Extracting prog: 5h24m20.502589376s Minimizing prog: 1h31m28.840367121s Simplifying prog options: 0s Extracting C: 3m9.179826653s Simplifying C: 34m29.963277522s extracting reproducer from 38 programs testing a last program of every proc single: executing 8 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD detailed listing: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000000)=@framed={{}, [@generic={0x4, 0x8, 0x1}, @map_fd={0x18, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @ldst={0x2, 0x3, 0x3, 0x6, 0xa, 0x50, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) program did not crash program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD detailed listing: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000000)=@framed={{}, [@generic={0x4, 0x8, 0x1}, @map_fd={0x18, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @ldst={0x2, 0x3, 0x3, 0x6, 0xa, 0x50, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-bpf$BPF_PROG_TEST_RUN-bpf$PROG_LOAD detailed listing: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xcd83, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x9b}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2cae0}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hci-socket-sendmsg$nl_route_sched-bind$bt_hci-write detailed listing: executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) bind$bt_hci(r1, &(0x7f0000001580)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="11000000e1feaa601f0b685870590e9afe73d936534f2ab96ecf5c8d991048c9b91937f49ef788d68d712df1cd7807bde3068b555ccb11ea71d5f2942053c6d41aebf6468cea8f5b08f0fc808b9ffce3ae41382529564d0d79946e1227c8f90e77de67995ddaf06cc70b14b74cf489210777c5e430682a301073ffd3ff023566ab436190f0ed2564b91e4618b18e386e5b10dcad445bae1831e03a167faa", 0xfffffffffffffeec) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet_sctp-socket$nl_generic-syz_genetlink_get_family_id$nl80211-socket$nl_netfilter-socket$nl_xfrm-socket$nl_generic-getpid-sendmsg$nl_generic-sendmsg$nl_xfrm-sendmsg$nl_xfrm-sendmsg$NFT_BATCH-socket$pppl2tp-socket$inet6_udp-connect$pppl2tp-socket$inet6_mptcp-bind$inet6-listen-socket$inet_mptcp-sendmsg$NL80211_CMD_TDLS_OPER-connect$inet-socket$nl_generic-sendmsg$nl_generic-socket$nl_generic-sendmsg$nl_generic-recvmmsg-sendto$inet-close-socketpair$unix-ioctl$sock_SIOCETHTOOL-socket$pppl2tp detailed listing: executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) recvmmsg(r10, 0x0, 0x0, 0x20, 0x0) sendto$inet(r9, &(0x7f0000000680)="1c", 0x10002, 0x0, 0x0, 0x0) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x15, 0x5b09, 0x7, 0x2, 0x3, 0x5, 0x7, 0x8, 0x5, 0x9, [0xce, 0x5, 0x2005, 0x40, 0x4, 0x3, 0x400e, 0xfb]}}) socket$pppl2tp(0x18, 0x1, 0x1) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): accept$packet-socket-setsockopt$RDS_CANCEL_SENT_TO-accept4$packet-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route-ioctl$sock_SIOCGIFINDEX-socket$igmp6-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-openat$cgroup_ro-setsockopt$ARPT_SO_SET_REPLACE-mmap-bpf$ITER_CREATE-close-bpf$MAP_CREATE-bpf$MAP_CREATE-bpf$MAP_DELETE_BATCH-socket$nl_generic-syz_genetlink_get_family_id$devlink-sendmsg$DEVLINK_CMD_RATE_SET-sendmsg$nl_route-bpf$MAP_CREATE_RINGBUF-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-sendmsg$nl_route-sendto$packet-setsockopt$packet_buf-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD detailed listing: executing program 0: accept$packet(0xffffffffffffffff, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) r0 = socket(0x11, 0x2, 0x6) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x6a, 0x1, 0x0, 0xc) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffedd, 0x80400) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000800)='ns/cgroup\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000840)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x110, 0x210, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000d80), 0x0) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x9, r6, 0x4}, 0x38) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x34, r8, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0x5, 0x0, 0xdad1124f55525050, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x5c}, 0x94) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r4, @ANYBLOB="1400018008000100000001000500030003000000"], 0x2c}}, 0x0) sendto$packet(r1, 0xfffffffffffffffd, 0x0, 0x8000844, &(0x7f0000000540)={0x11, 0x17, r4, 0x1, 0x18, 0x6, @broadcast}, 0x14) setsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000580)="fbd691a560d2311bf45042ee630a7c2720f5b7dec34225a8a9a2339ad76086724eb25f66d30e37829edf521feab759bbbb6bc0a36182ebe8a7eb5bedaf64b4267c9eb29e1b5dbcae97a71f8c65be30f7285514bde847dcf9283f283b5b10f62a39c2984db9ce4d4399b7ea11877cee99849528f86319319fedd4d59d8f5eaa25076eb3f99b35699a68f560c97462df4340cda396197f5790010e05ee90534db1289ce9bf9473126ac1d3e1da66fd60f0b5e5319763e006822eeaf351a6cb", 0xbe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000fe000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000ffe800006608000000000000180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8df00000000bfa100000000000007010000f8ffffffb702000008000000b50afdfffffffffd85000000ad0008009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x3, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-openat$tun-ioctl$TUNSETIFF-openat$tun-close-socket$inet6_sctp-ioctl$SIOCSIFHWADDR-socket$nl_route-ioctl$sock_SIOCGIFINDEX-socket$netlink-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-setsockopt$inet6_IPV6_FLOWLABEL_MGR-socket$packet-sendto$packet-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$bt_rfcomm-ioctl$sock_SIOCETHTOOL-socket$nl_route-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-setsockopt$SO_J1939_ERRQUEUE-setsockopt$sock_int-socket-sendmmsg-setsockopt$inet_sctp_SCTP_HMAC_IDENT-sendmsg$nl_route_sched-syz_init_net_socket$bt_rfcomm-ioctl$sock_inet_SIOCGIFADDR detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) close(r2) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000580)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000700)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x40, &(0x7f0000000740)={0x11, 0x8100, r4, 0x1, 0xda, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'geneve0\x00'}) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'veth0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r10, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000240)=0xffffffff, 0x4) r12 = socket(0x18, 0x1, 0xff) sendmmsg(r10, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000300)=[{&(0x7f0000000340)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r12, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="000001000606e7ff0903"], 0xc) sendmsg$nl_route_sched(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r11, {0x2, 0x8}, {0xf, 0xc}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x54) r13 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_inet_SIOCGIFADDR(r13, 0x8915, &(0x7f00000000c0)={'team_slave_0\x00', {0x2, 0x0, @empty}}) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_route-openat$tun-ioctl$TUNSETIFF-openat$tun-close-socket$inet6_sctp-ioctl$SIOCSIFHWADDR-socket$nl_route-ioctl$sock_SIOCGIFINDEX-socket$netlink-socket$nl_route-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-setsockopt$inet6_IPV6_FLOWLABEL_MGR-socket$packet-sendto$packet-ioctl$sock_SIOCGIFINDEX-syz_init_net_socket$bt_rfcomm-ioctl$sock_SIOCETHTOOL-socket$nl_route-socket$can_j1939-ioctl$ifreq_SIOCGIFINDEX_vcan-setsockopt$SO_J1939_ERRQUEUE-setsockopt$sock_int-socket-sendmmsg-setsockopt$inet_sctp_SCTP_HMAC_IDENT-sendmsg$nl_route_sched-syz_init_net_socket$bt_rfcomm-ioctl$sock_inet_SIOCGIFADDR detailed listing: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) close(r2) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000580)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000700)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x40, &(0x7f0000000740)={0x11, 0x8100, r4, 0x1, 0xda, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'geneve0\x00'}) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'veth0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r10, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000240)=0xffffffff, 0x4) r12 = socket(0x18, 0x1, 0xff) sendmmsg(r10, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000300)=[{&(0x7f0000000340)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r12, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="000001000606e7ff0903"], 0xc) sendmsg$nl_route_sched(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r11, {0x2, 0x8}, {0xf, 0xc}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x54) r13 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_inet_SIOCGIFADDR(r13, 0x8915, &(0x7f00000000c0)={'team_slave_0\x00', {0x2, 0x0, @empty}}) program did not crash single: failed to extract reproducer bisect: bisecting 38 programs with base timeout 6m0s testing program (duration=6m9s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 10, 5, 19, 10, 30, 30, 29, 32, 7, 1, 30, 6, 2, 7, 3, 2, 30, 2, 13, 30, 20, 9, 4, 18, 2, 1, 30, 2, 9, 3, 11, 30, 3, 5, 3, 1, 1] detailed listing: executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18080000010000000000000000000000711247000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000240)="92", 0x1}], 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x158, 0x18c, 0x203, 0x158, 0x19030000, 0x248, 0x2e0, 0x2e0, 0x248, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0xffffff00, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x110, 0x158, 0x0, {0x1000000}, [@common=@unspec=@physdev={{0x68}, {'ip_vti0\x00', {}, 'veth0_macvtap\x00', {}, 0x1c, 0x11}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x8}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000008c0), r3) sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0000000000000000000200000000"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) openat$pidfd(0xffffffffffffff9c, 0x0, 0x2040, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f00000009c0)={0x9, {{0xa, 0x4e21, 0xffffffff, @mcast2, 0x200005}}}, 0x88) bind$inet6(r5, &(0x7f0000000a80)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x3e, &(0x7f0000000ac0)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) (async) pipe(&(0x7f0000000280)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="800000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000600012800b000100697036746e6c00005000028014000200fc0100000000000000000000000000000400130014000300fe8000000000000000000000000000aa0500060002000000080008003b000000080008002400000008000100026f24"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x3c, 0x40, 0x107, 0x70bd2e, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0xc, 0x1c2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}]}, @nested={0x1c, 0x9, 0x0, 0x1, [@nested={0x18, 0xff, 0x0, 0x1, [@typed={0x14, 0xe1, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c090}, 0x4c000) splice(r1, 0x0, r7, 0x0, 0xf3a, 0x9) executing program 1: socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080040"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f00000007c0)={0x64, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x400c040) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, &(0x7f0000000000), &(0x7f0000000340)=""/89}, 0x20) executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7, 0x0, 0x2d00}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000540)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r2, 0x29, 0x1a, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) connect$can_bcm(r4, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="0100000003000000640000000000000000000000000000000000000000000000000000000000000020a10700000000000200000001000000020000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="01000000030000006400000000000000000000000000000000000000000000000000000000000000020f5800000000000200000001000000", 0x38}], 0x1}}], 0x2, 0x20004090) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000700)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x38, 0x3a, 0x0, @remote, @local, {[], @dest_unreach={0x1, 0x3, 0x0, 0xf2, '\x00', {0x4, 0x6, '\x00', 0xd, 0x33, 0xff, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, [@hopopts={0x2b}]}}}}}}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000008c0)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xb, 0xfff2}, {0xe, 0xffff}, {0xb, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000040) executing program 1: socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080040"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002100)=@newtaction={0x2048, 0x30, 0xfbed, 0x70bd29, 0x25dfdbff, {}, [{0x4b8, 0x1, [@m_police={0x4b4, 0x1, 0x0, 0x0, {{0xb}, {0x488, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x7, 0x4, 0x4, 0x104, {0x1, 0x0, 0xffff, 0x1, 0x2, 0x200}, {0x6, 0x1, 0x4, 0x200, 0x81, 0x8}, 0x400, 0xfffffe01, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x200, 0x0, 0x0, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x40000, 0x2, 0x2, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x9, 0x0, 0x17a00, 0x0, 0x5, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8db, 0xffffffff, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x10, 0x0, 0x0, 0xf, 0x1, 0x7c, 0x0, 0x5, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xcd9, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4000, 0x10, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0xfffffff9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x319e, 0xfb18, 0x6, 0x9, 0x0, 0x484a, 0x0, 0x2, 0x0, 0x6, 0x0, 0xfffffffc, 0x9, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfbfffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x5a62, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0xff, 0xfffc, 0x5}, {0x5, 0x0, 0x0, 0x9, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x2}}}}]}, {0x1b7c, 0x1, [@m_police={0x990, 0x17, 0x0, 0x0, {{0xb}, {0x8c8, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x4e, 0x4, 0x7, 0x6, 0xc4a, 0xcb, 0x3, 0x0, 0x28509a2a, 0x135, 0x7, 0x1d000000, 0x2, 0x2, 0x3, 0x7a, 0x0, 0xf, 0x1000, 0xffff0952, 0x9, 0x8, 0x2, 0x81, 0x40, 0x2, 0xfff, 0x0, 0x46c, 0xfffffff7, 0xffffffaa, 0x0, 0x1d, 0x5, 0x1, 0x1, 0x6, 0x9, 0xe, 0x5, 0x9, 0xffff7fff, 0x3, 0x9, 0x8001, 0x8, 0xb155, 0x81, 0x4, 0xb, 0xffff655c, 0xa05, 0x1, 0x7, 0x0, 0x0, 0x8, 0x8f43, 0x4, 0x200, 0x3, 0x5, 0xfffffffc, 0x8000000, 0x80000001, 0x5, 0x6, 0xfff, 0x6, 0xfffffff2, 0x3, 0x4, 0xd3f, 0xf, 0x4, 0x8, 0x8, 0x9, 0x0, 0x6da8, 0x5, 0x4, 0xfffff750, 0x7, 0x2, 0x1ff, 0x7, 0x5, 0xd2, 0x19, 0x8001, 0xa82, 0x136d, 0xfffffffc, 0xb0f8, 0x8000, 0x6, 0x5a8000, 0x1, 0x0, 0x0, 0x6, 0x0, 0x2, 0x8, 0xe, 0x0, 0x0, 0x8, 0xdc, 0x7, 0x7, 0x502b, 0x0, 0x1, 0x3, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xff, 0x1000, 0x1, 0xfbb5, 0xc1f, 0xe91, 0x2, 0x9, 0x9, 0x3ff, 0x5, 0x8695, 0x7f000, 0x7, 0x7, 0x9, 0x8, 0x5, 0x61, 0x36, 0x6, 0x0, 0x800, 0x80000000, 0x10, 0x8e6e, 0x24000, 0x4, 0x7, 0x7fffffff, 0x6, 0x5, 0x1, 0x5891, 0x1ff, 0x3d0d, 0x7, 0x81, 0x8, 0x8, 0x7, 0x3, 0xffff, 0x7, 0x8, 0x4, 0xffff, 0xfffffffe, 0x2, 0xd, 0x7fff, 0x6, 0x7fff, 0xffffff0a, 0x6, 0x1ff, 0x0, 0x66a, 0x3, 0xd9a, 0x5, 0x10001, 0x1, 0xffff7980, 0x4, 0xff, 0x9, 0x4, 0x5, 0x205, 0x3500abae, 0x0, 0x2, 0x3, 0x0, 0x9, 0x8, 0x5, 0xd788, 0x3, 0x6a555965, 0xde10, 0xfffffff8, 0x10, 0x81, 0x400, 0x1000, 0x3ff, 0x6, 0x4, 0x3, 0x8, 0x3, 0xbfd6, 0x3, 0x6, 0x40, 0x3, 0x200, 0x0, 0x3, 0x3, 0x2, 0x5, 0x5, 0x8001, 0x401, 0x1, 0x25f, 0x1, 0x0, 0x80, 0x8, 0x43c, 0x8, 0x8001, 0x9, 0x22a6ae6e, 0xfffffff7, 0x4, 0x1, 0x2, 0xffffffff, 0x631, 0x5, 0x7ff, 0x0, 0xa5d9, 0xd, 0x80, 0x9, 0x10, 0x0, 0x70, 0xba7]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb443}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x10000000, 0x9, 0x284c, 0xb, {0xe, 0x2, 0x7, 0x2, 0x0, 0x4}, {0x6, 0x1, 0x9, 0x7, 0x400, 0x80000001}, 0x1, 0xe630, 0xffffffff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x800}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000001, 0x10000000, 0x3ff, 0x3, 0x0, {0x3, 0x2, 0xf801, 0x30, 0x3, 0x7}, {0x3d, 0x0, 0x7, 0x4, 0x6, 0x4}, 0x0, 0x8, 0x7fff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x401, 0x2, 0xfffff4ce, 0x1, 0xfffffffb, 0x9, 0x6, 0x4, 0x200, 0x65, 0x6, 0x10000, 0x6, 0x4, 0x7, 0xaa, 0x6, 0xcc, 0x2, 0xb6f, 0x4, 0x1, 0x5, 0xe, 0x200, 0x4, 0x9, 0x0, 0x7f, 0xe, 0x8, 0x3, 0x9, 0x0, 0x5, 0x8, 0x7, 0x7, 0x8, 0x4293, 0x4, 0xff, 0x0, 0x4, 0x1, 0x1, 0x1a, 0x4876, 0x7, 0xe69c, 0x2c, 0x6, 0x8, 0x80000001, 0x6, 0x6, 0x10001, 0x1, 0x6, 0x8, 0x3, 0x8071, 0xdd, 0xfffffffd, 0x8, 0x2, 0x2, 0x0, 0x3, 0x0, 0x9, 0x6, 0x0, 0x7, 0x0, 0x7, 0x3, 0xe, 0x9, 0x3, 0x5, 0x1ff, 0xc, 0x7, 0x6, 0xb, 0xed, 0xffff6658, 0x6, 0x8, 0x59a, 0x9, 0x10000, 0x0, 0x9, 0xd3, 0x4, 0x9, 0x5, 0x9, 0x800, 0x7, 0xff, 0x2, 0xfffffffb, 0xf, 0x9, 0x3, 0x7, 0xff, 0x1, 0x7, 0x3, 0x4, 0xa, 0x10001, 0x3, 0x1, 0x7fffffff, 0x3, 0xf2, 0x7240, 0x6, 0xbb4f, 0x10000, 0xa51, 0x0, 0x9, 0xd12, 0xf, 0x4, 0x401, 0x63, 0x7, 0x7, 0x8, 0x5, 0x4, 0x7, 0x4, 0x8, 0x1, 0x2, 0x9, 0x1, 0x7f, 0x8, 0x7, 0xf, 0x8, 0x8, 0x3, 0x1, 0x2, 0x3ff, 0x6, 0x3ff, 0x2, 0x0, 0x3, 0x3ff, 0x100, 0x3, 0x401, 0x1, 0xddf, 0x6, 0x2, 0x1, 0x1, 0x100, 0x7, 0x7, 0x4, 0x2, 0x2, 0x3, 0x2b61, 0x10000, 0x0, 0x6, 0x4, 0x0, 0x5, 0x2a0cda44, 0x1, 0x5, 0x0, 0x1488, 0x8, 0x5, 0x2, 0x9, 0x5d, 0xa, 0xc2e0, 0x4, 0x9, 0x3, 0x52f, 0x6e, 0xc, 0x2, 0x3ea, 0x3, 0x7, 0xb, 0x2, 0x0, 0x9, 0xb2, 0xffff0001, 0x3, 0x4, 0x7, 0x100, 0x10001, 0x8, 0xd9, 0x6, 0x691, 0x0, 0x7fffffff, 0x1, 0x3, 0x5, 0x4, 0x7, 0x7ff, 0x9, 0x5, 0x80000000, 0xfffff305, 0x401, 0x714, 0xc9c1, 0x4, 0x6f, 0x8, 0xe0000000, 0xf, 0x2, 0xf7e7, 0xd5b2, 0xd03b, 0x1, 0x3, 0x2, 0x10, 0x9, 0x21, 0x101, 0x7, 0x75b6, 0x9]}]]}, {0x9e, 0x6, "23c2764c66a66f415ca90dc2ba6ece8d2061b8e04615e7f88c77433986ff71c33d6616579eec03f717b7a3420ea1e0208b74c78f705e087044359e14f830c512117c14d80944080e0a0edaeab4fda7aa189762909856f1e7bac8be60900f7263ab1a5b73c000dd658ab4523565e53a73b7a145e4bb59432e77083228a9e8fbc74b135c9edd2b95afb9bec4b44ff59cd1154ae51d854cca3b47e1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0x10a0, 0x18, 0x0, 0x0, {{0xa}, {0xfe8, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x120, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x9, 0x6, 0x0, 0x5, 0x1ff}, 0x2, 0x9, [{0x80, 0xffffffff, 0x200, 0x4, 0x3, 0x9}, {0x6, 0x3, 0x4, 0x800, 0x81a, 0x8001}]}, [{0x7, 0x3000000, 0x6090, 0x7, 0x7, 0x3}, {0x4, 0x6, 0xfffffffd, 0x59d, 0x800, 0x2}, {0x2, 0x3, 0x7, 0x7fffffff, 0x200, 0x8}, {0x0, 0x2, 0x4, 0x6b0, 0x0, 0x8}, {0x8001, 0x3f3, 0x8, 0x8, 0xff, 0xce40}, {0x49, 0x8, 0xf25, 0x6, 0xc, 0xe}, {0x6, 0x3ff, 0x463, 0x1, 0x6, 0x7}, {0x0, 0x7, 0x6, 0x8001, 0x6, 0xdfc}, {0xb, 0x2, 0x0, 0x8, 0x8, 0x5}, {0x10001, 0x2fdb23b5, 0x101, 0xffffffff, 0x4, 0x4}, {0x5, 0x3, 0x4994, 0xa, 0x9, 0x7fffffff}, {0x0, 0x3, 0xffffff04, 0x2, 0x0, 0x5}, {0xc6, 0x2, 0x8, 0x1, 0xe, 0x6b7}, {0x4, 0x1, 0x25a, 0x1, 0x4, 0x100}, {0x7fff, 0x6, 0x5, 0x3, 0x0, 0xd36}, {0xfffff1eb, 0x9, 0x4, 0x1, 0x4, 0x8}, {0x5, 0x40, 0x7, 0x7, 0x1, 0x7ff}, {0x9, 0x1, 0x8000, 0x9, 0x6, 0x7}, {0x9493, 0x10000, 0x6, 0xfffffffa, 0x1, 0x3}, {0x3, 0xfffffffc, 0x5, 0xfffffffe, 0x3, 0x81}, {0x10, 0xd6, 0x6, 0xf6, 0xe13, 0x3ff}, {0xffffffff, 0x5, 0x101, 0x6, 0x5ad6c41b, 0x8}, {0x0, 0xfff, 0xad, 0x2, 0x3, 0x3}, {0x3, 0x6, 0x7, 0x3, 0x0, 0x4}, {0x2, 0x1464fb74, 0x4, 0x401, 0x9, 0x4}, {0xff, 0x6, 0x0, 0x4, 0x2, 0xc19}, {0x0, 0x4, 0x4, 0x5, 0x10001, 0x2}, {0x3f, 0x5, 0x28, 0x3ff, 0x4, 0x10001}, {0x0, 0x0, 0x400, 0x2, 0x153, 0x8}, {0x6, 0x100, 0x10000, 0x5, 0x1, 0x1000}, {0x0, 0x5893, 0x45, 0x9, 0x9, 0xffffffff}, {0x8, 0x1b045b80, 0x14f, 0x495, 0x1, 0xffff493a}, {0x0, 0x5, 0x81, 0x5, 0xffffffff, 0x100}, {0x4a2, 0x0, 0x687d91d5, 0xe, 0x100, 0x6}, {0x3, 0x9, 0xa90f, 0x8, 0x3, 0x100}, {0x1, 0x101, 0x8, 0xfff, 0x6, 0xd4}, {0xd81, 0x81, 0xffffff00, 0x4, 0x0, 0xffff7fff}, {0x9, 0x7, 0x1, 0x3, 0xd, 0xf1a}, {0x4, 0x5, 0x3, 0x7, 0x6, 0x6}, {0x1, 0xffffffff, 0x4, 0x8, 0x6, 0x9}, {0x3, 0x8001, 0x1eb, 0x7f, 0xc0000000, 0x3}, {0x7f, 0x3, 0x4be9, 0x400, 0x2, 0x9}, {0x7, 0x3ff, 0x76e, 0x4, 0xf, 0x6}, {0x3, 0x10001, 0x8, 0xe, 0x6, 0xfffffffa}, {0x40, 0x800, 0x709, 0x5, 0xe, 0x6}, {0x1, 0x2, 0xb, 0x10000, 0x9, 0xffffffff}, {0x9e6, 0x7fffffff, 0xcdde, 0x3, 0x101, 0xffff}, {0xe7ad, 0xdc, 0x1, 0xb0, 0x1, 0x943}, {0x6, 0x200, 0xfff, 0x6, 0xccc, 0xfffffff9}, {0x7f, 0x10001, 0xc0, 0x1000, 0x3, 0x9}, {0x3, 0x3, 0x7fffffff, 0xffff8000, 0x2, 0x5}, {0x10000, 0x9, 0x9, 0x6, 0x7ff, 0x6a9a}, {0x80000001, 0x6, 0x800, 0x6, 0x8, 0x1000}, {0x40, 0x5, 0x3, 0x0, 0x2, 0x800000}, {0x9, 0x800, 0x1, 0x9, 0x10, 0xb5e}, {0x44, 0x1, 0x4, 0x8, 0x7}, {0x40, 0x6, 0x7, 0xfffffffc, 0x8, 0x9}, {0x1, 0x9, 0x7f, 0x2, 0x7ff, 0x1000}, {0xf, 0x4, 0x7, 0xfc0d, 0xfffffffb, 0x4}, {0x7, 0x3ff, 0x4, 0x6, 0x0, 0x8}, {0x6f5d4296, 0x0, 0x6b5, 0x3, 0x5, 0x4}, {0x400, 0x7, 0x74, 0x3, 0xc280, 0x3}, {0x8, 0x8001, 0x4, 0x9, 0xf, 0x14ef}, {0x5, 0x8, 0x2, 0x2d0a7794, 0x0, 0x7}, {0x7, 0x3, 0x4, 0x2, 0x6, 0x9}, {0x7, 0x9, 0x9, 0x1, 0x8, 0x2}, {0x100, 0x3, 0x8000, 0xf2, 0x3, 0xfffffff1}, {0x2e, 0x3, 0x1000, 0x1, 0x8080, 0x779}, {0x4, 0x6, 0x1, 0xffffffff, 0x6753, 0xfc}, {0x400, 0x1000, 0x8000, 0x1, 0x4e, 0xb85}, {0x3ff, 0xa, 0x401, 0xfffffffc, 0x1, 0x7}, {0x2, 0xa, 0x4, 0x4, 0x5}, {0x7, 0x401, 0x656f, 0xb02, 0x7fffffff, 0x1}, {0x9, 0xffff, 0x1, 0x7f, 0x7, 0x1}, {0xfffffff1, 0x6, 0x0, 0x2, 0x7, 0x4}, {0x4, 0x1, 0x3, 0x3, 0x76d, 0x9}, {0x0, 0x1, 0x10, 0x3, 0x8, 0x800000}, {0x101, 0x32fcbbca, 0x5, 0x6, 0x9, 0x10001}, {0x9, 0x7b7c, 0x1, 0x10001, 0x44, 0x35}, {0x2, 0x5, 0x3, 0x40, 0x2, 0x9}, {0x9, 0xdbe, 0x9, 0x1, 0x101, 0x8001}, {0x373, 0x10, 0x10001, 0x3, 0xc6, 0x1}, {0x5, 0x9, 0x3, 0x5, 0x4, 0x604d}, {0xb, 0x5, 0xbb43, 0x800, 0x1, 0x5}, {0xffff, 0x2, 0x5, 0x8, 0x9, 0xfffffc01}, {0xc1e0, 0x0, 0x7, 0x1, 0x4, 0x7a}, {0x5, 0x6, 0x48, 0x0, 0x3, 0x3}, {0xfff, 0x1, 0xf5, 0xc7bd, 0x9, 0x2}, {0x6, 0x1, 0xb82, 0x3, 0x2, 0xc8}, {0x7, 0x50, 0xa8, 0x5, 0x9, 0x6}, {0x5c9a, 0x10000, 0xa44, 0x4, 0x4, 0x7}, {0x4, 0x101, 0x0, 0x8, 0xfff, 0x2}, {0x4, 0x476, 0x1a, 0x8, 0xfff, 0x9eac}, {0x7, 0x3ff, 0xba, 0x9, 0x6, 0x7}, {0x8, 0x9b20, 0x6, 0xdb2, 0x2, 0x5}, {0x2, 0xffffffff, 0x80, 0x5, 0xd, 0x3}, {0x884f, 0x8001, 0x0, 0x0, 0x4, 0x7}, {0x9, 0xef9, 0x9, 0x5, 0x80000000, 0x4}, {0x9, 0x45b5, 0x9, 0x80000001, 0x8, 0x8}, {0x8, 0x10000, 0x80, 0xf4, 0x6, 0x8}, {0x40, 0x3, 0xffffff0c, 0x7, 0x9, 0x1ff}, {0x1, 0x2, 0x2, 0x2, 0x7fffffff, 0xa}, {0x2, 0x4, 0x40, 0x0, 0x5, 0x6}, {0x3, 0xfffffff9, 0xffffffff, 0x695a, 0x7fff, 0x3}, {0x10001, 0x0, 0x1, 0x80000001, 0x7fffffff}, {0xe31, 0xfffffff9, 0x8, 0x7fff, 0xffffffff, 0x4}, {0x7, 0x3, 0x4, 0x7, 0x3, 0x8}, {0x4, 0x5, 0x8, 0x80000001, 0x0, 0xe}, {0x1, 0x2, 0x5, 0xd79a, 0x9, 0x573}, {0xfb5, 0x0, 0x3ff, 0x1, 0x7, 0x6}, {0x5d52, 0x1, 0x3, 0x800, 0xfffffffa, 0x1}, {0x0, 0x4547929a, 0x3, 0x9, 0x0, 0x3}, {0x8, 0x4, 0x24e, 0xfffffc00, 0x5, 0x7fffffff}, {0xffffffff, 0x1000, 0xabdc, 0x2, 0x8, 0x8d4}, {0x4a4, 0x800, 0x9, 0x4, 0x7, 0x7}, {0x400, 0x5, 0x40, 0x9, 0x4}, {0xc, 0x80000001, 0xff, 0x4794, 0x4, 0x8000}, {0x6b, 0x40000000, 0xe7, 0x5, 0x7, 0x1}, {0xf, 0x4, 0x4e, 0x54b, 0x6, 0x1800000}, {0x259a, 0x4, 0x271, 0x0, 0xc, 0x4154}, {0x2558, 0x8, 0x4, 0x9, 0x0, 0x7ff}, {0x3, 0xfdc, 0x2, 0x3, 0x3, 0x6000000}, {0xa886, 0x2, 0x100, 0x2, 0x6, 0x100000}, {0x2, 0x7, 0xdf, 0xffffffff, 0x8, 0x7}, {0x10000, 0x8, 0x1aaa, 0x4, 0xfffffc01, 0x7}, {0xfffffffb, 0x4, 0x5, 0xd0dc, 0xcbfb6e2e, 0x9}, {0x4, 0x6, 0x3ff, 0x4, 0x2, 0xd}, {0x3, 0x9a3, 0xb, 0xfffffff8, 0xa70, 0xbb6}], [{0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0xc46745db527aa97c}, {0x1, 0x1}, {0x2}, {0x2}, {0x2}, {0x4}, {}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x2}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x4}, {0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x28413516a6d35902}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x7}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x6789d3a6ac3f9997}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x2}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {}, {}, {0x2}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x74, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x90, 0x6, "0a1c28a2ddb6be88c573cb77336fc8faa809c0308044931a6f4793c352b3f116867065cd65ed4da26aa3f02331a494f9cfcf6d3cacb45d29418869367fa04f8683b379446435cf6e538a0860a6166344f449ec4de9aa81326510ca2734b2e8f6c8bbcd4049f2597ca4c047a31c1de423762c91f0f5c8be05828ab439b698921201e6861bf429daf41df50a1b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0x98, 0x1b, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x200, 0x6, 0x10000000, 0xfffffff3, 0x6}}]}, {0x52, 0x6, "9dab6494606e7bd0b6c1dc41f10cb4115fdb57690343ad63c5fad28f61a8a8aabe27aeef5c1ded6db03761e2a7c458babb4cd20657f47c21d31a7eb9691f17d0f4d29505e2ba3dc555ee91b340eb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x58, 0x9, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x96, 0x20000000, 0x4, 0x4}, 0x10}}]}, {0xa, 0x6, "f293d5d81fc7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0x58, 0x2, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0xfff, 0x5, 0x3, 0x3c4}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1000}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7aa2323ff961cf96, 0x2}}}}]}]}, 0x2048}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f00000007c0)={0x64, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x400c040) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, &(0x7f0000000000), &(0x7f0000000340)=""/89}, 0x20) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) close(r2) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000580)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000700)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x40, &(0x7f0000000740)={0x11, 0x8100, r4, 0x1, 0xda, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'geneve0\x00'}) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'veth0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r10, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000240)=0xffffffff, 0x4) r12 = socket(0x18, 0x1, 0xff) sendmmsg(r10, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000300)=[{&(0x7f0000000340)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r12, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="000001000606e7ff0903"], 0xc) sendmsg$nl_route_sched(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r11, {0x2, 0x8}, {0xf, 0xc}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x54) r13 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_inet_SIOCGIFADDR(r13, 0x8915, &(0x7f00000000c0)={'team_slave_0\x00', {0x2, 0x0, @empty}}) executing program 32: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) close(r2) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000580)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000700)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x40, &(0x7f0000000740)={0x11, 0x8100, r4, 0x1, 0xda, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'geneve0\x00'}) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'veth0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r10, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000240)=0xffffffff, 0x4) r12 = socket(0x18, 0x1, 0xff) sendmmsg(r10, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000300)=[{&(0x7f0000000340)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r12, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="000001000606e7ff0903"], 0xc) sendmsg$nl_route_sched(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r11, {0x2, 0x8}, {0xf, 0xc}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x54) r13 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_inet_SIOCGIFADDR(r13, 0x8915, &(0x7f00000000c0)={'team_slave_0\x00', {0x2, 0x0, @empty}}) executing program 5: bind$inet(0xffffffffffffffff, &(0x7f000000df80)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f000000dfc0)=0x7, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f000000e000)=0x40000401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f000000e040)=0x800001, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f000000e140), 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f000000e1c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e200)={0x11, 0x1c, &(0x7f000000e2c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0xfffe, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f000000e3c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r1, &(0x7f000000e080)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f000000e0c0)=0x2, 0x4) bind$inet6(r0, &(0x7f000000e100)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) listen(0xffffffffffffffff, 0xb5d6) listen(r0, 0xe0a5) socket$nl_route(0x10, 0x3, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f000000dcc0)={0x1, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f000000dd00)=r4, 0x4) r6 = bpf$ITER_CREATE(0x21, &(0x7f000000dd40)={r5}, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f000000de40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f000000de80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f000000dec0)={0x0, 0x0, &(0x7f000000df00)={&(0x7f000000df40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000040000003900000008000300", @ANYRES32=r9, @ANYBLOB="20005a801c000400060001"], 0x3c}, 0x1, 0x0, 0x0, 0x24040887}, 0x0) read(r6, &(0x7f000000dd80)=""/185, 0xb9) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$NS_GET_PARENT(r10, 0x8004b709, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000dac0)={0x0, 0x0, &(0x7f000000db00)={&(0x7f000000db40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f000000dbc0)={0x0, 0x0, &(0x7f000000dc00)={&(0x7f000000dc40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x25, 0x301, 0xfffffffe, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r8, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x44008000}, 0x20000040) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c8c0}, 0x5bfc820b5ab7c22c) r10 = socket(0x10, 0x1, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x25, 0x301, 0xfffffffe, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x44801}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r3) (async) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r3) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000004c0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r8, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x44008000}, 0x20000040) (async) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c8c0}, 0x5bfc820b5ab7c22c) (async) socket(0x10, 0x1, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000900000000000000e7000000731142000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) select(0x40, &(0x7f0000000240)={0x6}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x2}) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3100000000140004000800010000000001080002000000000050000000120a01040000000000000000020000000900010073797a30000000000900020073797a3000000000080003000000000a1c0004000600010005b400000500020007000000080003000000000358000000060a01040000000000000000020000000900010073797a30000000000900020073797a31000000002c000400280001000b0001006f626a726566000018000200080001000000000a0900020073797a300000000014000000110001"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xd, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000640000000000000002000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000b6ffffffb702000008000000b703000084200000850000007a00000095"], &(0x7f0000000640)='GPL\x00', 0x6}, 0x94) executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0x0, 0x0, 0xff, 0x100fffe00], [0xffffff00, 0xffffffff, 0xff], 'team_slave_0\x00', 'nr0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0xb, 0xfffffff8, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x1, 'syz0\x00', 0xfe}}, @common=@unspec=@cpu={{0x28}, {0xffffffff, 0x1f}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4ef) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sk_skb}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000800), 0x1, 0x0) accept(0xffffffffffffffff, &(0x7f0000000840)=@l2tp={0x2, 0x0, @initdev}, &(0x7f00000008c0)=0x80) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000950000000000000043500998bccda9e8b4796306abc2bf33cc93ed536c596ac4c96286fc783ac9ab5d051c83e7c618"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18}, 0x94) bind$alg(r1, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000a80)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000ac0)=[{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b40)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000b80)="ebe3a0e9796cfd1647e299f4e376fdba128280b3", 0x14}, {&(0x7f0000000bc0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000cc0)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f0000000d00)={0x0, 0x500, &(0x7f0000000d40)=[{&(0x7f0000000d80)=""/81, 0x7ffff000}, {&(0x7f0000000e00)=""/83, 0x20000253}], 0x2}, 0x0) sendto$inet(r2, &(0x7f0000001500)="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", 0x12e, 0x20044004, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000f00)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="18000000101420002cbd7000fddbdf2508004c0000000000fee85a49a5b2be053e9bfd2e2907cdf94b0c68de95314b6555672737903700684ba39bff5d1dfc0c5feacb226e9b14ad942910ffc28f778c3ba1ecea0537db737398be6d2f3b31af3782ef7dc04e8dc6f9956b3e7a03e4bbc7712511e893ea19934e249f144ce60126d8cc76f2d025bc518b1e9053f0191766c54a108c9d2a284fb92d568f568a2af2e2f3de"], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000001080), 0x6) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f00000010c0)) r5 = socket$inet(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x11, 0x13, &(0x7f00000011c0)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000001280)='GPL\x00', 0xa, 0xff5c, &(0x7f00000012c0)=""/222, 0x0, 0x8}, 0x78) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000013c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000001400)=ANY=[], 0x32600) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r3, 0x7171e000) connect$inet(r5, &(0x7f0000001440)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r7 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000001480)={0x0, 0x8}, &(0x7f00000014c0)=0x8) ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000001500)) executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x1000700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv4_delroute={0x24, 0x19, 0x1, 0x71bd2b, 0x0, {0x2, 0x18, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x1000}, [@RTA_PREFSRC={0x8, 0x15, @dev={0xac, 0x14, 0x14, 0x38}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000200)={{r0, &(0x7f0000000000)='*%/!\xfa\x00', 0x0, &(0x7f0000000040)={@align=0xffffffff, {0x5, 0x2, 0x7}}, 0x2, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000100)}, {[0x7fffffff, 0x7fffffff, 0x1117]}, 0x1, 0xb0, &(0x7f0000000140)=""/176}) writev(r1, &(0x7f00000007c0)=[{&(0x7f0000000380)="b65b754d082711f4e0cb640f9e8e64d68bc57b8607186580252483e0c966724c7c8380c9a05a9c0be0a93cb348674cf28c9e6ff19e84bbfc7e6cae9c2d1273cde05a1bbfc936", 0x46}, {&(0x7f0000000400)="6093c6ffe5d854e9b299b5cdafa4e985c499aa5da488735c5093a25327ed1e68cbf58650920d6dae40a793d90df734de56ebbfd2d66839ddf0d1ac630f9775b6e91fbe38f0512944c5099234f7dad20f885b1fb5b5a333d0d940d29b153e267058a39f3697b4da0dcf9756bfa71b65ba6d", 0x71}, {&(0x7f0000000480)="926530d298d5b8274cab2feab0c527f6b919807f77fdc3c860ec35b1ed18529261e468e9adf2995b5fcc32aabdc398df248165b79c67d313c2d8d9fde172707979c4b4953bdf6c36b579f9b8e80ead4c7c1f4ca7153258858677fe", 0x5b}, {&(0x7f0000000500)="3d22ef98ae489d5640f9f66de38b97af4280f56577d9e12367fec4aa9e2ad17a27d6002a88a5", 0x26}, {&(0x7f0000000540)="83088c27f386aaca01edec147b0d35029aee6654ed6c2b396fdf41305f02b2ac761cba3c12f3437bb3a7e0c98b0ad2b9658e170064b7f0e0055a891d1a147dac1442", 0x42}, {&(0x7f00000005c0)="4028ca6f09667e222bc39e48cd8660735405b629a500cdfb6caa08064a9eb4797014636ffa7e5c8c81e61481f586fe4ac15df30c6ed4d705792e47310a837751b67be77019438ed6fb12bee3e7c5354c32f8191db714fcdb0d48", 0x5a}, {&(0x7f0000000640)="53b015fc9c7e6b60c8cc9e03c626a27c3365804859c919b45a149c4e1ab6cdb2287199f6345c435cff942c386435404a749188c9fdc935c94c766147e2c210aa8d5182dfffc23845e7619f094293d228f4068aabf589bfd59912d662c4fb5753d3bdac263c00a3867516f442950b14", 0x6f}, {&(0x7f00000006c0)="3a51faea4e7a34a36ff05a3e2aabe2471f517ccac7d3b6cdf5da89b9c5db9ce06196d40ce125f45c4c0bd372140199f7a9a06b3848524c15bc89051c31cf3fcf4609dc55dde2d647d93dea8cd5d88df8c0061b059b02f9ea80942278b7ab332379131b7107f86ddaac1f24393c6f14efc94048ad8619dc8218ad0d0855293e62cd3d764ebdd853217fa7a776ce7b5c7b1e6cf0310a6ee059c1e59f7c30c3416239711c", 0xa3}, {&(0x7f0000000780)="9499a5ded6613be0a3a3be23e790", 0xe}], 0x9) executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000018c0)=ANY=[@ANYBLOB="60000000410001000000000000000000030100000f0000003e00010000112233445566748899aabb86dd2c00001c0000000001000000010101010253aa58fe6cbdf03570650d05bc000000000000000000000000003d000004000280040003"], 0x60}}, 0x0) executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100840}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4004081) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025087000f6dbdf25010000000000000001410000001400170000000000076574683a6d"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000d0) executing program 5: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x3, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc0100001900010000000000fddbdf25ffffffff000000000000000000000800ac1414bb0000000000000000000000004e22000bffff00000a0080005c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f64700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000080000000000000000000000080ffffff000000000000000001010202000000004401050000000000000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000002020000000000000000000000000000ac1414aa000000000000000000000000000004d73c0000000a000000000000000000000000000000000000000200000000020000000200000008000000080000000000000000000000000000000000000000000032000000000000007f0000010000000000000000000000000000000003010000000000000002000000000000ac1e0101000000000000000000000000000000002b"], 0x1fc}, 0x1, 0x0, 0x0, 0x24060000}, 0x4804) executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2f, 0x98, 0x5, 0x101, 0x40, @mcast2, @mcast2, 0x80, 0x7, 0x5, 0x7}}) r2 = socket$unix(0x1, 0x1, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x7, 0x9, &(0x7f0000000700)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x2c, 0x0, 0x4, 0x1}, @initr0, @exit]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f0000000380)={&(0x7f00000003c0)=@xdp={0x2c, 0xdd8c, r4, 0x3e}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000480)="80", 0x1}], 0x1}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x8, 0xfff2}, {0x0, 0xa}, {0x7, 0xffff}}}, 0x24}}, 0x20000004) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000e4ef1f00680000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000800)={r5, 0x0, 0x0}, 0x20) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x3, @link_local, 'erspan0\x00'}}, 0x1e) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) r7 = socket$pppoe(0x18, 0x1, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r8, &(0x7f0000000580)={&(0x7f00000005c0)={0xa, 0x4e20, 0x7fffffff, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="3000000000000000290000000400000084023f04003f01f40402000304016b"], 0x30}, 0x40) connect$pppoe(r7, &(0x7f0000000500)={0x18, 0x0, {0x1, @multicast, 'ip_vti0\x00'}}, 0x1e) socket$netlink(0x10, 0x3, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000540)={0x18, 0x0, {0x1, @broadcast, 'tunl0\x00'}}, 0x1e) close(0x4) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRESDEC=r1, @ANYBLOB="800002000800000008001b000000000008002800a60b000008003a"], 0x38}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000240)={0x8, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x1, 'fo\x00', 0x0, 0x10000, 0x32}, 0x2c) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QGROUP_LIMIT(r10, 0x8030942b, &(0x7f0000000080)={0x0, {0x2b, 0x244c, 0x9, 0x101, 0x80}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'xfrm0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) executing program 0: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xb, 0x0, 0x0, 0x4, 0x2000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfeffffff}, 0x94) executing program 4: socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000"], 0x44}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) socket$kcm(0xa, 0x922000000003, 0x11) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000540)={'virt_wifi0\x00', @random="0200"}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000000780)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) executing program 5: ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000540)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x3, 0x0) close(0x3) (async) socket$netlink(0x10, 0x3, 0x10) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x76dc) (async) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000540)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000580)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001dc0)=""/4096, 0x1000}], 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002e00)=""/4096, 0x1000}, {0x0}, {0x0}], 0x3, &(0x7f0000003e00)=""/178, 0xb2}, 0x10}], 0x2, 0x23, 0x0) writev(r3, &(0x7f0000003ec0)=[{&(0x7f0000003f00)='.', 0x1}], 0x1) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000003f40)=0xffff1884, 0x4) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000140), &(0x7f0000000280)=r5}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89fe, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x11, 0x0, 0x1, 0x0, 0x3, 0x100}}) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000240)=[{{&(0x7f0000000280)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000340)={r6}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x3, 0x8008, 0x1, 0xa3a7, r6}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) r7 = socket$inet(0x2, 0x3, 0x33) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[], 0x64}}, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0xa2fac000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000010000300851000000600000018020000", @ANYRES32, @ANYBLOB="00000000200000006600020080ffffff18000000fffffffe00000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000740)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000780)=""/222}, 0x78) getsockopt$inet_mreqsrc(r7, 0x0, 0x53, &(0x7f0000000480)={@dev, @local, @broadcast}, &(0x7f00000004c0)=0x2000) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001340)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0xa}, {0x1}, {0x300, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xd}}]}}]}, 0x3c}}, 0x2400c890) executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x38, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x5, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x8}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xd0}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="40000000100039042cbd7000fbdbdf2500000000", @ANYRES32=r4, @ANYBLOB="11980400419804002000128008000100736974001400028008000300ac1414aa06000f0002"], 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x0, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @local}, 0x14) executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3, 0x2, {0xa, 0x4e21, 0x626, @loopback, 0x4}}}, 0x32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x268, 0x1, 0x5, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [{{0x254, 0x1, {{}, 0xf, 0x0, 0x7, 0x100, 0xb, 'syz0\x00', "628305ec51572f66b7dcc51228229157c9f2326be37bfbca815cfb622c37954e", "08ca8327c212d1209198cc7d937c84d2e392d37c58372d33776c9e4071bc9583", [{0xffff, 0x7, {0x2, 0xd6b}}, {0x7, 0x5, {0x0, 0x6}}, {0x0, 0x5e01, {0x2, 0x7f}}, {0x2b8, 0x7, {0x0, 0x93}}, {0x2, 0x9, {0x1, 0x1}}, {0x0, 0x401, {0x0, 0x3}}, {0x2, 0x4, {0x1, 0xc6}}, {0x40, 0x6, {0x2, 0x1}}, {0x18, 0x9, {0x2, 0x10001}}, {0x0, 0x5, {0x0, 0x4}}, {0x4, 0x0, {0x0, 0x5}}, {0x6, 0xfff7, {0x0, 0x3}}, {0x6, 0x800, {0x0, 0xa729}}, {0x7fff, 0x2, {0x2, 0x8}}, {0x3, 0x0, {0x3, 0x8000}}, {0x0, 0x1, {0x1, 0x6}}, {0xe0, 0x9, {0x1, 0xff}}, {0x3f, 0x853, {0x0, 0x3}}, {0x200, 0xd8, {0x3, 0x10001}}, {0x7, 0x20, {0x2, 0x100}}, {0x3, 0x800, {0x2, 0x3}}, {0x3, 0x1, {0x3, 0x7}}, {0x7, 0x7, {0x0, 0x7abfd8c2}}, {0x3, 0x9, {0x0, 0x6}}, {0x8, 0xf8, {0x2, 0x101}}, {0x7, 0x8, {0x1, 0x4}}, {0x3, 0x9, {0x0, 0x2691161b}}, {0x3, 0x8, {0x1}}, {0x2, 0x8, {0x0, 0x6}}, {0x1, 0x7, {0x2, 0x101}}, {0xf9b, 0x2, {0x1, 0x5}}, {0x3, 0x2, {0x3, 0x6}}, {0x4, 0x6c5, {0x0, 0x2}}, {0x1}, {0x6, 0xb1f4, {0x3, 0x1}}, {0x4, 0x4, {0x2, 0x10}}, {0x40, 0x10, {0x1, 0x57d}}, {0xd, 0x6, {0x2, 0x8}}, {0x5, 0x7, {0x3, 0xf7ffd310}}, {0x101, 0x1d6, {0x1, 0x8}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x1e, 0x5, &(0x7f00000010c0)=ANY=[@ANYBLOB="b702000000000000b70300000000000085000000c4000000b70000000100000095"], &(0x7f0000001100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000b40)={&(0x7f0000000b80)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="f1", 0x1}], 0x1}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000c80)={r2, r1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=@newlink={0x34, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4, 0x12}}}]}, 0x34}}, 0x0) write$cgroup_int(r3, &(0x7f0000000d00), 0xffffff6a) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e00)={'wg2\x00', 0x0}) write$cgroup_devices(r3, &(0x7f0000001140)={'a', ' *:* ', 'w\x00'}, 0x8) sendmsg$nl_route_sched(r5, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) sendfile(r0, r3, 0x0, 0xffffffff000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000002240)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002280), 0x0, 0x10, &(0x7f00000022c0), 0xfffffffffffffd00}, 0x48) executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc0100001900010000000000fddbdf25ffffffff000000000000000000000800ac1414bb0000000000000000000000004e22000bffff00000a0080005c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f64700000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000080000000000000000000000000000000000000000000000001010202000000004401050000000000000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000002020000000000000000000000000000ac1414aa000000000000000000000000000004d73c0000000a000000000000000000000000000000000000000200000000020000000200000008000000080000000000000000000000000000000000000000000032000000000000007f0000010000000000000000000000000000000003010000000000000002000000000000ac1e0101000000000000000000000000000000002b"], 0x1fc}, 0x1, 0x0, 0x0, 0x24060000}, 0x4804) executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xd, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000640000000000000003000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000b6ffffffb702000008000000b703000084200000850000007a00000095"], &(0x7f0000000640)='GPL\x00', 0x6}, 0x94) executing program 3: accept$packet(0xffffffffffffffff, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) r0 = socket(0x11, 0x2, 0x6) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x6a, 0x1, 0x0, 0xc) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffedd, 0x80400) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000800)='ns/cgroup\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000840)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x110, 0x210, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000d80), 0x0) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x9, r6, 0x4}, 0x38) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x34, r8, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0x5, 0x0, 0xdad1124f55525050, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x5c}, 0x94) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r4, @ANYBLOB="1400018008000100000001000500030003000000"], 0x2c}}, 0x0) sendto$packet(r1, 0xfffffffffffffffd, 0x0, 0x8000844, &(0x7f0000000540)={0x11, 0x17, r4, 0x1, 0x18, 0x6, @broadcast}, 0x14) setsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000580)="fbd691a560d2311bf45042ee630a7c2720f5b7dec34225a8a9a2339ad76086724eb25f66d30e37829edf521feab759bbbb6bc0a36182ebe8a7eb5bedaf64b4267c9eb29e1b5dbcae97a71f8c65be30f7285514bde847dcf9283f283b5b10f62a39c2984db9ce4d4399b7ea11877cee99849528f86319319fedd4d59d8f5eaa25076eb3f99b35699a68f560c97462df4340cda396197f5790010e05ee90534db1289ce9bf9473126ac1d3e1da66fd60f0b5e5319763e006822eeaf351a6cb", 0xbe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000fe000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000ffe800006608000000000000180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8df00000000bfa100000000000007010000f8ffffffb702000008000000b50afdfffffffffd85000000ad0008009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x3, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x45}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x28}}, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f0000492000/0xf000)=nil, 0xf000, 0x1000002, 0x12, r0, 0x0) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x3, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1e}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x3c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000007000000850000001b000000b700000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd28, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0xe00}}, 0x1c}}, 0x4000050) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000340)=0x7, 0x2) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000400)={'gre0\x00', r4, 0x7800, 0x0, 0x2, 0xfffffe01, {{0x2b, 0x4, 0x1, 0x4, 0xac, 0x68, 0x0, 0xc, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp_prespec={0x44, 0x34, 0x96, 0x3, 0x3, [{@local, 0x604a}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x4}, {@broadcast, 0x7ff}, {@empty, 0x40}, {@empty, 0xb}, {@rand_addr=0x64010101, 0x2}]}, @generic={0x88, 0x6, "036103fc"}, @timestamp_prespec={0x44, 0x3c, 0x1e, 0x3, 0x2, [{@local, 0x6}, {@private=0xa010100, 0x6}, {@broadcast, 0x1}, {@multicast1, 0x4}, {@broadcast}, {@local, 0x5}, {@remote, 0x5}]}, @lsrr={0x83, 0x1f, 0x90, [@multicast1, @rand_addr=0x64010102, @multicast1, @multicast1, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x41}]}]}}}}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x2200, 0x0) executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) recvmmsg(r10, 0x0, 0x0, 0x20, 0x0) sendto$inet(r9, &(0x7f0000000680)="1c", 0x10002, 0x0, 0x0, 0x0) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x15, 0x5b09, 0x7, 0x2, 0x3, 0x5, 0x7, 0x8, 0x5, 0x9, [0xce, 0x5, 0x2005, 0x40, 0x4, 0x3, 0x400e, 0xfb]}}) socket$pppl2tp(0x18, 0x1, 0x1) executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="21000000470010aaaaaaaaaa00030000000000000000000000000000000300000000000000000000000000000003000000000000000000000000000000000000000000000110000000000000", 0x4d) executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) bind$bt_hci(r1, &(0x7f0000001580)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="11000000e1feaa601f0b685870590e9afe73d936534f2ab96ecf5c8d991048c9b91937f49ef788d68d712df1cd7807bde3068b555ccb11ea71d5f2942053c6d41aebf6468cea8f5b08f0fc808b9ffce3ae41382529564d0d79946e1227c8f90e77de67995ddaf06cc70b14b74cf489210777c5e430682a301073ffd3ff023566ab436190f0ed2564b91e4618b18e386e5b10dcad445bae1831e03a167faa", 0xfffffffffffffeec) executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xcd83, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x9b}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2cae0}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000000)=@framed={{}, [@generic={0x4, 0x8, 0x1}, @map_fd={0x18, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @ldst={0x2, 0x3, 0x3, 0x6, 0xa, 0x50, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) executing program 33: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000000)=@framed={{}, [@generic={0x4, 0x8, 0x1}, @map_fd={0x18, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @ldst={0x2, 0x3, 0x3, 0x6, 0xa, 0x50, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) program crashed: INFO: task hung in synchronize_rcu bisect: bisecting 38 programs bisect: split chunks (needed=false): <38> bisect: split chunk #0 of len 38 into 3 parts bisect: testing without sub-chunk 1/3 testing program (duration=6m6s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 7, 3, 2, 30, 2, 13, 30, 20, 9, 4, 18, 2, 1, 30, 2, 9, 3, 11, 30, 3, 5, 3, 1, 1] detailed listing: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000018c0)=ANY=[@ANYBLOB="60000000410001000000000000000000030100000f0000003e00010000112233445566748899aabb86dd2c00001c0000000001000000010101010253aa58fe6cbdf03570650d05bc000000000000000000000000003d000004000280040003"], 0x60}}, 0x0) executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100840}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4004081) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025087000f6dbdf25010000000000000001410000001400170000000000076574683a6d"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000d0) executing program 5: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x3, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc0100001900010000000000fddbdf25ffffffff000000000000000000000800ac1414bb0000000000000000000000004e22000bffff00000a0080005c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f64700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000080000000000000000000000080ffffff000000000000000001010202000000004401050000000000000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000002020000000000000000000000000000ac1414aa000000000000000000000000000004d73c0000000a000000000000000000000000000000000000000200000000020000000200000008000000080000000000000000000000000000000000000000000032000000000000007f0000010000000000000000000000000000000003010000000000000002000000000000ac1e0101000000000000000000000000000000002b"], 0x1fc}, 0x1, 0x0, 0x0, 0x24060000}, 0x4804) executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2f, 0x98, 0x5, 0x101, 0x40, @mcast2, @mcast2, 0x80, 0x7, 0x5, 0x7}}) r2 = socket$unix(0x1, 0x1, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x7, 0x9, &(0x7f0000000700)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x2c, 0x0, 0x4, 0x1}, @initr0, @exit]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f0000000380)={&(0x7f00000003c0)=@xdp={0x2c, 0xdd8c, r4, 0x3e}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000480)="80", 0x1}], 0x1}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x8, 0xfff2}, {0x0, 0xa}, {0x7, 0xffff}}}, 0x24}}, 0x20000004) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000e4ef1f00680000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000800)={r5, 0x0, 0x0}, 0x20) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x3, @link_local, 'erspan0\x00'}}, 0x1e) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) r7 = socket$pppoe(0x18, 0x1, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r8, &(0x7f0000000580)={&(0x7f00000005c0)={0xa, 0x4e20, 0x7fffffff, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="3000000000000000290000000400000084023f04003f01f40402000304016b"], 0x30}, 0x40) connect$pppoe(r7, &(0x7f0000000500)={0x18, 0x0, {0x1, @multicast, 'ip_vti0\x00'}}, 0x1e) socket$netlink(0x10, 0x3, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000540)={0x18, 0x0, {0x1, @broadcast, 'tunl0\x00'}}, 0x1e) close(0x4) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRESDEC=r1, @ANYBLOB="800002000800000008001b000000000008002800a60b000008003a"], 0x38}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000240)={0x8, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x1, 'fo\x00', 0x0, 0x10000, 0x32}, 0x2c) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QGROUP_LIMIT(r10, 0x8030942b, &(0x7f0000000080)={0x0, {0x2b, 0x244c, 0x9, 0x101, 0x80}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'xfrm0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) executing program 0: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xb, 0x0, 0x0, 0x4, 0x2000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfeffffff}, 0x94) executing program 4: socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000"], 0x44}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) socket$kcm(0xa, 0x922000000003, 0x11) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000540)={'virt_wifi0\x00', @random="0200"}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000000780)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) executing program 5: ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000540)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x3, 0x0) close(0x3) (async) socket$netlink(0x10, 0x3, 0x10) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x76dc) (async) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000540)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000580)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001dc0)=""/4096, 0x1000}], 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002e00)=""/4096, 0x1000}, {0x0}, {0x0}], 0x3, &(0x7f0000003e00)=""/178, 0xb2}, 0x10}], 0x2, 0x23, 0x0) writev(r3, &(0x7f0000003ec0)=[{&(0x7f0000003f00)='.', 0x1}], 0x1) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000003f40)=0xffff1884, 0x4) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000140), &(0x7f0000000280)=r5}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89fe, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x11, 0x0, 0x1, 0x0, 0x3, 0x100}}) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000240)=[{{&(0x7f0000000280)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000340)={r6}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x3, 0x8008, 0x1, 0xa3a7, r6}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) r7 = socket$inet(0x2, 0x3, 0x33) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[], 0x64}}, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0xa2fac000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000010000300851000000600000018020000", @ANYRES32, @ANYBLOB="00000000200000006600020080ffffff18000000fffffffe00000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000740)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000780)=""/222}, 0x78) getsockopt$inet_mreqsrc(r7, 0x0, 0x53, &(0x7f0000000480)={@dev, @local, @broadcast}, &(0x7f00000004c0)=0x2000) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001340)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0xa}, {0x1}, {0x300, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xd}}]}}]}, 0x3c}}, 0x2400c890) executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x38, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x5, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x8}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xd0}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="40000000100039042cbd7000fbdbdf2500000000", @ANYRES32=r4, @ANYBLOB="11980400419804002000128008000100736974001400028008000300ac1414aa06000f0002"], 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x0, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @local}, 0x14) executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3, 0x2, {0xa, 0x4e21, 0x626, @loopback, 0x4}}}, 0x32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x268, 0x1, 0x5, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [{{0x254, 0x1, {{}, 0xf, 0x0, 0x7, 0x100, 0xb, 'syz0\x00', "628305ec51572f66b7dcc51228229157c9f2326be37bfbca815cfb622c37954e", "08ca8327c212d1209198cc7d937c84d2e392d37c58372d33776c9e4071bc9583", [{0xffff, 0x7, {0x2, 0xd6b}}, {0x7, 0x5, {0x0, 0x6}}, {0x0, 0x5e01, {0x2, 0x7f}}, {0x2b8, 0x7, {0x0, 0x93}}, {0x2, 0x9, {0x1, 0x1}}, {0x0, 0x401, {0x0, 0x3}}, {0x2, 0x4, {0x1, 0xc6}}, {0x40, 0x6, {0x2, 0x1}}, {0x18, 0x9, {0x2, 0x10001}}, {0x0, 0x5, {0x0, 0x4}}, {0x4, 0x0, {0x0, 0x5}}, {0x6, 0xfff7, {0x0, 0x3}}, {0x6, 0x800, {0x0, 0xa729}}, {0x7fff, 0x2, {0x2, 0x8}}, {0x3, 0x0, {0x3, 0x8000}}, {0x0, 0x1, {0x1, 0x6}}, {0xe0, 0x9, {0x1, 0xff}}, {0x3f, 0x853, {0x0, 0x3}}, {0x200, 0xd8, {0x3, 0x10001}}, {0x7, 0x20, {0x2, 0x100}}, {0x3, 0x800, {0x2, 0x3}}, {0x3, 0x1, {0x3, 0x7}}, {0x7, 0x7, {0x0, 0x7abfd8c2}}, {0x3, 0x9, {0x0, 0x6}}, {0x8, 0xf8, {0x2, 0x101}}, {0x7, 0x8, {0x1, 0x4}}, {0x3, 0x9, {0x0, 0x2691161b}}, {0x3, 0x8, {0x1}}, {0x2, 0x8, {0x0, 0x6}}, {0x1, 0x7, {0x2, 0x101}}, {0xf9b, 0x2, {0x1, 0x5}}, {0x3, 0x2, {0x3, 0x6}}, {0x4, 0x6c5, {0x0, 0x2}}, {0x1}, {0x6, 0xb1f4, {0x3, 0x1}}, {0x4, 0x4, {0x2, 0x10}}, {0x40, 0x10, {0x1, 0x57d}}, {0xd, 0x6, {0x2, 0x8}}, {0x5, 0x7, {0x3, 0xf7ffd310}}, {0x101, 0x1d6, {0x1, 0x8}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x1e, 0x5, &(0x7f00000010c0)=ANY=[@ANYBLOB="b702000000000000b70300000000000085000000c4000000b70000000100000095"], &(0x7f0000001100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000b40)={&(0x7f0000000b80)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="f1", 0x1}], 0x1}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000c80)={r2, r1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=@newlink={0x34, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4, 0x12}}}]}, 0x34}}, 0x0) write$cgroup_int(r3, &(0x7f0000000d00), 0xffffff6a) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e00)={'wg2\x00', 0x0}) write$cgroup_devices(r3, &(0x7f0000001140)={'a', ' *:* ', 'w\x00'}, 0x8) sendmsg$nl_route_sched(r5, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) sendfile(r0, r3, 0x0, 0xffffffff000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000002240)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002280), 0x0, 0x10, &(0x7f00000022c0), 0xfffffffffffffd00}, 0x48) executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc0100001900010000000000fddbdf25ffffffff000000000000000000000800ac1414bb0000000000000000000000004e22000bffff00000a0080005c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f64700000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000080000000000000000000000000000000000000000000000001010202000000004401050000000000000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000002020000000000000000000000000000ac1414aa000000000000000000000000000004d73c0000000a000000000000000000000000000000000000000200000000020000000200000008000000080000000000000000000000000000000000000000000032000000000000007f0000010000000000000000000000000000000003010000000000000002000000000000ac1e0101000000000000000000000000000000002b"], 0x1fc}, 0x1, 0x0, 0x0, 0x24060000}, 0x4804) executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xd, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000640000000000000003000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000b6ffffffb702000008000000b703000084200000850000007a00000095"], &(0x7f0000000640)='GPL\x00', 0x6}, 0x94) executing program 3: accept$packet(0xffffffffffffffff, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) r0 = socket(0x11, 0x2, 0x6) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x6a, 0x1, 0x0, 0xc) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffedd, 0x80400) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000800)='ns/cgroup\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000840)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x110, 0x210, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000d80), 0x0) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x9, r6, 0x4}, 0x38) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x34, r8, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0x5, 0x0, 0xdad1124f55525050, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x5c}, 0x94) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r4, @ANYBLOB="1400018008000100000001000500030003000000"], 0x2c}}, 0x0) sendto$packet(r1, 0xfffffffffffffffd, 0x0, 0x8000844, &(0x7f0000000540)={0x11, 0x17, r4, 0x1, 0x18, 0x6, @broadcast}, 0x14) setsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000580)="fbd691a560d2311bf45042ee630a7c2720f5b7dec34225a8a9a2339ad76086724eb25f66d30e37829edf521feab759bbbb6bc0a36182ebe8a7eb5bedaf64b4267c9eb29e1b5dbcae97a71f8c65be30f7285514bde847dcf9283f283b5b10f62a39c2984db9ce4d4399b7ea11877cee99849528f86319319fedd4d59d8f5eaa25076eb3f99b35699a68f560c97462df4340cda396197f5790010e05ee90534db1289ce9bf9473126ac1d3e1da66fd60f0b5e5319763e006822eeaf351a6cb", 0xbe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000fe000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000ffe800006608000000000000180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8df00000000bfa100000000000007010000f8ffffffb702000008000000b50afdfffffffffd85000000ad0008009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x3, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x45}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x28}}, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f0000492000/0xf000)=nil, 0xf000, 0x1000002, 0x12, r0, 0x0) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x3, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1e}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x3c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000007000000850000001b000000b700000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd28, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0xe00}}, 0x1c}}, 0x4000050) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000340)=0x7, 0x2) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000400)={'gre0\x00', r4, 0x7800, 0x0, 0x2, 0xfffffe01, {{0x2b, 0x4, 0x1, 0x4, 0xac, 0x68, 0x0, 0xc, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp_prespec={0x44, 0x34, 0x96, 0x3, 0x3, [{@local, 0x604a}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x4}, {@broadcast, 0x7ff}, {@empty, 0x40}, {@empty, 0xb}, {@rand_addr=0x64010101, 0x2}]}, @generic={0x88, 0x6, "036103fc"}, @timestamp_prespec={0x44, 0x3c, 0x1e, 0x3, 0x2, [{@local, 0x6}, {@private=0xa010100, 0x6}, {@broadcast, 0x1}, {@multicast1, 0x4}, {@broadcast}, {@local, 0x5}, {@remote, 0x5}]}, @lsrr={0x83, 0x1f, 0x90, [@multicast1, @rand_addr=0x64010102, @multicast1, @multicast1, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x41}]}]}}}}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x2200, 0x0) executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) recvmmsg(r10, 0x0, 0x0, 0x20, 0x0) sendto$inet(r9, &(0x7f0000000680)="1c", 0x10002, 0x0, 0x0, 0x0) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x15, 0x5b09, 0x7, 0x2, 0x3, 0x5, 0x7, 0x8, 0x5, 0x9, [0xce, 0x5, 0x2005, 0x40, 0x4, 0x3, 0x400e, 0xfb]}}) socket$pppl2tp(0x18, 0x1, 0x1) executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="21000000470010aaaaaaaaaa00030000000000000000000000000000000300000000000000000000000000000003000000000000000000000000000000000000000000000110000000000000", 0x4d) executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) bind$bt_hci(r1, &(0x7f0000001580)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="11000000e1feaa601f0b685870590e9afe73d936534f2ab96ecf5c8d991048c9b91937f49ef788d68d712df1cd7807bde3068b555ccb11ea71d5f2942053c6d41aebf6468cea8f5b08f0fc808b9ffce3ae41382529564d0d79946e1227c8f90e77de67995ddaf06cc70b14b74cf489210777c5e430682a301073ffd3ff023566ab436190f0ed2564b91e4618b18e386e5b10dcad445bae1831e03a167faa", 0xfffffffffffffeec) executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xcd83, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x9b}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2cae0}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000000)=@framed={{}, [@generic={0x4, 0x8, 0x1}, @map_fd={0x18, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @ldst={0x2, 0x3, 0x3, 0x6, 0xa, 0x50, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) executing program 33: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000000)=@framed={{}, [@generic={0x4, 0x8, 0x1}, @map_fd={0x18, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @ldst={0x2, 0x3, 0x3, 0x6, 0xa, 0x50, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) program did not crash bisect: testing without sub-chunk 2/3 testing program (duration=6m6s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 10, 5, 19, 10, 30, 30, 29, 32, 7, 1, 30, 6, 1, 30, 2, 9, 3, 11, 30, 3, 5, 3, 1, 1] detailed listing: executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18080000010000000000000000000000711247000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000240)="92", 0x1}], 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x158, 0x18c, 0x203, 0x158, 0x19030000, 0x248, 0x2e0, 0x2e0, 0x248, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0xffffff00, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x110, 0x158, 0x0, {0x1000000}, [@common=@unspec=@physdev={{0x68}, {'ip_vti0\x00', {}, 'veth0_macvtap\x00', {}, 0x1c, 0x11}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x8}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000008c0), r3) sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0000000000000000000200000000"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) openat$pidfd(0xffffffffffffff9c, 0x0, 0x2040, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f00000009c0)={0x9, {{0xa, 0x4e21, 0xffffffff, @mcast2, 0x200005}}}, 0x88) bind$inet6(r5, &(0x7f0000000a80)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x3e, &(0x7f0000000ac0)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) (async) pipe(&(0x7f0000000280)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="800000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000600012800b000100697036746e6c00005000028014000200fc0100000000000000000000000000000400130014000300fe8000000000000000000000000000aa0500060002000000080008003b000000080008002400000008000100026f24"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x3c, 0x40, 0x107, 0x70bd2e, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0xc, 0x1c2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}]}, @nested={0x1c, 0x9, 0x0, 0x1, [@nested={0x18, 0xff, 0x0, 0x1, [@typed={0x14, 0xe1, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c090}, 0x4c000) splice(r1, 0x0, r7, 0x0, 0xf3a, 0x9) executing program 1: socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080040"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f00000007c0)={0x64, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x400c040) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, &(0x7f0000000000), &(0x7f0000000340)=""/89}, 0x20) executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7, 0x0, 0x2d00}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000540)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r2, 0x29, 0x1a, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) connect$can_bcm(r4, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="0100000003000000640000000000000000000000000000000000000000000000000000000000000020a10700000000000200000001000000020000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="01000000030000006400000000000000000000000000000000000000000000000000000000000000020f5800000000000200000001000000", 0x38}], 0x1}}], 0x2, 0x20004090) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000700)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x38, 0x3a, 0x0, @remote, @local, {[], @dest_unreach={0x1, 0x3, 0x0, 0xf2, '\x00', {0x4, 0x6, '\x00', 0xd, 0x33, 0xff, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, [@hopopts={0x2b}]}}}}}}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000008c0)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xb, 0xfff2}, {0xe, 0xffff}, {0xb, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000040) executing program 1: socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080040"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002100)=@newtaction={0x2048, 0x30, 0xfbed, 0x70bd29, 0x25dfdbff, {}, [{0x4b8, 0x1, [@m_police={0x4b4, 0x1, 0x0, 0x0, {{0xb}, {0x488, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x7, 0x4, 0x4, 0x104, {0x1, 0x0, 0xffff, 0x1, 0x2, 0x200}, {0x6, 0x1, 0x4, 0x200, 0x81, 0x8}, 0x400, 0xfffffe01, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x200, 0x0, 0x0, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x40000, 0x2, 0x2, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x9, 0x0, 0x17a00, 0x0, 0x5, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8db, 0xffffffff, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x10, 0x0, 0x0, 0xf, 0x1, 0x7c, 0x0, 0x5, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xcd9, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4000, 0x10, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0xfffffff9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x319e, 0xfb18, 0x6, 0x9, 0x0, 0x484a, 0x0, 0x2, 0x0, 0x6, 0x0, 0xfffffffc, 0x9, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfbfffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x5a62, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0xff, 0xfffc, 0x5}, {0x5, 0x0, 0x0, 0x9, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x2}}}}]}, {0x1b7c, 0x1, [@m_police={0x990, 0x17, 0x0, 0x0, {{0xb}, {0x8c8, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x4e, 0x4, 0x7, 0x6, 0xc4a, 0xcb, 0x3, 0x0, 0x28509a2a, 0x135, 0x7, 0x1d000000, 0x2, 0x2, 0x3, 0x7a, 0x0, 0xf, 0x1000, 0xffff0952, 0x9, 0x8, 0x2, 0x81, 0x40, 0x2, 0xfff, 0x0, 0x46c, 0xfffffff7, 0xffffffaa, 0x0, 0x1d, 0x5, 0x1, 0x1, 0x6, 0x9, 0xe, 0x5, 0x9, 0xffff7fff, 0x3, 0x9, 0x8001, 0x8, 0xb155, 0x81, 0x4, 0xb, 0xffff655c, 0xa05, 0x1, 0x7, 0x0, 0x0, 0x8, 0x8f43, 0x4, 0x200, 0x3, 0x5, 0xfffffffc, 0x8000000, 0x80000001, 0x5, 0x6, 0xfff, 0x6, 0xfffffff2, 0x3, 0x4, 0xd3f, 0xf, 0x4, 0x8, 0x8, 0x9, 0x0, 0x6da8, 0x5, 0x4, 0xfffff750, 0x7, 0x2, 0x1ff, 0x7, 0x5, 0xd2, 0x19, 0x8001, 0xa82, 0x136d, 0xfffffffc, 0xb0f8, 0x8000, 0x6, 0x5a8000, 0x1, 0x0, 0x0, 0x6, 0x0, 0x2, 0x8, 0xe, 0x0, 0x0, 0x8, 0xdc, 0x7, 0x7, 0x502b, 0x0, 0x1, 0x3, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xff, 0x1000, 0x1, 0xfbb5, 0xc1f, 0xe91, 0x2, 0x9, 0x9, 0x3ff, 0x5, 0x8695, 0x7f000, 0x7, 0x7, 0x9, 0x8, 0x5, 0x61, 0x36, 0x6, 0x0, 0x800, 0x80000000, 0x10, 0x8e6e, 0x24000, 0x4, 0x7, 0x7fffffff, 0x6, 0x5, 0x1, 0x5891, 0x1ff, 0x3d0d, 0x7, 0x81, 0x8, 0x8, 0x7, 0x3, 0xffff, 0x7, 0x8, 0x4, 0xffff, 0xfffffffe, 0x2, 0xd, 0x7fff, 0x6, 0x7fff, 0xffffff0a, 0x6, 0x1ff, 0x0, 0x66a, 0x3, 0xd9a, 0x5, 0x10001, 0x1, 0xffff7980, 0x4, 0xff, 0x9, 0x4, 0x5, 0x205, 0x3500abae, 0x0, 0x2, 0x3, 0x0, 0x9, 0x8, 0x5, 0xd788, 0x3, 0x6a555965, 0xde10, 0xfffffff8, 0x10, 0x81, 0x400, 0x1000, 0x3ff, 0x6, 0x4, 0x3, 0x8, 0x3, 0xbfd6, 0x3, 0x6, 0x40, 0x3, 0x200, 0x0, 0x3, 0x3, 0x2, 0x5, 0x5, 0x8001, 0x401, 0x1, 0x25f, 0x1, 0x0, 0x80, 0x8, 0x43c, 0x8, 0x8001, 0x9, 0x22a6ae6e, 0xfffffff7, 0x4, 0x1, 0x2, 0xffffffff, 0x631, 0x5, 0x7ff, 0x0, 0xa5d9, 0xd, 0x80, 0x9, 0x10, 0x0, 0x70, 0xba7]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb443}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x10000000, 0x9, 0x284c, 0xb, {0xe, 0x2, 0x7, 0x2, 0x0, 0x4}, {0x6, 0x1, 0x9, 0x7, 0x400, 0x80000001}, 0x1, 0xe630, 0xffffffff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x800}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000001, 0x10000000, 0x3ff, 0x3, 0x0, {0x3, 0x2, 0xf801, 0x30, 0x3, 0x7}, {0x3d, 0x0, 0x7, 0x4, 0x6, 0x4}, 0x0, 0x8, 0x7fff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x401, 0x2, 0xfffff4ce, 0x1, 0xfffffffb, 0x9, 0x6, 0x4, 0x200, 0x65, 0x6, 0x10000, 0x6, 0x4, 0x7, 0xaa, 0x6, 0xcc, 0x2, 0xb6f, 0x4, 0x1, 0x5, 0xe, 0x200, 0x4, 0x9, 0x0, 0x7f, 0xe, 0x8, 0x3, 0x9, 0x0, 0x5, 0x8, 0x7, 0x7, 0x8, 0x4293, 0x4, 0xff, 0x0, 0x4, 0x1, 0x1, 0x1a, 0x4876, 0x7, 0xe69c, 0x2c, 0x6, 0x8, 0x80000001, 0x6, 0x6, 0x10001, 0x1, 0x6, 0x8, 0x3, 0x8071, 0xdd, 0xfffffffd, 0x8, 0x2, 0x2, 0x0, 0x3, 0x0, 0x9, 0x6, 0x0, 0x7, 0x0, 0x7, 0x3, 0xe, 0x9, 0x3, 0x5, 0x1ff, 0xc, 0x7, 0x6, 0xb, 0xed, 0xffff6658, 0x6, 0x8, 0x59a, 0x9, 0x10000, 0x0, 0x9, 0xd3, 0x4, 0x9, 0x5, 0x9, 0x800, 0x7, 0xff, 0x2, 0xfffffffb, 0xf, 0x9, 0x3, 0x7, 0xff, 0x1, 0x7, 0x3, 0x4, 0xa, 0x10001, 0x3, 0x1, 0x7fffffff, 0x3, 0xf2, 0x7240, 0x6, 0xbb4f, 0x10000, 0xa51, 0x0, 0x9, 0xd12, 0xf, 0x4, 0x401, 0x63, 0x7, 0x7, 0x8, 0x5, 0x4, 0x7, 0x4, 0x8, 0x1, 0x2, 0x9, 0x1, 0x7f, 0x8, 0x7, 0xf, 0x8, 0x8, 0x3, 0x1, 0x2, 0x3ff, 0x6, 0x3ff, 0x2, 0x0, 0x3, 0x3ff, 0x100, 0x3, 0x401, 0x1, 0xddf, 0x6, 0x2, 0x1, 0x1, 0x100, 0x7, 0x7, 0x4, 0x2, 0x2, 0x3, 0x2b61, 0x10000, 0x0, 0x6, 0x4, 0x0, 0x5, 0x2a0cda44, 0x1, 0x5, 0x0, 0x1488, 0x8, 0x5, 0x2, 0x9, 0x5d, 0xa, 0xc2e0, 0x4, 0x9, 0x3, 0x52f, 0x6e, 0xc, 0x2, 0x3ea, 0x3, 0x7, 0xb, 0x2, 0x0, 0x9, 0xb2, 0xffff0001, 0x3, 0x4, 0x7, 0x100, 0x10001, 0x8, 0xd9, 0x6, 0x691, 0x0, 0x7fffffff, 0x1, 0x3, 0x5, 0x4, 0x7, 0x7ff, 0x9, 0x5, 0x80000000, 0xfffff305, 0x401, 0x714, 0xc9c1, 0x4, 0x6f, 0x8, 0xe0000000, 0xf, 0x2, 0xf7e7, 0xd5b2, 0xd03b, 0x1, 0x3, 0x2, 0x10, 0x9, 0x21, 0x101, 0x7, 0x75b6, 0x9]}]]}, {0x9e, 0x6, "23c2764c66a66f415ca90dc2ba6ece8d2061b8e04615e7f88c77433986ff71c33d6616579eec03f717b7a3420ea1e0208b74c78f705e087044359e14f830c512117c14d80944080e0a0edaeab4fda7aa189762909856f1e7bac8be60900f7263ab1a5b73c000dd658ab4523565e53a73b7a145e4bb59432e77083228a9e8fbc74b135c9edd2b95afb9bec4b44ff59cd1154ae51d854cca3b47e1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0x10a0, 0x18, 0x0, 0x0, {{0xa}, {0xfe8, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x120, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x9, 0x6, 0x0, 0x5, 0x1ff}, 0x2, 0x9, [{0x80, 0xffffffff, 0x200, 0x4, 0x3, 0x9}, {0x6, 0x3, 0x4, 0x800, 0x81a, 0x8001}]}, [{0x7, 0x3000000, 0x6090, 0x7, 0x7, 0x3}, {0x4, 0x6, 0xfffffffd, 0x59d, 0x800, 0x2}, {0x2, 0x3, 0x7, 0x7fffffff, 0x200, 0x8}, {0x0, 0x2, 0x4, 0x6b0, 0x0, 0x8}, {0x8001, 0x3f3, 0x8, 0x8, 0xff, 0xce40}, {0x49, 0x8, 0xf25, 0x6, 0xc, 0xe}, {0x6, 0x3ff, 0x463, 0x1, 0x6, 0x7}, {0x0, 0x7, 0x6, 0x8001, 0x6, 0xdfc}, {0xb, 0x2, 0x0, 0x8, 0x8, 0x5}, {0x10001, 0x2fdb23b5, 0x101, 0xffffffff, 0x4, 0x4}, {0x5, 0x3, 0x4994, 0xa, 0x9, 0x7fffffff}, {0x0, 0x3, 0xffffff04, 0x2, 0x0, 0x5}, {0xc6, 0x2, 0x8, 0x1, 0xe, 0x6b7}, {0x4, 0x1, 0x25a, 0x1, 0x4, 0x100}, {0x7fff, 0x6, 0x5, 0x3, 0x0, 0xd36}, {0xfffff1eb, 0x9, 0x4, 0x1, 0x4, 0x8}, {0x5, 0x40, 0x7, 0x7, 0x1, 0x7ff}, {0x9, 0x1, 0x8000, 0x9, 0x6, 0x7}, {0x9493, 0x10000, 0x6, 0xfffffffa, 0x1, 0x3}, {0x3, 0xfffffffc, 0x5, 0xfffffffe, 0x3, 0x81}, {0x10, 0xd6, 0x6, 0xf6, 0xe13, 0x3ff}, {0xffffffff, 0x5, 0x101, 0x6, 0x5ad6c41b, 0x8}, {0x0, 0xfff, 0xad, 0x2, 0x3, 0x3}, {0x3, 0x6, 0x7, 0x3, 0x0, 0x4}, {0x2, 0x1464fb74, 0x4, 0x401, 0x9, 0x4}, {0xff, 0x6, 0x0, 0x4, 0x2, 0xc19}, {0x0, 0x4, 0x4, 0x5, 0x10001, 0x2}, {0x3f, 0x5, 0x28, 0x3ff, 0x4, 0x10001}, {0x0, 0x0, 0x400, 0x2, 0x153, 0x8}, {0x6, 0x100, 0x10000, 0x5, 0x1, 0x1000}, {0x0, 0x5893, 0x45, 0x9, 0x9, 0xffffffff}, {0x8, 0x1b045b80, 0x14f, 0x495, 0x1, 0xffff493a}, {0x0, 0x5, 0x81, 0x5, 0xffffffff, 0x100}, {0x4a2, 0x0, 0x687d91d5, 0xe, 0x100, 0x6}, {0x3, 0x9, 0xa90f, 0x8, 0x3, 0x100}, {0x1, 0x101, 0x8, 0xfff, 0x6, 0xd4}, {0xd81, 0x81, 0xffffff00, 0x4, 0x0, 0xffff7fff}, {0x9, 0x7, 0x1, 0x3, 0xd, 0xf1a}, {0x4, 0x5, 0x3, 0x7, 0x6, 0x6}, {0x1, 0xffffffff, 0x4, 0x8, 0x6, 0x9}, {0x3, 0x8001, 0x1eb, 0x7f, 0xc0000000, 0x3}, {0x7f, 0x3, 0x4be9, 0x400, 0x2, 0x9}, {0x7, 0x3ff, 0x76e, 0x4, 0xf, 0x6}, {0x3, 0x10001, 0x8, 0xe, 0x6, 0xfffffffa}, {0x40, 0x800, 0x709, 0x5, 0xe, 0x6}, {0x1, 0x2, 0xb, 0x10000, 0x9, 0xffffffff}, {0x9e6, 0x7fffffff, 0xcdde, 0x3, 0x101, 0xffff}, {0xe7ad, 0xdc, 0x1, 0xb0, 0x1, 0x943}, {0x6, 0x200, 0xfff, 0x6, 0xccc, 0xfffffff9}, {0x7f, 0x10001, 0xc0, 0x1000, 0x3, 0x9}, {0x3, 0x3, 0x7fffffff, 0xffff8000, 0x2, 0x5}, {0x10000, 0x9, 0x9, 0x6, 0x7ff, 0x6a9a}, {0x80000001, 0x6, 0x800, 0x6, 0x8, 0x1000}, {0x40, 0x5, 0x3, 0x0, 0x2, 0x800000}, {0x9, 0x800, 0x1, 0x9, 0x10, 0xb5e}, {0x44, 0x1, 0x4, 0x8, 0x7}, {0x40, 0x6, 0x7, 0xfffffffc, 0x8, 0x9}, {0x1, 0x9, 0x7f, 0x2, 0x7ff, 0x1000}, {0xf, 0x4, 0x7, 0xfc0d, 0xfffffffb, 0x4}, {0x7, 0x3ff, 0x4, 0x6, 0x0, 0x8}, {0x6f5d4296, 0x0, 0x6b5, 0x3, 0x5, 0x4}, {0x400, 0x7, 0x74, 0x3, 0xc280, 0x3}, {0x8, 0x8001, 0x4, 0x9, 0xf, 0x14ef}, {0x5, 0x8, 0x2, 0x2d0a7794, 0x0, 0x7}, {0x7, 0x3, 0x4, 0x2, 0x6, 0x9}, {0x7, 0x9, 0x9, 0x1, 0x8, 0x2}, {0x100, 0x3, 0x8000, 0xf2, 0x3, 0xfffffff1}, {0x2e, 0x3, 0x1000, 0x1, 0x8080, 0x779}, {0x4, 0x6, 0x1, 0xffffffff, 0x6753, 0xfc}, {0x400, 0x1000, 0x8000, 0x1, 0x4e, 0xb85}, {0x3ff, 0xa, 0x401, 0xfffffffc, 0x1, 0x7}, {0x2, 0xa, 0x4, 0x4, 0x5}, {0x7, 0x401, 0x656f, 0xb02, 0x7fffffff, 0x1}, {0x9, 0xffff, 0x1, 0x7f, 0x7, 0x1}, {0xfffffff1, 0x6, 0x0, 0x2, 0x7, 0x4}, {0x4, 0x1, 0x3, 0x3, 0x76d, 0x9}, {0x0, 0x1, 0x10, 0x3, 0x8, 0x800000}, {0x101, 0x32fcbbca, 0x5, 0x6, 0x9, 0x10001}, {0x9, 0x7b7c, 0x1, 0x10001, 0x44, 0x35}, {0x2, 0x5, 0x3, 0x40, 0x2, 0x9}, {0x9, 0xdbe, 0x9, 0x1, 0x101, 0x8001}, {0x373, 0x10, 0x10001, 0x3, 0xc6, 0x1}, {0x5, 0x9, 0x3, 0x5, 0x4, 0x604d}, {0xb, 0x5, 0xbb43, 0x800, 0x1, 0x5}, {0xffff, 0x2, 0x5, 0x8, 0x9, 0xfffffc01}, {0xc1e0, 0x0, 0x7, 0x1, 0x4, 0x7a}, {0x5, 0x6, 0x48, 0x0, 0x3, 0x3}, {0xfff, 0x1, 0xf5, 0xc7bd, 0x9, 0x2}, {0x6, 0x1, 0xb82, 0x3, 0x2, 0xc8}, {0x7, 0x50, 0xa8, 0x5, 0x9, 0x6}, {0x5c9a, 0x10000, 0xa44, 0x4, 0x4, 0x7}, {0x4, 0x101, 0x0, 0x8, 0xfff, 0x2}, {0x4, 0x476, 0x1a, 0x8, 0xfff, 0x9eac}, {0x7, 0x3ff, 0xba, 0x9, 0x6, 0x7}, {0x8, 0x9b20, 0x6, 0xdb2, 0x2, 0x5}, {0x2, 0xffffffff, 0x80, 0x5, 0xd, 0x3}, {0x884f, 0x8001, 0x0, 0x0, 0x4, 0x7}, {0x9, 0xef9, 0x9, 0x5, 0x80000000, 0x4}, {0x9, 0x45b5, 0x9, 0x80000001, 0x8, 0x8}, {0x8, 0x10000, 0x80, 0xf4, 0x6, 0x8}, {0x40, 0x3, 0xffffff0c, 0x7, 0x9, 0x1ff}, {0x1, 0x2, 0x2, 0x2, 0x7fffffff, 0xa}, {0x2, 0x4, 0x40, 0x0, 0x5, 0x6}, {0x3, 0xfffffff9, 0xffffffff, 0x695a, 0x7fff, 0x3}, {0x10001, 0x0, 0x1, 0x80000001, 0x7fffffff}, {0xe31, 0xfffffff9, 0x8, 0x7fff, 0xffffffff, 0x4}, {0x7, 0x3, 0x4, 0x7, 0x3, 0x8}, {0x4, 0x5, 0x8, 0x80000001, 0x0, 0xe}, {0x1, 0x2, 0x5, 0xd79a, 0x9, 0x573}, {0xfb5, 0x0, 0x3ff, 0x1, 0x7, 0x6}, {0x5d52, 0x1, 0x3, 0x800, 0xfffffffa, 0x1}, {0x0, 0x4547929a, 0x3, 0x9, 0x0, 0x3}, {0x8, 0x4, 0x24e, 0xfffffc00, 0x5, 0x7fffffff}, {0xffffffff, 0x1000, 0xabdc, 0x2, 0x8, 0x8d4}, {0x4a4, 0x800, 0x9, 0x4, 0x7, 0x7}, {0x400, 0x5, 0x40, 0x9, 0x4}, {0xc, 0x80000001, 0xff, 0x4794, 0x4, 0x8000}, {0x6b, 0x40000000, 0xe7, 0x5, 0x7, 0x1}, {0xf, 0x4, 0x4e, 0x54b, 0x6, 0x1800000}, {0x259a, 0x4, 0x271, 0x0, 0xc, 0x4154}, {0x2558, 0x8, 0x4, 0x9, 0x0, 0x7ff}, {0x3, 0xfdc, 0x2, 0x3, 0x3, 0x6000000}, {0xa886, 0x2, 0x100, 0x2, 0x6, 0x100000}, {0x2, 0x7, 0xdf, 0xffffffff, 0x8, 0x7}, {0x10000, 0x8, 0x1aaa, 0x4, 0xfffffc01, 0x7}, {0xfffffffb, 0x4, 0x5, 0xd0dc, 0xcbfb6e2e, 0x9}, {0x4, 0x6, 0x3ff, 0x4, 0x2, 0xd}, {0x3, 0x9a3, 0xb, 0xfffffff8, 0xa70, 0xbb6}], [{0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0xc46745db527aa97c}, {0x1, 0x1}, {0x2}, {0x2}, {0x2}, {0x4}, {}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x2}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x4}, {0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x28413516a6d35902}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x7}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x6789d3a6ac3f9997}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x2}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {}, {}, {0x2}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x74, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x90, 0x6, "0a1c28a2ddb6be88c573cb77336fc8faa809c0308044931a6f4793c352b3f116867065cd65ed4da26aa3f02331a494f9cfcf6d3cacb45d29418869367fa04f8683b379446435cf6e538a0860a6166344f449ec4de9aa81326510ca2734b2e8f6c8bbcd4049f2597ca4c047a31c1de423762c91f0f5c8be05828ab439b698921201e6861bf429daf41df50a1b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0x98, 0x1b, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x200, 0x6, 0x10000000, 0xfffffff3, 0x6}}]}, {0x52, 0x6, "9dab6494606e7bd0b6c1dc41f10cb4115fdb57690343ad63c5fad28f61a8a8aabe27aeef5c1ded6db03761e2a7c458babb4cd20657f47c21d31a7eb9691f17d0f4d29505e2ba3dc555ee91b340eb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x58, 0x9, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x96, 0x20000000, 0x4, 0x4}, 0x10}}]}, {0xa, 0x6, "f293d5d81fc7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0x58, 0x2, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0xfff, 0x5, 0x3, 0x3c4}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1000}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7aa2323ff961cf96, 0x2}}}}]}]}, 0x2048}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f00000007c0)={0x64, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x400c040) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, &(0x7f0000000000), &(0x7f0000000340)=""/89}, 0x20) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) close(r2) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000580)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000700)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x40, &(0x7f0000000740)={0x11, 0x8100, r4, 0x1, 0xda, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'geneve0\x00'}) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'veth0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r10, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000240)=0xffffffff, 0x4) r12 = socket(0x18, 0x1, 0xff) sendmmsg(r10, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000300)=[{&(0x7f0000000340)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r12, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="000001000606e7ff0903"], 0xc) sendmsg$nl_route_sched(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r11, {0x2, 0x8}, {0xf, 0xc}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x54) r13 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_inet_SIOCGIFADDR(r13, 0x8915, &(0x7f00000000c0)={'team_slave_0\x00', {0x2, 0x0, @empty}}) executing program 32: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) close(r2) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000580)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000700)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x40, &(0x7f0000000740)={0x11, 0x8100, r4, 0x1, 0xda, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'geneve0\x00'}) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'veth0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r10, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000240)=0xffffffff, 0x4) r12 = socket(0x18, 0x1, 0xff) sendmmsg(r10, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000300)=[{&(0x7f0000000340)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r12, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="000001000606e7ff0903"], 0xc) sendmsg$nl_route_sched(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r11, {0x2, 0x8}, {0xf, 0xc}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x54) r13 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_inet_SIOCGIFADDR(r13, 0x8915, &(0x7f00000000c0)={'team_slave_0\x00', {0x2, 0x0, @empty}}) executing program 5: bind$inet(0xffffffffffffffff, &(0x7f000000df80)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f000000dfc0)=0x7, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f000000e000)=0x40000401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f000000e040)=0x800001, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f000000e140), 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f000000e1c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e200)={0x11, 0x1c, &(0x7f000000e2c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0xfffe, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f000000e3c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r1, &(0x7f000000e080)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f000000e0c0)=0x2, 0x4) bind$inet6(r0, &(0x7f000000e100)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) listen(0xffffffffffffffff, 0xb5d6) listen(r0, 0xe0a5) socket$nl_route(0x10, 0x3, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f000000dcc0)={0x1, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f000000dd00)=r4, 0x4) r6 = bpf$ITER_CREATE(0x21, &(0x7f000000dd40)={r5}, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f000000de40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f000000de80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f000000dec0)={0x0, 0x0, &(0x7f000000df00)={&(0x7f000000df40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000040000003900000008000300", @ANYRES32=r9, @ANYBLOB="20005a801c000400060001"], 0x3c}, 0x1, 0x0, 0x0, 0x24040887}, 0x0) read(r6, &(0x7f000000dd80)=""/185, 0xb9) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$NS_GET_PARENT(r10, 0x8004b709, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000dac0)={0x0, 0x0, &(0x7f000000db00)={&(0x7f000000db40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f000000dbc0)={0x0, 0x0, &(0x7f000000dc00)={&(0x7f000000dc40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x25, 0x301, 0xfffffffe, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r8, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x44008000}, 0x20000040) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c8c0}, 0x5bfc820b5ab7c22c) r10 = socket(0x10, 0x1, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x25, 0x301, 0xfffffffe, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x44801}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r3) (async) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r3) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000004c0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r8, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x44008000}, 0x20000040) (async) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c8c0}, 0x5bfc820b5ab7c22c) (async) socket(0x10, 0x1, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000900000000000000e7000000731142000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) select(0x40, &(0x7f0000000240)={0x6}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x2}) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xd, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000640000000000000002000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000b6ffffffb702000008000000b703000084200000850000007a00000095"], &(0x7f0000000640)='GPL\x00', 0x6}, 0x94) executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0x0, 0x0, 0xff, 0x100fffe00], [0xffffff00, 0xffffffff, 0xff], 'team_slave_0\x00', 'nr0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0xb, 0xfffffff8, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x1, 'syz0\x00', 0xfe}}, @common=@unspec=@cpu={{0x28}, {0xffffffff, 0x1f}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4ef) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sk_skb}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000800), 0x1, 0x0) accept(0xffffffffffffffff, &(0x7f0000000840)=@l2tp={0x2, 0x0, @initdev}, &(0x7f00000008c0)=0x80) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000950000000000000043500998bccda9e8b4796306abc2bf33cc93ed536c596ac4c96286fc783ac9ab5d051c83e7c618"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18}, 0x94) bind$alg(r1, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000a80)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000ac0)=[{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b40)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000b80)="ebe3a0e9796cfd1647e299f4e376fdba128280b3", 0x14}, {&(0x7f0000000bc0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000cc0)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f0000000d00)={0x0, 0x500, &(0x7f0000000d40)=[{&(0x7f0000000d80)=""/81, 0x7ffff000}, {&(0x7f0000000e00)=""/83, 0x20000253}], 0x2}, 0x0) sendto$inet(r2, &(0x7f0000001500)="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", 0x12e, 0x20044004, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000f00)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="18000000101420002cbd7000fddbdf2508004c0000000000fee85a49a5b2be053e9bfd2e2907cdf94b0c68de95314b6555672737903700684ba39bff5d1dfc0c5feacb226e9b14ad942910ffc28f778c3ba1ecea0537db737398be6d2f3b31af3782ef7dc04e8dc6f9956b3e7a03e4bbc7712511e893ea19934e249f144ce60126d8cc76f2d025bc518b1e9053f0191766c54a108c9d2a284fb92d568f568a2af2e2f3de"], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000001080), 0x6) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f00000010c0)) r5 = socket$inet(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x11, 0x13, &(0x7f00000011c0)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000001280)='GPL\x00', 0xa, 0xff5c, &(0x7f00000012c0)=""/222, 0x0, 0x8}, 0x78) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000013c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000001400)=ANY=[], 0x32600) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r3, 0x7171e000) connect$inet(r5, &(0x7f0000001440)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r7 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000001480)={0x0, 0x8}, &(0x7f00000014c0)=0x8) ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000001500)) executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x1000700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv4_delroute={0x24, 0x19, 0x1, 0x71bd2b, 0x0, {0x2, 0x18, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x1000}, [@RTA_PREFSRC={0x8, 0x15, @dev={0xac, 0x14, 0x14, 0x38}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000200)={{r0, &(0x7f0000000000)='*%/!\xfa\x00', 0x0, &(0x7f0000000040)={@align=0xffffffff, {0x5, 0x2, 0x7}}, 0x2, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000100)}, {[0x7fffffff, 0x7fffffff, 0x1117]}, 0x1, 0xb0, &(0x7f0000000140)=""/176}) writev(r1, &(0x7f00000007c0)=[{&(0x7f0000000380)="b65b754d082711f4e0cb640f9e8e64d68bc57b8607186580252483e0c966724c7c8380c9a05a9c0be0a93cb348674cf28c9e6ff19e84bbfc7e6cae9c2d1273cde05a1bbfc936", 0x46}, {&(0x7f0000000400)="6093c6ffe5d854e9b299b5cdafa4e985c499aa5da488735c5093a25327ed1e68cbf58650920d6dae40a793d90df734de56ebbfd2d66839ddf0d1ac630f9775b6e91fbe38f0512944c5099234f7dad20f885b1fb5b5a333d0d940d29b153e267058a39f3697b4da0dcf9756bfa71b65ba6d", 0x71}, {&(0x7f0000000480)="926530d298d5b8274cab2feab0c527f6b919807f77fdc3c860ec35b1ed18529261e468e9adf2995b5fcc32aabdc398df248165b79c67d313c2d8d9fde172707979c4b4953bdf6c36b579f9b8e80ead4c7c1f4ca7153258858677fe", 0x5b}, {&(0x7f0000000500)="3d22ef98ae489d5640f9f66de38b97af4280f56577d9e12367fec4aa9e2ad17a27d6002a88a5", 0x26}, {&(0x7f0000000540)="83088c27f386aaca01edec147b0d35029aee6654ed6c2b396fdf41305f02b2ac761cba3c12f3437bb3a7e0c98b0ad2b9658e170064b7f0e0055a891d1a147dac1442", 0x42}, {&(0x7f00000005c0)="4028ca6f09667e222bc39e48cd8660735405b629a500cdfb6caa08064a9eb4797014636ffa7e5c8c81e61481f586fe4ac15df30c6ed4d705792e47310a837751b67be77019438ed6fb12bee3e7c5354c32f8191db714fcdb0d48", 0x5a}, {&(0x7f0000000640)="53b015fc9c7e6b60c8cc9e03c626a27c3365804859c919b45a149c4e1ab6cdb2287199f6345c435cff942c386435404a749188c9fdc935c94c766147e2c210aa8d5182dfffc23845e7619f094293d228f4068aabf589bfd59912d662c4fb5753d3bdac263c00a3867516f442950b14", 0x6f}, {&(0x7f00000006c0)="3a51faea4e7a34a36ff05a3e2aabe2471f517ccac7d3b6cdf5da89b9c5db9ce06196d40ce125f45c4c0bd372140199f7a9a06b3848524c15bc89051c31cf3fcf4609dc55dde2d647d93dea8cd5d88df8c0061b059b02f9ea80942278b7ab332379131b7107f86ddaac1f24393c6f14efc94048ad8619dc8218ad0d0855293e62cd3d764ebdd853217fa7a776ce7b5c7b1e6cf0310a6ee059c1e59f7c30c3416239711c", 0xa3}, {&(0x7f0000000780)="9499a5ded6613be0a3a3be23e790", 0xe}], 0x9) executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xd, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000640000000000000003000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000b6ffffffb702000008000000b703000084200000850000007a00000095"], &(0x7f0000000640)='GPL\x00', 0x6}, 0x94) executing program 3: accept$packet(0xffffffffffffffff, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) r0 = socket(0x11, 0x2, 0x6) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x6a, 0x1, 0x0, 0xc) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffedd, 0x80400) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000800)='ns/cgroup\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000840)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x110, 0x210, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000d80), 0x0) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x9, r6, 0x4}, 0x38) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x34, r8, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0x5, 0x0, 0xdad1124f55525050, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x5c}, 0x94) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r4, @ANYBLOB="1400018008000100000001000500030003000000"], 0x2c}}, 0x0) sendto$packet(r1, 0xfffffffffffffffd, 0x0, 0x8000844, &(0x7f0000000540)={0x11, 0x17, r4, 0x1, 0x18, 0x6, @broadcast}, 0x14) setsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000580)="fbd691a560d2311bf45042ee630a7c2720f5b7dec34225a8a9a2339ad76086724eb25f66d30e37829edf521feab759bbbb6bc0a36182ebe8a7eb5bedaf64b4267c9eb29e1b5dbcae97a71f8c65be30f7285514bde847dcf9283f283b5b10f62a39c2984db9ce4d4399b7ea11877cee99849528f86319319fedd4d59d8f5eaa25076eb3f99b35699a68f560c97462df4340cda396197f5790010e05ee90534db1289ce9bf9473126ac1d3e1da66fd60f0b5e5319763e006822eeaf351a6cb", 0xbe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000fe000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000ffe800006608000000000000180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8df00000000bfa100000000000007010000f8ffffffb702000008000000b50afdfffffffffd85000000ad0008009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x3, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x45}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x28}}, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f0000492000/0xf000)=nil, 0xf000, 0x1000002, 0x12, r0, 0x0) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x3, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1e}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x3c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000007000000850000001b000000b700000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd28, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0xe00}}, 0x1c}}, 0x4000050) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000340)=0x7, 0x2) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000400)={'gre0\x00', r4, 0x7800, 0x0, 0x2, 0xfffffe01, {{0x2b, 0x4, 0x1, 0x4, 0xac, 0x68, 0x0, 0xc, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp_prespec={0x44, 0x34, 0x96, 0x3, 0x3, [{@local, 0x604a}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x4}, {@broadcast, 0x7ff}, {@empty, 0x40}, {@empty, 0xb}, {@rand_addr=0x64010101, 0x2}]}, @generic={0x88, 0x6, "036103fc"}, @timestamp_prespec={0x44, 0x3c, 0x1e, 0x3, 0x2, [{@local, 0x6}, {@private=0xa010100, 0x6}, {@broadcast, 0x1}, {@multicast1, 0x4}, {@broadcast}, {@local, 0x5}, {@remote, 0x5}]}, @lsrr={0x83, 0x1f, 0x90, [@multicast1, @rand_addr=0x64010102, @multicast1, @multicast1, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x41}]}]}}}}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x2200, 0x0) executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) recvmmsg(r10, 0x0, 0x0, 0x20, 0x0) sendto$inet(r9, &(0x7f0000000680)="1c", 0x10002, 0x0, 0x0, 0x0) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x15, 0x5b09, 0x7, 0x2, 0x3, 0x5, 0x7, 0x8, 0x5, 0x9, [0xce, 0x5, 0x2005, 0x40, 0x4, 0x3, 0x400e, 0xfb]}}) socket$pppl2tp(0x18, 0x1, 0x1) executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="21000000470010aaaaaaaaaa00030000000000000000000000000000000300000000000000000000000000000003000000000000000000000000000000000000000000000110000000000000", 0x4d) executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) bind$bt_hci(r1, &(0x7f0000001580)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="11000000e1feaa601f0b685870590e9afe73d936534f2ab96ecf5c8d991048c9b91937f49ef788d68d712df1cd7807bde3068b555ccb11ea71d5f2942053c6d41aebf6468cea8f5b08f0fc808b9ffce3ae41382529564d0d79946e1227c8f90e77de67995ddaf06cc70b14b74cf489210777c5e430682a301073ffd3ff023566ab436190f0ed2564b91e4618b18e386e5b10dcad445bae1831e03a167faa", 0xfffffffffffffeec) executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xcd83, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x9b}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2cae0}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000000)=@framed={{}, [@generic={0x4, 0x8, 0x1}, @map_fd={0x18, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @ldst={0x2, 0x3, 0x3, 0x6, 0xa, 0x50, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) executing program 33: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000000)=@framed={{}, [@generic={0x4, 0x8, 0x1}, @map_fd={0x18, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @ldst={0x2, 0x3, 0x3, 0x6, 0xa, 0x50, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) program crashed: INFO: task hung in genl_rcv_msg bisect: the chunk can be dropped bisect: testing without sub-chunk 3/3 testing program (duration=6m3s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [30, 10, 5, 19, 10, 30, 30, 29, 32, 7, 1, 30, 6] detailed listing: executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18080000010000000000000000000000711247000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000240)="92", 0x1}], 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x158, 0x18c, 0x203, 0x158, 0x19030000, 0x248, 0x2e0, 0x2e0, 0x248, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0xffffff00, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x110, 0x158, 0x0, {0x1000000}, [@common=@unspec=@physdev={{0x68}, {'ip_vti0\x00', {}, 'veth0_macvtap\x00', {}, 0x1c, 0x11}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x8}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000008c0), r3) sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0000000000000000000200000000"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) openat$pidfd(0xffffffffffffff9c, 0x0, 0x2040, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f00000009c0)={0x9, {{0xa, 0x4e21, 0xffffffff, @mcast2, 0x200005}}}, 0x88) bind$inet6(r5, &(0x7f0000000a80)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x3e, &(0x7f0000000ac0)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) (async) pipe(&(0x7f0000000280)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="800000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000600012800b000100697036746e6c00005000028014000200fc0100000000000000000000000000000400130014000300fe8000000000000000000000000000aa0500060002000000080008003b000000080008002400000008000100026f24"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x3c, 0x40, 0x107, 0x70bd2e, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0xc, 0x1c2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}]}, @nested={0x1c, 0x9, 0x0, 0x1, [@nested={0x18, 0xff, 0x0, 0x1, [@typed={0x14, 0xe1, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c090}, 0x4c000) splice(r1, 0x0, r7, 0x0, 0xf3a, 0x9) executing program 1: socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080040"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f00000007c0)={0x64, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x400c040) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, &(0x7f0000000000), &(0x7f0000000340)=""/89}, 0x20) executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7, 0x0, 0x2d00}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000540)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r2, 0x29, 0x1a, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) connect$can_bcm(r4, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="0100000003000000640000000000000000000000000000000000000000000000000000000000000020a10700000000000200000001000000020000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="01000000030000006400000000000000000000000000000000000000000000000000000000000000020f5800000000000200000001000000", 0x38}], 0x1}}], 0x2, 0x20004090) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000700)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x38, 0x3a, 0x0, @remote, @local, {[], @dest_unreach={0x1, 0x3, 0x0, 0xf2, '\x00', {0x4, 0x6, '\x00', 0xd, 0x33, 0xff, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, [@hopopts={0x2b}]}}}}}}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000008c0)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xb, 0xfff2}, {0xe, 0xffff}, {0xb, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000040) executing program 1: socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080040"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002100)=@newtaction={0x2048, 0x30, 0xfbed, 0x70bd29, 0x25dfdbff, {}, [{0x4b8, 0x1, [@m_police={0x4b4, 0x1, 0x0, 0x0, {{0xb}, {0x488, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x7, 0x4, 0x4, 0x104, {0x1, 0x0, 0xffff, 0x1, 0x2, 0x200}, {0x6, 0x1, 0x4, 0x200, 0x81, 0x8}, 0x400, 0xfffffe01, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x200, 0x0, 0x0, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x40000, 0x2, 0x2, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x9, 0x0, 0x17a00, 0x0, 0x5, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8db, 0xffffffff, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x10, 0x0, 0x0, 0xf, 0x1, 0x7c, 0x0, 0x5, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xcd9, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4000, 0x10, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0xfffffff9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x319e, 0xfb18, 0x6, 0x9, 0x0, 0x484a, 0x0, 0x2, 0x0, 0x6, 0x0, 0xfffffffc, 0x9, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfbfffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x5a62, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0xff, 0xfffc, 0x5}, {0x5, 0x0, 0x0, 0x9, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x2}}}}]}, {0x1b7c, 0x1, [@m_police={0x990, 0x17, 0x0, 0x0, {{0xb}, {0x8c8, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x4e, 0x4, 0x7, 0x6, 0xc4a, 0xcb, 0x3, 0x0, 0x28509a2a, 0x135, 0x7, 0x1d000000, 0x2, 0x2, 0x3, 0x7a, 0x0, 0xf, 0x1000, 0xffff0952, 0x9, 0x8, 0x2, 0x81, 0x40, 0x2, 0xfff, 0x0, 0x46c, 0xfffffff7, 0xffffffaa, 0x0, 0x1d, 0x5, 0x1, 0x1, 0x6, 0x9, 0xe, 0x5, 0x9, 0xffff7fff, 0x3, 0x9, 0x8001, 0x8, 0xb155, 0x81, 0x4, 0xb, 0xffff655c, 0xa05, 0x1, 0x7, 0x0, 0x0, 0x8, 0x8f43, 0x4, 0x200, 0x3, 0x5, 0xfffffffc, 0x8000000, 0x80000001, 0x5, 0x6, 0xfff, 0x6, 0xfffffff2, 0x3, 0x4, 0xd3f, 0xf, 0x4, 0x8, 0x8, 0x9, 0x0, 0x6da8, 0x5, 0x4, 0xfffff750, 0x7, 0x2, 0x1ff, 0x7, 0x5, 0xd2, 0x19, 0x8001, 0xa82, 0x136d, 0xfffffffc, 0xb0f8, 0x8000, 0x6, 0x5a8000, 0x1, 0x0, 0x0, 0x6, 0x0, 0x2, 0x8, 0xe, 0x0, 0x0, 0x8, 0xdc, 0x7, 0x7, 0x502b, 0x0, 0x1, 0x3, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xff, 0x1000, 0x1, 0xfbb5, 0xc1f, 0xe91, 0x2, 0x9, 0x9, 0x3ff, 0x5, 0x8695, 0x7f000, 0x7, 0x7, 0x9, 0x8, 0x5, 0x61, 0x36, 0x6, 0x0, 0x800, 0x80000000, 0x10, 0x8e6e, 0x24000, 0x4, 0x7, 0x7fffffff, 0x6, 0x5, 0x1, 0x5891, 0x1ff, 0x3d0d, 0x7, 0x81, 0x8, 0x8, 0x7, 0x3, 0xffff, 0x7, 0x8, 0x4, 0xffff, 0xfffffffe, 0x2, 0xd, 0x7fff, 0x6, 0x7fff, 0xffffff0a, 0x6, 0x1ff, 0x0, 0x66a, 0x3, 0xd9a, 0x5, 0x10001, 0x1, 0xffff7980, 0x4, 0xff, 0x9, 0x4, 0x5, 0x205, 0x3500abae, 0x0, 0x2, 0x3, 0x0, 0x9, 0x8, 0x5, 0xd788, 0x3, 0x6a555965, 0xde10, 0xfffffff8, 0x10, 0x81, 0x400, 0x1000, 0x3ff, 0x6, 0x4, 0x3, 0x8, 0x3, 0xbfd6, 0x3, 0x6, 0x40, 0x3, 0x200, 0x0, 0x3, 0x3, 0x2, 0x5, 0x5, 0x8001, 0x401, 0x1, 0x25f, 0x1, 0x0, 0x80, 0x8, 0x43c, 0x8, 0x8001, 0x9, 0x22a6ae6e, 0xfffffff7, 0x4, 0x1, 0x2, 0xffffffff, 0x631, 0x5, 0x7ff, 0x0, 0xa5d9, 0xd, 0x80, 0x9, 0x10, 0x0, 0x70, 0xba7]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb443}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x10000000, 0x9, 0x284c, 0xb, {0xe, 0x2, 0x7, 0x2, 0x0, 0x4}, {0x6, 0x1, 0x9, 0x7, 0x400, 0x80000001}, 0x1, 0xe630, 0xffffffff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x800}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000001, 0x10000000, 0x3ff, 0x3, 0x0, {0x3, 0x2, 0xf801, 0x30, 0x3, 0x7}, {0x3d, 0x0, 0x7, 0x4, 0x6, 0x4}, 0x0, 0x8, 0x7fff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x401, 0x2, 0xfffff4ce, 0x1, 0xfffffffb, 0x9, 0x6, 0x4, 0x200, 0x65, 0x6, 0x10000, 0x6, 0x4, 0x7, 0xaa, 0x6, 0xcc, 0x2, 0xb6f, 0x4, 0x1, 0x5, 0xe, 0x200, 0x4, 0x9, 0x0, 0x7f, 0xe, 0x8, 0x3, 0x9, 0x0, 0x5, 0x8, 0x7, 0x7, 0x8, 0x4293, 0x4, 0xff, 0x0, 0x4, 0x1, 0x1, 0x1a, 0x4876, 0x7, 0xe69c, 0x2c, 0x6, 0x8, 0x80000001, 0x6, 0x6, 0x10001, 0x1, 0x6, 0x8, 0x3, 0x8071, 0xdd, 0xfffffffd, 0x8, 0x2, 0x2, 0x0, 0x3, 0x0, 0x9, 0x6, 0x0, 0x7, 0x0, 0x7, 0x3, 0xe, 0x9, 0x3, 0x5, 0x1ff, 0xc, 0x7, 0x6, 0xb, 0xed, 0xffff6658, 0x6, 0x8, 0x59a, 0x9, 0x10000, 0x0, 0x9, 0xd3, 0x4, 0x9, 0x5, 0x9, 0x800, 0x7, 0xff, 0x2, 0xfffffffb, 0xf, 0x9, 0x3, 0x7, 0xff, 0x1, 0x7, 0x3, 0x4, 0xa, 0x10001, 0x3, 0x1, 0x7fffffff, 0x3, 0xf2, 0x7240, 0x6, 0xbb4f, 0x10000, 0xa51, 0x0, 0x9, 0xd12, 0xf, 0x4, 0x401, 0x63, 0x7, 0x7, 0x8, 0x5, 0x4, 0x7, 0x4, 0x8, 0x1, 0x2, 0x9, 0x1, 0x7f, 0x8, 0x7, 0xf, 0x8, 0x8, 0x3, 0x1, 0x2, 0x3ff, 0x6, 0x3ff, 0x2, 0x0, 0x3, 0x3ff, 0x100, 0x3, 0x401, 0x1, 0xddf, 0x6, 0x2, 0x1, 0x1, 0x100, 0x7, 0x7, 0x4, 0x2, 0x2, 0x3, 0x2b61, 0x10000, 0x0, 0x6, 0x4, 0x0, 0x5, 0x2a0cda44, 0x1, 0x5, 0x0, 0x1488, 0x8, 0x5, 0x2, 0x9, 0x5d, 0xa, 0xc2e0, 0x4, 0x9, 0x3, 0x52f, 0x6e, 0xc, 0x2, 0x3ea, 0x3, 0x7, 0xb, 0x2, 0x0, 0x9, 0xb2, 0xffff0001, 0x3, 0x4, 0x7, 0x100, 0x10001, 0x8, 0xd9, 0x6, 0x691, 0x0, 0x7fffffff, 0x1, 0x3, 0x5, 0x4, 0x7, 0x7ff, 0x9, 0x5, 0x80000000, 0xfffff305, 0x401, 0x714, 0xc9c1, 0x4, 0x6f, 0x8, 0xe0000000, 0xf, 0x2, 0xf7e7, 0xd5b2, 0xd03b, 0x1, 0x3, 0x2, 0x10, 0x9, 0x21, 0x101, 0x7, 0x75b6, 0x9]}]]}, {0x9e, 0x6, "23c2764c66a66f415ca90dc2ba6ece8d2061b8e04615e7f88c77433986ff71c33d6616579eec03f717b7a3420ea1e0208b74c78f705e087044359e14f830c512117c14d80944080e0a0edaeab4fda7aa189762909856f1e7bac8be60900f7263ab1a5b73c000dd658ab4523565e53a73b7a145e4bb59432e77083228a9e8fbc74b135c9edd2b95afb9bec4b44ff59cd1154ae51d854cca3b47e1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0x10a0, 0x18, 0x0, 0x0, {{0xa}, {0xfe8, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x120, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x9, 0x6, 0x0, 0x5, 0x1ff}, 0x2, 0x9, [{0x80, 0xffffffff, 0x200, 0x4, 0x3, 0x9}, {0x6, 0x3, 0x4, 0x800, 0x81a, 0x8001}]}, [{0x7, 0x3000000, 0x6090, 0x7, 0x7, 0x3}, {0x4, 0x6, 0xfffffffd, 0x59d, 0x800, 0x2}, {0x2, 0x3, 0x7, 0x7fffffff, 0x200, 0x8}, {0x0, 0x2, 0x4, 0x6b0, 0x0, 0x8}, {0x8001, 0x3f3, 0x8, 0x8, 0xff, 0xce40}, {0x49, 0x8, 0xf25, 0x6, 0xc, 0xe}, {0x6, 0x3ff, 0x463, 0x1, 0x6, 0x7}, {0x0, 0x7, 0x6, 0x8001, 0x6, 0xdfc}, {0xb, 0x2, 0x0, 0x8, 0x8, 0x5}, {0x10001, 0x2fdb23b5, 0x101, 0xffffffff, 0x4, 0x4}, {0x5, 0x3, 0x4994, 0xa, 0x9, 0x7fffffff}, {0x0, 0x3, 0xffffff04, 0x2, 0x0, 0x5}, {0xc6, 0x2, 0x8, 0x1, 0xe, 0x6b7}, {0x4, 0x1, 0x25a, 0x1, 0x4, 0x100}, {0x7fff, 0x6, 0x5, 0x3, 0x0, 0xd36}, {0xfffff1eb, 0x9, 0x4, 0x1, 0x4, 0x8}, {0x5, 0x40, 0x7, 0x7, 0x1, 0x7ff}, {0x9, 0x1, 0x8000, 0x9, 0x6, 0x7}, {0x9493, 0x10000, 0x6, 0xfffffffa, 0x1, 0x3}, {0x3, 0xfffffffc, 0x5, 0xfffffffe, 0x3, 0x81}, {0x10, 0xd6, 0x6, 0xf6, 0xe13, 0x3ff}, {0xffffffff, 0x5, 0x101, 0x6, 0x5ad6c41b, 0x8}, {0x0, 0xfff, 0xad, 0x2, 0x3, 0x3}, {0x3, 0x6, 0x7, 0x3, 0x0, 0x4}, {0x2, 0x1464fb74, 0x4, 0x401, 0x9, 0x4}, {0xff, 0x6, 0x0, 0x4, 0x2, 0xc19}, {0x0, 0x4, 0x4, 0x5, 0x10001, 0x2}, {0x3f, 0x5, 0x28, 0x3ff, 0x4, 0x10001}, {0x0, 0x0, 0x400, 0x2, 0x153, 0x8}, {0x6, 0x100, 0x10000, 0x5, 0x1, 0x1000}, {0x0, 0x5893, 0x45, 0x9, 0x9, 0xffffffff}, {0x8, 0x1b045b80, 0x14f, 0x495, 0x1, 0xffff493a}, {0x0, 0x5, 0x81, 0x5, 0xffffffff, 0x100}, {0x4a2, 0x0, 0x687d91d5, 0xe, 0x100, 0x6}, {0x3, 0x9, 0xa90f, 0x8, 0x3, 0x100}, {0x1, 0x101, 0x8, 0xfff, 0x6, 0xd4}, {0xd81, 0x81, 0xffffff00, 0x4, 0x0, 0xffff7fff}, {0x9, 0x7, 0x1, 0x3, 0xd, 0xf1a}, {0x4, 0x5, 0x3, 0x7, 0x6, 0x6}, {0x1, 0xffffffff, 0x4, 0x8, 0x6, 0x9}, {0x3, 0x8001, 0x1eb, 0x7f, 0xc0000000, 0x3}, {0x7f, 0x3, 0x4be9, 0x400, 0x2, 0x9}, {0x7, 0x3ff, 0x76e, 0x4, 0xf, 0x6}, {0x3, 0x10001, 0x8, 0xe, 0x6, 0xfffffffa}, {0x40, 0x800, 0x709, 0x5, 0xe, 0x6}, {0x1, 0x2, 0xb, 0x10000, 0x9, 0xffffffff}, {0x9e6, 0x7fffffff, 0xcdde, 0x3, 0x101, 0xffff}, {0xe7ad, 0xdc, 0x1, 0xb0, 0x1, 0x943}, {0x6, 0x200, 0xfff, 0x6, 0xccc, 0xfffffff9}, {0x7f, 0x10001, 0xc0, 0x1000, 0x3, 0x9}, {0x3, 0x3, 0x7fffffff, 0xffff8000, 0x2, 0x5}, {0x10000, 0x9, 0x9, 0x6, 0x7ff, 0x6a9a}, {0x80000001, 0x6, 0x800, 0x6, 0x8, 0x1000}, {0x40, 0x5, 0x3, 0x0, 0x2, 0x800000}, {0x9, 0x800, 0x1, 0x9, 0x10, 0xb5e}, {0x44, 0x1, 0x4, 0x8, 0x7}, {0x40, 0x6, 0x7, 0xfffffffc, 0x8, 0x9}, {0x1, 0x9, 0x7f, 0x2, 0x7ff, 0x1000}, {0xf, 0x4, 0x7, 0xfc0d, 0xfffffffb, 0x4}, {0x7, 0x3ff, 0x4, 0x6, 0x0, 0x8}, {0x6f5d4296, 0x0, 0x6b5, 0x3, 0x5, 0x4}, {0x400, 0x7, 0x74, 0x3, 0xc280, 0x3}, {0x8, 0x8001, 0x4, 0x9, 0xf, 0x14ef}, {0x5, 0x8, 0x2, 0x2d0a7794, 0x0, 0x7}, {0x7, 0x3, 0x4, 0x2, 0x6, 0x9}, {0x7, 0x9, 0x9, 0x1, 0x8, 0x2}, {0x100, 0x3, 0x8000, 0xf2, 0x3, 0xfffffff1}, {0x2e, 0x3, 0x1000, 0x1, 0x8080, 0x779}, {0x4, 0x6, 0x1, 0xffffffff, 0x6753, 0xfc}, {0x400, 0x1000, 0x8000, 0x1, 0x4e, 0xb85}, {0x3ff, 0xa, 0x401, 0xfffffffc, 0x1, 0x7}, {0x2, 0xa, 0x4, 0x4, 0x5}, {0x7, 0x401, 0x656f, 0xb02, 0x7fffffff, 0x1}, {0x9, 0xffff, 0x1, 0x7f, 0x7, 0x1}, {0xfffffff1, 0x6, 0x0, 0x2, 0x7, 0x4}, {0x4, 0x1, 0x3, 0x3, 0x76d, 0x9}, {0x0, 0x1, 0x10, 0x3, 0x8, 0x800000}, {0x101, 0x32fcbbca, 0x5, 0x6, 0x9, 0x10001}, {0x9, 0x7b7c, 0x1, 0x10001, 0x44, 0x35}, {0x2, 0x5, 0x3, 0x40, 0x2, 0x9}, {0x9, 0xdbe, 0x9, 0x1, 0x101, 0x8001}, {0x373, 0x10, 0x10001, 0x3, 0xc6, 0x1}, {0x5, 0x9, 0x3, 0x5, 0x4, 0x604d}, {0xb, 0x5, 0xbb43, 0x800, 0x1, 0x5}, {0xffff, 0x2, 0x5, 0x8, 0x9, 0xfffffc01}, {0xc1e0, 0x0, 0x7, 0x1, 0x4, 0x7a}, {0x5, 0x6, 0x48, 0x0, 0x3, 0x3}, {0xfff, 0x1, 0xf5, 0xc7bd, 0x9, 0x2}, {0x6, 0x1, 0xb82, 0x3, 0x2, 0xc8}, {0x7, 0x50, 0xa8, 0x5, 0x9, 0x6}, {0x5c9a, 0x10000, 0xa44, 0x4, 0x4, 0x7}, {0x4, 0x101, 0x0, 0x8, 0xfff, 0x2}, {0x4, 0x476, 0x1a, 0x8, 0xfff, 0x9eac}, {0x7, 0x3ff, 0xba, 0x9, 0x6, 0x7}, {0x8, 0x9b20, 0x6, 0xdb2, 0x2, 0x5}, {0x2, 0xffffffff, 0x80, 0x5, 0xd, 0x3}, {0x884f, 0x8001, 0x0, 0x0, 0x4, 0x7}, {0x9, 0xef9, 0x9, 0x5, 0x80000000, 0x4}, {0x9, 0x45b5, 0x9, 0x80000001, 0x8, 0x8}, {0x8, 0x10000, 0x80, 0xf4, 0x6, 0x8}, {0x40, 0x3, 0xffffff0c, 0x7, 0x9, 0x1ff}, {0x1, 0x2, 0x2, 0x2, 0x7fffffff, 0xa}, {0x2, 0x4, 0x40, 0x0, 0x5, 0x6}, {0x3, 0xfffffff9, 0xffffffff, 0x695a, 0x7fff, 0x3}, {0x10001, 0x0, 0x1, 0x80000001, 0x7fffffff}, {0xe31, 0xfffffff9, 0x8, 0x7fff, 0xffffffff, 0x4}, {0x7, 0x3, 0x4, 0x7, 0x3, 0x8}, {0x4, 0x5, 0x8, 0x80000001, 0x0, 0xe}, {0x1, 0x2, 0x5, 0xd79a, 0x9, 0x573}, {0xfb5, 0x0, 0x3ff, 0x1, 0x7, 0x6}, {0x5d52, 0x1, 0x3, 0x800, 0xfffffffa, 0x1}, {0x0, 0x4547929a, 0x3, 0x9, 0x0, 0x3}, {0x8, 0x4, 0x24e, 0xfffffc00, 0x5, 0x7fffffff}, {0xffffffff, 0x1000, 0xabdc, 0x2, 0x8, 0x8d4}, {0x4a4, 0x800, 0x9, 0x4, 0x7, 0x7}, {0x400, 0x5, 0x40, 0x9, 0x4}, {0xc, 0x80000001, 0xff, 0x4794, 0x4, 0x8000}, {0x6b, 0x40000000, 0xe7, 0x5, 0x7, 0x1}, {0xf, 0x4, 0x4e, 0x54b, 0x6, 0x1800000}, {0x259a, 0x4, 0x271, 0x0, 0xc, 0x4154}, {0x2558, 0x8, 0x4, 0x9, 0x0, 0x7ff}, {0x3, 0xfdc, 0x2, 0x3, 0x3, 0x6000000}, {0xa886, 0x2, 0x100, 0x2, 0x6, 0x100000}, {0x2, 0x7, 0xdf, 0xffffffff, 0x8, 0x7}, {0x10000, 0x8, 0x1aaa, 0x4, 0xfffffc01, 0x7}, {0xfffffffb, 0x4, 0x5, 0xd0dc, 0xcbfb6e2e, 0x9}, {0x4, 0x6, 0x3ff, 0x4, 0x2, 0xd}, {0x3, 0x9a3, 0xb, 0xfffffff8, 0xa70, 0xbb6}], [{0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0xc46745db527aa97c}, {0x1, 0x1}, {0x2}, {0x2}, {0x2}, {0x4}, {}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x2}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x4}, {0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x28413516a6d35902}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x7}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x6789d3a6ac3f9997}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x2}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {}, {}, {0x2}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x74, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x90, 0x6, "0a1c28a2ddb6be88c573cb77336fc8faa809c0308044931a6f4793c352b3f116867065cd65ed4da26aa3f02331a494f9cfcf6d3cacb45d29418869367fa04f8683b379446435cf6e538a0860a6166344f449ec4de9aa81326510ca2734b2e8f6c8bbcd4049f2597ca4c047a31c1de423762c91f0f5c8be05828ab439b698921201e6861bf429daf41df50a1b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0x98, 0x1b, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x200, 0x6, 0x10000000, 0xfffffff3, 0x6}}]}, {0x52, 0x6, "9dab6494606e7bd0b6c1dc41f10cb4115fdb57690343ad63c5fad28f61a8a8aabe27aeef5c1ded6db03761e2a7c458babb4cd20657f47c21d31a7eb9691f17d0f4d29505e2ba3dc555ee91b340eb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x58, 0x9, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x96, 0x20000000, 0x4, 0x4}, 0x10}}]}, {0xa, 0x6, "f293d5d81fc7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0x58, 0x2, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0xfff, 0x5, 0x3, 0x3c4}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1000}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7aa2323ff961cf96, 0x2}}}}]}]}, 0x2048}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f00000007c0)={0x64, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x400c040) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, &(0x7f0000000000), &(0x7f0000000340)=""/89}, 0x20) executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) close(r2) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000580)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000700)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x40, &(0x7f0000000740)={0x11, 0x8100, r4, 0x1, 0xda, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'geneve0\x00'}) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'veth0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r10, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000240)=0xffffffff, 0x4) r12 = socket(0x18, 0x1, 0xff) sendmmsg(r10, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000300)=[{&(0x7f0000000340)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r12, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="000001000606e7ff0903"], 0xc) sendmsg$nl_route_sched(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r11, {0x2, 0x8}, {0xf, 0xc}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x54) r13 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_inet_SIOCGIFADDR(r13, 0x8915, &(0x7f00000000c0)={'team_slave_0\x00', {0x2, 0x0, @empty}}) executing program 32: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) close(r2) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000580)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000700)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x40, &(0x7f0000000740)={0x11, 0x8100, r4, 0x1, 0xda, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'geneve0\x00'}) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'veth0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r10, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000240)=0xffffffff, 0x4) r12 = socket(0x18, 0x1, 0xff) sendmmsg(r10, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000300)=[{&(0x7f0000000340)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r12, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="000001000606e7ff0903"], 0xc) sendmsg$nl_route_sched(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r11, {0x2, 0x8}, {0xf, 0xc}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x54) r13 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_inet_SIOCGIFADDR(r13, 0x8915, &(0x7f00000000c0)={'team_slave_0\x00', {0x2, 0x0, @empty}}) executing program 5: bind$inet(0xffffffffffffffff, &(0x7f000000df80)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f000000dfc0)=0x7, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f000000e000)=0x40000401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f000000e040)=0x800001, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f000000e140), 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f000000e1c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e200)={0x11, 0x1c, &(0x7f000000e2c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0xfffe, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f000000e3c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r1, &(0x7f000000e080)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f000000e0c0)=0x2, 0x4) bind$inet6(r0, &(0x7f000000e100)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) listen(0xffffffffffffffff, 0xb5d6) listen(r0, 0xe0a5) socket$nl_route(0x10, 0x3, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f000000dcc0)={0x1, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f000000dd00)=r4, 0x4) r6 = bpf$ITER_CREATE(0x21, &(0x7f000000dd40)={r5}, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f000000de40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f000000de80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f000000dec0)={0x0, 0x0, &(0x7f000000df00)={&(0x7f000000df40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000040000003900000008000300", @ANYRES32=r9, @ANYBLOB="20005a801c000400060001"], 0x3c}, 0x1, 0x0, 0x0, 0x24040887}, 0x0) read(r6, &(0x7f000000dd80)=""/185, 0xb9) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$NS_GET_PARENT(r10, 0x8004b709, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000dac0)={0x0, 0x0, &(0x7f000000db00)={&(0x7f000000db40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f000000dbc0)={0x0, 0x0, &(0x7f000000dc00)={&(0x7f000000dc40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x25, 0x301, 0xfffffffe, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r8, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x44008000}, 0x20000040) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c8c0}, 0x5bfc820b5ab7c22c) r10 = socket(0x10, 0x1, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x25, 0x301, 0xfffffffe, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x44801}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r3) (async) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r3) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000004c0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r8, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x44008000}, 0x20000040) (async) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c8c0}, 0x5bfc820b5ab7c22c) (async) socket(0x10, 0x1, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000900000000000000e7000000731142000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) select(0x40, &(0x7f0000000240)={0x6}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x2}) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xd, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000640000000000000002000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000b6ffffffb702000008000000b703000084200000850000007a00000095"], &(0x7f0000000640)='GPL\x00', 0x6}, 0x94) executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0x0, 0x0, 0xff, 0x100fffe00], [0xffffff00, 0xffffffff, 0xff], 'team_slave_0\x00', 'nr0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0xb, 0xfffffff8, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x1, 'syz0\x00', 0xfe}}, @common=@unspec=@cpu={{0x28}, {0xffffffff, 0x1f}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4ef) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sk_skb}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000800), 0x1, 0x0) accept(0xffffffffffffffff, &(0x7f0000000840)=@l2tp={0x2, 0x0, @initdev}, &(0x7f00000008c0)=0x80) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000950000000000000043500998bccda9e8b4796306abc2bf33cc93ed536c596ac4c96286fc783ac9ab5d051c83e7c618"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18}, 0x94) bind$alg(r1, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000a80)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000ac0)=[{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b40)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000b80)="ebe3a0e9796cfd1647e299f4e376fdba128280b3", 0x14}, {&(0x7f0000000bc0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000cc0)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f0000000d00)={0x0, 0x500, &(0x7f0000000d40)=[{&(0x7f0000000d80)=""/81, 0x7ffff000}, {&(0x7f0000000e00)=""/83, 0x20000253}], 0x2}, 0x0) sendto$inet(r2, &(0x7f0000001500)="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", 0x12e, 0x20044004, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000f00)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="18000000101420002cbd7000fddbdf2508004c0000000000fee85a49a5b2be053e9bfd2e2907cdf94b0c68de95314b6555672737903700684ba39bff5d1dfc0c5feacb226e9b14ad942910ffc28f778c3ba1ecea0537db737398be6d2f3b31af3782ef7dc04e8dc6f9956b3e7a03e4bbc7712511e893ea19934e249f144ce60126d8cc76f2d025bc518b1e9053f0191766c54a108c9d2a284fb92d568f568a2af2e2f3de"], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000001080), 0x6) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f00000010c0)) r5 = socket$inet(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x11, 0x13, &(0x7f00000011c0)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000001280)='GPL\x00', 0xa, 0xff5c, &(0x7f00000012c0)=""/222, 0x0, 0x8}, 0x78) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000013c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000001400)=ANY=[], 0x32600) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r3, 0x7171e000) connect$inet(r5, &(0x7f0000001440)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r7 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000001480)={0x0, 0x8}, &(0x7f00000014c0)=0x8) ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000001500)) executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x1000700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv4_delroute={0x24, 0x19, 0x1, 0x71bd2b, 0x0, {0x2, 0x18, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x1000}, [@RTA_PREFSRC={0x8, 0x15, @dev={0xac, 0x14, 0x14, 0x38}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000200)={{r0, &(0x7f0000000000)='*%/!\xfa\x00', 0x0, &(0x7f0000000040)={@align=0xffffffff, {0x5, 0x2, 0x7}}, 0x2, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000100)}, {[0x7fffffff, 0x7fffffff, 0x1117]}, 0x1, 0xb0, &(0x7f0000000140)=""/176}) writev(r1, &(0x7f00000007c0)=[{&(0x7f0000000380)="b65b754d082711f4e0cb640f9e8e64d68bc57b8607186580252483e0c966724c7c8380c9a05a9c0be0a93cb348674cf28c9e6ff19e84bbfc7e6cae9c2d1273cde05a1bbfc936", 0x46}, {&(0x7f0000000400)="6093c6ffe5d854e9b299b5cdafa4e985c499aa5da488735c5093a25327ed1e68cbf58650920d6dae40a793d90df734de56ebbfd2d66839ddf0d1ac630f9775b6e91fbe38f0512944c5099234f7dad20f885b1fb5b5a333d0d940d29b153e267058a39f3697b4da0dcf9756bfa71b65ba6d", 0x71}, {&(0x7f0000000480)="926530d298d5b8274cab2feab0c527f6b919807f77fdc3c860ec35b1ed18529261e468e9adf2995b5fcc32aabdc398df248165b79c67d313c2d8d9fde172707979c4b4953bdf6c36b579f9b8e80ead4c7c1f4ca7153258858677fe", 0x5b}, {&(0x7f0000000500)="3d22ef98ae489d5640f9f66de38b97af4280f56577d9e12367fec4aa9e2ad17a27d6002a88a5", 0x26}, {&(0x7f0000000540)="83088c27f386aaca01edec147b0d35029aee6654ed6c2b396fdf41305f02b2ac761cba3c12f3437bb3a7e0c98b0ad2b9658e170064b7f0e0055a891d1a147dac1442", 0x42}, {&(0x7f00000005c0)="4028ca6f09667e222bc39e48cd8660735405b629a500cdfb6caa08064a9eb4797014636ffa7e5c8c81e61481f586fe4ac15df30c6ed4d705792e47310a837751b67be77019438ed6fb12bee3e7c5354c32f8191db714fcdb0d48", 0x5a}, {&(0x7f0000000640)="53b015fc9c7e6b60c8cc9e03c626a27c3365804859c919b45a149c4e1ab6cdb2287199f6345c435cff942c386435404a749188c9fdc935c94c766147e2c210aa8d5182dfffc23845e7619f094293d228f4068aabf589bfd59912d662c4fb5753d3bdac263c00a3867516f442950b14", 0x6f}, {&(0x7f00000006c0)="3a51faea4e7a34a36ff05a3e2aabe2471f517ccac7d3b6cdf5da89b9c5db9ce06196d40ce125f45c4c0bd372140199f7a9a06b3848524c15bc89051c31cf3fcf4609dc55dde2d647d93dea8cd5d88df8c0061b059b02f9ea80942278b7ab332379131b7107f86ddaac1f24393c6f14efc94048ad8619dc8218ad0d0855293e62cd3d764ebdd853217fa7a776ce7b5c7b1e6cf0310a6ee059c1e59f7c30c3416239711c", 0xa3}, {&(0x7f0000000780)="9499a5ded6613be0a3a3be23e790", 0xe}], 0x9) program did not crash bisect: split chunks (needed=true): <13>, <12> bisect: split chunk #0 of len 13 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m4s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 32, 7, 1, 30, 6, 1, 30, 2, 9, 3, 11, 30, 3, 5, 3, 1, 1] detailed listing: executing program 5: bind$inet(0xffffffffffffffff, &(0x7f000000df80)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f000000dfc0)=0x7, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f000000e000)=0x40000401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f000000e040)=0x800001, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f000000e140), 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f000000e1c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e200)={0x11, 0x1c, &(0x7f000000e2c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0xfffe, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f000000e3c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r1, &(0x7f000000e080)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f000000e0c0)=0x2, 0x4) bind$inet6(r0, &(0x7f000000e100)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) listen(0xffffffffffffffff, 0xb5d6) listen(r0, 0xe0a5) socket$nl_route(0x10, 0x3, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f000000dcc0)={0x1, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f000000dd00)=r4, 0x4) r6 = bpf$ITER_CREATE(0x21, &(0x7f000000dd40)={r5}, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f000000de40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f000000de80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f000000dec0)={0x0, 0x0, &(0x7f000000df00)={&(0x7f000000df40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000040000003900000008000300", @ANYRES32=r9, @ANYBLOB="20005a801c000400060001"], 0x3c}, 0x1, 0x0, 0x0, 0x24040887}, 0x0) read(r6, &(0x7f000000dd80)=""/185, 0xb9) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$NS_GET_PARENT(r10, 0x8004b709, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000dac0)={0x0, 0x0, &(0x7f000000db00)={&(0x7f000000db40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f000000dbc0)={0x0, 0x0, &(0x7f000000dc00)={&(0x7f000000dc40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x25, 0x301, 0xfffffffe, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r8, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x44008000}, 0x20000040) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c8c0}, 0x5bfc820b5ab7c22c) r10 = socket(0x10, 0x1, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x25, 0x301, 0xfffffffe, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x44801}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r3) (async) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r3) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000004c0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r8, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x44008000}, 0x20000040) (async) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c8c0}, 0x5bfc820b5ab7c22c) (async) socket(0x10, 0x1, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000900000000000000e7000000731142000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) select(0x40, &(0x7f0000000240)={0x6}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x2}) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xd, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000640000000000000002000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000b6ffffffb702000008000000b703000084200000850000007a00000095"], &(0x7f0000000640)='GPL\x00', 0x6}, 0x94) executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0x0, 0x0, 0xff, 0x100fffe00], [0xffffff00, 0xffffffff, 0xff], 'team_slave_0\x00', 'nr0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0xb, 0xfffffff8, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x1, 'syz0\x00', 0xfe}}, @common=@unspec=@cpu={{0x28}, {0xffffffff, 0x1f}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4ef) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sk_skb}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000800), 0x1, 0x0) accept(0xffffffffffffffff, &(0x7f0000000840)=@l2tp={0x2, 0x0, @initdev}, &(0x7f00000008c0)=0x80) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000950000000000000043500998bccda9e8b4796306abc2bf33cc93ed536c596ac4c96286fc783ac9ab5d051c83e7c618"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18}, 0x94) bind$alg(r1, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000a80)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000ac0)=[{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b40)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000b80)="ebe3a0e9796cfd1647e299f4e376fdba128280b3", 0x14}, {&(0x7f0000000bc0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000cc0)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f0000000d00)={0x0, 0x500, &(0x7f0000000d40)=[{&(0x7f0000000d80)=""/81, 0x7ffff000}, {&(0x7f0000000e00)=""/83, 0x20000253}], 0x2}, 0x0) sendto$inet(r2, &(0x7f0000001500)="8bd36c69b005ad6a840807cfb42eb08654252b136bc23b1cabf551cbfc229fea746e6496e18a07ea0278c0ca2b75abdf86b0e7756865ff7f6982c7dc5472b7f4d0c2cc00000000000000000000000000000000cab6cddc4b782beb47f7edad64afb3f5e104dde1d039ae3392162643140cea4a1e671f3d8888348bbde6908bdb1b3a929579e22485eb29b35b919634169b2fa427d008a0a52a9d9bbff8cee682dca85c8db279e230ce9b02e6ad47d7fb814b6ad94d4bb6a13043247584a4fcd4acad035e7f2e6828b698fb51a1c105fa92b8a15e398fd92f60c877fc473e273a3979a4f3f092e7e0ad0fb8dcbb77dac7d21fa8e7681c1dcb842e0c9109d6948e198d63d9391afc16e4653bf789f6f29fcc7f266f33c77ae087c12915ec5fceb838a63a1195342eec97255fb4944c", 0x12e, 0x20044004, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000f00)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="18000000101420002cbd7000fddbdf2508004c0000000000fee85a49a5b2be053e9bfd2e2907cdf94b0c68de95314b6555672737903700684ba39bff5d1dfc0c5feacb226e9b14ad942910ffc28f778c3ba1ecea0537db737398be6d2f3b31af3782ef7dc04e8dc6f9956b3e7a03e4bbc7712511e893ea19934e249f144ce60126d8cc76f2d025bc518b1e9053f0191766c54a108c9d2a284fb92d568f568a2af2e2f3de"], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000001080), 0x6) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f00000010c0)) r5 = socket$inet(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x11, 0x13, &(0x7f00000011c0)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000001280)='GPL\x00', 0xa, 0xff5c, &(0x7f00000012c0)=""/222, 0x0, 0x8}, 0x78) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000013c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000001400)=ANY=[], 0x32600) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r3, 0x7171e000) connect$inet(r5, &(0x7f0000001440)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r7 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000001480)={0x0, 0x8}, &(0x7f00000014c0)=0x8) ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000001500)) executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x1000700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv4_delroute={0x24, 0x19, 0x1, 0x71bd2b, 0x0, {0x2, 0x18, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x1000}, [@RTA_PREFSRC={0x8, 0x15, @dev={0xac, 0x14, 0x14, 0x38}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000200)={{r0, &(0x7f0000000000)='*%/!\xfa\x00', 0x0, &(0x7f0000000040)={@align=0xffffffff, {0x5, 0x2, 0x7}}, 0x2, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000100)}, {[0x7fffffff, 0x7fffffff, 0x1117]}, 0x1, 0xb0, &(0x7f0000000140)=""/176}) writev(r1, &(0x7f00000007c0)=[{&(0x7f0000000380)="b65b754d082711f4e0cb640f9e8e64d68bc57b8607186580252483e0c966724c7c8380c9a05a9c0be0a93cb348674cf28c9e6ff19e84bbfc7e6cae9c2d1273cde05a1bbfc936", 0x46}, {&(0x7f0000000400)="6093c6ffe5d854e9b299b5cdafa4e985c499aa5da488735c5093a25327ed1e68cbf58650920d6dae40a793d90df734de56ebbfd2d66839ddf0d1ac630f9775b6e91fbe38f0512944c5099234f7dad20f885b1fb5b5a333d0d940d29b153e267058a39f3697b4da0dcf9756bfa71b65ba6d", 0x71}, {&(0x7f0000000480)="926530d298d5b8274cab2feab0c527f6b919807f77fdc3c860ec35b1ed18529261e468e9adf2995b5fcc32aabdc398df248165b79c67d313c2d8d9fde172707979c4b4953bdf6c36b579f9b8e80ead4c7c1f4ca7153258858677fe", 0x5b}, {&(0x7f0000000500)="3d22ef98ae489d5640f9f66de38b97af4280f56577d9e12367fec4aa9e2ad17a27d6002a88a5", 0x26}, {&(0x7f0000000540)="83088c27f386aaca01edec147b0d35029aee6654ed6c2b396fdf41305f02b2ac761cba3c12f3437bb3a7e0c98b0ad2b9658e170064b7f0e0055a891d1a147dac1442", 0x42}, {&(0x7f00000005c0)="4028ca6f09667e222bc39e48cd8660735405b629a500cdfb6caa08064a9eb4797014636ffa7e5c8c81e61481f586fe4ac15df30c6ed4d705792e47310a837751b67be77019438ed6fb12bee3e7c5354c32f8191db714fcdb0d48", 0x5a}, {&(0x7f0000000640)="53b015fc9c7e6b60c8cc9e03c626a27c3365804859c919b45a149c4e1ab6cdb2287199f6345c435cff942c386435404a749188c9fdc935c94c766147e2c210aa8d5182dfffc23845e7619f094293d228f4068aabf589bfd59912d662c4fb5753d3bdac263c00a3867516f442950b14", 0x6f}, {&(0x7f00000006c0)="3a51faea4e7a34a36ff05a3e2aabe2471f517ccac7d3b6cdf5da89b9c5db9ce06196d40ce125f45c4c0bd372140199f7a9a06b3848524c15bc89051c31cf3fcf4609dc55dde2d647d93dea8cd5d88df8c0061b059b02f9ea80942278b7ab332379131b7107f86ddaac1f24393c6f14efc94048ad8619dc8218ad0d0855293e62cd3d764ebdd853217fa7a776ce7b5c7b1e6cf0310a6ee059c1e59f7c30c3416239711c", 0xa3}, {&(0x7f0000000780)="9499a5ded6613be0a3a3be23e790", 0xe}], 0x9) executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xd, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000640000000000000003000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000b6ffffffb702000008000000b703000084200000850000007a00000095"], &(0x7f0000000640)='GPL\x00', 0x6}, 0x94) executing program 3: accept$packet(0xffffffffffffffff, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000ec0)=0x14) r0 = socket(0x11, 0x2, 0x6) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x6a, 0x1, 0x0, 0xc) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0xfffffffffffffedd, 0x80400) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000800)='ns/cgroup\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000840)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x110, 0x210, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000d80), 0x0) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x9, r6, 0x4}, 0x38) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)={0x34, r8, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0x5, 0x0, 0xdad1124f55525050, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x5c}, 0x94) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r4, @ANYBLOB="1400018008000100000001000500030003000000"], 0x2c}}, 0x0) sendto$packet(r1, 0xfffffffffffffffd, 0x0, 0x8000844, &(0x7f0000000540)={0x11, 0x17, r4, 0x1, 0x18, 0x6, @broadcast}, 0x14) setsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000580)="fbd691a560d2311bf45042ee630a7c2720f5b7dec34225a8a9a2339ad76086724eb25f66d30e37829edf521feab759bbbb6bc0a36182ebe8a7eb5bedaf64b4267c9eb29e1b5dbcae97a71f8c65be30f7285514bde847dcf9283f283b5b10f62a39c2984db9ce4d4399b7ea11877cee99849528f86319319fedd4d59d8f5eaa25076eb3f99b35699a68f560c97462df4340cda396197f5790010e05ee90534db1289ce9bf9473126ac1d3e1da66fd60f0b5e5319763e006822eeaf351a6cb", 0xbe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000fe000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000ffe800006608000000000000180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8df00000000bfa100000000000007010000f8ffffffb702000008000000b50afdfffffffffd85000000ad0008009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x3, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x45}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x28}}, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f0000492000/0xf000)=nil, 0xf000, 0x1000002, 0x12, r0, 0x0) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x3, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1e}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x3c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000007000000850000001b000000b700000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd28, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0xe00}}, 0x1c}}, 0x4000050) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000340)=0x7, 0x2) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000400)={'gre0\x00', r4, 0x7800, 0x0, 0x2, 0xfffffe01, {{0x2b, 0x4, 0x1, 0x4, 0xac, 0x68, 0x0, 0xc, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp_prespec={0x44, 0x34, 0x96, 0x3, 0x3, [{@local, 0x604a}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x4}, {@broadcast, 0x7ff}, {@empty, 0x40}, {@empty, 0xb}, {@rand_addr=0x64010101, 0x2}]}, @generic={0x88, 0x6, "036103fc"}, @timestamp_prespec={0x44, 0x3c, 0x1e, 0x3, 0x2, [{@local, 0x6}, {@private=0xa010100, 0x6}, {@broadcast, 0x1}, {@multicast1, 0x4}, {@broadcast}, {@local, 0x5}, {@remote, 0x5}]}, @lsrr={0x83, 0x1f, 0x90, [@multicast1, @rand_addr=0x64010102, @multicast1, @multicast1, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x41}]}]}}}}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x2200, 0x0) executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) recvmmsg(r10, 0x0, 0x0, 0x20, 0x0) sendto$inet(r9, &(0x7f0000000680)="1c", 0x10002, 0x0, 0x0, 0x0) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x15, 0x5b09, 0x7, 0x2, 0x3, 0x5, 0x7, 0x8, 0x5, 0x9, [0xce, 0x5, 0x2005, 0x40, 0x4, 0x3, 0x400e, 0xfb]}}) socket$pppl2tp(0x18, 0x1, 0x1) executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="21000000470010aaaaaaaaaa00030000000000000000000000000000000300000000000000000000000000000003000000000000000000000000000000000000000000000110000000000000", 0x4d) executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) bind$bt_hci(r1, &(0x7f0000001580)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="11000000e1feaa601f0b685870590e9afe73d936534f2ab96ecf5c8d991048c9b91937f49ef788d68d712df1cd7807bde3068b555ccb11ea71d5f2942053c6d41aebf6468cea8f5b08f0fc808b9ffce3ae41382529564d0d79946e1227c8f90e77de67995ddaf06cc70b14b74cf489210777c5e430682a301073ffd3ff023566ab436190f0ed2564b91e4618b18e386e5b10dcad445bae1831e03a167faa", 0xfffffffffffffeec) executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xcd83, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x9b}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2cae0}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000000)=@framed={{}, [@generic={0x4, 0x8, 0x1}, @map_fd={0x18, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @ldst={0x2, 0x3, 0x3, 0x6, 0xa, 0x50, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) executing program 33: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000000)=@framed={{}, [@generic={0x4, 0x8, 0x1}, @map_fd={0x18, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @ldst={0x2, 0x3, 0x3, 0x6, 0xa, 0x50, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) program crashed: no output from test machine bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 12 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m3s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 32, 7, 1, 30, 6, 30, 3, 5, 3, 1, 1] detailed listing: executing program 5: bind$inet(0xffffffffffffffff, &(0x7f000000df80)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f000000dfc0)=0x7, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f000000e000)=0x40000401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f000000e040)=0x800001, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f000000e140), 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f000000e1c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e200)={0x11, 0x1c, &(0x7f000000e2c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0xfffe, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f000000e3c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r1, &(0x7f000000e080)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f000000e0c0)=0x2, 0x4) bind$inet6(r0, &(0x7f000000e100)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) listen(0xffffffffffffffff, 0xb5d6) listen(r0, 0xe0a5) socket$nl_route(0x10, 0x3, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f000000dcc0)={0x1, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f000000dd00)=r4, 0x4) r6 = bpf$ITER_CREATE(0x21, &(0x7f000000dd40)={r5}, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f000000de40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f000000de80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f000000dec0)={0x0, 0x0, &(0x7f000000df00)={&(0x7f000000df40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000040000003900000008000300", @ANYRES32=r9, @ANYBLOB="20005a801c000400060001"], 0x3c}, 0x1, 0x0, 0x0, 0x24040887}, 0x0) read(r6, &(0x7f000000dd80)=""/185, 0xb9) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$NS_GET_PARENT(r10, 0x8004b709, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000dac0)={0x0, 0x0, &(0x7f000000db00)={&(0x7f000000db40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f000000dbc0)={0x0, 0x0, &(0x7f000000dc00)={&(0x7f000000dc40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x25, 0x301, 0xfffffffe, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r8, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x44008000}, 0x20000040) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c8c0}, 0x5bfc820b5ab7c22c) r10 = socket(0x10, 0x1, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x25, 0x301, 0xfffffffe, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x44801}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r3) (async) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r3) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000004c0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r8, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x44008000}, 0x20000040) (async) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c8c0}, 0x5bfc820b5ab7c22c) (async) socket(0x10, 0x1, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000900000000000000e7000000731142000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) select(0x40, &(0x7f0000000240)={0x6}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x2}) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3100000000140004000800010000000001080002000000000050000000120a01040000000000000000020000000900010073797a30000000000900020073797a3000000000080003000000000a1c0004000600010005b400000500020007000000080003000000000358000000060a01040000000000000000020000000900010073797a30000000000900020073797a31000000002c000400280001000b0001006f626a726566000018000200080001000000000a0900020073797a300000000014000000110001"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xd, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000640000000000000002000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000b6ffffffb702000008000000b703000084200000850000007a00000095"], &(0x7f0000000640)='GPL\x00', 0x6}, 0x94) executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0x0, 0x0, 0xff, 0x100fffe00], [0xffffff00, 0xffffffff, 0xff], 'team_slave_0\x00', 'nr0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0xb, 0xfffffff8, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x1, 'syz0\x00', 0xfe}}, @common=@unspec=@cpu={{0x28}, {0xffffffff, 0x1f}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4ef) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sk_skb}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000800), 0x1, 0x0) accept(0xffffffffffffffff, &(0x7f0000000840)=@l2tp={0x2, 0x0, @initdev}, &(0x7f00000008c0)=0x80) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000950000000000000043500998bccda9e8b4796306abc2bf33cc93ed536c596ac4c96286fc783ac9ab5d051c83e7c618"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18}, 0x94) bind$alg(r1, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000a80)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000ac0)=[{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b40)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000b80)="ebe3a0e9796cfd1647e299f4e376fdba128280b3", 0x14}, {&(0x7f0000000bc0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000cc0)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f0000000d00)={0x0, 0x500, &(0x7f0000000d40)=[{&(0x7f0000000d80)=""/81, 0x7ffff000}, {&(0x7f0000000e00)=""/83, 0x20000253}], 0x2}, 0x0) sendto$inet(r2, &(0x7f0000001500)="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", 0x12e, 0x20044004, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000f00)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="18000000101420002cbd7000fddbdf2508004c0000000000fee85a49a5b2be053e9bfd2e2907cdf94b0c68de95314b6555672737903700684ba39bff5d1dfc0c5feacb226e9b14ad942910ffc28f778c3ba1ecea0537db737398be6d2f3b31af3782ef7dc04e8dc6f9956b3e7a03e4bbc7712511e893ea19934e249f144ce60126d8cc76f2d025bc518b1e9053f0191766c54a108c9d2a284fb92d568f568a2af2e2f3de"], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000001080), 0x6) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f00000010c0)) r5 = socket$inet(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x11, 0x13, &(0x7f00000011c0)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000001280)='GPL\x00', 0xa, 0xff5c, &(0x7f00000012c0)=""/222, 0x0, 0x8}, 0x78) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000013c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000001400)=ANY=[], 0x32600) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r3, 0x7171e000) connect$inet(r5, &(0x7f0000001440)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r7 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000001480)={0x0, 0x8}, &(0x7f00000014c0)=0x8) ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000001500)) executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x1000700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv4_delroute={0x24, 0x19, 0x1, 0x71bd2b, 0x0, {0x2, 0x18, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x1000}, [@RTA_PREFSRC={0x8, 0x15, @dev={0xac, 0x14, 0x14, 0x38}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000200)={{r0, &(0x7f0000000000)='*%/!\xfa\x00', 0x0, &(0x7f0000000040)={@align=0xffffffff, {0x5, 0x2, 0x7}}, 0x2, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000100)}, {[0x7fffffff, 0x7fffffff, 0x1117]}, 0x1, 0xb0, &(0x7f0000000140)=""/176}) writev(r1, &(0x7f00000007c0)=[{&(0x7f0000000380)="b65b754d082711f4e0cb640f9e8e64d68bc57b8607186580252483e0c966724c7c8380c9a05a9c0be0a93cb348674cf28c9e6ff19e84bbfc7e6cae9c2d1273cde05a1bbfc936", 0x46}, {&(0x7f0000000400)="6093c6ffe5d854e9b299b5cdafa4e985c499aa5da488735c5093a25327ed1e68cbf58650920d6dae40a793d90df734de56ebbfd2d66839ddf0d1ac630f9775b6e91fbe38f0512944c5099234f7dad20f885b1fb5b5a333d0d940d29b153e267058a39f3697b4da0dcf9756bfa71b65ba6d", 0x71}, {&(0x7f0000000480)="926530d298d5b8274cab2feab0c527f6b919807f77fdc3c860ec35b1ed18529261e468e9adf2995b5fcc32aabdc398df248165b79c67d313c2d8d9fde172707979c4b4953bdf6c36b579f9b8e80ead4c7c1f4ca7153258858677fe", 0x5b}, {&(0x7f0000000500)="3d22ef98ae489d5640f9f66de38b97af4280f56577d9e12367fec4aa9e2ad17a27d6002a88a5", 0x26}, {&(0x7f0000000540)="83088c27f386aaca01edec147b0d35029aee6654ed6c2b396fdf41305f02b2ac761cba3c12f3437bb3a7e0c98b0ad2b9658e170064b7f0e0055a891d1a147dac1442", 0x42}, {&(0x7f00000005c0)="4028ca6f09667e222bc39e48cd8660735405b629a500cdfb6caa08064a9eb4797014636ffa7e5c8c81e61481f586fe4ac15df30c6ed4d705792e47310a837751b67be77019438ed6fb12bee3e7c5354c32f8191db714fcdb0d48", 0x5a}, {&(0x7f0000000640)="53b015fc9c7e6b60c8cc9e03c626a27c3365804859c919b45a149c4e1ab6cdb2287199f6345c435cff942c386435404a749188c9fdc935c94c766147e2c210aa8d5182dfffc23845e7619f094293d228f4068aabf589bfd59912d662c4fb5753d3bdac263c00a3867516f442950b14", 0x6f}, {&(0x7f00000006c0)="3a51faea4e7a34a36ff05a3e2aabe2471f517ccac7d3b6cdf5da89b9c5db9ce06196d40ce125f45c4c0bd372140199f7a9a06b3848524c15bc89051c31cf3fcf4609dc55dde2d647d93dea8cd5d88df8c0061b059b02f9ea80942278b7ab332379131b7107f86ddaac1f24393c6f14efc94048ad8619dc8218ad0d0855293e62cd3d764ebdd853217fa7a776ce7b5c7b1e6cf0310a6ee059c1e59f7c30c3416239711c", 0xa3}, {&(0x7f0000000780)="9499a5ded6613be0a3a3be23e790", 0xe}], 0x9) executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) recvmmsg(r10, 0x0, 0x0, 0x20, 0x0) sendto$inet(r9, &(0x7f0000000680)="1c", 0x10002, 0x0, 0x0, 0x0) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x15, 0x5b09, 0x7, 0x2, 0x3, 0x5, 0x7, 0x8, 0x5, 0x9, [0xce, 0x5, 0x2005, 0x40, 0x4, 0x3, 0x400e, 0xfb]}}) socket$pppl2tp(0x18, 0x1, 0x1) executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="21000000470010aaaaaaaaaa00030000000000000000000000000000000300000000000000000000000000000003000000000000000000000000000000000000000000000110000000000000", 0x4d) executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) bind$bt_hci(r1, &(0x7f0000001580)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="11000000e1feaa601f0b685870590e9afe73d936534f2ab96ecf5c8d991048c9b91937f49ef788d68d712df1cd7807bde3068b555ccb11ea71d5f2942053c6d41aebf6468cea8f5b08f0fc808b9ffce3ae41382529564d0d79946e1227c8f90e77de67995ddaf06cc70b14b74cf489210777c5e430682a301073ffd3ff023566ab436190f0ed2564b91e4618b18e386e5b10dcad445bae1831e03a167faa", 0xfffffffffffffeec) executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xcd83, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x9b}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2cae0}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000000)=@framed={{}, [@generic={0x4, 0x8, 0x1}, @map_fd={0x18, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @ldst={0x2, 0x3, 0x3, 0x6, 0xa, 0x50, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) executing program 33: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000000)=@framed={{}, [@generic={0x4, 0x8, 0x1}, @map_fd={0x18, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @ldst={0x2, 0x3, 0x3, 0x6, 0xa, 0x50, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) program crashed: INFO: task hung in crda_timeout_work bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunks (needed=true): <6>, <6> bisect: split chunk #0 of len 6 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 30, 6, 30, 3, 5, 3, 1, 1] detailed listing: executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xd, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000640000000000000002000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000b6ffffffb702000008000000b703000084200000850000007a00000095"], &(0x7f0000000640)='GPL\x00', 0x6}, 0x94) executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0x0, 0x0, 0xff, 0x100fffe00], [0xffffff00, 0xffffffff, 0xff], 'team_slave_0\x00', 'nr0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0xb, 0xfffffff8, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x1, 'syz0\x00', 0xfe}}, @common=@unspec=@cpu={{0x28}, {0xffffffff, 0x1f}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4ef) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sk_skb}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000800), 0x1, 0x0) accept(0xffffffffffffffff, &(0x7f0000000840)=@l2tp={0x2, 0x0, @initdev}, &(0x7f00000008c0)=0x80) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000950000000000000043500998bccda9e8b4796306abc2bf33cc93ed536c596ac4c96286fc783ac9ab5d051c83e7c618"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18}, 0x94) bind$alg(r1, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000a80)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000ac0)=[{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b40)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000b80)="ebe3a0e9796cfd1647e299f4e376fdba128280b3", 0x14}, {&(0x7f0000000bc0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000cc0)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f0000000d00)={0x0, 0x500, &(0x7f0000000d40)=[{&(0x7f0000000d80)=""/81, 0x7ffff000}, {&(0x7f0000000e00)=""/83, 0x20000253}], 0x2}, 0x0) sendto$inet(r2, &(0x7f0000001500)="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", 0x12e, 0x20044004, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000f00)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="18000000101420002cbd7000fddbdf2508004c0000000000fee85a49a5b2be053e9bfd2e2907cdf94b0c68de95314b6555672737903700684ba39bff5d1dfc0c5feacb226e9b14ad942910ffc28f778c3ba1ecea0537db737398be6d2f3b31af3782ef7dc04e8dc6f9956b3e7a03e4bbc7712511e893ea19934e249f144ce60126d8cc76f2d025bc518b1e9053f0191766c54a108c9d2a284fb92d568f568a2af2e2f3de"], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000001080), 0x6) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f00000010c0)) r5 = socket$inet(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x11, 0x13, &(0x7f00000011c0)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000001280)='GPL\x00', 0xa, 0xff5c, &(0x7f00000012c0)=""/222, 0x0, 0x8}, 0x78) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000013c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000001400)=ANY=[], 0x32600) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r3, 0x7171e000) connect$inet(r5, &(0x7f0000001440)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r7 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000001480)={0x0, 0x8}, &(0x7f00000014c0)=0x8) ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000001500)) executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x1000700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv4_delroute={0x24, 0x19, 0x1, 0x71bd2b, 0x0, {0x2, 0x18, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x1000}, [@RTA_PREFSRC={0x8, 0x15, @dev={0xac, 0x14, 0x14, 0x38}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000200)={{r0, &(0x7f0000000000)='*%/!\xfa\x00', 0x0, &(0x7f0000000040)={@align=0xffffffff, {0x5, 0x2, 0x7}}, 0x2, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000100)}, {[0x7fffffff, 0x7fffffff, 0x1117]}, 0x1, 0xb0, &(0x7f0000000140)=""/176}) writev(r1, &(0x7f00000007c0)=[{&(0x7f0000000380)="b65b754d082711f4e0cb640f9e8e64d68bc57b8607186580252483e0c966724c7c8380c9a05a9c0be0a93cb348674cf28c9e6ff19e84bbfc7e6cae9c2d1273cde05a1bbfc936", 0x46}, {&(0x7f0000000400)="6093c6ffe5d854e9b299b5cdafa4e985c499aa5da488735c5093a25327ed1e68cbf58650920d6dae40a793d90df734de56ebbfd2d66839ddf0d1ac630f9775b6e91fbe38f0512944c5099234f7dad20f885b1fb5b5a333d0d940d29b153e267058a39f3697b4da0dcf9756bfa71b65ba6d", 0x71}, {&(0x7f0000000480)="926530d298d5b8274cab2feab0c527f6b919807f77fdc3c860ec35b1ed18529261e468e9adf2995b5fcc32aabdc398df248165b79c67d313c2d8d9fde172707979c4b4953bdf6c36b579f9b8e80ead4c7c1f4ca7153258858677fe", 0x5b}, {&(0x7f0000000500)="3d22ef98ae489d5640f9f66de38b97af4280f56577d9e12367fec4aa9e2ad17a27d6002a88a5", 0x26}, {&(0x7f0000000540)="83088c27f386aaca01edec147b0d35029aee6654ed6c2b396fdf41305f02b2ac761cba3c12f3437bb3a7e0c98b0ad2b9658e170064b7f0e0055a891d1a147dac1442", 0x42}, {&(0x7f00000005c0)="4028ca6f09667e222bc39e48cd8660735405b629a500cdfb6caa08064a9eb4797014636ffa7e5c8c81e61481f586fe4ac15df30c6ed4d705792e47310a837751b67be77019438ed6fb12bee3e7c5354c32f8191db714fcdb0d48", 0x5a}, {&(0x7f0000000640)="53b015fc9c7e6b60c8cc9e03c626a27c3365804859c919b45a149c4e1ab6cdb2287199f6345c435cff942c386435404a749188c9fdc935c94c766147e2c210aa8d5182dfffc23845e7619f094293d228f4068aabf589bfd59912d662c4fb5753d3bdac263c00a3867516f442950b14", 0x6f}, {&(0x7f00000006c0)="3a51faea4e7a34a36ff05a3e2aabe2471f517ccac7d3b6cdf5da89b9c5db9ce06196d40ce125f45c4c0bd372140199f7a9a06b3848524c15bc89051c31cf3fcf4609dc55dde2d647d93dea8cd5d88df8c0061b059b02f9ea80942278b7ab332379131b7107f86ddaac1f24393c6f14efc94048ad8619dc8218ad0d0855293e62cd3d764ebdd853217fa7a776ce7b5c7b1e6cf0310a6ee059c1e59f7c30c3416239711c", 0xa3}, {&(0x7f0000000780)="9499a5ded6613be0a3a3be23e790", 0xe}], 0x9) executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) recvmmsg(r10, 0x0, 0x0, 0x20, 0x0) sendto$inet(r9, &(0x7f0000000680)="1c", 0x10002, 0x0, 0x0, 0x0) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x15, 0x5b09, 0x7, 0x2, 0x3, 0x5, 0x7, 0x8, 0x5, 0x9, [0xce, 0x5, 0x2005, 0x40, 0x4, 0x3, 0x400e, 0xfb]}}) socket$pppl2tp(0x18, 0x1, 0x1) executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="21000000470010aaaaaaaaaa00030000000000000000000000000000000300000000000000000000000000000003000000000000000000000000000000000000000000000110000000000000", 0x4d) executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) bind$bt_hci(r1, &(0x7f0000001580)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="11000000e1feaa601f0b685870590e9afe73d936534f2ab96ecf5c8d991048c9b91937f49ef788d68d712df1cd7807bde3068b555ccb11ea71d5f2942053c6d41aebf6468cea8f5b08f0fc808b9ffce3ae41382529564d0d79946e1227c8f90e77de67995ddaf06cc70b14b74cf489210777c5e430682a301073ffd3ff023566ab436190f0ed2564b91e4618b18e386e5b10dcad445bae1831e03a167faa", 0xfffffffffffffeec) executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xcd83, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x9b}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2cae0}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000000)=@framed={{}, [@generic={0x4, 0x8, 0x1}, @map_fd={0x18, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @ldst={0x2, 0x3, 0x3, 0x6, 0xa, 0x50, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) executing program 33: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000000)=@framed={{}, [@generic={0x4, 0x8, 0x1}, @map_fd={0x18, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @ldst={0x2, 0x3, 0x3, 0x6, 0xa, 0x50, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 32, 7, 30, 3, 5, 3, 1, 1] detailed listing: executing program 5: bind$inet(0xffffffffffffffff, &(0x7f000000df80)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f000000dfc0)=0x7, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f000000e000)=0x40000401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f000000e040)=0x800001, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f000000e140), 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f000000e1c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e200)={0x11, 0x1c, &(0x7f000000e2c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0xfffe, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f000000e3c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r1, &(0x7f000000e080)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f000000e0c0)=0x2, 0x4) bind$inet6(r0, &(0x7f000000e100)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) listen(0xffffffffffffffff, 0xb5d6) listen(r0, 0xe0a5) socket$nl_route(0x10, 0x3, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f000000dcc0)={0x1, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f000000dd00)=r4, 0x4) r6 = bpf$ITER_CREATE(0x21, &(0x7f000000dd40)={r5}, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f000000de40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f000000de80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f000000dec0)={0x0, 0x0, &(0x7f000000df00)={&(0x7f000000df40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000040000003900000008000300", @ANYRES32=r9, @ANYBLOB="20005a801c000400060001"], 0x3c}, 0x1, 0x0, 0x0, 0x24040887}, 0x0) read(r6, &(0x7f000000dd80)=""/185, 0xb9) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$NS_GET_PARENT(r10, 0x8004b709, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000dac0)={0x0, 0x0, &(0x7f000000db00)={&(0x7f000000db40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f000000dbc0)={0x0, 0x0, &(0x7f000000dc00)={&(0x7f000000dc40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x25, 0x301, 0xfffffffe, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r8, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x44008000}, 0x20000040) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c8c0}, 0x5bfc820b5ab7c22c) r10 = socket(0x10, 0x1, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x25, 0x301, 0xfffffffe, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x44801}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r3) (async) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r3) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000004c0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r8, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x44008000}, 0x20000040) (async) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c8c0}, 0x5bfc820b5ab7c22c) (async) socket(0x10, 0x1, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000900000000000000e7000000731142000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) select(0x40, &(0x7f0000000240)={0x6}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x2}) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) recvmmsg(r10, 0x0, 0x0, 0x20, 0x0) sendto$inet(r9, &(0x7f0000000680)="1c", 0x10002, 0x0, 0x0, 0x0) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x15, 0x5b09, 0x7, 0x2, 0x3, 0x5, 0x7, 0x8, 0x5, 0x9, [0xce, 0x5, 0x2005, 0x40, 0x4, 0x3, 0x400e, 0xfb]}}) socket$pppl2tp(0x18, 0x1, 0x1) executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="21000000470010aaaaaaaaaa00030000000000000000000000000000000300000000000000000000000000000003000000000000000000000000000000000000000000000110000000000000", 0x4d) executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) bind$bt_hci(r1, &(0x7f0000001580)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="11000000e1feaa601f0b685870590e9afe73d936534f2ab96ecf5c8d991048c9b91937f49ef788d68d712df1cd7807bde3068b555ccb11ea71d5f2942053c6d41aebf6468cea8f5b08f0fc808b9ffce3ae41382529564d0d79946e1227c8f90e77de67995ddaf06cc70b14b74cf489210777c5e430682a301073ffd3ff023566ab436190f0ed2564b91e4618b18e386e5b10dcad445bae1831e03a167faa", 0xfffffffffffffeec) executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xcd83, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x9b}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2cae0}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000000)=@framed={{}, [@generic={0x4, 0x8, 0x1}, @map_fd={0x18, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @ldst={0x2, 0x3, 0x3, 0x6, 0xa, 0x50, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) executing program 33: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000000)=@framed={{}, [@generic={0x4, 0x8, 0x1}, @map_fd={0x18, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @ldst={0x2, 0x3, 0x3, 0x6, 0xa, 0x50, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) program crashed: no output from test machine bisect: the chunk can be dropped bisect: split chunk #1 of len 6 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 32, 7, 3, 1, 1] detailed listing: executing program 5: bind$inet(0xffffffffffffffff, &(0x7f000000df80)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f000000dfc0)=0x7, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f000000e000)=0x40000401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f000000e040)=0x800001, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f000000e140), 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f000000e1c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e200)={0x11, 0x1c, &(0x7f000000e2c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0xfffe, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f000000e3c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r1, &(0x7f000000e080)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f000000e0c0)=0x2, 0x4) bind$inet6(r0, &(0x7f000000e100)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) listen(0xffffffffffffffff, 0xb5d6) listen(r0, 0xe0a5) socket$nl_route(0x10, 0x3, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f000000dcc0)={0x1, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f000000dd00)=r4, 0x4) r6 = bpf$ITER_CREATE(0x21, &(0x7f000000dd40)={r5}, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f000000de40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f000000de80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f000000dec0)={0x0, 0x0, &(0x7f000000df00)={&(0x7f000000df40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000040000003900000008000300", @ANYRES32=r9, @ANYBLOB="20005a801c000400060001"], 0x3c}, 0x1, 0x0, 0x0, 0x24040887}, 0x0) read(r6, &(0x7f000000dd80)=""/185, 0xb9) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$NS_GET_PARENT(r10, 0x8004b709, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000dac0)={0x0, 0x0, &(0x7f000000db00)={&(0x7f000000db40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f000000dbc0)={0x0, 0x0, &(0x7f000000dc00)={&(0x7f000000dc40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x25, 0x301, 0xfffffffe, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r8, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x44008000}, 0x20000040) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c8c0}, 0x5bfc820b5ab7c22c) r10 = socket(0x10, 0x1, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x25, 0x301, 0xfffffffe, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x44801}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r3) (async) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r3) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000004c0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r8, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x44008000}, 0x20000040) (async) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c8c0}, 0x5bfc820b5ab7c22c) (async) socket(0x10, 0x1, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000900000000000000e7000000731142000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) select(0x40, &(0x7f0000000240)={0x6}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x2}) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xcd83, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x9b}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2cae0}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000000)=@framed={{}, [@generic={0x4, 0x8, 0x1}, @map_fd={0x18, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @ldst={0x2, 0x3, 0x3, 0x6, 0xa, 0x50, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) executing program 33: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000000)=@framed={{}, [@generic={0x4, 0x8, 0x1}, @map_fd={0x18, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x1}, @generic={0xbf, 0x2, 0xa}, @ldst={0x2, 0x3, 0x3, 0x6, 0xa, 0x50, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [29, 32, 7, 30, 3, 5] detailed listing: executing program 5: bind$inet(0xffffffffffffffff, &(0x7f000000df80)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f000000dfc0)=0x7, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f000000e000)=0x40000401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f000000e040)=0x800001, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f000000e140), 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f000000e1c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e200)={0x11, 0x1c, &(0x7f000000e2c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0xfffe, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f000000e3c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r1, &(0x7f000000e080)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f000000e0c0)=0x2, 0x4) bind$inet6(r0, &(0x7f000000e100)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) listen(0xffffffffffffffff, 0xb5d6) listen(r0, 0xe0a5) socket$nl_route(0x10, 0x3, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f000000dcc0)={0x1, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f000000dd00)=r4, 0x4) r6 = bpf$ITER_CREATE(0x21, &(0x7f000000dd40)={r5}, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f000000de40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f000000de80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f000000dec0)={0x0, 0x0, &(0x7f000000df00)={&(0x7f000000df40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000040000003900000008000300", @ANYRES32=r9, @ANYBLOB="20005a801c000400060001"], 0x3c}, 0x1, 0x0, 0x0, 0x24040887}, 0x0) read(r6, &(0x7f000000dd80)=""/185, 0xb9) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$NS_GET_PARENT(r10, 0x8004b709, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000dac0)={0x0, 0x0, &(0x7f000000db00)={&(0x7f000000db40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f000000dbc0)={0x0, 0x0, &(0x7f000000dc00)={&(0x7f000000dc40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) executing program 3: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x25, 0x301, 0xfffffffe, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r8, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x44008000}, 0x20000040) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c8c0}, 0x5bfc820b5ab7c22c) r10 = socket(0x10, 0x1, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x25, 0x301, 0xfffffffe, 0x25dfdbfd, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x44801}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r3) (async) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x40040) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r3) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000004c0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r8, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x44008000}, 0x20000040) (async) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c8c0}, 0x5bfc820b5ab7c22c) (async) socket(0x10, 0x1, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000900000000000000e7000000731142000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) select(0x40, &(0x7f0000000240)={0x6}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x2}) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3100000000140004000800010000000001080002000000000050000000120a01040000000000000000020000000900010073797a30000000000900020073797a3000000000080003000000000a1c0004000600010005b400000500020007000000080003000000000358000000060a01040000000000000000020000000900010073797a30000000000900020073797a31000000002c000400280001000b0001006f626a726566000018000200080001000000000a0900020073797a300000000014000000110001"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) recvmmsg(r10, 0x0, 0x0, 0x20, 0x0) sendto$inet(r9, &(0x7f0000000680)="1c", 0x10002, 0x0, 0x0, 0x0) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x15, 0x5b09, 0x7, 0x2, 0x3, 0x5, 0x7, 0x8, 0x5, 0x9, [0xce, 0x5, 0x2005, 0x40, 0x4, 0x3, 0x400e, 0xfb]}}) socket$pppl2tp(0x18, 0x1, 0x1) executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="21000000470010aaaaaaaaaa00030000000000000000000000000000000300000000000000000000000000000003000000000000000000000000000000000000000000000110000000000000", 0x4d) executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) bind$bt_hci(r1, &(0x7f0000001580)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="11000000e1feaa601f0b685870590e9afe73d936534f2ab96ecf5c8d991048c9b91937f49ef788d68d712df1cd7807bde3068b555ccb11ea71d5f2942053c6d41aebf6468cea8f5b08f0fc808b9ffce3ae41382529564d0d79946e1227c8f90e77de67995ddaf06cc70b14b74cf489210777c5e430682a301073ffd3ff023566ab436190f0ed2564b91e4618b18e386e5b10dcad445bae1831e03a167faa", 0xfffffffffffffeec) program crashed: INFO: task hung in genl_rcv_msg bisect: the chunk can be dropped bisect: split chunks (needed=true): <3>, <3> bisect: split chunk #0 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 30, 3, 5] detailed listing: executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000900000000000000e7000000731142000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) select(0x40, &(0x7f0000000240)={0x6}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x2}) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) recvmmsg(r10, 0x0, 0x0, 0x20, 0x0) sendto$inet(r9, &(0x7f0000000680)="1c", 0x10002, 0x0, 0x0, 0x0) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x15, 0x5b09, 0x7, 0x2, 0x3, 0x5, 0x7, 0x8, 0x5, 0x9, [0xce, 0x5, 0x2005, 0x40, 0x4, 0x3, 0x400e, 0xfb]}}) socket$pppl2tp(0x18, 0x1, 0x1) executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="21000000470010aaaaaaaaaa00030000000000000000000000000000000300000000000000000000000000000003000000000000000000000000000000000000000000000110000000000000", 0x4d) executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) bind$bt_hci(r1, &(0x7f0000001580)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="11000000e1feaa601f0b685870590e9afe73d936534f2ab96ecf5c8d991048c9b91937f49ef788d68d712df1cd7807bde3068b555ccb11ea71d5f2942053c6d41aebf6468cea8f5b08f0fc808b9ffce3ae41382529564d0d79946e1227c8f90e77de67995ddaf06cc70b14b74cf489210777c5e430682a301073ffd3ff023566ab436190f0ed2564b91e4618b18e386e5b10dcad445bae1831e03a167faa", 0xfffffffffffffeec) program crashed: INFO: task hung in addrconf_dad_work bisect: the chunk can be dropped bisect: testing without sub-chunk 2/2 bisect: no need to test this chunk, it's definitely needed bisect: split chunk #1 of len 3 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 5] detailed listing: executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000900000000000000e7000000731142000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) select(0x40, &(0x7f0000000240)={0x6}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x2}) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) bind$bt_hci(r1, &(0x7f0000001580)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="11000000e1feaa601f0b685870590e9afe73d936534f2ab96ecf5c8d991048c9b91937f49ef788d68d712df1cd7807bde3068b555ccb11ea71d5f2942053c6d41aebf6468cea8f5b08f0fc808b9ffce3ae41382529564d0d79946e1227c8f90e77de67995ddaf06cc70b14b74cf489210777c5e430682a301073ffd3ff023566ab436190f0ed2564b91e4618b18e386e5b10dcad445bae1831e03a167faa", 0xfffffffffffffeec) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 30, 3] detailed listing: executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000900000000000000e7000000731142000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) select(0x40, &(0x7f0000000240)={0x6}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x2}) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3100000000140004000800010000000001080002000000000050000000120a01040000000000000000020000000900010073797a30000000000900020073797a3000000000080003000000000a1c0004000600010005b400000500020007000000080003000000000358000000060a01040000000000000000020000000900010073797a30000000000900020073797a31000000002c000400280001000b0001006f626a726566000018000200080001000000000a0900020073797a300000000014000000110001"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) recvmmsg(r10, 0x0, 0x0, 0x20, 0x0) sendto$inet(r9, &(0x7f0000000680)="1c", 0x10002, 0x0, 0x0, 0x0) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x15, 0x5b09, 0x7, 0x2, 0x3, 0x5, 0x7, 0x8, 0x5, 0x9, [0xce, 0x5, 0x2005, 0x40, 0x4, 0x3, 0x400e, 0xfb]}}) socket$pppl2tp(0x18, 0x1, 0x1) executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="21000000470010aaaaaaaaaa00030000000000000000000000000000000300000000000000000000000000000003000000000000000000000000000000000000000000000110000000000000", 0x4d) program crashed: INFO: task hung in reg_process_self_managed_hints bisect: the chunk can be dropped bisect: split chunks (needed=true): <1>, <2> bisect: split chunk #0 of len 1 into 2 parts bisect: no way to further split the chunk bisect: split chunk #1 of len 2 into 2 parts bisect: testing without sub-chunk 1/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 3] detailed listing: executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000900000000000000e7000000731142000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) select(0x40, &(0x7f0000000240)={0x6}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x2}) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="21000000470010aaaaaaaaaa00030000000000000000000000000000000300000000000000000000000000000003000000000000000000000000000000000000000000000110000000000000", 0x4d) program did not crash bisect: testing without sub-chunk 2/2 testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 30] detailed listing: executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000900000000000000e7000000731142000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) select(0x40, &(0x7f0000000240)={0x6}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x2}) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3100000000140004000800010000000001080002000000000050000000120a01040000000000000000020000000900010073797a30000000000900020073797a3000000000080003000000000a1c0004000600010005b400000500020007000000080003000000000358000000060a01040000000000000000020000000900010073797a30000000000900020073797a31000000002c000400280001000b0001006f626a726566000018000200080001000000000a0900020073797a300000000014000000110001"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) recvmmsg(r10, 0x0, 0x0, 0x20, 0x0) sendto$inet(r9, &(0x7f0000000680)="1c", 0x10002, 0x0, 0x0, 0x0) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x15, 0x5b09, 0x7, 0x2, 0x3, 0x5, 0x7, 0x8, 0x5, 0x9, [0xce, 0x5, 0x2005, 0x40, 0x4, 0x3, 0x400e, 0xfb]}}) socket$pppl2tp(0x18, 0x1, 0x1) program crashed: INFO: task hung in linkwatch_event bisect: the chunk can be dropped bisect: split chunks (needed=true): <1, final>, <1> bisect: split chunk #1 of len 1 into 2 parts bisect: no way to further split the chunk bisect: 2 programs left: executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000900000000000000e7000000731142000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) select(0x40, &(0x7f0000000240)={0x6}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x2}) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) recvmmsg(r10, 0x0, 0x0, 0x20, 0x0) sendto$inet(r9, &(0x7f0000000680)="1c", 0x10002, 0x0, 0x0, 0x0) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x15, 0x5b09, 0x7, 0x2, 0x3, 0x5, 0x7, 0x8, 0x5, 0x9, [0xce, 0x5, 0x2005, 0x40, 0x4, 0x3, 0x400e, 0xfb]}}) socket$pppl2tp(0x18, 0x1, 0x1) bisect: trying to concatenate bisect: concatenate 2 entries minimizing program #0 before concatenation testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 30] detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000900000000000000e7000000731142000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) socket$netlink(0x10, 0x3, 0xc) select(0x40, &(0x7f0000000240)={0x6}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x2}) executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) recvmmsg(r10, 0x0, 0x0, 0x20, 0x0) sendto$inet(r9, &(0x7f0000000680)="1c", 0x10002, 0x0, 0x0, 0x0) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x15, 0x5b09, 0x7, 0x2, 0x3, 0x5, 0x7, 0x8, 0x5, 0x9, [0xce, 0x5, 0x2005, 0x40, 0x4, 0x3, 0x400e, 0xfb]}}) socket$pppl2tp(0x18, 0x1, 0x1) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 30] detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000900000000000000e7000000731142000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) recvmmsg(r10, 0x0, 0x0, 0x20, 0x0) sendto$inet(r9, &(0x7f0000000680)="1c", 0x10002, 0x0, 0x0, 0x0) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x15, 0x5b09, 0x7, 0x2, 0x3, 0x5, 0x7, 0x8, 0x5, 0x9, [0xce, 0x5, 0x2005, 0x40, 0x4, 0x3, 0x400e, 0xfb]}}) socket$pppl2tp(0x18, 0x1, 0x1) program crashed: INFO: task hung in addrconf_dad_work testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 30] detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000900000000000000e7000000731142000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3100000000140004000800010000000001080002000000000050000000120a01040000000000000000020000000900010073797a30000000000900020073797a3000000000080003000000000a1c0004000600010005b400000500020007000000080003000000000358000000060a01040000000000000000020000000900010073797a30000000000900020073797a31000000002c000400280001000b0001006f626a726566000018000200080001000000000a0900020073797a300000000014000000110001"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) recvmmsg(r10, 0x0, 0x0, 0x20, 0x0) sendto$inet(r9, &(0x7f0000000680)="1c", 0x10002, 0x0, 0x0, 0x0) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x15, 0x5b09, 0x7, 0x2, 0x3, 0x5, 0x7, 0x8, 0x5, 0x9, [0xce, 0x5, 0x2005, 0x40, 0x4, 0x3, 0x400e, 0xfb]}}) socket$pppl2tp(0x18, 0x1, 0x1) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 30] detailed listing: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000900000000000000e7000000731142000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) recvmmsg(r10, 0x0, 0x0, 0x20, 0x0) sendto$inet(r9, &(0x7f0000000680)="1c", 0x10002, 0x0, 0x0, 0x0) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x15, 0x5b09, 0x7, 0x2, 0x3, 0x5, 0x7, 0x8, 0x5, 0x9, [0xce, 0x5, 0x2005, 0x40, 0x4, 0x3, 0x400e, 0xfb]}}) socket$pppl2tp(0x18, 0x1, 0x1) program crashed: no output from test machine testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 30] detailed listing: executing program 0: socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000900000000000000e7000000731142000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) recvmmsg(r10, 0x0, 0x0, 0x20, 0x0) sendto$inet(r9, &(0x7f0000000680)="1c", 0x10002, 0x0, 0x0, 0x0) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x15, 0x5b09, 0x7, 0x2, 0x3, 0x5, 0x7, 0x8, 0x5, 0x9, [0xce, 0x5, 0x2005, 0x40, 0x4, 0x3, 0x400e, 0xfb]}}) socket$pppl2tp(0x18, 0x1, 0x1) program crashed: INFO: task hung in genl_rcv_msg testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 30] detailed listing: executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3100000000140004000800010000000001080002000000000050000000120a01040000000000000000020000000900010073797a30000000000900020073797a3000000000080003000000000a1c0004000600010005b400000500020007000000080003000000000358000000060a01040000000000000000020000000900010073797a30000000000900020073797a31000000002c000400280001000b0001006f626a726566000018000200080001000000000a0900020073797a300000000014000000110001"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) recvmmsg(r10, 0x0, 0x0, 0x20, 0x0) sendto$inet(r9, &(0x7f0000000680)="1c", 0x10002, 0x0, 0x0, 0x0) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x15, 0x5b09, 0x7, 0x2, 0x3, 0x5, 0x7, 0x8, 0x5, 0x9, [0xce, 0x5, 0x2005, 0x40, 0x4, 0x3, 0x400e, 0xfb]}}) socket$pppl2tp(0x18, 0x1, 0x1) program crashed: no output from test machine testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 30] detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 5: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) recvmmsg(r10, 0x0, 0x0, 0x20, 0x0) sendto$inet(r9, &(0x7f0000000680)="1c", 0x10002, 0x0, 0x0, 0x0) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x15, 0x5b09, 0x7, 0x2, 0x3, 0x5, 0x7, 0x8, 0x5, 0x9, [0xce, 0x5, 0x2005, 0x40, 0x4, 0x3, 0x400e, 0xfb]}}) socket$pppl2tp(0x18, 0x1, 0x1) program crashed: INFO: task hung in rtnl_newlink minimized 7 calls -> 2 calls minimizing program #1 before concatenation testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 29] detailed listing: executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) recvmmsg(r10, 0x0, 0x0, 0x20, 0x0) sendto$inet(r9, &(0x7f0000000680)="1c", 0x10002, 0x0, 0x0, 0x0) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x15, 0x5b09, 0x7, 0x2, 0x3, 0x5, 0x7, 0x8, 0x5, 0x9, [0xce, 0x5, 0x2005, 0x40, 0x4, 0x3, 0x400e, 0xfb]}}) program crashed: INFO: task hung in inet6_rtm_newaddr testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 28] detailed listing: executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) recvmmsg(r10, 0x0, 0x0, 0x20, 0x0) sendto$inet(r9, &(0x7f0000000680)="1c", 0x10002, 0x0, 0x0, 0x0) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) program crashed: INFO: task hung in inet_rtm_newaddr testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 27] detailed listing: executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) recvmmsg(r10, 0x0, 0x0, 0x20, 0x0) sendto$inet(r9, &(0x7f0000000680)="1c", 0x10002, 0x0, 0x0, 0x0) close(0x4) program crashed: INFO: task hung in genl_rcv_msg testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 26] detailed listing: executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3100000000140004000800010000000001080002000000000050000000120a01040000000000000000020000000900010073797a30000000000900020073797a3000000000080003000000000a1c0004000600010005b400000500020007000000080003000000000358000000060a01040000000000000000020000000900010073797a30000000000900020073797a31000000002c000400280001000b0001006f626a726566000018000200080001000000000a0900020073797a300000000014000000110001"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) recvmmsg(r10, 0x0, 0x0, 0x20, 0x0) sendto$inet(r9, &(0x7f0000000680)="1c", 0x10002, 0x0, 0x0, 0x0) program crashed: INFO: task hung in addrconf_dad_work testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 25] detailed listing: executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) recvmmsg(r10, 0x0, 0x0, 0x20, 0x0) program crashed: INFO: task hung in addrconf_dad_work testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 24] detailed listing: executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000003100090027bd70000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4) program crashed: INFO: task hung in synchronize_rcu testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 23] detailed listing: executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) socket$nl_generic(0x10, 0x3, 0x10) program crashed: no output from test machine testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 22] detailed listing: executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) program crashed: INFO: task hung in linkwatch_event testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 21] detailed listing: executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 21] detailed listing: executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) program crashed: INFO: task hung in linkwatch_event testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 20] detailed listing: executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 20] detailed listing: executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3100000000140004000800010000000001080002000000000050000000120a01040000000000000000020000000900010073797a30000000000900020073797a3000000000080003000000000a1c0004000600010005b400000500020007000000080003000000000358000000060a01040000000000000000020000000900010073797a30000000000900020073797a31000000002c000400280001000b0001006f626a726566000018000200080001000000000a0900020073797a300000000014000000110001"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = getpid() sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r4, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r2, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r7, 0xfffffffc) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 20] detailed listing: executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3100000000140004000800010000000001080002000000000050000000120a01040000000000000000020000000900010073797a30000000000900020073797a3000000000080003000000000a1c0004000600010005b400000500020007000000080003000000000358000000060a01040000000000000000020000000900010073797a30000000000900020073797a31000000002c000400280001000b0001006f626a726566000018000200080001000000000a0900020073797a300000000014000000110001"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r8, 0xfffffffc) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) program crashed: lost connection to test machine ignore low priority crash: lost connection to test machine testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 20] detailed listing: executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r9, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) program crashed: INFO: task hung in addrconf_dad_work testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 19] detailed listing: executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r8, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) program crashed: INFO: task hung in linkwatch_event testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 18] detailed listing: executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r8, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) program crashed: INFO: task hung in synchronize_rcu testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 17] detailed listing: executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r6, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) program crashed: INFO: task hung in netdev_work_proc testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 16] detailed listing: executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r6, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) program crashed: INFO: task hung in genl_rcv_msg testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 15] detailed listing: executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3100000000140004000800010000000001080002000000000050000000120a01040000000000000000020000000900010073797a30000000000900020073797a3000000000080003000000000a1c0004000600010005b400000500020007000000080003000000000358000000060a01040000000000000000020000000900010073797a30000000000900020073797a31000000002c000400280001000b0001006f626a726566000018000200080001000000000a0900020073797a300000000014000000110001"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r5, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="053d56428fa77cd95d989d24e8b945dbf3ba38d5b81d7d42bd0389a1c0f230b849a87a2ee16f54cb4c3d1d2ff95dec"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r6, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) program crashed: no output from test machine testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 14] detailed listing: executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = getpid() sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r4, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) sendmsg$nl_xfrm(r2, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r5, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) program crashed: INFO: task hung in addrconf_dad_work testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 13] detailed listing: executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = getpid() sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r4, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_xfrm(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={0x0}}, 0x20000000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r5, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) program crashed: INFO: task hung in addrconf_dad_work testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 12] detailed listing: executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002d00070127bd700000000000017c00000c000280cbd30d11251c9a260400078008000100", @ANYRES32=r3, @ANYBLOB="386c825385"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r4, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) program crashed: INFO: task hung in addrconf_dad_work testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 11] detailed listing: executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) getpid() r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r2, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) program crashed: INFO: task hung in linkwatch_event testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 10] detailed listing: executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r2, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) program crashed: INFO: task hung in linkwatch_event testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 9] detailed listing: executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3100000000140004000800010000000001080002000000000050000000120a01040000000000000000020000000900010073797a30000000000900020073797a3000000000080003000000000a1c0004000600010005b400000500020007000000080003000000000358000000060a01040000000000000000020000000900010073797a30000000000900020073797a31000000002c000400280001000b0001006f626a726566000018000200080001000000000a0900020073797a300000000014000000110001"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r2, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) program crashed: no output from test machine testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 8] detailed listing: executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r2, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) program crashed: INFO: task hung in inet6_rtm_newaddr testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 7] detailed listing: executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r2, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) program crashed: INFO: task hung in addrconf_dad_work testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 6] detailed listing: executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) program crashed: no output from test machine testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 5] detailed listing: executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) program crashed: INFO: task hung in addrconf_dad_work testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 4] detailed listing: executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) program crashed: INFO: task hung in crda_timeout_work minimized 30 calls -> 4 calls testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$NFT_BATCH-socket$inet_mptcp-sendmsg$NL80211_CMD_TDLS_OPER-connect$inet-sendmsg$nl_generic detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000003100010325bd7000fcffffff06"], 0x14}}, 0x40800) program crashed: INFO: task hung in rtnl_newlink bisect: concatenation succeeded found reproducer with 6 syscalls minimizing guilty program testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$NFT_BATCH-socket$inet_mptcp-sendmsg$NL80211_CMD_TDLS_OPER-connect$inet detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) program crashed: INFO: task hung in addrconf_dad_work testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$NFT_BATCH-socket$inet_mptcp-sendmsg$NL80211_CMD_TDLS_OPER detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc180}, 0x20000040) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$NFT_BATCH-socket$inet_mptcp-connect$inet detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) program crashed: INFO: task hung in inet_rtm_newaddr testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$NFT_BATCH-connect$inet detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3100000000140004000800010000000001080002000000000050000000120a01040000000000000000020000000900010073797a30000000000900020073797a3000000000080003000000000a1c0004000600010005b400000500020007000000080003000000000358000000060a01040000000000000000020000000900010073797a30000000000900020073797a31000000002c000400280001000b0001006f626a726566000018000200080001000000000a0900020073797a300000000014000000110001"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-socket$inet_mptcp-connect$inet detailed listing: executing program 0: socket$netlink(0x10, 0x3, 0xc) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$NFT_BATCH-socket$inet_mptcp-connect$inet detailed listing: executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$NFT_BATCH-socket$inet_mptcp-connect$inet detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$NFT_BATCH-socket$inet_mptcp-connect$inet detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$NFT_BATCH-socket$inet_mptcp-connect$inet detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$NFT_BATCH-socket$inet_mptcp-connect$inet detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$NFT_BATCH-socket$inet_mptcp-connect$inet detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$NFT_BATCH-socket$inet_mptcp-connect$inet program crashed: INFO: task hung in linkwatch_event simplifying C reproducer testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$NFT_BATCH-socket$inet_mptcp-connect$inet program crashed: INFO: task hung in addrconf_dad_work testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$NFT_BATCH-socket$inet_mptcp-connect$inet program crashed: no output from test machine testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$NFT_BATCH-socket$inet_mptcp-connect$inet program crashed: no output from test machine testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$NFT_BATCH-socket$inet_mptcp-connect$inet program crashed: no output from test machine testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$NFT_BATCH-socket$inet_mptcp-connect$inet program crashed: no output from test machine testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$NFT_BATCH-socket$inet_mptcp-connect$inet program crashed: no output from test machine testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$NFT_BATCH-socket$inet_mptcp-connect$inet program crashed: no output from test machine testing program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$NFT_BATCH-socket$inet_mptcp-connect$inet detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) program did not crash validation run: crashed=false testing program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$NFT_BATCH-socket$inet_mptcp-connect$inet detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) program did not crash validation run: crashed=false testing program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$NFT_BATCH-socket$inet_mptcp-connect$inet detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) program crashed: INFO: task hung in crda_timeout_work validation run: crashed=true testing program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$NFT_BATCH-socket$inet_mptcp-connect$inet detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) program crashed: INFO: task hung in crda_timeout_work validation run: crashed=true testing program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$NFT_BATCH-socket$inet_mptcp-connect$inet detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3100000000140004000800010000000001080002000000000050000000120a01040000000000000000020000000900010073797a30000000000900020073797a3000000000080003000000000a1c0004000600010005b400000500020007000000080003000000000358000000060a01040000000000000000020000000900010073797a30000000000900020073797a31000000002c000400280001000b0001006f626a726566000018000200080001000000000a0900020073797a300000000014000000110001"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) program did not crash validation run: crashed=false testing program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$NFT_BATCH-socket$inet_mptcp-connect$inet detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) program did not crash validation run: crashed=false testing program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$NFT_BATCH-socket$inet_mptcp-connect$inet detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3100000000140004000800010000000001080002000000000050000000120a01040000000000000000020000000900010073797a30000000000900020073797a3000000000080003000000000a1c0004000600010005b400000500020007000000080003000000000358000000060a01040000000000000000020000000900010073797a30000000000900020073797a31000000002c000400280001000b0001006f626a726566000018000200080001000000000a0900020073797a300000000014000000110001"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) program did not crash validation run: crashed=false testing program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$NFT_BATCH-socket$inet_mptcp-connect$inet detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) program did not crash validation run: crashed=false testing program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$NFT_BATCH-socket$inet_mptcp-connect$inet detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) program did not crash validation run: crashed=false testing program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-sendmsg$NFT_BATCH-socket$inet_mptcp-connect$inet detailed listing: executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) program did not crash validation run: crashed=false reproducing took 8h56m10.511189137s repro crashed as (corrupted=false): INFO: task kworker/0:0:9 blocked for more than 145 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:0 state:D stack:24520 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: events_power_efficient crda_timeout_work Call Trace: context_switch kernel/sched/core.c:5583 [inline] __schedule+0x17dd/0x5830 kernel/sched/core.c:7382 __schedule_loop kernel/sched/core.c:7459 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7474 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7531 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x7c4/0x15a0 kernel/locking/mutex.c:821 crda_timeout_work+0x1f/0x90 net/wireless/reg.c:530 process_one_work kernel/workqueue.c:3495 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3578 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3659 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INFO: task kworker/0:1:10 blocked for more than 145 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:1 state:D stack:24032 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: events reg_todo Call Trace: context_switch kernel/sched/core.c:5583 [inline] __schedule+0x17dd/0x5830 kernel/sched/core.c:7382 __schedule_loop kernel/sched/core.c:7459 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7474 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7531 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x7c4/0x15a0 kernel/locking/mutex.c:821 class_wiphy_constructor include/net/cfg80211.h:6990 [inline] reg_process_self_managed_hints+0xae/0x170 net/wireless/reg.c:3263 reg_todo+0xe6e/0xff0 net/wireless/reg.c:3277 process_one_work kernel/workqueue.c:3495 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3578 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3659 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Showing all locks held in the system: locks held by kworker/0:0/9: 3, on CPU#0: #0: ffff88813ff49d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88813ff49d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88813ff49d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff88813ff49d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc900000e7c40 ((crda_timeout).work){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc900000e7c40 ((crda_timeout).work){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc900000e7c40 ((crda_timeout).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc900000e7c40 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffffffff916d4580 (cfg80211_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x1f/0x90 net/wireless/reg.c:530 locks held by kworker/0:1/10: 4, on CPU#0: #0: ffff88813ff4ad48 ((wq_completion)events){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88813ff4ad48 ((wq_completion)events){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88813ff4ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff88813ff4ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc900000f7c40 (reg_work){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc900000f7c40 (reg_work){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc900000f7c40 (reg_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc900000f7c40 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffffffff916d4580 (cfg80211_mutex){+.+.}-{4:4}, at: class_mutex_constructor include/linux/mutex.h:253 [inline] #2: ffffffff916d4580 (cfg80211_mutex){+.+.}-{4:4}, at: reg_todo+0x80/0xff0 net/wireless/reg.c:3273 #3: ffff88807fea0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6990 [inline] #3: ffff88807fea0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0xae/0x170 net/wireless/reg.c:3263 locks held by kworker/u8:0/12: 3, last CPU#1: #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffff88807fea0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6990 [inline] #2: ffff88807fea0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 net/wireless/core.c:596 locks held by kworker/1:1/29: 4, last CPU#1: #0: ffff88803421b148 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88803421b148 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88803421b148 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff88803421b148 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc90000a47c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90000a47c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90000a47c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc90000a47c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffff8880791c9480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 drivers/net/wireguard/noise.c:598 #3: ffff888038158d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 drivers/net/wireguard/noise.c:632 locks held by kworker/1:2/30: 4, last CPU#1: #0: ffff88803579dd48 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88803579dd48 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88803579dd48 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff88803579dd48 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc90000a67c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90000a67c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90000a67c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc90000a67c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffff888031edd480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 drivers/net/wireguard/noise.c:678 #3: ffff888038159700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 drivers/net/wireguard/noise.c:679 locks held by khungtaskd/33: 1, last CPU#1: #0: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6871 locks held by kworker/u8:2/40: 2, last CPU#1: #0: ffff8880331fd948 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff8880331fd948 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff8880331fd948 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff8880331fd948 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc90000b07c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90000b07c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90000b07c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc90000b07c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 locks held by kworker/u8:4/63: 3, last CPU#1: #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc9000204fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000204fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000204fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc9000204fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffff88807db50800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6990 [inline] #2: ffff88807db50800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 net/wireless/core.c:596 locks held by kworker/u8:5/88: 2, last CPU#1: #0: ffff888034380148 ((wq_completion)bat_events){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff888034380148 ((wq_completion)bat_events){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff888034380148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff888034380148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc9000252fc40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000252fc40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000252fc40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc9000252fc40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 locks held by kworker/u8:6/188: 3, on CPU#0: #0: ffff88801c76d148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801c76d148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801c76d148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff88801c76d148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc90003037c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90003037c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90003037c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc90003037c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:134 [inline] #2: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 net/ipv6/addrconf.c:4795 locks held by kworker/0:2/992: 3, last CPU#0: #0: ffff88803579dd48 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88803579dd48 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88803579dd48 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff88803579dd48 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc9000518fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000518fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000518fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc9000518fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffff888038159700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 drivers/net/wireguard/noise.c:821 locks held by kworker/u8:7/1044: 3, on CPU#1: #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc9000538fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000538fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000538fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc9000538fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:313 locks held by kworker/u8:8/1140: 3, last CPU#1: #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc900056afc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc900056afc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc900056afc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc900056afc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffff88807ffd2258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 drivers/net/netdevsim/dev.c:834 locks held by udevd/5000: 4, last CPU#1: #0: ffffffff9003a4f0 (dup_mmap_sem){.+.+}-{0:0}, at: dup_mm kernel/fork.c:1541 [inline] #0: ffffffff9003a4f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x470 kernel/fork.c:1594 #1: ffff88807f749bc0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_write_lock_killable include/linux/mmap_lock.h:550 [inline] #1: ffff88807f749bc0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x18a/0x1e10 mm/mmap.c:1716 #2: ffff888021f45900 (&mm->mmap_lock/1){+.+.}-{4:4}, at: mmap_write_lock_nested include/linux/mmap_lock.h:540 [inline] #2: ffff888021f45900 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x277/0x1e10 mm/mmap.c:1723 #3: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:213 [inline] #3: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:320 locks held by kworker/0:3/5366: 7, last CPU#0: #0: ffff8880223c0948 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff8880223c0948 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff8880223c0948 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff8880223c0948 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc900036c7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc900036c7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc900036c7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc900036c7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffff8880791cd480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 drivers/net/wireguard/noise.c:598 #3: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: local_lock_acquire include/linux/local_lock_internal.h:46 [inline] #3: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 net/core/dev.c:6895 #4: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #4: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #4: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: nf_hook include/linux/netfilter.h:249 [inline] #4: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 include/linux/netfilter.h:323 #5: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #5: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #5: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: class_rcu_constructor include/linux/rcupdate.h:1216 [inline] #5: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 arch/x86/kernel/unwind_orc.c:495 #6: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #6: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #6: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 net/ipv4/ip_output.c:229 locks held by crond/5373: 2, last CPU#1: #0: ffffffff90701b18 (tomoyo_ss){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:213 [inline] #0: ffffffff90701b18 (tomoyo_ss){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:320 [inline] #0: ffffffff90701b18 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_read_lock security/tomoyo/common.h:1112 [inline] #0: ffffffff90701b18 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 security/tomoyo/file.c:826 #1: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:213 [inline] #1: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:320 locks held by getty/5389: 2, on CPU#0: #0: ffff888037fa40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 drivers/tty/n_tty.c:2211 locks held by syz-executor/5645: 2, last CPU#1: #0: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:213 [inline] #0: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:320 #1: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: __page_table_check_zero+0x6c/0x430 mm/page_table_check.c:138 locks held by kworker/1:3/5686: 5, last CPU#1: #0: ffff8880223c0948 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff8880223c0948 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff8880223c0948 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff8880223c0948 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc900044d7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc900044d7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc900044d7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc900044d7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffff88803815b4b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 drivers/net/wireguard/noise.c:821 #3: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:213 [inline] #3: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:320 #4: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #4: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #4: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: class_rcu_constructor include/linux/rcupdate.h:1216 [inline] #4: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 arch/x86/kernel/unwind_orc.c:495 locks held by syz-executor/5872: 2, on CPU#1: #0: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: tun_detach drivers/net/tun.c:654 [inline] #0: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 drivers/net/tun.c:3608 #1: ffffffff8ff609a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:311 [inline] #1: ffffffff8ff609a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2cb/0x760 kernel/rcu/tree_exp.h:966 locks held by kworker/0:5/6001: 1, last CPU#0: #0: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:213 [inline] #0: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:320 locks held by kworker/0:6/6004: 4, last CPU#0: #0: ffff88803421b148 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88803421b148 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88803421b148 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff88803421b148 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc90004437c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90004437c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90004437c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc90004437c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffff8880791c9480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 drivers/net/wireguard/noise.c:598 #3: ffff888038158330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 drivers/net/wireguard/noise.c:632 locks held by kworker/0:7/6005: 4, last CPU#0: #0: ffff88813ff49d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88813ff49d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88813ff49d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff88813ff49d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc90003477c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90003477c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90003477c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc90003477c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #2: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #2: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x1890 net/netfilter/nf_conntrack_core.c:1530 #3: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #3: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #3: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: nf_conntrack_free+0x97/0x710 net/netfilter/nf_conntrack_core.c:1726 locks held by dhcpcd-run-hook/6006: 2, last CPU#1: #0: ffff888026ea3160 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: prepare_bprm_creds fs/exec.c:1419 [inline] #0: ffff888026ea3160 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xbc/0x1590 fs/exec.c:1845 #1: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:213 [inline] #1: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:320 locks held by kworker/1:5/6007: 3, last CPU#1: #0: ffff88813ff4ad48 ((wq_completion)events){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88813ff4ad48 ((wq_completion)events){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88813ff4ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff88813ff4ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc90003467c40 ((debug_obj_work).work){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90003467c40 ((debug_obj_work).work){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90003467c40 ((debug_obj_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc90003467c40 ((debug_obj_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #2: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #2: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: class_rcu_constructor include/linux/rcupdate.h:1216 [inline] #2: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 arch/x86/kernel/unwind_orc.c:495 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:123 nmi_trigger_cpumask_backtrace+0x17d/0x390 lib/nmi_backtrace.c:66 trigger_all_cpu_backtrace include/linux/nmi.h:164 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x135/0x170 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:377 [inline] watchdog+0x1073/0x10f0 kernel/hung_task.c:598 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 5366 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker RIP: 0010:check_preemption_disabled+0x1a/0xd0 lib/smp_processor_id.c:53 Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 65 8b 05 eb 4b bd 08 65 48 8b 0d bb 4b bd 08 85 c9 74 0c 5b <41> 5e 41 5f 5d e9 fc f4 02 00 cc 9c 59 f7 c1 00 02 00 00 74 ea 65 RSP: 0018:ffffc90000007b78 EFLAGS: 00000202 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 8000000000000102 RDX: 0000000000000000 RSI: ffffffff8c8e8c60 RDI: ffffffff8c8e8c20 RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000003 R11: 8000000000000100 R12: ffff8880b823dbe8 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff88812361f000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f777f720286 CR3: 000000000fd48000 CR4: 00000000003526f0 Call Trace: rcu_is_watching_curr_cpu include/linux/context_tracking.h:128 [inline] rcu_is_watching+0x16/0xb0 kernel/rcu/tree.c:753 trace_lock_acquire include/trace/events/lock.h:23 [inline] lock_acquire+0x58/0x350 kernel/locking/lockdep.c:5905 local_lock_acquire include/linux/local_lock_internal.h:46 [inline] process_backlog+0x95e/0x18b0 net/core/dev.c:6906 __napi_poll+0xaa/0x330 net/core/dev.c:7968 napi_poll net/core/dev.c:8031 [inline] net_rx_action+0x61d/0xf50 net/core/dev.c:8188 handle_softirqs+0x265/0x8d0 kernel/softirq.c:669 do_softirq+0x77/0xd0 kernel/softirq.c:569 __local_bh_enable_ip+0x100/0x140 kernel/softirq.c:473 blake2s_compress+0xfa/0x1c00 lib/crypto/x86/blake2s.h:42 blake2s_update+0x140/0x450 lib/crypto/blake2s.c:119 hmac+0x2d1/0x3b0 drivers/net/wireguard/noise.c:332 kdf+0x12d/0x290 drivers/net/wireguard/noise.c:367 mix_precomputed_dh drivers/net/wireguard/noise.c:426 [inline] wg_noise_handshake_consume_initiation+0x464/0x9b0 drivers/net/wireguard/noise.c:623 wg_receive_handshake_packet drivers/net/wireguard/receive.c:144 [inline] wg_packet_handshake_receive_worker+0x674/0x10b0 drivers/net/wireguard/receive.c:213 process_one_work kernel/workqueue.c:3495 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3578 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3659 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 final repro crashed as (corrupted=false): INFO: task kworker/0:0:9 blocked for more than 145 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:0 state:D stack:24520 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: events_power_efficient crda_timeout_work Call Trace: context_switch kernel/sched/core.c:5583 [inline] __schedule+0x17dd/0x5830 kernel/sched/core.c:7382 __schedule_loop kernel/sched/core.c:7459 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7474 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7531 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x7c4/0x15a0 kernel/locking/mutex.c:821 crda_timeout_work+0x1f/0x90 net/wireless/reg.c:530 process_one_work kernel/workqueue.c:3495 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3578 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3659 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 INFO: task kworker/0:1:10 blocked for more than 145 seconds. Not tainted syzkaller #0 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/0:1 state:D stack:24032 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00080000 Workqueue: events reg_todo Call Trace: context_switch kernel/sched/core.c:5583 [inline] __schedule+0x17dd/0x5830 kernel/sched/core.c:7382 __schedule_loop kernel/sched/core.c:7459 [inline] schedule+0x164/0x2b0 kernel/sched/core.c:7474 schedule_preempt_disabled+0x13/0x30 kernel/sched/core.c:7531 __mutex_lock_common kernel/locking/mutex.c:726 [inline] __mutex_lock+0x7c4/0x15a0 kernel/locking/mutex.c:821 class_wiphy_constructor include/net/cfg80211.h:6990 [inline] reg_process_self_managed_hints+0xae/0x170 net/wireless/reg.c:3263 reg_todo+0xe6e/0xff0 net/wireless/reg.c:3277 process_one_work kernel/workqueue.c:3495 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3578 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3659 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Showing all locks held in the system: locks held by kworker/0:0/9: 3, on CPU#0: #0: ffff88813ff49d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88813ff49d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88813ff49d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff88813ff49d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc900000e7c40 ((crda_timeout).work){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc900000e7c40 ((crda_timeout).work){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc900000e7c40 ((crda_timeout).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc900000e7c40 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffffffff916d4580 (cfg80211_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x1f/0x90 net/wireless/reg.c:530 locks held by kworker/0:1/10: 4, on CPU#0: #0: ffff88813ff4ad48 ((wq_completion)events){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88813ff4ad48 ((wq_completion)events){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88813ff4ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff88813ff4ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc900000f7c40 (reg_work){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc900000f7c40 (reg_work){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc900000f7c40 (reg_work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc900000f7c40 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffffffff916d4580 (cfg80211_mutex){+.+.}-{4:4}, at: class_mutex_constructor include/linux/mutex.h:253 [inline] #2: ffffffff916d4580 (cfg80211_mutex){+.+.}-{4:4}, at: reg_todo+0x80/0xff0 net/wireless/reg.c:3273 #3: ffff88807fea0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6990 [inline] #3: ffff88807fea0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0xae/0x170 net/wireless/reg.c:3263 locks held by kworker/u8:0/12: 3, last CPU#1: #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffff88807fea0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6990 [inline] #2: ffff88807fea0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 net/wireless/core.c:596 locks held by kworker/1:1/29: 4, last CPU#1: #0: ffff88803421b148 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88803421b148 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88803421b148 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff88803421b148 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc90000a47c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90000a47c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90000a47c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc90000a47c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffff8880791c9480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 drivers/net/wireguard/noise.c:598 #3: ffff888038158d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 drivers/net/wireguard/noise.c:632 locks held by kworker/1:2/30: 4, last CPU#1: #0: ffff88803579dd48 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88803579dd48 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88803579dd48 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff88803579dd48 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc90000a67c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90000a67c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90000a67c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc90000a67c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffff888031edd480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 drivers/net/wireguard/noise.c:678 #3: ffff888038159700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 drivers/net/wireguard/noise.c:679 locks held by khungtaskd/33: 1, last CPU#1: #0: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 kernel/locking/lockdep.c:6871 locks held by kworker/u8:2/40: 2, last CPU#1: #0: ffff8880331fd948 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff8880331fd948 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff8880331fd948 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff8880331fd948 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc90000b07c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90000b07c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90000b07c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc90000b07c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 locks held by kworker/u8:4/63: 3, last CPU#1: #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc9000204fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000204fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000204fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc9000204fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffff88807db50800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: class_wiphy_constructor include/net/cfg80211.h:6990 [inline] #2: ffff88807db50800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 net/wireless/core.c:596 locks held by kworker/u8:5/88: 2, last CPU#1: #0: ffff888034380148 ((wq_completion)bat_events){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff888034380148 ((wq_completion)bat_events){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff888034380148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff888034380148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc9000252fc40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000252fc40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000252fc40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc9000252fc40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 locks held by kworker/u8:6/188: 3, on CPU#0: #0: ffff88801c76d148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88801c76d148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88801c76d148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff88801c76d148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc90003037c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90003037c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90003037c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc90003037c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_lock include/linux/rtnetlink.h:134 [inline] #2: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 net/ipv6/addrconf.c:4795 locks held by kworker/0:2/992: 3, last CPU#0: #0: ffff88803579dd48 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88803579dd48 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88803579dd48 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff88803579dd48 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc9000518fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000518fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000518fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc9000518fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffff888038159700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 drivers/net/wireguard/noise.c:821 locks held by kworker/u8:7/1044: 3, on CPU#1: #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc9000538fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc9000538fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc9000538fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc9000538fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 net/core/link_watch.c:313 locks held by kworker/u8:8/1140: 3, last CPU#1: #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc900056afc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc900056afc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc900056afc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc900056afc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffff88807ffd2258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 drivers/net/netdevsim/dev.c:834 locks held by udevd/5000: 4, last CPU#1: #0: ffffffff9003a4f0 (dup_mmap_sem){.+.+}-{0:0}, at: dup_mm kernel/fork.c:1541 [inline] #0: ffffffff9003a4f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x470 kernel/fork.c:1594 #1: ffff88807f749bc0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_write_lock_killable include/linux/mmap_lock.h:550 [inline] #1: ffff88807f749bc0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x18a/0x1e10 mm/mmap.c:1716 #2: ffff888021f45900 (&mm->mmap_lock/1){+.+.}-{4:4}, at: mmap_write_lock_nested include/linux/mmap_lock.h:540 [inline] #2: ffff888021f45900 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x277/0x1e10 mm/mmap.c:1723 #3: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:213 [inline] #3: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:320 locks held by kworker/0:3/5366: 7, last CPU#0: #0: ffff8880223c0948 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff8880223c0948 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff8880223c0948 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff8880223c0948 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc900036c7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc900036c7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc900036c7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc900036c7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffff8880791cd480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 drivers/net/wireguard/noise.c:598 #3: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: local_lock_acquire include/linux/local_lock_internal.h:46 [inline] #3: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 net/core/dev.c:6895 #4: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #4: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #4: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: nf_hook include/linux/netfilter.h:249 [inline] #4: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 include/linux/netfilter.h:323 #5: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #5: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #5: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: class_rcu_constructor include/linux/rcupdate.h:1216 [inline] #5: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 arch/x86/kernel/unwind_orc.c:495 #6: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #6: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #6: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 net/ipv4/ip_output.c:229 locks held by crond/5373: 2, last CPU#1: #0: ffffffff90701b18 (tomoyo_ss){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:213 [inline] #0: ffffffff90701b18 (tomoyo_ss){.+.+}-{0:0}, at: srcu_read_lock include/linux/srcu.h:320 [inline] #0: ffffffff90701b18 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_read_lock security/tomoyo/common.h:1112 [inline] #0: ffffffff90701b18 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 security/tomoyo/file.c:826 #1: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:213 [inline] #1: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:320 locks held by getty/5389: 2, on CPU#0: #0: ffff888037fa40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 drivers/tty/tty_ldisc.c:243 #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 drivers/tty/n_tty.c:2211 locks held by syz-executor/5645: 2, last CPU#1: #0: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:213 [inline] #0: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:320 #1: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: __page_table_check_zero+0x6c/0x430 mm/page_table_check.c:138 locks held by kworker/1:3/5686: 5, last CPU#1: #0: ffff8880223c0948 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff8880223c0948 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff8880223c0948 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff8880223c0948 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc900044d7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc900044d7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc900044d7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc900044d7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffff88803815b4b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 drivers/net/wireguard/noise.c:821 #3: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:213 [inline] #3: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:320 #4: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #4: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #4: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: class_rcu_constructor include/linux/rcupdate.h:1216 [inline] #4: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 arch/x86/kernel/unwind_orc.c:495 locks held by syz-executor/5872: 2, on CPU#1: #0: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: tun_detach drivers/net/tun.c:654 [inline] #0: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 drivers/net/tun.c:3608 #1: ffffffff8ff609a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock kernel/rcu/tree_exp.h:311 [inline] #1: ffffffff8ff609a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2cb/0x760 kernel/rcu/tree_exp.h:966 locks held by kworker/0:5/6001: 1, last CPU#0: #0: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:213 [inline] #0: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:320 locks held by kworker/0:6/6004: 4, last CPU#0: #0: ffff88803421b148 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88803421b148 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88803421b148 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff88803421b148 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc90004437c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90004437c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90004437c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc90004437c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffff8880791c9480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 drivers/net/wireguard/noise.c:598 #3: ffff888038158330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 drivers/net/wireguard/noise.c:632 locks held by kworker/0:7/6005: 4, last CPU#0: #0: ffff88813ff49d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88813ff49d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88813ff49d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff88813ff49d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc90003477c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90003477c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90003477c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc90003477c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #2: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #2: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x1890 net/netfilter/nf_conntrack_core.c:1530 #3: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #3: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #3: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: nf_conntrack_free+0x97/0x710 net/netfilter/nf_conntrack_core.c:1726 locks held by dhcpcd-run-hook/6006: 2, last CPU#1: #0: ffff888026ea3160 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: prepare_bprm_creds fs/exec.c:1419 [inline] #0: ffff888026ea3160 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xbc/0x1590 fs/exec.c:1845 #1: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_lock_acquire include/linux/srcu.h:213 [inline] #1: ffffffff900b1950 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 include/linux/srcu.h:320 locks held by kworker/1:5/6007: 3, last CPU#1: #0: ffff88813ff4ad48 ((wq_completion)events){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #0: ffff88813ff4ad48 ((wq_completion)events){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #0: ffff88813ff4ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #0: ffff88813ff4ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #1: ffffc90003467c40 ((debug_obj_work).work){+.+.}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #1: ffffc90003467c40 ((debug_obj_work).work){+.+.}-{0:0}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #1: ffffc90003467c40 ((debug_obj_work).work){+.+.}-{0:0}, at: process_one_work kernel/workqueue.c:3460 [inline] #1: ffffc90003467c40 ((debug_obj_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 kernel/workqueue.c:3578 #2: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire include/linux/rcupdate.h:309 [inline] #2: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: rcu_read_lock include/linux/rcupdate.h:849 [inline] #2: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: class_rcu_constructor include/linux/rcupdate.h:1216 [inline] #2: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 arch/x86/kernel/unwind_orc.c:495 ============================================= NMI backtrace for cpu 1 CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 Call Trace: dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120 nmi_cpu_backtrace+0x274/0x2d0 lib/nmi_backtrace.c:123 nmi_trigger_cpumask_backtrace+0x17d/0x390 lib/nmi_backtrace.c:66 trigger_all_cpu_backtrace include/linux/nmi.h:164 [inline] __sys_info lib/sys_info.c:157 [inline] sys_info+0x135/0x170 lib/sys_info.c:165 check_hung_uninterruptible_tasks kernel/hung_task.c:377 [inline] watchdog+0x1073/0x10f0 kernel/hung_task.c:598 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 5366 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker RIP: 0010:check_preemption_disabled+0x1a/0xd0 lib/smp_processor_id.c:53 Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 65 8b 05 eb 4b bd 08 65 48 8b 0d bb 4b bd 08 85 c9 74 0c 5b <41> 5e 41 5f 5d e9 fc f4 02 00 cc 9c 59 f7 c1 00 02 00 00 74 ea 65 RSP: 0018:ffffc90000007b78 EFLAGS: 00000202 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 8000000000000102 RDX: 0000000000000000 RSI: ffffffff8c8e8c60 RDI: ffffffff8c8e8c20 RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000003 R11: 8000000000000100 R12: ffff8880b823dbe8 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 FS: 0000000000000000(0000) GS:ffff88812361f000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f777f720286 CR3: 000000000fd48000 CR4: 00000000003526f0 Call Trace: rcu_is_watching_curr_cpu include/linux/context_tracking.h:128 [inline] rcu_is_watching+0x16/0xb0 kernel/rcu/tree.c:753 trace_lock_acquire include/trace/events/lock.h:23 [inline] lock_acquire+0x58/0x350 kernel/locking/lockdep.c:5905 local_lock_acquire include/linux/local_lock_internal.h:46 [inline] process_backlog+0x95e/0x18b0 net/core/dev.c:6906 __napi_poll+0xaa/0x330 net/core/dev.c:7968 napi_poll net/core/dev.c:8031 [inline] net_rx_action+0x61d/0xf50 net/core/dev.c:8188 handle_softirqs+0x265/0x8d0 kernel/softirq.c:669 do_softirq+0x77/0xd0 kernel/softirq.c:569 __local_bh_enable_ip+0x100/0x140 kernel/softirq.c:473 blake2s_compress+0xfa/0x1c00 lib/crypto/x86/blake2s.h:42 blake2s_update+0x140/0x450 lib/crypto/blake2s.c:119 hmac+0x2d1/0x3b0 drivers/net/wireguard/noise.c:332 kdf+0x12d/0x290 drivers/net/wireguard/noise.c:367 mix_precomputed_dh drivers/net/wireguard/noise.c:426 [inline] wg_noise_handshake_consume_initiation+0x464/0x9b0 drivers/net/wireguard/noise.c:623 wg_receive_handshake_packet drivers/net/wireguard/receive.c:144 [inline] wg_packet_handshake_receive_worker+0x674/0x10b0 drivers/net/wireguard/receive.c:213 process_one_work kernel/workqueue.c:3495 [inline] process_scheduled_works+0xc3d/0x1630 kernel/workqueue.c:3578 worker_thread+0xa47/0xfb0 kernel/workqueue.c:3659 kthread+0x38b/0x480 kernel/kthread.c:436 ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245