last executing test programs: 2m24.679113857s ago: executing program 32 (id=585): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f00000001c0)={0x2, 0x2, 0xf0, &(0x7f0000000540)=""/240}) unshare(0x6a040000) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfe, 0x20000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x62040200) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0xd9, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0x12, "04030e5c61f849be7f64154db7bcc478"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) accept(r6, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0xffffffffffffff9a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a01010000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x104}, 0x1, 0x0, 0x0, 0x4084}, 0x4000000) 2m23.672727726s ago: executing program 33 (id=588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000150a01020000000000000000000000000900010073797a3000000000a746e084542d961cbb9f90e9949eebb73d963523001932d177fb8917b6b42259c9e3e257cdefb57e6b70657c9c31cfd1a53aade72e17fbd86cb9f50d1f64fe798402813f49eb53d240600175ba3f69b101348f025b48191e73b2ccb20ad5408de2c2273154451b58"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20}, 0x4b) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b001300000008000100000000000800030003000000320a55da2c5d5ef4f68f619cb083a5673149bc83e46a4831621f9acdb0cc90561b"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x880) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffff", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="002c49728688000000000000000000000000010186dd"], 0x38}}, 0xc4c4) syz_emit_ethernet(0x2e, &(0x7f0000000700)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@ra={0x94, 0x4}]}}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) 2m22.163984113s ago: executing program 34 (id=602): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0xe, 0x4932, 0x7f, 0x41, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000040)=@raw=[@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x0, 0xa, 0x5, 0x0, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f0000000100)='GPL\x00', 0xae, 0x6, &(0x7f0000000140)=""/6, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0xb, 0xa, 0x8}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f00000001c0)=[r0], &(0x7f0000000200)=[{0x5, 0x5, 0x7, 0x3}, {0x4, 0x5, 0x5, 0xa}, {0x4, 0x2, 0xb, 0xb}], 0x10, 0xffffffba}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r8, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={@map=r6, 0xffffffffffffffff, 0x17, 0x1, r7, @void, @value=r7, @void, @void, r9}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r4, r5, 0x34, 0x0, @val=@tcx={@void, @value=r10, @void, @void, r9}}, 0x1c) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002540)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000105000100"], 0x64}}, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000010000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r12, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r13}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@fallback=r11, r1, 0x1e, 0x24, r2, @void, @void, @void, @value=r13, r9}, 0x20) 2m20.275807574s ago: executing program 35 (id=625): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x62040200) (async) unshare(0x62040200) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) write$tun(0xffffffffffffffff, 0x0, 0x3e) (async) write$tun(0xffffffffffffffff, 0x0, 0x3e) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x802}, 0xe) (async) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x802}, 0xe) writev(r3, 0x0, 0x0) (async) writev(r3, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="e8", 0x1}], 0x1}}], 0x1, 0x40800) (async) sendmmsg$inet(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="e8", 0x1}], 0x1}}], 0x1, 0x40800) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000100)=0xe73, 0x4) shutdown(r3, 0x1) (async) shutdown(r3, 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x700, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xff, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x58}, 0x1, 0x7}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e22, 0x2, @local, 0x80000001}], 0x2c) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe4}}, 0x20000010) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe4}}, 0x20000010) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40804) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="440000001000010400000000000000b4ce770000000000d16ef45fb7149b455b8b2a536521bc6d1f6d6bc9bbe906f5a0684658f9628ba6f70080000094c65cee3ea0485bb3038702e6c2b27f1568c25bf78cec4a724a0a5bf692bcab1c71f7a4188de49c537d54fd02e7296399a7f9833173a3f2f92547271336e89343008963585833df912c95d5340150312080438a8d5e0f16a5cf4596a590e8769858f685e78f08d62c37113b1135aa3d862b8e78dd67df98b9f4329ebf46e624a0f82c4d5f4237584050db5e6649ffb5b2ad5b9a8a61d03e9d744ac5d33ccab4a989f348b7f01600f00f7ed858f90762a8a623f995b84e2769a8388afb162961249df0668dcb07327b8bc1b62a5f3856210d6f79d28ae09c04b3474f4024e711433d11d7a074a71595d84ab5f7bc6eae24475d352530d4622d40df54cb67ee647bd5b7e95f7a41f9adb15e2b7105228d837cf4c715e53b9d5dca65bb838eb6ae1dc3eb7b22f437cd22218feacb279207f3", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f56"], 0xfd12}}, 0x0) 2m12.778750816s ago: executing program 36 (id=674): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) unshare(0x24020400) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000440)={0x0, 0x0, 0x8, r5, 0x2}, 0xc) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000200), 0x10) connect$pppl2tp(r6, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x4, 0x4, 0x0, 0x2}}, 0x2e) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1e, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000000400000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000209500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRESOCT, @ANYRESHEX=r3, @ANYRES32=r1, @ANYBLOB="0000000000000000af9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x6c) (async) getsockname(r2, 0x0, &(0x7f0000000000)) (async) socket$kcm(0x10, 0x2, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) listen(0xffffffffffffffff, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6800000002060500000000000000000005000004050005000100000014000780050009002e00000008000b4000000008050004000000000015000300686173683a69702c706f72742c6e65740000000005000100070000000d0003006c6973743a73657400000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000001}, 0x8880) (async) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000e000000000000000000000000001000000000000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff000000000b06c73bf4b304ba7694970b745e699cff23d780c1019d2c88bc1674da193f8f66525b61964120cadc3b2508f396e34dbed9516e845c32f1111f981f46346ba46fc8356da481d3342cb84fca60c8fb0ea81b"]}, 0x153) 2m10.19699477s ago: executing program 37 (id=702): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) 1m51.58439238s ago: executing program 38 (id=735): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003000000000000000000000002000000000000000047d43c23bd6d33"], 0x0, 0x56, 0x0, 0x0, 0x4}, 0x28) unshare(0x6a040000) bind$rose(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r8 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r8, 0x61d8, 0x0) socket$inet(0x2b, 0x801, 0x0) socket$packet(0x11, 0x2, 0x300) r9 = socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES16=r9], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r11, 0x27, 0x14, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f5b0800", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m24.406203368s ago: executing program 39 (id=891): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff1410b702000008000000b70300000000000085000000720000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000002c0)=0x1) sendmsg$nl_route(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x299a, 0x1}}}}]}, 0x58}}, 0x4000) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x3}, {}, {0xa, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_MARK={0x10, 0xa, {0x6, 0x5}}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x77}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x800) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0xc4c4) 1m11.007879165s ago: executing program 40 (id=975): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001540)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000880) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000180)={0x2c, 0x97b63d61e801dfb7}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x60) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x120040, 0x4) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) unshare(0x7eca7ff7672546f6) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0x200000}, 0x100) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f60) 1m5.702440745s ago: executing program 1 (id=1041): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000240)=r2}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000004c0)={r4, &(0x7f0000000480)="3d0b41e2"}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd30}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x100a, &(0x7f0000000800)=""/4106, 0x0, 0xd}, 0x94) 1m5.669828595s ago: executing program 1 (id=1042): r0 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x4, 0x4) sendmmsg$inet(r0, &(0x7f00000049c0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="5d5ff9883c7a858a8e2659b069f9925b8f64172976084d06bab86f8818dbabc6bd9cdf22850db42064ab50a2a36fef3bef5a251d", 0x34}], 0x1}}], 0x1, 0x20000800) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xfff3, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x40010) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x3, 'nicvf0\x00', {0x2}, 0x7}) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@dev={0xac, 0x14, 0x14, 0x36}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x9833bf88d1b218f5, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d6, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0x4, 0x8, 0x0, 0x40000}}, 0xe8) 1m5.484461819s ago: executing program 1 (id=1043): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x2404c051) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x1, 0x30, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@cipso={0x86, 0x8, 0x2, [{0x1, 0x2}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xfffe}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)='@\x00'}, 0x30) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000380)='ipvlan0\x00') sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20000645}, 0x0) 1m5.278286293s ago: executing program 1 (id=1044): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYRES8=r5, @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018200000", @ANYRES32, @ANYBLOB="000000000000000095000000000002000000000000060000"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x1}, 0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r3) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r7) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="34010000e0f2f3355a56", @ANYRES16=r9, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) recvfrom(r1, &(0x7f0000000380)=""/89, 0x59, 0x20, &(0x7f0000000400)=@l2tp={0x2, 0x0, @empty, 0x4}, 0x80) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000825bd7000fbdbdf250500000006001c0001000000060008000b000200000005002200000000000c0010000080000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4008880) sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x4400) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000003fc0)={&(0x7f0000003f80)=@getsa={0x28, 0x12, 0x1, 0x70bd25, 0x25dfdbfe, {@in6=@local, 0x4d2, 0x2, 0xff}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x24000054) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000b9", @ANYRES16=r5, @ANYBLOB="e31725bd7000ffdbdf2502000000"], 0x14}}, 0x10) 1m5.089206346s ago: executing program 41 (id=1000): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401}, 0x38) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r2, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) sendmmsg$sock(r2, &(0x7f0000000240)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0xb7, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @remote, 0x60}, 0x80, 0x0}}], 0x2, 0x4008094) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r3, 0x0, 0xffffffff000) socket$kcm(0x29, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c) syz_open_procfs$namespace(0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="000027bd7004faffffff01000000"], 0x14}}, 0x8084) unshare(0x62040200) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x800, @none, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) 1m5.077044392s ago: executing program 1 (id=1046): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x4000}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000001c0)={0xb}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0x10, 0x80000, 0x8) sendmmsg$inet_sctp(r1, &(0x7f0000000280)=[{&(0x7f0000000200)=@in6={0xa, 0x4e20, 0xffffff81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xae}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000d80)="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", 0x1000}, {&(0x7f0000000340)="bd104fb9d6158ba342e5a016ddfd35ee60f437c5859082c57313455a39fa36a795af1d842561238961390e11cbad6c0e82a8da10dc097464b40f184fc21e40151e3fa971dd624bcdc3b270473591c6a3a2c25c08024ea09212cb44eb89f91f434a755618d40d52ca85374231100d7ba76cdff03bcbdeb7378fc949e1075957bd628f0451d6b9416f5aaa146cecc49d3493adfa5d9ce7075309911de0c808bdfc5b49b6155b9e34e53f29622317cb89288ac1dafe910eb9095f55aa488543ff95f5d25ac458fecbdb1346890429510dccc2a130a2a90c18", 0xd7}], 0x2, &(0x7f0000000440)=[@authinfo={0x18, 0x84, 0x6, {0x7}}, @sndinfo={0x20, 0x84, 0x2, {0xb, 0x1, 0x9, 0xa19e}}, @authinfo={0x18, 0x84, 0x6, {0x1}}, @authinfo={0x18, 0x84, 0x6, {0x100}}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0xb0, 0x11}], 0x1, 0x8800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmmsg$sock(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="74b17a07", 0x4}], 0x1}}], 0x1, 0x20000000) 1m4.947659077s ago: executing program 1 (id=1047): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000b32a623cd344c3a9f629000076000d0b0040008be5816083000000000003"], 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x1e, 0x4, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000200)=r8) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) 1m3.911431236s ago: executing program 42 (id=1004): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x18) unshare(0x62040200) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) syz_emit_ethernet(0x66, &(0x7f00000003c0)=ANY=[], 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYRES32=r3, @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x9}]}}]}, 0x44}}, 0x20004055) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000070a010000000000000f4f0003000004"], 0x14}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="000008060000"], 0xfdef) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 55.907784368s ago: executing program 43 (id=1024): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x62040400) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d03000008009f"], 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x28040010) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="02030003310000002cbd7000fbdbdf2502000900080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a00000000000000fc0100000000000000000000000000010700000000000000210008000008"], 0x188}, 0x1, 0x7}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r8, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r10 = accept(r7, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r0, &(0x7f0000000180)=""/60, 0x3c, 0x4100, 0x0, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r11, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x20000, @local, 0x13}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000300)=@int=0x800, 0x4) 50.518823382s ago: executing program 9 (id=1072): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x37, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f00000002c0)=r2, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r3, 0x84, 0x0, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="00446916ab", 0x5}], 0x1, &(0x7f0000000640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x38}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x4c, 0x7, 0x0, 0x0, 0xf8, 0x0, 0xfc, 0xfe, 0x2, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0x45, [0x0, 0x89ff]}}) 50.237729619s ago: executing program 9 (id=1073): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x2, @in=@local, 0x2, 0x1, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1a, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, &(0x7f0000000540)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT, @ANYBLOB="7940c0aff01ef3c4270e6a901b83fbb93e0e9bfbe77647a71c7ebf6c6b371a7e6068f0f3", @ANYBLOB="5f119e28955a889174aff66b17dccf26fdcb5a479d6e62d41808597186b32681b877de77411d8e1ead87e06be362cd6101fdad8a0d5fb1df01440b0a85db6a44f032beb6bfeab917240dce80221bb86b44caa6d9ba30962c9d823686ccf6d31d2dd5b4f939feedc40ae21c2feceb4b3e4722934e2c24e2f74d51ba6d136d95bc9ad98ef7fe88edf005bd7791608bc80851fb86097aaf2dcc49530fb37a5ed2b881ee2b3e9cba66eee6814daa2747bff2a277d4fb314ac42a2a951e0dfa177c9d7a590cd92e3576e59e7c5c6842b8dc434bcce09cb7f53cd04c0ef1cfbc1dfa88fc214c29874a23d9bbe9f6b163cfb3"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000980)=@delqdisc={0x264, 0x25, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xffff, 0xffe0}, {0xfff2, 0xd}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1e4, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0x4, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x0, 0x4, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x40}]}]}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x13c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xc}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffffc}]}, {0xffffffffffffffd2, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x39}]}, {0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xe}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}]}, {0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffffff81}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x10}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xe}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x800}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xffffffeb}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffffff8d}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xb}]}, {0x4c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x800}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2d1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x40000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x98}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x4}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x60, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2dbb}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xa1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7fff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x3}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x8000}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x5}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff7}, @TCA_RATE={0x6, 0x5, {0x7, 0x2}}, @qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10}, @TCA_RATE={0x6, 0x5, {0x80, 0xa}}, @TCA_EGRESS_BLOCK={0x8}, @TCA_EGRESS_BLOCK={0x8}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0x7}]}, 0x264}}, 0x1) unshare(0x6a040000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000940)=[{&(0x7f0000000480)=""/133, 0x85}], 0x1, 0x4, 0x6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f00000006c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='c ', @ANYRESDEC], 0xb) close(r7) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000002000000040000000200000000000000", @ANYRES32, @ANYBLOB="0008000000000000000612000041830000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11}, &(0x7f0000000040), &(0x7f0000000140)=r10}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r11}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r10}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r11, &(0x7f0000000040)}, 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) 50.16062674s ago: executing program 2 (id=1074): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x1418, 0x1, 0x2, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x7, 0x80, 0x1, 0x1, {{0x17, 0x4, 0x1, 0x0, 0x5c, 0x67, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @local, {[@timestamp={0x44, 0x18, 0x61, 0x0, 0x2, [0x8001, 0x3, 0xffffff7f, 0xd3d, 0x101]}, @timestamp_addr={0x44, 0xc, 0xb8, 0x1, 0x0, [{@rand_addr=0x64010101, 0x1ff}]}, @ssrr={0x89, 0x7, 0x60, [@rand_addr=0x64010100]}, @lsrr={0x83, 0x7, 0xaa, [@private=0xa010101]}, @noop, @timestamp_prespec={0x44, 0x14, 0xff, 0x3, 0x7, [{@broadcast, 0x1ff}, {@broadcast}]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062012000"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', r2, 0xf}, 0x94) 49.934269729s ago: executing program 2 (id=1075): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x18, 0x0, 0x2}, 0x28) unshare(0x2c020400) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$inet6(0xa, 0x3, 0x5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000001e00), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff56}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001e40)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[], 0x20) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000180)={0x4}) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r4, 0x0, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r6, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="8400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084) 49.859985161s ago: executing program 44 (id=1047): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000b32a623cd344c3a9f629000076000d0b0040008be5816083000000000003"], 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x1e, 0x4, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000200)=r8) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) 49.438975917s ago: executing program 2 (id=1077): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x2404c051) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x1, 0x30, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@cipso={0x86, 0x8, 0x2, [{0x1, 0x2}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xfffe}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)='@\x00'}, 0x30) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000380)='ipvlan0\x00') sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20000645}, 0x0) 49.235483971s ago: executing program 9 (id=1078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x1201}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x28}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x88, 0x0, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010101}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}, @CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x48800) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9c}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) 48.751930058s ago: executing program 9 (id=1079): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004508004000000000000690780a010100ac14140000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b0000000907800001d04f9894a46cd60359b3aafdd53f3ec839dcf1312c1404c6a8c245e3bcff08a65d1ba3d3f0965"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x300, 0x2, 0x1, 'syz0\x00', 0x3}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 48.655511914s ago: executing program 2 (id=1080): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='\a', 0x1}, {0x0}], 0x2, &(0x7f0000001740)=ANY=[@ANYBLOB="300000000000000084000000010000000200000041"], 0x30}, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000002140), r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002180)={0x3c, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000fc0), 0x4) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) (async) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) (async) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) (async) sendmsg$inet_sctp(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='\a', 0x1}, {0x0}], 0x2, &(0x7f0000001740)=ANY=[@ANYBLOB="300000000000000084000000010000000200000041"], 0x30}, 0x0) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x2}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000002140), r2) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002180)={0x3c, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000fc0), 0x4) (async) 48.474440809s ago: executing program 9 (id=1082): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) (fail_nth: 29) 48.289471878s ago: executing program 2 (id=1083): r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'xfrm0\x00', 0x3}, 0x18) r1 = socket(0x27, 0x803, 0x2) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x20, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8094dc8eef98dcfa}, {0xffff, 0xffff}, {0xc, 0x8017}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 47.797811688s ago: executing program 2 (id=1084): socket$unix(0x1, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x109801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x24004004) socketpair(0xa, 0x80000, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f0000001b00), &(0x7f0000000000)=0x4) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x20) unshare(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x4, 0x3}, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0xc0000000}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) unshare(0x62040200) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r7, 0x1) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) r8 = socket$inet(0xa, 0x801, 0x84) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x4a, &(0x7f00000030c0), 0x4) recvmmsg(r7, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) 47.746259119s ago: executing program 9 (id=1086): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x1, @remote}, 0xa}}, 0x26) getsockname(r0, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) listen(0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r3, 0xcfad5000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x1000) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 35.27174638s ago: executing program 5 (id=1142): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x700, 0x9325eec23c8f91d9, 0x6, 0x400, {{0x17, 0x4, 0x1, 0x8, 0x5c, 0x68, 0x0, 0x5, 0x2f, 0x0, @empty, @empty, {[@end, @timestamp_addr={0x44, 0x1c, 0xb4, 0x1, 0xa, [{@empty, 0x5}, {@broadcast, 0x8}, {@multicast1, 0xd101}]}, @noop, @cipso={0x86, 0x29, 0x2, [{0x0, 0xe, "57309d46e4df56ca6e56a640"}, {0x1, 0x10, "7bd041800abe0652f9226fc5afaa"}, {0x5, 0x5, "dc24f9"}]}]}}}}}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000008800000088000000070000000000000000000009040000000800000000000009000000000100000006000093000000000200000006000000060000000a0000000800000009000000060000000b0f00000f0100000f000000d3000000060000000c000000ff03000005000000050000000400000006000000070000000000000204000000080000000000001101000000ffffffff00006f615f3000"], &(0x7f0000000280), 0xa7, 0x0, 0x1, 0x6ddd}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000000000000fbffffff00000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="01000000020035f75d5a2ced20cb00000000000000000005000000270d0268df24225ec0f16fd153981bb651488e0afa099e77ce61bcb7"], 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000000000000fbffffff00000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="01000000020035f75d5a2ced20cb00000000000000000005000000270d0268df24225ec0f16fd153981bb651488e0afa099e77ce61bcb7"], 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCGSKNS(r2, 0x894c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000800000091e10000000000009500000000000000"], &(0x7f0000001040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0) r3 = socket(0x2, 0x80805, 0x0) socket$pppoe(0x18, 0x1, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="090000000000000056ffc2a000bb000000000000000000000000000004018000907800010002"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) (async) unshare(0x6a040000) ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x2) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 35.061086127s ago: executing program 5 (id=1145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffffffff0000000000000000000000003c040000053500000a0002000a0010000000000000000000"], 0xac}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffffffff0000000000000000000000003c040000053500000a0002000a0010000000000000000000"], 0xac}}, 0x0) (async) 34.862667577s ago: executing program 5 (id=1147): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x2404c051) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x1, 0x30, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@cipso={0x86, 0x8, 0x2, [{0x1, 0x2}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xfffe}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)='@\x00'}, 0x30) ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f0000000380)='ipvlan0\x00') sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="8d2206001100ff002800128009000100766c616e00000000180002800c0002001f0000001f0000", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20000645}, 0x0) 34.609065131s ago: executing program 5 (id=1150): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000007c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x400, 0x7fff, 0x4, 0x0, 0xfa, 0x6, 0xe}, &(0x7f00000005c0)=0x9c) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010003904299375a7fea0e534e557c6bd", @ANYRES32=r5, @ANYBLOB="01980000000000001800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x20048001}, 0x8080) sendto$packet(r2, &(0x7f0000000640)="e8", 0x1, 0x40, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000880)={r1, 0xa1, "ae46865b5d845882de8345bff12712c4a3c0ad3ada7bb24cd04d19e644b1cd3a8db94b7304f704bf96c39e7ec4b59011fce6aa76e1e42ba94fce1e5d0283af0bcf525cf2bfe14a121fb5e11bd75b86304615b1916bec7a0f8c3b7694735f19ca2708f14066e6c4a35dd81b84f40ca3a30b6af8710dc1b714b02add97a4ee5872611efcbea77806056fa6179bef97a6288e34cb0373b83b42f71f42d37a446f4a18"}, &(0x7f0000000600)=0xa9) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r6, 0x0, 0xd}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000) r8 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r8, @ANYRES32=r10, @ANYBLOB="83040500001b00002800128008000100677265001c00028006000e000200000006000f000e008a0d08000600ac141426"], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) sendmmsg$inet(r8, &(0x7f0000000880), 0x4000045, 0x4880) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x5}, 0x8) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r7) socket$packet(0x11, 0x3, 0x300) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000827bd7000fddbdf251000000008003a000d0000000a0009000180c2000000000008003b08003c0009000000c35711e31ffebbda050099551de4f63336f52d00000000000500290000000000"], 0x60}, 0x1, 0x0, 0x0, 0x2004001c}, 0x4000080) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) ppoll(&(0x7f0000000000)=[{r0, 0x1001}, {r0, 0x1}, {r0, 0x102}], 0x3, &(0x7f0000000040)={0x77359400}, &(0x7f0000000100)={[0x8000000000000001]}, 0x8) 33.578263105s ago: executing program 5 (id=1161): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) (fail_nth: 37) 32.981708105s ago: executing program 5 (id=1163): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fa6453ef14000000020605000000000000e90000"], 0x14}}, 0x20000000) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0x148, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@inet=@multiport={{0x50}, {0x2, 0x6, [0x4e22, 0x4e21, 0x4e24, 0x4e23, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e20, 0x4e23, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x4e22], [0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1], 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, 0x3, 0x8, [0x2e, 0xf, 0x30, 0x30, 0xc, 0x29, 0x21, 0x29, 0x25, 0x3c, 0x34, 0x2b, 0xb, 0x39, 0x23, 0x27], 0x0, 0xffffffff, 0x5}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0x0, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x8}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0xff, 0xffffffff, 0xff000000, 0xff], 0x4e23, 0x4e23, 0x4e22, 0x4e23, 0x8128, 0x8, 0xfffffffd, 0x1a67, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000100005ff00000000090e1751b6561cee", @ANYRES32=0x0, @ANYBLOB="7f15000000000000140012800b0001006261746164760000040002800a000100bbbbbbbbbbbb0000"], 0x40}}, 0x20000840) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x19}, 0x0, 0x2, 0x1, 0x1}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000800000000e0fc463cd1fb569607b50a0000000c000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r9 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r9, 0x6b, 0x2, &(0x7f00000014c0)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) unshare(0x6a040000) 32.652704808s ago: executing program 45 (id=1084): socket$unix(0x1, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x109801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x24004004) socketpair(0xa, 0x80000, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f0000001b00), &(0x7f0000000000)=0x4) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x20) unshare(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x4, 0x3}, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0xc0000000}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) unshare(0x62040200) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r7, 0x1) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) r8 = socket$inet(0xa, 0x801, 0x84) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x4a, &(0x7f00000030c0), 0x4) recvmmsg(r7, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) 32.531700422s ago: executing program 46 (id=1086): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x1, @remote}, 0xa}}, 0x26) getsockname(r0, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) listen(0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r3, 0xcfad5000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x1000) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 28.66703892s ago: executing program 8 (id=1178): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6c0, 0x3e8, 0x228, 0x2f8, 0x228, 0x0, 0x5f0, 0x5f0, 0x5f0, 0x5f0, 0x5f0, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x9, [0x6, 0x7fff8000], 0x5, 0x1, 0x1, [@local, @private0, @empty, @dev={0xfe, 0x80, '\x00', 0x2c}, @ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xc}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x12}]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x35}, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8, 0x16, 0x30}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0x0, 0xffffffff], [0x0, 0xff, 0xff000000, 0xff000000], '\x00', 'pimreg\x00', {0x1fe}, {0xff}, 0x331eb7785f3d0b0d, 0x6, 0x1}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@private=0xa010102, 0x12, 0x21, 0x1}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@multicast2, 0x25, 0x1, 0xa}}}, {{@ipv6={@local, @local, [0x0, 0xffffffff], [0xffffff00, 0xffffffff, 0xff, 0xffffffff], 'vlan0\x00', 'netpci0\x00', {0xff}, {}, 0x33, 0xc, 0x2, 0x28}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@private=0xa010102, @ipv6=@private1, 0x18, 0x15, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000007c0)={0x80, 0x80000000, 0x7, 0x401, 0x6}, 0x14) r1 = socket(0x22, 0x800, 0x7) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000800)) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, 0x2, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xe0}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xfffffffffffffffd}]}, 0x38}}, 0x4000044) r2 = socket$netlink(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bind$unix(r1, &(0x7f0000000940)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = accept(r0, &(0x7f00000009c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f0000000a40)=0x80) poll(&(0x7f0000000a80)=[{r3, 0x9000}, {r1, 0xc009}], 0x2, 0xa) getsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xe0, 0x464, 0x8, 0x70bd2b, 0x25dfdbfc, "5d426ff78d53b740c9809c4792b526d7e6d37e6d4ccfe769d114125505b218bc2e4870cb7024e05590871f728f92f8ace18631cb2678c8dc4bd0a6608af8fd0d0509fba10b84ebbe38a7373cad7539c7cf8b14c837d0284b3919380b994634f757132948e7cf2233f2dc28c5bd11222960947415b457192bb99a0fbb0e4ff01bd4a98811adf8d1f9a8927e29ca5109b76f7cde9041b353e88b00f5ed65ec119be5b6431c98205dd14dad040c02f8c4a015a42b41efd2497f2e7ecb443d7471cac0079b8f73e4b5a5a4076f0d3028", ["", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) socket$kcm(0x29, 0x7, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000d00)='rpfilter\x00', 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000d40)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000d80), 0x2, 0x0) r5 = socket(0xb, 0x4, 0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r6, &(0x7f0000001040)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)={0xec, r7, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}]}, 0xec}}, 0x4801) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000001080)={0x0, @in6={{0xa, 0x4e24, 0x9, @mcast1, 0x4}}}, &(0x7f0000001140)=0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000001180)={r11, 0x6}, &(0x7f00000011c0)=0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000001200)={0xffffffffffffffff, 0x8, 0x0, 0x2}) 28.323620482s ago: executing program 8 (id=1179): r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_ifreq(r0, 0x891c, &(0x7f0000000000)={'veth1_to_team\x00', @ifru_hwaddr=@random="8d3611c3dbe9"}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004f00)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/144, 0x90}, {&(0x7f0000000180)=""/245, 0xf5}, {&(0x7f0000000280)=""/88, 0x58}], 0x3, &(0x7f0000000340)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000500)=""/174, 0xae}, {&(0x7f00000005c0)=""/69, 0x45}], 0x2, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x150}}, {{&(0x7f0000000800)=@abs, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000000880)=""/233, 0xe9}, {&(0x7f0000000980)=""/60, 0x3c}, {&(0x7f00000009c0)=""/184, 0xb8}, {&(0x7f0000000a80)=""/81, 0x51}, {&(0x7f0000000b00)=""/139, 0x8b}, {&(0x7f0000000bc0)=""/97, 0x61}, {&(0x7f0000000c40)=""/21, 0x15}, {&(0x7f0000000c80)=""/17, 0x11}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/127, 0x7f}], 0xa, &(0x7f0000001e00)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000001e80), 0x6e, &(0x7f0000004380)=[{&(0x7f0000001f00)=""/16, 0x10}, {&(0x7f0000001f40)=""/133, 0x85}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/189, 0xbd}, {&(0x7f00000030c0)=""/252, 0xfc}, {&(0x7f00000031c0)=""/66, 0x42}, {&(0x7f0000003240)=""/92, 0x5c}, {&(0x7f00000032c0)=""/143, 0x8f}, {&(0x7f0000003380)=""/4096, 0x1000}], 0x9, &(0x7f0000004440)}}, {{0x0, 0x0, &(0x7f00000045c0)=[{&(0x7f0000004480)=""/157, 0x9d}, {&(0x7f0000004540)=""/86, 0x56}], 0x2}}, {{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f0000004600)=""/71, 0x47}, {&(0x7f0000004680)=""/180, 0xb4}, {&(0x7f0000004740)=""/225, 0xe1}, {&(0x7f0000004840)=""/55, 0x37}, {&(0x7f0000004880)=""/45, 0x2d}], 0x5, &(0x7f0000004940)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000004a40), 0x6e, &(0x7f0000004cc0)=[{&(0x7f0000004ac0)}, {&(0x7f0000004b00)=""/183, 0xb7}, {&(0x7f0000004bc0)=""/161, 0xa1}, {&(0x7f0000004c80)=""/3, 0x3}], 0x4, &(0x7f0000004d00)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000004d80), 0x6e, &(0x7f0000004ec0)=[{&(0x7f0000004e00)=""/135, 0x87}], 0x1}}], 0x8, 0x20120, &(0x7f0000005100)={0x77359400}) setsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000005140)={r10, r5, r2}, 0xc) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000005180)={0x7, 0x3}) (async) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000005180)={0x7, 0x3}) ioctl$sock_inet_SIOCSIFNETMASK(r13, 0x891c, &(0x7f00000051c0)={'netpci0\x00', {0x2, 0x4e22, @multicast1}}) r22 = syz_genetlink_get_family_id$batadv(&(0x7f0000005240), r16) sendmsg$BATADV_CMD_SET_MESH(r18, &(0x7f0000005300)={&(0x7f0000005200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000052c0)={&(0x7f0000005280)={0x34, r22, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c0}, 0x20040000) (async) sendmsg$BATADV_CMD_SET_MESH(r18, &(0x7f0000005300)={&(0x7f0000005200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000052c0)={&(0x7f0000005280)={0x34, r22, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c0}, 0x20040000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r14, &(0x7f0000005400)={&(0x7f0000005340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000053c0)={&(0x7f0000005380)={0x24, 0x3, 0x3, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFQA_MARK={0x8}, @NFQA_MARK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0xc095) pread64(r9, &(0x7f0000005440)=""/121, 0x79, 0x4) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f00000054c0), &(0x7f0000005500)=0x8) ioctl$F2FS_IOC_DECOMPRESS_FILE(r6, 0xf517, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000005580)={0x0, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x80000}, @in={0x2, 0x4e21, @broadcast}, @sco, 0x3, 0x0, 0x0, 0x0, 0x1, &(0x7f0000005540)='dummy0\x00', 0x7ff, 0x800, 0x2f9}) (async) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000005580)={0x0, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x80000}, @in={0x2, 0x4e21, @broadcast}, @sco, 0x3, 0x0, 0x0, 0x0, 0x1, &(0x7f0000005540)='dummy0\x00', 0x7ff, 0x800, 0x2f9}) bind$bt_hci(r20, &(0x7f0000005600)={0x1f, 0x4, 0x2}, 0x6) (async) bind$bt_hci(r20, &(0x7f0000005600)={0x1f, 0x4, 0x2}, 0x6) r23 = syz_genetlink_get_family_id$ethtool(&(0x7f0000005680), r7) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000005780)={&(0x7f0000005640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000005740)={&(0x7f00000056c0)={0x54, r23, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x408a4}, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_GET(r12, &(0x7f0000005880)={&(0x7f00000057c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000005840)={&(0x7f0000005800)={0x40, 0x1409, 0x4, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) r24 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005900), r11) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000005a00)={&(0x7f00000058c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000059c0)={&(0x7f0000005940)={0x68, r24, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x92}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdfa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8011}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000005b00)={&(0x7f0000005a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000005ac0)={&(0x7f0000005a80)={0x18, 0x1404, 0x2, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r21, &(0x7f0000005c40)={&(0x7f0000005b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005c00)={&(0x7f0000005b80)={0x48, 0x1409, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r19, &(0x7f0000005d40)={&(0x7f0000005c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000005d00)={&(0x7f0000005cc0)={0x20, 0x1407, 0x20, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0xc094}, 0x20004000) socket(0x15, 0x3, 0x800000) (async) socket(0x15, 0x3, 0x800000) r25 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_INIT_ENTRIES(r25, 0x0, 0x83, &(0x7f0000005e40)={'nat\x00', 0x0, 0x3, 0x42, [0x79, 0xdf, 0x8, 0x1, 0x8, 0x8], 0x1, &(0x7f0000005d80)=[{}], &(0x7f0000005dc0)=""/66}, &(0x7f0000005ec0)=0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000005f40)={&(0x7f0000005f00)='gpu_mem_total\x00', r15, 0x0, 0x6}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000005f40)={&(0x7f0000005f00)='gpu_mem_total\x00', r15, 0x0, 0x6}, 0x18) socket$packet(0x11, 0x1, 0x300) (async) socket$packet(0x11, 0x1, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000005f80), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000005f80), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f00000061c0)={&(0x7f0000005fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000006180)={&(0x7f00000060c0)={0x94, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x4020001}, 0x44000) (async) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f00000061c0)={&(0x7f0000005fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000006180)={&(0x7f00000060c0)={0x94, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x4020001}, 0x44000) 28.210390902s ago: executing program 8 (id=1181): r0 = socket$inet(0xa, 0x801, 0x84) socket(0x40000000015, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r1], 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff, 0x6ec}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x4e22, @multicast2}}}, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000100)={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf) getsockopt$inet_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000540)=""/169, &(0x7f0000000200)=0xa9) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd1, 0xd1, 0xa, [@fwd={0x2}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x3, 0x4}, @datasec={0x7, 0x5, 0x0, 0xf, 0x1, [{0x5, 0x6, 0x8}, {0x2, 0x0, 0x1}, {0x2, 0xffff, 0x20000ff}, {0x3, 0xa99}, {0x3, 0x8, 0x77}], "1f"}, @const={0x7, 0x0, 0x0, 0xa, 0x1}, @union={0xa, 0x1, 0x0, 0x5, 0x1, 0x3, [{0x3, 0x4, 0xc43}]}, @fwd={0x4}, @const={0x5, 0x0, 0x0, 0xa, 0x5}, @struct={0xe, 0x3, 0x0, 0x4, 0x1, 0xd, [{0xd, 0x3, 0x1}, {0x10, 0x0, 0x4}, {0x2, 0x5, 0x7}]}]}, {0x0, [0x30, 0x61, 0x71, 0x6f, 0x2e, 0x5f, 0x0, 0x5f]}}, &(0x7f0000000200), 0xf6, 0x0, 0x1, 0x1000, 0x10000, @value=r4}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r5, 0x20, &(0x7f00000004c0)={&(0x7f0000000280)=""/196, 0xc4, 0x0, &(0x7f0000000380)=""/98, 0x62}}, 0x10) 27.127553449s ago: executing program 8 (id=1186): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01002536f000ffdbdf2524000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24048844) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r4}, 0x18) (async) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="efe2b6fbcfaf021b2203bb644330691062e494e32156f3adb9a40a40c1351e304b1c587a6d5b402b050c1fd118bd556866b280f6ff304d719a0d0804f1119d1287838d91d40ecca9a801261895db927507cfe044c5c82eb8d8c3658e371de32024d6e9b540b30604436e1794267e0ce0bd965c87b371af14bf67e3443ba01efbd344921220437e9004f8f7dd60871b83633c8ad76ff889413e6d581c71f67fbbbb58d9e63588cbdb", @ANYRES16=r5, @ANYBLOB="01002abd7000fddbdf25020000000800020007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) unshare(0x2c020400) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000004a3bbc27926e2bf42d9af5a742bf3f2cdee68c05d1774936a915b580812bfe26500f839a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x80003, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002ec0), 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0500000004000000090000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000001693b09521437270fa00000000000000"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) pread64(0xffffffffffffffff, &(0x7f0000000880)=""/167, 0xa7, 0x3) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r9, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 26.798126752s ago: executing program 8 (id=1188): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x15, 0x1, 0x70bd25, 0x25dfdbff, {0x5}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYBLOB="1400000010ee00e0ffff010000000000000000000700000a00"/40], 0x28}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) close(0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000001000000000000000000000850000002f00000018010000207834b000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a00ef00850000009b0000009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x45) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) 26.631011453s ago: executing program 8 (id=1190): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r8, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="1700000001000000", @ANYRES32=r7, @ANYBLOB="8ef3ebfb4fb35ab98f1339936a4af853fbd17b5502ca4188963d868bddcae9d3bd1477e425cfa5696a88fe0c652c92afbf2c98cab0b777dbe93b05c6", @ANYRES32=r7, @ANYBLOB, @ANYRES64=r9], 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r4, r5, 0x34, 0x0, @val=@tcx={@void, @value=r10, @void, @void, r9}}, 0x1c) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000003c0)={0x80}, 0x8) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r2, 0x37, 0x0, 0x0, @void, @value=r4, @void, @void, r9}, 0x20) writev(0xffffffffffffffff, &(0x7f00000003c0), 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="48000000710000082cbd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="0c000180060070450b0000000c40018008000100000000000c00018006000200080000000c0001800500030002000000"], 0x48}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback}, 0x10) 22.979929208s ago: executing program 0 (id=1204): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ppoll(&(0x7f00000001c0)=[{r0, 0x200}], 0x1, 0x0, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, 0x0, 0x0, 0x931766f6319eed40) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fbffffff00000000000000008500000041000000850000001100010095000000000000001324287584fa8591db1b54fb1fa002d0623fe331814284b3df1d728cb3f27ee19de56c7dd7f017518ce509a60629a4153fb861956545ea9b1f24d7b548df845e4f20212f207ab2c4e591adeff10063fc29e43bb0b3e8b48d184fc5efab217e44"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x1c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x286043, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 21.894812753s ago: executing program 0 (id=1208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) close(0xffffffffffffffff) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) writev(r7, &(0x7f0000000900)=[{&(0x7f0000000540)='x', 0x1}], 0x1) (async) sendmsg$tipc(r7, &(0x7f00000008c0)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x4}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000002c0)="d9480b3a2c08885ba5ffe042901413660c31ecfe8b70a0b064850c9df08c9aabc75e0d1efe71b45068e63aa77adfb43742dd0d8b0b6ed1cdc8c9f01afc4b50cbae9cb750ee902d9d99574548663b616df82163e52f42752f6c0a8855f71195941f8f55209d1f3172b073525b1dcc12f36324e6a853ce468f69342c6c53729f106d93b0ee499812c0df7f", 0x8a}, {&(0x7f0000000640)="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", 0xfe}, {&(0x7f0000000380)}, {&(0x7f0000002740)="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", 0x1000}, {&(0x7f0000000500)="3dd415bc23f74b1a949c62e6a8e657e7ed763718e51a8cb7ca7c2c3ef1b227920e8292d7048411d68aa4e7868c10738b9d82adf0fc990ba583fdf6c2e52bf9b5039428988f37ee2ece1982064e47b46c0e5e873f25879fa3046e2e5a19ef290d6610f7c6e5", 0x65}], 0x5, &(0x7f00000007c0)="ea5ffd859211d94e3b8172010d8996c7689c695badaff847e912a1ae0689e6463339ae299e91ad13ab2eac7b5b53cb91018d3a319efdde66f1cda50dc30d912fccad4b987bfaee1bb80feeb9e630f0db85d4722f909e86016658790bc1a8ebc844db956e4d488dc7856bfe78069969ae98d14b67eab31eae67d9b355b846185f4afa0427e93decd6b0a03ecafd273c637871be061bae8b3d3f6d6c453000904df6767c6452d9961591b726a14ca12c5cced94824f93f277ebcb1e5df100ac01d6085f2e1e05fe3130503633b9bc0bc42765055dd255156ca903eee0d8e5aad547bb51b6b621de74104c413c3162237", 0xef, 0x20000001}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async, rerun: 64) r9 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 64) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) (async, rerun: 64) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x0) (rerun: 64) 21.894005479s ago: executing program 4 (id=1209): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1409, 0x1, 0x10}, 0x10}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x5, 0x0, 0x5, 0x2, 0x0, 0x0, 0x10000, 0xffffffff, 0xfffffffd}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000050000000000000000000000006e1240000000000095000007000082f5"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x101, 0x0, 0xffffffffffffffff, 0xa2, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x9020000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="60000000040605000000000000000000050000090500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000009000a0073797a30000000000900020073797a31000000000500010007000000"], 0x60}, 0x1, 0x0, 0x0, 0x40c4}, 0x80010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000002000000000000000100000018160000", @ANYRES32=r2, @ANYBLOB="00000000000000008af8ff00000000b7080000000800007b8af0ff00000000bfa1deee1c67645b0200000000000000bfa400000000000007040000f0ffffffb702000008000000182300000000000000000000002814886f159d85e8b2a2cc29ec357c940dd763bdb958e8702ceb82eeff39d751e3f3b36f5193", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a50000008b5101000400000006510000050000001800000005000000000000000d0000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x4, '\x00', r5, 0x0, r6, 0x8, &(0x7f00000003c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x8, 0x7, 0x100}, 0x10, 0x0, 0x0, 0x63, 0x0, 0x0, 0x10, 0x5}, 0x94) 21.810730235s ago: executing program 4 (id=1210): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, r3, 0x7, 0x0, @val=@tcx={@void, @value=r2}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r2, 0x4}, 0x5) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x41}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000800)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r5, 0xd0009412, &(0x7f0000000d00)={r6, 0x6}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000280)={{r6, 0x7, 0x1, 0x7fff, 0x5, 0x200, 0x5, 0x7, 0xd97, 0xc, 0x7f, 0x3, 0xfffffffffffffffb, 0x9, 0x8}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x100, @empty, 0xffffffff}, 0x6b) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r9, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000080)={0x1, 'nr0\x00', {}, 0x4}) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 21.382718079s ago: executing program 0 (id=1211): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="00000000000000000000512288fb", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000700)={0x0, 0x55, &(0x7f00000006c0)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40804) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r8, 0x0, 0x10) sendmsg$nl_route_sched(r4, 0x0, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=@newtfilter={0x3ac, 0x2c, 0xd27, 0x70bd23, 0x8000, {0x0, 0x0, 0x0, r7, {0x6, 0x10}, {0x0, 0x2}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x378, 0x2, [@TCA_MATCHALL_ACT={0x374, 0x2, [@m_nat={0xd0, 0x15, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x21a, 0x5, 0x2, 0xc}, @remote, @rand_addr=0x64010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x4, 0x2, 0xffff4978}, @empty, @local, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x40, 0xe, 0x5, 0x80000000}, @private=0xa010101, @multicast1, 0xff, 0x1}}]}, {0x2e, 0x6, "3ac5fec12243e7bf0d5c3a6b77556edc8bd643d1cb82e11453727e3cfe44da0d4500d8121483e95ce773"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x174, 0x17, 0x0, 0x0, {{0xf}, {0x68, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x52, 0x4d3b, 0x7, 0x0, 0x5}, 0x2}}]}, {0xe0, 0x6, "61a7200475476e07962cf311b8b38fdbac697cc262cde43ed3b991f23559f0ca4b641b62af5cfbb680e3cc9eaa386325651f6b6950020377efe2bedcc42e37b2e22e028f22b51621d88e23f37fbe983d2d9949eaa213331dc075775f55e53f5be3b34d5585cad36a536701660e33e687abe6a1caf729204c0f06dc09250f3037adc589158c82ff2a2e088c8e888b40018e7834075faf4c0b7891a258811d4c0ac942243dd19efd2bb72f22fd069b99573ce7b0407b77442ceb21cdb0c2184d7efea162bd4bafc44c2b4f25bc10547f308612263ddd3b86cc6defa27e"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x12c, 0x4, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xc, 0x7, 0x10000000, 0x4, 0xe}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x10000000, 0x9, 0x1}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x3, 0xf, 0xdc}, 0x6c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3, 0xffffffffffffffff, 0x200, 0x2}}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1277, 0x2, 0x20000000, 0xf, 0xffffff24}, 0x6e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x2, 0x1, 0x8, 0x3}, 0x6b}}]}, {0x55, 0x6, "2ab378138f52e6a93ebfd0c8837278df52d32f02ebad7a4642c84268668a94cc99499488497dd9499d58c0352304438a812d558727e9a29df7615002ea298df9e9533c2321560b49f260b9ab49683769e0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x400d0}, 0x800) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @empty}, &(0x7f00000001c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={@empty}, &(0x7f0000000340)=0x14) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="3c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="340e000000b401001400128009000100626f6e64000000000400028008000a00", @ANYRES32], 0x3c}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={0xffffffffffffffff, r11, 0x25, 0x0, @val=@perf_event}, 0x18) 21.382377695s ago: executing program 4 (id=1212): r0 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000019800)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xb0000000, @remote, 0x6}, 0x1c, &(0x7f0000000500)}}], 0x2, 0x0) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000009c0)={0x0, @in6={{0xa, 0x4e23, 0xab9, @local, 0x8}}}, &(0x7f0000000100)=0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'ipvlan1\x00', &(0x7f00000000c0)=@ethtool_test={0x1a, 0xffffffff, 0x2, 0x2, [0x7fffffffffffffff, 0x1]}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r6 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) getsockopt(r6, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000019900)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) getsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000240)={@local, 0x0}, &(0x7f00000002c0)=0x14) bind$xdp(0xffffffffffffffff, &(0x7f0000000300)={0x2c, 0x2, r8, 0x5, r5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r7, 0x0, &(0x7f0000000000)=@tcp=r5}, 0x20) sendmsg$kcm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000019880)=[{&(0x7f0000000380)="05dcdd67d61e895b84436171ed012cce5b29e4fae21216d2be39f5150b950a46087116b6e32cb8bd8c5d2d0692bafacdfe0a928bbaaa7cc1c784cbb5b6373822d8562ceda20d13ece3a5a9993b2fce275a3a0cab8d6b2f18ca9d6ff8d4b8ac0ca52e059e6174ccd827546080d066ab46330a85be8d94ba7affd5bb3a64811c9df45be8125c534d70ac20339dce6ef89834c67a811c4473436521f3efe5a3bded658c85298153dcd510ea", 0xaa}, {&(0x7f0000019580)="7dc97654c93467eeea3bf6d7cd5f7e486758eb29c6daa33c3ff7d00dad1ba49449fd1463154ca9fa6b74acf83ea8d42cac5fbcb96b2c962ebfe0f47f399334860ece69dfa77c3fdd676605201a0dbe3ec56bba3769cf122fba291dfb80ebb298685974a31d662cb12d597df1b3388ad5ae6837bafcdc7c7fe07317987b068f20e8b78dba5eaafd64d5827effeb77888470a1b2e5f6391b7474bb50491387c46724b91fc0f2eda783c927811b2bb0fbbac29bbab05a63ab9e8fa37a3cdfe23f5f230e9aefd15dc8c6cf5d90d8bdabaa2bfb", 0x8}, {&(0x7f0000019980)="f98ef372e565bcafefa2f6f7064fa55637d9047ae58c1fad98af30e32a92ba77e381f69a99f1a68a6304e20e1fb1324e6719cb228d3f1ff37f54a1e6f16f73fc59ecaa79f43bd58bc8ac69f2f94cf046800c2a84bd3786b091c1ace3c22742e40e29afb00d2d9a92", 0x68}, {&(0x7f0000019680)="2019d915909710fe540063f23539fb79079cfda45b72fe7983306afe788a92a05d529a7defb9a40e7c68c99795adc858455e9ea858db830ff4951de2befd646361bb3869842f86b2343ec24b0000", 0x4e}, {&(0x7f0000019700)="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", 0x13d}], 0x5, &(0x7f0000019a00)=[{0x0, 0x1, 0x10000, "fdb10efbc777a272fbc7b1f2468bfe506482764c41d36e2f617fa67b8472e2392435a1cb491e30fa6e503bd42ed7c25847c107073f7f725f5aa834c7241d47373aca64cbad97ec1158d6c1758f7846fc8f22273e61ff1f2cf11f718a36be69541700614fa6411831a5350b166dca2a6d44976fafbe0c81f6385fc8a20cb2a10e44ef2a2ecbf9eaadef5cba59d93a04d4b5c9ef62059eeaaae383075d0ae596990125fa41898a3d19eb8370f048d78e64f88e87a79a7ea37a0fd77ffcdeecdc59c5ee53f5cc7e2f572fc4c6ae8173f65dfb"}]}, 0xc) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x40, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="31200000000000000c002b800000e000", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4}, 0x8) sendto$inet6(r1, &(0x7f0000000480)="b663", 0x2, 0x24004001, &(0x7f0000000280)={0xa, 0x0, 0xe8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x85}, 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0x8, &(0x7f0000000180)=0x9f7, 0x4) accept4$ax25(r0, &(0x7f0000000140)={{0x3, @netrom}, [@null, @remote, @remote, @rose, @remote, @remote, @remote, @bcast]}, &(0x7f00000000c0)=0x48, 0x80000) socket$l2tp6(0xa, 0x2, 0x73) 20.807405943s ago: executing program 0 (id=1213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ab3323ebf3d43901b9fe8ec2a2d50d2ed09a61af73ebd2ba6c0a010800000000000000000a0b000006"], 0x20}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r3, &(0x7f0000000000)={0x1, @write_auth_payload_to={{0xc7c, 0x4}, {0xc9, 0x6}}}, 0x8) nanosleep(&(0x7f0000000080), 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000128bd7000ffdbdf250f000000300001805aff0400140001000a004e2300010000fc020000000000000000000000000000020000001400020002004a217f0000010000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x2805}, 0x843) socket$inet6_sctp(0xa, 0x1, 0x84) 20.678470216s ago: executing program 0 (id=1214): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x304}, "9d1dd848dafd162e", "22a99c4843357dc0f09e3a8fda830fe7", "10090040", "a2776d000100"}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) bind(r4, &(0x7f0000000600)=@pppoe={0x18, 0x0, {0x1, @remote, 'macvlan0\x00'}}, 0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x100, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x729}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xab2f}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6d8b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80000001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "7ccf3b8581016c87cb7353d3a13a0e8ffc48f529e92651fd8c"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x91}, 0x8001) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000060000008a5ecb05fd9c"], &(0x7f0000000100)=0x2a) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xac}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x4c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x9400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 20.578009609s ago: executing program 4 (id=1215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00080154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a3100000000140005800800014000dfffff070002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r0}) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000000e1400012cbd7000ffdbdf2508003c000100000a60cbb40008003c00050000000800030001000000"], 0x28}, 0x1, 0x0, 0x0, 0x2000a010}, 0x8000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e9b5d80a6b7a2ea8fe90486dafab507837d5af2b1e9e41025ef6b75fd6d80a3e29e26070ac6ebc90a4180d1bd966f3fe7163ad2dc73ca6a49c713e75b75113ae22def443b2f060d942a5cf6ef8c056e2a551fe1651ea8b76ea16eb5ae64f79254cc11efba6d910b614bbc44271d2e294d4722018c7601a789529e19604e2ac740b14db73e5f16b99a4c75e08059ac59f0c1501443d55e89c"], 0x48) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, r6, 0x25, 0x0, @val=@iter={0x0}}, 0x20) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1800002, 0x12, r9, 0x88fa6000) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000300)="c9", 0x1) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r10}, 0x10) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r3, 0x1, 0x32f5}, 0xc) 20.287171483s ago: executing program 4 (id=1216): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000010029bd70000000000000000000c21df5614c916a81483ed558d444e8bfca85e7a94de8e0bfce02b7a156d4dd6341bde91e35689ea6a655e3bfb1594db1d7404a3ad9062520d4a2f23edb1ef80e789a4ad026506f86baff0c56aaf49d5d720e8679854a", @ANYRES32=0x0, @ANYBLOB="150000000000000014000300776c616e30000000000000000000000014001680100001800c000300ffffffff09000000"], 0x48}}, 0x0) 20.283980217s ago: executing program 0 (id=1217): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'ip_vti0\x00', 0x1000}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9}, 0x94) syz_emit_ethernet(0x45, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0xbc, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c"}}}}}, 0x0) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, &(0x7f0000000180)=0x1c) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000001c0)={@empty, 0x25}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 20.210751733s ago: executing program 4 (id=1218): getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x8, "1e96a808f510f9e1"}, &(0x7f0000000040)=0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00') unshare(0x6a040000) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000100)={@loopback, @multicast2}, &(0x7f00000001c0)=0xc) socket(0x8, 0x3, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) ppoll(&(0x7f0000000080)=[{r1, 0x2004}], 0x1, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000200)={[0x5]}, 0x8) ioctl$IMGETCOUNT(r1, 0x40106183, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) unshare(0x62040200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1ab9efc446d8ca8e0df254cc006ee744a27c1625a2dfe11b4c416bf089a82dcf553c883b5bd9506820e1091c8d8e2cae725fe600c9c6c14bc0d5008e591b0000000000000000008e0b955e455209d4b02b2e1eada72145463ec482fdb24b30f4c87acf42a47d606328dab26caa0ed69f8ef8afc15a6fb32bf1921d5b43141c40f10e8876e6ea1d05ded5bc012a9cbaaf22d75ac87dd8b76ebabdbae884627b9cc7152f815f767117ce5aa68d99a1994573cdcaedf7d760a7896bb0ea2d71e69e94950f97708b6c20ce12b416aad2d329ecd285c204a3c29f7a6117c81f84d5c76ba5388a63", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040880}, 0x4008840) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x29, 0x800, 0x10001) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, 0x0, 0x0) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f00000002c0), 0x0) 17.507735592s ago: executing program 47 (id=1163): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fa6453ef14000000020605000000000000e90000"], 0x14}}, 0x20000000) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0x148, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@inet=@multiport={{0x50}, {0x2, 0x6, [0x4e22, 0x4e21, 0x4e24, 0x4e23, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e20, 0x4e23, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x4e22], [0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1], 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, 0x3, 0x8, [0x2e, 0xf, 0x30, 0x30, 0xc, 0x29, 0x21, 0x29, 0x25, 0x3c, 0x34, 0x2b, 0xb, 0x39, 0x23, 0x27], 0x0, 0xffffffff, 0x5}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0x0, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x8}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0xff, 0xffffffff, 0xff000000, 0xff], 0x4e23, 0x4e23, 0x4e22, 0x4e23, 0x8128, 0x8, 0xfffffffd, 0x1a67, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000100005ff00000000090e1751b6561cee", @ANYRES32=0x0, @ANYBLOB="7f15000000000000140012800b0001006261746164760000040002800a000100bbbbbbbbbbbb0000"], 0x40}}, 0x20000840) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x19}, 0x0, 0x2, 0x1, 0x1}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000800000000e0fc463cd1fb569607b50a0000000c000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r9 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r9, 0x6b, 0x2, &(0x7f00000014c0)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) unshare(0x6a040000) 11.422952118s ago: executing program 48 (id=1190): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r8, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="1700000001000000", @ANYRES32=r7, @ANYBLOB="8ef3ebfb4fb35ab98f1339936a4af853fbd17b5502ca4188963d868bddcae9d3bd1477e425cfa5696a88fe0c652c92afbf2c98cab0b777dbe93b05c6", @ANYRES32=r7, @ANYBLOB, @ANYRES64=r9], 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r4, r5, 0x34, 0x0, @val=@tcx={@void, @value=r10, @void, @void, r9}}, 0x1c) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000003c0)={0x80}, 0x8) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r2, 0x37, 0x0, 0x0, @void, @value=r4, @void, @void, r9}, 0x20) writev(0xffffffffffffffff, &(0x7f00000003c0), 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="48000000710000082cbd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="0c000180060070450b0000000c40018008000100000000000c00018006000200080000000c0001800500030002000000"], 0x48}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback}, 0x10) 9.971875855s ago: executing program 7 (id=1238): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe0000010000000008000100000001"], 0x24}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1000}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x40}}, 0x4000010) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x5}, 0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xffd, &(0x7f00000004c0)=""/4093, 0x0, 0x1}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000140081044e81f782db46b904021d000025000000040000a118000200ff02000100000e1208000f0100810401a80316ea1f000b40032a5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc000000000000f0660080bb9ad809d5e1cace81b34113b0e3cd4032ecedb12d1d2eb0c0ed0bffa29954e5413f017f", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 9.794171074s ago: executing program 7 (id=1239): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x8000007, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000800)={@local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @initdev={0xac, 0x1e, 0x5, 0x0}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @rand_addr=0x64010100}}}}, &(0x7f0000000840)={0x400000, 0x3, [0x504, 0xa26, 0x5b9, 0x247]}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001a40)={'ip6tnl0\x00', &(0x7f00000019c0)={'ip6tnl0\x00', 0x0, 0x4, 0x4f, 0x7, 0x5, 0xa8, @mcast1, @local, 0x7800, 0x7, 0x849a, 0x5}}) (async, rerun: 64) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001cc0)={0x0, @private, @remote}, &(0x7f0000001d00)=0xc) (async, rerun: 64) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001d40)={@multicast2, @rand_addr, 0x0}, &(0x7f0000001d80)=0xc) (rerun: 64) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) unshare(0x20000400) (async, rerun: 32) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) getsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0x13, 0x0, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x70, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) (async, rerun: 64) r8 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r9, 0x25, 0x0, @void}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="6e008463362b15053ecedbfa7aa7742af1dae221f9156799c79eab0653ca80022e19e3f640a96385371c96ca52cc070289944f5f87f0222f", 0x38}, {&(0x7f0000000080)="4f083d89917a72a1ba5f4da8b04032006f0596758ce95ae553fccbcf843e63bdfc71458a9b10ee83c59dd967705c8bee960473ebe1b4eb464dede8ddefede4890d18716dd304981f54df7451503ca765c38e5d81da56e1800c5c7894ea", 0x5d}, {0x0}, {&(0x7f0000000100)="a3bfd458d8cc02625ebe87bff989a64b1e3582b241f1ac073e46038ba2ca8f3006404a8375a5491fb9f8f2b0f9f066ad6e869abf2a8e495cd07369392b15737df215a2743191628caa6f73ae316f8c1335bc7b3c2ac7bd59e23562ae5c0b7d1e14ad5ba0c28bd84d0a7f1a29380e7f614789ae57433dd1753849dd30b93fcd9c06bf6c2896e8c2473e84b244c32ce7aba634d34acf4ca445401994", 0x9b}, {&(0x7f00000001c0)="c327c38c5e4f207f74318f87df179b083e360540bee0a9912df5daec6158c7171190b92c4f51677d461a707a55006fc4af047e114c4e37962023eecbbeb2399cf40f0b8969a5be79bdfa31798c525f8edd07e85b406f983d1dcfe89df7dba623b64472", 0x63}, {&(0x7f0000000240)="455b84749fa4042c055cc9efcbbf73063a57df2a25a94f3678959c9a30bbe5bb4774ec72588fe97e4963a55c4218c8ce4699a556c6bee0faa4cd14c226e7697c1d2a64a78fc15641bcc374b6fb9416fa5256fd653cfd61b5bde3a948115972c22c271fd07ca5fd4cfbe81d7987fc9a485cc321f395c6dc2e6506a77dbdbbff0a8e5202055e7137bafb19f391a7602240009985c9aa1f20c6c88ce3f48ea4013fe1ce2df5028803960f94b5e0aed1ec107ee5f73300518618762729862d3eafbe650dc7580ae02a2f34", 0xc9}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000000340)="ee0b0c8bfa22d1efdc776caec673a32123a0bf41937b4931fab891ded0a4276ace581722795c470d089f1d68b66c3743f0e5676ba10dcd6ef8", 0x39}], 0x8, &(0x7f0000000400)=[@rthdr_2292={{0x98, 0x29, 0x39, {0x6c, 0x10, 0x0, 0xc1, 0x0, [@loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @mcast2, @dev={0xfe, 0x80, '\x00', 0x34}, @private0, @empty, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x1d, 0x1, '\x00', [@jumbo, @enc_lim={0x4, 0x1, 0xff}, @enc_lim={0x4, 0x1, 0x4f}]}}}, @hopopts={{0x78, 0x29, 0x36, {0x2b, 0xb, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x21}}, @calipso={0x7, 0x28, {0x1, 0x8, 0xf0, 0x3, [0xffffffffffffff6a, 0x0, 0x2, 0xaf9]}}, @pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xddbf}}, @rthdr={{0xa8, 0x29, 0x39, {0xc, 0x12, 0x1, 0x10, 0x0, [@ipv4={'\x00', '\xff\xff', @local}, @loopback, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @mcast2]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}], 0x210}}, {{&(0x7f0000000640)={0xa, 0x4e20, 0x1810, @loopback, 0x8}, 0x1c, &(0x7f0000001940)=[{&(0x7f0000000680)="f4efc424fe0fe71884451ad375e4a038f40ff823aaf8f8240b6927a0cc1fdeedce1199795322ae82856280b895d71e193f8d17", 0x33}, {&(0x7f00000006c0)="2635569ab9cc79d2faf421e4dae35eaea44a44c234e0b5475148862007dc071b33e29c50c8fe94f33f8f0f329de71f6aa80ee6ce7d385ec43ade53d6cb48fd8e170fb61725741e53901d198a73f7f2c3508d154d385d7260e60a657a0d95d06c769b0203408a1d4a2845e82d4faa5165a4", 0x71}, {&(0x7f0000000740)="2c811937df9035aebd1008deb361e8ff828f941b959d6054", 0x18}, {&(0x7f0000000780)="8bc2a683a35e371c602f1295984006c0ebf0a8dcc01fb97f9e321b044489112002f8461bfcef98cd289452d00df204b0346e8400", 0x34}, {&(0x7f00000007c0)="be54ba52607dc92cc9f9168d6faa15988621b95e31a094d9ae4cdbf4893f52adae6bbd16bc31cc3564d332e62f17f422c39d0e", 0x33}, {&(0x7f0000001880)="c060edf744d12345a41433df0918d2d06be89082dbf58d6dbc3329c0e003943f4c905095f29430ab2ed5ed83b549493d4860baaf94a15e8dbfa38f", 0x3b}, {&(0x7f00000018c0)="ba1175499458af89f61e3641b6d82de0c3990aba4de0a9b7e171983964afb35244af977fd4f8b05445b02182354c4ea3c7972b50dcf9a973787d1e369d2578951e7685ea29d0b761276046a364441e2de78984901d3de1ba8678943b1561419d98016b463eeca1a8cfdbc748d98907b66a269c", 0x73}], 0x7, &(0x7f0000001a80)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback, r1}}}], 0x28}}, {{&(0x7f0000001ac0)={0xa, 0x4e20, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000001c80)=[{&(0x7f0000001b00)="bccb040a2b5ca0a309a8785f1df4d4f258634aa037ae77d94a7ea4b98dbca9584160f258b2d39f0b862e8bc26ec14b85548ac96c42db34eb77d6cc19d4f26d6eda85662c731500", 0x47}, {&(0x7f0000001b80)="110c5fa3d5361e92f52e7843f5167990d7ca8695d5c3cf74336b10db45c3417cb229dcb488c7bb5da455d2de9e30a498a5689e227103b3d2821f344d98d2", 0x3e}, {&(0x7f0000001bc0)="8ea67e5b270bf95e098f7ab6f5083939a9bf936c3178bc6ccc21e2fea2acbc8022c9fa961ddadd35132369d277279addbc2bcce799f1b9396bbec77dfc51c3765711834dc5293cf8bf40dbd7084ea939563508d2ae26f8d06d8d001b7557a6bd94887f81586ae16a5f853129ce91b290133f8f03c8d94cee2118f0d3dc98c6754e4159d1df10e895fd20b9cc4bb8a12f99187b2675863212977b2c38b62cf72d0f76a378da2576c4c58a9803b700a9f128d1", 0xb2}], 0x3, &(0x7f0000001dc0)=[@hoplimit={{0x14, 0x29, 0x34, 0x3}}, @rthdr={{0x78, 0x29, 0x39, {0x29, 0xc, 0x1, 0x4, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r2}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r3}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x6, 0xc, 0x0, 0xb, 0x0, [@empty, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @private0, @mcast2]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x2e, 0x0, '\x00', [@ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x80}]}}}, @dstopts_2292={{0xa0, 0x29, 0x4, {0x5e, 0x10, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xfc}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x4, 0x47, "7342780ab43c195f3942e42d439116fdccc529c2abf9655755b616bf07bdd5425b3bb139baa34466c95185a83e68aea725d62e62178608cf6ad6306425f4224d908d8a84482482"}, @jumbo={0xc2, 0x4, 0x80000000}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r5}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r9}}}], 0x280}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000002040)="0b7eebf561a410024a89a99ccdc16fd9d499397cc6f48fbadc96558a50b112bfa71ff78101e275", 0x27}, {&(0x7f0000002080)="2bb0734c0ed16669e255d9fa3b9bf92fc724076faac3a0a63e20e25c7df5c6c4527e15e8ac0f8d3664344c97f930f27f4d0bc11c37bde76e53a365", 0x3b}, {&(0x7f00000020c0)="bcf751567709a0d85ad080d982cacaaecb26fa4430694b212d0f45bcc6e7abaec186bc508300e97278c44ef0ccdd441594bbeac344625a177904ad354cf28535a507c563e80a28bbb1864cb6f4968d412747f7524b53102a0966b99c12ed8ad647fa4e87211f17c512b0a8fd3cc8b0b291aa93e99ff4583807123d148266861db5a4ca262345a212c5cd3cc8c48da822bda8af2e7bda3825b5b0ca6aaaf8d2", 0x9f}, {&(0x7f0000002180)="fe324f11f9a1b6e9ed9c6b5041ff17311615e6a11f7ecd02ef6e59ac8c1cfb1cdba90ad4d4f86ab9f415be0f822ef944a5670c8138bdcf5a470f4d7d1b839bd4d57dc96425a8e047c47d5e7d3a9d9c60d4d0810347a3129c460cc83739bf0c58c08bf16636f93c1403181210be11af764a26bddffed0dd05b08c85b580bf17eeb965d3d4da0650aa168606813dc6b5c1affb93e6a18ee876b438c830f083b1a78e3d4841c59fa07276cc8f95eee2f59354829c1d68ccee62087ec2577130d7ba5c46a0cbac1ee2dce85815a495b79af254161b90ff534299c3a1a5b16d6aacbca3", 0xe1}], 0x4, &(0x7f00000022c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xb}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x83998313c4e4bd55, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x8}]}}}], 0x60}}], 0x4, 0x4000000) 9.72369079s ago: executing program 7 (id=1240): r0 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x5c}, 0x6e) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x25, 0x1, 0x60, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x0, 0x460c6}, 0x1, 0x0, 0x25a1, 0x40}}) 9.531482341s ago: executing program 7 (id=1242): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff"], 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x5c, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x400, 0x9, 0x8, 0x9], 0x0, [0x1, 0x3]}, 0x4, 0xb}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "f102dcf29effae15cd"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x7fe}, 0x1c, 0x0}}], 0x1, 0x20048000) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x30, 0x0, 0xb, 0xfffff00e}]}, 0x10) 8.514053416s ago: executing program 7 (id=1245): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4018, 0x3, 0x218, 0xd0, 0x0, 0x148, 0x0, 0x148, 0x1d0, 0x240, 0x240, 0x1d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0xffffffff, 'bond0\x00', 'ip6tnl0\x00', {}, {}, 0x6c, 0x2, 0x18}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2, 0xf, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@private, @in6=@dev}}, @sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x78}}, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r3, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) r4 = accept(r3, 0x0, &(0x7f0000000040)) ppoll(&(0x7f00000000c0)=[{r4, 0x1000}, {r3, 0x4640}, {r3, 0x2020}], 0x3, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0xd]}, 0x8) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0xbb1, 0x4) recvmmsg(r1, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x54, 0x10, 0x403, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}, @IFLA_BOND_PRIMARY_RESELECT={0x5}, @IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x54}}, 0x0) 8.240285675s ago: executing program 7 (id=1247): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000e5050500000000000000000005000000"], 0x14}}, 0x20000000) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000100005ff00000008000000000000004a", @ANYRES32=0x0, @ANYBLOB="7f15000000000000140012800b0001006261746164760000040002800a0001000200000000000000f719db95b8d3cdee702cb4e8b0f182eca33f27a300ebff0000000006da18d892fd967b9f0b17b25837775a6f03852ba33d63"], 0x40}}, 0x20000840) r3 = socket(0x10, 0x3, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xc00, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r6], 0xfc}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000002c0)={@private1, 0x0, 0x2, 0x1, 0x1, 0x113}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4849}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES16=r5, @ANYRESHEX=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r9 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r9, 0x6b, 0x2, &(0x7f00000014c0)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r8) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x20, 0x3fa, 0x200, 0x70bd2c, 0x25dfdbfb, {0x1, 0x0, 0x1, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x24044800) unshare(0x6a040000) socket$inet6_mptcp(0xa, 0x1, 0x106) 5.154980779s ago: executing program 49 (id=1217): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'ip_vti0\x00', 0x1000}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9}, 0x94) syz_emit_ethernet(0x45, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0xbc, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c"}}}}}, 0x0) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, &(0x7f0000000180)=0x1c) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000001c0)={@empty, 0x25}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.066220615s ago: executing program 50 (id=1218): getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x8, "1e96a808f510f9e1"}, &(0x7f0000000040)=0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00') unshare(0x6a040000) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000100)={@loopback, @multicast2}, &(0x7f00000001c0)=0xc) socket(0x8, 0x3, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) ppoll(&(0x7f0000000080)=[{r1, 0x2004}], 0x1, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000200)={[0x5]}, 0x8) ioctl$IMGETCOUNT(r1, 0x40106183, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) unshare(0x62040200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1ab9efc446d8ca8e0df254cc006ee744a27c1625a2dfe11b4c416bf089a82dcf553c883b5bd9506820e1091c8d8e2cae725fe600c9c6c14bc0d5008e591b0000000000000000008e0b955e455209d4b02b2e1eada72145463ec482fdb24b30f4c87acf42a47d606328dab26caa0ed69f8ef8afc15a6fb32bf1921d5b43141c40f10e8876e6ea1d05ded5bc012a9cbaaf22d75ac87dd8b76ebabdbae884627b9cc7152f815f767117ce5aa68d99a1994573cdcaedf7d760a7896bb0ea2d71e69e94950f97708b6c20ce12b416aad2d329ecd285c204a3c29f7a6117c81f84d5c76ba5388a63", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040880}, 0x4008840) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x29, 0x800, 0x10001) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, 0x0, 0x0) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f00000002c0), 0x0) 3.814093374s ago: executing program 6 (id=1268): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000003c0)={0x1, 0x8}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x2, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20088001}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e22, @remote}, 0x4, 0x1}}, 0x26) getpeername(r9, 0x0, &(0x7f00000000c0)) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r10, 0x1, 0x400, 0x4}, 0x14}}, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/217, 0xd9}, {&(0x7f00000020c0)=""/16, 0x10}], 0x2}, 0x3b83}], 0x1, 0x20001000, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r11, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x4, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x24000020) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f00000001c0)) 3.546773703s ago: executing program 6 (id=1269): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x17, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9, 0xffff}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0xf2}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd6f}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x2004}) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) r3 = socket(0x38, 0x4, 0xd1a7904e) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x2a, "a211084912266798f75fa304ee75dad47b3fe2a2edab4bba803e9c40fe7798cd888e5723612a7c34d4f6"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000100)={r4, 0x2, 0x20, 0x401, 0x9c}, &(0x7f0000000140)=0x18) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r6, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000100)=[@prinfo={0x18, 0x84, 0x5, {0x30}}, @sndrcv={0x30, 0x84, 0x1, {0xb9, 0x8001, 0x1, 0x5, 0x3, 0x8, 0x48, 0x4}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0xb, 0xfffffffe, 0xff}}], 0x68, 0x4054}, 0x4040041) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r7, 0x0, 0x7fffffffffffffff}, 0x18) r8 = socket$rds(0x15, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) r10 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDR(r10, 0x29, 0x39, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) 2.658645529s ago: executing program 3 (id=1273): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="020000000400000008000006000000000000000030ea5c28819912615d55779ae2dd36bd196b01977d83441716969890b9e249d91104833b3abb1edb326fff6bfcab19e45e4af08ef396570bf11cefbb8623d33985aec38e27f6372ccc9612e183bc832916cc26f0c49b8c18d07392e6afbb6bc8ca0fe4194b730857fe89dc4092cc4abd0ffde218293387eb5c", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r3, 0x2f000000, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x8000000, 0x13}, 0x22) (async) r4 = socket$unix(0x1, 0x1, 0x0) close(0x3) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x1, 0xffff}, {0x0, 0xe80}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) 2.478136293s ago: executing program 6 (id=1274): socket(0xa, 0x4, 0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x6, 0x3, 0x9, 0x0, 0xffffffffffffffff, 0xc455, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x22, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x1, 0x0, 0x7, 0x7, 0x80, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x4, 0x4, 0xa, 0x2, 0xfffffffffffffff0}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @generic={0x1, 0x0, 0x2, 0x4, 0x32}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x44700000}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4a892e7609f908f3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x1e00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3d, 0x0, 0x1, 0x20}, {0x4d}, {0x6, 0x0, 0x0, 0x41}]}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, &(0x7f0000000140)={0x7, 'veth0_vlan\x00', {0x1000}}) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.376745892s ago: executing program 3 (id=1275): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000180)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r1 = socket(0x18, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xc}, [@call={0x85, 0x0, 0x0, 0xd3}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000), 0x4) syz_init_net_socket$ax25(0x3, 0x2, 0xcd) (async) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000180)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) (async) socket(0x18, 0x5, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xc}, [@call={0x85, 0x0, 0x0, 0xd3}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000), 0x4) (async) 2.241874263s ago: executing program 3 (id=1276): unshare(0x24020400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000000201010200000000000000000a0000073c0002800c00028005000100210000002c00018014000300"], 0x50}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0x10) accept(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000280)=0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') r2 = socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r2}, 0x20) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r6) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000001"], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)}], 0x1}, 0x2404c140) r8 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r7, &(0x7f0000000080), &(0x7f0000000040)=@udp=r8, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 2.03062063s ago: executing program 6 (id=1277): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x4, [@func_proto={0x0, 0x8, 0x0, 0x2, 0x3, [{0x4}, {0xf, 0x4}, {0x2, 0x3}, {0x5, 0x3}, {0xb, 0x2}, {0x2, 0x2}, {0x10, 0x3}, {0xb, 0x2}]}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x0, 0x51]}}, &(0x7f00000005c0)=""/226, 0x80, 0xe2, 0x1}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r3, 0x3, 0x3}, 0x50) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7a70543f0700000001002457bc1509d59ba00000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x1, @empty, 0x1000}, 0x2, {[0x2, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x4e26, 0x0, @mcast1}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) setsockopt$CAIFSO_LINK_SELECT(r5, 0x116, 0x7f, &(0x7f0000000140)=0x10, 0x4) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180100001f0001000000000000000000060100800c00010004000000000000000926b3eb9e87f8c8b3a6caa09a1a38d124a173def80bde05b592a5f49cb8056fef80a90fc8c487e1b6004db5feaf0d98b43fc34265f6f01ce7fed79fa135fe637b9fdc8c89e7777e70aecc0b9c372af84eb990d7d32d6c563a42d4889ed3925ac319f32db2703ff85c5b143715d335c94f3fd06ba27da8f5fe0788f669730c4358c2be63e25072bf9e1408009600", @ANYRES32=r6, @ANYBLOB="fb03b50eedaefc91", @ANYRES32, @ANYBLOB="741194f25eec40f4e2ba2a00d51d6b66e9d985c86f6af8d238212a3fde4b46e23817e54664da29c4693e5eb2b5492c0a116d51211a8c40bf30dcd91e7d481e5a467f1ef9da08000800000018000000000800c300", @ANYRES32, @ANYBLOB='\x00\x00'], 0x118}], 0x1, 0x0, 0x0, 0x20000080}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000002d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) 1.734254657s ago: executing program 6 (id=1278): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) splice(r0, &(0x7f00000000c0)=0x1ff, r1, &(0x7f0000000100)=0x5, 0xfffffffffffffff9, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="450000000015b16c99b737172c67cca1b6fce26ae400000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1.304060746s ago: executing program 3 (id=1279): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc44121d9d322fe7c008775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3940fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d150000000000000000", 0xd8}], 0x1}, 0x4000000) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b000000000000000000000000030000000023b500000000000100000000000000feffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f0000000000000000000000000001000000000002000001000000100000fa6215e1c90fed90ac00000010a85f001a4b000000000000000580000000aaaaaabd0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) 1.078331739s ago: executing program 3 (id=1280): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x15, 0x4, 0x2dc4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x92, 0x0) sendmmsg$inet6(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="b458b09a7bc6afad62c3f97125bc54bad5b9f64492fb3237f80678f40515a15a9bc7f8f9c9244e7fe0c328f6457f6d457effb6e3090a2f0e0a47d7c95dddc94d4d0ca124", 0x44}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) r4 = socket(0x11, 0x3, 0x0) connect(r4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x28, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="7b400000000000007917300b2f4c93aca5e85057da9bcf0beb8eecf27c205889fb13f0a4d676b3d969d305bd575291d82916f73259059351a520ba1237352ed1eeeec0d66e5c76163f1a846c48514e993e01d45dac89bcf460dcb3ecfca9ce1475fbf2", @ANYRES16=r7, @ANYBLOB="010000000000000000000100000006000a004e200000050002000a0000001400090000000000000000000000ffff7f000001"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES64=0x0, @ANYRESHEX=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x800000, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xfff1, 0x1}, {0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x7}}}]}, 0x38}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x28, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff2, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 728.578879ms ago: executing program 6 (id=1281): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000300)={0x7}, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100000000000000000002000000", @ANYRES32, @ANYRES32=r2], 0x1c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f0000000600)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x7, 0x3, 0x80, 0x6}, @mpls={[], @ipv6=@udp={0x7, 0x6, "b21358", 0x1e1, 0x11, 0xff, @rand_addr=' \x01\x00', @empty, {[@dstopts={0x89, 0x9, '\x00', [@hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x30, {0x2, 0xa, 0x2, 0x400, [0x6, 0x8000000000000001, 0x8001, 0xfff, 0xb8]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @fragment={0x45, 0x0, 0x9, 0x1, 0x0, 0x8, 0x64}, @dstopts={0x88, 0xf, '\x00', [@padn={0x1, 0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0xe}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x2, 0x10, 0xa, 0x2, [0x4000000000000, 0x2, 0x8162, 0x8, 0x100, 0x7, 0x3, 0x9]}}]}, @dstopts={0x0, 0x13, '\x00', [@generic={0x3, 0x49, "9f86ede23e4b5e46fd18f951f5293428bfc295cad0e6fdb5166386700881a5b42ba6584d508731faccfbfda607b975d139ac880ba0c02e3676a60122f381a290715f0be2b3edf289be"}, @jumbo, @ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0x8}, @generic={0x67, 0x3e, "5b76d1f8828609f172173e9b6bdf401948dee242de0603816f355fda9a1321bbb3e89770928f478fdeceecb7523167c295b67126a259d8732fc4e90637c7"}]}], {0x4e24, 0x4e21, 0x51, 0x0, @opaque="5c012022f78f2747cd6ec1de9cea4b333be8cab2b2498696d5032ffbddb186c9328e061359aa17cb64066f5893cc6e2a2b2cbc158f3cf666fddc365a707a89c26ea9352beaef40042f"}}}}}, 0x217) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6d7d954e540d7d4f641269110d4ba47c06b8a49047c4dde9", @ANYRES16=r0, @ANYBLOB="0b1600000000000000004a0000000800a800000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000640)=""/4096, 0x1000, 0x0, &(0x7f0000000080)=""/166, 0xa6}}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000680)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @local}}}}}}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) sendmsg$sock(r6, &(0x7f00000015c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x22}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000b11}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_create1(0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e25, 0x0, @loopback, 0x18}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) sendto$packet(r7, &(0x7f0000000800)="cf8eb673595d8fbf0693d1c13a32bd944f39ac", 0x13, 0x890, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, 0x0) 0s ago: executing program 3 (id=1282): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000001c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1826aae1efd7eb74f42d63ad0235df9e7d15f2e005fe6cb55b5bb9fa6935841d949e607cb51726b300000000000bd754d22daea96acf2771211a659f18c06e", 0x5d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d300", 0x38}], 0x3}], 0x1, 0x4000001) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000001640)=""/83, 0x53}], 0x2}, 0x40002060) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090010000000e925000000000000030006000000000002000000000000000000000000000000020001000000000000fd000300000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000180001000000000000000000b80000000c00088008000c00", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@deltfilter={0x3c, 0x2d, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xf, 0x1}, {0x1, 0x4}, {0x1, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x7d}}, @TCA_RATE={0x6, 0x5, {0xa, 0x5}}, @TCA_RATE={0x6, 0x5, {0xe, 0x7}}]}, 0x3c}}, 0x4000010) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) kernel console output (not intermixed with test programs): 48 [ 237.912654][T10261] RSP: 002b:00007f6a0de1d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 237.912677][T10261] RAX: ffffffffffffffda RBX: 00007f6a0d1e5fa0 RCX: 00007f6a0cf8f749 [ 237.912694][T10261] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 237.912708][T10261] RBP: 00007f6a0de1d090 R08: 0000000000000000 R09: 0000000000000000 [ 237.912722][T10261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 237.912735][T10261] R13: 00007f6a0d1e6038 R14: 00007f6a0d1e5fa0 R15: 00007ffc93b4ff98 [ 237.912774][T10261] [ 238.577751][ T24] IPVS: starting estimator thread 0... [ 238.618366][T10281] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 238.692982][T10283] IPVS: using max 33 ests per chain, 79200 per kthread [ 238.717668][T10289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.950'. [ 238.763588][T10289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.950'. [ 238.811299][ T809] IPVS: starting estimator thread 0... [ 238.935351][T10302] IPVS: using max 26 ests per chain, 62400 per kthread [ 238.984852][T10101] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_rx_wq": -EINTR [ 238.987764][T10314] netlink: 20 bytes leftover after parsing attributes in process `syz.7.952'. [ 239.833441][ T24] IPVS: starting estimator thread 0... [ 239.925178][T10344] IPVS: using max 26 ests per chain, 62400 per kthread [ 240.054626][T10352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.961'. [ 240.108161][T10356] netlink: 64 bytes leftover after parsing attributes in process `syz.0.961'. [ 240.180999][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.962'. [ 241.415804][T10383] netlink: 40 bytes leftover after parsing attributes in process `syz.6.966'. [ 241.466780][T10387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 241.537250][T10387] vxlan0: entered promiscuous mode [ 241.553824][T10390] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.966'. [ 241.556755][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 241.563646][T10387] vxlan0: entered allmulticast mode [ 241.604490][ T6762] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.606800][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 241.633761][ T6762] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.660624][ T6762] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.683860][ T6762] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.920592][T10405] team0 (unregistering): Port device team_slave_0 removed [ 242.949528][T10405] team0 (unregistering): Port device team_slave_1 removed [ 242.997058][T10405] team0 (unregistering): Port device bond1 removed [ 243.059256][T10419] ip6erspan0: entered allmulticast mode [ 243.110639][T10429] : entered promiscuous mode [ 243.601113][T10441] wg1 speed is unknown, defaulting to 1000 [ 243.622045][T10439] tipc: Enabled bearer , priority 10 [ 243.680428][T10441] lo speed is unknown, defaulting to 1000 [ 243.709742][T10441] lo speed is unknown, defaulting to 1000 [ 243.738898][T10424] infiniband !yz!: set active [ 243.778357][T10424] infiniband !yz!: added team_slave_0 [ 243.791377][T10424] !yz!: rxe_create_cq: returned err = -12 [ 243.804374][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.6.982'. [ 243.822448][T10424] infiniband !yz!: Couldn't create ib_mad CQ [ 243.859112][T10443] netlink: 4 bytes leftover after parsing attributes in process `syz.6.982'. [ 243.868528][T10424] infiniband !yz!: Couldn't open port 1 [ 243.982824][T10424] RDS/IB: !yz!: added [ 243.999788][T10424] smc: adding ib device !yz! with port count 1 [ 244.011186][T10424] smc: ib device !yz! port 1 has no pnetid [ 244.610873][T10455] tipc: Started in network mode [ 244.626953][T10455] tipc: Node identity be6792494747, cluster identity 4711 [ 244.644442][T10455] tipc: Enabled bearer , priority 0 [ 244.653560][ T809] tipc: Node number set to 3282804994 [ 245.034078][T10455] syzkaller0: entered promiscuous mode [ 245.039637][T10455] syzkaller0: entered allmulticast mode [ 245.103854][T10455] tipc: Resetting bearer [ 245.285031][ T5839] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 245.297273][ T5839] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 245.308009][ T5839] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 245.318617][ T5839] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 245.327719][ T5839] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 245.374302][ T37] tipc: Resetting bearer [ 245.392829][T10454] tipc: Resetting bearer [ 247.166045][T10454] tipc: Disabling bearer [ 247.403507][ T52] Bluetooth: hci11: command tx timeout [ 247.664064][T10496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.682836][ T5973] tipc: Node number set to 4179661385 [ 247.706303][T10489] netlink: 96 bytes leftover after parsing attributes in process `syz.3.990'. [ 247.799159][T10474] wg1 speed is unknown, defaulting to 1000 [ 247.820513][T10474] lo speed is unknown, defaulting to 1000 [ 247.849721][T10474] lo speed is unknown, defaulting to 1000 [ 247.882233][T10498] tipc: Enabled bearer , priority 0 [ 247.919076][T10498] syzkaller0: entered promiscuous mode [ 247.955292][T10498] syzkaller0: entered allmulticast mode [ 248.008071][T10501] tipc: Resetting bearer [ 248.051766][T10497] tipc: Resetting bearer [ 248.145462][T10497] tipc: Disabling bearer [ 248.515382][T10524] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.1001'. [ 248.538376][T10524] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 248.787539][T10530] wg1 speed is unknown, defaulting to 1000 [ 248.861278][T10536] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1003'. [ 248.871124][T10530] lo speed is unknown, defaulting to 1000 [ 248.916078][T10530] lo speed is unknown, defaulting to 1000 [ 248.946963][T10528] atomic_op ffff88807ba91198 conn xmit_atomic 0000000000000000 [ 249.491583][ T52] Bluetooth: hci11: command tx timeout [ 249.632436][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1004'. [ 249.679757][T10549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1004'. [ 249.805137][T10543] wg1 speed is unknown, defaulting to 1000 [ 249.855455][T10543] lo speed is unknown, defaulting to 1000 [ 249.884221][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1004'. [ 249.893145][T10549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1004'. [ 249.998780][T10543] lo speed is unknown, defaulting to 1000 [ 250.007056][T10474] chnl_net:caif_netlink_parms(): no params data found [ 250.371631][T10474] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.380799][T10474] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.389552][T10474] bridge_slave_0: entered allmulticast mode [ 250.402682][T10474] bridge_slave_0: entered promiscuous mode [ 250.421701][T10474] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.430246][T10474] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.440555][T10474] bridge_slave_1: entered allmulticast mode [ 250.457343][T10474] bridge_slave_1: entered promiscuous mode [ 250.467465][T10556] wg1 speed is unknown, defaulting to 1000 [ 250.522705][T10556] lo speed is unknown, defaulting to 1000 [ 250.537078][T10474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.546710][T10556] lo speed is unknown, defaulting to 1000 [ 250.559559][T10474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.632042][T10474] team0: Port device team_slave_0 added [ 250.645160][T10474] team0: Port device team_slave_1 added [ 250.731099][T10474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.742349][T10474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.781177][T10474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.805674][T10474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.812951][T10474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.847900][T10474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.021902][T10474] hsr_slave_0: entered promiscuous mode [ 251.032976][T10474] hsr_slave_1: entered promiscuous mode [ 251.041753][T10474] debugfs: 'hsr0' already exists in 'hsr' [ 251.049765][T10474] Cannot create hsr debugfs directory [ 251.385554][T10474] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.472843][T10474] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.557888][T10474] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.568693][ T52] Bluetooth: hci11: command tx timeout [ 251.633119][T10474] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.919818][T10474] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 251.937668][T10474] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 251.938724][T10561] netlink: 'syz.6.1006': attribute type 21 has an invalid length. [ 251.968082][T10474] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 251.986100][T10474] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 252.008863][T10561] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1006'. [ 252.018897][T10561] netlink: 'syz.6.1006': attribute type 1 has an invalid length. [ 252.268253][T10474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.327007][T10474] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.369148][ T6762] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.376499][ T6762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.408258][ T6767] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.415578][ T6767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.479527][T10570] vxcan3: entered allmulticast mode [ 252.787310][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1008'. [ 252.956169][T10474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.035870][T10474] veth0_vlan: entered promiscuous mode [ 253.055964][T10474] veth1_vlan: entered promiscuous mode [ 253.107440][T10474] veth0_macvtap: entered promiscuous mode [ 253.122858][T10474] veth1_macvtap: entered promiscuous mode [ 253.151062][T10474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.175681][T10474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.200624][ T6767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.211409][ T6767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.227337][ T79] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.236687][ T79] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.382756][ T6767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.405989][ T6767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.465985][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.478182][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.556120][T10579] syz.6.1008 (10579) used greatest stack depth: 17832 bytes left [ 253.644438][ T52] Bluetooth: hci11: command tx timeout [ 255.539359][T10621] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1018'. [ 256.112796][T10634] netlink: 4096 bytes leftover after parsing attributes in process `syz.6.1021'. [ 256.211093][T10635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1020'. [ 256.657666][T10634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.682187][T10634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.325355][ T3459] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.348705][ T3459] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.385999][ T3459] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.416097][ T3459] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.128024][T10685] sctp: [Deprecated]: syz.6.1024 (pid 10685) Use of int in max_burst socket option deprecated. [ 258.128024][T10685] Use struct sctp_assoc_value instead [ 258.365813][ T5839] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 258.382943][ T5839] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 258.402854][ T5839] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 258.414231][ T5839] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 258.423460][ T5839] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 260.523881][ T5839] Bluetooth: hci12: command tx timeout [ 260.606944][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1033'. [ 261.008646][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.369482][T10823] netlink: 1372 bytes leftover after parsing attributes in process `syz.1.1038'. [ 262.563726][T10825] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1039'. [ 262.603455][ T5839] Bluetooth: hci12: command tx timeout [ 262.706358][T10828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1040'. [ 262.794885][T10828] bond0: (slave bond_slave_1): Releasing backup interface [ 263.296945][T10839] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1043'. [ 263.401354][T10842] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1044'. [ 264.011490][ T52] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 264.022103][ T52] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 264.032411][ T52] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 264.042456][ T52] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 264.072976][ T52] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 264.684401][ T52] Bluetooth: hci12: command tx timeout [ 265.120471][ T5839] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 265.129831][ T5839] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 265.139728][ T5839] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 265.148964][ T5839] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 265.158469][ T5839] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 265.750874][T10667] wg1 speed is unknown, defaulting to 1000 [ 265.766671][T10667] lo speed is unknown, defaulting to 1000 [ 265.766737][T10847] wg1 speed is unknown, defaulting to 1000 [ 265.778251][T10667] lo speed is unknown, defaulting to 1000 [ 265.806088][T10689] wg1 speed is unknown, defaulting to 1000 [ 265.814106][T10855] wg1 speed is unknown, defaulting to 1000 [ 265.820132][T10847] lo speed is unknown, defaulting to 1000 [ 265.836208][T10851] wg1 speed is unknown, defaulting to 1000 [ 265.847670][T10847] lo speed is unknown, defaulting to 1000 [ 265.854418][T10689] lo speed is unknown, defaulting to 1000 [ 265.879345][T10855] lo speed is unknown, defaulting to 1000 [ 265.886409][T10689] lo speed is unknown, defaulting to 1000 [ 265.910188][T10851] lo speed is unknown, defaulting to 1000 [ 265.910236][T10855] lo speed is unknown, defaulting to 1000 [ 266.026315][T10851] lo speed is unknown, defaulting to 1000 [ 266.203571][ T5839] Bluetooth: hci13: command tx timeout [ 266.568139][T10689] chnl_net:caif_netlink_parms(): no params data found [ 266.645632][T10855] chnl_net:caif_netlink_parms(): no params data found [ 266.767025][ T5839] Bluetooth: hci12: command tx timeout [ 266.767806][T10851] chnl_net:caif_netlink_parms(): no params data found [ 266.877916][T10689] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.885569][T10689] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.892927][T10689] bridge_slave_0: entered allmulticast mode [ 266.902138][T10689] bridge_slave_0: entered promiscuous mode [ 266.948255][T10689] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.955577][T10689] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.962858][T10689] bridge_slave_1: entered allmulticast mode [ 266.972654][T10689] bridge_slave_1: entered promiscuous mode [ 266.986853][T10855] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.994849][T10855] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.002113][T10855] bridge_slave_0: entered allmulticast mode [ 267.012951][T10855] bridge_slave_0: entered promiscuous mode [ 267.060117][T10855] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.067774][T10855] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.075821][T10855] bridge_slave_1: entered allmulticast mode [ 267.086270][T10855] bridge_slave_1: entered promiscuous mode [ 267.115548][T10689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.157555][T10689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.167862][T10851] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.176066][T10851] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.184118][T10851] bridge_slave_0: entered allmulticast mode [ 267.191603][T10851] bridge_slave_0: entered promiscuous mode [ 267.243544][ T5839] Bluetooth: hci14: command tx timeout [ 267.251913][T10851] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.259431][T10851] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.267389][T10851] bridge_slave_1: entered allmulticast mode [ 267.275960][T10851] bridge_slave_1: entered promiscuous mode [ 267.286916][T10855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.304177][T10855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.317432][T10689] team0: Port device team_slave_0 added [ 267.360003][T10689] team0: Port device team_slave_1 added [ 267.425923][T10851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.438246][T10855] team0: Port device team_slave_0 added [ 267.462181][T10851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.475828][T10855] team0: Port device team_slave_1 added [ 267.482560][T10689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.490440][T10689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.518526][T10689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.577412][T10689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.585477][T10689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.611755][T10689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.636709][T10851] team0: Port device team_slave_0 added [ 267.661255][T10855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.668839][T10855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.696619][T10855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.712070][T10851] team0: Port device team_slave_1 added [ 267.726129][T10855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.733897][T10855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.760472][T10855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.846498][T10689] hsr_slave_0: entered promiscuous mode [ 267.854576][T10689] hsr_slave_1: entered promiscuous mode [ 267.861772][T10689] debugfs: 'hsr0' already exists in 'hsr' [ 267.868164][T10689] Cannot create hsr debugfs directory [ 267.876035][T10851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.883003][T10851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.909612][T10851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.923125][T10851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.931482][T10851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.959205][T10851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.061689][T10855] hsr_slave_0: entered promiscuous mode [ 268.069131][T10855] hsr_slave_1: entered promiscuous mode [ 268.078740][T10855] debugfs: 'hsr0' already exists in 'hsr' [ 268.085753][T10855] Cannot create hsr debugfs directory [ 268.140401][T10851] hsr_slave_0: entered promiscuous mode [ 268.147905][T10851] hsr_slave_1: entered promiscuous mode [ 268.154937][T10851] debugfs: 'hsr0' already exists in 'hsr' [ 268.160696][T10851] Cannot create hsr debugfs directory [ 268.284108][ T5839] Bluetooth: hci13: command tx timeout [ 268.776265][T10689] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 268.789020][T10689] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 268.822334][T10851] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.842363][T10689] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 268.860849][T10689] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 268.902908][T10851] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.995818][T10851] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.034127][T10689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.072318][T10851] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.102100][T10689] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.119256][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.126516][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.146238][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.153519][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.288076][T10851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 269.302379][T10851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 269.319838][T10851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 269.327833][ T52] Bluetooth: hci14: command tx timeout [ 269.366342][T10851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 269.456265][T10855] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 269.480214][T10855] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 269.498243][T10855] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 269.518063][T10855] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 269.659479][T10851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.718163][T10851] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.733056][ T6767] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.740341][ T6767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.779128][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.786474][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.857025][T10689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.959202][T10855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.034864][T10855] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.071681][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.078958][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.106047][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.113369][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.364648][ T52] Bluetooth: hci13: command tx timeout [ 270.397061][T10851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.504337][T10851] veth0_vlan: entered promiscuous mode [ 270.538570][T10851] veth1_vlan: entered promiscuous mode [ 270.587081][T10689] veth0_vlan: entered promiscuous mode [ 270.640422][T10689] veth1_vlan: entered promiscuous mode [ 270.675705][T10851] veth0_macvtap: entered promiscuous mode [ 270.693071][T10855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.707733][T10851] veth1_macvtap: entered promiscuous mode [ 270.763134][T10689] veth0_macvtap: entered promiscuous mode [ 270.804604][T10689] veth1_macvtap: entered promiscuous mode [ 270.818765][T10851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.857408][T10851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.871833][T10689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.902083][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.912951][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.939784][T10689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.949472][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.965710][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.983013][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.007144][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.038679][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.050945][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.212818][ T6767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.227084][ T6767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.395519][ T3459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.404771][ T52] Bluetooth: hci14: command tx timeout [ 271.423923][ T3459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.460444][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.485965][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.523383][ T5978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.531268][ T5978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.581192][T10855] veth0_vlan: entered promiscuous mode [ 271.627350][T10855] veth1_vlan: entered promiscuous mode [ 271.746008][T10855] veth0_macvtap: entered promiscuous mode [ 271.770006][T10855] veth1_macvtap: entered promiscuous mode [ 271.907114][T10855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.969806][T10855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.047890][ T5978] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.085536][ T5978] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.110424][ T5978] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.147137][ T5978] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.310189][T10923] syzkaller1: entered promiscuous mode [ 272.333598][T10923] syzkaller1: entered allmulticast mode [ 272.444214][ T52] Bluetooth: hci13: command tx timeout [ 273.265814][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.304936][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.411649][ T5839] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 273.426456][ T5839] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 273.435851][ T5839] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 273.459293][ T5839] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 273.474564][ T5839] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 273.484209][ T5146] Bluetooth: hci14: command tx timeout [ 273.547914][ T5978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.585183][T10935] netlink: 'syz.4.1051': attribute type 1 has an invalid length. [ 273.594371][ T5978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.643048][T10932] wg1 speed is unknown, defaulting to 1000 [ 273.674727][T10932] lo speed is unknown, defaulting to 1000 [ 273.682377][T10932] lo speed is unknown, defaulting to 1000 [ 273.761353][T10940] FAULT_INJECTION: forcing a failure. [ 273.761353][T10940] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 273.816874][T10940] CPU: 1 UID: 0 PID: 10940 Comm: syz.2.1050 Not tainted syzkaller #0 PREEMPT(full) [ 273.816923][T10940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 273.816937][T10940] Call Trace: [ 273.816945][T10940] [ 273.816955][T10940] dump_stack_lvl+0x189/0x250 [ 273.817000][T10940] ? __pfx____ratelimit+0x10/0x10 [ 273.817023][T10940] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.817054][T10940] ? __pfx__printk+0x10/0x10 [ 273.817081][T10940] ? fs_reclaim_acquire+0x7d/0x100 [ 273.817118][T10940] should_fail_ex+0x414/0x560 [ 273.817159][T10940] prepare_alloc_pages+0x213/0x610 [ 273.817192][T10940] __alloc_frozen_pages_noprof+0x123/0x370 [ 273.817220][T10940] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 273.817255][T10940] ? policy_nodemask+0x27c/0x720 [ 273.817284][T10940] alloc_pages_mpol+0x232/0x4a0 [ 273.817313][T10940] vma_alloc_folio_noprof+0xe4/0x200 [ 273.817339][T10940] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 273.817378][T10940] folio_prealloc+0x30/0x180 [ 273.817414][T10940] do_wp_page+0x1231/0x5800 [ 273.817471][T10940] ? __pfx_do_wp_page+0x10/0x10 [ 273.817497][T10940] ? do_raw_spin_lock+0x121/0x290 [ 273.817532][T10940] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 273.817576][T10940] __handle_mm_fault+0x1033/0x5400 [ 273.817627][T10940] ? __pfx___handle_mm_fault+0x10/0x10 [ 273.817675][T10940] ? follow_page_pte+0xd03/0x13e0 [ 273.817717][T10940] handle_mm_fault+0x40a/0x8e0 [ 273.817760][T10940] __get_user_pages+0x165c/0x2a00 [ 273.817830][T10940] __gup_longterm_locked+0xde4/0x1660 [ 273.817875][T10940] ? sanity_check_pinned_pages+0x1241/0x1300 [ 273.817907][T10940] ? gup_fast_fallback+0x1b86/0x22d0 [ 273.817940][T10940] gup_fast_fallback+0x1d65/0x22d0 [ 273.817975][T10940] ? __kernel_text_address+0xd/0x40 [ 273.818009][T10940] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 273.818078][T10940] ? __pfx_gup_fast_fallback+0x10/0x10 [ 273.818104][T10940] ? kasan_save_track+0x4f/0x80 [ 273.818136][T10940] ? __kasan_kmalloc+0x93/0xb0 [ 273.818167][T10940] ? __kmalloc_noprof+0x411/0x7f0 [ 273.818196][T10940] ? sock_kmalloc+0xd6/0x160 [ 273.818223][T10940] ? skcipher_recvmsg+0x3d1/0x11d0 [ 273.818253][T10940] ? sock_recvmsg+0x22c/0x270 [ 273.818282][T10940] ? ____sys_recvmsg+0x1c9/0x460 [ 273.818308][T10940] ? __x64_sys_recvmsg+0x198/0x260 [ 273.818345][T10940] ? do_syscall_64+0xfa/0xfa0 [ 273.818366][T10940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.818393][T10940] ? pin_user_pages_fast+0x4d/0xb0 [ 273.818424][T10940] iov_iter_extract_pages+0x35f/0x5e0 [ 273.818463][T10940] extract_iter_to_sg+0xe46/0x24e0 [ 273.818505][T10940] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 273.818533][T10940] ? rcu_is_watching+0x15/0xb0 [ 273.818559][T10940] ? trace_kmalloc+0x1f/0xd0 [ 273.818588][T10940] ? sock_kmalloc+0xd6/0x160 [ 273.818621][T10940] ? __asan_memset+0x22/0x50 [ 273.818653][T10940] af_alg_get_rsgl+0x436/0x810 [ 273.818703][T10940] skcipher_recvmsg+0x3d1/0x11d0 [ 273.818739][T10940] ? aa_sk_perm+0x81e/0x950 [ 273.818783][T10940] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 273.818829][T10940] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 273.818848][T10940] ? security_socket_recvmsg+0x7e/0x2e0 [ 273.818870][T10940] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 273.818898][T10940] sock_recvmsg+0x22c/0x270 [ 273.818933][T10940] ____sys_recvmsg+0x1c9/0x460 [ 273.818974][T10940] ? __pfx_____sys_recvmsg+0x10/0x10 [ 273.819018][T10940] ? import_iovec+0x74/0xa0 [ 273.819048][T10940] ___sys_recvmsg+0x1b5/0x510 [ 273.819079][T10940] ? __pfx____sys_recvmsg+0x10/0x10 [ 273.819133][T10940] ? __fget_files+0x3a0/0x420 [ 273.819165][T10940] __x64_sys_recvmsg+0x198/0x260 [ 273.819194][T10940] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 273.819231][T10940] ? __pfx_ksys_write+0x10/0x10 [ 273.819264][T10940] ? do_syscall_64+0xbe/0xfa0 [ 273.819289][T10940] do_syscall_64+0xfa/0xfa0 [ 273.819309][T10940] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.819329][T10940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.819349][T10940] ? clear_bhb_loop+0x60/0xb0 [ 273.819374][T10940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.819393][T10940] RIP: 0033:0x7f9a5318f749 [ 273.819412][T10940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.819429][T10940] RSP: 002b:00007f9a54113038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 273.819451][T10940] RAX: ffffffffffffffda RBX: 00007f9a533e5fa0 RCX: 00007f9a5318f749 [ 273.819466][T10940] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 273.819479][T10940] RBP: 00007f9a54113090 R08: 0000000000000000 R09: 0000000000000000 [ 273.819491][T10940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 273.819503][T10940] R13: 00007f9a533e6038 R14: 00007f9a533e5fa0 R15: 00007ffd24d82388 [ 273.819537][T10940] [ 274.791809][T10947] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1053'. [ 274.876710][T10958] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1055'. [ 274.920111][T10958] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1055'. [ 274.956280][T10961] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1056'. [ 275.156951][T10968] netlink: 'syz.9.1059': attribute type 1 has an invalid length. [ 275.192021][T10968] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode [ 275.234391][T10932] chnl_net:caif_netlink_parms(): no params data found [ 275.251718][T10972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1058'. [ 275.528340][T10932] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.539738][T10932] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.547596][T10932] bridge_slave_0: entered allmulticast mode [ 275.558388][T10932] bridge_slave_0: entered promiscuous mode [ 275.565507][ T52] Bluetooth: hci10: command tx timeout [ 275.580503][T10932] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.589384][T10932] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.597310][T10932] bridge_slave_1: entered allmulticast mode [ 275.609663][T10932] bridge_slave_1: entered promiscuous mode [ 275.789709][T10932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.847002][T10932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.944246][T10990] tipc: Started in network mode [ 275.949186][T10990] tipc: Node identity d2ffb31ba2b8, cluster identity 4711 [ 275.958513][T10990] tipc: Enabled bearer , priority 0 [ 275.976628][T10932] team0: Port device team_slave_0 added [ 275.988693][T10932] team0: Port device team_slave_1 added [ 276.098997][T10932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.106971][T10932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.137763][T10932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.165812][T10990] tipc: Disabling bearer [ 276.200310][T10932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.209320][T10932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.243027][T10932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.381141][T11004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.895495][T10932] hsr_slave_0: entered promiscuous mode [ 276.915097][T10932] hsr_slave_1: entered promiscuous mode [ 276.929338][T10932] debugfs: 'hsr0' already exists in 'hsr' [ 276.947505][T10932] Cannot create hsr debugfs directory [ 277.149556][T11008] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1066'. [ 277.163102][T11016] bridge_slave_0: left allmulticast mode [ 277.178018][T11016] bridge_slave_0: left promiscuous mode [ 277.195744][T11016] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.222487][T11016] bridge_slave_1: left allmulticast mode [ 277.228451][T11016] bridge_slave_1: left promiscuous mode [ 277.236326][T11016] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.258539][T11016] bond0: (slave bond_slave_0): Releasing backup interface [ 277.275895][T11024] netlink: 'syz.4.1067': attribute type 10 has an invalid length. [ 277.299099][T11016] bond0: (slave bond_slave_1): Releasing backup interface [ 277.337806][T11016] team0: Port device team_slave_0 removed [ 277.356792][T11016] team0: Port device team_slave_1 removed [ 277.365979][T11016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.376793][T11016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.388645][T11016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.399571][T11016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.420514][T11016] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 277.628776][T11024] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 277.648555][ T52] Bluetooth: hci10: command tx timeout [ 278.728586][T10932] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.802512][T11062] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1075'. [ 278.826154][T11062] team0: No ports can be present during mode change [ 278.882500][T11054] wg1 speed is unknown, defaulting to 1000 [ 278.891904][T11054] lo speed is unknown, defaulting to 1000 [ 278.906234][T11054] lo speed is unknown, defaulting to 1000 [ 279.537583][T10932] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.727329][ T52] Bluetooth: hci10: command tx timeout [ 279.735504][T11074] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1077'. [ 279.926319][T10932] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.144439][ T5839] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 280.154226][ T5839] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 280.188437][ T5839] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 280.203019][ T5839] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 280.220338][ T5839] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 280.233429][T11105] FAULT_INJECTION: forcing a failure. [ 280.233429][T11105] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 280.254677][T11105] CPU: 0 UID: 0 PID: 11105 Comm: syz.9.1082 Not tainted syzkaller #0 PREEMPT(full) [ 280.254708][T11105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 280.254723][T11105] Call Trace: [ 280.254731][T11105] [ 280.254740][T11105] dump_stack_lvl+0x189/0x250 [ 280.254775][T11105] ? __pfx____ratelimit+0x10/0x10 [ 280.254796][T11105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.254826][T11105] ? __pfx__printk+0x10/0x10 [ 280.254850][T11105] ? fs_reclaim_acquire+0x7d/0x100 [ 280.254881][T11105] should_fail_ex+0x414/0x560 [ 280.254919][T11105] prepare_alloc_pages+0x213/0x610 [ 280.254948][T11105] __alloc_frozen_pages_noprof+0x123/0x370 [ 280.254976][T11105] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 280.255009][T11105] ? policy_nodemask+0x27c/0x720 [ 280.255038][T11105] alloc_pages_mpol+0x232/0x4a0 [ 280.255066][T11105] vma_alloc_folio_noprof+0xe4/0x200 [ 280.255092][T11105] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 280.255127][T11105] folio_prealloc+0x30/0x180 [ 280.255162][T11105] do_wp_page+0x1231/0x5800 [ 280.255223][T11105] ? __pfx_do_wp_page+0x10/0x10 [ 280.255248][T11105] ? do_raw_spin_lock+0x121/0x290 [ 280.255282][T11105] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 280.255324][T11105] __handle_mm_fault+0x1033/0x5400 [ 280.255372][T11105] ? __pfx___handle_mm_fault+0x10/0x10 [ 280.255418][T11105] ? follow_page_pte+0xd03/0x13e0 [ 280.255458][T11105] handle_mm_fault+0x40a/0x8e0 [ 280.255500][T11105] __get_user_pages+0x165c/0x2a00 [ 280.255599][T11105] __gup_longterm_locked+0xde4/0x1660 [ 280.255644][T11105] ? sanity_check_pinned_pages+0x1241/0x1300 [ 280.255673][T11105] ? gup_fast_fallback+0x1b86/0x22d0 [ 280.255706][T11105] gup_fast_fallback+0x1d65/0x22d0 [ 280.255735][T11105] ? __kernel_text_address+0xd/0x40 [ 280.255768][T11105] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 280.255834][T11105] ? __pfx_gup_fast_fallback+0x10/0x10 [ 280.255859][T11105] ? kasan_save_track+0x4f/0x80 [ 280.255889][T11105] ? __kasan_kmalloc+0x93/0xb0 [ 280.255920][T11105] ? __kmalloc_noprof+0x411/0x7f0 [ 280.255947][T11105] ? sock_kmalloc+0xd6/0x160 [ 280.255973][T11105] ? skcipher_recvmsg+0x3d1/0x11d0 [ 280.256002][T11105] ? sock_recvmsg+0x22c/0x270 [ 280.256031][T11105] ? ____sys_recvmsg+0x1c9/0x460 [ 280.256056][T11105] ? __x64_sys_recvmsg+0x198/0x260 [ 280.256080][T11105] ? do_syscall_64+0xfa/0xfa0 [ 280.256101][T11105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.256127][T11105] ? pin_user_pages_fast+0x4d/0xb0 [ 280.256175][T11105] iov_iter_extract_pages+0x35f/0x5e0 [ 280.256223][T11105] extract_iter_to_sg+0xe46/0x24e0 [ 280.256266][T11105] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 280.256295][T11105] ? rcu_is_watching+0x15/0xb0 [ 280.256322][T11105] ? trace_kmalloc+0x1f/0xd0 [ 280.256352][T11105] ? sock_kmalloc+0xd6/0x160 [ 280.256387][T11105] ? __asan_memset+0x22/0x50 [ 280.256419][T11105] af_alg_get_rsgl+0x436/0x810 [ 280.256467][T11105] skcipher_recvmsg+0x3d1/0x11d0 [ 280.256504][T11105] ? aa_sk_perm+0x81e/0x950 [ 280.256550][T11105] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 280.256586][T11105] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 280.256607][T11105] ? security_socket_recvmsg+0x7e/0x2e0 [ 280.256631][T11105] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 280.256663][T11105] sock_recvmsg+0x22c/0x270 [ 280.256701][T11105] ____sys_recvmsg+0x1c9/0x460 [ 280.256740][T11105] ? __pfx_____sys_recvmsg+0x10/0x10 [ 280.256788][T11105] ? import_iovec+0x74/0xa0 [ 280.256821][T11105] ___sys_recvmsg+0x1b5/0x510 [ 280.256857][T11105] ? __pfx____sys_recvmsg+0x10/0x10 [ 280.256917][T11105] ? __fget_files+0x3a0/0x420 [ 280.256953][T11105] __x64_sys_recvmsg+0x198/0x260 [ 280.256985][T11105] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 280.257026][T11105] ? __pfx_ksys_write+0x10/0x10 [ 280.257063][T11105] ? do_syscall_64+0xbe/0xfa0 [ 280.257091][T11105] do_syscall_64+0xfa/0xfa0 [ 280.257113][T11105] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.257137][T11105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.257158][T11105] ? clear_bhb_loop+0x60/0xb0 [ 280.257186][T11105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.257213][T11105] RIP: 0033:0x7f879ef8f749 [ 280.257234][T11105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.257253][T11105] RSP: 002b:00007f879fe13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 280.257277][T11105] RAX: ffffffffffffffda RBX: 00007f879f1e5fa0 RCX: 00007f879ef8f749 [ 280.257294][T11105] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 280.257308][T11105] RBP: 00007f879fe13090 R08: 0000000000000000 R09: 0000000000000000 [ 280.257322][T11105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 280.257335][T11105] R13: 00007f879f1e6038 R14: 00007f879f1e5fa0 R15: 00007ffcb80ad298 [ 280.257374][T11105] [ 280.736300][T10932] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.937005][T11113] pimreg: entered allmulticast mode [ 281.015952][T11095] wg1 speed is unknown, defaulting to 1000 [ 281.081122][T11095] lo speed is unknown, defaulting to 1000 [ 281.113440][T11124] syzkaller0: entered promiscuous mode [ 281.157794][T11124] syzkaller0: entered allmulticast mode [ 281.197758][T11095] lo speed is unknown, defaulting to 1000 [ 281.228525][T11122] wg1 speed is unknown, defaulting to 1000 [ 281.253950][T11122] lo speed is unknown, defaulting to 1000 [ 281.277877][T11122] lo speed is unknown, defaulting to 1000 [ 281.357387][T10932] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 281.388658][T10932] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 281.401762][T11120] wg1 speed is unknown, defaulting to 1000 [ 281.402256][T10932] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 281.469129][T11120] lo speed is unknown, defaulting to 1000 [ 281.471215][T10932] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 281.527063][T11120] lo speed is unknown, defaulting to 1000 [ 281.602313][T11129] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.811581][ T52] Bluetooth: hci10: command tx timeout [ 281.848965][T11129] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.949363][T11129] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.090567][T11129] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.284414][ T52] Bluetooth: hci15: command tx timeout [ 282.405278][ T3459] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.440080][T10932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.464292][ T5978] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.482198][T11095] chnl_net:caif_netlink_parms(): no params data found [ 282.531480][ T6771] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.616856][ T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.691394][T10932] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.731670][T11095] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.740700][T11095] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.749433][T11095] bridge_slave_0: entered allmulticast mode [ 282.758858][T11095] bridge_slave_0: entered promiscuous mode [ 282.788380][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.795652][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.808836][T11095] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.818508][T11095] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.826812][T11095] bridge_slave_1: entered allmulticast mode [ 282.836769][T11095] bridge_slave_1: entered promiscuous mode [ 282.847716][ T3459] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.855026][ T3459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.877805][T11145] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1088'. [ 282.946406][T11095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.982218][T11095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.063952][T11095] team0: Port device team_slave_0 added [ 283.079905][T11095] team0: Port device team_slave_1 added [ 283.156005][T11095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.163490][T11095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.190838][T11095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.204428][T11095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.211399][T11095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.248337][T11095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.370803][T11095] hsr_slave_0: entered promiscuous mode [ 283.378912][T11095] hsr_slave_1: entered promiscuous mode [ 283.386932][T11095] debugfs: 'hsr0' already exists in 'hsr' [ 283.392700][T11095] Cannot create hsr debugfs directory [ 283.832278][T11095] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.845718][T11095] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 283.856205][T11173] netlink: 'syz.4.1095': attribute type 12 has an invalid length. [ 283.905835][T11173] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.951997][T11095] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.969262][T11095] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 283.999625][T11173] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.057773][T11095] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.068418][T11095] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 284.092954][T11173] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.138178][T11095] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.151054][T11095] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 284.173865][T10932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.186409][T11173] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.364829][ T52] Bluetooth: hci15: command tx timeout [ 284.392430][T11095] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 284.406388][T11095] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 284.419473][T11095] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 284.433703][T11095] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 284.578537][T11095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.631346][T11095] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.656443][T10932] veth0_vlan: entered promiscuous mode [ 284.690756][ T3459] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.698008][ T3459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.719859][ T5978] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.727180][ T5978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.740631][T10932] veth1_vlan: entered promiscuous mode [ 284.851421][T10932] veth0_macvtap: entered promiscuous mode [ 284.870849][T10932] veth1_macvtap: entered promiscuous mode [ 284.909042][T10932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.938843][T10932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.966079][ T5978] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.000613][ T5978] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.026828][ T5978] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.055992][ T5978] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.140322][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.166974][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.207813][ T6771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.217547][ T6771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.225897][T11095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.359985][T11195] netlink: 'syz.8.1049': attribute type 21 has an invalid length. [ 285.382117][T11195] netlink: 156 bytes leftover after parsing attributes in process `syz.8.1049'. [ 285.401752][T11195] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1049'. [ 285.448632][T11195] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1049'. [ 285.639988][T11095] veth0_vlan: entered promiscuous mode [ 285.660477][T11095] veth1_vlan: entered promiscuous mode [ 285.696483][T11095] veth0_macvtap: entered promiscuous mode [ 285.709675][T11095] veth1_macvtap: entered promiscuous mode [ 285.741494][T11095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.761685][T11095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.779429][ T6762] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.790980][ T6762] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.802171][ T6762] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.812696][ T6762] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.926828][ T6771] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.005022][ T5978] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.074940][ T6771] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.104384][ T6771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.133850][ T6771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.217041][ T79] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.238009][ T3459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.250577][T11206] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1097'. [ 286.262750][ T3459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.444354][ T52] Bluetooth: hci15: command tx timeout [ 286.510334][T11217] netlink: 'syz.4.1100': attribute type 39 has an invalid length. [ 286.568680][T11223] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1100'. [ 286.678292][T11225] wg1 speed is unknown, defaulting to 1000 [ 286.687775][T11225] lo speed is unknown, defaulting to 1000 [ 286.697208][T11225] lo speed is unknown, defaulting to 1000 [ 286.704129][T11226] erspan0: entered allmulticast mode [ 286.752621][T11228] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1101'. [ 286.772218][T11228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.781876][T11228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.794541][T11228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.801979][T11228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.250060][T11231] No such timeout policy "syz1" [ 287.259023][T11231] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1102'. [ 287.269791][T11231] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1102'. [ 287.281491][T11231] netlink: 'syz.8.1102': attribute type 18 has an invalid length. [ 287.427822][T11235] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1104'. [ 287.786041][T11257] netlink: 'syz.8.1110': attribute type 10 has an invalid length. [ 287.807544][T11257] team0: Port device geneve0 added [ 287.815537][T11259] netlink: 'syz.5.1111': attribute type 29 has an invalid length. [ 287.828551][T11259] netlink: 'syz.5.1111': attribute type 29 has an invalid length. [ 287.972899][T11265] wg1 speed is unknown, defaulting to 1000 [ 287.981712][T11265] lo speed is unknown, defaulting to 1000 [ 287.990685][T11265] lo speed is unknown, defaulting to 1000 [ 288.203005][T11268] __nla_validate_parse: 2 callbacks suppressed [ 288.203029][T11268] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1113'. [ 288.525567][ T52] Bluetooth: hci15: command tx timeout [ 288.585296][T11279] bond1: option arp_all_targets: invalid value (4) [ 288.597305][T11279] bond1 (unregistering): Released all slaves [ 290.904531][T11302] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1121'. [ 291.059457][T11316] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1125'. [ 291.099115][T11316] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1125'. [ 291.109534][T11316] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1125'. [ 291.122063][T11316] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1125'. [ 291.139438][T11316] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1125'. [ 291.162349][T11321] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1126'. [ 291.426938][T11332] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 292.669567][T11349] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1134'. [ 293.287921][T11379] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:4 [ 293.362916][T11381] sit1: entered promiscuous mode [ 293.828932][T11407] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1148'. [ 293.848497][T11407] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1148'. [ 293.884577][T11407] netlink: 'syz.8.1148': attribute type 1 has an invalid length. [ 293.885638][T11403] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1147'. [ 293.901726][T11407] nbd: error processing sock list [ 293.911148][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1147'. [ 293.997853][T11408] 8021q: adding VLAN 0 to HW filter on device bond1 [ 294.062203][T11411] 8021q: adding VLAN 0 to HW filter on device bond2 [ 294.415436][T11429] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1154'. [ 294.431471][T11429] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1154'. [ 294.448997][T11432] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1155'. [ 294.517765][T11436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1156'. [ 294.552799][T11436] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1156'. [ 294.744819][T11443] netlink: 6 bytes leftover after parsing attributes in process `syz.8.1157'. [ 294.786963][T11443] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.064007][T11453] FAULT_INJECTION: forcing a failure. [ 295.064007][T11453] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 295.085363][T11453] CPU: 1 UID: 0 PID: 11453 Comm: syz.5.1161 Not tainted syzkaller #0 PREEMPT(full) [ 295.085395][T11453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 295.085410][T11453] Call Trace: [ 295.085419][T11453] [ 295.085428][T11453] dump_stack_lvl+0x189/0x250 [ 295.085466][T11453] ? __pfx____ratelimit+0x10/0x10 [ 295.085488][T11453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.085518][T11453] ? __pfx__printk+0x10/0x10 [ 295.085543][T11453] ? fs_reclaim_acquire+0x7d/0x100 [ 295.085576][T11453] should_fail_ex+0x414/0x560 [ 295.085616][T11453] prepare_alloc_pages+0x213/0x610 [ 295.085647][T11453] __alloc_frozen_pages_noprof+0x123/0x370 [ 295.085676][T11453] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 295.085711][T11453] ? policy_nodemask+0x27c/0x720 [ 295.085740][T11453] alloc_pages_mpol+0x232/0x4a0 [ 295.085769][T11453] vma_alloc_folio_noprof+0xe4/0x200 [ 295.085796][T11453] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 295.085834][T11453] folio_prealloc+0x30/0x180 [ 295.085870][T11453] do_wp_page+0x1231/0x5800 [ 295.085926][T11453] ? __pfx_do_wp_page+0x10/0x10 [ 295.085953][T11453] ? do_raw_spin_lock+0x121/0x290 [ 295.085988][T11453] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 295.086032][T11453] __handle_mm_fault+0x1033/0x5400 [ 295.086083][T11453] ? __pfx___handle_mm_fault+0x10/0x10 [ 295.086132][T11453] ? follow_page_pte+0xd03/0x13e0 [ 295.086173][T11453] handle_mm_fault+0x40a/0x8e0 [ 295.086217][T11453] __get_user_pages+0x165c/0x2a00 [ 295.086287][T11453] __gup_longterm_locked+0xde4/0x1660 [ 295.086338][T11453] ? sanity_check_pinned_pages+0x1241/0x1300 [ 295.086369][T11453] ? gup_fast_fallback+0x1b86/0x22d0 [ 295.086403][T11453] gup_fast_fallback+0x1d65/0x22d0 [ 295.086433][T11453] ? __kernel_text_address+0xd/0x40 [ 295.086467][T11453] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 295.086535][T11453] ? __pfx_gup_fast_fallback+0x10/0x10 [ 295.086562][T11453] ? kasan_save_track+0x4f/0x80 [ 295.086592][T11453] ? __kasan_kmalloc+0x93/0xb0 [ 295.086624][T11453] ? __kmalloc_noprof+0x411/0x7f0 [ 295.086654][T11453] ? sock_kmalloc+0xd6/0x160 [ 295.086681][T11453] ? skcipher_recvmsg+0x3d1/0x11d0 [ 295.086710][T11453] ? sock_recvmsg+0x22c/0x270 [ 295.086740][T11453] ? ____sys_recvmsg+0x1c9/0x460 [ 295.086766][T11453] ? __x64_sys_recvmsg+0x198/0x260 [ 295.086791][T11453] ? do_syscall_64+0xfa/0xfa0 [ 295.086812][T11453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.086841][T11453] ? pin_user_pages_fast+0x4d/0xb0 [ 295.086874][T11453] iov_iter_extract_pages+0x35f/0x5e0 [ 295.086914][T11453] extract_iter_to_sg+0xe46/0x24e0 [ 295.086957][T11453] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 295.086987][T11453] ? rcu_is_watching+0x15/0xb0 [ 295.087013][T11453] ? trace_kmalloc+0x1f/0xd0 [ 295.087043][T11453] ? sock_kmalloc+0xd6/0x160 [ 295.087078][T11453] ? __asan_memset+0x22/0x50 [ 295.087110][T11453] af_alg_get_rsgl+0x436/0x810 [ 295.087167][T11453] skcipher_recvmsg+0x3d1/0x11d0 [ 295.087204][T11453] ? aa_sk_perm+0x81e/0x950 [ 295.087249][T11453] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 295.087285][T11453] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 295.087313][T11453] ? security_socket_recvmsg+0x7e/0x2e0 [ 295.087337][T11453] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 295.087369][T11453] sock_recvmsg+0x22c/0x270 [ 295.087407][T11453] ____sys_recvmsg+0x1c9/0x460 [ 295.087446][T11453] ? __pfx_____sys_recvmsg+0x10/0x10 [ 295.087495][T11453] ? import_iovec+0x74/0xa0 [ 295.087528][T11453] ___sys_recvmsg+0x1b5/0x510 [ 295.087564][T11453] ? __pfx____sys_recvmsg+0x10/0x10 [ 295.087624][T11453] ? __fget_files+0x3a0/0x420 [ 295.087659][T11453] __x64_sys_recvmsg+0x198/0x260 [ 295.087691][T11453] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 295.087732][T11453] ? __pfx_ksys_write+0x10/0x10 [ 295.087770][T11453] ? do_syscall_64+0xbe/0xfa0 [ 295.087798][T11453] do_syscall_64+0xfa/0xfa0 [ 295.087820][T11453] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.087841][T11453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.087861][T11453] ? clear_bhb_loop+0x60/0xb0 [ 295.087889][T11453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.087910][T11453] RIP: 0033:0x7fc5a458f749 [ 295.087931][T11453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.087951][T11453] RSP: 002b:00007fc5a54bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 295.087974][T11453] RAX: ffffffffffffffda RBX: 00007fc5a47e5fa0 RCX: 00007fc5a458f749 [ 295.087990][T11453] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 295.088003][T11453] RBP: 00007fc5a54bb090 R08: 0000000000000000 R09: 0000000000000000 [ 295.088017][T11453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 295.088030][T11453] R13: 00007fc5a47e6038 R14: 00007fc5a47e5fa0 R15: 00007ffc44872d88 [ 295.088069][T11453] [ 295.721392][T11459] batadv1: entered promiscuous mode [ 295.820754][T11467] tipc: Started in network mode [ 295.830750][T11467] tipc: Node identity 4, cluster identity 4711 [ 295.837345][T11467] tipc: Node number set to 4 [ 296.249976][T11459] wg1 speed is unknown, defaulting to 1000 [ 296.337500][T11459] lo speed is unknown, defaulting to 1000 [ 296.452226][T11459] lo speed is unknown, defaulting to 1000 [ 296.754951][ T5839] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 296.770153][ T5839] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 296.779873][ T5839] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 296.794765][ T5839] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 296.808556][ T5839] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 297.016225][T11484] wg1 speed is unknown, defaulting to 1000 [ 297.045255][T11484] lo speed is unknown, defaulting to 1000 [ 297.089676][T11484] lo speed is unknown, defaulting to 1000 [ 297.116426][ T5835] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 297.131054][ T5835] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 297.142199][ T5835] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 297.155572][ T5835] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 297.166514][ T5835] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 297.317383][T11492] wg1 speed is unknown, defaulting to 1000 [ 297.364703][T11492] lo speed is unknown, defaulting to 1000 [ 297.392772][T11492] lo speed is unknown, defaulting to 1000 [ 297.844330][T11497] netlink: 'syz.8.1172': attribute type 1 has an invalid length. [ 298.193055][T11504] FAULT_INJECTION: forcing a failure. [ 298.193055][T11504] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 298.209144][T11504] CPU: 0 UID: 0 PID: 11504 Comm: syz.4.1174 Not tainted syzkaller #0 PREEMPT(full) [ 298.209174][T11504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 298.209187][T11504] Call Trace: [ 298.209195][T11504] [ 298.209205][T11504] dump_stack_lvl+0x189/0x250 [ 298.209239][T11504] ? __pfx____ratelimit+0x10/0x10 [ 298.209262][T11504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.209292][T11504] ? __pfx__printk+0x10/0x10 [ 298.209317][T11504] ? fs_reclaim_acquire+0x7d/0x100 [ 298.209348][T11504] should_fail_ex+0x414/0x560 [ 298.209387][T11504] prepare_alloc_pages+0x213/0x610 [ 298.209417][T11504] __alloc_frozen_pages_noprof+0x123/0x370 [ 298.209444][T11504] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 298.209478][T11504] ? policy_nodemask+0x27c/0x720 [ 298.209524][T11504] alloc_pages_mpol+0x232/0x4a0 [ 298.209553][T11504] vma_alloc_folio_noprof+0xe4/0x200 [ 298.209579][T11504] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 298.209617][T11504] folio_prealloc+0x30/0x180 [ 298.209653][T11504] do_wp_page+0x1231/0x5800 [ 298.209710][T11504] ? __pfx_do_wp_page+0x10/0x10 [ 298.209736][T11504] ? do_raw_spin_lock+0x121/0x290 [ 298.209771][T11504] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 298.209815][T11504] __handle_mm_fault+0x1033/0x5400 [ 298.209876][T11504] ? __pfx___handle_mm_fault+0x10/0x10 [ 298.209923][T11504] ? follow_page_pte+0xd03/0x13e0 [ 298.209964][T11504] handle_mm_fault+0x40a/0x8e0 [ 298.210008][T11504] __get_user_pages+0x165c/0x2a00 [ 298.210082][T11504] __gup_longterm_locked+0xde4/0x1660 [ 298.210127][T11504] ? sanity_check_pinned_pages+0x1241/0x1300 [ 298.210158][T11504] ? gup_fast_fallback+0x1b86/0x22d0 [ 298.210192][T11504] gup_fast_fallback+0x1d65/0x22d0 [ 298.210221][T11504] ? __kernel_text_address+0xd/0x40 [ 298.210255][T11504] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 298.210323][T11504] ? __pfx_gup_fast_fallback+0x10/0x10 [ 298.210349][T11504] ? kasan_save_track+0x4f/0x80 [ 298.210381][T11504] ? __kasan_kmalloc+0x93/0xb0 [ 298.210412][T11504] ? __kmalloc_noprof+0x411/0x7f0 [ 298.210442][T11504] ? sock_kmalloc+0xd6/0x160 [ 298.210469][T11504] ? skcipher_recvmsg+0x3d1/0x11d0 [ 298.210498][T11504] ? sock_recvmsg+0x22c/0x270 [ 298.210529][T11504] ? ____sys_recvmsg+0x1c9/0x460 [ 298.210554][T11504] ? __x64_sys_recvmsg+0x198/0x260 [ 298.210580][T11504] ? do_syscall_64+0xfa/0xfa0 [ 298.210602][T11504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.210629][T11504] ? pin_user_pages_fast+0x4d/0xb0 [ 298.210662][T11504] iov_iter_extract_pages+0x35f/0x5e0 [ 298.210702][T11504] extract_iter_to_sg+0xe46/0x24e0 [ 298.210744][T11504] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 298.210773][T11504] ? rcu_is_watching+0x15/0xb0 [ 298.210800][T11504] ? trace_kmalloc+0x1f/0xd0 [ 298.210830][T11504] ? sock_kmalloc+0xd6/0x160 [ 298.210865][T11504] ? __asan_memset+0x22/0x50 [ 298.210898][T11504] af_alg_get_rsgl+0x436/0x810 [ 298.210948][T11504] skcipher_recvmsg+0x3d1/0x11d0 [ 298.210984][T11504] ? aa_sk_perm+0x81e/0x950 [ 298.211034][T11504] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 298.211086][T11504] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 298.211107][T11504] ? security_socket_recvmsg+0x7e/0x2e0 [ 298.211130][T11504] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 298.211161][T11504] sock_recvmsg+0x22c/0x270 [ 298.211199][T11504] ____sys_recvmsg+0x1c9/0x460 [ 298.211237][T11504] ? __pfx_____sys_recvmsg+0x10/0x10 [ 298.211285][T11504] ? import_iovec+0x74/0xa0 [ 298.211318][T11504] ___sys_recvmsg+0x1b5/0x510 [ 298.211353][T11504] ? __pfx____sys_recvmsg+0x10/0x10 [ 298.211411][T11504] ? __fget_files+0x3a0/0x420 [ 298.211446][T11504] __x64_sys_recvmsg+0x198/0x260 [ 298.211478][T11504] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 298.211517][T11504] ? __pfx_ksys_write+0x10/0x10 [ 298.211567][T11504] ? do_syscall_64+0xbe/0xfa0 [ 298.211596][T11504] do_syscall_64+0xfa/0xfa0 [ 298.211631][T11504] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.211654][T11504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.211674][T11504] ? clear_bhb_loop+0x60/0xb0 [ 298.211700][T11504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.211721][T11504] RIP: 0033:0x7f660b58f749 [ 298.211741][T11504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.211767][T11504] RSP: 002b:00007f660c415038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 298.211791][T11504] RAX: ffffffffffffffda RBX: 00007f660b7e5fa0 RCX: 00007f660b58f749 [ 298.211806][T11504] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 298.211819][T11504] RBP: 00007f660c415090 R08: 0000000000000000 R09: 0000000000000000 [ 298.211832][T11504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 298.211844][T11504] R13: 00007f660b7e6038 R14: 00007f660b7e5fa0 R15: 00007ffc8a46c6b8 [ 298.211882][T11504] [ 298.884625][T11484] chnl_net:caif_netlink_parms(): no params data found [ 298.928419][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 298.935612][ T52] Bluetooth: hci16: command tx timeout [ 298.996270][T11507] RDS: rds_bind could not find a transport for ::4:0:0:0, load rds_tcp or rds_rdma? [ 299.243569][ T5839] Bluetooth: hci17: command tx timeout [ 299.365467][T11484] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.373043][T11484] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.382913][T11484] bridge_slave_0: entered allmulticast mode [ 299.392344][T11484] bridge_slave_0: entered promiscuous mode [ 299.422581][T11492] chnl_net:caif_netlink_parms(): no params data found [ 299.440574][T11484] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.448055][T11484] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.456833][T11484] bridge_slave_1: entered allmulticast mode [ 299.466668][T11484] bridge_slave_1: entered promiscuous mode [ 299.582381][T11484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.618971][T11484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.830518][T11484] team0: Port device team_slave_0 added [ 299.898288][T11484] team0: Port device team_slave_1 added [ 300.111675][T11492] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.129770][T11492] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.154077][T11492] bridge_slave_0: entered allmulticast mode [ 300.167040][T11492] bridge_slave_0: entered promiscuous mode [ 300.204114][T11484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.211118][T11484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.252016][T11484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.264393][T11492] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.271550][T11492] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.290993][T11492] bridge_slave_1: entered allmulticast mode [ 300.302838][T11492] bridge_slave_1: entered promiscuous mode [ 300.329900][T11484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.340784][T11484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.369927][T11484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.523919][T11492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.537820][T11492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.629133][T11484] hsr_slave_0: entered promiscuous mode [ 300.639024][T11484] hsr_slave_1: entered promiscuous mode [ 300.647983][T11484] debugfs: 'hsr0' already exists in 'hsr' [ 300.654205][T11484] Cannot create hsr debugfs directory [ 300.761502][T11492] team0: Port device team_slave_0 added [ 300.821873][T11492] team0: Port device team_slave_1 added [ 300.882244][T11554] FAULT_INJECTION: forcing a failure. [ 300.882244][T11554] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 300.895903][T11554] CPU: 1 UID: 0 PID: 11554 Comm: syz.4.1184 Not tainted syzkaller #0 PREEMPT(full) [ 300.895932][T11554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 300.895946][T11554] Call Trace: [ 300.895955][T11554] [ 300.895965][T11554] dump_stack_lvl+0x189/0x250 [ 300.896001][T11554] ? __pfx____ratelimit+0x10/0x10 [ 300.896023][T11554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.896055][T11554] ? __pfx__printk+0x10/0x10 [ 300.896081][T11554] ? fs_reclaim_acquire+0x7d/0x100 [ 300.896112][T11554] should_fail_ex+0x414/0x560 [ 300.896154][T11554] prepare_alloc_pages+0x213/0x610 [ 300.896186][T11554] __alloc_frozen_pages_noprof+0x123/0x370 [ 300.896214][T11554] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 300.896249][T11554] ? policy_nodemask+0x27c/0x720 [ 300.896278][T11554] alloc_pages_mpol+0x232/0x4a0 [ 300.896307][T11554] vma_alloc_folio_noprof+0xe4/0x200 [ 300.896333][T11554] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 300.896364][T11554] folio_prealloc+0x30/0x180 [ 300.896398][T11554] do_wp_page+0x1231/0x5800 [ 300.896442][T11554] ? __pfx_do_wp_page+0x10/0x10 [ 300.896465][T11554] ? do_raw_spin_lock+0x121/0x290 [ 300.896495][T11554] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 300.896531][T11554] __handle_mm_fault+0x1033/0x5400 [ 300.896573][T11554] ? __pfx___handle_mm_fault+0x10/0x10 [ 300.896625][T11554] ? follow_page_pte+0xd03/0x13e0 [ 300.896660][T11554] handle_mm_fault+0x40a/0x8e0 [ 300.896696][T11554] __get_user_pages+0x165c/0x2a00 [ 300.896751][T11554] __gup_longterm_locked+0xde4/0x1660 [ 300.896789][T11554] ? sanity_check_pinned_pages+0x1241/0x1300 [ 300.896816][T11554] ? gup_fast_fallback+0x1b86/0x22d0 [ 300.896848][T11554] gup_fast_fallback+0x1d65/0x22d0 [ 300.896877][T11554] ? __kernel_text_address+0xd/0x40 [ 300.896912][T11554] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 300.896980][T11554] ? __pfx_gup_fast_fallback+0x10/0x10 [ 300.897007][T11554] ? kasan_save_track+0x4f/0x80 [ 300.897038][T11554] ? __kasan_kmalloc+0x93/0xb0 [ 300.897069][T11554] ? __kmalloc_noprof+0x411/0x7f0 [ 300.897098][T11554] ? sock_kmalloc+0xd6/0x160 [ 300.897125][T11554] ? skcipher_recvmsg+0x3d1/0x11d0 [ 300.897154][T11554] ? sock_recvmsg+0x22c/0x270 [ 300.897184][T11554] ? ____sys_recvmsg+0x1c9/0x460 [ 300.897210][T11554] ? __x64_sys_recvmsg+0x198/0x260 [ 300.897235][T11554] ? do_syscall_64+0xfa/0xfa0 [ 300.897256][T11554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.897285][T11554] ? pin_user_pages_fast+0x4d/0xb0 [ 300.897317][T11554] iov_iter_extract_pages+0x35f/0x5e0 [ 300.897357][T11554] extract_iter_to_sg+0xe46/0x24e0 [ 300.897400][T11554] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 300.897429][T11554] ? rcu_is_watching+0x15/0xb0 [ 300.897456][T11554] ? trace_kmalloc+0x1f/0xd0 [ 300.897486][T11554] ? sock_kmalloc+0xd6/0x160 [ 300.897520][T11554] ? __asan_memset+0x22/0x50 [ 300.897553][T11554] af_alg_get_rsgl+0x436/0x810 [ 300.897610][T11554] skcipher_recvmsg+0x3d1/0x11d0 [ 300.897646][T11554] ? aa_sk_perm+0x81e/0x950 [ 300.897695][T11554] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 300.897731][T11554] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 300.897752][T11554] ? security_socket_recvmsg+0x7e/0x2e0 [ 300.897773][T11554] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 300.897805][T11554] sock_recvmsg+0x22c/0x270 [ 300.897842][T11554] ____sys_recvmsg+0x1c9/0x460 [ 300.897882][T11554] ? __pfx_____sys_recvmsg+0x10/0x10 [ 300.897929][T11554] ? import_iovec+0x74/0xa0 [ 300.897962][T11554] ___sys_recvmsg+0x1b5/0x510 [ 300.897996][T11554] ? __pfx____sys_recvmsg+0x10/0x10 [ 300.898055][T11554] ? __fget_files+0x3a0/0x420 [ 300.898091][T11554] __x64_sys_recvmsg+0x198/0x260 [ 300.898123][T11554] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 300.898164][T11554] ? __pfx_ksys_write+0x10/0x10 [ 300.898201][T11554] ? do_syscall_64+0xbe/0xfa0 [ 300.898229][T11554] do_syscall_64+0xfa/0xfa0 [ 300.898250][T11554] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.898272][T11554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.898291][T11554] ? clear_bhb_loop+0x60/0xb0 [ 300.898318][T11554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.898338][T11554] RIP: 0033:0x7f660b58f749 [ 300.898358][T11554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.898375][T11554] RSP: 002b:00007f660c415038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 300.898397][T11554] RAX: ffffffffffffffda RBX: 00007f660b7e5fa0 RCX: 00007f660b58f749 [ 300.898413][T11554] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 300.898427][T11554] RBP: 00007f660c415090 R08: 0000000000000000 R09: 0000000000000000 [ 300.898440][T11554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 300.898454][T11554] R13: 00007f660b7e6038 R14: 00007f660b7e5fa0 R15: 00007ffc8a46c6b8 [ 300.898492][T11554] [ 301.384446][ T5839] Bluetooth: hci17: command tx timeout [ 301.390001][ T5839] Bluetooth: hci16: command tx timeout [ 301.444458][T11492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.451465][T11492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.527482][T11492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.543083][T11492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.551516][T11492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.579131][T11492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.655899][T11560] netlink: 'syz.8.1186': attribute type 1 has an invalid length. [ 301.746053][T11560] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 301.786632][T11484] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.809058][T11484] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.920936][T11484] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.955711][T11484] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.072155][T11492] hsr_slave_0: entered promiscuous mode [ 302.091162][T11578] siw: device registration error -23 [ 302.096195][T11492] hsr_slave_1: entered promiscuous mode [ 302.104144][T11492] debugfs: 'hsr0' already exists in 'hsr' [ 302.109920][T11492] Cannot create hsr debugfs directory [ 302.133734][T11484] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.145129][T11484] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.232152][T11484] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.243088][T11484] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.293934][T11581] ieee802154 phy1 wpan1: encryption failed: -22 [ 302.322485][T11581] __nla_validate_parse: 1 callbacks suppressed [ 302.322507][T11581] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1191'. [ 302.566290][T11484] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 302.642856][T11492] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.664806][T11484] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 302.678424][T11484] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 302.691447][T11484] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 302.762250][T11492] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.858225][T11492] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.977840][T11492] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.097383][T11484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.142703][T11484] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.198896][T11603] netlink: 'syz.4.1195': attribute type 1 has an invalid length. [ 303.200786][ T3459] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.214112][ T3459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.228246][ T3459] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.235513][ T3459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.302081][T11603] 8021q: adding VLAN 0 to HW filter on device bond1 [ 303.402799][T11492] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 303.410290][ T5839] Bluetooth: hci17: command tx timeout [ 303.416321][ T5835] Bluetooth: hci16: command tx timeout [ 303.444114][T11492] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 303.466042][T11492] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 303.510427][T11492] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 303.711605][T11620] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1197'. [ 303.738284][T11492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.749571][T11620] unsupported nlmsg_type 40 [ 303.773653][T11620] syz_tun: entered allmulticast mode [ 303.784177][T11492] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.808215][T11620] dvmrp8: entered allmulticast mode [ 303.828762][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.829790][T11620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1197'. [ 303.836056][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.864561][ T6762] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.871812][ T6762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.893006][T11619] syz_tun: left allmulticast mode [ 304.041919][T11484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.065336][T11627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1198'. [ 304.142198][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1198'. [ 304.207899][T11627] bond2: option broadcast_neighbor: invalid value (5) [ 304.218458][T11627] bond2 (unregistering): Released all slaves [ 304.262721][T11484] veth0_vlan: entered promiscuous mode [ 304.291221][T11484] veth1_vlan: entered promiscuous mode [ 304.341390][T11492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.390713][T11484] veth0_macvtap: entered promiscuous mode [ 304.419433][T11484] veth1_macvtap: entered promiscuous mode [ 304.470591][T11634] tipc: New replicast peer: 255.255.255.255 [ 304.479831][T11634] tipc: Enabled bearer , priority 10 [ 304.499835][T11484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.507549][T11634] netlink: 'syz.4.1199': attribute type 11 has an invalid length. [ 304.517778][T11634] netlink: 'syz.4.1199': attribute type 11 has an invalid length. [ 304.520978][T11484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.532496][T11634] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1199'. [ 304.648335][ T3459] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.680985][ T3459] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.712699][ T3459] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.753034][ T3459] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.968000][ T3459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.006620][ T3459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.126965][ T3459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.137564][ T3459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.251504][T11492] veth0_vlan: entered promiscuous mode [ 305.328930][T11492] veth1_vlan: entered promiscuous mode [ 305.399640][T11492] veth0_macvtap: entered promiscuous mode [ 305.408949][T11656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1202'. [ 305.448806][T11492] veth1_macvtap: entered promiscuous mode [ 305.484478][ T5835] Bluetooth: hci16: command tx timeout [ 305.490259][ T5839] Bluetooth: hci17: command tx timeout [ 305.530014][T11492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.550317][T11492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.601717][ T5978] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.624154][ T5978] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.645224][T10656] tipc: Node number set to 1883747099 [ 305.693758][ T1095] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.754577][ T1095] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.394515][T11681] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 306.817575][T11696] syzkaller0: entered promiscuous mode [ 306.823115][T11696] syzkaller0: entered allmulticast mode [ 307.265555][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1212'. [ 307.286553][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1212'. [ 307.300892][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1212'. [ 307.312657][T11709] erspan0: left allmulticast mode [ 307.344900][T11709] __nla_validate_parse: 1 callbacks suppressed [ 307.344922][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1212'. [ 307.386553][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1212'. [ 307.415621][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1212'. [ 307.438805][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1212'. [ 307.486727][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1212'. [ 307.517512][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1212'. [ 307.546607][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1212'. [ 307.573110][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1212'. [ 307.585768][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1212'. [ 307.599039][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1212'. [ 307.624547][T11709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.705987][ T5146] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 307.718592][ T5146] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 307.733940][ T5146] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 307.750094][ T5146] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 307.761570][ T5146] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 307.825070][T11717] sctp: [Deprecated]: syz.4.1212 (pid 11717) Use of int in max_burst socket option. [ 307.825070][T11717] Use struct sctp_assoc_value instead [ 307.902125][T11719] wg1 speed is unknown, defaulting to 1000 [ 307.930912][T11719] lo speed is unknown, defaulting to 1000 [ 307.955371][T11719] lo speed is unknown, defaulting to 1000 [ 308.119831][T11729] netlink: 'syz.4.1215': attribute type 2 has an invalid length. [ 308.587596][T11737] wg1 speed is unknown, defaulting to 1000 [ 308.620013][T11737] lo speed is unknown, defaulting to 1000 [ 308.627106][T11741] wg1 speed is unknown, defaulting to 1000 [ 308.636251][T11741] lo speed is unknown, defaulting to 1000 [ 308.645302][T11741] lo speed is unknown, defaulting to 1000 [ 308.653649][T11737] lo speed is unknown, defaulting to 1000 [ 308.714303][T11739] wg1 speed is unknown, defaulting to 1000 [ 308.722362][T11739] lo speed is unknown, defaulting to 1000 [ 308.730444][T11739] lo speed is unknown, defaulting to 1000 [ 308.750998][T11719] chnl_net:caif_netlink_parms(): no params data found [ 309.164344][ T5831] Bluetooth: hci5: command 0x0406 tx timeout [ 309.165730][ T5146] Bluetooth: hci6: command 0x0406 tx timeout [ 309.170459][ T5831] Bluetooth: hci7: command 0x0406 tx timeout [ 309.312112][T11719] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.321570][T11719] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.329611][T11719] bridge_slave_0: entered allmulticast mode [ 309.338870][T11719] bridge_slave_0: entered promiscuous mode [ 309.350129][T11719] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.358736][T11719] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.367441][T11719] bridge_slave_1: entered allmulticast mode [ 309.386635][T11719] bridge_slave_1: entered promiscuous mode [ 309.552227][T11719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.580493][T11719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.666431][T11719] team0: Port device team_slave_0 added [ 309.689941][T11719] team0: Port device team_slave_1 added [ 309.739875][T11719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.747636][T11719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.776393][T11719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.803965][ T52] Bluetooth: hci17: command tx timeout [ 309.805842][T11719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.817672][T11719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.845213][T11719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.955495][T11719] hsr_slave_0: entered promiscuous mode [ 309.962795][T11719] hsr_slave_1: entered promiscuous mode [ 309.971507][T11719] debugfs: 'hsr0' already exists in 'hsr' [ 309.979400][T11719] Cannot create hsr debugfs directory [ 310.266435][T11719] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.339951][T11719] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.405516][T11719] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.475506][T11719] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.619283][T11719] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 310.630955][T11719] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 310.642102][T11719] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 310.653654][T11719] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 310.750692][T11719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.790080][T11719] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.806520][ T6762] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.813975][ T6762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.835269][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.842429][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.067952][T11719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.471126][T11719] veth0_vlan: entered promiscuous mode [ 311.512112][T11719] veth1_vlan: entered promiscuous mode [ 311.541600][ T5839] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 311.552674][ T5839] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 311.566440][ T5839] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 311.578869][ T5839] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 311.590053][T11719] veth0_macvtap: entered promiscuous mode [ 311.598031][ T5839] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 311.608712][T11719] veth1_macvtap: entered promiscuous mode [ 311.642813][T11719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.662743][T11719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.689914][ T1095] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.700233][ T1095] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.715123][ T6771] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.738143][T11767] wg1 speed is unknown, defaulting to 1000 [ 311.738186][ T6771] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.753795][T11767] lo speed is unknown, defaulting to 1000 [ 311.765518][T11767] lo speed is unknown, defaulting to 1000 [ 311.886467][ T52] Bluetooth: hci17: command tx timeout [ 311.927139][ T6767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.936267][ T6767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.038651][ T6771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.056054][ T6771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.456055][T11767] chnl_net:caif_netlink_parms(): no params data found [ 312.567479][T11767] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.575333][T11767] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.582712][T11767] bridge_slave_0: entered allmulticast mode [ 312.592186][T11767] bridge_slave_0: entered promiscuous mode [ 312.602061][T11767] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.610429][T11767] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.620261][T11767] bridge_slave_1: entered allmulticast mode [ 312.629452][T11767] bridge_slave_1: entered promiscuous mode [ 312.675442][T11767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.691004][T11767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.737857][T11767] team0: Port device team_slave_0 added [ 312.749591][T11767] team0: Port device team_slave_1 added [ 312.796910][T11767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.804899][T11767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.832165][T11767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.847561][T11767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.862855][T11767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.891864][T11767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.966089][T11767] hsr_slave_0: entered promiscuous mode [ 312.973475][T11767] hsr_slave_1: entered promiscuous mode [ 312.980203][T11767] debugfs: 'hsr0' already exists in 'hsr' [ 312.986741][T11767] Cannot create hsr debugfs directory [ 313.225946][T11782] FAULT_INJECTION: forcing a failure. [ 313.225946][T11782] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 313.241751][T11782] CPU: 0 UID: 0 PID: 11782 Comm: syz.7.1221 Not tainted syzkaller #0 PREEMPT(full) [ 313.241783][T11782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 313.241809][T11782] Call Trace: [ 313.241819][T11782] [ 313.241828][T11782] dump_stack_lvl+0x189/0x250 [ 313.241864][T11782] ? __pfx____ratelimit+0x10/0x10 [ 313.241886][T11782] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.241916][T11782] ? __pfx__printk+0x10/0x10 [ 313.241940][T11782] ? fs_reclaim_acquire+0x7d/0x100 [ 313.241971][T11782] should_fail_ex+0x414/0x560 [ 313.242010][T11782] prepare_alloc_pages+0x213/0x610 [ 313.242041][T11782] __alloc_frozen_pages_noprof+0x123/0x370 [ 313.242068][T11782] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 313.242102][T11782] ? policy_nodemask+0x27c/0x720 [ 313.242129][T11782] alloc_pages_mpol+0x232/0x4a0 [ 313.242157][T11782] vma_alloc_folio_noprof+0xe4/0x200 [ 313.242183][T11782] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 313.242219][T11782] folio_prealloc+0x30/0x180 [ 313.242254][T11782] do_wp_page+0x1231/0x5800 [ 313.242308][T11782] ? __pfx_do_wp_page+0x10/0x10 [ 313.242333][T11782] ? do_raw_spin_lock+0x121/0x290 [ 313.242367][T11782] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 313.242410][T11782] __handle_mm_fault+0x1033/0x5400 [ 313.242477][T11782] ? __pfx___handle_mm_fault+0x10/0x10 [ 313.242525][T11782] ? follow_page_pte+0xd03/0x13e0 [ 313.242565][T11782] handle_mm_fault+0x40a/0x8e0 [ 313.242613][T11782] __get_user_pages+0x165c/0x2a00 [ 313.242680][T11782] __gup_longterm_locked+0xde4/0x1660 [ 313.242723][T11782] ? sanity_check_pinned_pages+0x1241/0x1300 [ 313.242753][T11782] ? gup_fast_fallback+0x1b86/0x22d0 [ 313.242785][T11782] gup_fast_fallback+0x1d65/0x22d0 [ 313.242813][T11782] ? __kernel_text_address+0xd/0x40 [ 313.242847][T11782] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 313.242912][T11782] ? __pfx_gup_fast_fallback+0x10/0x10 [ 313.242938][T11782] ? kasan_save_track+0x4f/0x80 [ 313.242967][T11782] ? __kasan_kmalloc+0x93/0xb0 [ 313.242998][T11782] ? __kmalloc_noprof+0x411/0x7f0 [ 313.243027][T11782] ? sock_kmalloc+0xd6/0x160 [ 313.243052][T11782] ? skcipher_recvmsg+0x3d1/0x11d0 [ 313.243081][T11782] ? sock_recvmsg+0x22c/0x270 [ 313.243111][T11782] ? ____sys_recvmsg+0x1c9/0x460 [ 313.243140][T11782] ? __x64_sys_recvmsg+0x198/0x260 [ 313.243162][T11782] ? do_syscall_64+0xfa/0xfa0 [ 313.243183][T11782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.243209][T11782] ? pin_user_pages_fast+0x4d/0xb0 [ 313.243239][T11782] iov_iter_extract_pages+0x35f/0x5e0 [ 313.243276][T11782] extract_iter_to_sg+0xe46/0x24e0 [ 313.243316][T11782] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 313.243337][T11782] ? sock_kmalloc+0xd6/0x160 [ 313.243367][T11782] ? rcu_is_watching+0x15/0xb0 [ 313.243393][T11782] ? trace_kmalloc+0x1f/0xd0 [ 313.243421][T11782] ? sock_kmalloc+0xd6/0x160 [ 313.243453][T11782] ? __asan_memset+0x22/0x50 [ 313.243483][T11782] af_alg_get_rsgl+0x436/0x810 [ 313.243529][T11782] skcipher_recvmsg+0x3d1/0x11d0 [ 313.243563][T11782] ? aa_sk_perm+0x81e/0x950 [ 313.243610][T11782] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 313.243642][T11782] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 313.243662][T11782] ? security_socket_recvmsg+0x7e/0x2e0 [ 313.243684][T11782] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 313.243714][T11782] sock_recvmsg+0x22c/0x270 [ 313.243749][T11782] ____sys_recvmsg+0x1c9/0x460 [ 313.243785][T11782] ? __pfx_____sys_recvmsg+0x10/0x10 [ 313.243830][T11782] ? import_iovec+0x74/0xa0 [ 313.243863][T11782] ___sys_recvmsg+0x1b5/0x510 [ 313.243897][T11782] ? __pfx____sys_recvmsg+0x10/0x10 [ 313.243954][T11782] ? __fget_files+0x3a0/0x420 [ 313.243987][T11782] __x64_sys_recvmsg+0x198/0x260 [ 313.244018][T11782] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 313.244058][T11782] ? __pfx_ksys_write+0x10/0x10 [ 313.244093][T11782] ? do_syscall_64+0xbe/0xfa0 [ 313.244121][T11782] do_syscall_64+0xfa/0xfa0 [ 313.244141][T11782] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.244164][T11782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.244185][T11782] ? clear_bhb_loop+0x60/0xb0 [ 313.244212][T11782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.244233][T11782] RIP: 0033:0x7f5509f8f749 [ 313.244253][T11782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.244272][T11782] RSP: 002b:00007f550ae0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 313.244295][T11782] RAX: ffffffffffffffda RBX: 00007f550a1e5fa0 RCX: 00007f5509f8f749 [ 313.244312][T11782] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 313.244326][T11782] RBP: 00007f550ae0c090 R08: 0000000000000000 R09: 0000000000000000 [ 313.244339][T11782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 313.244352][T11782] R13: 00007f550a1e6038 R14: 00007f550a1e5fa0 R15: 00007ffe3a0717f8 [ 313.244389][T11782] [ 313.643699][ T5839] Bluetooth: hci18: command tx timeout [ 313.729469][T11767] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.741923][T11767] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.875845][T11767] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.878696][T11784] __nla_validate_parse: 5 callbacks suppressed [ 313.878719][T11784] netlink: 204 bytes leftover after parsing attributes in process `syz.7.1222'. [ 313.888009][T11767] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.906242][T11785] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1222'. [ 313.923528][T11784] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1222'. [ 313.966061][ T5839] Bluetooth: hci17: command tx timeout [ 313.999240][T11767] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.010190][T11767] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.095331][T11767] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.105833][T11767] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.156658][T11789] wg1 speed is unknown, defaulting to 1000 [ 314.166191][T11789] lo speed is unknown, defaulting to 1000 [ 314.175614][T11789] lo speed is unknown, defaulting to 1000 [ 314.287659][ T5839] Bluetooth: hci8: command 0x041b tx timeout [ 314.341043][T11767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 314.366581][T11767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 314.380253][T11767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 314.400549][T11767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 314.601058][T11767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.639245][T11767] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.656765][ T3459] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.664045][ T3459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.707786][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.715137][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.204600][T11767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.279021][T11767] veth0_vlan: entered promiscuous mode [ 315.302740][T11767] veth1_vlan: entered promiscuous mode [ 315.351443][T11767] veth0_macvtap: entered promiscuous mode [ 315.371046][T11767] veth1_macvtap: entered promiscuous mode [ 315.449151][T11767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.480289][T11767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.514808][ T6762] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.525065][ T6762] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.535241][ T6762] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.544593][ T6762] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.655102][ T6762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.664154][ T6762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.747698][ T3459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.756700][ T3459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.804247][ T52] Bluetooth: hci18: command tx timeout [ 316.056099][ T52] Bluetooth: hci17: command tx timeout [ 316.104015][T11816] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.1226'. [ 316.167875][T11814] wg1 speed is unknown, defaulting to 1000 [ 316.177611][T11814] lo speed is unknown, defaulting to 1000 [ 316.190667][T11814] lo speed is unknown, defaulting to 1000 [ 316.250881][T11819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1227'. [ 316.527729][T11823] FAULT_INJECTION: forcing a failure. [ 316.527729][T11823] name failslab, interval 1, probability 0, space 0, times 1 [ 316.540979][T11823] CPU: 1 UID: 0 PID: 11823 Comm: syz.3.1228 Not tainted syzkaller #0 PREEMPT(full) [ 316.541009][T11823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 316.541023][T11823] Call Trace: [ 316.541033][T11823] [ 316.541042][T11823] dump_stack_lvl+0x189/0x250 [ 316.541078][T11823] ? __pfx____ratelimit+0x10/0x10 [ 316.541101][T11823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.541131][T11823] ? __pfx__printk+0x10/0x10 [ 316.541161][T11823] ? __pfx___might_resched+0x10/0x10 [ 316.541184][T11823] ? fs_reclaim_acquire+0x7d/0x100 [ 316.541211][T11823] should_fail_ex+0x414/0x560 [ 316.541251][T11823] should_failslab+0xa8/0x100 [ 316.541275][T11823] __kmalloc_noprof+0xcb/0x7f0 [ 316.541305][T11823] ? tomoyo_encode+0x28b/0x550 [ 316.541346][T11823] tomoyo_encode+0x28b/0x550 [ 316.541394][T11823] tomoyo_realpath_from_path+0x58d/0x5d0 [ 316.541431][T11823] ? tomoyo_domain+0xd9/0x130 [ 316.541458][T11823] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 316.541487][T11823] tomoyo_path_number_perm+0x1e8/0x5a0 [ 316.541519][T11823] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 316.541594][T11823] ? __fget_files+0x2a/0x420 [ 316.541622][T11823] ? __fget_files+0x3a0/0x420 [ 316.541642][T11823] ? __fget_files+0x2a/0x420 [ 316.541668][T11823] security_file_ioctl+0xcb/0x2d0 [ 316.541698][T11823] __se_sys_ioctl+0x47/0x170 [ 316.541730][T11823] do_syscall_64+0xfa/0xfa0 [ 316.541751][T11823] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.541775][T11823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.541796][T11823] ? clear_bhb_loop+0x60/0xb0 [ 316.541823][T11823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.541849][T11823] RIP: 0033:0x7f5fa898f749 [ 316.541868][T11823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.541887][T11823] RSP: 002b:00007f5fa9777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.541910][T11823] RAX: ffffffffffffffda RBX: 00007f5fa8be5fa0 RCX: 00007f5fa898f749 [ 316.541926][T11823] RDX: 0000200000000000 RSI: 00000000000089f1 RDI: 0000000000000003 [ 316.541940][T11823] RBP: 00007f5fa9777090 R08: 0000000000000000 R09: 0000000000000000 [ 316.541954][T11823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.541967][T11823] R13: 00007f5fa8be6038 R14: 00007f5fa8be5fa0 R15: 00007ffddcdf40d8 [ 316.542005][T11823] [ 316.542155][T11823] ERROR: Out of memory at tomoyo_realpath_from_path. [ 316.947926][T11830] syzkaller1: entered promiscuous mode [ 316.954010][T11830] syzkaller1: entered allmulticast mode [ 317.011713][T11826] netlink: 6 bytes leftover after parsing attributes in process `syz.7.1229'. [ 317.024977][T11826] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.655516][T11843] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1234'. [ 317.710761][ T5839] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 317.721665][ T5839] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 317.731747][ T5839] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 317.742696][ T5839] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 317.758813][ T5839] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 317.851017][T11844] wg1 speed is unknown, defaulting to 1000 [ 317.860091][T11844] lo speed is unknown, defaulting to 1000 [ 317.870420][T11844] lo speed is unknown, defaulting to 1000 [ 317.895429][ T5839] Bluetooth: hci18: command tx timeout [ 317.958701][T11849] netlink: 'syz.3.1236': attribute type 13 has an invalid length. [ 318.349984][T11844] chnl_net:caif_netlink_parms(): no params data found [ 318.485408][T11844] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.496119][T11844] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.506410][T11844] bridge_slave_0: entered allmulticast mode [ 318.519421][T11844] bridge_slave_0: entered promiscuous mode [ 318.532409][T11844] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.541229][T11844] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.550326][T11844] bridge_slave_1: entered allmulticast mode [ 318.560554][T11844] bridge_slave_1: entered promiscuous mode [ 318.625766][T11844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.642402][T11844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.711173][T11861] netlink: 'syz.7.1238': attribute type 2 has an invalid length. [ 318.720639][T11861] netlink: 'syz.7.1238': attribute type 11 has an invalid length. [ 318.729258][T11861] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1238'. [ 318.747813][T11844] team0: Port device team_slave_0 added [ 318.770286][T11844] team0: Port device team_slave_1 added [ 318.869567][T11844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.879209][T11844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.907382][T11844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.946943][T11844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.962444][T11844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.992281][T11844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.122687][T11844] hsr_slave_0: entered promiscuous mode [ 319.156075][T11844] hsr_slave_1: entered promiscuous mode [ 319.162981][T11844] debugfs: 'hsr0' already exists in 'hsr' [ 319.182189][T11844] Cannot create hsr debugfs directory [ 319.212762][T11876] netlink: 'syz.3.1243': attribute type 32 has an invalid length. [ 319.224582][T11876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1243'. [ 319.287189][T11876] veth3: entered promiscuous mode [ 319.804075][ T5839] Bluetooth: hci19: command tx timeout [ 319.974264][ T5839] Bluetooth: hci18: command tx timeout [ 320.089736][T11844] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 320.147441][T11844] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 320.200301][T11844] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 320.239958][T11844] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 320.328507][T11898] bond1: entered promiscuous mode [ 320.334284][T11898] 8021q: adding VLAN 0 to HW filter on device bond1 [ 320.548374][T11912] batadv1: entered promiscuous mode [ 320.556168][T11912] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 320.578672][T11916] lo: Caught tx_queue_len zero misconfig [ 320.798174][T11844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.872802][T11918] wg1 speed is unknown, defaulting to 1000 [ 320.896187][T11918] lo speed is unknown, defaulting to 1000 [ 320.899928][T11844] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.911584][T11918] lo speed is unknown, defaulting to 1000 [ 320.935891][ T5978] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.943080][ T5978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.967343][ T3459] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.974619][ T3459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.594651][T11844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.848067][T11938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1250'. [ 321.884438][ T5839] Bluetooth: hci19: command tx timeout [ 322.027645][T11844] veth0_vlan: entered promiscuous mode [ 322.043079][T11844] veth1_vlan: entered promiscuous mode [ 322.084047][T11946] siw: device registration error -23 [ 322.108658][T11844] veth0_macvtap: entered promiscuous mode [ 322.137877][T11844] veth1_macvtap: entered promiscuous mode [ 322.171255][T11844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.195062][T11844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.216216][T11948] netlink: 'syz.3.1253': attribute type 21 has an invalid length. [ 322.229539][ T6767] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.241089][ T6767] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.261934][ T6767] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.272233][ T6767] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.419586][ T6767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.443266][ T6767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.452427][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.520402][ T6771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.538460][ T6771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.561999][T11954] smc: net device bond0 applied user defined pnetid SYZ0 [ 322.588298][T11954] smc: net device bond0 erased user defined pnetid SYZ0 [ 322.676514][T11956] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1231'. [ 322.877823][ T8746] udevd[8746]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 322.880601][T11956] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1231'. [ 322.945409][T11969] Ï: option downdelay: invalid value (18446744073709547007) [ 322.953092][T11969] Ï: option downdelay: allowed values 0 - 2147483647 [ 322.972132][T11969] Ï (unregistering): Released all slaves [ 323.262812][T11974] bond1: option arp_interval: invalid value (18446744073709551615) [ 323.266055][ T8746] udevd[8746]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 323.271527][T11974] bond1: option arp_interval: allowed values 0 - 2147483647 [ 323.296530][T11974] bond1 (unregistering): Released all slaves [ 323.964344][ T5839] Bluetooth: hci19: command tx timeout [ 324.140162][T11994] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1265'. [ 324.197498][ T52] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 324.219596][ T52] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 324.229482][ T52] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 324.240988][ T52] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 324.250455][ T52] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 324.320797][ T52] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 324.330739][ T52] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 324.340153][ T52] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 324.350250][ T52] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 324.359928][ T52] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 324.414785][T11997] wg1 speed is unknown, defaulting to 1000 [ 324.422474][T11997] lo speed is unknown, defaulting to 1000 [ 324.450482][T11997] lo speed is unknown, defaulting to 1000 [ 324.458320][T11999] wg1 speed is unknown, defaulting to 1000 [ 324.476949][T11999] lo speed is unknown, defaulting to 1000 [ 324.495356][T11999] lo speed is unknown, defaulting to 1000 [ 325.457270][T11997] chnl_net:caif_netlink_parms(): no params data found [ 325.658053][T12033] netlink: 'syz.3.1272': attribute type 8 has an invalid length. [ 325.734196][T12033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1272'. [ 325.769977][T11997] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.778882][T11997] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.789060][T11997] bridge_slave_0: entered allmulticast mode [ 325.798684][T11997] bridge_slave_0: entered promiscuous mode [ 325.816173][T12033] tunl0: Caught tx_queue_len zero misconfig [ 325.833543][T11999] chnl_net:caif_netlink_parms(): no params data found [ 325.848148][T11997] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.857201][T11997] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.866456][T11997] bridge_slave_1: entered allmulticast mode [ 325.875738][T11997] bridge_slave_1: entered promiscuous mode [ 325.971593][T11997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.015736][T11997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.045337][ T52] Bluetooth: hci19: command tx timeout [ 326.291670][ T52] Bluetooth: hci20: command tx timeout [ 326.308028][T11999] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.316825][T11999] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.327381][T11999] bridge_slave_0: entered allmulticast mode [ 326.339546][T11999] bridge_slave_0: entered promiscuous mode [ 326.350279][T11999] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.358412][T11999] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.369449][T11999] bridge_slave_1: entered allmulticast mode [ 326.382910][T11999] bridge_slave_1: entered promiscuous mode [ 326.402220][T11997] team0: Port device team_slave_0 added [ 326.432431][T11997] team0: Port device team_slave_1 added [ 326.437576][T12057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1276'. [ 326.447920][ T52] Bluetooth: hci21: command tx timeout [ 326.533899][T11999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.581700][T11997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.598724][T11997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.629863][T11997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.648306][T11999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.660846][T11997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.668235][T11997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.696749][T11997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.774565][T11999] team0: Port device team_slave_0 added [ 326.800301][T12060] netlink: 'syz.6.1277': attribute type 1 has an invalid length. [ 326.801034][T11999] team0: Port device team_slave_1 added [ 326.810691][T12060] netlink: 248 bytes leftover after parsing attributes in process `syz.6.1277'. [ 326.869750][T11997] hsr_slave_0: entered promiscuous mode [ 326.879041][T11997] hsr_slave_1: entered promiscuous mode [ 326.889088][T11997] debugfs: 'hsr0' already exists in 'hsr' [ 326.895185][T11997] Cannot create hsr debugfs directory [ 326.991798][T11999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.000919][T11999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.029502][T11999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.070534][T11999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.079103][T11999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.107580][T11999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.221442][T11999] hsr_slave_0: entered promiscuous mode [ 327.229491][T11999] hsr_slave_1: entered promiscuous mode [ 327.236790][T11999] debugfs: 'hsr0' already exists in 'hsr' [ 327.242563][T11999] Cannot create hsr debugfs directory [ 327.380785][T12065] netlink: 'syz.3.1279': attribute type 21 has an invalid length. [ 327.482845][T11997] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.627694][T11997] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.717847][T11997] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.806506][T11997] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.077439][T12074] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 328.116049][T12071] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1280'. [ 328.225465][T11999] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.248126][T11997] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 328.262999][T11997] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 328.285952][T11997] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 328.322011][T11999] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.342590][T11997] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 328.364206][ T52] Bluetooth: hci20: command tx timeout [ 328.431012][T11999] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.524192][ T52] Bluetooth: hci21: command tx timeout [ 328.578123][T11999] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.726968][T11997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.760297][T11997] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.859742][ T31] INFO: task kworker/u8:5:154 blocked for more than 143 seconds. [ 328.885019][ T31] Not tainted syzkaller #0 [ 328.891853][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 328.901789][ T3459] bridge0: port 1(bridge_slave_0) entered blocking state SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 328.902253][ T31] task:kworker/u8:5 state:D stack:24016 pid:154 tgid:154 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 328.909115][ T3459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.940455][ T3459] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.947757][ T3459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.954554][ T31] Workqueue: netns cleanup_net [ 329.005322][ T31] Call Trace: [ 329.008674][ T31] [ 329.011651][ T31] __schedule+0x1798/0x4cc0 [ 329.039276][ T31] ? __lock_acquire+0xab9/0xd20 [ 329.053440][ T31] ? __lock_acquire+0xab9/0xd20 [ 329.059558][ T31] ? __pfx___schedule+0x10/0x10 [ 329.074642][ T31] ? schedule+0x91/0x360 [ 329.078970][ T31] schedule+0x165/0x360 [ 329.087870][ T31] schedule_preempt_disabled+0x13/0x30 [ 329.094023][ T31] __mutex_lock+0x7e6/0x1350 [ 329.098674][ T31] ? __mutex_lock+0x5bb/0x1350 [ 329.104734][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 329.110714][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 329.116719][ T31] ? kobject_put+0x270/0x480 [ 329.126170][ T31] ? kfree+0x19a/0x6d0 [ 329.130324][ T31] rdma_dev_change_netns+0x39/0x300 [ 329.135887][ T31] rdma_dev_exit_net+0x203/0x340 [ 329.141970][ T31] ? __pfx___might_resched+0x10/0x10 [ 329.149856][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 329.155567][ T31] ? net_generic+0x1e/0x240 [ 329.162366][ T31] ? mutex_is_locked+0x17/0x50 [ 329.168262][ T31] ? rtnl_is_locked+0x15/0x20 [ 329.173026][ T31] ops_undo_list+0x49a/0x990 [ 329.179390][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 329.188699][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 329.194468][ T31] cleanup_net+0x4d8/0x820 [ 329.199008][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 329.204370][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 329.209629][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 329.215470][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 329.221236][ T31] process_scheduled_works+0xae1/0x17b0 [ 329.227284][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 329.233446][ T31] worker_thread+0x8a0/0xda0 [ 329.238085][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 329.246388][ T31] ? __kthread_parkme+0x7b/0x200 [ 329.251394][ T31] kthread+0x711/0x8a0 [ 329.255603][ T31] ? __pfx_worker_thread+0x10/0x10 [ 329.260995][ T31] ? __pfx_kthread+0x10/0x10 [ 329.266439][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 329.271698][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.277302][ T31] ? __pfx_kthread+0x10/0x10 [ 329.281953][ T31] ret_from_fork+0x4bc/0x870 [ 329.286814][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 329.292089][ T31] ? __switch_to_asm+0x39/0x70 [ 329.298707][ T31] ? __switch_to_asm+0x33/0x70 [ 329.303997][ T31] ? __pfx_kthread+0x10/0x10 [ 329.308647][ T31] ret_from_fork_asm+0x1a/0x30 [ 329.314481][ T31] [ 329.317676][ T31] INFO: task syz.3.585:8387 blocked for more than 143 seconds. [ 329.326688][ T31] Not tainted syzkaller #0 [ 329.331668][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 329.343075][ T31] task:syz.3.585 state:D stack:25320 pid:8387 tgid:8384 ppid:5822 task_flags:0x400140 flags:0x00080003 [ 329.356493][ T31] Call Trace: [ 329.359809][ T31] [ 329.362946][ T31] __schedule+0x1798/0x4cc0 [ 329.369127][ T31] ? __lock_acquire+0xab9/0xd20 [ 329.374768][ T31] ? __lock_acquire+0xab9/0xd20 [ 329.379659][ T31] ? __pfx___schedule+0x10/0x10 [ 329.385011][ T31] ? schedule+0x91/0x360 [ 329.389300][ T31] schedule+0x165/0x360 [ 329.393777][ T31] schedule_preempt_disabled+0x13/0x30 [ 329.399271][ T31] __mutex_lock+0x7e6/0x1350 [ 329.408768][ T31] ? __mutex_lock+0x5bb/0x1350 [ 329.414104][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 329.419777][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 329.425104][ T31] ? kobject_put+0x270/0x480 [ 329.429736][ T31] ? kfree+0x19a/0x6d0 [ 329.434698][ T31] rdma_dev_change_netns+0x39/0x300 [ 329.439937][ T31] rdma_dev_exit_net+0x203/0x340 [ 329.445320][ T31] ? __pfx___might_resched+0x10/0x10 [ 329.450654][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 329.456459][ T31] ? net_generic+0x1e/0x240 [ 329.461002][ T31] ? mutex_is_locked+0x17/0x50 [ 329.466864][ T31] ? rtnl_is_locked+0x15/0x20 [ 329.472551][ T31] ops_undo_list+0x49a/0x990 [ 329.477648][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 329.482800][ T31] ? ops_init+0x469/0x5c0 [ 329.501467][ T31] setup_net+0x2d6/0x320 [ 329.505909][ T31] ? __pfx_setup_net+0x10/0x10 [ 329.510715][ T31] ? copy_net_ns+0x337/0x4e0 [ 329.516275][ T31] ? down_read_killable+0x1d1/0x350 [ 329.521545][ T31] ? preinit_net+0x47d/0x780 [ 329.527338][ T31] copy_net_ns+0x34e/0x4e0 [ 329.532150][ T31] create_new_namespaces+0x3f3/0x720 [ 329.538184][ T31] ? security_capable+0x7e/0x2e0 [ 329.543580][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 329.549580][ T31] ksys_unshare+0x4c8/0x8c0 [ 329.555012][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 329.560117][ T31] __x64_sys_unshare+0x38/0x50 [ 329.565555][ T31] do_syscall_64+0xfa/0xfa0 [ 329.570690][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.579249][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.585550][ T31] ? clear_bhb_loop+0x60/0xb0 [ 329.590270][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.596818][ T31] RIP: 0033:0x7fae6078f749 [ 329.601278][ T31] RSP: 002b:00007fae5e9d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 329.610289][ T31] RAX: ffffffffffffffda RBX: 00007fae609e6090 RCX: 00007fae6078f749 [ 329.619217][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 329.627743][ T31] RBP: 00007fae60813f91 R08: 0000000000000000 R09: 0000000000000000 [ 329.637580][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.647185][ T31] R13: 00007fae609e6128 R14: 00007fae609e6090 R15: 00007fff55e1b398 [ 329.656063][ T31] [ 329.659149][ T31] INFO: task syz.0.588:8400 blocked for more than 144 seconds. [ 329.670221][ T31] Not tainted syzkaller #0 [ 329.676116][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 329.687804][ T31] task:syz.0.588 state:D stack:23944 pid:8400 tgid:8395 ppid:5823 task_flags:0x400140 flags:0x00080002 [ 329.700570][ T31] Call Trace: [ 329.704265][ T31] [ 329.707245][ T31] __schedule+0x1798/0x4cc0 [ 329.712050][ T31] ? validate_chain+0x897/0x2140 [ 329.717677][ T31] ? __lock_acquire+0xab9/0xd20 [ 329.722575][ T31] ? __pfx___schedule+0x10/0x10 [ 329.728042][ T31] ? schedule+0x91/0x360 [ 329.732529][ T31] schedule+0x165/0x360 [ 329.737727][ T31] schedule_timeout+0x9a/0x270 [ 329.742642][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 329.749621][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 329.755954][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.761213][ T31] ? wait_for_completion+0x267/0x5d0 [ 329.767915][ T31] wait_for_completion+0x2bf/0x5d0 [ 329.773105][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 329.780517][ T31] ? up_write+0x1c4/0x420 [ 329.786178][ T31] ? remove_client_context+0xc0/0x1e0 [ 329.791603][ T31] disable_device+0x1c6/0x320 [ 329.799664][ T31] ? __pfx_disable_device+0x10/0x10 [ 329.807401][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 329.812859][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 329.819553][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 329.825919][ T31] nldev_dellink+0x2d1/0x320 [ 329.830564][ T31] ? __lock_acquire+0xab9/0xd20 [ 329.836754][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 329.842046][ T31] ? apparmor_capable+0x137/0x1b0 [ 329.848034][ T31] ? bpf_lsm_capable+0x9/0x20 [ 329.853091][ T31] ? security_capable+0x7e/0x2e0 [ 329.858955][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 329.869445][ T31] rdma_nl_rcv+0x6ae/0x980 [ 329.875540][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 329.882002][ T31] ? __lock_acquire+0xab9/0xd20 [ 329.888717][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 329.894660][ T31] netlink_unicast+0x82f/0x9e0 [ 329.899483][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 329.905769][ T31] ? plist_check_list+0x30f/0x330 [ 329.910851][ T31] ? netlink_sendmsg+0x642/0xb30 [ 329.917895][ T31] ? skb_put+0x11b/0x210 [ 329.922195][ T31] netlink_sendmsg+0x805/0xb30 [ 329.928235][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.934087][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 329.939419][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 329.945461][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.950799][ T31] __sock_sendmsg+0x21c/0x270 [ 329.956703][ T31] ____sys_sendmsg+0x505/0x830 [ 329.961532][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.968447][ T31] ? import_iovec+0x74/0xa0 [ 329.973020][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 329.982828][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.989893][ T31] ? __fget_files+0x2a/0x420 [ 329.995808][ T31] ? __fget_files+0x3a0/0x420 [ 330.000554][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 330.006790][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 330.013848][ T31] ? do_syscall_64+0xbe/0xfa0 [ 330.018642][ T31] do_syscall_64+0xfa/0xfa0 [ 330.023348][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.028587][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.035473][ T31] ? clear_bhb_loop+0x60/0xb0 [ 330.040246][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.047331][ T31] RIP: 0033:0x7fe580f8f749 [ 330.051791][ T31] RSP: 002b:00007fe581e96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.060787][ T31] RAX: ffffffffffffffda RBX: 00007fe5811e6090 RCX: 00007fe580f8f749 [ 330.069648][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 330.077966][ T31] RBP: 00007fe581013f91 R08: 0000000000000000 R09: 0000000000000000 [ 330.088102][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.096932][ T31] R13: 00007fe5811e6128 R14: 00007fe5811e6090 R15: 00007ffd56194c48 [ 330.105303][ T31] [ 330.108380][ T31] INFO: task syz.1.602:8460 blocked for more than 144 seconds. [ 330.117186][ T31] Not tainted syzkaller #0 [ 330.122475][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 330.154750][ T31] task:syz.1.602 state:D stack:26088 pid:8460 tgid:8459 ppid:5830 task_flags:0x400140 flags:0x00080002 [ 330.167234][ T31] Call Trace: [ 330.171161][ T31] [ 330.175003][ T31] __schedule+0x1798/0x4cc0 [ 330.179575][ T31] ? __lock_acquire+0xab9/0xd20 [ 330.186498][ T31] ? __lock_acquire+0xab9/0xd20 [ 330.191412][ T31] ? __pfx___schedule+0x10/0x10 [ 330.208606][ T31] ? schedule+0x91/0x360 [ 330.212917][ T31] schedule+0x165/0x360 [ 330.217808][ T31] schedule_preempt_disabled+0x13/0x30 [ 330.233818][ T31] __mutex_lock+0x7e6/0x1350 [ 330.238493][ T31] ? __mutex_lock+0x5bb/0x1350 [ 330.244103][ T31] ? __ib_unregister_device+0x284/0x3f0 [ 330.250129][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 330.257282][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 330.264002][ T31] ? __up_read+0x280/0x680 [ 330.268781][ T31] ? __pfx___up_read+0x10/0x10 [ 330.274892][ T31] __ib_unregister_device+0x284/0x3f0 [ 330.280322][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 330.290807][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 330.297083][ T31] nldev_dellink+0x2d1/0x320 [ 330.301734][ T31] ? __lock_acquire+0xab9/0xd20 [ 330.316852][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 330.322142][ T31] ? apparmor_capable+0x137/0x1b0 [ 330.327762][ T31] ? bpf_lsm_capable+0x9/0x20 [ 330.332485][ T31] ? security_capable+0x7e/0x2e0 [ 330.339061][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 330.345194][ T31] rdma_nl_rcv+0x6ae/0x980 [ 330.349691][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 330.356184][ T31] ? __lock_acquire+0xab9/0xd20 [ 330.361128][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 330.371136][ T31] netlink_unicast+0x82f/0x9e0 [ 330.376729][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 330.382059][ T31] ? plist_check_list+0x30f/0x330 [ 330.388558][ T31] ? netlink_sendmsg+0x642/0xb30 [ 330.396388][ T31] ? skb_put+0x11b/0x210 [ 330.400692][ T31] netlink_sendmsg+0x805/0xb30 [ 330.407138][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.412488][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 330.421940][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 330.428007][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.434030][ T31] __sock_sendmsg+0x21c/0x270 [ 330.438772][ T31] ____sys_sendmsg+0x505/0x830 [ 330.444324][ T52] Bluetooth: hci20: command tx timeout [ 330.452061][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.458238][ T31] ? import_iovec+0x74/0xa0 [ 330.462806][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 330.468038][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.473879][ T31] ? __fget_files+0x2a/0x420 [ 330.478512][ T31] ? __fget_files+0x3a0/0x420 [ 330.483619][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 330.488650][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 330.494887][ T31] ? do_syscall_64+0xbe/0xfa0 [ 330.499861][ T31] do_syscall_64+0xfa/0xfa0 [ 330.504808][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.510045][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.516809][ T31] ? clear_bhb_loop+0x60/0xb0 [ 330.521809][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.529080][ T31] RIP: 0033:0x7f66c138f749 [ 330.533701][ T31] RSP: 002b:00007f66c2284038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.542341][ T31] RAX: ffffffffffffffda RBX: 00007f66c15e5fa0 RCX: 00007f66c138f749 [ 330.550532][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 330.559128][ T31] RBP: 00007f66c1413f91 R08: 0000000000000000 R09: 0000000000000000 [ 330.567783][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.576170][ T31] R13: 00007f66c15e6038 R14: 00007f66c15e5fa0 R15: 00007fff4d80dba8 [ 330.584636][ T31] [ 330.589814][ T31] INFO: task syz.4.625:8546 blocked for more than 145 seconds. [ 330.601828][ T31] Not tainted syzkaller #0 [ 330.607860][ T52] Bluetooth: hci21: command tx timeout [ 330.609581][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 330.622686][ T31] task:syz.4.625 state:D stack:24384 pid:8546 tgid:8545 ppid:5834 task_flags:0x400140 flags:0x00080003 [ 330.640881][ T31] Call Trace: [ 330.646594][ T31] [ 330.649592][ T31] __schedule+0x1798/0x4cc0 [ 330.656933][ T31] ? __lock_acquire+0xab9/0xd20 [ 330.661848][ T31] ? __lock_acquire+0xab9/0xd20 [ 330.668528][ T31] ? __pfx___schedule+0x10/0x10 [ 330.675306][ T31] ? schedule+0x91/0x360 [ 330.679617][ T31] schedule+0x165/0x360 [ 330.690216][ T31] schedule_preempt_disabled+0x13/0x30 [ 330.700222][ T31] __mutex_lock+0x7e6/0x1350 [ 330.705745][ T31] ? __mutex_lock+0x5bb/0x1350 [ 330.710567][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 330.718518][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 330.724104][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 330.729799][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 330.737095][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 330.742359][ T31] ? _raw_spin_unlock+0x28/0x50 [ 330.751457][ T31] rdma_dev_change_netns+0x39/0x300 [ 330.759916][ T31] rdma_dev_exit_net+0x203/0x340 [ 330.773672][ T31] ? __pfx___might_resched+0x10/0x10 [ 330.779048][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 330.786356][ T31] ? net_generic+0x1e/0x240 [ 330.790934][ T31] ? mutex_is_locked+0x17/0x50 [ 330.796521][ T31] ? rtnl_is_locked+0x15/0x20 [ 330.805204][ T31] ops_undo_list+0x49a/0x990 [ 330.809888][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 330.815618][ T31] ? ops_init+0x469/0x5c0 [ 330.820174][ T31] setup_net+0x2d6/0x320 [ 330.825482][ T31] ? __pfx_setup_net+0x10/0x10 [ 330.830299][ T31] ? copy_net_ns+0x337/0x4e0 [ 330.835883][ T31] ? down_read_killable+0x1d1/0x350 [ 330.841133][ T31] ? preinit_net+0x47d/0x780 [ 330.846359][ T31] copy_net_ns+0x34e/0x4e0 [ 330.851139][ T31] create_new_namespaces+0x3f3/0x720 [ 330.860589][ T31] ? security_capable+0x7e/0x2e0 [ 330.870150][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 330.879179][ T31] ksys_unshare+0x4c8/0x8c0 [ 330.884529][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 330.889789][ T31] __x64_sys_unshare+0x38/0x50 [ 330.895343][ T31] do_syscall_64+0xfa/0xfa0 [ 330.899891][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.907570][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.917320][ T31] ? clear_bhb_loop+0x60/0xb0 [ 330.922062][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.928501][ T31] RIP: 0033:0x7f7ab438f749 [ 330.932960][ T31] RSP: 002b:00007f7ab5264038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 330.942829][ T31] RAX: ffffffffffffffda RBX: 00007f7ab45e5fa0 RCX: 00007f7ab438f749 [ 330.950932][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 330.959182][ T31] RBP: 00007f7ab4413f91 R08: 0000000000000000 R09: 0000000000000000 [ 330.968035][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.976336][ T31] R13: 00007f7ab45e6038 R14: 00007f7ab45e5fa0 R15: 00007fffb89680e8 [ 330.984600][ T31] [ 330.990970][ T31] INFO: task syz.4.625:8547 blocked for more than 145 seconds. [ 331.000226][ T31] Not tainted syzkaller #0 [ 331.007941][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.017532][ T31] task:syz.4.625 state:D stack:24480 pid:8547 tgid:8545 ppid:5834 task_flags:0x400140 flags:0x00080003 [ 331.029804][ T31] Call Trace: [ 331.033120][ T31] [ 331.037173][ T31] __schedule+0x1798/0x4cc0 [ 331.041741][ T31] ? __lock_acquire+0xab9/0xd20 [ 331.047174][ T31] ? __lock_acquire+0xab9/0xd20 [ 331.052391][ T31] ? __pfx___schedule+0x10/0x10 [ 331.057419][ T31] ? schedule+0x91/0x360 [ 331.061699][ T31] schedule+0x165/0x360 [ 331.066038][ T31] schedule_preempt_disabled+0x13/0x30 [ 331.071642][ T31] __mutex_lock+0x7e6/0x1350 [ 331.076998][ T31] ? __mutex_lock+0x5bb/0x1350 [ 331.081810][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 331.089039][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 331.094481][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 331.100162][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 331.107119][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 331.112395][ T31] ? _raw_spin_unlock+0x28/0x50 [ 331.117764][ T31] rdma_dev_change_netns+0x39/0x300 [ 331.123544][ T31] rdma_dev_exit_net+0x203/0x340 [ 331.128534][ T31] ? __pfx___might_resched+0x10/0x10 [ 331.134189][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 331.139925][ T31] ? net_generic+0x1e/0x240 [ 331.144542][ T31] ? mutex_is_locked+0x17/0x50 [ 331.149344][ T31] ? rtnl_is_locked+0x15/0x20 [ 331.154457][ T31] ops_undo_list+0x49a/0x990 [ 331.159217][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 331.164719][ T31] ? ops_init+0x469/0x5c0 [ 331.169091][ T31] setup_net+0x2d6/0x320 [ 331.173451][ T31] ? __pfx_setup_net+0x10/0x10 [ 331.178274][ T31] ? copy_net_ns+0x337/0x4e0 [ 331.182871][ T31] ? down_read_killable+0x1d1/0x350 [ 331.188622][ T31] ? preinit_net+0x47d/0x780 [ 331.193616][ T31] copy_net_ns+0x34e/0x4e0 [ 331.198076][ T31] create_new_namespaces+0x3f3/0x720 [ 331.203778][ T31] ? security_capable+0x7e/0x2e0 [ 331.209347][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 331.215258][ T31] ksys_unshare+0x4c8/0x8c0 [ 331.220038][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 331.225721][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 331.231051][ T31] __x64_sys_unshare+0x38/0x50 [ 331.236223][ T31] do_syscall_64+0xfa/0xfa0 [ 331.240987][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.246732][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.252996][ T31] ? clear_bhb_loop+0x60/0xb0 [ 331.258147][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.265248][ T31] RIP: 0033:0x7f7ab438f749 [ 331.269701][ T31] RSP: 002b:00007f7ab5243038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 331.278685][ T31] RAX: ffffffffffffffda RBX: 00007f7ab45e6090 RCX: 00007f7ab438f749 [ 331.287197][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 331.296131][ T31] RBP: 00007f7ab4413f91 R08: 0000000000000000 R09: 0000000000000000 [ 331.304480][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.316235][ T31] R13: 00007f7ab45e6128 R14: 00007f7ab45e6090 R15: 00007fffb89680e8 [ 331.325319][ T31] [ 331.328386][ T31] INFO: task syz.2.674:8737 blocked for more than 145 seconds. [ 331.337876][ T31] Not tainted syzkaller #0 [ 331.342846][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 331.352067][ T31] task:syz.2.674 state:D stack:24416 pid:8737 tgid:8733 ppid:5828 task_flags:0x400140 flags:0x00080003 [ 331.365564][ T31] Call Trace: [ 331.368882][ T31] [ 331.371818][ T31] __schedule+0x1798/0x4cc0 [ 331.376519][ T31] ? __lock_acquire+0xab9/0xd20 [ 331.381403][ T31] ? __lock_acquire+0xab9/0xd20 [ 331.386493][ T31] ? __pfx___schedule+0x10/0x10 [ 331.391394][ T31] ? schedule+0x91/0x360 [ 331.397027][ T31] schedule+0x165/0x360 [ 331.401238][ T31] schedule_preempt_disabled+0x13/0x30 [ 331.409568][ T31] __mutex_lock+0x7e6/0x1350 [ 331.415537][ T31] ? __mutex_lock+0x5bb/0x1350 [ 331.420954][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 331.429003][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 331.435171][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 331.440864][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 331.447461][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 331.452714][ T31] ? _raw_spin_unlock+0x28/0x50 [ 331.458171][ T31] rdma_dev_change_netns+0x39/0x300 [ 331.463571][ T31] rdma_dev_exit_net+0x203/0x340 [ 331.468547][ T31] ? __pfx___might_resched+0x10/0x10 [ 331.474149][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 331.479639][ T31] ? net_generic+0x1e/0x240 [ 331.485525][ T31] ? mutex_is_locked+0x17/0x50 [ 331.490431][ T31] ? rtnl_is_locked+0x15/0x20 [ 331.496010][ T31] ops_undo_list+0x49a/0x990 [ 331.500834][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 331.506347][ T31] ? ops_init+0x469/0x5c0 [ 331.510730][ T31] setup_net+0x2d6/0x320 [ 331.516906][ T31] ? __pfx_setup_net+0x10/0x10 [ 331.521719][ T31] ? copy_net_ns+0x337/0x4e0 [ 331.526784][ T31] ? down_read_killable+0x1d1/0x350 [ 331.532037][ T31] ? preinit_net+0x47d/0x780 [ 331.537877][ T31] copy_net_ns+0x34e/0x4e0 [ 331.542365][ T31] create_new_namespaces+0x3f3/0x720 [ 331.547936][ T31] ? security_capable+0x7e/0x2e0 [ 331.552994][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 331.559200][ T31] ksys_unshare+0x4c8/0x8c0 [ 331.565136][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 331.572441][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 331.578397][ T31] __x64_sys_unshare+0x38/0x50 [ 331.583530][ T31] do_syscall_64+0xfa/0xfa0 [ 331.588290][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.593877][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.599997][ T31] ? clear_bhb_loop+0x60/0xb0 [ 331.605793][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.611730][ T31] RIP: 0033:0x7f7bc678f749 [ 331.616937][ T31] RSP: 002b:00007f7bc763c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 331.626614][ T31] RAX: ffffffffffffffda RBX: 00007f7bc69e6180 RCX: 00007f7bc678f749 [ 331.635747][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 331.647677][ T31] RBP: 00007f7bc6813f91 R08: 0000000000000000 R09: 0000000000000000 [ 331.657651][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.666421][ T31] R13: 00007f7bc69e6218 R14: 00007f7bc69e6180 R15: 00007ffebb4f6f28 [ 331.674646][ T31] [ 331.678009][ T31] [ 331.678009][ T31] Showing all locks held in the system: [ 331.687966][ T31] 1 lock held by khungtaskd/31: [ 331.692867][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 331.704881][ T31] 4 locks held by kworker/u8:5/154: [ 331.710135][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 331.724701][ T31] #1: ffffc90002e77ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 331.758437][ T31] #2: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 331.768923][ T31] #3: ffff88807cfc0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 331.780438][ T31] 2 locks held by getty/5584: [ 331.785328][ T31] #0: ffff88814d7500a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 331.795779][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 331.806633][ T31] 3 locks held by kworker/u8:9/6762: [ 331.812100][ T31] #0: ffff88802f23e148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 331.824764][ T31] #1: ffffc90003c8fba0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 331.838027][ T31] #2: ffffffff8f2cc6c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 331.847994][ T31] 2 locks held by syz.3.585/8387: [ 331.853052][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 331.863796][ T31] #1: ffff88807cfc0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 331.875265][ T31] 2 locks held by syz.0.588/8400: [ 331.880326][ T31] #0: ffffffff99b6b958 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 331.892280][ T31] #1: ffff88807cfc0700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 331.904879][ T31] 2 locks held by syz.1.602/8460: [ 331.910176][ T31] #0: ffffffff99b6b958 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 331.920674][ T31] #1: ffff88807cfc0700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 331.933075][ T31] 2 locks held by syz.4.625/8546: [ 331.938250][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 331.948174][ T31] #1: ffff88807cfc0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 331.959998][ T31] 2 locks held by syz.4.625/8547: [ 331.965468][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 331.975354][ T31] #1: ffff88807cfc0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 331.987046][ T31] 2 locks held by syz.2.674/8737: [ 331.992107][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 332.003867][ T31] #1: ffff88807cfc0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 332.015617][ T31] 2 locks held by syz.8.735/9148: [ 332.020678][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 332.030940][ T31] #1: ffff88807cfc0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 332.051358][ T31] 2 locks held by syz.5.891/9925: [ 332.057521][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 332.068039][ T31] #1: ffff88807cfc0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 332.079456][ T31] 2 locks held by syz.7.1000/10530: [ 332.086236][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 332.096600][ T31] #1: ffff88807cfc0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 332.108015][ T31] 2 locks held by syz.3.1004/10543: [ 332.113350][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 332.122817][ T31] #1: ffff88807cfc0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 332.136720][ T31] 2 locks held by syz.6.1024/10667: [ 332.141956][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 332.151674][ T31] #1: ffff88807cfc0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 332.164348][ T31] 2 locks held by syz.1.1047/10847: [ 332.169573][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 332.179198][ T31] #1: ffff88807cfc0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 332.190609][ T31] 2 locks held by syz.2.1084/11120: [ 332.197236][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 332.207594][ T31] #1: ffff88807cfc0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 332.219916][ T31] 2 locks held by syz.9.1086/11122: [ 332.225280][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 332.236106][ T31] #1: ffff88807cfc0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 332.248110][ T31] 2 locks held by syz.5.1163/11459: [ 332.253438][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 332.262909][ T31] #1: ffff88807cfc0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 332.274880][ T31] 2 locks held by syz.8.1190/11578: [ 332.280384][ T31] #0: ffffffff99b6b958 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 332.291103][ T31] #1: ffff88807cfc0700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 332.302861][ T31] 2 locks held by syz.0.1217/11737: [ 332.308220][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 332.318082][ T31] #1: ffff88807cfc0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 332.329664][ T31] 2 locks held by syz.4.1218/11739: [ 332.336449][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 332.346708][ T31] #1: ffff88807cfc0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 332.358197][ T31] 2 locks held by syz.4.1218/11741: [ 332.363903][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 332.374183][ T31] #1: ffff88807cfc0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 332.385940][ T31] 2 locks held by syz.7.1247/11918: [ 332.391186][ T31] #0: ffffffff8f2bf730 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 332.400901][ T31] #1: ffff88807cfc0700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 332.415432][ T31] 2 locks held by syz-executor/11997: [ 332.420883][ T31] #0: ffffffff8f2cc6c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 332.430386][ T31] #1: ffffffff8df43178 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 332.443963][ T31] 5 locks held by syz-executor/11999: [ 332.449452][ T31] #0: ffff888035428dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 332.459622][ T31] #1: ffff8880354280b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 332.469920][ T31] #2: ffffffff8f436808 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 332.480363][ T31] #3: ffff888039ff3b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 332.490157][ T31] #4: ffffffff8df43178 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 332.501699][ T31] 3 locks held by syz.3.1282/12084: [ 332.507071][ T31] #0: ffff88809794cdc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 332.517172][ T31] #1: ffff88809794c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 332.528257][ T31] #2: ffffffff8f436808 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 332.538943][ T31] [ 332.542630][ T31] ============================================= [ 332.542630][ T31] [ 332.562576][ T31] NMI backtrace for cpu 1 [ 332.562598][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 332.562623][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 332.562637][ T31] Call Trace: [ 332.562645][ T31] [ 332.562654][ T31] dump_stack_lvl+0x189/0x250 [ 332.562693][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.562724][ T31] ? __pfx__printk+0x10/0x10 [ 332.562761][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 332.562796][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 332.562828][ T31] ? __pfx__printk+0x10/0x10 [ 332.562856][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 332.562895][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 332.562929][ T31] watchdog+0xf60/0xfa0 [ 332.562957][ T31] ? watchdog+0x1e2/0xfa0 [ 332.562987][ T31] kthread+0x711/0x8a0 [ 332.563021][ T31] ? __pfx_watchdog+0x10/0x10 [ 332.563041][ T31] ? __pfx_kthread+0x10/0x10 [ 332.563073][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.563107][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.563140][ T31] ? __pfx_kthread+0x10/0x10 [ 332.563171][ T31] ret_from_fork+0x4bc/0x870 [ 332.563197][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 332.563227][ T31] ? __switch_to_asm+0x39/0x70 [ 332.563245][ T31] ? __switch_to_asm+0x33/0x70 [ 332.563261][ T31] ? __pfx_kthread+0x10/0x10 [ 332.563289][ T31] ret_from_fork_asm+0x1a/0x30 [ 332.563324][ T31] [ 332.732053][ T31] Sending NMI from CPU 1 to CPUs 0: [ 332.741549][ C0] NMI backtrace for cpu 0 [ 332.741582][ C0] CPU: 0 UID: 0 PID: 6767 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 332.741604][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 332.741617][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 332.741641][ C0] RIP: 0010:unwind_get_return_address+0x19/0x90 [ 332.741667][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df 48 89 f8 <48> c1 e8 03 42 0f b6 04 30 84 c0 75 4c 83 3b 00 74 3a 48 83 c3 48 [ 332.741683][ C0] RSP: 0018:ffffc90003c6e968 EFLAGS: 00000202 [ 332.741698][ C0] RAX: ffffc90003c6e988 RBX: ffffc90003c6e988 RCX: 16d402bb3ae86b00 [ 332.741713][ C0] RDX: 0000000000000004 RSI: ffffffff8d8f8695 RDI: ffffc90003c6e988 [ 332.741726][ C0] RBP: ffffc90003c6ea10 R08: ffffc90003c6f0d0 R09: 0000000000000000 [ 332.741738][ C0] R10: ffffc90003c6e9d8 R11: fffff5200078dd3d R12: ffff888029170000 [ 332.741752][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffc90003c6e988 [ 332.741765][ C0] FS: 0000000000000000(0000) GS:ffff888126135000(0000) knlGS:0000000000000000 [ 332.741781][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.741793][ C0] CR2: 00007fff83c92de8 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 332.741810][ C0] Call Trace: [ 332.741817][ C0] [ 332.741826][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 332.741853][ C0] arch_stack_walk+0xfc/0x150 [ 332.741878][ C0] ? cfg80211_inform_bss_data+0x203/0x3b40 [ 332.741908][ C0] stack_trace_save+0x9c/0xe0 [ 332.741932][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 332.741961][ C0] ? __lock_acquire+0xab9/0xd20 [ 332.741980][ C0] kasan_save_track+0x3e/0x80 [ 332.742006][ C0] ? kasan_save_track+0x3e/0x80 [ 332.742031][ C0] ? __kasan_save_free_info+0x46/0x50 [ 332.742053][ C0] ? __kasan_slab_free+0x5c/0x80 [ 332.742079][ C0] ? kfree+0x19a/0x6d0 [ 332.742100][ C0] ? ieee80211_inform_bss+0xc4e/0x1130 [ 332.742127][ C0] ? cfg80211_inform_single_bss_data+0xcdc/0x1a90 [ 332.742182][ C0] __kasan_save_free_info+0x46/0x50 [ 332.742204][ C0] __kasan_slab_free+0x5c/0x80 [ 332.742232][ C0] ? ieee80211_inform_bss+0xc4e/0x1130 [ 332.742257][ C0] kfree+0x19a/0x6d0 [ 332.742279][ C0] ? ieee80211_inform_bss+0x651/0x1130 [ 332.742309][ C0] ieee80211_inform_bss+0xc4e/0x1130 [ 332.742340][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 332.742385][ C0] ? do_raw_spin_lock+0x121/0x290 [ 332.742413][ C0] ? __kmalloc_noprof+0x432/0x7f0 [ 332.742441][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 332.742468][ C0] cfg80211_inform_single_bss_data+0xcdc/0x1a90 [ 332.742512][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 332.742551][ C0] ? _ieee802_11_parse_elems_full+0x2ac/0x4660 [ 332.742572][ C0] ? cfg80211_inform_bss_data+0x1f0/0x3b40 [ 332.742599][ C0] cfg80211_inform_bss_data+0x203/0x3b40 [ 332.742624][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 332.742661][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 332.742705][ C0] ? __pfx__ieee802_11_parse_elems_full+0x10/0x10 [ 332.742737][ C0] cfg80211_inform_bss_frame_data+0x3d7/0x730 [ 332.742766][ C0] ? ieee80211_bss_info_update+0x2df/0x9e0 [ 332.742797][ C0] ieee80211_bss_info_update+0x749/0x9e0 [ 332.742845][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 332.742871][ C0] ? sta_info_get+0x4f/0x300 [ 332.742906][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xfba/0x2b00 [ 332.742936][ C0] ieee80211_ibss_rx_queued_mgmt+0xa5d/0x2b00 [ 332.742964][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.742992][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xfba/0x2b00 [ 332.743020][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 332.743047][ C0] ? __lock_acquire+0xab9/0xd20 [ 332.743069][ C0] ? __lock_acquire+0xab9/0xd20 [ 332.743099][ C0] ? kcov_remote_start+0x18e/0x7f0 [ 332.743124][ C0] ieee80211_iface_work+0x85f/0x12d0 [ 332.743163][ C0] cfg80211_wiphy_work+0x2bb/0x470 [ 332.743184][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 332.743207][ C0] process_scheduled_works+0xae1/0x17b0 [ 332.743247][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 332.743277][ C0] worker_thread+0x8a0/0xda0 [ 332.743312][ C0] kthread+0x711/0x8a0 [ 332.743338][ C0] ? __pfx_worker_thread+0x10/0x10 [ 332.743363][ C0] ? __pfx_kthread+0x10/0x10 [ 332.743389][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.743417][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.743434][ C0] ? __pfx_kthread+0x10/0x10 [ 332.743459][ C0] ret_from_fork+0x4bc/0x870 [ 332.743479][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 332.743502][ C0] ? __switch_to_asm+0x39/0x70 [ 332.743517][ C0] ? __switch_to_asm+0x33/0x70 [ 332.743531][ C0] ? __pfx_kthread+0x10/0x10 [ 332.743556][ C0] ret_from_fork_asm+0x1a/0x30 [ 332.743581][ C0] [ 335.328493][ T52] Bluetooth: hci9: command 0x0406 tx timeout