: Resetting bearer [ 499.420394][T14008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2370'. [ 499.430809][T14008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2370'. [ 499.754185][T14016] netlink: 'syz.1.2374': attribute type 8 has an invalid length. [ 499.762361][T14016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2374'. [ 500.422270][ T5825] Bluetooth: hci12: command tx timeout [ 501.131807][ T5825] Bluetooth: hci11: command tx timeout [ 501.338113][T13998] tipc: Disabling bearer [ 501.353305][T14016] bond0: entered promiscuous mode [ 501.360080][T14016] bond_slave_0: entered promiscuous mode [ 501.365904][T14016] bond_slave_1: entered promiscuous mode [ 501.375021][T14016] geneve0: entered promiscuous mode [ 501.385210][T14016] team_slave_0: entered promiscuous mode [ 501.391080][T14016] team_slave_0: left promiscuous mode [ 501.397645][T14016] bond0: left promiscuous mode [ 501.402584][T14016] bond_slave_0: left promiscuous mode [ 501.408339][T14016] bond_slave_1: left promiscuous mode [ 501.416546][T14016] geneve0: left promiscuous mode [ 501.442797][ T9802] tipc: Node number set to 3597498376 [ 501.462717][T13979] chnl_net:caif_netlink_parms(): no params data found [ 501.556356][T14021] wg1 speed is unknown, defaulting to 1000 [ 501.620892][T14029] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2378'. [ 501.621426][T14028] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2379'. [ 501.660667][T14028] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2379'. [ 501.778643][T13903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.916257][T13979] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.924444][T13979] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.942441][T13979] bridge_slave_0: entered allmulticast mode [ 501.954929][T13979] bridge_slave_0: entered promiscuous mode [ 502.001752][T14040] xt_CT: No such helper "snmp" [ 502.007909][T13903] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.022197][T13979] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.033106][T13979] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.041601][T13979] bridge_slave_1: entered allmulticast mode [ 502.050976][T13979] bridge_slave_1: entered promiscuous mode [ 502.203198][T13979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.243892][T13979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.256618][T14045] netlink: 'syz.1.2383': attribute type 1 has an invalid length. [ 502.273729][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.280928][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.351048][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.358218][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.417179][T14055] netlink: 'syz.9.2387': attribute type 8 has an invalid length. [ 502.426184][T14052] tc_dump_action: action bad kind [ 502.443150][T14055] bond0: entered promiscuous mode [ 502.448307][T14055] bond_slave_0: entered promiscuous mode [ 502.455027][T14055] bond_slave_1: entered promiscuous mode [ 502.464606][T14055] geneve0: entered promiscuous mode [ 502.472281][T14055] team_slave_0: entered promiscuous mode [ 502.478118][T14055] team_slave_0: left promiscuous mode [ 502.488098][T14055] bond0: left promiscuous mode [ 502.494362][T14055] bond_slave_0: left promiscuous mode [ 502.501580][ T5825] Bluetooth: hci12: command tx timeout [ 502.502726][T14055] bond_slave_1: left promiscuous mode [ 502.515458][T14055] geneve0: left promiscuous mode [ 502.530533][T13979] team0: Port device team_slave_0 added [ 502.540385][T13979] team0: Port device team_slave_1 added [ 502.644005][T13979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.669804][T13979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.702726][T13979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.717064][T13979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.724729][T13979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.792880][T13979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.918633][T13979] hsr_slave_0: entered promiscuous mode [ 502.927476][T13979] hsr_slave_1: entered promiscuous mode [ 502.937796][T13979] debugfs: 'hsr0' already exists in 'hsr' [ 502.944796][T13979] Cannot create hsr debugfs directory [ 502.946848][T14069] xt_CT: No such helper "snmp" [ 502.977504][T14072] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 503.212997][ T5825] Bluetooth: hci11: command tx timeout [ 503.464554][T14076] wg1 speed is unknown, defaulting to 1000 [ 503.644646][T13903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.109607][T14086] wg1 speed is unknown, defaulting to 1000 [ 504.196232][T14086] wg1 speed is unknown, defaulting to 1000 [ 504.254077][T13903] veth0_vlan: entered promiscuous mode [ 504.263572][T14086] wg1 speed is unknown, defaulting to 1000 [ 504.352840][T14086] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 504.438049][T14086] wg1 speed is unknown, defaulting to 1000 [ 504.451394][T13903] veth1_vlan: entered promiscuous mode [ 504.461818][T14086] wg1 speed is unknown, defaulting to 1000 [ 504.472972][T13979] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 504.488884][T14086] wg1 speed is unknown, defaulting to 1000 [ 504.505314][T13979] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 504.538854][T14086] wg1 speed is unknown, defaulting to 1000 [ 504.556857][T14086] wg1 speed is unknown, defaulting to 1000 [ 504.563086][T13979] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 504.570238][ T5825] Bluetooth: hci12: command tx timeout [ 504.592452][T14086] wg1 speed is unknown, defaulting to 1000 [ 504.600401][T13903] veth0_macvtap: entered promiscuous mode [ 504.607900][T13979] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 504.623576][T14086] wg1 speed is unknown, defaulting to 1000 [ 504.636344][T14086] wg1 speed is unknown, defaulting to 1000 [ 504.638436][T13903] veth1_macvtap: entered promiscuous mode [ 504.658266][T14086] wg1 speed is unknown, defaulting to 1000 [ 504.674871][T14086] wg1 speed is unknown, defaulting to 1000 [ 504.721121][T13903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.728459][T14086] wg1 speed is unknown, defaulting to 1000 [ 504.749324][T14086] wg1 speed is unknown, defaulting to 1000 [ 504.784185][T14097] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.807610][T13903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.826620][T14086] wg1 speed is unknown, defaulting to 1000 [ 504.868517][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.877801][T14086] wg1 speed is unknown, defaulting to 1000 [ 504.883700][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.883804][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.883895][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.927953][T14097] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.964706][T14086] wg1 speed is unknown, defaulting to 1000 [ 504.978346][T14086] wg1 speed is unknown, defaulting to 1000 [ 505.005000][T14086] wg1 speed is unknown, defaulting to 1000 [ 505.045039][T14097] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.065394][T14086] wg1 speed is unknown, defaulting to 1000 [ 505.089118][T14086] wg1 speed is unknown, defaulting to 1000 [ 505.104097][T14086] wg1 speed is unknown, defaulting to 1000 [ 505.120666][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.134420][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.163991][T14097] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.182876][T14086] wg1 speed is unknown, defaulting to 1000 [ 505.203032][T14086] wg1 speed is unknown, defaulting to 1000 [ 505.233268][T14086] wg1 speed is unknown, defaulting to 1000 [ 505.253687][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.255566][T14086] wg1 speed is unknown, defaulting to 1000 [ 505.264226][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.286355][T13979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.297155][T14086] wg1 speed is unknown, defaulting to 1000 [ 505.312446][T13979] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.335403][T14086] wg1 speed is unknown, defaulting to 1000 [ 505.343358][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.350565][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.364191][T14086] wg1 speed is unknown, defaulting to 1000 [ 505.374671][T14086] wg1 speed is unknown, defaulting to 1000 [ 505.388605][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.395835][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.407956][T14086] wg1 speed is unknown, defaulting to 1000 [ 505.458325][T14086] wg1 speed is unknown, defaulting to 1000 [ 505.482980][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.491590][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.500398][T14086] wg1 speed is unknown, defaulting to 1000 [ 505.506355][T14102] __nla_validate_parse: 2 callbacks suppressed [ 505.506369][T14102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2337'. [ 505.538179][T14086] wg1 speed is unknown, defaulting to 1000 [ 505.572849][ T147] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.584708][T14086] wg1 speed is unknown, defaulting to 1000 [ 505.624239][T14086] wg1 speed is unknown, defaulting to 1000 [ 505.625187][ T147] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.648331][T14086] wg1 speed is unknown, defaulting to 1000 [ 505.678588][T14086] wg1 speed is unknown, defaulting to 1000 [ 505.682463][T14104] tipc: Started in network mode [ 505.707182][T14104] tipc: Node identity e2d6fd3b881a, cluster identity 4711 [ 505.726679][T14104] tipc: Enabled bearer , priority 0 [ 505.744783][T14105] syzkaller0: entered promiscuous mode [ 505.751356][T14105] syzkaller0: entered allmulticast mode [ 505.833553][T14105] tipc: Resetting bearer [ 505.898743][T14105] tipc: Disabling bearer [ 505.917518][T14113] netlink: 'syz.9.2398': attribute type 8 has an invalid length. [ 505.926026][T14113] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2398'. [ 505.954809][T14113] bond0: entered promiscuous mode [ 505.960123][T14113] bond_slave_0: entered promiscuous mode [ 505.972061][T14113] bond_slave_1: entered promiscuous mode [ 505.990513][T14113] geneve0: entered promiscuous mode [ 506.038681][T14113] team_slave_0: entered promiscuous mode [ 506.046020][T14113] team_slave_0: left promiscuous mode [ 506.055150][T14113] bond0: left promiscuous mode [ 506.061734][T14113] bond_slave_0: left promiscuous mode [ 506.071507][T14113] bond_slave_1: left promiscuous mode [ 506.080415][T14113] geneve0: left promiscuous mode [ 506.125772][T14121] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2401'. [ 506.192527][T13979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.314969][T13979] veth0_vlan: entered promiscuous mode [ 506.331268][T13979] veth1_vlan: entered promiscuous mode [ 506.364199][T14125] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2403'. [ 506.378308][T14130] siw: device registration error -23 [ 506.413592][T13979] veth0_macvtap: entered promiscuous mode [ 506.439043][T13979] veth1_macvtap: entered promiscuous mode [ 506.517513][T13979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.561385][T13979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.609008][ T6298] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.621218][T14132] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2405'. [ 506.631438][ T6298] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.640909][ T6298] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.660065][ T5825] Bluetooth: hci12: command tx timeout [ 506.674669][ T6298] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.870237][T14137] geneve2: entered promiscuous mode [ 506.893150][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.908053][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.950420][ T5825] block nbd3: Receive control failed (result -32) [ 507.036142][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.048132][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.277784][T14143] pim6reg1: entered promiscuous mode [ 507.284998][T14143] pim6reg1: entered allmulticast mode [ 507.411055][T14155] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2412'. [ 507.556232][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2414'. [ 507.597048][T14159] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2415'. [ 507.658037][T14161] xt_CT: No such helper "snmp" [ 507.927161][T14178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2420'. [ 507.967248][T14178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2420'. [ 507.998952][T14178] team0: entered promiscuous mode [ 508.026594][T14178] team_slave_0: entered promiscuous mode [ 508.039589][T14178] team_slave_1: entered promiscuous mode [ 508.062665][T14178] ip6gretap0: entered promiscuous mode [ 508.090988][T14178] debugfs: 'hsr1' already exists in 'hsr' [ 508.097344][T14178] Cannot create hsr debugfs directory [ 508.362388][T14190] wg1 speed is unknown, defaulting to 1000 [ 508.370586][T14190] wg1 speed is unknown, defaulting to 1000 [ 509.087385][T14224] netlink: zone id is out of range [ 509.104244][T14224] netlink: zone id is out of range [ 509.122966][T14224] netlink: zone id is out of range [ 509.128106][T14224] netlink: zone id is out of range [ 509.135870][T14224] netlink: zone id is out of range [ 509.142910][T14224] netlink: zone id is out of range [ 509.148493][T14224] netlink: zone id is out of range [ 509.153822][T14224] netlink: zone id is out of range [ 509.351315][T14243] netlink: 'syz.9.2442': attribute type 58 has an invalid length. [ 509.607160][T14247] tipc: Started in network mode [ 509.622733][T14247] tipc: Node identity 4e723273e162, cluster identity 4711 [ 509.630851][T14247] tipc: Enabled bearer , priority 0 [ 509.639121][T14247] syzkaller0: entered promiscuous mode [ 509.645305][T14247] syzkaller0: entered allmulticast mode [ 509.672501][T14247] tipc: Resetting bearer [ 509.681347][T14246] tipc: Resetting bearer [ 509.702377][T14246] tipc: Disabling bearer [ 509.792689][T14264] wg1 speed is unknown, defaulting to 1000 [ 509.808026][T14264] wg1 speed is unknown, defaulting to 1000 [ 509.997497][T14273] wg1 speed is unknown, defaulting to 1000 [ 510.006160][T14273] wg1 speed is unknown, defaulting to 1000 [ 510.503585][T14297] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 510.633778][T14302] __nla_validate_parse: 15 callbacks suppressed [ 510.633798][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2460'. [ 510.885923][T14320] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2466'. [ 510.917871][T14315] bond1: option updelay: invalid value (18446744073709551615) [ 510.926079][T14315] bond1: option updelay: allowed values 0 - 2147483647 [ 510.941268][T14315] bond1 (unregistering): Released all slaves [ 511.034611][T14322] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2467'. [ 511.442132][T14337] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2473'. [ 511.452737][T14337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.505046][T14347] xt_hashlimit: max too large, truncated to 1048576 [ 511.522521][T14337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.714215][T14357] pimreg: entered allmulticast mode [ 511.904629][ T5937] IPVS: starting estimator thread 0... [ 511.942524][T14370] wg1 speed is unknown, defaulting to 1000 [ 511.953996][T14370] wg1 speed is unknown, defaulting to 1000 [ 512.029684][T14374] IPVS: using max 29 ests per chain, 69600 per kthread [ 512.040544][T14377] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2483'. [ 512.101054][T14380] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 512.171492][ T11] block nbd1: Possible stuck request ffff888024e70000: control (read@0,1024B). Runtime 270 seconds [ 512.182828][ T11] block nbd1: Possible stuck request ffff888024e701c0: control (read@1024,1024B). Runtime 270 seconds [ 512.196956][ T11] block nbd1: Possible stuck request ffff888024e70380: control (read@2048,1024B). Runtime 270 seconds [ 512.208537][ T11] block nbd1: Possible stuck request ffff888024e70540: control (read@3072,1024B). Runtime 270 seconds [ 512.278756][T14390] netlink: 'syz.2.2486': attribute type 8 has an invalid length. [ 512.878820][T14416] 8021q: adding VLAN 0 to HW filter on device bond1 [ 512.888206][T14423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2498'. [ 513.249996][T14434] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2503'. [ 513.283255][T14441] siw: device registration error -23 [ 513.535105][T14453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2512'. [ 513.622636][T14456] FAULT_INJECTION: forcing a failure. [ 513.622636][T14456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.636650][T14456] CPU: 0 UID: 0 PID: 14456 Comm: syz.0.2513 Not tainted syzkaller #0 PREEMPT(full) [ 513.636679][T14456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 513.636691][T14456] Call Trace: [ 513.636699][T14456] [ 513.636708][T14456] dump_stack_lvl+0x189/0x250 [ 513.636738][T14456] ? __pfx____ratelimit+0x10/0x10 [ 513.636758][T14456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.636784][T14456] ? __pfx__printk+0x10/0x10 [ 513.636805][T14456] ? __might_fault+0xb0/0x130 [ 513.636854][T14456] should_fail_ex+0x414/0x560 [ 513.636889][T14456] _copy_from_iter+0x1de/0x1790 [ 513.636911][T14456] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 513.636935][T14456] ? kmalloc_reserve+0xbd/0x290 [ 513.636966][T14456] ? __pfx__copy_from_iter+0x10/0x10 [ 513.636985][T14456] ? __alloc_skb+0x2f1/0x430 [ 513.637008][T14456] ? __pfx___alloc_skb+0x10/0x10 [ 513.637032][T14456] ? netlink_sendmsg+0x642/0xb30 [ 513.637050][T14456] ? skb_put+0x11b/0x210 [ 513.637075][T14456] netlink_sendmsg+0x6b2/0xb30 [ 513.637107][T14456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.637134][T14456] ? aa_sock_msg_perm+0xf1/0x1d0 [ 513.637165][T14456] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 513.637185][T14456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.637209][T14456] __sock_sendmsg+0x21c/0x270 [ 513.637240][T14456] ____sys_sendmsg+0x505/0x830 [ 513.637270][T14456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 513.637308][T14456] ? import_iovec+0x74/0xa0 [ 513.637337][T14456] ___sys_sendmsg+0x21f/0x2a0 [ 513.637363][T14456] ? __pfx____sys_sendmsg+0x10/0x10 [ 513.637427][T14456] ? __fget_files+0x2a/0x420 [ 513.637445][T14456] ? __fget_files+0x3a0/0x420 [ 513.637475][T14456] __x64_sys_sendmsg+0x19b/0x260 [ 513.637502][T14456] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 513.637536][T14456] ? __pfx_ksys_write+0x10/0x10 [ 513.637569][T14456] ? do_syscall_64+0xbe/0xfa0 [ 513.637594][T14456] do_syscall_64+0xfa/0xfa0 [ 513.637612][T14456] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.637632][T14456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.637649][T14456] ? clear_bhb_loop+0x60/0xb0 [ 513.637670][T14456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.637686][T14456] RIP: 0033:0x7fcb7818f749 [ 513.637703][T14456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.637719][T14456] RSP: 002b:00007fcb78f46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.637738][T14456] RAX: ffffffffffffffda RBX: 00007fcb783e5fa0 RCX: 00007fcb7818f749 [ 513.637752][T14456] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 513.637764][T14456] RBP: 00007fcb78f46090 R08: 0000000000000000 R09: 0000000000000000 [ 513.637776][T14456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.637787][T14456] R13: 00007fcb783e6038 R14: 00007fcb783e5fa0 R15: 00007fff43727ac8 [ 513.637818][T14456] [ 513.941083][T14460] bond2: option ad_select: invalid value (34) [ 513.970906][T14460] bond2 (unregistering): Released all slaves [ 514.047558][T14469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2516'. [ 514.149640][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2518'. [ 514.180599][T14473] vlan2: entered promiscuous mode [ 514.185705][T14473] mac80211_hwsim hwsim37 wlan1: entered promiscuous mode [ 514.194079][T14473] vlan2: entered allmulticast mode [ 514.199210][T14473] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 514.231486][T14475] Bluetooth: MGMT ver 1.23 [ 514.288928][T14476] syzkaller0: entered promiscuous mode [ 514.306737][T14476] syzkaller0: entered allmulticast mode [ 514.418066][T14481] bridge0: port 3(hsr0) entered blocking state [ 514.426947][T14481] bridge0: port 3(hsr0) entered disabled state [ 514.443093][T14481] hsr0: entered allmulticast mode [ 514.452589][T14481] hsr_slave_0: entered allmulticast mode [ 514.462015][T14481] hsr_slave_1: entered allmulticast mode [ 514.484331][T14481] hsr0: entered promiscuous mode [ 514.493298][T14481] bridge0: port 3(hsr0) entered blocking state [ 514.499901][T14481] bridge0: port 3(hsr0) entered forwarding state [ 515.281067][T14506] netlink: 'syz.1.2530': attribute type 2 has an invalid length. [ 515.527238][T14511] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 515.547357][T14511] bond1 (unregistering): Released all slaves [ 516.071045][T14527] __nla_validate_parse: 7 callbacks suppressed [ 516.071063][T14527] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2536'. [ 516.261843][T14533] FAULT_INJECTION: forcing a failure. [ 516.261843][T14533] name failslab, interval 1, probability 0, space 0, times 0 [ 516.274746][T14533] CPU: 0 UID: 0 PID: 14533 Comm: syz.9.2538 Not tainted syzkaller #0 PREEMPT(full) [ 516.274772][T14533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 516.274791][T14533] Call Trace: [ 516.274799][T14533] [ 516.274808][T14533] dump_stack_lvl+0x189/0x250 [ 516.274840][T14533] ? __pfx____ratelimit+0x10/0x10 [ 516.274860][T14533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.274887][T14533] ? __pfx__printk+0x10/0x10 [ 516.274911][T14533] ? __pfx___might_resched+0x10/0x10 [ 516.274934][T14533] ? fs_reclaim_acquire+0x7d/0x100 [ 516.274958][T14533] should_fail_ex+0x414/0x560 [ 516.274994][T14533] should_failslab+0xa8/0x100 [ 516.275016][T14533] kmem_cache_alloc_node_noprof+0x77/0x710 [ 516.275044][T14533] ? __alloc_skb+0x255/0x430 [ 516.275064][T14533] ? napi_skb_cache_get+0x4a5/0x790 [ 516.275083][T14533] ? napi_skb_cache_get+0x151/0x790 [ 516.275108][T14533] __alloc_skb+0x255/0x430 [ 516.275132][T14533] ? __pfx___alloc_skb+0x10/0x10 [ 516.275160][T14533] ? netlink_ack_tlv_len+0x6c/0x210 [ 516.275186][T14533] netlink_ack+0x146/0xa50 [ 516.275225][T14533] netlink_rcv_skb+0x28c/0x470 [ 516.275249][T14533] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 516.275271][T14533] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 516.275306][T14533] ? bpf_lsm_capable+0x9/0x20 [ 516.275330][T14533] ? security_capable+0x7e/0x2e0 [ 516.275366][T14533] nfnetlink_rcv+0x282/0x2590 [ 516.275386][T14533] ? __dev_queue_xmit+0x284/0x3740 [ 516.275413][T14533] ? __dev_queue_xmit+0x1bfb/0x3740 [ 516.275453][T14533] ? __dev_queue_xmit+0x284/0x3740 [ 516.275489][T14533] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 516.275524][T14533] ? ref_tracker_free+0x63a/0x7d0 [ 516.275543][T14533] ? __asan_memcpy+0x40/0x70 [ 516.275568][T14533] ? __pfx_ref_tracker_free+0x10/0x10 [ 516.275604][T14533] ? skb_clone+0x246/0x3a0 [ 516.275632][T14533] ? __netlink_deliver_tap+0x807/0x850 [ 516.275654][T14533] ? netlink_deliver_tap+0x2e/0x1b0 [ 516.275684][T14533] ? netlink_deliver_tap+0x2e/0x1b0 [ 516.275715][T14533] netlink_unicast+0x82f/0x9e0 [ 516.275745][T14533] ? __pfx_netlink_unicast+0x10/0x10 [ 516.275767][T14533] ? netlink_sendmsg+0x642/0xb30 [ 516.275794][T14533] ? skb_put+0x11b/0x210 [ 516.275819][T14533] netlink_sendmsg+0x805/0xb30 [ 516.275853][T14533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.275880][T14533] ? aa_sock_msg_perm+0xf1/0x1d0 [ 516.275916][T14533] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 516.275935][T14533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.275960][T14533] __sock_sendmsg+0x21c/0x270 [ 516.275992][T14533] ____sys_sendmsg+0x505/0x830 [ 516.276023][T14533] ? __pfx_____sys_sendmsg+0x10/0x10 [ 516.276057][T14533] ? import_iovec+0x74/0xa0 [ 516.276086][T14533] ___sys_sendmsg+0x21f/0x2a0 [ 516.276113][T14533] ? __pfx____sys_sendmsg+0x10/0x10 [ 516.276178][T14533] ? __fget_files+0x2a/0x420 [ 516.276196][T14533] ? __fget_files+0x3a0/0x420 [ 516.276226][T14533] __x64_sys_sendmsg+0x19b/0x260 [ 516.276253][T14533] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 516.276288][T14533] ? __pfx_ksys_write+0x10/0x10 [ 516.276320][T14533] ? do_syscall_64+0xbe/0xfa0 [ 516.276345][T14533] do_syscall_64+0xfa/0xfa0 [ 516.276365][T14533] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.276386][T14533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.276405][T14533] ? clear_bhb_loop+0x60/0xb0 [ 516.276430][T14533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.276448][T14533] RIP: 0033:0x7f3250f8f749 [ 516.276466][T14533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.276484][T14533] RSP: 002b:00007f3251dd2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.276505][T14533] RAX: ffffffffffffffda RBX: 00007f32511e5fa0 RCX: 00007f3250f8f749 [ 516.276520][T14533] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 516.276533][T14533] RBP: 00007f3251dd2090 R08: 0000000000000000 R09: 0000000000000000 [ 516.276544][T14533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.276556][T14533] R13: 00007f32511e6038 R14: 00007f32511e5fa0 R15: 00007ffdfa1b10f8 [ 516.276591][T14533] [ 517.063293][ T5835] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 517.067854][T14545] bridge_slave_0: left allmulticast mode [ 517.072218][ T5835] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 517.084770][ T5835] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 517.093480][ T5835] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 517.103739][ T5835] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 517.137414][T14545] bridge_slave_0: left promiscuous mode [ 517.143822][T14545] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.164638][T14545] bridge_slave_1: left allmulticast mode [ 517.179567][T14545] bridge_slave_1: left promiscuous mode [ 517.186429][T14545] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.224110][T14545] bond0: (slave bond_slave_0): Releasing backup interface [ 517.248892][T14545] bond0: (slave bond_slave_1): Releasing backup interface [ 517.295640][T14545] team0: Port device team_slave_0 removed [ 517.322503][T14545] team0: Port device team_slave_1 removed [ 517.351613][T14545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.375482][T14545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.410519][T14545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.431747][T14545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.466914][T14545] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 517.473423][T14559] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2547'. [ 517.636183][T14546] wg1 speed is unknown, defaulting to 1000 [ 517.661484][T14546] wg1 speed is unknown, defaulting to 1000 [ 517.714045][T14562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2548'. [ 518.266668][T14546] chnl_net:caif_netlink_parms(): no params data found [ 518.411277][T14585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2556'. [ 518.541493][T14582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 518.716830][T14583] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 519.047609][T14546] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.064817][T14546] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.092670][T14546] bridge_slave_0: entered allmulticast mode [ 519.129941][ T5835] Bluetooth: hci13: command tx timeout [ 519.137600][T14546] bridge_slave_0: entered promiscuous mode [ 519.147011][T14546] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.154674][T14546] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.162518][T14546] bridge_slave_1: entered allmulticast mode [ 519.171154][T14546] bridge_slave_1: entered promiscuous mode [ 519.261044][T14600] FAULT_INJECTION: forcing a failure. [ 519.261044][T14600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.305727][T14546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.330302][T14600] CPU: 1 UID: 0 PID: 14600 Comm: syz.9.2560 Not tainted syzkaller #0 PREEMPT(full) [ 519.330330][T14600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 519.330342][T14600] Call Trace: [ 519.330350][T14600] [ 519.330358][T14600] dump_stack_lvl+0x189/0x250 [ 519.330389][T14600] ? __pfx____ratelimit+0x10/0x10 [ 519.330409][T14600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.330435][T14600] ? __pfx__printk+0x10/0x10 [ 519.330468][T14600] should_fail_ex+0x414/0x560 [ 519.330498][T14600] _copy_to_user+0x31/0xb0 [ 519.330526][T14600] simple_read_from_buffer+0xe1/0x170 [ 519.330561][T14600] proc_fail_nth_read+0x1b3/0x220 [ 519.330591][T14600] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 519.330619][T14600] ? rw_verify_area+0x2a6/0x4d0 [ 519.330644][T14600] ? __lock_acquire+0xab9/0xd20 [ 519.330661][T14600] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 519.330688][T14600] vfs_read+0x200/0xa30 [ 519.330713][T14600] ? fdget_pos+0x247/0x320 [ 519.330737][T14600] ? __pfx___mutex_lock+0x10/0x10 [ 519.330759][T14600] ? __pfx_vfs_read+0x10/0x10 [ 519.330788][T14600] ? __fget_files+0x2a/0x420 [ 519.330811][T14600] ? __fget_files+0x3a0/0x420 [ 519.330829][T14600] ? __fget_files+0x2a/0x420 [ 519.330857][T14600] ksys_read+0x145/0x250 [ 519.330887][T14600] ? __pfx_ksys_read+0x10/0x10 [ 519.330918][T14600] ? do_syscall_64+0xbe/0xfa0 [ 519.330943][T14600] do_syscall_64+0xfa/0xfa0 [ 519.330962][T14600] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.330982][T14600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.331001][T14600] ? clear_bhb_loop+0x60/0xb0 [ 519.331025][T14600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.331044][T14600] RIP: 0033:0x7f3250f8e15c [ 519.331061][T14600] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 519.331079][T14600] RSP: 002b:00007f3251dd2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 519.331099][T14600] RAX: ffffffffffffffda RBX: 00007f32511e5fa0 RCX: 00007f3250f8e15c [ 519.331113][T14600] RDX: 000000000000000f RSI: 00007f3251dd20a0 RDI: 0000000000000004 [ 519.331131][T14600] RBP: 00007f3251dd2090 R08: 0000000000000000 R09: 0000000000000000 [ 519.331144][T14600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.331155][T14600] R13: 00007f32511e6038 R14: 00007f32511e5fa0 R15: 00007ffdfa1b10f8 [ 519.331190][T14600] [ 519.444225][T14546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.666728][T14607] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 519.687870][T14608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2561'. [ 519.705434][T14611] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2562'. [ 519.724870][T14611] netlink: 'syz.9.2562': attribute type 20 has an invalid length. [ 519.786405][T14611] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2562'. [ 519.791598][T14546] team0: Port device team_slave_0 added [ 519.802761][ T1164] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.817179][T14546] team0: Port device team_slave_1 added [ 519.845512][ T12] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.853113][T14611] netlink: 'syz.9.2562': attribute type 20 has an invalid length. [ 519.881330][ T12] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.982092][ T12] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.015873][T14546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.048579][T14546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.102824][T14546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.128742][T14546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.155985][T14546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.219572][T14546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.456682][T14546] hsr_slave_0: entered promiscuous mode [ 520.471194][T14546] hsr_slave_1: entered promiscuous mode [ 520.478002][T14546] debugfs: 'hsr0' already exists in 'hsr' [ 520.519367][T14546] Cannot create hsr debugfs directory [ 520.872383][T14641] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2574'. [ 520.910822][T14641] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2574'. [ 520.941330][ T24] IPVS: starting estimator thread 0... [ 521.008878][T14546] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.032211][T14645] IPVS: using max 24 ests per chain, 57600 per kthread [ 521.175736][T14546] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.211828][ T5835] Bluetooth: hci13: command tx timeout [ 521.261031][T14647] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 521.343373][T14546] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.471298][T14546] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.601027][T14665] netlink: 'syz.1.2581': attribute type 8 has an invalid length. [ 521.626530][T14665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2581'. [ 521.668774][T14662] xt_CT: No such helper "snmp" [ 521.676396][T14665] bond0: entered promiscuous mode [ 521.684258][T14665] geneve0: entered promiscuous mode [ 521.696090][T14665] team_slave_0: entered promiscuous mode [ 521.703844][T14665] debugfs: 'hsr1' already exists in 'hsr' [ 521.710446][T14665] Cannot create hsr debugfs directory [ 521.716072][T14665] hsr1: entered promiscuous mode [ 521.863702][T14546] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 521.916770][T14546] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 521.972046][T14546] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 521.978935][T14670] netlink: 512 bytes leftover after parsing attributes in process `syz.1.2583'. [ 522.004319][T14673] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2584'. [ 522.023107][T14546] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 522.265042][T14683] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000 [ 522.320290][T14546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.398063][T14546] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.424765][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.431974][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.463307][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.470516][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.596682][T14694] netlink: 'syz.1.2587': attribute type 8 has an invalid length. [ 522.605382][T14694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2587'. [ 522.952837][T14546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.289648][ T5835] Bluetooth: hci13: command tx timeout [ 523.553040][T14720] syzkaller0: entered promiscuous mode [ 523.558766][T14720] syzkaller0: entered allmulticast mode [ 523.690122][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 523.772568][T14715] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 523.874383][T14734] siw: device registration error -23 [ 523.907515][T14546] veth0_vlan: entered promiscuous mode [ 523.944417][T14546] veth1_vlan: entered promiscuous mode [ 523.962190][T14736] sctp: [Deprecated]: syz.9.2598 (pid 14736) Use of struct sctp_assoc_value in delayed_ack socket option. [ 523.962190][T14736] Use struct sctp_sack_info instead [ 524.022322][T14546] veth0_macvtap: entered promiscuous mode [ 524.061334][T14546] veth1_macvtap: entered promiscuous mode [ 524.107777][T14546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.136923][T14546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.172502][ T1164] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.196366][ T1164] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.217625][ T1164] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.239637][ T1164] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.416872][T14740] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2600'. [ 524.447671][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.476826][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.577840][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.608860][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.831929][T14752] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2605'. [ 524.921219][T14755] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2539'. [ 525.147440][T14761] xt_CT: No such helper "snmp" [ 525.200697][T14769] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2608'. [ 525.373884][ T5835] Bluetooth: hci13: command tx timeout [ 525.450850][T14782] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2612'. [ 525.464685][T14767] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 526.267732][T14804] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2619'. [ 526.667332][T14825] xt_CT: No such helper "snmp" [ 526.801294][T14830] __nla_validate_parse: 33 callbacks suppressed [ 526.801312][T14830] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2624'. [ 527.568046][T14864] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2633'. [ 527.646583][T14860] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 527.814328][T14867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2634'. [ 528.017406][T14871] xt_hashlimit: max too large, truncated to 1048576 [ 528.030290][T14871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2635'. [ 528.405951][T14878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.431760][T14888] netlink: 'syz.4.2639': attribute type 9 has an invalid length. [ 528.637671][T14888] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2639'. [ 528.733721][T14905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2644'. [ 528.793085][T14888] can: request_module (can-proto-0) failed. [ 529.058496][T14913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2646'. [ 529.116532][T14918] nbd: nbd0 already in use [ 529.473071][T14929] siw: device registration error -23 [ 529.843495][T14935] wg1 speed is unknown, defaulting to 1000 [ 529.850629][T14939] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2656'. [ 529.866069][T14939] netlink: 'syz.1.2656': attribute type 9 has an invalid length. [ 529.893852][T14939] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2656'. [ 529.910364][T14935] wg1 speed is unknown, defaulting to 1000 [ 529.921399][T14939] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2656'. [ 530.096042][T14937] wg1 speed is unknown, defaulting to 1000 [ 530.127386][ T5825] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 530.153909][T14937] wg1 speed is unknown, defaulting to 1000 [ 530.160376][ T5825] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 530.169078][ T5825] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 530.200849][ T5825] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 530.208764][ T5825] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 530.688635][T14945] wg1 speed is unknown, defaulting to 1000 [ 530.766342][T14945] wg1 speed is unknown, defaulting to 1000 [ 531.641101][T14945] chnl_net:caif_netlink_parms(): no params data found [ 531.654321][T14984] xt_hashlimit: size too large, truncated to 1048576 [ 531.692411][T14986] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 532.329866][ T5835] Bluetooth: hci14: command tx timeout [ 532.682937][T14998] siw: device registration error -23 [ 532.748870][T14945] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.769778][T14945] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.777390][T14945] bridge_slave_0: entered allmulticast mode [ 532.787289][T14945] bridge_slave_0: entered promiscuous mode [ 532.801413][T14945] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.808655][T14945] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.816754][T14945] bridge_slave_1: entered allmulticast mode [ 532.825784][T14945] bridge_slave_1: entered promiscuous mode [ 532.886977][T14945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.914313][T14945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.992116][T14945] team0: Port device team_slave_0 added [ 533.014425][T14945] team0: Port device team_slave_1 added [ 533.126891][T14945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.149432][T14945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.209707][T14945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.232466][T14945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.249729][T14945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.281253][T14945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.480809][T14945] hsr_slave_0: entered promiscuous mode [ 533.493026][T14945] hsr_slave_1: entered promiscuous mode [ 533.513932][T14945] debugfs: 'hsr0' already exists in 'hsr' [ 533.520220][T14945] Cannot create hsr debugfs directory [ 534.076402][T14945] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.223107][T14945] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.363399][T14945] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.374604][T15008] FAULT_INJECTION: forcing a failure. [ 534.374604][T15008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.399422][T15008] CPU: 0 UID: 0 PID: 15008 Comm: syz.4.2671 Not tainted syzkaller #0 PREEMPT(full) [ 534.399450][T15008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 534.399463][T15008] Call Trace: [ 534.399471][T15008] [ 534.399479][T15008] dump_stack_lvl+0x189/0x250 [ 534.399582][T15008] ? __pfx____ratelimit+0x10/0x10 [ 534.399613][T15008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 534.399638][T15008] ? __pfx__printk+0x10/0x10 [ 534.399657][T15008] ? __might_fault+0xb0/0x130 [ 534.399692][T15008] should_fail_ex+0x414/0x560 [ 534.399724][T15008] _copy_from_user+0x2d/0xb0 [ 534.399750][T15008] __sys_bpf+0x1e3/0x860 [ 534.399772][T15008] ? __pfx___sys_bpf+0x10/0x10 [ 534.399808][T15008] ? ksys_write+0x22a/0x250 [ 534.399838][T15008] ? __pfx_ksys_write+0x10/0x10 [ 534.399872][T15008] __x64_sys_bpf+0x7c/0x90 [ 534.399902][T15008] do_syscall_64+0xfa/0xfa0 [ 534.399921][T15008] ? lockdep_hardirqs_on+0x9c/0x150 [ 534.399946][T15008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.399965][T15008] ? clear_bhb_loop+0x60/0xb0 [ 534.399988][T15008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.400007][T15008] RIP: 0033:0x7fedc298f749 [ 534.400025][T15008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.400042][T15008] RSP: 002b:00007fedc390c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 534.400063][T15008] RAX: ffffffffffffffda RBX: 00007fedc2be5fa0 RCX: 00007fedc298f749 [ 534.400083][T15008] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 534.400096][T15008] RBP: 00007fedc390c090 R08: 0000000000000000 R09: 0000000000000000 [ 534.400108][T15008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.400121][T15008] R13: 00007fedc2be6038 R14: 00007fedc2be5fa0 R15: 00007fff6c872628 [ 534.400155][T15008] [ 534.667679][ T5835] Bluetooth: hci14: command tx timeout [ 534.828218][T14945] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.957271][T15011] __nla_validate_parse: 5 callbacks suppressed [ 534.957289][T15011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2672'. [ 535.089672][ T5887] IPVS: starting estimator thread 0... [ 535.182237][T14945] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 535.190935][T15016] IPVS: using max 26 ests per chain, 62400 per kthread [ 535.235634][T14945] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 535.326935][T14945] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 535.355901][T14945] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 535.381249][T15015] wg1 speed is unknown, defaulting to 1000 [ 535.388884][T15015] wg1 speed is unknown, defaulting to 1000 [ 535.587573][T15030] siw: device registration error -23 [ 535.846865][T15033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.924492][T14945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.957949][T14945] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.007483][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.015005][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.061682][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.068860][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.168237][T15037] netlink: 'syz.0.2679': attribute type 11 has an invalid length. [ 536.467237][T15017] wg1 speed is unknown, defaulting to 1000 [ 536.501770][T15017] wg1 speed is unknown, defaulting to 1000 [ 536.567143][T15045] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2680'. [ 536.739817][ T5835] Bluetooth: hci14: command tx timeout [ 536.942526][T14945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.173075][T15057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2683'. [ 537.186068][T15057] tipc: Started in network mode [ 537.192129][T15057] tipc: Node identity ac14140f, cluster identity 4711 [ 537.205024][T15057] tipc: New replicast peer: 255.255.255.255 [ 537.217034][T15057] tipc: Enabled bearer , priority 10 [ 537.228332][T15057] netlink: 'syz.4.2683': attribute type 1 has an invalid length. [ 537.259084][T15057] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2683'. [ 537.383201][T15043] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 537.538142][T15064] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 537.555701][T14945] veth0_vlan: entered promiscuous mode [ 537.675973][T15064] team0 (unregistering): left promiscuous mode [ 537.682801][T15064] team_slave_0: left promiscuous mode [ 537.688398][T15064] team_slave_1: left promiscuous mode [ 537.703721][T15064] team0 (unregistering): Port device team_slave_0 removed [ 537.717639][T15064] team0 (unregistering): Port device team_slave_1 removed [ 537.761423][T14945] veth1_vlan: entered promiscuous mode [ 537.786381][T15066] wg1 speed is unknown, defaulting to 1000 [ 537.814833][T15066] wg1 speed is unknown, defaulting to 1000 [ 537.814945][T14945] veth0_macvtap: entered promiscuous mode [ 537.834948][T14945] veth1_macvtap: entered promiscuous mode [ 537.951219][T14945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.980205][T14945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.009953][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.031073][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.082922][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.092295][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.272096][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.285549][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.331593][ T9470] tipc: Node number set to 2886997007 [ 538.362755][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.373813][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.552448][T15082] xt_CT: No such helper "snmp" [ 538.702335][T15086] siw: device registration error -23 [ 538.809529][ T5835] Bluetooth: hci14: command tx timeout [ 539.561334][T15104] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2693'. [ 539.676198][T15106] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2694'. [ 539.686577][T15106] netlink: 'syz.6.2694': attribute type 7 has an invalid length. [ 539.709254][T15106] netlink: 'syz.6.2694': attribute type 8 has an invalid length. [ 539.719026][T15106] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2694'. [ 539.886563][T15115] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2698'. [ 539.978971][T15120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2700'. [ 540.000237][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.009162][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.020334][T15120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2700'. [ 540.039856][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.071827][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.386714][T15131] siw: device registration error -23 [ 540.403682][T15133] lo: entered allmulticast mode [ 540.414447][T15133] lo: left allmulticast mode [ 540.533916][T15138] netlink: 'syz.4.2706': attribute type 6 has an invalid length. [ 540.715157][T15144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2709'. [ 540.774474][T15146] sctp_getsockopt_maxburst: 23 callbacks suppressed [ 540.774501][T15146] sctp: [Deprecated]: syz.6.2710 (pid 15146) Use of int in max_burst socket option. [ 540.774501][T15146] Use struct sctp_assoc_value instead [ 540.835495][T15148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2711'. [ 540.847012][T15148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2711'. [ 540.894417][ T9470] IPVS: starting estimator thread 0... [ 540.894948][T15146] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 540.995048][T15150] IPVS: using max 27 ests per chain, 64800 per kthread [ 541.036707][T15154] bond0: entered promiscuous mode [ 541.042613][T15154] bond_slave_0: entered promiscuous mode [ 541.048663][T15154] bond_slave_1: entered promiscuous mode [ 541.062174][T15154] batadv0: entered promiscuous mode [ 541.069025][T15154] debugfs: 'hsr1' already exists in 'hsr' [ 541.075246][T15154] Cannot create hsr debugfs directory [ 541.082289][T15154] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 541.106019][T15154] bond0: left promiscuous mode [ 541.118429][T15154] bond_slave_0: left promiscuous mode [ 541.158589][T15154] bond_slave_1: left promiscuous mode [ 541.182744][T15154] batadv0: left promiscuous mode [ 541.388736][T15169] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2719'. [ 541.413011][T15169] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2719'. [ 541.587325][T15175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2722'. [ 541.597137][T15174] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2721'. [ 541.629044][T15175] vxlan0: entered promiscuous mode [ 541.637139][T15175] vxlan0: entered allmulticast mode [ 541.646109][ T1164] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.657581][ T1164] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.667109][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.691869][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.750126][T15177] FAULT_INJECTION: forcing a failure. [ 541.750126][T15177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.787926][T15177] CPU: 0 UID: 0 PID: 15177 Comm: syz.6.2723 Not tainted syzkaller #0 PREEMPT(full) [ 541.787968][T15177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 541.787981][T15177] Call Trace: [ 541.787989][T15177] [ 541.787998][T15177] dump_stack_lvl+0x189/0x250 [ 541.788029][T15177] ? __pfx____ratelimit+0x10/0x10 [ 541.788048][T15177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 541.788075][T15177] ? __pfx__printk+0x10/0x10 [ 541.788096][T15177] ? __might_fault+0xb0/0x130 [ 541.788136][T15177] should_fail_ex+0x414/0x560 [ 541.788171][T15177] _copy_from_user+0x2d/0xb0 [ 541.788197][T15177] ___sys_sendmsg+0x158/0x2a0 [ 541.788225][T15177] ? __pfx____sys_sendmsg+0x10/0x10 [ 541.788289][T15177] ? __fget_files+0x2a/0x420 [ 541.788307][T15177] ? __fget_files+0x3a0/0x420 [ 541.788337][T15177] __sys_sendmmsg+0x227/0x430 [ 541.788373][T15177] ? __pfx___sys_sendmmsg+0x10/0x10 [ 541.788408][T15177] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 541.788431][T15177] ? __rcu_read_unlock+0x84/0xe0 [ 541.788477][T15177] ? ksys_write+0x22a/0x250 [ 541.788507][T15177] ? __pfx_ksys_write+0x10/0x10 [ 541.788540][T15177] __x64_sys_sendmmsg+0xa0/0xc0 [ 541.788563][T15177] do_syscall_64+0xfa/0xfa0 [ 541.788579][T15177] ? lockdep_hardirqs_on+0x9c/0x150 [ 541.788598][T15177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.788615][T15177] ? clear_bhb_loop+0x60/0xb0 [ 541.788638][T15177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.788655][T15177] RIP: 0033:0x7f2fb438f749 [ 541.788672][T15177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.788690][T15177] RSP: 002b:00007f2fb52d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 541.788711][T15177] RAX: ffffffffffffffda RBX: 00007f2fb45e5fa0 RCX: 00007f2fb438f749 [ 541.788726][T15177] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 541.788740][T15177] RBP: 00007f2fb52d3090 R08: 0000000000000000 R09: 0000000000000000 [ 541.788753][T15177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.788764][T15177] R13: 00007f2fb45e6038 R14: 00007f2fb45e5fa0 R15: 00007fff5671ce08 [ 541.788799][T15177] [ 542.251226][ T11] block nbd1: Possible stuck request ffff888024e70000: control (read@0,1024B). Runtime 300 seconds [ 542.262176][ T11] block nbd1: Possible stuck request ffff888024e701c0: control (read@1024,1024B). Runtime 300 seconds [ 542.274737][ T11] block nbd1: Possible stuck request ffff888024e70380: control (read@2048,1024B). Runtime 300 seconds [ 542.286584][ T11] block nbd1: Possible stuck request ffff888024e70540: control (read@3072,1024B). Runtime 300 seconds [ 542.326156][T15183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2726'. [ 542.684180][T15193] mac80211_hwsim hwsim44 wlan1: entered promiscuous mode [ 542.693011][T15193] macsec1: entered promiscuous mode [ 542.833617][T15197] FAULT_INJECTION: forcing a failure. [ 542.833617][T15197] name failslab, interval 1, probability 0, space 0, times 0 [ 542.871757][T15197] CPU: 0 UID: 0 PID: 15197 Comm: syz.0.2732 Not tainted syzkaller #0 PREEMPT(full) [ 542.871783][T15197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 542.871793][T15197] Call Trace: [ 542.871800][T15197] [ 542.871808][T15197] dump_stack_lvl+0x189/0x250 [ 542.871837][T15197] ? __pfx____ratelimit+0x10/0x10 [ 542.871857][T15197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 542.871882][T15197] ? __pfx__printk+0x10/0x10 [ 542.871897][T15197] ? rcu_is_watching+0x15/0xb0 [ 542.871924][T15197] ? __lock_acquire+0xab9/0xd20 [ 542.871950][T15197] should_fail_ex+0x414/0x560 [ 542.871982][T15197] should_failslab+0xa8/0x100 [ 542.872003][T15197] kmem_cache_alloc_noprof+0x74/0x6e0 [ 542.872029][T15197] ? skb_clone+0x212/0x3a0 [ 542.872058][T15197] skb_clone+0x212/0x3a0 [ 542.872084][T15197] __netlink_deliver_tap+0x404/0x850 [ 542.872118][T15197] ? netlink_deliver_tap+0x2e/0x1b0 [ 542.872140][T15197] netlink_deliver_tap+0x19c/0x1b0 [ 542.872163][T15197] netlink_dump+0x92b/0xe90 [ 542.872195][T15197] ? __pfx_netlink_dump+0x10/0x10 [ 542.872252][T15197] netlink_recvmsg+0x676/0xa30 [ 542.872287][T15197] ? __pfx_netlink_recvmsg+0x10/0x10 [ 542.872313][T15197] ? aa_sock_msg_perm+0xf1/0x1d0 [ 542.872344][T15197] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 542.872361][T15197] ? security_socket_recvmsg+0x7e/0x2e0 [ 542.872381][T15197] ? __pfx_netlink_recvmsg+0x10/0x10 [ 542.872404][T15197] sock_recvmsg+0x22c/0x270 [ 542.872433][T15197] ____sys_recvmsg+0x1c9/0x460 [ 542.872466][T15197] ? __pfx_____sys_recvmsg+0x10/0x10 [ 542.872506][T15197] ? import_iovec+0x74/0xa0 [ 542.872533][T15197] ___sys_recvmsg+0x1b5/0x510 [ 542.872562][T15197] ? __pfx____sys_recvmsg+0x10/0x10 [ 542.872613][T15197] ? __fget_files+0x3a0/0x420 [ 542.872642][T15197] __x64_sys_recvmsg+0x198/0x260 [ 542.872668][T15197] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 542.872704][T15197] ? __pfx_ksys_write+0x10/0x10 [ 542.872735][T15197] ? do_syscall_64+0xbe/0xfa0 [ 542.872759][T15197] do_syscall_64+0xfa/0xfa0 [ 542.872776][T15197] ? lockdep_hardirqs_on+0x9c/0x150 [ 542.872796][T15197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.872812][T15197] ? clear_bhb_loop+0x60/0xb0 [ 542.872835][T15197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.872853][T15197] RIP: 0033:0x7fcb7818f749 [ 542.872870][T15197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.872887][T15197] RSP: 002b:00007fcb78f46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 542.872907][T15197] RAX: ffffffffffffffda RBX: 00007fcb783e5fa0 RCX: 00007fcb7818f749 [ 542.872922][T15197] RDX: 0000000000000102 RSI: 0000200000000640 RDI: 0000000000000006 [ 542.872934][T15197] RBP: 00007fcb78f46090 R08: 0000000000000000 R09: 0000000000000000 [ 542.872946][T15197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.872958][T15197] R13: 00007fcb783e6038 R14: 00007fcb783e5fa0 R15: 00007fff43727ac8 [ 542.872992][T15197] [ 542.927480][T15203] vxlan0: entered promiscuous mode [ 543.211187][T15203] vxlan0: entered allmulticast mode [ 543.243565][ T36] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.262481][ T36] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.284075][ T36] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.295941][ T36] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.400496][T15219] siw: device registration error -23 [ 543.553905][T15229] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 543.567060][T15229] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 543.658783][T15221] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 544.501847][T15247] netlink: 'syz.6.2748': attribute type 8 has an invalid length. [ 544.519048][T15247] bond0: entered promiscuous mode [ 544.540478][T15247] bond_slave_0: entered promiscuous mode [ 544.557947][T15247] bond_slave_1: entered promiscuous mode [ 544.574350][T15247] geneve0: entered promiscuous mode [ 544.597786][T15247] team_slave_0: entered promiscuous mode [ 544.608075][T15247] team_slave_0: left promiscuous mode [ 544.641753][T15247] bond0: left promiscuous mode [ 544.651622][T15247] bond_slave_0: left promiscuous mode [ 544.670117][T15247] bond_slave_1: left promiscuous mode [ 544.714343][T15247] geneve0: left promiscuous mode [ 544.720857][T15256] netlink: 'syz.4.2752': attribute type 1 has an invalid length. [ 544.843028][T15256] 8021q: adding VLAN 0 to HW filter on device bond1 [ 544.908041][T15259] bond1: (slave geneve2): making interface the new active one [ 544.917922][T15259] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 544.929107][ T36] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 544.958257][T15266] siw: device registration error -23 [ 544.968912][ T36] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 544.999968][ T36] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 545.008895][ T36] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 545.042801][T15256] __nla_validate_parse: 8 callbacks suppressed [ 545.042819][T15256] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2752'. [ 545.223401][T15273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2757'. [ 545.236615][ T5825] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 545.247155][ T5825] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 545.255690][ T5825] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 545.265903][ T5825] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 545.274937][ T5825] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 545.277859][T15277] netlink: 'syz.0.2758': attribute type 9 has an invalid length. [ 545.296225][T15277] netlink: 'syz.0.2758': attribute type 7 has an invalid length. [ 545.306032][T15277] netlink: 'syz.0.2758': attribute type 8 has an invalid length. [ 545.337449][T15277] netlink: 'syz.0.2758': attribute type 2 has an invalid length. [ 545.353567][T15277] netlink: 'syz.0.2758': attribute type 9 has an invalid length. [ 545.362001][T15277] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2758'. [ 545.375880][T15274] wg1 speed is unknown, defaulting to 1000 [ 545.384821][T15274] wg1 speed is unknown, defaulting to 1000 [ 545.508244][T15281] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2759'. [ 545.617230][T15274] chnl_net:caif_netlink_parms(): no params data found [ 545.795708][T15274] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.808941][T15274] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.817831][T15274] bridge_slave_0: entered allmulticast mode [ 545.826698][T15274] bridge_slave_0: entered promiscuous mode [ 545.837859][T15274] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.845931][T15274] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.854705][T15274] bridge_slave_1: entered allmulticast mode [ 545.863464][T15274] bridge_slave_1: entered promiscuous mode [ 545.955308][T15274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.971799][T15274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.084327][T15274] team0: Port device team_slave_0 added [ 546.115299][T15274] team0: Port device team_slave_1 added [ 546.267716][T15274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.284218][T15274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.312995][T15274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.355184][T15274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.370585][T15274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.419022][T15274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.537458][T15304] wg1 speed is unknown, defaulting to 1000 [ 546.547473][T15304] wg1 speed is unknown, defaulting to 1000 [ 546.571339][T15274] hsr_slave_0: entered promiscuous mode [ 546.578743][T15274] hsr_slave_1: entered promiscuous mode [ 546.586488][T15274] debugfs: 'hsr0' already exists in 'hsr' [ 546.592598][T15274] Cannot create hsr debugfs directory [ 546.936916][T15274] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.004697][T15274] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.083221][T15274] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.158436][T15323] siw: device registration error -23 [ 547.158946][T15274] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.173989][T15324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2771'. [ 547.379762][ T5825] Bluetooth: hci12: command tx timeout [ 547.423621][T15274] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 547.447947][T15274] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 547.461465][T15274] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 547.475593][T15274] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 547.603896][T15338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2774'. [ 547.620757][T15338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2774'. [ 547.637273][T15338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2774'. [ 547.659709][T15338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2774'. [ 547.707869][T15274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.715983][T15340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2775'. [ 547.779043][T15274] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.814899][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.822113][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.856213][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.863417][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.274791][T15358] wg1 speed is unknown, defaulting to 1000 [ 548.306248][T15358] wg1 speed is unknown, defaulting to 1000 [ 548.503853][T15274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.902725][T15274] veth0_vlan: entered promiscuous mode [ 548.924216][T15274] veth1_vlan: entered promiscuous mode [ 549.010992][T15274] veth0_macvtap: entered promiscuous mode [ 549.025738][T15274] veth1_macvtap: entered promiscuous mode [ 549.056685][T15274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.087953][T15274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.142488][ T6298] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.177884][ T6298] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.213000][ T6298] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.235841][ T6298] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.253768][T15386] netlink: 'syz.0.2785': attribute type 21 has an invalid length. [ 549.304938][T15393] siw: device registration error -23 [ 549.451225][ T5835] Bluetooth: hci12: command tx timeout [ 549.504602][T15394] wg1 speed is unknown, defaulting to 1000 [ 549.510917][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.524740][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.544645][T15394] wg1 speed is unknown, defaulting to 1000 [ 549.607179][ T6298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.623337][ T6298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.885042][T15402] tipc: Started in network mode [ 549.890297][T15402] tipc: Node identity e0000001, cluster identity 4711 [ 549.899502][T15402] tipc: Enabling of bearer rejected, failed to enable media [ 550.293949][T15417] __nla_validate_parse: 2 callbacks suppressed [ 550.293966][T15417] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2794'. [ 550.345659][T15417] FAULT_INJECTION: forcing a failure. [ 550.345659][T15417] name failslab, interval 1, probability 0, space 0, times 0 [ 550.381583][T15417] CPU: 1 UID: 0 PID: 15417 Comm: syz.6.2794 Not tainted syzkaller #0 PREEMPT(full) [ 550.381616][T15417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 550.381628][T15417] Call Trace: [ 550.381636][T15417] [ 550.381645][T15417] dump_stack_lvl+0x189/0x250 [ 550.381693][T15417] ? __pfx____ratelimit+0x10/0x10 [ 550.381713][T15417] ? __pfx_dump_stack_lvl+0x10/0x10 [ 550.381746][T15417] ? __pfx__printk+0x10/0x10 [ 550.381769][T15417] ? __pfx___might_resched+0x10/0x10 [ 550.381792][T15417] ? fs_reclaim_acquire+0x7d/0x100 [ 550.381816][T15417] should_fail_ex+0x414/0x560 [ 550.381855][T15417] should_failslab+0xa8/0x100 [ 550.381877][T15417] kmem_cache_alloc_node_noprof+0x77/0x710 [ 550.381904][T15417] ? __alloc_skb+0x255/0x430 [ 550.381923][T15417] ? napi_skb_cache_get+0x4a5/0x790 [ 550.381941][T15417] ? napi_skb_cache_get+0x151/0x790 [ 550.381964][T15417] __alloc_skb+0x255/0x430 [ 550.381987][T15417] ? __pfx___alloc_skb+0x10/0x10 [ 550.382006][T15417] ? net_generic+0x1e/0x240 [ 550.382028][T15417] ? net_generic+0x1e/0x240 [ 550.382048][T15417] ? net_generic+0x1e/0x240 [ 550.382077][T15417] ovs_ct_limit_cmd_set+0xfb/0xb00 [ 550.382101][T15417] ? __nla_parse+0x40/0x60 [ 550.382124][T15417] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 550.382152][T15417] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 550.382209][T15417] genl_family_rcv_msg_doit+0x215/0x300 [ 550.382245][T15417] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 550.382288][T15417] ? bpf_lsm_capable+0x9/0x20 [ 550.382312][T15417] ? security_capable+0x7e/0x2e0 [ 550.382346][T15417] genl_rcv_msg+0x60e/0x790 [ 550.382380][T15417] ? __pfx_genl_rcv_msg+0x10/0x10 [ 550.382403][T15417] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 550.382430][T15417] ? __asan_memcpy+0x40/0x70 [ 550.382455][T15417] ? __pfx_ref_tracker_free+0x10/0x10 [ 550.382483][T15417] netlink_rcv_skb+0x208/0x470 [ 550.382502][T15417] ? __lock_acquire+0xab9/0xd20 [ 550.382522][T15417] ? __pfx_genl_rcv_msg+0x10/0x10 [ 550.382551][T15417] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 550.382594][T15417] ? down_read+0x1ad/0x2e0 [ 550.382632][T15417] genl_rcv+0x28/0x40 [ 550.382656][T15417] netlink_unicast+0x82f/0x9e0 [ 550.382685][T15417] ? __pfx_netlink_unicast+0x10/0x10 [ 550.382708][T15417] ? netlink_sendmsg+0x642/0xb30 [ 550.382728][T15417] ? skb_put+0x11b/0x210 [ 550.382753][T15417] netlink_sendmsg+0x805/0xb30 [ 550.382787][T15417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.382813][T15417] ? aa_sock_msg_perm+0xf1/0x1d0 [ 550.382844][T15417] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 550.382863][T15417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.382887][T15417] __sock_sendmsg+0x21c/0x270 [ 550.382919][T15417] ____sys_sendmsg+0x505/0x830 [ 550.382949][T15417] ? __pfx_____sys_sendmsg+0x10/0x10 [ 550.382982][T15417] ? import_iovec+0x74/0xa0 [ 550.383010][T15417] ___sys_sendmsg+0x21f/0x2a0 [ 550.383035][T15417] ? __pfx____sys_sendmsg+0x10/0x10 [ 550.383099][T15417] ? __fget_files+0x2a/0x420 [ 550.383117][T15417] ? __fget_files+0x3a0/0x420 [ 550.383147][T15417] __x64_sys_sendmsg+0x19b/0x260 [ 550.383174][T15417] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 550.383210][T15417] ? __pfx_ksys_write+0x10/0x10 [ 550.383239][T15417] ? do_syscall_64+0xbe/0xfa0 [ 550.383264][T15417] do_syscall_64+0xfa/0xfa0 [ 550.383283][T15417] ? lockdep_hardirqs_on+0x9c/0x150 [ 550.383302][T15417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.383322][T15417] ? clear_bhb_loop+0x60/0xb0 [ 550.383347][T15417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.383364][T15417] RIP: 0033:0x7f2fb438f749 [ 550.383381][T15417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.383398][T15417] RSP: 002b:00007f2fb52d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 550.383419][T15417] RAX: ffffffffffffffda RBX: 00007f2fb45e5fa0 RCX: 00007f2fb438f749 [ 550.383434][T15417] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 550.383447][T15417] RBP: 00007f2fb52d3090 R08: 0000000000000000 R09: 0000000000000000 [ 550.383460][T15417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.383471][T15417] R13: 00007f2fb45e6038 R14: 00007f2fb45e5fa0 R15: 00007fff5671ce08 [ 550.383506][T15417] [ 551.066180][T15422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2795'. [ 551.162618][ T5146] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 551.173481][ T5146] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 551.198144][ T5146] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 551.209018][ T5146] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 551.222093][ T5146] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 551.260643][T15428] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2797'. [ 551.272390][T15428] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2797'. [ 551.300339][T15423] wg1 speed is unknown, defaulting to 1000 [ 551.318390][T15423] wg1 speed is unknown, defaulting to 1000 [ 551.530126][ T5835] Bluetooth: hci12: command 0x040f tx timeout [ 551.678543][T15444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2805'. [ 551.724359][T15447] siw: device registration error -23 [ 551.724526][T15446] netlink: 'syz.7.2804': attribute type 8 has an invalid length. [ 551.740755][T15446] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2804'. [ 551.779887][T15446] bond0: entered promiscuous mode [ 551.785028][T15446] bond_slave_0: entered promiscuous mode [ 551.792393][T15446] bond_slave_1: entered promiscuous mode [ 551.826932][T15446] geneve0: entered promiscuous mode [ 551.876795][T15446] team_slave_0: entered promiscuous mode [ 551.883779][T15446] team_slave_0: left promiscuous mode [ 551.891839][T15446] bond0: left promiscuous mode [ 551.896654][T15446] bond_slave_0: left promiscuous mode [ 551.914490][T15446] bond_slave_1: left promiscuous mode [ 551.947092][T15446] geneve0: left promiscuous mode [ 552.447395][T15423] chnl_net:caif_netlink_parms(): no params data found [ 552.542392][T15457] wg1 speed is unknown, defaulting to 1000 [ 552.591692][T15457] wg1 speed is unknown, defaulting to 1000 [ 552.647279][T15467] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2809'. [ 552.923048][T15479] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2814'. [ 552.938276][T15471] syzkaller0: entered promiscuous mode [ 552.945669][T15471] syzkaller0: entered allmulticast mode [ 553.041302][T15479] vxlan0: entered promiscuous mode [ 553.046643][T15479] vxlan0: entered allmulticast mode [ 553.155686][ T36] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.190914][ T36] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.290394][ T5825] Bluetooth: hci15: command tx timeout [ 553.610461][ T5825] Bluetooth: hci12: command 0x040f tx timeout [ 553.731251][T15494] siw: device registration error -23 [ 555.210765][ T5825] Bluetooth: hci5: command 0x0406 tx timeout [ 555.372642][ T5835] Bluetooth: hci15: command tx timeout [ 555.695293][ T5835] Bluetooth: hci12: command 0x040f tx timeout [ 556.003618][T15423] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.020061][T15423] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.030665][T15423] bridge_slave_0: entered allmulticast mode [ 556.055903][T15423] bridge_slave_0: entered promiscuous mode [ 556.066748][ T36] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.086314][ T36] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.126821][T15423] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.142611][T15423] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.165596][T15423] bridge_slave_1: entered allmulticast mode [ 556.182797][T15423] bridge_slave_1: entered promiscuous mode [ 556.306901][T15423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.346536][T15423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.478773][T15423] team0: Port device team_slave_0 added [ 556.491162][T15423] team0: Port device team_slave_1 added [ 556.624043][T15423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.640156][T15423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.845246][T15423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.920394][T15423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.927364][T15423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.000741][T15423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.208381][T15423] hsr_slave_0: entered promiscuous mode [ 557.230380][T15423] hsr_slave_1: entered promiscuous mode [ 557.237126][T15423] debugfs: 'hsr0' already exists in 'hsr' [ 557.281060][T15423] Cannot create hsr debugfs directory [ 557.450595][ T5835] Bluetooth: hci15: command tx timeout [ 557.666186][T15528] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2831'. [ 557.711451][T15533] siw: device registration error -23 [ 557.745043][T15423] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.055299][T15423] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.175057][T15423] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.227573][T15537] pim6reg1: entered promiscuous mode [ 558.258239][T15537] pim6reg1: entered allmulticast mode [ 558.400285][T15423] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.614046][T15535] delete_channel: no stack [ 558.662027][T15541] netlink: 'syz.7.2834': attribute type 8 has an invalid length. [ 558.670227][T15541] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2834'. [ 558.704770][T15541] bond0: entered promiscuous mode [ 558.719681][T15541] bond_slave_0: entered promiscuous mode [ 558.731342][T15541] bond_slave_1: entered promiscuous mode [ 558.790449][T15541] geneve0: entered promiscuous mode [ 558.798019][T15541] team_slave_0: entered promiscuous mode [ 558.807019][T15541] team_slave_0: left promiscuous mode [ 558.829703][T15541] bond0: left promiscuous mode [ 558.834708][T15541] bond_slave_0: left promiscuous mode [ 558.840910][T15541] bond_slave_1: left promiscuous mode [ 558.870554][T15541] geneve0: left promiscuous mode [ 558.894954][T15546] xt_limit: Overflow, try lower: 271964/0 [ 559.004163][T15546] netlink: 25 bytes leftover after parsing attributes in process `syz.6.2836'. [ 559.174210][T15545] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2836'. [ 559.298765][T15423] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 559.414806][T15423] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 559.454474][T15423] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 559.504959][T15423] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 559.532388][ T5835] Bluetooth: hci15: command tx timeout [ 559.973555][T15423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.032036][T15423] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.066520][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.073719][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.146821][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.154022][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.629609][T15573] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2842'. [ 560.754477][T15423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.652898][T15423] veth0_vlan: entered promiscuous mode [ 561.688036][T15423] veth1_vlan: entered promiscuous mode [ 561.793210][T15423] veth0_macvtap: entered promiscuous mode [ 561.815027][T15423] veth1_macvtap: entered promiscuous mode [ 561.881028][T15423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.918484][T15423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.973106][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.000540][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.030738][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.151125][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.484663][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.501510][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.636432][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.646794][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.894212][T15510] Set syz1 is full, maxelem 65536 reached [ 562.911068][T15598] netlink: 'syz.8.2793': attribute type 1 has an invalid length. [ 564.072000][T15621] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 564.392628][T15638] netlink: 'syz.0.2859': attribute type 8 has an invalid length. [ 564.401182][T15638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2859'. [ 564.427486][T15638] bond0: entered promiscuous mode [ 564.455931][T15638] bond_slave_0: entered promiscuous mode [ 564.479886][T15638] bond_slave_1: entered promiscuous mode [ 564.506398][T15638] geneve0: entered promiscuous mode [ 564.526170][T15638] team_slave_0: entered promiscuous mode [ 564.551736][T15638] debugfs: 'hsr2' already exists in 'hsr' [ 564.567262][T15638] Cannot create hsr debugfs directory [ 564.583620][T15638] hsr2: entered promiscuous mode [ 564.882159][T15645] syzkaller0: entered promiscuous mode [ 564.887671][T15645] syzkaller0: entered allmulticast mode [ 564.914853][T15647] netlink: 'syz.6.2862': attribute type 8 has an invalid length. [ 564.958002][T15645] tipc: Enabled bearer , priority 0 [ 564.965162][T15647] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2862'. [ 565.019612][T15647] bond0: entered promiscuous mode [ 565.032302][T15647] bond_slave_0: entered promiscuous mode [ 565.060065][T15647] bond_slave_1: entered promiscuous mode [ 565.078233][T15647] geneve0: entered promiscuous mode [ 565.095724][T15647] team_slave_0: entered promiscuous mode [ 565.103324][T15647] team_slave_0: left promiscuous mode [ 565.122791][T15647] bond0: left promiscuous mode [ 565.127852][T15647] bond_slave_0: left promiscuous mode [ 565.158526][T15647] bond_slave_1: left promiscuous mode [ 565.174297][T15647] geneve0: left promiscuous mode [ 565.207861][T15640] wg1 speed is unknown, defaulting to 1000 [ 565.214514][T15645] tipc: Resetting bearer [ 565.251980][T15645] tipc: Disabling bearer [ 565.271537][T15640] wg1 speed is unknown, defaulting to 1000 [ 565.341739][T15654] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2865'. [ 565.412077][T15654] FAULT_INJECTION: forcing a failure. [ 565.412077][T15654] name failslab, interval 1, probability 0, space 0, times 0 [ 565.430579][T15654] CPU: 0 UID: 0 PID: 15654 Comm: syz.7.2865 Not tainted syzkaller #0 PREEMPT(full) [ 565.430605][T15654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 565.430617][T15654] Call Trace: [ 565.430625][T15654] [ 565.430633][T15654] dump_stack_lvl+0x189/0x250 [ 565.430665][T15654] ? __pfx____ratelimit+0x10/0x10 [ 565.430684][T15654] ? __pfx_dump_stack_lvl+0x10/0x10 [ 565.430718][T15654] ? __pfx__printk+0x10/0x10 [ 565.430745][T15654] ? __pfx___might_resched+0x10/0x10 [ 565.430773][T15654] should_fail_ex+0x414/0x560 [ 565.430808][T15654] should_failslab+0xa8/0x100 [ 565.430828][T15654] __kmalloc_cache_noprof+0x6f/0x6f0 [ 565.430854][T15654] ? __asan_memset+0x22/0x50 [ 565.430876][T15654] ? alloc_netdev_mqs+0xbf8/0x11b0 [ 565.430912][T15654] alloc_netdev_mqs+0xbf8/0x11b0 [ 565.430943][T15654] rtnl_create_link+0x31f/0xd10 [ 565.430974][T15654] rtnl_newlink_create+0x25c/0xb00 [ 565.431002][T15654] ? __lock_acquire+0xab9/0xd20 [ 565.431027][T15654] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 565.431053][T15654] ? __pfx___mutex_lock+0x10/0x10 [ 565.431083][T15654] ? ns_capable+0x8a/0xf0 [ 565.431108][T15654] rtnl_newlink+0x16e4/0x1c80 [ 565.431146][T15654] ? __pfx_rtnl_newlink+0x10/0x10 [ 565.431166][T15654] ? __pfx___schedule+0x10/0x10 [ 565.431206][T15654] ? preempt_schedule+0xae/0xc0 [ 565.431222][T15654] ? __dev_queue_xmit+0x284/0x3740 [ 565.431250][T15654] ? preempt_schedule_common+0x83/0xd0 [ 565.431269][T15654] ? preempt_schedule+0xae/0xc0 [ 565.431286][T15654] ? __pfx_preempt_schedule+0x10/0x10 [ 565.431303][T15654] ? nlmon_xmit+0xb0/0x100 [ 565.431330][T15654] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 565.431357][T15654] ? preempt_schedule_thunk+0x16/0x30 [ 565.431382][T15654] ? __local_bh_enable_ip+0x13e/0x1c0 [ 565.431404][T15654] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 565.431429][T15654] ? __dev_queue_xmit+0x284/0x3740 [ 565.431456][T15654] ? __dev_queue_xmit+0x284/0x3740 [ 565.431481][T15654] ? __dev_queue_xmit+0x1bfb/0x3740 [ 565.431516][T15654] ? __lock_acquire+0xab9/0xd20 [ 565.431558][T15654] ? __pfx_rtnl_newlink+0x10/0x10 [ 565.431577][T15654] rtnetlink_rcv_msg+0x7cf/0xb70 [ 565.431600][T15654] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 565.431617][T15654] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 565.431643][T15654] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 565.431681][T15654] netlink_rcv_skb+0x208/0x470 [ 565.431706][T15654] ? rcu_is_watching+0x15/0xb0 [ 565.431729][T15654] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 565.431751][T15654] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 565.431787][T15654] ? netlink_deliver_tap+0x2e/0x1b0 [ 565.431819][T15654] netlink_unicast+0x82f/0x9e0 [ 565.431850][T15654] ? __pfx_netlink_unicast+0x10/0x10 [ 565.431873][T15654] ? netlink_sendmsg+0x642/0xb30 [ 565.431894][T15654] ? skb_put+0x11b/0x210 [ 565.431920][T15654] netlink_sendmsg+0x805/0xb30 [ 565.431954][T15654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.431981][T15654] ? aa_sock_msg_perm+0xf1/0x1d0 [ 565.432011][T15654] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 565.432031][T15654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.432055][T15654] __sock_sendmsg+0x21c/0x270 [ 565.432088][T15654] ____sys_sendmsg+0x52d/0x830 [ 565.432118][T15654] ? __pfx_____sys_sendmsg+0x10/0x10 [ 565.432153][T15654] ? import_iovec+0x74/0xa0 [ 565.432183][T15654] ___sys_sendmsg+0x21f/0x2a0 [ 565.432210][T15654] ? __pfx____sys_sendmsg+0x10/0x10 [ 565.432276][T15654] ? __fget_files+0x2a/0x420 [ 565.432292][T15654] ? __fget_files+0x3a0/0x420 [ 565.432323][T15654] __sys_sendmmsg+0x227/0x430 [ 565.432352][T15654] ? __pfx___sys_sendmmsg+0x10/0x10 [ 565.432387][T15654] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 565.432430][T15654] ? ksys_write+0x22a/0x250 [ 565.432458][T15654] ? __pfx_ksys_write+0x10/0x10 [ 565.432492][T15654] __x64_sys_sendmmsg+0xa0/0xc0 [ 565.432518][T15654] do_syscall_64+0xfa/0xfa0 [ 565.432538][T15654] ? lockdep_hardirqs_on+0x9c/0x150 [ 565.432556][T15654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.432574][T15654] ? clear_bhb_loop+0x60/0xb0 [ 565.432598][T15654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.432618][T15654] RIP: 0033:0x7efc1fd8f749 [ 565.432635][T15654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.432652][T15654] RSP: 002b:00007efc1dfee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 565.432673][T15654] RAX: ffffffffffffffda RBX: 00007efc1ffe5fa0 RCX: 00007efc1fd8f749 [ 565.432688][T15654] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 565.432708][T15654] RBP: 00007efc1dfee090 R08: 0000000000000000 R09: 0000000000000000 [ 565.432720][T15654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 565.432732][T15654] R13: 00007efc1ffe6038 R14: 00007efc1ffe5fa0 R15: 00007ffec15e9bd8 [ 565.432768][T15654] [ 565.911854][ T5146] Bluetooth: hci6: command 0x0406 tx timeout [ 566.145412][T15663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2869'. [ 566.714017][T15675] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 566.786748][T15681] netlink: 179344 bytes leftover after parsing attributes in process `syz.7.2873'. [ 566.816127][T15679] wg1 speed is unknown, defaulting to 1000 [ 566.829039][T15681] netlink: 'syz.7.2873': attribute type 10 has an invalid length. [ 566.844248][T15679] wg1 speed is unknown, defaulting to 1000 [ 566.867241][T15681] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.882413][T15681] bond0: (slave team0): Enslaving as an active interface with an up link [ 567.859033][ T5825] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 567.876132][ T5825] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 567.888305][ T5825] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 567.907304][ T5825] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 567.922758][ T5825] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 567.953120][T15705] Cannot find del_set index 2 as target [ 568.027792][T15701] wg1 speed is unknown, defaulting to 1000 [ 568.050903][T15701] wg1 speed is unknown, defaulting to 1000 [ 568.540987][T15701] chnl_net:caif_netlink_parms(): no params data found [ 568.784976][T15701] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.798208][T15701] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.808615][T15701] bridge_slave_0: entered allmulticast mode [ 568.817134][T15701] bridge_slave_0: entered promiscuous mode [ 568.827701][T15701] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.836008][T15701] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.852066][T15701] bridge_slave_1: entered allmulticast mode [ 568.864294][T15701] bridge_slave_1: entered promiscuous mode [ 568.928833][T15733] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2889'. [ 568.974756][T15701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.997648][T15701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.027988][T15733] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2889'. [ 569.077956][T15733] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2889'. [ 569.172494][T15701] team0: Port device team_slave_0 added [ 569.193617][T15701] team0: Port device team_slave_1 added [ 569.319019][T15701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.380617][T15701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.417191][T15701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.501223][T15701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.524020][T15701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.561528][T15701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.705504][T15750] ipvlan2: entered promiscuous mode [ 569.742842][T15750] bridge0: port 3(ipvlan2) entered blocking state [ 569.749794][T15750] bridge0: port 3(ipvlan2) entered disabled state [ 569.756594][T15750] ipvlan2: entered allmulticast mode [ 569.765724][T15750] bridge0: entered allmulticast mode [ 569.778511][T15750] ipvlan2: left allmulticast mode [ 569.785176][T15750] bridge0: left allmulticast mode [ 569.786117][T15757] FAULT_INJECTION: forcing a failure. [ 569.786117][T15757] name failslab, interval 1, probability 0, space 0, times 0 [ 569.809082][T15757] CPU: 0 UID: 0 PID: 15757 Comm: syz.6.2896 Not tainted syzkaller #0 PREEMPT(full) [ 569.809105][T15757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 569.809116][T15757] Call Trace: [ 569.809123][T15757] [ 569.809129][T15757] dump_stack_lvl+0x189/0x250 [ 569.809157][T15757] ? __pfx____ratelimit+0x10/0x10 [ 569.809174][T15757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 569.809196][T15757] ? __pfx__printk+0x10/0x10 [ 569.809216][T15757] ? __pfx___might_resched+0x10/0x10 [ 569.809235][T15757] ? fs_reclaim_acquire+0x7d/0x100 [ 569.809260][T15757] should_fail_ex+0x414/0x560 [ 569.809291][T15757] should_failslab+0xa8/0x100 [ 569.809309][T15757] kmem_cache_alloc_node_noprof+0x77/0x710 [ 569.809332][T15757] ? __alloc_skb+0x255/0x430 [ 569.809349][T15757] ? napi_skb_cache_get+0x4a5/0x790 [ 569.809364][T15757] ? napi_skb_cache_get+0x151/0x790 [ 569.809385][T15757] __alloc_skb+0x255/0x430 [ 569.809405][T15757] ? __pfx___alloc_skb+0x10/0x10 [ 569.809428][T15757] ? netlink_ack_tlv_len+0x6c/0x210 [ 569.809450][T15757] netlink_ack+0x146/0xa50 [ 569.809484][T15757] netlink_rcv_skb+0x28c/0x470 [ 569.809503][T15757] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 569.809523][T15757] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 569.809552][T15757] ? bpf_lsm_capable+0x9/0x20 [ 569.809572][T15757] ? security_capable+0x7e/0x2e0 [ 569.809603][T15757] nfnetlink_rcv+0x282/0x2590 [ 569.809620][T15757] ? __dev_queue_xmit+0x284/0x3740 [ 569.809642][T15757] ? __dev_queue_xmit+0x1bfb/0x3740 [ 569.809677][T15757] ? __dev_queue_xmit+0x284/0x3740 [ 569.809709][T15757] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 569.809741][T15757] ? ref_tracker_free+0x63a/0x7d0 [ 569.809759][T15757] ? __asan_memcpy+0x40/0x70 [ 569.809780][T15757] ? __pfx_ref_tracker_free+0x10/0x10 [ 569.809811][T15757] ? skb_clone+0x246/0x3a0 [ 569.809835][T15757] ? __netlink_deliver_tap+0x807/0x850 [ 569.809854][T15757] ? netlink_deliver_tap+0x2e/0x1b0 [ 569.809879][T15757] ? netlink_deliver_tap+0x2e/0x1b0 [ 569.809906][T15757] netlink_unicast+0x82f/0x9e0 [ 569.809931][T15757] ? __pfx_netlink_unicast+0x10/0x10 [ 569.809950][T15757] ? netlink_sendmsg+0x642/0xb30 [ 569.809975][T15757] ? skb_put+0x11b/0x210 [ 569.809997][T15757] netlink_sendmsg+0x805/0xb30 [ 569.810025][T15757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.810048][T15757] ? aa_sock_msg_perm+0xf1/0x1d0 [ 569.810075][T15757] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 569.810091][T15757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.810111][T15757] __sock_sendmsg+0x21c/0x270 [ 569.810139][T15757] ____sys_sendmsg+0x505/0x830 [ 569.810164][T15757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 569.810193][T15757] ? import_iovec+0x74/0xa0 [ 569.810219][T15757] ___sys_sendmsg+0x21f/0x2a0 [ 569.810242][T15757] ? __pfx____sys_sendmsg+0x10/0x10 [ 569.810298][T15757] ? __fget_files+0x2a/0x420 [ 569.810313][T15757] ? __fget_files+0x3a0/0x420 [ 569.810340][T15757] __x64_sys_sendmsg+0x19b/0x260 [ 569.810363][T15757] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 569.810394][T15757] ? __pfx_ksys_write+0x10/0x10 [ 569.810421][T15757] ? do_syscall_64+0xbe/0xfa0 [ 569.810443][T15757] do_syscall_64+0xfa/0xfa0 [ 569.810459][T15757] ? lockdep_hardirqs_on+0x9c/0x150 [ 569.810477][T15757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.810494][T15757] ? clear_bhb_loop+0x60/0xb0 [ 569.810515][T15757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.810531][T15757] RIP: 0033:0x7f2fb438f749 [ 569.810546][T15757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.810561][T15757] RSP: 002b:00007f2fb52d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 569.810580][T15757] RAX: ffffffffffffffda RBX: 00007f2fb45e5fa0 RCX: 00007f2fb438f749 [ 569.810593][T15757] RDX: 0000000000008004 RSI: 0000200000000240 RDI: 0000000000000003 [ 569.810604][T15757] RBP: 00007f2fb52d3090 R08: 0000000000000000 R09: 0000000000000000 [ 569.810615][T15757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.810625][T15757] R13: 00007f2fb45e6038 R14: 00007f2fb45e5fa0 R15: 00007fff5671ce08 [ 569.810656][T15757] [ 570.225114][ T5835] Bluetooth: hci16: command tx timeout [ 570.260773][T15755] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2892'. [ 570.426886][T15701] hsr_slave_0: entered promiscuous mode [ 570.435454][T15701] hsr_slave_1: entered promiscuous mode [ 570.446388][T15701] debugfs: 'hsr0' already exists in 'hsr' [ 570.452561][T15701] Cannot create hsr debugfs directory [ 570.570940][ T5835] Bluetooth: hci7: command 0x0406 tx timeout [ 570.831060][T15701] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.924926][T15784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2904'. [ 571.012655][T15701] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.127361][T15701] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.227522][T15701] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.437659][T15794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2905'. [ 571.461330][T15701] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 571.464104][T15794] netlink: 'syz.0.2905': attribute type 1 has an invalid length. [ 571.483965][T15701] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 571.533726][T15794] 8021q: adding VLAN 0 to HW filter on device bond1 [ 571.553584][T15701] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 571.630393][T15796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 571.642076][T15796] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 571.699664][T15796] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 571.739944][T15701] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 571.774737][T15794] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 571.798761][T15794] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 572.157037][T15701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.201540][T15819] nbd: must specify a size in bytes for the device [ 572.234133][T15701] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.250651][ T5825] Bluetooth: hci16: command tx timeout [ 572.308332][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.315672][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.361910][ T11] block nbd1: Possible stuck request ffff888024e70000: control (read@0,1024B). Runtime 330 seconds [ 572.373070][ T11] block nbd1: Possible stuck request ffff888024e701c0: control (read@1024,1024B). Runtime 330 seconds [ 572.384535][ T11] block nbd1: Possible stuck request ffff888024e70380: control (read@2048,1024B). Runtime 330 seconds [ 572.396359][ T11] block nbd1: Possible stuck request ffff888024e70540: control (read@3072,1024B). Runtime 330 seconds [ 572.442091][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.449255][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.586872][T15820] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 572.632069][T15833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2913'. [ 572.651699][T15833] netlink: zone id is out of range [ 572.660604][T15833] netlink: zone id is out of range [ 572.841397][T15843] netlink: 'syz.0.2916': attribute type 9 has an invalid length. [ 572.850601][T15843] netlink: 'syz.0.2916': attribute type 6 has an invalid length. [ 572.869212][T15843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2916'. [ 572.971596][ T31] INFO: task kworker/u8:4:75 blocked for more than 143 seconds. [ 572.984506][T15701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.992729][ T31] Not tainted syzkaller #0 [ 572.998432][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 573.015038][ T31] task:kworker/u8:4 state:D stack:21760 pid:75 tgid:75 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 573.050360][ T31] Workqueue: netns cleanup_net [ 573.055185][ T31] Call Trace: [ 573.058472][ T31] [ 573.069814][ T31] __schedule+0x1798/0x4cc0 [ 573.074362][ T31] ? __lock_acquire+0xab9/0xd20 [ 573.079231][ T31] ? __lock_acquire+0xab9/0xd20 [ 573.120854][ T31] ? __pfx___schedule+0x10/0x10 [ 573.125764][ T31] ? schedule+0x91/0x360 [ 573.181306][ T31] schedule+0x165/0x360 [ 573.185524][ T31] schedule_preempt_disabled+0x13/0x30 [ 573.230042][ T31] __mutex_lock+0x7e6/0x1350 [ 573.248118][ T31] ? __mutex_lock+0x5bb/0x1350 [ 573.269589][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 573.275020][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 573.299864][ T31] ? kobject_put+0x270/0x480 [ 573.304509][ T31] ? kfree+0x19a/0x6d0 [ 573.308606][ T31] rdma_dev_change_netns+0x39/0x300 [ 573.321752][ T31] rdma_dev_exit_net+0x203/0x340 [ 573.326800][ T31] ? __pfx___might_resched+0x10/0x10 [ 573.333298][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 573.338781][ T31] ? net_generic+0x1e/0x240 [ 573.353149][ T31] ? mutex_is_locked+0x17/0x50 [ 573.357951][ T31] ? rtnl_is_locked+0x15/0x20 [ 573.362868][ T31] ops_undo_list+0x49a/0x990 [ 573.367477][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 573.375649][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 573.382359][ T31] cleanup_net+0x4d8/0x820 [ 573.386818][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 573.392274][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 573.397497][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 573.403445][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 573.409178][ T31] process_scheduled_works+0xae1/0x17b0 [ 573.415265][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 573.421916][ T31] worker_thread+0x8a0/0xda0 [ 573.426537][ T31] kthread+0x711/0x8a0 [ 573.431248][ T31] ? __pfx_worker_thread+0x10/0x10 [ 573.436377][ T31] ? __pfx_kthread+0x10/0x10 [ 573.441487][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 573.453483][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.458715][ T31] ? __pfx_kthread+0x10/0x10 [ 573.465860][ T31] ret_from_fork+0x4bc/0x870 [ 573.472855][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 573.477995][ T31] ? __switch_to_asm+0x39/0x70 [ 573.484156][ T31] ? __switch_to_asm+0x33/0x70 [ 573.488937][ T31] ? __pfx_kthread+0x10/0x10 [ 573.493725][ T31] ret_from_fork_asm+0x1a/0x30 [ 573.498519][ T31] [ 573.502559][ T31] INFO: task syz.1.1623:11582 blocked for more than 143 seconds. [ 573.510562][ T31] Not tainted syzkaller #0 [ 573.515482][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.524521][ T31] task:syz.1.1623 state:D stack:25256 pid:11582 tgid:11580 ppid:5838 task_flags:0x400140 flags:0x00080003 [ 573.537371][ T31] Call Trace: [ 573.541512][ T31] [ 573.544455][ T31] __schedule+0x1798/0x4cc0 [ 573.553201][ T31] ? validate_chain+0x897/0x2140 [ 573.558170][ T31] ? __lock_acquire+0xab9/0xd20 [ 573.564276][ T31] ? __pfx___schedule+0x10/0x10 [ 573.569152][ T31] ? schedule+0x91/0x360 [ 573.573822][ T31] schedule+0x165/0x360 [ 573.577999][ T31] schedule_timeout+0x9a/0x270 [ 573.583753][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 573.589164][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 573.594870][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.600262][ T31] ? wait_for_completion+0x267/0x5d0 [ 573.605554][ T31] wait_for_completion+0x2bf/0x5d0 [ 573.619002][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 573.627013][ T31] ? up_write+0x1c4/0x420 [ 573.631623][ T31] ? remove_client_context+0xc0/0x1e0 [ 573.637004][ T31] disable_device+0x1c6/0x320 [ 573.641859][ T31] ? __pfx_disable_device+0x10/0x10 [ 573.647069][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 573.654463][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 573.660866][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 573.666605][ T31] nldev_dellink+0x2d1/0x320 [ 573.671712][ T31] ? __lock_acquire+0xab9/0xd20 [ 573.676569][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 573.682274][ T31] ? apparmor_capable+0x137/0x1b0 [ 573.687308][ T31] ? bpf_lsm_capable+0x9/0x20 [ 573.692803][ T31] ? security_capable+0x7e/0x2e0 [ 573.697789][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 573.707620][ T31] rdma_nl_rcv+0x6ae/0x980 [ 573.712661][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 573.717638][ T31] ? __lock_acquire+0xab9/0xd20 [ 573.722976][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 573.728185][ T31] netlink_unicast+0x82f/0x9e0 [ 573.733345][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 573.738653][ T31] ? netlink_sendmsg+0x642/0xb30 [ 573.744465][ T31] ? skb_put+0x11b/0x210 [ 573.748729][ T31] netlink_sendmsg+0x805/0xb30 [ 573.755826][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.761371][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 573.766327][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 573.772465][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.777771][ T31] __sock_sendmsg+0x21c/0x270 [ 573.783234][ T31] ____sys_sendmsg+0x505/0x830 [ 573.788018][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 573.793568][ T31] ? import_iovec+0x74/0xa0 [ 573.798089][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 573.803278][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 573.808517][ T31] ? __fget_files+0x2a/0x420 [ 573.814448][ T31] ? __fget_files+0x3a0/0x420 [ 573.819174][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 573.826125][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 573.832164][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 573.837463][ T31] ? do_syscall_64+0xbe/0xfa0 [ 573.842945][ T31] do_syscall_64+0xfa/0xfa0 [ 573.847461][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.853240][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.861564][ T31] ? clear_bhb_loop+0x60/0xb0 [ 573.866259][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.872377][ T31] RIP: 0033:0x7f2ef4d8f749 [ 573.876795][ T31] RSP: 002b:00007f2ef5bb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 573.885478][ T31] RAX: ffffffffffffffda RBX: 00007f2ef4fe6090 RCX: 00007f2ef4d8f749 [ 573.894195][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 573.902556][ T31] RBP: 00007f2ef4e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 573.910699][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.918658][ T31] R13: 00007f2ef4fe6128 R14: 00007f2ef4fe6090 R15: 00007ffdcffd35c8 [ 573.927436][ T31] [ 573.931197][ T31] INFO: task syz.0.1710:11827 blocked for more than 144 seconds. [ 573.965695][ T31] Not tainted syzkaller #0 [ 573.974985][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.000969][ T31] task:syz.0.1710 state:D stack:24288 pid:11827 tgid:11818 ppid:5823 task_flags:0x400140 flags:0x00080003 [ 574.019664][ T31] Call Trace: [ 574.022974][ T31] [ 574.025916][ T31] __schedule+0x1798/0x4cc0 [ 574.049723][ T31] ? __lock_acquire+0xab9/0xd20 [ 574.054633][ T31] ? __lock_acquire+0xab9/0xd20 [ 574.076226][ T31] ? __pfx___schedule+0x10/0x10 [ 574.090197][ T31] ? schedule+0x91/0x360 [ 574.094483][ T31] schedule+0x165/0x360 [ 574.098651][ T31] schedule_preempt_disabled+0x13/0x30 [ 574.121583][ T31] __mutex_lock+0x7e6/0x1350 [ 574.126223][ T31] ? __mutex_lock+0x5bb/0x1350 [ 574.140300][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 574.145718][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 574.170596][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 574.176291][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 574.200106][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 574.205360][ T31] ? _raw_spin_unlock+0x28/0x50 [ 574.229602][ T31] rdma_dev_change_netns+0x39/0x300 [ 574.234856][ T31] rdma_dev_exit_net+0x203/0x340 [ 574.253874][ T31] ? __pfx___might_resched+0x10/0x10 [ 574.259229][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 574.302198][ T31] ? net_generic+0x1e/0x240 [ 574.306758][ T31] ? mutex_is_locked+0x17/0x50 [ 574.330316][ T5825] Bluetooth: hci16: command tx timeout [ 574.340222][ T31] ? rtnl_is_locked+0x15/0x20 [ 574.344937][ T31] ops_undo_list+0x49a/0x990 [ 574.373028][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 574.378185][ T31] ? ops_init+0x469/0x5c0 [ 574.403739][ T31] setup_net+0x2d6/0x320 [ 574.408033][ T31] ? __pfx_setup_net+0x10/0x10 [ 574.417366][ T31] ? copy_net_ns+0x337/0x4e0 [ 574.425841][ T31] ? down_read_killable+0x1d1/0x350 [ 574.431671][ T31] ? preinit_net+0x47d/0x780 [ 574.436284][ T31] copy_net_ns+0x34e/0x4e0 [ 574.440767][ T31] create_new_namespaces+0x3f3/0x720 [ 574.446069][ T31] ? security_capable+0x7e/0x2e0 [ 574.451135][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 574.456870][ T31] ksys_unshare+0x4c8/0x8c0 [ 574.461697][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 574.466735][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 574.475136][ T31] __x64_sys_unshare+0x38/0x50 [ 574.480005][ T31] do_syscall_64+0xfa/0xfa0 [ 574.484514][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.490760][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.496839][ T31] ? clear_bhb_loop+0x60/0xb0 [ 574.501883][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.507792][ T31] RIP: 0033:0x7f0f0118f749 [ 574.512558][ T31] RSP: 002b:00007f0f01f82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 574.521238][ T31] RAX: ffffffffffffffda RBX: 00007f0f013e6090 RCX: 00007f0f0118f749 [ 574.529216][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 574.537329][ T31] RBP: 00007f0f01213f91 R08: 0000000000000000 R09: 0000000000000000 [ 574.545401][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.553466][ T31] R13: 00007f0f013e6128 R14: 00007f0f013e6090 R15: 00007ffc7aec28a8 [ 574.561630][ T31] [ 574.567501][ T31] [ 574.567501][ T31] Showing all locks held in the system: [ 574.579129][ T31] 2 locks held by kworker/u8:0/12: [ 574.585461][ T31] 1 lock held by ksoftirqd/1/23: [ 574.591460][ T31] 1 lock held by khungtaskd/31: [ 574.596323][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 574.615312][ T31] 4 locks held by kworker/u8:4/75: [ 574.625270][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 574.636752][ T31] #1: ffffc9000219fba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 574.648495][ T31] #2: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 574.663103][ T31] #3: ffff88807c034700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 574.677738][ T31] 2 locks held by getty/5587: [ 574.682727][ T31] #0: ffff88814dc5e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 574.692622][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 574.703101][ T31] 3 locks held by kworker/1:5/5927: [ 574.708308][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 574.720248][ T31] #1: ffffc900049a7ba0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 574.735006][ T31] #2: ffff888028e25240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1f7/0x3b0 [ 574.745641][ T31] 2 locks held by kworker/1:6/5937: [ 574.750958][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 574.762541][ T31] #1: ffffc900049e7ba0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 574.773686][ T31] 1 lock held by udevd/8736: [ 574.782359][ T31] #0: ffff888024d8b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 574.791998][ T31] 2 locks held by syz.1.1623/11582: [ 574.797198][ T31] #0: ffffffff99b6b958 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 574.807628][ T31] #1: ffff88807c034700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 574.820236][ T31] 2 locks held by syz.0.1710/11827: [ 574.825448][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 574.835235][ T31] #1: ffff88807c034700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 574.847082][ T31] 2 locks held by syz.2.1820/12147: [ 574.852789][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 574.862765][ T31] #1: ffff88807c034700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 574.874637][ T31] 2 locks held by syz.4.1991/12701: [ 574.882091][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 574.896117][ T31] #1: ffff88807c034700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 574.908179][ T31] 2 locks held by syz.6.2197/13387: [ 574.913789][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 574.923511][ T31] #1: ffff88807c034700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 574.935390][ T31] 2 locks held by syz.7.2215/13455: [ 574.941631][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 574.951390][ T31] #1: ffff88807c034700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 574.962925][ T31] 2 locks held by syz.8.2254/13595: [ 574.968127][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 574.978136][ T31] #1: ffff88807c034700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 574.992486][ T31] 2 locks held by syz.8.2254/13602: [ 574.997707][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 575.008551][ T31] #1: ffff88807c034700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 575.020792][ T31] 2 locks held by syz.5.2283/13691: [ 575.025994][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 575.035980][ T31] #1: ffff88807c034700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 575.048524][ T31] 2 locks held by syz.3.2376/14021: [ 575.054155][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 575.063964][ T31] #1: ffff88807c034700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 575.076052][ T31] 2 locks held by syz.9.2655/14937: [ 575.082425][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 575.093681][ T31] #1: ffff88807c034700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 575.105441][ T31] 2 locks held by syz.1.2674/15017: [ 575.111948][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 575.121653][ T31] #1: ffff88807c034700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 575.133377][ T31] 2 locks held by syz.4.2807/15457: [ 575.138581][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 575.148882][ T31] #1: ffff88807c034700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 575.161040][ T31] 2 locks held by syz.8.2860/15640: [ 575.166257][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 575.177105][ T31] #1: ffff88807c034700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 575.191982][ T31] 5 locks held by syz-executor/15701: [ 575.197367][ T31] #0: ffff888090090dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 575.207696][ T31] #1: ffff8880900900b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 575.217832][ T31] #2: ffffffff8f436808 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 575.228657][ T31] #3: ffff888096185b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 575.238215][ T31] #4: ffffffff8df43178 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 575.250527][ T31] 3 locks held by syz.7.2915/15834: [ 575.255736][ T31] #0: ffff88802f86cdc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 575.266410][ T31] #1: ffff88802f86c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 575.276710][ T31] #2: ffffffff8f436808 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 575.287638][ T31] 2 locks held by syz.0.2918/15849: [ 575.294858][ T31] #0: ffff88806cb5cdc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 575.306156][ T31] #1: ffff88806cb5c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 575.316929][ T31] 2 locks held by dhcpcd/15851: [ 575.323560][ T31] #0: ffff888065f80d88 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 575.334069][ T31] #1: ffffffff8df43178 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 575.345592][ T31] 1 lock held by dhcpcd/15852: [ 575.350902][ T31] #0: ffff88803de7c260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 575.360863][ T31] [ 575.363191][ T31] ============================================= [ 575.363191][ T31] [ 575.376668][ T31] NMI backtrace for cpu 0 [ 575.376683][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 575.376705][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 575.376717][ T31] Call Trace: [ 575.376725][ T31] [ 575.376733][ T31] dump_stack_lvl+0x189/0x250 [ 575.376767][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 575.376794][ T31] ? __pfx__printk+0x10/0x10 [ 575.376826][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 575.376856][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 575.376880][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.376912][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 575.376944][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 575.376974][ T31] watchdog+0xf60/0xfa0 [ 575.376999][ T31] ? watchdog+0x1e2/0xfa0 [ 575.377024][ T31] kthread+0x711/0x8a0 [ 575.377053][ T31] ? __pfx_watchdog+0x10/0x10 [ 575.377070][ T31] ? __pfx_kthread+0x10/0x10 [ 575.377090][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 575.377118][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.377135][ T31] ? __pfx_kthread+0x10/0x10 [ 575.377162][ T31] ret_from_fork+0x4bc/0x870 [ 575.377185][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 575.377212][ T31] ? __switch_to_asm+0x39/0x70 [ 575.377236][ T31] ? __switch_to_asm+0x33/0x70 [ 575.377251][ T31] ? __pfx_kthread+0x10/0x10 [ 575.377276][ T31] ret_from_fork_asm+0x1a/0x30 [ 575.377308][ T31] [ 575.377315][ T31] Sending NMI from CPU 0 to CPUs 1: [ 575.532730][ C1] NMI backtrace for cpu 1 [ 575.532755][ C1] CPU: 1 UID: 0 PID: 147 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 575.532775][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 575.532786][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 575.532813][ C1] RIP: 0010:kasan_byte_accessible+0x1b/0x30 [ 575.532832][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df 0f b6 04 07 3c 08 0f 92 c0 cc cc cc cc cc 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 [ 575.532847][ C1] RSP: 0018:ffffc90002ea73d8 EFLAGS: 00000293 [ 575.532861][ C1] RAX: 0000000000000001 RBX: ffffffff81738c62 RCX: b5c700877e4adb00 [ 575.532873][ C1] RDX: 0000000000000000 RSI: ffffffff81738c62 RDI: 1ffffffff1be7adc [ 575.532885][ C1] RBP: ffffffff81738c45 R08: 0000000000000000 R09: 0000000000000000 [ 575.532896][ C1] R10: ffffc90002ea75b8 R11: ffffffff81ac2e10 R12: 0000000000000002 [ 575.532908][ C1] R13: ffffffff8df3d6e0 R14: ffffffff8df3d6e0 R15: 0000000000000000 [ 575.532920][ C1] FS: 0000000000000000(0000) GS:ffff888126235000(0000) knlGS:0000000000000000 [ 575.532933][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 575.532945][ C1] CR2: 00007fff1b30d150 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 575.532959][ C1] Call Trace: [ 575.532965][ C1] [ 575.532971][ C1] __kasan_check_byte+0x12/0x40 [ 575.532988][ C1] lock_acquire+0x8d/0x360 [ 575.533007][ C1] ? unwind_next_frame+0xa5/0x2390 [ 575.533026][ C1] ? kasan_save_track+0x3e/0x80 [ 575.533049][ C1] ? unwind_next_frame+0xa5/0x2390 [ 575.533067][ C1] unwind_next_frame+0xc2/0x2390 [ 575.533089][ C1] ? unwind_next_frame+0xa5/0x2390 [ 575.533110][ C1] ? unwind_next_frame+0xa5/0x2390 [ 575.533129][ C1] ? stack_trace_save+0x9c/0xe0 [ 575.533152][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 575.533174][ C1] arch_stack_walk+0x11c/0x150 [ 575.533196][ C1] ? kasan_save_track+0x3e/0x80 [ 575.533220][ C1] stack_trace_save+0x9c/0xe0 [ 575.533241][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 575.533264][ C1] ? __lock_acquire+0xab9/0xd20 [ 575.533282][ C1] kasan_save_track+0x3e/0x80 [ 575.533303][ C1] ? kasan_save_track+0x3e/0x80 [ 575.533351][ C1] __kasan_slab_alloc+0x6c/0x80 [ 575.533375][ C1] kmem_cache_alloc_noprof+0x367/0x6e0 [ 575.533397][ C1] ? skb_clone+0x212/0x3a0 [ 575.533420][ C1] skb_clone+0x212/0x3a0 [ 575.533441][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x5b5/0x7e0 [ 575.533470][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 575.533489][ C1] process_scheduled_works+0xae1/0x17b0 [ 575.533520][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 575.533546][ C1] worker_thread+0x8a0/0xda0 [ 575.533577][ C1] kthread+0x711/0x8a0 [ 575.533599][ C1] ? __pfx_worker_thread+0x10/0x10 [ 575.533616][ C1] ? __pfx_kthread+0x10/0x10 [ 575.533638][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 575.533662][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.533678][ C1] ? __pfx_kthread+0x10/0x10 [ 575.533699][ C1] ret_from_fork+0x4bc/0x870 [ 575.533717][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 575.533736][ C1] ? __switch_to_asm+0x39/0x70 [ 575.533750][ C1] ? __switch_to_asm+0x33/0x70 [ 575.533763][ C1] ? __pfx_kthread+0x10/0x10 [ 575.533784][ C1] ret_from_fork_asm+0x1a/0x30 [ 575.533807][ C1]