last executing test programs: 2m39.87255057s ago: executing program 1 (id=647): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ff4100000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x96, &(0x7f00000015c0)=""/150}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002780)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x1c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "7a07fc564df4d25f510b20859fa0548773"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0xffffffffffffff37, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x1880}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002780)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x1c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "7a07fc564df4d25f510b20859fa0548773"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0xffffffffffffff37, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x1880}, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071115d00000000008510000002000000850000000500000095000000000000009500a50500200000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000080)=0xa40, 0x4) (async) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000080)=0xa40, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000031011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) (async) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000031011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) syz_emit_ethernet(0x3c, &(0x7f0000000040)={@local, @remote, @val={@void, {0x8100, 0x3, 0x1, 0x1}}, {@arp={0x806, @generic={0x304, 0x6002, 0x6, 0x8, 0x2, @empty, "9ebd3e01fe15fbeb", @broadcast, "367ed532800da365ae7608e1e7b4"}}}}, &(0x7f0000000140)={0x0, 0x1, [0x566, 0x26b, 0x889, 0x288]}) 2m39.608165682s ago: executing program 1 (id=652): write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='FREEZING\x00', 0x9) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001300010db77ae80e000000", @ANYRES32, @ANYBLOB="000d05", @ANYRES64=r3], 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x0) getsockname$netlink(r2, &(0x7f00000000c0), &(0x7f0000000200)=0xc) connect$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x0, @any, 0x2, 0x1}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000000200000000000000000000085000000750100e0fecb7839df3c93d553e64d236e5e210095000000000000001e26afa2675172ec036c2eff98690733893f0d7d034544f273389ab7341daf090e344e3c774fcca3c6e6b8cdd71ab1447b93b95e28df878358d601dd02fa540ee8a354d3ba59f79dcb80c05adfac6d831ea531047335"], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, 0x0) r8 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x400261f2, &(0x7f0000000100)={'dvmrp0\x00'}) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 2m39.539416194s ago: executing program 0 (id=654): socket$inet(0x2, 0x80001, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@setlink={0x3c, 0x13, 0x5, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, 0x408, 0xc002}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x545e0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x31) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x20, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0xa}, {}, {0x13}}, [{0x8}, {0x8, 0xb, 0xd9}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x8ae}, {0x8, 0xb, 0xf4}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0xe}]}, 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000040)="480000001400195a8563e43c12f461560a8447600000000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed5e0000000000000059", 0x49}], 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000007000000050000000000000f"], 0x0, 0x2b, 0x0, 0x6}, 0x28) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r5}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000800d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r9, 0x325, 0x2, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x180a4}, 0x4000010) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000540), 0x0) r10 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r10, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4004}, 0x4000000) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r11, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m39.277420628s ago: executing program 0 (id=657): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000020000008500000023000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000ff030000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r3, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r3, 0x0) mmap(&(0x7f0000551000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x15015000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x50, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x50}}, 0x0) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x2, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x100000, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 2m39.208735135s ago: executing program 3 (id=658): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r0, 0x8970, &(0x7f0000000040)={'veth1_macvtap\x00', @ifru_settings={0x80000000, 0x100009, @sync=0x0}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="ad000000000200009d56812900000800", 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x42, 0x4}}}, 0x10) unshare(0x6a040000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x40800) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x1}, 0xffffffffffffff5f) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f00000001c0)={'ipvlan0\x00', {0x2, 0x0, @broadcast}}) listen(r4, 0x7fff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x98}}, 0x4000000) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb26", @ANYRES32=r8, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$rxrpc(0x21, 0x2, 0xa) 2m39.159214914s ago: executing program 0 (id=659): socket$inet6(0xa, 0x6, 0x8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)={0x60, r2, 0x405, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x44}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000044}, 0x44084) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x24, 0x76, 0x709, 0x1, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xb}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(r0, &(0x7f0000000080)='\x00', 0x1, 0x4010, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r0, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r1) recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000540), 0x4) setsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="6d182bbd7000fddbdf254900000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000090) r9 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r10, 0xde50, 0x2e}, 0x8) 2m38.728743341s ago: executing program 4 (id=661): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x3) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r3) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x4c}}, 0x0) 2m38.677078246s ago: executing program 1 (id=662): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x800, 0xfb4}) sendfile(r1, r0, 0x0, 0xf03a0005) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = accept4(r2, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000200)=0x80, 0xc0800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e1d, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, &(0x7f0000000180)=0x10) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000002c0)=ANY=[], 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000140)={r5, 0x6, "c7af962d08fb"}, &(0x7f0000000180)=0xe) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086) 2m38.597011944s ago: executing program 4 (id=663): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x28, "e970caa1b033121b9fabcbb9bcf1b56840c5b24697196a4f635c6c9edf9e630ad1f377065a4db404"}, &(0x7f0000000140)=0x30) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r1, 0x7fffffff}, &(0x7f00000001c0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b706000008ffffff9c6404800000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000004a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010ddb03cf1c62d57c08a90b189d190c341035de53a9a53608c10556e5734eb84049761051ce540c772e201b2de17dfdb5b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e015064716897bced7798509e64df360d95f9a4099f86438ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03440eafe1c8660c73acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8134301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979c322e92fbc2c400"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) 2m38.460526845s ago: executing program 0 (id=664): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f00000001c0)=0x1c, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x8700, 0x8000, 0x3, 0x6082, {{0x15, 0x4, 0x0, 0x35, 0x54, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast2, @multicast2, {[@rr={0x7, 0xf, 0x93, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp_addr={0x44, 0x2c, 0x80, 0x1, 0x4, [{@local, 0x3}, {@private=0xa010101, 0x7ca}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd8000000}, {@private=0xa010102, 0x7}, {@empty, 0x1}]}, @end, @noop]}}}}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x14000004}, [@call={0x85, 0x0, 0x0, 0xae}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x8, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) 2m38.459755641s ago: executing program 4 (id=665): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f7, &(0x7f0000000080)={'lo\x00'}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt(r1, 0x1, 0x4, &(0x7f0000000180)=""/92, &(0x7f0000000100)=0x5c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}}, 0x90) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 2m38.350551654s ago: executing program 0 (id=667): socket$kcm(0x21, 0x2, 0x2) socket(0x18, 0x80000, 0x3) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xb) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10004, 0x1, 0x0, 0xfffffffe}, 0x1c) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x13, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xb, 0x7, 0x8f}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x8, 0xfffffe00, 0x7fffffff}, &(0x7f0000000040)=0x14) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) mmap(&(0x7f00002fd000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) bind$alg(r1, &(0x7f0000000540)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000003c0)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x3, 0x2) write$tun(r0, 0x0, 0x0) 2m38.253229161s ago: executing program 3 (id=669): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x40000c0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000005"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100), 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000200), 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000340)=0x40, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x11, 0x40, 0x9, 0x4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 2m38.20447693s ago: executing program 2 (id=670): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 2m38.044894118s ago: executing program 2 (id=671): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf}, [@generic={0xd3, 0xa, 0x2, 0x0, 0x40}]}, &(0x7f0000000000)='syzkaller\x00', 0xa}, 0x94) 2m37.990935691s ago: executing program 3 (id=672): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) r1 = socket(0x8, 0x3, 0x0) shutdown(r1, 0x1) (async) readv(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x7800, 0x20, 0x9, 0x10, {{0x5, 0x4, 0x1, 0x12, 0x14, 0x67, 0x0, 0x9, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x5}}}}}) (async) syz_open_procfs$namespace(0x0, 0x0) (async) unshare(0x6a040000) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010829bd7000567960a42f2fef00", @ANYRES32=0x0, @ANYBLOB="0001000004200400080004000005000008001b0000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) 2m37.988544642s ago: executing program 2 (id=673): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r7) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r8, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netpci0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xa}, {0xfff1, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x4000800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0xc, 0xac, 0x2, 0x12, @loopback, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x80e0, 0x8, 0x80000001, 0xffff}}) r14 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)={0x1f4, r4, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 2m37.716661783s ago: executing program 3 (id=674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x83}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0xac, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xc}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xc}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xca}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40851}, 0x4040) 2m37.715933579s ago: executing program 1 (id=675): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000060000000000000000000000850000009e00000095"], 0x0}, 0x90) close(0x3) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010102, {[@rr={0x7, 0x1b, 0x18, [@loopback, @local, @loopback, @multicast1, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x3, 0x80}, @noop]}}, {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x20050800) r5 = accept(r4, &(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x80) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 2m37.681364101s ago: executing program 2 (id=676): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xec) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000002d00010026bd7000fcdbdf250400000008000c00", @ANYRES32=0x0, @ANYBLOB="0c0016"], 0x28}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xe, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8}, 0x94) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x890b, &(0x7f0000000000)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000300000000000000fdffffff1801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000060007faaf3b9a2a000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000009500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) unshare(0x2040400) r4 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)=0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000080)={0x0, 0xffffffffffffff67, &(0x7f0000000040)={&(0x7f0000001280)={0x9c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x9c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x80000001, 0x14, 0x8}) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e20, 0xd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000}}, 0x0, 0x0, 0x28, 0x0, "f902c415298c2a76a8320795c216de02a3255d220f49a844e51d5eb6287970a640a6acedc8f0d9b81f067ba0390090b479ef934ec549fc974d99eb67a4d85fb086817d97058ab10cf1b83fb64055320c"}, 0xd8) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf2523090000", @ANYRES32, @ANYBLOB="140002"], 0x34}}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000280)={{r7}, "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"}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) r10 = socket$isdn(0x22, 0x3, 0x26) ioctl$IMCTRLREQ(r10, 0x80044945, &(0x7f0000001380)={0x40, 0x3, 0x4917, 0x7fffffff}) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r8, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001340)=r8, 0x4) socket$key(0xf, 0x3, 0x2) getsockname$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) 2m37.660249323s ago: executing program 1 (id=677): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0022004ce1000000000000fb7ca06b14498feb00000000000000000004000000"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}]}, &(0x7f0000000180)=0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYRES64=r4, @ANYRES32=r10, @ANYBLOB="08000ae4285a493e168cf9c1fd00", @ANYRES64=r8], 0x40}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={r7, @in6={{0xa, 0x4e23, 0x5, @empty, 0x9}}, 0x5, 0x4, 0x624e, 0xa, 0x55, 0x3e}, 0x9c) socket$phonet_pipe(0x23, 0x5, 0x2) socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@bloom_filter={0x21, 0x0, 0x7}, 0xa6) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x20, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x85}, 0x40840) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$key(0xf, 0x3, 0x2) 2m37.504701522s ago: executing program 2 (id=678): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) (async) close(r1) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socket(0x28, 0x5, 0x0) (async) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@generic={0x63, 0x1, 0x0, 0xf}]}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) listen(r3, 0x0) (async) listen(r3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES16=r3, @ANYRES32=0x0, @ANYBLOB="e1022270b1fb82b006b913481326339c6f7c7027d3f8", @ANYRES16=r3, @ANYBLOB="d3eec92a0231e83e", @ANYRES64=r2], 0x54}, 0x1, 0x0, 0x0, 0x4008004}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x21}, 0x1d) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r5, 0x0, 0x0}, 0x20) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4669fce164319271}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r4, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, 0x0, 0x100, 0x0, 0x25dfdbfc, {0x1c}}, 0x5}, 0x1, 0x0, 0x0, 0x80}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) unshare(0x60600) (async) unshare(0x60600) close(0x3) r9 = socket$kcm(0xa, 0x3, 0x73) sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) 2m37.492692843s ago: executing program 4 (id=679): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0) (async, rerun: 32) socket$kcm(0xa, 0x2, 0x3a) (async, rerun: 32) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x200, 0x800}, 0x80, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x900}, 0x8040) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x2, 0xa0}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) 2m37.452777279s ago: executing program 1 (id=680): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x700, 0x20, 0x3, 0x7f, {{0x30, 0x4, 0x2, 0x36, 0xc0, 0x65, 0x0, 0x18, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x24}, {[@end, @ssrr={0x89, 0xb, 0xa4, [@empty, @loopback]}, @cipso={0x86, 0x1d, 0x2, [{0x5, 0xf, "795cbc6581c915c951e90823c2"}, {0x0, 0x8, "f902ba134855"}]}, @generic={0x83, 0x11, "2a4d62750fe97ca4287df0c3ddfc5e"}, @ra={0x94, 0x4}, @cipso={0x86, 0x31, 0x3, [{0x7, 0x4, 'i<'}, {0x1, 0xe, "fba59d17576216ff60ac0854"}, {0x6, 0x4, "ee27"}, {0x6, 0xf, "e44cca510d63b2116560e5a7a4"}, {0x2, 0x6, "79b516b8"}]}, @ssrr={0x89, 0x13, 0x4b, [@local, @broadcast, @broadcast, @local]}, @lsrr={0x83, 0xb, 0x65, [@multicast1, @multicast1]}, @timestamp_addr={0x44, 0x1c, 0xed, 0x1, 0x8, [{@local, 0x1}, {@private=0xa010102, 0x8}, {@multicast1, 0x6}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtaction={0xd8, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xc4, 0x1, [@m_mirred={0x90, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3ff0000, 0x7, 0x3, 0x2, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffa, 0x7fff, 0x5, 0x8, 0xd80}, 0x0, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x1, 0x0, 0x9ec1, 0xffff}, 0x3, r2}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x1d, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xfffffffffffffec2, 0x7, {0x1}}, {0xc}}}]}]}, 0xd8}}, 0x0) unshare(0x6a040000) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f00000001c0)="ee641681", 0x4}], 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000005) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0xffffffffffffff04) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) ioctl$SIOCAX25DELUID(r6, 0x89e2, &(0x7f0000000180)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x91081000) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x7, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000080)="b2", 0x1, 0x24008811, &(0x7f0000000040)={0xa, 0x1, 0x41, @private2, 0xfffffffe}, 0x1c) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000010c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={0x0, 0x2}, 0x8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="e0000000130001000000000000000000786368616368613230000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a3aeeee8cfa8243b0000000000000000000000000000000000000000009078d84770140000"], 0xe0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) 2m37.344349974s ago: executing program 3 (id=681): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\"\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001ccab"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001ccab"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000580)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x64, 0x1, 0x1, 0x101, 0x0, 0x0, {0xf, 0x0, 0x9}, [@CTA_LABELS_MASK={0x8, 0x17, [0x0]}, @CTA_NAT_DST={0x38, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008801}, 0x14004804) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0200000004006f4a390c0458d6a3000500000a9e8ca34e75bbd980d89415f700010000000001000018e28fc18e04a4acb4c40cb2383d669e72b02f68277840caaaf4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0200000004006f4a390c0458d6a3000500000a9e8ca34e75bbd980d89415f700010000000001000018e28fc18e04a4acb4c40cb2383d669e72b02f68277840caaaf4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_lsm={0x6, 0x15, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000020c300f8ff1001000018200000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0f000000001a00000600000000000000000000000000000000000000000000000000002aa596dc0de5dd8d65c4abb86ddc1b52f294db913263ec4ec7e76e22973ecd7cfedaeaa8ce677ade2419b1e56611e7b811e25af880a43724b5d27724cc37939cd4d3771bfae80e3d12d16d53b8c1f6433f3e29717176763bcfac048a887a30f2d949ada80aa5d8532623a8000db3741387b1d516048ec12084a962bc8f43544f91a40a175d43959537b497c8905ca27d586f082773082fdd7f344222294a9e4cbfc810ca51a8f211cc173bb760b17b22daefbb148eac51dc65"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x50}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000deffffff00"/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r12}, &(0x7f0000000000), &(0x7f0000000140)=r9}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r13, 0x4) (async) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r13, 0x4) sendmsg$inet(r11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc00000000000000", @ANYRES32, @ANYBLOB="01012000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x3c2392026b23f4e4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000004080002400000000000010000020a0500000000000000000000000004090001"], 0x190}}, 0x0) 2m37.096576027s ago: executing program 2 (id=682): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket(0x26, 0x2, 0x7) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x312, 0x0, 0x0, 0x2, 0x2, @remote}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x3) 2m37.095554662s ago: executing program 0 (id=683): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x2a, 0x0, 0xffffffffffffffff, 0x37}, 0x24) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000340)={r6, 0x87a}, &(0x7f0000000380)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0xfffffffffffffffe, 0xd) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000f80)=ANY=[@ANYBLOB="c40100000301050000000000000000000000000a5800048054000180050001000800000005000200040000000500030009000000060005000105000005000300e8000000060004007fec00000500030013000000050002000800000005000100050000000500010090000000060012400001000014000d80080001000a01010208000100ac1414aa940002"], 0x1c4}, 0x1, 0x0, 0x0, 0x8825}, 0x40) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x30000080}, 0x4) 2m36.92106514s ago: executing program 4 (id=684): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)=ANY=[@ANYBLOB="2c0000003c0007010500000000400000037c00000400fc800c0001800600060086dd"], 0x2c}, 0x1, 0x0, 0x0, 0xc040}, 0xc010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x10, 0x1403, 0x1}, 0x10}}, 0x20000000) r3 = socket$inet(0x2, 0x3, 0x2) bind$netlink(r2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r7, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) openat$tun(0xffffffffffffff9c, 0x0, 0x501000, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="480100001600010028bd7000fbdbdf25fe8000000000000000000000000000aae00000020000000000000000200000004e23000f4e23000e020020005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000001000004d66c0000000a010100000000000000000000000000080000000000000000010000000000000500000000000000070000000000000000100000000000000100000000000000000000000000000000000100000000000200000000000000090000000000000003000000000000005d19000000000000090000000600000000f8ffff25bd7000013500000a0001daec00000000000000030000002b0300000c001c00", @ANYBLOB="0200000008001f000400000028001a"], 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x24000014) 2m36.512858293s ago: executing program 3 (id=685): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc68, 0x0, 0x0, 0x0, 0x44}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x18) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 2m36.423448174s ago: executing program 4 (id=686): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x8, 0x8000, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x80000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) listen(r3, 0x0) 2m21.583653676s ago: executing program 32 (id=683): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x2a, 0x0, 0xffffffffffffffff, 0x37}, 0x24) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000340)={r6, 0x87a}, &(0x7f0000000380)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0xfffffffffffffffe, 0xd) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000f80)=ANY=[@ANYBLOB="c40100000301050000000000000000000000000a5800048054000180050001000800000005000200040000000500030009000000060005000105000005000300e8000000060004007fec00000500030013000000050002000800000005000100050000000500010090000000060012400001000014000d80080001000a01010208000100ac1414aa940002"], 0x1c4}, 0x1, 0x0, 0x0, 0x8825}, 0x40) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x30000080}, 0x4) 2m21.532344896s ago: executing program 33 (id=680): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x700, 0x20, 0x3, 0x7f, {{0x30, 0x4, 0x2, 0x36, 0xc0, 0x65, 0x0, 0x18, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x24}, {[@end, @ssrr={0x89, 0xb, 0xa4, [@empty, @loopback]}, @cipso={0x86, 0x1d, 0x2, [{0x5, 0xf, "795cbc6581c915c951e90823c2"}, {0x0, 0x8, "f902ba134855"}]}, @generic={0x83, 0x11, "2a4d62750fe97ca4287df0c3ddfc5e"}, @ra={0x94, 0x4}, @cipso={0x86, 0x31, 0x3, [{0x7, 0x4, 'i<'}, {0x1, 0xe, "fba59d17576216ff60ac0854"}, {0x6, 0x4, "ee27"}, {0x6, 0xf, "e44cca510d63b2116560e5a7a4"}, {0x2, 0x6, "79b516b8"}]}, @ssrr={0x89, 0x13, 0x4b, [@local, @broadcast, @broadcast, @local]}, @lsrr={0x83, 0xb, 0x65, [@multicast1, @multicast1]}, @timestamp_addr={0x44, 0x1c, 0xed, 0x1, 0x8, [{@local, 0x1}, {@private=0xa010102, 0x8}, {@multicast1, 0x6}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtaction={0xd8, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xc4, 0x1, [@m_mirred={0x90, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3ff0000, 0x7, 0x3, 0x2, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffa, 0x7fff, 0x5, 0x8, 0xd80}, 0x0, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x1, 0x0, 0x9ec1, 0xffff}, 0x3, r2}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x1d, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xfffffffffffffec2, 0x7, {0x1}}, {0xc}}}]}]}, 0xd8}}, 0x0) unshare(0x6a040000) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f00000001c0)="ee641681", 0x4}], 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000005) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0xffffffffffffff04) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) ioctl$SIOCAX25DELUID(r6, 0x89e2, &(0x7f0000000180)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x91081000) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x7, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000080)="b2", 0x1, 0x24008811, &(0x7f0000000040)={0xa, 0x1, 0x41, @private2, 0xfffffffe}, 0x1c) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000010c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={0x0, 0x2}, 0x8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="e0000000130001000000000000000000786368616368613230000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a3aeeee8cfa8243b0000000000000000000000000000000000000000009078d84770140000"], 0xe0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) 2m21.474533678s ago: executing program 34 (id=682): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket(0x26, 0x2, 0x7) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x312, 0x0, 0x0, 0x2, 0x2, @remote}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x3) 2m20.5420776s ago: executing program 35 (id=685): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc68, 0x0, 0x0, 0x0, 0x44}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x18) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 2m20.481529998s ago: executing program 36 (id=686): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x8, 0x8000, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x80000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) listen(r3, 0x0) 5.456110802s ago: executing program 7 (id=1793): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000200000000000000000000000711080000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x10, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) 5.284880822s ago: executing program 7 (id=1794): r0 = socket(0x15, 0x5, 0x0) connect$l2tp6(r0, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x20) unshare(0x6a040000) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x7, 0x1, 0x5, 0x3, {{0x1c, 0x4, 0x0, 0x4, 0x70, 0x68, 0x0, 0x7, 0x2f, 0x0, @multicast2, @private=0xa010102, {[@ra={0x94, 0x4, 0x1}, @generic={0x44, 0xe, "cbdbcc7bccc160b24ce02271"}, @generic={0x83, 0xf, "749d0569584f6bb3fb8a8d8b2b"}, @ra={0x94, 0x4, 0x8}, @generic={0x0, 0x4, 'HH'}, @timestamp={0x44, 0xc, 0xbb, 0x0, 0x7, [0xa1, 0x8]}, @timestamp_prespec={0x44, 0x24, 0xf5, 0x3, 0xe, [{@remote, 0x8}, {@empty, 0x1e}, {@multicast1, 0x5}, {@private=0xa010100, 0x7}]}]}}}}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r3}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r3, 0xfca1, &(0x7f0000000040)}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB='\x00'/13], 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x44012) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xee) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="03000800ec0619000c0061760448"], 0xfdef) socket$inet6_mptcp(0xa, 0x1, 0x106) 3.335529225s ago: executing program 7 (id=1809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ipvlan0\x00', 0x7101}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x3) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4006860) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}}]}, &(0x7f00000002c0)=0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) getsockopt$bt_hci(r3, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000600)) pipe(0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r6, r6, 0x2f}, 0x20) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 2.792785406s ago: executing program 9 (id=1814): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}]}, 0x1c}}, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x70200, 0x440}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x0) (async) close(r7) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2b65, 0x267, 0x0, 0x25, 0x19dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000009c0)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008002c0007000200060019c00364bc24eab556a705251e618218db677642109146a2378c877bddbcc1863b747ee3d5addad5eb3f3c90b561", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.531413472s ago: executing program 5 (id=1817): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x50) unshare(0x20000400) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x34}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@map, 0xffffffffffffffff, 0x15, 0x4006}, 0x20) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91) (async, rerun: 32) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x408c0) (rerun: 32) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) (async, rerun: 64) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c9, &(0x7f0000000100)) (async, rerun: 64) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xdf505db1a3d84e25}, 0x0) (async, rerun: 64) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@local, @random="7e4173edf6b3", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1c, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x12f3908a3fe41fc2, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x800, @empty}}}}}}, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r3}, 0x4) 2.448681889s ago: executing program 6 (id=1818): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1}, 0xffffffffffffffa0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000001880), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(r1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000740)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000280)={@local, @random="b794b9086e54", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0020e7", 0x1c, 0x6, 0x1, @loopback={0x300}, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000}, 0x2c) 2.300204933s ago: executing program 9 (id=1820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xb8, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x74, 0x12, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LAST_SET={0x8}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x1cf}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x20050800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0), 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000002240)=0x0, &(0x7f0000002280)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000023c0)={'gretap0\x00', &(0x7f00000022c0)={'syztnl2\x00', 0x0, 0x1, 0x7, 0x1, 0x6, {{0x34, 0x4, 0x2, 0x4, 0xd0, 0x67, 0x0, 0x8, 0x29, 0x0, @multicast2, @multicast2, {[@timestamp_addr={0x44, 0x3c, 0x5d, 0x1, 0xc, [{@multicast1, 0xd06}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x4}, {@remote, 0x6}, {@remote, 0x9b74}, {@broadcast, 0x6d}, {@local, 0x87}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x9}]}, @lsrr={0x83, 0xf, 0x2f, [@rand_addr=0x64010102, @local, @local]}, @noop, @ssrr={0x89, 0xf, 0x79, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @loopback]}, @timestamp={0x44, 0xc, 0x31, 0x0, 0x8, [0x80, 0x0]}, @ssrr={0x89, 0x27, 0x98, [@rand_addr=0x64010100, @empty, @remote, @empty, @multicast2, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @timestamp_addr={0x44, 0x24, 0x5d, 0x1, 0x7, [{@multicast1, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x589}, {@empty, 0x3}]}, @timestamp={0x44, 0x8, 0x69, 0x0, 0x1, [0x1351]}]}}}}}) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000025c0)=0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000002480)={'syztnl1\x00', &(0x7f0000002400)={'ip6tnl0\x00', 0x0, 0x2f, 0xfb, 0x8, 0x0, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x80, 0x10, 0x3, 0x11cb97fd}}) sendmsg$nl_route(r3, &(0x7f0000002580)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002540)={&(0x7f00000024c0)=@RTM_DELMDB={0x58, 0x55, 0x1, 0x3541, 0x25dfdbfb, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x2, 0x2, {@in6_addr=@private1, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x0, 0x2, {@in6_addr=@private2={0xfc, 0x2, '\x00', 0x1}, 0x86dd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmmsg$inet6(r2, &(0x7f0000002080)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0xb}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000380)="92802827d546f76a1584f4cd0cd1ef7211c58a5aecc09ba8a02a2c5c24df2ac955bf05bfb36fe8f0e586939b7adc4230b15282a3b88957d6747bf5b658d269f6f7af505795bb6091fa6ba6a7dec4522977bb3798fdec97e8c08e6bd4adbc7b5d86b842b2c43015e1d0844174065d5b6be8c0ac31d720ca83f28483c688e4f2ed8706a683f9ea4277e0f1472650d4bb1fcd421da167b7890daf14271f3dc880fc4de01300d2314554a072baa837ae98fe5fc395104df2b83bdad67fb35976247a249b02b36508baeac339fcdca9e7e95a7b86f45976460ad132c0c348f08f39eca536f4f8ba3ef83311f45f762204d85124c50e8d9156466f", 0xf8}, {&(0x7f0000000100)="332b94e3c71c78d6b38a9d90005e2f6514da94c616f4340c0b8a8062d6ed5c69c40916d7dce1f7f2c8eae035cfc899013ec813f1e56b78e2ad6976f04b84a2dff97314a8f3bd58a55ed6566b05b15f269456a88f9c", 0x55}, {&(0x7f0000000080)="00a1df3d59d8d2851cbea5da66f38bf6002cd4a8547db13c9701edb5ac3ad9ba3e8d0f68cbf5b89d27c509e741c46ec2d432e35b0a17", 0x36}, {&(0x7f0000000480)="c92e734f0ce61b8f2e9b2d80ad24e9b37d4c7f1b8e2ee445605c24dfa9f915d661c4dad68586e6d133bdf995273f69ce3628325273be5a8b43bdbe74520eb092019fcb2f80466dd1ca8916867f34098ed4034694c90476148d9193f1faf7a4a55481faa13936ec14d76d1b5763ddafea30c19cd74aa446ad573b251b2ada6ce39190d8adbb4fca2e5029ab09ba4582698caa27ad65092640e28251f8984014f9fa32fc12061811f17097fd1a2ca0b8d28b4f94a9948fd1", 0xb7}, {&(0x7f0000000180)="7cc7e9ec306f4318d532c0aaf5882b2a0d4e71", 0x13}, {&(0x7f0000000540)="e453a1221c91ff0c46984953decda091eeae17eb2c7de5e3c0c77c497faa0d60762cb70a6b3f986dae76004d51895318030739999447127a5e89b9d0860d0f558a32256aff5c3eb1", 0x48}, {&(0x7f0000000240)="28ec53cbc777d076f6d7c5c6e132f845e56d15cdc292dd22618ec838ab01499fca1a69b36f2c92941a1220f0", 0x2c}, {&(0x7f00000005c0)="41b1f9d5d43977f48d523626c966", 0xe}, {&(0x7f0000000600)="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", 0x1000}], 0x9, &(0x7f00000016c0)}}, {{&(0x7f0000001700)={0xa, 0x4e20, 0x1, @private0, 0x1}, 0x1c, &(0x7f0000001e40)=[{&(0x7f0000001740)="2e80805e41a392626484a5561129418f5a8ac41acc1ca274ad475cbce55168f1536e76015a02393c5c2670abaf7edaccee3e9d03f425604fadc8a61b1100eae031815ec76829c625ddfbeb481b3c71e1191cf064b60ffc79a21e6a583930d582ec75dbddd664d685cadc54bedfe5ac805ef206aa477e59fd9644efeea9ef50ab6c7faaa281905ff9347ee80da0216c11e72d3f5c3bcb04ce", 0x98}, {&(0x7f0000001940)="bc04639d1cd561c0c3800d67f9914459476397a5a020b26dafb23e1b9d1d2d488de3958f70f7ef0b3094df5ab174ccaf772ba0c20e5252ce01ebb2a0dfc43b7cb13f3d71bdcb4b7c75cd21b23361b3e8656525a63eecb8f7810e6ed564da209a9216affa9797d4c17b1918c3df780378", 0x70}, {&(0x7f0000001800)="adfe628f505ea3377db51c2316cb44fcb2c4fe", 0x13}, {&(0x7f00000019c0)="ec6ab975c237e86fb7b958f0514e68a6756de612acdd4bd95beba27a8e983bac9a16d7345d2b888a67fbcc9b8397858b15c1cc95f6fdae201cbcd294997b30197102071488268f3aa645c29466590db3c9903351c9e4bef70d606ce75560c542842ab2d21284e5c7c2d67ba1730a95fbf27e65412a4640fec0c12b80618fb9ac6f3a9fd43a0be83b36e94166bff3a9aa246eca6ae117ef678758afd57c1d192cf7b44cf13b9a046d1456f0d0dd6560680fe748de63392cb53abe8dd8b09869c3611fdf6d7a702714130f35789a32eda428823d5257c120a489302cc32bd33360a0b7244a4dd4285c7c", 0xe9}, {&(0x7f0000001ac0)="b1585a0dbebb892d63bb601d6c77400db3a3461ed21aa47c993b1b471845e3fa2df69aa7cabd8a8673a5126e6dba848bd6c01434353e731624565a7e7c35d67f2193ddb228048f4201adfcfe766993fa1b04f6c72fa72331199b53bf4a5d4b2d1f5d96fc361377b45ce5e3748b0f371602dd5a67b502cd8f78398f6e75e82c5b25", 0x81}, {&(0x7f0000001b80)="68e5795f9bb99ff6c8adb7ac22d1d2fe25b8a4423d158e5b3a31a2449d51f46fbc6cb442f2a563226c0b6b2edb9ad17f0efaf4944736d5cf4d33d80dc783c861ab51b2e3352b89ae5d65015d508708e1f96ee17c5c4b46ccd7a7d07406f0f4a48f65ed2dfeea2d2b78b02b0ad95bf66eb2907cce96b108843c2fd14d759982e59fbc55417795620bf20bef7a70bd89efec196cfdfa13338bbd2f85935f81a531d073f968b815ed5b858a02af45a96c68c97cf0eb3a5c0b789413", 0xba}, {&(0x7f0000001c40)="ce4123a20ba24d37bfe9702d76cd6d53e30ef7caebe3084679e88d122368f68a6c639afead5c40542f6697bbfd214a4f29478266ef8939ec45549a2ee40088656b84cfd5", 0x44}, {&(0x7f0000001cc0)="6dc313eb591862bbf3619ffed03f1ad68b234307f294493b44a85de7c0f14e9a3feb35ab170dc63bc0cd6b6572c3813c6981e00a682e9fd287e94e9b10424cbd79062de32fb91b2e6e8dc64d8c5d23c5671bf34c84d8067467e583fa605fb00bc39c49078d03273204bf9c64de2e392838e7256314ba17ebfe", 0x79}, {&(0x7f0000001880)="dd7cfb5ee586188fddeb054e6b8fc57a9aebad90dc7b037661e2dc", 0x1b}, {&(0x7f0000001d40)="2598d734f7d03626c86d4a4a08362cc8450650b0e073d9df2a016aba029ce2334e95eb06cf48ad5b0095a9c0d62444782ee2dbc655ef225f1b65efb0f77ec6aef0cdb2531946c3a796550453311c9ad18a36b4a329f57b70777fdc9ff74f41ead1113ff076fcdffeb4c155b26fd6497a9fb90e48b33ad0c7418f212f98834ed113c70260821b848822b971858f653f3b6f8d8ee323683593ab8008633ae59856c9a178e977dd224cf66b199f45a2afe151049dded2c5f70874a3cb5c144121d2472f3205bcbf7e0712bbf93b85294639e4", 0xd1}], 0xa}}, {{&(0x7f0000001f00)={0xa, 0x4e21, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000001f80)=[{&(0x7f0000001f40)="4294bb5565c3b5f9cdd233f070cb4dcf", 0x10}], 0x1}}, {{&(0x7f0000001fc0)={0xa, 0x4e21, 0xfffffff9, @mcast2, 0x3}, 0x1c, &(0x7f0000002040)=[{&(0x7f0000002000)="27216cd46b3edddf5e070aa2b196c5", 0xf}], 0x1}}], 0x4, 0x40) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001840)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x9}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x7}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x44400) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f00000016c0)=0x2, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "080108", 0x14, 0x2f, 0x0, @mcast1, @mcast2, {[], {{0x0, 0x8906, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffe}}}}}}}, 0x0) pipe(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000002640)={'wpan3\x00'}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002600)=r7, 0x4) 2.2448834s ago: executing program 6 (id=1821): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x871a15abc695f20d, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4000000, 0xffffffffffffffff, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0x4}, {0xfffffffffffffd80}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000020000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007b9f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2301ff00000000000000000014d6d930dfe1d9c322fe040000007025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0xc0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="cd1242bdc9ea", @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @loopback}}}}, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0xfd45}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r5, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xe}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0xb}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x3}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8814}, 0x24044010) 2.244138585s ago: executing program 5 (id=1822): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/70, 0x46}], 0x1}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001a00010000000000000000001c00"/28, @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x40004050}, 0x0) r4 = socket(0x10, 0x3, 0x0) recvfrom$packet(r4, &(0x7f0000000040)=""/119, 0x77, 0x20, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x6c}}, 0x4880) 2.212877479s ago: executing program 7 (id=1823): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x10001, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xa}]}}}]}, 0xfffffcfe}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4010004) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000dfbbf947099939539f01527be6905c3c00"/36, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc000000000000000000002000000000ffffffff000000000000000000f2000000000004000000000a006080", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r8, 0x0, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newtaction={0x110, 0x30, 0xffff, 0x0, 0x0, {}, [{0xfc, 0x1, [@m_ife={0xf8, 0x1, 0x0, 0x0, {{0x8}, {0xd0, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x30, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xfff}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7fff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_PRIO={0x8, 0x3, @val=0x201}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x0, 0x10}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0xfff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x80000000}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0xff}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x2000000e, 0x8, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x110}}, 0x0) 1.792830343s ago: executing program 9 (id=1824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ipvlan0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000600)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100002001000000fdffffffdf6c30c5fe2ebaec1895000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xc, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000080)=0x40000) pipe(0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) 1.346112021s ago: executing program 6 (id=1825): r0 = socket(0x400000000010, 0x3, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x4) (async) r3 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) (async) setsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x2) (async) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0xfc}]}) (async) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0x0, 0x0}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="d500139e00000000"], &(0x7f0000000600)='syzkaller\x00', 0x2, 0x53, &(0x7f0000000640)=""/83, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x3, 0x1000, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x2f}, 0x94) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0x1, 0x8}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r7}, &(0x7f0000000140), &(0x7f00000002c0)='%-5lx \x00'}, 0x20) (async) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0xe, &(0x7f0000000340)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @alu={0x4, 0x0, 0xb, 0x0, 0x3, 0x50, 0xffffffffffffffff}, @generic={0x8, 0x9, 0xa, 0x81, 0x5}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x52, &(0x7f00000003c0)=""/82, 0x41000, 0x13, '\x00', r2, 0x0, r5, 0x8, &(0x7f0000000540)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x67, 0x4}, 0x10, 0x196a2, r6, 0x1, &(0x7f0000000880)=[r7], &(0x7f00000008c0)=[{0x0, 0x1, 0xe, 0x6}], 0x10, 0x3ff}, 0x94) r9 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r8}, 0x8) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0002000000800000240012800b00010069703667726500001400028006000200ff"], 0x44}}, 0x8000) (async) close(r9) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'caif0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r12, 0x1, 0x1000, 0x0, {0x2a}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$LINK_DETACH(0x22, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r8}, 0x18) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r14, 0x29, 0x43, &(0x7f0000000040)=0xfffffffd, 0x4) (async) write(r0, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030011000500e1000cee0203001a000000", 0x33a) 1.300993836s ago: executing program 5 (id=1826): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x18, 0x1, &(0x7f00000014c0)=@raw=[@jmp={0x5, 0x1, 0x8, 0x4, 0x7, 0x0, 0xfffffffffffffffc}], &(0x7f0000001500)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x11, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x41000, 0x920d8a6154485a39, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000, r1}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@map, 0x35, 0x0, 0x8, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880), &(0x7f00000008c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="5c0000000400000000000000", @ANYRES32, @ANYBLOB="880000000000d90000000000000ef177dbbdec4869c00f2edd04630000000000517b33c38bac151cbdfeec2de10723", @ANYRES64=r2], 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1c, 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="1800100000000000000200e027d77d24dcbda9000012d40e533b023eda235d571d25eebcd7d20244a5f0a1fd5487b884a8f2aab8f511f8baabf2f8c900544128898c4491fcfa3004b580ee62550c0d14bbc07e3026fccf5165c81fcca67a06435ca85b845fc85d7313b9ee22f0de1fdbb95f0d16c669ca433cd192d5cfdedba52baa166867ef233ca735dc437820037c5a8003bf8b2c6ab550edce196596afdc26a90d94fbe9e96c0128ad09c3b8dd3fb9eee66f368230088de5fe29851b96562c6ceaea1838b15cc9bf78ac7b78fd4b6df4c7baddd1c6b6207487a6f3fdd0578b753fcd363d9ba70deac25f0a000000"], &(0x7f0000000300)='GPL\x00', 0xd, 0xff7, &(0x7f0000001e00)=""/4087}, 0x94) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000014c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000f80)=ANY=[@ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="140000000b000000", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="80406733e8a5d1b481479e4c3b8ae67338dfd0652988775fd8110c4ec2b488ec07dc0b878abb5d746248565faab96e1b9da7ace906671d2c119b9daaa3aad76913cc7b17a241e53df7f65d70e6ee250405074331feb60b5e693a09a0d0d2041bf82174925b8576a1579b9cdcfb66b9dc2fe7461660290b0027ff4ae74d059915cd52ae878dee8dceeeddcc9b99e4a88ac1f36baca469ac7607f1ab6c69", @ANYRES64=r2], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@fallback=r0, r0, 0x10, 0x0, 0x0, @void, @value=r0, @void, @void, r2}, 0x20) 1.251098139s ago: executing program 5 (id=1827): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) unshare(0x26020480) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x4, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x6, 0xfffffff7, 0xb20f36d, 0x20, 0xffffffffffffffff, 0x2, '\x00', r1, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x6, 0x9, &(0x7f0000000300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xdb, &(0x7f0000000700)=""/219}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x6, 0xfdfffff9, 0xacc, 0x80000001, 0x0, 0x4}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xfffff8a5, 0x10001}}, @TCA_NETEM_RATE={0x14, 0x6, {0x100, 0x4, 0xa75c, 0x4}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x41, 0xfffffffe}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) 1.097031747s ago: executing program 5 (id=1828): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x150, r0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r9, @ANYBLOB="2009a878", @ANYRES32=r9, @ANYBLOB="0000fe0f00"/24], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x6, 0x1}]}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x3, 0x5}, @var={0x1, 0x0, 0x0, 0xe, 0x1, 0x2}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x3, 0x9}, @const={0x7, 0x0, 0x0, 0xa, 0x4}, @volatile={0xa, 0x0, 0x0, 0x9, 0x5}, @fwd={0x7}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0xc8d}}]}, {0x0, [0x2e, 0x2e, 0x30]}}, &(0x7f00000005c0), 0x9d, 0x0, 0x0, 0x8, 0x10000, @value=r2}, 0x28) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r12, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x400, '\x00', r9, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r15}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r16}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x10, '\x00', r9, 0x0, r11, 0x8, &(0x7f0000000640)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x2, 0x800, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000740)=[r12, r14, r16], &(0x7f0000000780)=[{0x5, 0x1, 0x9, 0x2}, {0x2, 0x3, 0x5, 0x7}, {0x4, 0x2, 0xb, 0x9}, {0x1, 0x2, 0x2, 0x2}], 0x10, 0x9}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r13) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r17, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001a40)={0x150, r17, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd4e}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb44}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x2, @private2, 0xfffff3c2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe}}}}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x49880) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r3) r18 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r18, 0x89e0, &(0x7f0000000080)={r2, r5}) 1.044613796s ago: executing program 6 (id=1829): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1300000027000100fd0f005c4832b54c01"], 0x50}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_MTU={0x8, 0x4, 0x4000000}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc014}, 0x8010) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x8000, 0x80, 0x47cea2f3, 0x2, {{0xf, 0x4, 0x1, 0x3b, 0x3c, 0x68, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010102, @private=0xa010100, {[@timestamp_prespec={0x44, 0x14, 0xf1, 0x3, 0x3, [{@multicast1, 0x7}, {@rand_addr=0x64810100, 0x6}]}, @timestamp={0x44, 0x8, 0x9b, 0x0, 0x0, [0x0]}, @timestamp_prespec={0x44, 0x4, 0xbd, 0x3, 0x4}, @generic={0x88, 0x6, "8aa09081"}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000003c0)={@empty, @private, 0x0}, &(0x7f0000000400)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x2f, 0x7f, 0x8, 0x6, 0x28, @empty, @private0, 0x700, 0x7800, 0x1, 0x8}}) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9401a7a9", @ANYRES16=r4, @ANYBLOB="000326bd7000fddbdf25170000002400018008000300030000000800030001000000080003000500000008000100", @ANYRES32=r5, @ANYBLOB="38000180140002006d6163766c616e3000000000000000000800030006000000080003000200000008000100", @ANYRES32=r6, @ANYBLOB="08000300070000004400018008000100", @ANYRES32=r7, @ANYBLOB="0800030002000000140002007465616d5f736c6176655f3100000000140002007767310000000000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="2400018008000100", @ANYRES32=r8, @ANYBLOB="0800030001000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="3000018008000100", @ANYRES32=r9, @ANYBLOB="1400020065727370616e3000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="2800018008000100", @ANYRES32=r11, @ANYBLOB="080003000300000014000200767863616e3100000000000000000000640001801400020076657468315f746f5f6272696467650008000100", @ANYRES32=r12, @ANYBLOB="080003000300000014000200766972745f77696669300000000000001400020076657468305f746f5f626f6e6400000014000200766c616e3000"/68], 0x194}, 0x1, 0x0, 0x0, 0x40}, 0x4050) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, 0x0, 0x0) 1.040857125s ago: executing program 7 (id=1830): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="0100fcffffff0000000001000000000000000b"], 0x30}}, 0x0) 1.032251095s ago: executing program 8 (id=1831): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x0, 0x200, 0x2, 0x7, 0x9, 0x0, 0x5, 0x9, 0x2, 0xca1, 0x4, 0xff, 0x6, 0xff, 0x9, 0x3, 0x7, 0x7, 0xb, 0x64, 0x1000, 0xc}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000a94ad096ac2c2f3ab30898278dd67403d463fcbc9ab48630ddb090b9b35ea4d1f6de1dfe3446d54ec47a195ff8f3be2736db777765885d84635"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000008000c00040007000c001a8004"], 0x34}}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c200000031080000000086dd6001c30b0f007dea4d8e00000000000000000000000000bbfe8000000000000000000000000000aa00030e22001690780203000000000000ffb00afe4e70"], 0x0) 900.925219ms ago: executing program 7 (id=1832): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x5, 0x80000, 0x7fffff, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) listen(r3, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYRES8=r2, @ANYBLOB="675a3582a3378a0a7ac7e3d907c1d18222133a75a781472c9f6626ecac3f5557a2c5d30ce49980be894ccc35d270178a2c291faf82325c0a298dfa4f6fbb7944cdbbbfaa1e9eca0bd7c6740bdc5976d2f844117edab5d47fe214675ef6aecd4961e4aae1af49e7563c7744cf6a392cfef9f4542095", @ANYRESDEC=r1, @ANYRESHEX=r1], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x18) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRES64=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r11 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r11, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) 896.634949ms ago: executing program 6 (id=1833): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000b00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x16, 0x0, &(0x7f0000000300)="4bf5f28ac9cc3a40dbe9abc89b0000ec000000000000", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x4b) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYRES8=r6], 0x10) close(r5) r7 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r7, 0xd75) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r8, &(0x7f0000000200)}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r9 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r9, &(0x7f0000002c00)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x17}, 0xc}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@dstopts_2292={{0x14, 0x29, 0x4, {0x2c}}}], 0x14}}], 0x1, 0x40010) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000002000030826bd7000fbdbdf250a108008dd000002000000001400030073797a6b616c6c6572310000000000000000002014000200fe8800000000000000000000000000010800040001000100"], 0x60}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x7, 0x8000, 0x3, 0x3, {{0x14, 0x4, 0x0, 0x7, 0x50, 0x67, 0x0, 0x5f, 0x29, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x14, 0x44, 0x0, 0x0, [0x12a6, 0x4, 0x3, 0x3]}, @ssrr={0x89, 0x7, 0x72, [@multicast2]}, @noop, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x11, [@empty, @multicast1, @empty, @broadcast, @empty, @rand_addr=0x64010101]}]}}}}}) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000240)=ANY=[@ANYBLOB="b000000008021100000108021100000008021100000010000000020000005819ea9fa1794bcb5a59e8cfee4e79a3a9fa906975f6e8c5e5fb4b2a7752d4f0577b8b1d139029cb85ebeccb91abbc45aeff414735599e0ffd6cc09be0941fcdcf0576a6b6905ab527f5d429e46f76cd9300fd3d6e25ecc487fdf313e106ab8f143bf99a2d6dd77b80ee0dac72e6fe8dda6411512da1be22b01577d6bea07ad502631d36af03"], 0x1e) 748.897613ms ago: executing program 9 (id=1834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x8, &(0x7f0000000600)=@framed={{0x18, 0x6, 0x0, 0x0, 0x100000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x3, 0x0, 0xd}, [@NFTA_COMPAT_NAME={0x8, 0x1, 'u32\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x3c, 0x99, &(0x7f0000000040)="b6a47d1fc1615117955f9d47e6d7edf9ff0f454e70b8f3666bad732425e34ee6d8c0bcf285e5721b0f20a30045469baa647a1b22a78af391ba852cb3", &(0x7f0000000280)=""/153, 0x0, 0x0, 0xea, 0xdc, &(0x7f00000004c0)="4c75d87022e73fe0efa5715f1b44c6dc8b79878379cc2ece3ea20b50568a318278f0abbf8ae71f05b4dfe2d6317c6a614d52cc0e268b944f92de0a044463864195e9883e4b56e6f12a10af7e6e6b4a78c7261d96c0b531bd7091f7d6736db08e18db2636f0c32552653f38e4a00ad691f22fcb7751b419c7bb6ee5539aca2d3390a61446ed09f2b8f406770c59d376edace86af6d1ca15c53d96bd69c8b3aae234ec1c3cb24f62ffd0ae5dbabb87de383c01fe3e14aab40767ca42fa6180bc1a6705f8b4e3ec4619aa0e04688a84e9b94e03f4c31c8267fed07aee3bfe928875767586d95cebb5324cf9", &(0x7f0000000640)="5f75e549290353af83afdf763558ef6e0d8ddee9e51060319d580abc5a8a0f344e16eec18f867fabb17d4c3952943fc530c9c48191e42ee68538d58f9af4a5561213627d76a0d30ca9404c7f88e2a8bed1d419de7fd1a97b2e3f4ddf5e925cf2b1c2fe70ad38f5dd4db03bd43c7c119e96fbc5ada1fb60e9e28b95f8ae9db951d2e952090a17c81d7e8a6d2357ce945c13a2521daddaef1b465a3b9df3e62daf3337c596cb60a48f85c3a4801701a7af9dde392140680d3b6a77566c236047f96ad6e445c91a627af9538bbbd0ddf848824002a13e5f23b72f908c76", 0x0, 0x0, 0x4}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 689.003417ms ago: executing program 8 (id=1835): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r7 = socket$rds(0x15, 0x5, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="180200002e0001000000000000000000e8013a8006004b00d50000000800ec00", @ANYRES32=r5, @ANYBLOB="f0002080d7973c041f6059e8e5dd5a24203a0769430ab47445e1e32c53d0d29742d54b40897193c15c56a4c2cbbfb61b0a5141b30c0a27dc95c0d8b6487f1408008a00", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="08001200", @ANYRES32=r5, @ANYBLOB="150001803fb3ebf5f9cbd1185eeba9c895d0e5001a000000"], 0x218}], 0x1}, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x8000, 0x8, 0x255, 0x6, 0xa, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x955, 0x5, 0x6cdf13a0, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x2, 0x18d1, 0x0, 0x3, 0x9486, 0x80, 0x2, 0x80000000, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8, 0x2, 0x0, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0xfffffeff, 0x8dc3, 0x20000001, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x101, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x468}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b0000000210000032bbd7000fbdbdf250a1410060300000200000000140002000000000000000000000000000000000114000100fe8800000000000000000000000001010c001400", @ANYRES32=r6, @ANYRES32=r10, @ANYBLOB="14000100ff01000000000000000000000000000114000200fe8000000000000000000000000000aa1400010000000000000000000000ffff0200000000000000fe8000000000000000000000000000bb08000600060000000500130008000000"], 0xb0}, 0x1, 0x0, 0x0, 0x8159}, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x1b, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xfffffffffffffee5}, 0x48) getsockname(r2, &(0x7f0000000340), &(0x7f00000003c0)=0x80) 533.075395ms ago: executing program 9 (id=1836): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xa}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0010040000000004fffff10000000000000600"/28, @ANYRES32, @ANYBLOB='/\b\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0500000005000000040000000000000000e12c00006fe962ac61b0f800"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="400000b29e29d1582b61c6002652703400"/33, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) unshare(0x22020400) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8c883}, 0x2000c0c0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x880) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x0, 0x100000, 0x762, 0x3, 0xd, 0x1, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x4, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0xc, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0xfffffffffffffec1) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r8, 0x0, 0x48f, &(0x7f0000007800)={0x84, @rand_addr=0x64010101, 0x4e24, 0x0, 'nq\x00', 0x30, 0x8, 0x34}, 0x2c) listen(r3, 0x5c2) 487.994213ms ago: executing program 8 (id=1837): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4) (async) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) (async) sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000f80)="9ba1b98f1442", 0x6}], 0x1}, 0x40060) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f00000002c0)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) (async, rerun: 64) recvmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) (rerun: 64) 304.723832ms ago: executing program 8 (id=1838): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) clock_gettime(0x0, &(0x7f00000036c0)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, 0x0, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa400000070100"], &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) recvmmsg(r1, &(0x7f0000002d80)=[{{0x0, 0xfffffffffffffeaf, 0x0}, 0xfd}], 0x1, 0x10043, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{&(0x7f00000001c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x93}, 0x80, 0x0}}], 0x2, 0x800) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0x14, 0x30, 0x25}, 0x14}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000003c40)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000001}}}]}, {0x4}, {0xc}, {0xfffffffffffffffc}}}]}]}, 0xac}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r7 = socket$pppoe(0x18, 0x1, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r9, 0x0, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xf3}]}, 0x24}}, 0x8800) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40) connect$pppoe(r7, &(0x7f0000000300)={0x18, 0x0, {0x15, @remote, 'ip6gre0\x00'}}, 0x1e) (async) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCBRIDGECHAN(r10, 0x40047435, &(0x7f0000000200)=0x2) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r10, 0xf507, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 200.100706ms ago: executing program 8 (id=1839): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) close(0x3) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x2, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x8, 0xc, 0xffffc003, 0x1, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x80, 0x80000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', r2}, 0x18) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x100}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r7, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000020e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x700, 0x1, 0x8, 0x6a2c07ac, {{0xc, 0x4, 0x0, 0x37, 0x30, 0x67, 0x0, 0x2, 0x4, 0x0, @remote, @empty, {[@generic={0x82, 0x6, "6b65e8a3"}, @generic={0x82, 0x8, "7a48b8956568"}, @ra={0x94, 0x4}, @generic={0x44, 0x8, "77c85cbaac1c"}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040044}, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r3}, 0x10) 149.547709ms ago: executing program 5 (id=1840): getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x4e20, @multicast1}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0xa, {0x2, 0x4e23, @broadcast}, 'veth1_to_hsr\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000018000280050003000000000100000000000500000000000100"], 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4019}, {{}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0xa4}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='cubic', 0xb) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @sack_perm, @timestamp, @mss={0x2, 0x3}], 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_getmulticast={0x14, 0x3a, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}}, 0x8000) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) socket(0x5, 0x4, 0x4260) 56.771276ms ago: executing program 6 (id=1841): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xb0, r0, 0x2, 0x70bd28, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10c0}, 0x20041) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0xb51, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x8, &(0x7f0000000400)=ANY=[@ANYRES16=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x7}, 0x4) setsockopt$packet_int(r4, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000640)='bic', 0x3) r6 = epoll_create1(0x0) r7 = socket$unix(0x1, 0x1, 0x0) close(r7) socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0x8002a000}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000037000100feffffff00000000017c00000c008e4102"], 0x28}, 0x1, 0x0, 0x0, 0x4048051}, 0x4c080) sendmmsg$inet(r5, &(0x7f0000004980)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r9, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) close(r4) 44.569178ms ago: executing program 8 (id=1842): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000000100000002000000", 0xfe60) (async, rerun: 64) unshare(0x22020600) (rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'bond_slave_0\x00', 0x1}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x3, 0x4, 0x4, 0x8, 0x1014}, 0x50) (async, rerun: 64) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) (async) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={@private2, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x90, 0x0, 0x0, 0x10000, r7}) (async) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01032eeb24ad81dcdf250000000008000100", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x404c880) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) (rerun: 64) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f00000002c0)={'macsec0\x00', @random="0100061f8145"}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) pread64(r1, &(0x7f0000000000)=""/112, 0x70, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="911007000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 0s ago: executing program 9 (id=1843): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f00000001c0)=0x3) (async) syz_emit_ethernet(0x6a, &(0x7f0000000440)={@broadcast, @dev, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@ipv4={0x8902, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x9}}}, {0x8, 0x22eb, 0x1, {{}, 0x2, {0x0, 0xfffd}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): 7869] netlink: 'syz.3.455': attribute type 10 has an invalid length. [ 158.053045][ T7870] lo speed is unknown, defaulting to 1000 [ 158.053518][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.455'. [ 158.068133][ T7874] netlink: 68 bytes leftover after parsing attributes in process `syz.3.455'. [ 158.078845][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.455'. [ 158.091593][ T7875] netlink: 44 bytes leftover after parsing attributes in process `syz.4.456'. [ 158.101584][ T7874] netlink: 68 bytes leftover after parsing attributes in process `syz.3.455'. [ 158.205454][ T6455] IPVS: starting estimator thread 0... [ 158.300293][ T7878] IPVS: using max 27 ests per chain, 64800 per kthread [ 158.496550][ T7877] can: request_module (can-proto-0) failed. [ 160.365898][ T7954] bond2: entered promiscuous mode [ 160.398551][ T7954] bond2: entered allmulticast mode [ 160.423056][ T7954] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.634855][ T7962] lo speed is unknown, defaulting to 1000 [ 160.702765][ T7963] lo speed is unknown, defaulting to 1000 [ 161.315307][ T7976] netlink: 'syz.4.477': attribute type 10 has an invalid length. [ 161.368398][ T7978] netlink: 'syz.4.477': attribute type 10 has an invalid length. [ 161.427320][ T7976] team0: Port device 0! added [ 161.488858][ T7978] team0: Port device 0! removed [ 161.519545][ T7978] bond0: (slave 0!): Enslaving as an active interface with an up link [ 161.911979][ T7996] batman_adv: batadv0: Adding interface: macvtap1 [ 161.919181][ T7996] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.006998][ T7996] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 162.901022][ T8027] __nla_validate_parse: 7 callbacks suppressed [ 162.901043][ T8027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.494'. [ 162.955058][ T8030] netlink: 32 bytes leftover after parsing attributes in process `syz.1.495'. [ 163.248838][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.499'. [ 163.361204][ T8053] netlink: 'syz.0.497': attribute type 1 has an invalid length. [ 163.383057][ T8055] netlink: 132 bytes leftover after parsing attributes in process `syz.1.500'. [ 163.391257][ T8053] netlink: 32 bytes leftover after parsing attributes in process `syz.0.497'. [ 163.711555][ T8067] netlink: 172 bytes leftover after parsing attributes in process `syz.4.505'. [ 163.720951][ T8067] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 163.777688][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.505'. [ 163.822741][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.505'. [ 163.836053][ T8070] lo speed is unknown, defaulting to 1000 [ 163.841758][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.505'. [ 163.871826][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.505'. [ 164.591329][ T8100] lo: entered allmulticast mode [ 164.626778][ T8100] hsr_slave_0: left promiscuous mode [ 164.633253][ T8100] hsr_slave_1: left promiscuous mode [ 164.960691][ T8116] netlink: 'syz.2.517': attribute type 1 has an invalid length. [ 165.476486][ T8141] netlink: 'syz.4.522': attribute type 1 has an invalid length. [ 165.746523][ T8152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.108287][ T8167] lo speed is unknown, defaulting to 1000 [ 166.222679][ T8174] ipvlan0: entered promiscuous mode [ 166.246270][ T8174] ipvlan0: left promiscuous mode [ 166.583020][ T8186] netlink: 'syz.4.536': attribute type 1 has an invalid length. [ 167.158609][ T8218] 8021q: VLANs not supported on ipvlan1 [ 167.176595][ T8218] macsec1: entered promiscuous mode [ 167.187791][ T8218] macsec1: entered allmulticast mode [ 167.438949][ T8231] pim6reg1: entered promiscuous mode [ 167.444471][ T8231] pim6reg1: entered allmulticast mode [ 167.918978][ T8250] __nla_validate_parse: 83 callbacks suppressed [ 167.918997][ T8250] netlink: 240 bytes leftover after parsing attributes in process `syz.3.554'. [ 168.140531][ T8259] netlink: 224 bytes leftover after parsing attributes in process `syz.0.558'. [ 168.183349][ T8259] macsec1: entered promiscuous mode [ 168.199063][ T8259] team0: entered promiscuous mode [ 168.215304][ T8259] team0: Device macsec1 is already an upper device of the team interface [ 168.252231][ T8259] team0: left promiscuous mode [ 168.462978][ T8275] sctp: [Deprecated]: syz.2.563 (pid 8275) Use of int in max_burst socket option. [ 168.462978][ T8275] Use struct sctp_assoc_value instead [ 168.499183][ T8275] ip6gretap0: entered allmulticast mode [ 168.558040][ T8275] netlink: 100 bytes leftover after parsing attributes in process `syz.2.563'. [ 168.683314][ T8296] netlink: 'syz.1.567': attribute type 1 has an invalid length. [ 169.060135][ T8313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.572'. [ 169.079279][ T8313] nbd: must specify at least one socket [ 169.341785][ T8324] delete_channel: no stack [ 169.433430][ T8334] netlink: 'syz.0.576': attribute type 32 has an invalid length. [ 169.456224][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'. [ 169.486710][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.578'. [ 169.521489][ T8334] bond4: Setting coupled_control to off (0) [ 169.654669][ T31] audit: type=1107 audit(1759796593.259:2): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='‚§zbíÑάw…ß”sÝ kÙ{¿rì‘3‡' [ 169.700073][ T8346] netlink: 16 bytes leftover after parsing attributes in process `syz.2.579'. [ 169.726079][ T8346] bridge_slave_0: default FDB implementation only supports local addresses [ 169.819391][ T8352] netlink: 20 bytes leftover after parsing attributes in process `syz.4.583'. [ 169.984298][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.585'. [ 170.006799][ T8359] netlink: 20 bytes leftover after parsing attributes in process `syz.4.586'. [ 170.119359][ T8369] netlink: 'syz.3.585': attribute type 1 has an invalid length. [ 170.141882][ T8371] netlink: 'syz.0.588': attribute type 2 has an invalid length. [ 170.193820][ T8363] netlink: 'syz.3.585': attribute type 1 has an invalid length. [ 171.104420][ T8423] netlink: 'syz.2.601': attribute type 12 has an invalid length. [ 171.511143][ T8455] tipc: Enabled bearer , priority 0 [ 171.518885][ T8455] syzkaller0: entered promiscuous mode [ 171.525034][ T8455] syzkaller0: entered allmulticast mode [ 171.536404][ T8452] tipc: Resetting bearer [ 171.560069][ T8452] tipc: Disabling bearer [ 171.591376][ T8454] netlink: 'syz.3.609': attribute type 1 has an invalid length. [ 172.058628][ T8472] tipc: Enabled bearer , priority 0 [ 172.081396][ T8488] netlink: 'syz.3.616': attribute type 10 has an invalid length. [ 172.117203][ T8488] dummy0: entered promiscuous mode [ 172.144294][ T8472] netlink: 'syz.1.614': attribute type 10 has an invalid length. [ 172.153454][ T8488] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 172.204251][ T8472] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.224763][ T8472] bond0: (slave team0): Enslaving as an active interface with an up link [ 172.283412][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.325651][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.366520][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.404770][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.954236][ T8522] netlink: 'syz.2.627': attribute type 2 has an invalid length. [ 172.963045][ T8521] __nla_validate_parse: 15 callbacks suppressed [ 172.963067][ T8521] netlink: 72 bytes leftover after parsing attributes in process `syz.3.628'. [ 172.973333][ T8522] netlink: 'syz.2.627': attribute type 1 has an invalid length. [ 172.989554][ T8522] netlink: 224 bytes leftover after parsing attributes in process `syz.2.627'. [ 173.175326][ T6454] tipc: Node number set to 2150697151 [ 173.184023][ T8534] netlink: 'syz.2.630': attribute type 49 has an invalid length. [ 173.202053][ T8534] netlink: 'syz.2.630': attribute type 49 has an invalid length. [ 173.269384][ T8538] sctp: [Deprecated]: syz.3.631 (pid 8538) Use of int in max_burst socket option deprecated. [ 173.269384][ T8538] Use struct sctp_assoc_value instead [ 173.312437][ T8544] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 173.319422][ T8544] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 173.451432][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.631'. [ 174.142695][ T8581] netlink: 'syz.4.644': attribute type 13 has an invalid length. [ 174.158513][ T8581] netlink: 'syz.4.644': attribute type 17 has an invalid length. [ 174.541661][ T8581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.610021][ T8581] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.651171][ T8581] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.677296][ T8594] xfrm0: entered promiscuous mode [ 174.704746][ T8594] xfrm0: entered allmulticast mode [ 175.061468][ T8615] tipc: Enabled bearer , priority 0 [ 175.082963][ T8615] syzkaller0: entered promiscuous mode [ 175.089563][ T8621] netlink: 20 bytes leftover after parsing attributes in process `syz.1.652'. [ 175.099905][ T8615] syzkaller0: entered allmulticast mode [ 175.130819][ T8620] netlink: 'syz.0.654': attribute type 2 has an invalid length. [ 175.236438][ T8614] tipc: Resetting bearer [ 175.262104][ T8614] tipc: Disabling bearer [ 175.364097][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'. [ 175.627353][ T8639] lo speed is unknown, defaulting to 1000 [ 175.634056][ T8647] netlink: 64 bytes leftover after parsing attributes in process `syz.0.659'. [ 175.838474][ T8639] netlink: 128 bytes leftover after parsing attributes in process `syz.3.658'. [ 176.251353][ T8672] netlink: 20 bytes leftover after parsing attributes in process `syz.2.668'. [ 176.326909][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.669'. [ 176.458300][ T8681] IPv6: sit1: Disabled Multicast RS [ 176.643126][ T8696] bond1: option downdelay: invalid value (18446744073709551615) [ 176.651140][ T8696] bond1: option downdelay: allowed values 0 - 2147483647 [ 176.661477][ T8696] bond1 (unregistering): Released all slaves [ 176.911423][ T8708] netlink: 'syz.2.676': attribute type 11 has an invalid length. [ 176.924873][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.674'. [ 176.938315][ T8708] validate_nla: 1 callbacks suppressed [ 176.938332][ T8708] netlink: 'syz.2.676': attribute type 2 has an invalid length. [ 177.209080][ T8722] lo speed is unknown, defaulting to 1000 [ 177.867859][ T8725] netlink: 'syz.3.681': attribute type 4 has an invalid length. [ 177.885733][ T8741] openvswitch: netlink: Missing key (keys=40, expected=100) [ 178.024199][ T8744] __nla_validate_parse: 8 callbacks suppressed [ 178.024219][ T8744] netlink: 24 bytes leftover after parsing attributes in process `syz.4.684'. [ 193.445035][ T5157] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 193.455747][ T5157] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 193.464773][ T5157] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 193.476265][ T5157] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 193.487655][ T5157] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 193.519780][ T5853] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 193.535171][ T5853] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 193.542503][ T8756] lo speed is unknown, defaulting to 1000 [ 193.550473][ T5853] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 193.559183][ T5853] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 193.567311][ T5853] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 193.649818][ T8758] lo speed is unknown, defaulting to 1000 [ 193.688208][ T5853] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 193.699826][ T5853] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 193.709203][ T5853] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 193.718351][ T5853] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 193.728073][ T5853] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 193.918894][ T8761] lo speed is unknown, defaulting to 1000 [ 193.939361][ T8756] chnl_net:caif_netlink_parms(): no params data found [ 194.104083][ T8758] chnl_net:caif_netlink_parms(): no params data found [ 194.349859][ T8756] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.363961][ T8756] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.371387][ T8756] bridge_slave_0: entered allmulticast mode [ 194.404461][ T8756] bridge_slave_0: entered promiscuous mode [ 194.425801][ T5853] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 194.436324][ T5853] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 194.445178][ T5853] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 194.450615][ T8756] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.453506][ T5853] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 194.460498][ T8756] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.468563][ T5853] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 194.474057][ T8756] bridge_slave_1: entered allmulticast mode [ 194.490011][ T8756] bridge_slave_1: entered promiscuous mode [ 194.665935][ T8756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.676034][ T5157] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 194.688935][ T5157] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 194.703371][ T5157] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 194.711724][ T5157] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 194.720397][ T5157] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 194.735048][ T8756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.767798][ T8758] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.776300][ T8758] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.784865][ T8758] bridge_slave_0: entered allmulticast mode [ 194.793167][ T8758] bridge_slave_0: entered promiscuous mode [ 194.803200][ T8758] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.813384][ T8758] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.821404][ T8758] bridge_slave_1: entered allmulticast mode [ 194.829678][ T8758] bridge_slave_1: entered promiscuous mode [ 194.906308][ T8761] chnl_net:caif_netlink_parms(): no params data found [ 194.940204][ T8756] team0: Port device team_slave_0 added [ 194.946710][ T8774] lo speed is unknown, defaulting to 1000 [ 194.949738][ T8756] team0: Port device team_slave_1 added [ 194.968735][ T8758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.986611][ T8758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.996019][ T8781] lo speed is unknown, defaulting to 1000 [ 195.095276][ T8756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.102378][ T8756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.129191][ T8756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.176941][ T8758] team0: Port device team_slave_0 added [ 195.185283][ T8756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.192468][ T8756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.219453][ T8756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.265573][ T8758] team0: Port device team_slave_1 added [ 195.395330][ T8761] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.402607][ T8761] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.410381][ T8761] bridge_slave_0: entered allmulticast mode [ 195.419550][ T8761] bridge_slave_0: entered promiscuous mode [ 195.428269][ T8758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.435414][ T8758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.462143][ T8758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.508608][ T8761] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.516736][ T8761] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.524803][ T8761] bridge_slave_1: entered allmulticast mode [ 195.532383][ T8761] bridge_slave_1: entered promiscuous mode [ 195.541252][ T8758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.548674][ T8758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.575439][ T5157] Bluetooth: hci5: command tx timeout [ 195.575478][ T8758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.595246][ T8756] hsr_slave_0: entered promiscuous mode [ 195.602077][ T8756] hsr_slave_1: entered promiscuous mode [ 195.610096][ T8756] debugfs: 'hsr0' already exists in 'hsr' [ 195.616585][ T8756] Cannot create hsr debugfs directory [ 195.654195][ T5157] Bluetooth: hci6: command tx timeout [ 195.688007][ T8761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.767258][ T8761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.814082][ T5157] Bluetooth: hci7: command tx timeout [ 195.902305][ T8758] hsr_slave_0: entered promiscuous mode [ 195.911740][ T8758] hsr_slave_1: entered promiscuous mode [ 195.919300][ T8758] debugfs: 'hsr0' already exists in 'hsr' [ 195.925340][ T8758] Cannot create hsr debugfs directory [ 195.934868][ T8761] team0: Port device team_slave_0 added [ 195.958156][ T8761] team0: Port device team_slave_1 added [ 196.066829][ T8761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.074069][ T8761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.101056][ T8761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.113167][ T8781] chnl_net:caif_netlink_parms(): no params data found [ 196.126095][ T8774] chnl_net:caif_netlink_parms(): no params data found [ 196.159851][ T8761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.166937][ T8761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.193410][ T8761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.444969][ T8761] hsr_slave_0: entered promiscuous mode [ 196.451978][ T8761] hsr_slave_1: entered promiscuous mode [ 196.458989][ T8761] debugfs: 'hsr0' already exists in 'hsr' [ 196.464778][ T8761] Cannot create hsr debugfs directory [ 196.534059][ T5157] Bluetooth: hci8: command tx timeout [ 196.545967][ T8781] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.553179][ T8781] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.561920][ T8781] bridge_slave_0: entered allmulticast mode [ 196.570414][ T8781] bridge_slave_0: entered promiscuous mode [ 196.631100][ T8781] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.638702][ T8781] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.647436][ T8781] bridge_slave_1: entered allmulticast mode [ 196.656959][ T8781] bridge_slave_1: entered promiscuous mode [ 196.696396][ T8774] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.704251][ T8774] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.712203][ T8774] bridge_slave_0: entered allmulticast mode [ 196.720302][ T8774] bridge_slave_0: entered promiscuous mode [ 196.773945][ T5157] Bluetooth: hci9: command tx timeout [ 196.794923][ T8774] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.802200][ T8774] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.810393][ T8774] bridge_slave_1: entered allmulticast mode [ 196.818357][ T8774] bridge_slave_1: entered promiscuous mode [ 196.837102][ T8781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.896269][ T8781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.906193][ T8756] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 196.918017][ T8756] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 196.982795][ T8756] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 197.001513][ T8774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.035775][ T8781] team0: Port device team_slave_0 added [ 197.052050][ T8756] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 197.072602][ T8774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.090777][ T8781] team0: Port device team_slave_1 added [ 197.180110][ T8781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.187971][ T8781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.215757][ T8781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.232413][ T8774] team0: Port device team_slave_0 added [ 197.265689][ T8781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.272807][ T8781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.299395][ T8781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.316018][ T8774] team0: Port device team_slave_1 added [ 197.322244][ T8758] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 197.389155][ T8758] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 197.402078][ T8758] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 197.429154][ T8774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.437250][ T8774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.464640][ T8774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.478278][ T8774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.485650][ T8774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.512886][ T8774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.525372][ T8758] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 197.607174][ T8781] hsr_slave_0: entered promiscuous mode [ 197.615709][ T8781] hsr_slave_1: entered promiscuous mode [ 197.622231][ T8781] debugfs: 'hsr0' already exists in 'hsr' [ 197.629273][ T8781] Cannot create hsr debugfs directory [ 197.654513][ T5157] Bluetooth: hci5: command tx timeout [ 197.704053][ T8774] hsr_slave_0: entered promiscuous mode [ 197.711491][ T8774] hsr_slave_1: entered promiscuous mode [ 197.718638][ T8774] debugfs: 'hsr0' already exists in 'hsr' [ 197.724490][ T8774] Cannot create hsr debugfs directory [ 197.734337][ T5157] Bluetooth: hci6: command tx timeout [ 197.856589][ T8761] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 197.894176][ T5157] Bluetooth: hci7: command tx timeout [ 197.908552][ T8761] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 197.920341][ T8761] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 197.972966][ T8761] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 198.288383][ T8758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.315659][ T8781] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 198.350105][ T8781] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 198.362578][ T8781] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 198.393448][ T8781] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 198.410644][ T8756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.477696][ T8756] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.496559][ T8774] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 198.510905][ T8774] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 198.526770][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.533963][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.550750][ T8758] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.562509][ T8774] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 198.579009][ T8774] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 198.620898][ T6499] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.628212][ T6499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.636274][ T5157] Bluetooth: hci8: command tx timeout [ 198.640252][ T6499] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.648875][ T6499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.667810][ T6499] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.675076][ T6499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.706315][ T8761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.792621][ T8761] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.855153][ T5157] Bluetooth: hci9: command tx timeout [ 198.861711][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.868950][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.887903][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.895105][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.122811][ T8781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.152133][ T8781] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.197528][ T6499] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.206236][ T6499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.249770][ T6499] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.257078][ T6499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.361112][ T8774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.457201][ T8774] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.527534][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.534823][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.571765][ T8756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.607333][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.614629][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.649250][ T8758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.744592][ T5157] Bluetooth: hci5: command tx timeout [ 199.815354][ T5157] Bluetooth: hci6: command tx timeout [ 199.825568][ T8761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.989787][ T5157] Bluetooth: hci7: command tx timeout [ 200.138256][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.146300][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.197950][ T8781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.582198][ T8756] veth0_vlan: entered promiscuous mode [ 200.636740][ T8774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.674852][ T8756] veth1_vlan: entered promiscuous mode [ 200.698477][ T5157] Bluetooth: hci8: command tx timeout [ 200.822831][ T8758] veth0_vlan: entered promiscuous mode [ 200.835431][ T8756] veth0_macvtap: entered promiscuous mode [ 200.871237][ T8758] veth1_vlan: entered promiscuous mode [ 200.898350][ T8756] veth1_macvtap: entered promiscuous mode [ 200.944695][ T5157] Bluetooth: hci9: command tx timeout [ 200.978730][ T8761] veth0_vlan: entered promiscuous mode [ 201.033207][ T8761] veth1_vlan: entered promiscuous mode [ 201.061163][ T8756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.099724][ T8756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.187655][ T8781] veth0_vlan: entered promiscuous mode [ 201.201415][ T8758] veth0_macvtap: entered promiscuous mode [ 201.224254][ T6499] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.237667][ T8781] veth1_vlan: entered promiscuous mode [ 201.254707][ T8758] veth1_macvtap: entered promiscuous mode [ 201.281655][ T6499] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.298840][ T8761] veth0_macvtap: entered promiscuous mode [ 201.312287][ T8761] veth1_macvtap: entered promiscuous mode [ 201.336085][ T6499] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.358880][ T8761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.369461][ T6499] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.396131][ T8781] veth0_macvtap: entered promiscuous mode [ 201.413403][ T8761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.439239][ T8758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.452628][ T8758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.471309][ T8781] veth1_macvtap: entered promiscuous mode [ 201.504279][ T1092] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.536423][ T1092] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.546050][ T1092] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.576579][ T8774] veth0_vlan: entered promiscuous mode [ 201.586361][ T1092] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.596916][ T1092] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.628461][ T8781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.641882][ T8781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.649873][ T1092] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.660977][ T1092] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.681431][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.692418][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.722171][ T1092] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.751902][ T30] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.772662][ T8774] veth1_vlan: entered promiscuous mode [ 201.782202][ T30] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.791742][ T30] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.813842][ T5157] Bluetooth: hci5: command tx timeout [ 201.821102][ T30] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.876867][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.885035][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.895716][ T5157] Bluetooth: hci6: command tx timeout [ 201.933278][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.944302][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.015849][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.040756][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.054513][ T5157] Bluetooth: hci7: command tx timeout [ 202.087466][ T8774] veth0_macvtap: entered promiscuous mode [ 202.118717][ T8882] netlink: 132 bytes leftover after parsing attributes in process `syz.5.687'. [ 202.202495][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.217154][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.242651][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.251073][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.257364][ T8774] veth1_macvtap: entered promiscuous mode [ 202.315669][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.324700][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.412149][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.428899][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.447576][ T8774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.492615][ T8774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.589472][ T8895] ip6tnl1: entered promiscuous mode [ 202.606418][ T8895] ip6tnl1: entered allmulticast mode [ 202.618281][ T8895] team0: Device ip6tnl1 is of different type [ 202.691229][ T49] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.752611][ T49] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.778007][ T5853] Bluetooth: hci8: command tx timeout [ 202.780411][ T49] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.803250][ T49] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.989053][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.003368][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.022732][ T5853] Bluetooth: hci9: command tx timeout [ 203.145588][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.174058][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.320612][ T8919] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 203.846800][ T8946] macvlan2: entered promiscuous mode [ 203.881894][ T8946] macvlan2: entered allmulticast mode [ 204.077480][ T8948] netlink: 'syz.7.702': attribute type 22 has an invalid length. [ 204.137042][ T8955] lo speed is unknown, defaulting to 1000 [ 204.258921][ T8956] lo speed is unknown, defaulting to 1000 [ 204.467425][ T8966] netlink: 24 bytes leftover after parsing attributes in process `syz.7.705'. [ 204.756921][ T8965] lo speed is unknown, defaulting to 1000 [ 204.955733][ T8971] lo speed is unknown, defaulting to 1000 [ 205.096197][ T5853] Bluetooth: hci9: command 0x0405 tx timeout [ 205.268519][ T8967] netlink: 'syz.6.704': attribute type 6 has an invalid length. [ 205.586366][ T6140] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 205.674092][ T6140] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 205.762521][ T8995] netlink: 24 bytes leftover after parsing attributes in process `syz.8.712'. [ 206.122263][ T9006] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.130247][ T9006] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.337057][ T9025] netlink: 'syz.8.716': attribute type 21 has an invalid length. [ 206.390178][ T9006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.407448][ T9006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.630358][ T9017] bond1: option arp_validate: invalid value (18446744073491447809) [ 206.642016][ T9017] bond1 (unregistering): Released all slaves [ 206.686005][ T9025] netlink: 'syz.8.716': attribute type 1 has an invalid length. [ 206.699678][ T9025] netlink: 144 bytes leftover after parsing attributes in process `syz.8.716'. [ 206.719451][ T6502] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.743159][ T9028] tipc: Started in network mode [ 206.749373][ T9028] tipc: Node identity 1a1d6bc05b75, cluster identity 4711 [ 206.762629][ T9028] tipc: Enabled bearer , priority 0 [ 206.799225][ T9004] lo speed is unknown, defaulting to 1000 [ 206.861510][ T6502] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.920760][ T9038] netlink: 508 bytes leftover after parsing attributes in process `syz.6.720'. [ 206.923301][ T9037] netlink: 'syz.5.721': attribute type 5 has an invalid length. [ 206.952257][ T9027] tipc: Resetting bearer [ 206.959745][ T6502] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.990193][ T9038] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 207.012248][ T9038] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 207.053809][ T9043] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 207.105683][ T9022] tipc: Disabling bearer [ 207.122938][ T6502] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.131238][ T9047] netlink: 7 bytes leftover after parsing attributes in process `syz.5.723'. [ 207.180258][ T9043] netlink: 40 bytes leftover after parsing attributes in process `syz.8.722'. [ 207.194067][ T9043] netlink: 'syz.8.722': attribute type 10 has an invalid length. [ 207.228342][ T9043] veth1_vlan: entered allmulticast mode [ 207.252424][ T9043] team0: Device veth1_vlan failed to register rx_handler [ 207.326134][ T9052] netlink: 'syz.7.725': attribute type 3 has an invalid length. [ 207.463767][ T9055] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 207.559420][ T9055] bridge_slave_0: left allmulticast mode [ 207.604243][ T9055] bridge_slave_0: left promiscuous mode [ 207.611965][ T9055] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.700039][ T9072] netlink: 'syz.6.726': attribute type 10 has an invalid length. [ 207.775775][ T31] audit: type=1800 audit(1759796631.399:3): pid=9061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.724" name="memory.events" dev="tmpfs" ino=69 res=0 errno=0 [ 207.889404][ T9055] bridge_slave_1: left allmulticast mode [ 207.915561][ T9055] bridge_slave_1: left promiscuous mode [ 207.925767][ T9055] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.992439][ T9055] bond0: (slave bond_slave_0): Releasing backup interface [ 208.036834][ T9055] bond0: (slave bond_slave_1): Releasing backup interface [ 208.068170][ T9055] team0: Port device team_slave_0 removed [ 208.095389][ T9055] team0: Port device team_slave_1 removed [ 208.102625][ T9055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.112006][ T9055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.125531][ T9055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.133145][ T9055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.146323][ T9055] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 208.278562][ T9072] mac80211_hwsim hwsim22 wlan1: left allmulticast mode [ 208.301087][ T9072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.328287][ T9072] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 208.347617][ T9078] veth0: entered promiscuous mode [ 208.353198][ T9081] batadv_slave_0: entered promiscuous mode [ 208.375729][ T9085] tipc: Started in network mode [ 208.383327][ T9085] tipc: Node identity 3efff6176d78, cluster identity 4711 [ 208.391367][ T9085] tipc: Enabled bearer , priority 0 [ 208.416058][ T9087] syzkaller0: entered promiscuous mode [ 208.436358][ T9087] syzkaller0: entered allmulticast mode [ 208.452428][ T9074] batadv_slave_0: left promiscuous mode [ 208.468116][ T9074] veth0: left promiscuous mode [ 208.496502][ T9084] tipc: Resetting bearer [ 208.516532][ T9080] tipc: Resetting bearer [ 208.573291][ T9080] tipc: Disabling bearer [ 208.700298][ T9098] netlink: 4 bytes leftover after parsing attributes in process `syz.9.732'. [ 208.765448][ T9101] netlink: 27 bytes leftover after parsing attributes in process `syz.9.732'. [ 208.905363][ T9108] netlink: 14 bytes leftover after parsing attributes in process `syz.5.736'. [ 208.914978][ T9108] hsr_slave_0: left promiscuous mode [ 208.945513][ T9108] hsr_slave_1: left promiscuous mode [ 209.124201][ T9118] lo speed is unknown, defaulting to 1000 [ 209.171659][ T9116] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 209.182107][ T9115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 209.183910][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 209.281793][ T9131] tipc: Enabling of bearer rejected, failed to enable media [ 209.292457][ T9128] netlink: 32 bytes leftover after parsing attributes in process `syz.7.740'. [ 209.325494][ T9131] bridge1: entered promiscuous mode [ 209.335096][ T9131] bridge1: entered allmulticast mode [ 209.342853][ T9131] team0: Port device bridge1 added [ 209.681353][ T9144] lo speed is unknown, defaulting to 1000 [ 209.799453][ T9154] tipc: Enabled bearer , priority 0 [ 209.836727][ T9150] syzkaller0: entered allmulticast mode [ 209.844392][ T9155] netlink: 12 bytes leftover after parsing attributes in process `syz.8.748'. [ 209.873503][ T9151] tipc: Resetting bearer [ 209.905039][ T9148] tipc: Disabling bearer [ 209.955134][ T9164] : entered promiscuous mode [ 209.962324][ T9166] netlink: 24 bytes leftover after parsing attributes in process `syz.5.752'. [ 210.176795][ T9174] netlink: 12 bytes leftover after parsing attributes in process `syz.9.756'. [ 210.366236][ T9188] netlink: 'syz.9.758': attribute type 21 has an invalid length. [ 210.388179][ T9188] netlink: 132 bytes leftover after parsing attributes in process `syz.9.758'. [ 210.500762][ T9198] netlink: 36 bytes leftover after parsing attributes in process `syz.6.762'. [ 210.520549][ T9200] veth1_macvtap: left promiscuous mode [ 210.733796][ T9210] netlink: 'syz.8.764': attribute type 11 has an invalid length. [ 210.966092][ T9216] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.018969][ T9216] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 211.489388][ T9237] netlink: 'syz.5.772': attribute type 1 has an invalid length. [ 211.531639][ T9238] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 211.802354][ T9246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.834727][ T9246] batadv_slave_0: entered promiscuous mode [ 212.336817][ T9287] tipc: Enabled bearer , priority 0 [ 212.369246][ T9287] syzkaller0: entered promiscuous mode [ 212.384477][ T9287] syzkaller0: entered allmulticast mode [ 212.424798][ T9287] tipc: Resetting bearer [ 212.455156][ T9286] tipc: Resetting bearer [ 212.486322][ T9286] tipc: Disabling bearer [ 212.916992][ T9309] lo speed is unknown, defaulting to 1000 [ 213.255359][ T9316] nbd: device at index 8 is going down [ 213.682977][ T9332] lo speed is unknown, defaulting to 1000 [ 214.602634][ T9355] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 214.642965][ T9353] __nla_validate_parse: 12 callbacks suppressed [ 214.642987][ T9353] netlink: 8 bytes leftover after parsing attributes in process `syz.7.801'. [ 214.771851][ T9358] lo speed is unknown, defaulting to 1000 [ 214.912204][ T9366] netlink: 40 bytes leftover after parsing attributes in process `syz.6.805'. [ 214.940316][ T9364] netlink: 'syz.5.804': attribute type 1 has an invalid length. [ 214.954583][ T9364] netlink: 'syz.5.804': attribute type 1 has an invalid length. [ 215.183105][ T9372] lo speed is unknown, defaulting to 1000 [ 215.389658][ T9384] netlink: 'syz.7.807': attribute type 1 has an invalid length. [ 215.676428][ T9394] ieee802154 phy0 wpan0: encryption failed: -90 [ 216.274753][ T9384] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 216.623391][ T9417] netlink: 4 bytes leftover after parsing attributes in process `syz.7.817'. [ 216.690883][ T9421] netlink: 8 bytes leftover after parsing attributes in process `syz.9.818'. [ 216.696855][ T9422] netlink: 68 bytes leftover after parsing attributes in process `syz.7.817'. [ 216.700127][ T9421] bridge_slave_1: left allmulticast mode [ 216.715672][ T9421] bridge_slave_1: left promiscuous mode [ 216.721618][ T9421] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.773741][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 216.852235][ T9427] netlink: 596 bytes leftover after parsing attributes in process `syz.9.819'. [ 218.078154][ T9466] netlink: 12 bytes leftover after parsing attributes in process `syz.8.829'. [ 218.217402][ T9470] netlink: 220 bytes leftover after parsing attributes in process `syz.7.831'. [ 218.284118][ T9463] lo speed is unknown, defaulting to 1000 [ 218.477843][ T9478] netlink: 8 bytes leftover after parsing attributes in process `syz.7.832'. [ 218.486966][ T9478] netlink: 24 bytes leftover after parsing attributes in process `syz.7.832'. [ 219.334681][ T9511] lo speed is unknown, defaulting to 1000 [ 219.360196][ T9514] netlink: 'syz.8.840': attribute type 21 has an invalid length. [ 219.473674][ T9519] tc_dump_action: action bad kind [ 219.828909][ T9530] __nla_validate_parse: 8 callbacks suppressed [ 219.828928][ T9530] netlink: 24 bytes leftover after parsing attributes in process `syz.9.845'. [ 219.880095][ T9529] sctp: [Deprecated]: syz.6.844 (pid 9529) Use of int in max_burst socket option. [ 219.880095][ T9529] Use struct sctp_assoc_value instead [ 220.063463][ T9536] netlink: 20 bytes leftover after parsing attributes in process `syz.9.846'. [ 220.090126][ T9536] netlink: 32 bytes leftover after parsing attributes in process `syz.9.846'. [ 220.134157][ T9536] netlink: 24 bytes leftover after parsing attributes in process `syz.9.846'. [ 220.282098][ T9544] IPVS: Unknown mcast interface: dvmrp0 [ 220.734435][ T9568] netlink: 'syz.7.856': attribute type 1 has an invalid length. [ 220.784418][ T9568] netlink: 232 bytes leftover after parsing attributes in process `syz.7.856'. [ 221.076400][ T9581] netlink: 12 bytes leftover after parsing attributes in process `syz.8.857'. [ 221.229442][ T9589] netlink: 'syz.5.859': attribute type 7 has an invalid length. [ 221.256580][ T9589] netlink: 'syz.5.859': attribute type 8 has an invalid length. [ 221.392392][ T9593] netlink: 20 bytes leftover after parsing attributes in process `syz.7.861'. [ 221.408324][ T9593] netlink: 12 bytes leftover after parsing attributes in process `syz.7.861'. [ 221.600986][ T9601] lo speed is unknown, defaulting to 1000 [ 221.832710][ T9611] lo speed is unknown, defaulting to 1000 [ 221.958829][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.6.869'. [ 222.011599][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.6.869'. [ 222.705484][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 222.711944][ T5840] Bluetooth: hci2: command 0x0401 tx timeout [ 222.718844][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 222.726369][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 223.151998][ T9641] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.176708][ T9641] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 223.851002][ T9671] lo speed is unknown, defaulting to 1000 [ 223.870439][ T9670] lo speed is unknown, defaulting to 1000 [ 224.272935][ T9692] erspan0: entered promiscuous mode [ 224.642314][ T9701] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 224.731067][ T9701] bridge_slave_0: left allmulticast mode [ 224.739296][ T9701] bridge_slave_0: left promiscuous mode [ 224.748069][ T9701] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.770847][ T9701] bridge_slave_1: left allmulticast mode [ 224.784267][ T9701] bridge_slave_1: left promiscuous mode [ 224.790221][ T9701] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.818174][ T9719] netlink: 'syz.8.888': attribute type 10 has an invalid length. [ 224.827854][ T9701] bond0: (slave bond_slave_0): Releasing backup interface [ 224.841807][ T9701] bond0: (slave bond_slave_1): Releasing backup interface [ 224.898192][ T9723] __nla_validate_parse: 5 callbacks suppressed [ 224.898212][ T9723] netlink: 8 bytes leftover after parsing attributes in process `syz.8.888'. [ 224.945573][ T9724] netlink: 'syz.6.890': attribute type 13 has an invalid length. [ 224.961222][ T9701] team0: Port device team_slave_0 removed [ 224.979680][ T9701] team0: Port device team_slave_1 removed [ 224.990527][ T9701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.016504][ T9701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.024576][ T9701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.057371][ T9701] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 225.142961][ T9719] mac80211_hwsim hwsim26 wlan1: left allmulticast mode [ 225.213965][ T9719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.226917][ T9719] bond0: (slave wlan1): Opening slave failed [ 225.454405][ T9722] Set syz1 is full, maxelem 6117 reached [ 226.010949][ T49] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.031824][ T49] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.140991][ T49] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.182523][ T49] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.354998][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.6.903'. [ 226.520305][ T9774] netlink: 28 bytes leftover after parsing attributes in process `syz.8.906'. [ 226.552128][ T9774] gretap1: entered allmulticast mode [ 226.650258][ T9781] atomic_op ffff88807c6ec198 conn xmit_atomic 0000000000000000 [ 226.932744][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.7.910'. [ 227.193052][ T9816] netlink: 68 bytes leftover after parsing attributes in process `syz.7.916'. [ 227.518526][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.6.920'. [ 227.531076][ T9833] pim6reg: entered allmulticast mode [ 227.623436][ T9836] vlan2: entered allmulticast mode [ 227.629412][ T9836] bridge_slave_0: entered allmulticast mode [ 227.762813][ T9841] netlink: 24 bytes leftover after parsing attributes in process `syz.9.924'. [ 227.998911][ T9855] netlink: 12 bytes leftover after parsing attributes in process `syz.9.929'. [ 228.120158][ T9859] netlink: 12 bytes leftover after parsing attributes in process `syz.9.930'. [ 228.379999][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.9.932'. [ 228.584578][ T9875] bond2: option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 228.622460][ T9875] bond2 (unregistering): Released all slaves [ 228.668093][ T9879] syz_tun: entered allmulticast mode [ 228.712846][ T9879] dvmrp8: entered allmulticast mode [ 228.845193][ T9883] netlink: 'syz.9.936': attribute type 23 has an invalid length. [ 228.891829][ T9879] lo speed is unknown, defaulting to 1000 [ 229.306290][ T9878] syz_tun: left allmulticast mode [ 229.320680][ T9878] dvmrp8: left allmulticast mode [ 229.508528][ T9911] netlink: 'syz.8.943': attribute type 1 has an invalid length. [ 229.513783][ T9913] lo speed is unknown, defaulting to 1000 [ 229.554893][ T9915] netlink: 'syz.5.945': attribute type 1 has an invalid length. [ 229.829653][ T9930] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 229.911378][ T9933] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 230.029031][ T9943] netlink: 'syz.9.955': attribute type 3 has an invalid length. [ 230.676306][ T9968] __nla_validate_parse: 2 callbacks suppressed [ 230.676328][ T9968] netlink: 92 bytes leftover after parsing attributes in process `syz.9.961'. [ 230.697946][ T9966] bridge3: entered promiscuous mode [ 230.707011][ T9966] bridge3: entered allmulticast mode [ 230.771766][ T9968] syzkaller1: entered promiscuous mode [ 230.781383][ T9968] syzkaller1: entered allmulticast mode [ 230.886172][ T9946] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 230.962785][ T9977] netlink: 'syz.6.963': attribute type 12 has an invalid length. [ 231.177351][ T9979] netlink: 68 bytes leftover after parsing attributes in process `syz.9.964'. [ 231.357320][ T9979] lo speed is unknown, defaulting to 1000 [ 231.493845][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 231.552469][ T9983] lo speed is unknown, defaulting to 1000 [ 231.560039][ T9987] netlink: 28 bytes leftover after parsing attributes in process `syz.8.966'. [ 231.585381][ T9987] netlink: 28 bytes leftover after parsing attributes in process `syz.8.966'. [ 232.019866][ T9996] netlink: 'syz.5.967': attribute type 10 has an invalid length. [ 232.076045][ T9996] netlink: 2 bytes leftover after parsing attributes in process `syz.5.967'. [ 232.306718][ T9996] team0: entered promiscuous mode [ 232.336832][ T9996] team_slave_0: entered promiscuous mode [ 232.372032][ T9996] team_slave_1: entered promiscuous mode [ 232.414682][ T9996] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.428867][ T9996] bridge0: port 3(team0) entered blocking state [ 232.462017][ T9996] bridge0: port 3(team0) entered disabled state [ 232.474234][ T9996] team0: entered allmulticast mode [ 232.493019][ T9996] team_slave_0: entered allmulticast mode [ 232.509833][ T9996] team_slave_1: entered allmulticast mode [ 232.550277][T10009] erspan0: entered promiscuous mode [ 232.557134][T10009] netlink: 'syz.6.970': attribute type 2 has an invalid length. [ 232.845731][T10021] netlink: 32 bytes leftover after parsing attributes in process `syz.6.975'. [ 232.976852][T10027] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.988833][T10027] bridge0: port 3(bond1) entered blocking state [ 232.996451][T10027] bridge0: port 3(bond1) entered disabled state [ 233.004574][T10027] bond1: entered allmulticast mode [ 233.012666][T10027] bond1: entered promiscuous mode [ 233.019572][T10027] bridge0: port 3(bond1) entered blocking state [ 233.027352][T10027] bridge0: port 3(bond1) entered forwarding state [ 233.045051][T10025] lo speed is unknown, defaulting to 1000 [ 233.212206][T10037] Bluetooth: MGMT ver 1.23 [ 233.963718][ T13] bridge0: port 3(bond1) entered disabled state [ 234.100383][T10068] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 234.555329][T10082] netlink: 24 bytes leftover after parsing attributes in process `syz.5.989'. [ 234.670723][T10085] bond2 (unregistering): Released all slaves [ 235.155385][T10098] lo speed is unknown, defaulting to 1000 [ 235.793028][T10121] netlink: 14 bytes leftover after parsing attributes in process `syz.6.999'. [ 235.978907][T10126] netlink: 'syz.5.997': attribute type 10 has an invalid length. [ 236.036663][T10126] team0: left allmulticast mode [ 236.050975][T10126] team_slave_0: left allmulticast mode [ 236.060410][T10126] team_slave_1: left allmulticast mode [ 236.084424][T10126] team0: left promiscuous mode [ 236.168566][T10126] team_slave_0: left promiscuous mode [ 236.189747][T10126] team_slave_1: left promiscuous mode [ 236.215449][T10126] bridge0: port 3(team0) entered disabled state [ 236.216248][T10138] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 236.229707][T10138] IPv6: NLM_F_CREATE should be set when creating new route [ 236.237506][T10138] IPv6: NLM_F_CREATE should be set when creating new route [ 236.245113][T10138] IPv6: NLM_F_CREATE should be set when creating new route [ 236.279810][T10126] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.317404][T10144] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 236.338043][T10126] bond0: (slave team0): Enslaving as an active interface with an up link [ 236.486802][T10125] lo speed is unknown, defaulting to 1000 [ 236.851443][T10136] netlink: 'syz.7.1002': attribute type 1 has an invalid length. [ 237.072453][T10156] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1005'. [ 237.106672][T10155] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1007'. [ 237.197473][T10160] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1008'. [ 237.236857][T10160] bridge2: entered promiscuous mode [ 237.242906][T10160] bridge2: entered allmulticast mode [ 237.257210][T10160] team0: Port device bridge2 added [ 237.408463][T10166] lo speed is unknown, defaulting to 1000 [ 237.419199][T10165] netlink: 'syz.5.1010': attribute type 10 has an invalid length. [ 237.434817][T10165] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 238.013753][T10179] Unsupported ieee802154 address type: 0 [ 238.024969][T10173] lo speed is unknown, defaulting to 1000 [ 238.570714][T10192] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 238.579330][T10192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.737077][T10196] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1020'. [ 238.764609][T10198] netlink: 180 bytes leftover after parsing attributes in process `syz.8.1021'. [ 238.891982][T10205] netlink: 'syz.8.1022': attribute type 11 has an invalid length. [ 239.023202][T10207] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20003 [ 239.123311][T10214] netlink: 'syz.7.1026': attribute type 1 has an invalid length. [ 239.142779][T10215] netlink: 128 bytes leftover after parsing attributes in process `syz.8.1024'. [ 239.156487][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1025'. [ 239.195265][T10214] bond2: entered promiscuous mode [ 239.217774][T10214] 8021q: adding VLAN 0 to HW filter on device bond2 [ 239.296210][T10221] bond2: (slave bridge1): making interface the new active one [ 239.304366][T10221] bridge1: entered promiscuous mode [ 239.312311][T10221] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 239.829027][T10235] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1030'. [ 240.020043][T10238] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1031'. [ 240.050351][T10238] netem: invalid attributes len -16 [ 240.063922][T10238] netem: change failed [ 240.096926][T10240] !: renamed from dummy0 (while UP) [ 240.258573][T10242] lo speed is unknown, defaulting to 1000 [ 240.317585][T10247] syzkaller0: entered promiscuous mode [ 240.323283][T10247] syzkaller0: entered allmulticast mode [ 240.342144][T10250] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 240.992118][T10263] wg1 speed is unknown, defaulting to 1000 [ 241.026183][T10263] wg1 speed is unknown, defaulting to 1000 [ 241.086028][T10263] wg1 speed is unknown, defaulting to 1000 [ 241.235193][T10263] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 241.264654][T10271] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 241.358291][T10263] wg1 speed is unknown, defaulting to 1000 [ 241.451338][T10263] wg1 speed is unknown, defaulting to 1000 [ 241.476351][T10261] lo speed is unknown, defaulting to 1000 [ 241.499748][T10263] wg1 speed is unknown, defaulting to 1000 [ 241.527531][T10278] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci9/hci9:200/input5 [ 241.550194][T10261] wg1 speed is unknown, defaulting to 1000 [ 241.688159][T10263] wg1 speed is unknown, defaulting to 1000 [ 241.789426][T10263] wg1 speed is unknown, defaulting to 1000 [ 241.929851][T10263] wg1 speed is unknown, defaulting to 1000 [ 242.274338][T10263] wg1 speed is unknown, defaulting to 1000 [ 242.311184][T10297] lo speed is unknown, defaulting to 1000 [ 242.321567][T10263] wg1 speed is unknown, defaulting to 1000 [ 242.358939][T10296] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci9/hci9:200/input6 [ 242.524790][T10263] wg1 speed is unknown, defaulting to 1000 [ 242.554436][T10297] wg1 speed is unknown, defaulting to 1000 [ 242.580309][T10263] wg1 speed is unknown, defaulting to 1000 [ 242.607435][T10304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.665962][T10263] wg1 speed is unknown, defaulting to 1000 [ 242.924934][T10314] netlink: 'syz.5.1047': attribute type 21 has an invalid length. [ 242.934842][T10314] __nla_validate_parse: 1 callbacks suppressed [ 242.934860][T10314] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1047'. [ 243.089400][T10315] tipc: Started in network mode [ 243.100889][T10315] tipc: Node identity fc000000000000000000000000000001, cluster identity 4711 [ 243.153676][T10315] tipc: Enabling of bearer rejected, failed to enable media [ 243.189918][T10324] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1048'. [ 243.194576][T10314] netlink: 'syz.5.1047': attribute type 4 has an invalid length. [ 243.214596][T10314] netlink: 'syz.5.1047': attribute type 3 has an invalid length. [ 243.222634][T10314] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1047'. [ 243.473435][T10324] 8021q: adding VLAN 0 to HW filter on device bond1 [ 243.508966][T10309] lo speed is unknown, defaulting to 1000 [ 243.530974][T10328] bond1: (slave macvlan0): Enslaving as an active interface with an up link [ 243.555856][T10309] wg1 speed is unknown, defaulting to 1000 [ 243.592629][T10320] lo speed is unknown, defaulting to 1000 [ 243.667636][T10320] wg1 speed is unknown, defaulting to 1000 [ 243.685564][T10318] lo speed is unknown, defaulting to 1000 [ 243.718208][T10318] wg1 speed is unknown, defaulting to 1000 [ 243.938692][T10334] dummy0: mtu less than device minimum [ 244.555094][T10342] netlink: 6 bytes leftover after parsing attributes in process `syz.9.1052'. [ 244.624747][T10342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.977515][T10353] netlink: 'syz.5.1057': attribute type 15 has an invalid length. [ 245.326367][T10366] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 245.349719][T10368] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 245.668421][T10379] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1062'. [ 245.678713][T10378] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1062'. [ 246.941760][T10417] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1071'. [ 247.001083][T10417] 8021q: adding VLAN 0 to HW filter on device bond2 [ 247.515736][T10435] sctp: [Deprecated]: syz.9.1076 (pid 10435) Use of int in maxseg socket option. [ 247.515736][T10435] Use struct sctp_assoc_value instead [ 247.555193][T10436] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1076'. [ 247.623343][T10445] netlink: 'syz.5.1075': attribute type 53 has an invalid length. [ 247.690274][T10447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.794312][T10432] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.1075'. [ 247.851156][T10449] lo speed is unknown, defaulting to 1000 [ 247.894929][T10449] wg1 speed is unknown, defaulting to 1000 [ 248.110192][T10463] bond2: entered promiscuous mode [ 248.117377][T10463] 8021q: adding VLAN 0 to HW filter on device bond2 [ 248.169122][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1081'. [ 248.905155][T10511] FAULT_INJECTION: forcing a failure. [ 248.905155][T10511] name failslab, interval 1, probability 0, space 0, times 1 [ 248.913765][T10487] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.919705][T10511] CPU: 1 UID: 0 PID: 10511 Comm: syz.8.1096 Not tainted syzkaller #0 PREEMPT(full) [ 248.919742][T10511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 248.919770][T10511] Call Trace: [ 248.919780][T10511] [ 248.919791][T10511] dump_stack_lvl+0x189/0x250 [ 248.919841][T10511] ? __pfx____ratelimit+0x10/0x10 [ 248.919884][T10511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.919914][T10511] ? __pfx__printk+0x10/0x10 [ 248.919959][T10511] ? __pfx___might_resched+0x10/0x10 [ 248.919991][T10511] should_fail_ex+0x414/0x560 [ 248.920035][T10511] should_failslab+0xa8/0x100 [ 248.920069][T10511] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 248.920102][T10511] ? __alloc_skb+0x112/0x2d0 [ 248.920132][T10511] __alloc_skb+0x112/0x2d0 [ 248.920170][T10511] tcp_stream_alloc_skb+0x3d/0x340 [ 248.920215][T10511] tcp_sendmsg_locked+0x1c7f/0x5540 [ 248.920318][T10511] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 248.920352][T10511] ? __local_bh_enable_ip+0x12d/0x1c0 [ 248.920385][T10511] ? __local_bh_enable_ip+0x12d/0x1c0 [ 248.920425][T10511] tcp_sendmsg+0x2f/0x50 [ 248.920463][T10511] __sock_sendmsg+0x19c/0x270 [ 248.920503][T10511] __sys_sendto+0x3bd/0x520 [ 248.920532][T10511] ? __pfx___sys_sendto+0x10/0x10 [ 248.920554][T10511] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 248.920596][T10511] ? __fget_files+0x3a0/0x420 [ 248.920644][T10511] ? ksys_write+0x22a/0x250 [ 248.920676][T10511] ? __pfx_ksys_write+0x10/0x10 [ 248.920701][T10511] ? rcu_is_watching+0x15/0xb0 [ 248.920736][T10511] __x64_sys_sendto+0xde/0x100 [ 248.920768][T10511] do_syscall_64+0xfa/0x3b0 [ 248.920793][T10511] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.920832][T10511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.920858][T10511] ? clear_bhb_loop+0x60/0xb0 [ 248.920888][T10511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.920913][T10511] RIP: 0033:0x7f00b0f8eec9 [ 248.920941][T10511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.920963][T10511] RSP: 002b:00007f00b1d51038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 248.920994][T10511] RAX: ffffffffffffffda RBX: 00007f00b11e5fa0 RCX: 00007f00b0f8eec9 [ 248.921012][T10511] RDX: ffffffffffffff94 RSI: 0000200000000000 RDI: 0000000000000003 [ 248.921029][T10511] RBP: 00007f00b1d51090 R08: 0000000000000000 R09: 0000000000000000 [ 248.921043][T10511] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000001 [ 248.921058][T10511] R13: 00007f00b11e6038 R14: 00007f00b11e5fa0 R15: 00007ffedae15bc8 [ 248.921097][T10511] [ 249.184529][T10487] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.560176][T10487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.604422][T10487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.800237][T10487] bond2: left promiscuous mode [ 249.809128][T10487] bridge1: left promiscuous mode [ 249.916663][T10509] bridge_slave_0: left allmulticast mode [ 249.922413][T10509] bridge_slave_0: left promiscuous mode [ 249.940973][T10509] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.970543][T10509] bond0: (slave bond_slave_0): Releasing backup interface [ 250.074283][T10509] bond0: (slave bond_slave_1): Releasing backup interface [ 250.129773][T10509] team0: Port device team_slave_0 removed [ 250.186556][T10509] team0: Port device team_slave_1 removed [ 250.212210][T10509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.241481][T10509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.262844][T10509] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 250.332671][T10522] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1097'. [ 250.363641][ T6507] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.393052][ T6507] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.451392][ T92] wg1 speed is unknown, defaulting to 1000 [ 250.458655][ T6507] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.509545][ T6507] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.873786][T10543] lo speed is unknown, defaulting to 1000 [ 250.902191][T10543] wg1 speed is unknown, defaulting to 1000 [ 251.402877][T10576] IPv6: sit1: Disabled Multicast RS [ 251.411748][T10576] sit1: entered allmulticast mode [ 251.507130][T10579] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1110'. [ 251.619908][ T5937] IPVS: starting estimator thread 0... [ 251.733772][T10588] IPVS: using max 23 ests per chain, 55200 per kthread [ 251.868285][T10599] lo speed is unknown, defaulting to 1000 [ 251.932216][T10599] wg1 speed is unknown, defaulting to 1000 [ 252.008739][T10601] lo speed is unknown, defaulting to 1000 [ 252.057738][T10601] wg1 speed is unknown, defaulting to 1000 [ 252.148418][T10614] tipc: Started in network mode [ 252.154298][T10614] tipc: Node identity be6686d4e4c9, cluster identity 4711 [ 252.161967][T10614] tipc: Enabled bearer , priority 0 [ 252.184281][T10614] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1122'. [ 252.195546][T10614] syzkaller0: entered promiscuous mode [ 252.201375][T10614] syzkaller0: entered allmulticast mode [ 252.298934][T10614] tipc: Resetting bearer [ 252.327576][T10611] tipc: Resetting bearer [ 252.355186][T10611] tipc: Disabling bearer [ 253.237676][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1131'. [ 253.274243][T10649] netlink: 'syz.5.1129': attribute type 10 has an invalid length. [ 253.368485][T10642] lo speed is unknown, defaulting to 1000 [ 253.396602][T10666] : renamed from bond_slave_0 [ 253.409858][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1133'. [ 253.427526][T10668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1133'. [ 253.440187][T10642] wg1 speed is unknown, defaulting to 1000 [ 253.472423][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1133'. [ 253.490764][T10668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1133'. [ 253.493663][T10665] lo speed is unknown, defaulting to 1000 [ 253.501104][ T49] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.546922][ T49] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.590798][T10665] wg1 speed is unknown, defaulting to 1000 [ 253.620024][T10673] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1135'. [ 253.630267][ T49] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.657589][ T49] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.767926][T10666] lo speed is unknown, defaulting to 1000 [ 253.802877][T10686] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1138'. [ 253.826717][T10666] wg1 speed is unknown, defaulting to 1000 [ 253.993881][T10694] netlink: 'syz.6.1140': attribute type 1 has an invalid length. [ 254.008099][T10694] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1140'. [ 254.238341][T10704] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1142'. [ 254.736550][T10720] lo speed is unknown, defaulting to 1000 [ 254.756898][T10720] wg1 speed is unknown, defaulting to 1000 [ 254.924767][T10728] block nbd0: server does not support multiple connections per device. [ 254.951655][T10728] block nbd0: shutting down sockets [ 254.974833][T10733] ûý: entered promiscuous mode [ 255.052285][T10733] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1149'. [ 255.592681][T10737] lo speed is unknown, defaulting to 1000 [ 255.602211][T10737] wg1 speed is unknown, defaulting to 1000 [ 256.848009][T10796] netlink: 'syz.8.1167': attribute type 10 has an invalid length. [ 256.903158][T10796] bond0: (slave wlan1): Opening slave failed [ 257.052888][T10796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.208827][T10813] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 257.227688][T10813] bond3 (unregistering): Released all slaves [ 257.351999][T10816] bridge4: entered allmulticast mode [ 257.397470][T10828] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 257.514528][T10829] netlink: 'syz.8.1174': attribute type 12 has an invalid length. [ 257.609865][T10845] batman_adv: batadv0: Adding interface: ipvlan2 [ 257.617427][T10845] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.679823][T10845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.716494][T10845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.741211][T10845] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 257.808981][T10842] batman_adv: batadv0: Adding interface: ipvlan3 [ 257.834599][T10842] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.941586][T10842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.954926][T10842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.966247][T10842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 257.980707][T10842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.991846][T10842] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 258.205429][T10869] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20003 [ 258.234548][ T31] audit: type=1800 audit(1759796681.859:4): pid=10847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1178" name="memory.events" dev="tmpfs" ino=528 res=0 errno=0 [ 258.467939][T10875] bridge1: left promiscuous mode [ 258.495368][T10875] bridge1: left allmulticast mode [ 258.506733][T10875] bridge3: left promiscuous mode [ 258.512296][T10875] bridge3: left allmulticast mode [ 258.561350][T10875] bridge4: left allmulticast mode [ 258.586964][ T3565] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.620419][ T3565] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.652639][T10891] __nla_validate_parse: 14 callbacks suppressed [ 258.652661][T10891] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1188'. [ 258.687946][T10886] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 258.716691][T10886] bond1 (unregistering): Released all slaves [ 258.768151][ T3565] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.826541][ T3565] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.006674][T10913] syzkaller0: entered promiscuous mode [ 259.045338][T10913] syzkaller0: entered allmulticast mode [ 259.306102][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1198'. [ 259.319461][T10928] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1198'. [ 259.349119][T10925] netlink: 'syz.5.1197': attribute type 6 has an invalid length. [ 259.360146][T10923] lo speed is unknown, defaulting to 1000 [ 259.433448][T10923] wg1 speed is unknown, defaulting to 1000 [ 259.770850][T10936] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1200'. [ 260.326389][T10947] ieee802154 phy1 wpan1: encryption failed: -90 [ 260.640875][T10959] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1204'. [ 260.668593][T10949] caif0: entered promiscuous mode [ 260.685012][T10949] caif0: entered allmulticast mode [ 260.792353][T10959] netlink: 'syz.9.1204': attribute type 1 has an invalid length. [ 260.834492][T10961] netlink: 'syz.9.1204': attribute type 1 has an invalid length. [ 261.125446][ T5916] IPVS: starting estimator thread 0... [ 261.155663][T10969] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 261.235012][T10972] IPVS: using max 22 ests per chain, 52800 per kthread [ 261.325945][T10976] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1209'. [ 261.337240][T10982] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1209'. [ 261.539231][T10990] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1211'. [ 261.580607][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.776503][T11001] lo speed is unknown, defaulting to 1000 [ 261.866956][T11001] wg1 speed is unknown, defaulting to 1000 [ 261.881830][T11010] netlink: 256 bytes leftover after parsing attributes in process `syz.8.1218'. [ 261.912143][T11010] unsupported nlmsg_type 40 [ 262.435177][T11015] lo speed is unknown, defaulting to 1000 [ 262.530458][T11014] lo speed is unknown, defaulting to 1000 [ 262.538670][T11015] wg1 speed is unknown, defaulting to 1000 [ 262.624522][T11014] wg1 speed is unknown, defaulting to 1000 [ 262.649814][T11020] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1221'. [ 263.112012][T11033] tipc: Cannot configure node identity twice [ 263.424406][T11059] netlink: 'syz.8.1231': attribute type 1 has an invalid length. [ 264.555935][T11082] __nla_validate_parse: 3 callbacks suppressed [ 264.555958][T11082] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1237'. [ 265.904555][T11107] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1243'. [ 266.115649][T11121] openvswitch: netlink: Message has 8 unknown bytes. [ 266.190308][T11123] tipc: Enabling of bearer rejected, failed to enable media [ 266.202341][T11129] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1248'. [ 266.212312][T11128] netlink: 'syz.7.1245': attribute type 6 has an invalid length. [ 266.256576][T11131] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1247'. [ 266.317851][T11129] pim6reg1: entered promiscuous mode [ 266.323215][T11129] pim6reg1: entered allmulticast mode [ 266.405737][T11138] netlink: 'syz.5.1250': attribute type 21 has an invalid length. [ 266.476616][T11138] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1250'. [ 266.494497][T11141] xt_l2tp: v2 sid > 0xffff: 1114112 [ 266.766539][T11162] sctp: [Deprecated]: syz.9.1257 (pid 11162) Use of int in maxseg socket option. [ 266.766539][T11162] Use struct sctp_assoc_value instead [ 266.947312][T11169] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1258'. [ 267.457462][T11179] tipc: Failed to remove unknown binding: 66,1,1/0:1693590780/1693590782 [ 267.486092][T11182] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1262'. [ 267.500790][T11177] tipc: Failed to remove unknown binding: 66,1,1/0:1693590780/1693590782 [ 267.520617][T11177] tipc: Failed to remove unknown binding: 66,1,1/0:1693590780/1693590782 [ 267.523674][T11182] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1262'. [ 267.715904][T11187] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1263'. [ 267.806250][T11187] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1263'. [ 267.810457][T11186] bond3: option all_slaves_active: invalid value (13) [ 267.827432][T11186] bond3 (unregistering): Released all slaves [ 268.113016][T11212] netlink: 'syz.9.1271': attribute type 2 has an invalid length. [ 268.150373][T11210] : entered promiscuous mode [ 268.187873][ T92] hid-generic 0005:0007:0008.0002: unknown main item tag 0x0 [ 268.196129][ T92] hid-generic 0005:0007:0008.0002: item fetching failed at offset 1/2 [ 268.206730][ T92] hid-generic 0005:0007:0008.0002: probe with driver hid-generic failed with error -22 [ 269.453257][T11271] vlan2: entered allmulticast mode [ 269.466971][T11271] erspan0: entered allmulticast mode [ 269.838719][T11294] __nla_validate_parse: 8 callbacks suppressed [ 269.838739][T11294] netlink: 216 bytes leftover after parsing attributes in process `syz.7.1292'. [ 269.859486][T11294] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1292'. [ 269.869551][T11294] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1292'. [ 269.886616][T11294] netlink: 172 bytes leftover after parsing attributes in process `syz.7.1292'. [ 269.925402][T11297] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1294'. [ 269.935083][T11297] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1294'. [ 269.946769][T11297] netlink: 'syz.5.1294': attribute type 5 has an invalid length. [ 269.958390][T11297] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1294'. [ 270.053272][T11302] netlink: 'syz.9.1290': attribute type 3 has an invalid length. [ 270.105777][T11302] syz_tun: entered allmulticast mode [ 270.128235][T11302] siw: device registration error -23 [ 270.142599][T11301] syz_tun: left allmulticast mode [ 270.475190][T11323] syzkaller1: entered allmulticast mode [ 270.482127][T11323] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1298'. [ 270.498893][T11323] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1298'. [ 270.515745][T11325] netlink: 'syz.7.1300': attribute type 4 has an invalid length. [ 270.676584][T11332] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1301'. [ 271.138630][T11353] FAULT_INJECTION: forcing a failure. [ 271.138630][T11353] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 271.153066][T11353] CPU: 0 UID: 0 PID: 11353 Comm: syz.6.1307 Not tainted syzkaller #0 PREEMPT(full) [ 271.153096][T11353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 271.153110][T11353] Call Trace: [ 271.153119][T11353] [ 271.153129][T11353] dump_stack_lvl+0x189/0x250 [ 271.153164][T11353] ? __pfx____ratelimit+0x10/0x10 [ 271.153200][T11353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.153227][T11353] ? __pfx__printk+0x10/0x10 [ 271.153263][T11353] ? fs_reclaim_acquire+0x7d/0x100 [ 271.153379][T11353] should_fail_ex+0x414/0x560 [ 271.153416][T11353] prepare_alloc_pages+0x213/0x610 [ 271.153457][T11353] __alloc_frozen_pages_noprof+0x123/0x370 [ 271.153498][T11353] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 271.153528][T11353] ? ip_output+0x5b/0x450 [ 271.153560][T11353] ? ip_send_skb+0x92/0x100 [ 271.153592][T11353] ? policy_nodemask+0x27c/0x720 [ 271.153626][T11353] alloc_pages_mpol+0x232/0x4a0 [ 271.153661][T11353] vma_alloc_folio_noprof+0xe4/0x200 [ 271.153693][T11353] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 271.153737][T11353] folio_prealloc+0x30/0x180 [ 271.153767][T11353] do_wp_page+0x1231/0x5800 [ 271.153816][T11353] ? __pfx_do_wp_page+0x10/0x10 [ 271.153838][T11353] ? do_raw_spin_lock+0x121/0x290 [ 271.153872][T11353] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 271.153913][T11353] __handle_mm_fault+0x1033/0x5440 [ 271.153958][T11353] ? __pfx___handle_mm_fault+0x10/0x10 [ 271.154008][T11353] ? find_vma+0xe7/0x160 [ 271.154032][T11353] ? __pfx_find_vma+0x10/0x10 [ 271.154061][T11353] handle_mm_fault+0x40a/0x8e0 [ 271.154099][T11353] do_user_addr_fault+0x764/0x1380 [ 271.154140][T11353] exc_page_fault+0x76/0xf0 [ 271.154178][T11353] asm_exc_page_fault+0x26/0x30 [ 271.154200][T11353] RIP: 0010:__put_user_4+0xd/0x20 [ 271.154221][T11353] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 271.154241][T11353] RSP: 0018:ffffc9001b5efc98 EFLAGS: 00050202 [ 271.154262][T11353] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000007ff8 [ 271.154275][T11353] RDX: 0000000000000000 RSI: ffffffff8d6ef4b7 RDI: ffffffff8b9ec4e0 [ 271.154296][T11353] RBP: ffffc9001b5efeb0 R08: 0000000000000000 R09: ffffffff820b7f60 [ 271.154311][T11353] R10: 00000000ffffff97 R11: 0000000000000000 R12: 0000200000007fc0 [ 271.154325][T11353] R13: 0000000000040000 R14: 0000200000007fc0 R15: 0000000000000000 [ 271.154347][T11353] ? __might_fault+0xb0/0x130 [ 271.154382][T11353] __sys_sendmmsg+0x25f/0x430 [ 271.154417][T11353] ? __pfx___sys_sendmmsg+0x10/0x10 [ 271.154441][T11353] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 271.154496][T11353] ? ksys_write+0x22a/0x250 [ 271.154526][T11353] ? __pfx_ksys_write+0x10/0x10 [ 271.154553][T11353] ? rcu_is_watching+0x15/0xb0 [ 271.154586][T11353] __x64_sys_sendmmsg+0xa0/0xc0 [ 271.154612][T11353] do_syscall_64+0xfa/0x3b0 [ 271.154631][T11353] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.154663][T11353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.154684][T11353] ? clear_bhb_loop+0x60/0xb0 [ 271.154711][T11353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.154731][T11353] RIP: 0033:0x7fc227f8eec9 [ 271.154751][T11353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.154770][T11353] RSP: 002b:00007fc228dd8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 271.154793][T11353] RAX: ffffffffffffffda RBX: 00007fc2281e5fa0 RCX: 00007fc227f8eec9 [ 271.154809][T11353] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 271.154823][T11353] RBP: 00007fc228dd8090 R08: 0000000000000000 R09: 0000000000000000 [ 271.154837][T11353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.154851][T11353] R13: 00007fc2281e6038 R14: 00007fc2281e5fa0 R15: 00007fff8de8f858 [ 271.154886][T11353] [ 271.818924][T11373] team0: Device gtp0 is up. Set it down before adding it as a team port [ 271.897135][T11375] netlink: 'syz.7.1314': attribute type 1 has an invalid length. [ 271.940042][T11375] bond4: entered promiscuous mode [ 271.945961][T11375] 8021q: adding VLAN 0 to HW filter on device bond4 [ 272.008116][T11379] vxcan3: entered allmulticast mode [ 272.335821][T11418] FAULT_INJECTION: forcing a failure. [ 272.335821][T11418] name failslab, interval 1, probability 0, space 0, times 0 [ 272.350391][T11418] CPU: 1 UID: 0 PID: 11418 Comm: syz.7.1322 Not tainted syzkaller #0 PREEMPT(full) [ 272.350430][T11418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 272.350445][T11418] Call Trace: [ 272.350454][T11418] [ 272.350464][T11418] dump_stack_lvl+0x189/0x250 [ 272.350498][T11418] ? __pfx____ratelimit+0x10/0x10 [ 272.350535][T11418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.350563][T11418] ? __pfx__printk+0x10/0x10 [ 272.350613][T11418] should_fail_ex+0x414/0x560 [ 272.350650][T11418] should_failslab+0xa8/0x100 [ 272.350682][T11418] kmem_cache_alloc_noprof+0x73/0x3c0 [ 272.350710][T11418] ? skb_clone+0x212/0x3a0 [ 272.350744][T11418] skb_clone+0x212/0x3a0 [ 272.350768][T11418] ? __skb_tstamp_tx+0x519/0xee0 [ 272.350795][T11418] __skb_tstamp_tx+0x526/0xee0 [ 272.350827][T11418] __dev_queue_xmit+0x1fed/0x3b50 [ 272.350857][T11418] ? register_lock_class+0x51/0x320 [ 272.350885][T11418] ? __lock_acquire+0xab9/0xd20 [ 272.350927][T11418] ? __pfx___dev_queue_xmit+0x10/0x10 [ 272.350958][T11418] ? read_seqbegin+0x122/0x250 [ 272.350989][T11418] ? neigh_resolve_output+0x438/0x750 [ 272.351022][T11418] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.351059][T11418] ? read_seqbegin+0x1ac/0x250 [ 272.351092][T11418] ? __pfx_read_seqbegin+0x10/0x10 [ 272.351123][T11418] ? __local_bh_enable_ip+0x12d/0x1c0 [ 272.351146][T11418] ? eth_header+0x11b/0x200 [ 272.351174][T11418] ? __asan_memcpy+0x40/0x70 [ 272.351197][T11418] ? eth_header+0x11b/0x200 [ 272.351225][T11418] ? __pfx_eth_header+0x10/0x10 [ 272.351247][T11418] ? neigh_resolve_output+0x624/0x750 [ 272.351301][T11418] ip_finish_output2+0xd40/0x1160 [ 272.351344][T11418] ? ip_finish_output2+0x452/0x1160 [ 272.351380][T11418] ? ip_skb_dst_mtu+0x18d/0xb70 [ 272.351416][T11418] ? __pfx_ip_finish_output2+0x10/0x10 [ 272.351447][T11418] ? ip_skb_dst_mtu+0x18d/0xb70 [ 272.351476][T11418] ? ip_skb_dst_mtu+0x917/0xb70 [ 272.351509][T11418] ? ip_finish_output+0x33a/0x3f0 [ 272.351543][T11418] ip_output+0x29f/0x450 [ 272.351572][T11418] ? ip_output+0x5b/0x450 [ 272.351604][T11418] ip_send_skb+0x74/0x100 [ 272.351636][T11418] udp_send_skb+0xaf1/0x14c0 [ 272.351695][T11418] udp_sendmsg+0x195a/0x2170 [ 272.351746][T11418] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 272.351780][T11418] ? __pfx_udp_sendmsg+0x10/0x10 [ 272.351824][T11418] ? count_memcg_event_mm+0x21/0x260 [ 272.351857][T11418] ? count_memcg_event_mm+0x21/0x260 [ 272.351905][T11418] ? sock_rps_record_flow+0x19/0x410 [ 272.351943][T11418] ? inet_sendmsg+0x29c/0x370 [ 272.351975][T11418] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 272.352014][T11418] __sock_sendmsg+0x19c/0x270 [ 272.352051][T11418] ____sys_sendmsg+0x52d/0x830 [ 272.352085][T11418] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.352124][T11418] ? import_iovec+0x74/0xa0 [ 272.352154][T11418] ___sys_sendmsg+0x21f/0x2a0 [ 272.352184][T11418] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.352255][T11418] ? __fget_files+0x2a/0x420 [ 272.352285][T11418] ? __fget_files+0x3a0/0x420 [ 272.352328][T11418] __sys_sendmmsg+0x227/0x430 [ 272.352362][T11418] ? __pfx___sys_sendmmsg+0x10/0x10 [ 272.352386][T11418] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 272.352448][T11418] ? ksys_write+0x22a/0x250 [ 272.352477][T11418] ? __pfx_ksys_write+0x10/0x10 [ 272.352500][T11418] ? rcu_is_watching+0x15/0xb0 [ 272.352534][T11418] __x64_sys_sendmmsg+0xa0/0xc0 [ 272.352564][T11418] do_syscall_64+0xfa/0x3b0 [ 272.352586][T11418] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.352620][T11418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.352643][T11418] ? clear_bhb_loop+0x60/0xb0 [ 272.352671][T11418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.352693][T11418] RIP: 0033:0x7f6ef598eec9 [ 272.352713][T11418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.352733][T11418] RSP: 002b:00007f6ef6910038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 272.352757][T11418] RAX: ffffffffffffffda RBX: 00007f6ef5be5fa0 RCX: 00007f6ef598eec9 [ 272.352773][T11418] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 272.352788][T11418] RBP: 00007f6ef6910090 R08: 0000000000000000 R09: 0000000000000000 [ 272.352802][T11418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.352816][T11418] R13: 00007f6ef5be6038 R14: 00007f6ef5be5fa0 R15: 00007ffc94b07138 [ 272.352853][T11418] [ 272.882735][T11426] veth1_to_hsr: entered promiscuous mode [ 272.896029][T11426] macvtap1: entered promiscuous mode [ 272.901595][T11426] macvtap1: entered allmulticast mode [ 272.907902][T11426] veth1_to_hsr: entered allmulticast mode [ 272.942721][T11427] macvtap2: entered promiscuous mode [ 273.001898][T11427] macvtap2: entered allmulticast mode [ 273.208922][T11434] lo speed is unknown, defaulting to 1000 [ 273.307924][T11434] wg1 speed is unknown, defaulting to 1000 [ 273.540878][T11460] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 274.562938][T11491] lo speed is unknown, defaulting to 1000 [ 274.600442][T11491] wg1 speed is unknown, defaulting to 1000 [ 275.180846][T11501] __nla_validate_parse: 6 callbacks suppressed [ 275.180874][T11501] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1341'. [ 275.223335][T11498] lo speed is unknown, defaulting to 1000 [ 275.285469][T11498] wg1 speed is unknown, defaulting to 1000 [ 275.587472][T11517] netlink: 'syz.7.1343': attribute type 1 has an invalid length. [ 275.628941][T11517] netlink: 244 bytes leftover after parsing attributes in process `syz.7.1343'. [ 275.747850][T11524] netlink: 'syz.5.1346': attribute type 10 has an invalid length. [ 275.816091][T11519] veth13: entered promiscuous mode [ 276.028891][T11533] lo speed is unknown, defaulting to 1000 [ 276.051805][T11533] wg1 speed is unknown, defaulting to 1000 [ 276.172263][T11535] netlink: 'syz.6.1349': attribute type 17 has an invalid length. [ 276.201727][T11535] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1349'. [ 276.202173][T11537] can: request_module (can-proto-4) failed. [ 276.297439][T11544] netlink: 'syz.5.1351': attribute type 1 has an invalid length. [ 276.331222][T11546] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1351'. [ 276.354673][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1351'. [ 276.502742][T11549] bond3: option downdelay: invalid value (18446744073709551615) [ 276.510875][T11549] bond3: option downdelay: allowed values 0 - 2147483647 [ 276.534993][T11556] netlink: 'syz.7.1353': attribute type 13 has an invalid length. [ 276.548945][T11549] bond3 (unregistering): Released all slaves [ 276.559884][T11558] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1354'. [ 276.572574][T11556] netlink: 'syz.7.1353': attribute type 17 has an invalid length. [ 276.656332][T11558] vlan1: entered allmulticast mode [ 276.664146][T11558] erspan0: entered allmulticast mode [ 276.774312][T11562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.828992][T11556] erspan0: left promiscuous mode [ 276.837845][T11562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.840923][T11570] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1358'. [ 276.996241][T11556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.038588][T11556] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.078018][T11556] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.205419][T11572] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1358'. [ 277.271662][T11553] lo speed is unknown, defaulting to 1000 [ 277.289064][T11553] wg1 speed is unknown, defaulting to 1000 [ 277.560446][T11583] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1359'. [ 277.668885][T11577] veth0: entered promiscuous mode [ 278.133964][T11588] lo speed is unknown, defaulting to 1000 [ 278.174535][T11589] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1361'. [ 278.339807][T11576] veth0: left promiscuous mode [ 278.369190][T11588] wg1 speed is unknown, defaulting to 1000 [ 279.474648][T11644] vxcan1: tx address claim with dest, not broadcast [ 280.472035][T11687] __nla_validate_parse: 4 callbacks suppressed [ 280.472061][T11687] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1386'. [ 280.539353][T11691] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 280.545772][T11696] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1386'. [ 280.575064][T11691] bond3 (unregistering): Released all slaves [ 280.815369][T11701] lo speed is unknown, defaulting to 1000 [ 280.874964][T11701] wg1 speed is unknown, defaulting to 1000 [ 280.957405][T11707] lo speed is unknown, defaulting to 1000 [ 280.963442][T11702] 8021q: VLANs not supported on wg2 [ 281.046727][T11707] wg1 speed is unknown, defaulting to 1000 [ 281.053304][T11697] netlink: 260 bytes leftover after parsing attributes in process `syz.7.1387'. [ 281.080526][T11709] netlink: 'syz.9.1390': attribute type 17 has an invalid length. [ 281.094983][T11697] netlink: 260 bytes leftover after parsing attributes in process `syz.7.1387'. [ 281.186997][T11709] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.535662][T11736] tipc: Can't bind to reserved service type 1 [ 282.119872][T11707] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1390'. [ 282.275589][T11757] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1401'. [ 282.735232][T11757] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1401'. [ 283.204803][T11765] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 16 [ 283.428107][T11773] erspan0: left promiscuous mode [ 283.436435][T11773] caif0: left promiscuous mode [ 283.441383][T11773] caif0: left allmulticast mode [ 283.510315][T11773] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 283.565189][T11773] bridge2: left promiscuous mode [ 283.593104][T11773] bridge2: left allmulticast mode [ 283.616521][T11773] bond2: left promiscuous mode [ 283.694718][T11783] netlink: 'syz.7.1408': attribute type 9 has an invalid length. [ 283.702838][T11783] netlink: 'syz.7.1408': attribute type 6 has an invalid length. [ 283.937847][T11793] ¢@: renamed from wg0 (while UP) [ 284.012529][T11794] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1411'. [ 284.050973][T11793] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1411'. [ 284.070086][T11799] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1413'. [ 285.648389][T11838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.687117][T11838] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.711285][T11838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.521235][T11890] netlink: 'syz.8.1437': attribute type 21 has an invalid length. [ 286.539920][T11896] netlink: 'syz.6.1439': attribute type 39 has an invalid length. [ 286.549448][T11890] __nla_validate_parse: 2 callbacks suppressed [ 286.549469][T11890] netlink: 156 bytes leftover after parsing attributes in process `syz.8.1437'. [ 286.721253][T11904] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1437'. [ 286.835386][T11890] lo speed is unknown, defaulting to 1000 [ 286.856831][T11904] veth0_macvtap: left promiscuous mode [ 286.937813][T11890] wg1 speed is unknown, defaulting to 1000 [ 287.046450][T11905] lo speed is unknown, defaulting to 1000 [ 287.058765][T11905] wg1 speed is unknown, defaulting to 1000 [ 287.275085][T11935] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1443'. [ 287.433152][T11893] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-0o%": -EINTR [ 287.688577][T11955] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1447'. [ 289.422995][T11966] netlink: 'syz.7.1448': attribute type 1 has an invalid length. [ 289.575981][T11966] 8021q: adding VLAN 0 to HW filter on device bond5 [ 289.618450][T11962] vlan2: entered promiscuous mode [ 289.626490][T11962] bond5: entered promiscuous mode [ 289.632106][T11962] vlan2: entered allmulticast mode [ 289.637915][T11962] bond5: entered allmulticast mode [ 289.920326][T11995] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1456'. [ 289.925065][T11997] netlink: 'syz.9.1457': attribute type 1 has an invalid length. [ 289.972666][T11997] netlink: 'syz.9.1457': attribute type 1 has an invalid length. [ 289.995396][T11997] netlink: 184 bytes leftover after parsing attributes in process `syz.9.1457'. [ 290.191555][T12018] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.1461'. [ 290.240648][T12020] netlink: 'syz.6.1463': attribute type 2 has an invalid length. [ 290.261042][T12020] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1463'. [ 290.404994][T12030] siw: device registration error -23 [ 290.514533][T12038] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1468'. [ 290.701528][T12048] netlink: 216 bytes leftover after parsing attributes in process `syz.9.1471'. [ 290.711943][T12045] lo speed is unknown, defaulting to 1000 [ 290.720471][T12045] wg1 speed is unknown, defaulting to 1000 [ 290.750734][T12049] lo speed is unknown, defaulting to 1000 [ 290.772658][T12049] wg1 speed is unknown, defaulting to 1000 [ 291.105741][T12062] lo speed is unknown, defaulting to 1000 [ 291.126268][T12062] wg1 speed is unknown, defaulting to 1000 [ 291.440104][T12045] netlink: 'syz.6.1470': attribute type 6 has an invalid length. [ 291.592041][T12069] bridge6: entered allmulticast mode [ 291.652249][T12074] lo speed is unknown, defaulting to 1000 [ 291.668986][T12074] wg1 speed is unknown, defaulting to 1000 [ 291.685503][T12079] __nla_validate_parse: 4 callbacks suppressed [ 291.685523][T12079] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1479'. [ 291.958687][T12091] netlink: 'syz.7.1481': attribute type 1 has an invalid length. [ 292.001693][T12093] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1482'. [ 292.028657][T12095] vlan3: entered allmulticast mode [ 292.034881][T12095] veth1: entered allmulticast mode [ 292.105191][T12097] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1483'. [ 292.110522][T12091] 8021q: adding VLAN 0 to HW filter on device bond6 [ 292.307780][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805767e400: rx timeout, send abort [ 292.318836][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805767e400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 292.741751][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1488'. [ 292.878570][T12123] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1489'. [ 293.002206][T12114] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 293.252677][T12134] netlink: 1041 bytes leftover after parsing attributes in process `syz.9.1490'. [ 293.394834][T12139] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1494'. [ 293.610148][T12149] netlink: 'syz.8.1498': attribute type 13 has an invalid length. [ 293.620165][T12153] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1499'. [ 293.640741][T12152] netlink: 'syz.9.1500': attribute type 4 has an invalid length. [ 293.660480][T12159] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1499'. [ 293.835631][T12163] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1501'. [ 293.931564][T12164] lo speed is unknown, defaulting to 1000 [ 294.008708][T12164] wg1 speed is unknown, defaulting to 1000 [ 294.077593][T12181] RDS: rds_bind could not find a transport for ::ffff:172.30.1.7, load rds_tcp or rds_rdma? [ 294.435644][T12199] netlink: 'syz.7.1512': attribute type 10 has an invalid length. [ 294.465972][T12199] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 294.477602][T12199] netlink: 'syz.7.1512': attribute type 10 has an invalid length. [ 294.742061][T12210] macsec0: entered promiscuous mode [ 294.747576][T12210] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 294.757190][T12210] macsec0: entered allmulticast mode [ 294.764337][T12210] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode [ 294.849234][T12200] bridge0: port 3(syz_tun) entered blocking state [ 294.894302][T12200] bridge0: port 3(syz_tun) entered disabled state [ 294.912147][T12200] syz_tun: entered allmulticast mode [ 294.937252][T12200] syz_tun: entered promiscuous mode [ 294.940567][T12228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.212562][T12242] lo speed is unknown, defaulting to 1000 [ 295.270581][T12242] wg1 speed is unknown, defaulting to 1000 [ 295.385721][T12208] infiniband syz1: set down [ 295.391977][T12208] infiniband syz1: added syz_tun [ 295.400804][T12208] syz1: rxe_create_cq: returned err = -12 [ 295.409793][T12208] infiniband syz1: Couldn't create ib_mad CQ [ 295.426098][T12208] infiniband syz1: Couldn't open port 1 [ 295.471788][T12208] RDS/IB: syz1: added [ 295.860326][T12256] batadv_slave_0: left promiscuous mode [ 295.989252][T12256] veth1_vlan: left allmulticast mode [ 296.086133][T12256] veth1_to_hsr: left allmulticast mode [ 296.091926][T12256] macvtap1: left promiscuous mode [ 296.097508][T12256] macvtap1: left allmulticast mode [ 296.131728][ T6507] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.152302][ T6507] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.175177][ T6507] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.256346][ T6507] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.536807][T12282] netlink: 'syz.7.1533': attribute type 21 has an invalid length. [ 297.111890][T12296] __nla_validate_parse: 10 callbacks suppressed [ 297.111912][T12296] netlink: 276 bytes leftover after parsing attributes in process `syz.7.1536'. [ 297.884590][T12316] netlink: 'syz.8.1542': attribute type 49 has an invalid length. [ 297.957728][T12318] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1543'. [ 298.351024][T12330] netlink: 'syz.8.1547': attribute type 30 has an invalid length. [ 298.879042][T12341] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1551'. [ 298.912791][T12341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.950798][T12341] bond0: (slave rose0): Enslaving as an active interface with an up link [ 299.494587][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 299.916485][T12295] lo speed is unknown, defaulting to 1000 [ 299.946414][T12293] lo speed is unknown, defaulting to 1000 [ 299.986111][T12295] wg1 speed is unknown, defaulting to 1000 [ 300.000698][T12261] lo speed is unknown, defaulting to 1000 [ 300.075119][T12372] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1554'. [ 300.106705][T12261] wg1 speed is unknown, defaulting to 1000 [ 300.153262][T12293] wg1 speed is unknown, defaulting to 1000 [ 300.313187][T12381] Bluetooth: MGMT ver 1.23 [ 300.687846][T12393] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1558'. [ 300.714833][T12393] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1558'. [ 300.733590][T12393] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1558'. [ 301.031137][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1559'. [ 301.090228][T12406] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1559'. [ 301.476758][T12409] netlink: 512 bytes leftover after parsing attributes in process `syz.5.1560'. [ 301.846760][T12421] netlink: 'syz.8.1561': attribute type 10 has an invalid length. [ 302.036759][T12421] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 302.127235][T12424] __nla_validate_parse: 1 callbacks suppressed [ 302.127258][T12424] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1564'. [ 302.334318][T12427] netlink: 'syz.6.1566': attribute type 1 has an invalid length. [ 302.412065][T12436] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1568'. [ 302.455294][T12427] 8021q: adding VLAN 0 to HW filter on device bond3 [ 302.491547][T12429] nbd: must specify a size in bytes for the device [ 302.518635][T12443] netlink: 'syz.7.1569': attribute type 9 has an invalid length. [ 302.527261][T12443] netlink: 184 bytes leftover after parsing attributes in process `syz.7.1569'. [ 302.646781][T12446] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1569'. [ 302.933898][T12456] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1571'. [ 302.978128][T12456] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1571'. [ 303.548365][T12475] syzkaller0: entered promiscuous mode [ 303.562050][T12475] syzkaller0: entered allmulticast mode [ 303.826236][T12490] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1583'. [ 303.894759][T12494] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1585'. [ 305.600926][T12504] syzkaller1: entered promiscuous mode [ 305.621310][T12504] syzkaller1: entered allmulticast mode [ 305.698661][T12521] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1589'. [ 305.775601][T12521] ip6gre1: entered allmulticast mode [ 305.851090][T12525] lo speed is unknown, defaulting to 1000 [ 305.965448][T12525] wg1 speed is unknown, defaulting to 1000 [ 306.279086][T12552] lo speed is unknown, defaulting to 1000 [ 306.298219][T12552] wg1 speed is unknown, defaulting to 1000 [ 306.718085][T12563] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1600'. [ 307.371620][T12577] netlink: 'syz.9.1603': attribute type 1 has an invalid length. [ 307.491092][T12577] 8021q: adding VLAN 0 to HW filter on device bond1 [ 307.531039][T12580] bond1: (slave geneve2): making interface the new active one [ 307.541262][T12580] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 307.549034][T12587] netlink: 548 bytes leftover after parsing attributes in process `syz.7.1604'. [ 307.590300][T12582] netlink: 'syz.7.1604': attribute type 29 has an invalid length. [ 307.639356][T12579] lo speed is unknown, defaulting to 1000 [ 307.646427][T12585] netlink: 'syz.7.1604': attribute type 29 has an invalid length. [ 307.678866][T12579] wg1 speed is unknown, defaulting to 1000 [ 307.734267][T12571] lo speed is unknown, defaulting to 1000 [ 307.760358][T12571] wg1 speed is unknown, defaulting to 1000 [ 308.043084][T12598] syzkaller1: entered promiscuous mode [ 308.066795][T12598] syzkaller1: entered allmulticast mode [ 308.830128][T12602] syz_tun: entered allmulticast mode [ 308.848693][T12601] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1608'. [ 308.859799][T12604] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1609'. [ 308.869921][T12604] netlink: 34 bytes leftover after parsing attributes in process `syz.7.1609'. [ 309.178522][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1611'. [ 309.268735][T12619] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 310.025268][T12636] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1616'. [ 310.091352][T12641] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1618'. [ 310.209823][T12648] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 310.225558][T12648] bond7 (unregistering): Released all slaves [ 310.240666][T12652] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1621'. [ 310.432500][T12648] tipc: Enabled bearer , priority 0 [ 310.441243][T12648] syzkaller0: entered promiscuous mode [ 310.449857][T12648] syzkaller0: entered allmulticast mode [ 310.473424][T12647] tipc: Resetting bearer [ 310.578710][T12647] tipc: Disabling bearer [ 310.811079][T12673] lo speed is unknown, defaulting to 1000 [ 310.845642][T12673] wg1 speed is unknown, defaulting to 1000 [ 311.219009][T12681] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1628'. [ 311.242498][T12681] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1628'. [ 311.264374][T12681] nbd: must specify at least one socket [ 312.194640][T12710] A link change request failed with some changes committed already. Interface ipvlan2 may have been left with an inconsistent configuration, please check. [ 312.508433][T12734] netlink: 'syz.9.1642': attribute type 10 has an invalid length. [ 312.636350][T12734] team0: Failed to send options change via netlink (err -105) [ 312.673738][T12734] team0: Port device dummy0 added [ 312.901055][T12748] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci9/hci9:200/input7 [ 312.929893][T12735] lo speed is unknown, defaulting to 1000 [ 312.959827][T12735] wg1 speed is unknown, defaulting to 1000 [ 313.437156][T12773] __nla_validate_parse: 2 callbacks suppressed [ 313.437177][T12773] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1651'. [ 313.494700][T12772] bond4: Unable to set up delay as MII monitoring is disabled [ 313.518909][T12772] bond4 (unregistering): Released all slaves [ 313.616120][T12773] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 313.629354][T12773] bond3 (unregistering): Released all slaves [ 313.878209][T12789] xt_l2tp: missing protocol rule (udp|l2tpip) [ 314.119578][T12801] syzkaller1: entered promiscuous mode [ 314.125330][T12801] syzkaller1: entered allmulticast mode [ 314.365401][T12807] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 314.454228][ T52] Bluetooth: hci9: command 0x0405 tx timeout [ 315.396544][T12859] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1666'. [ 315.424549][T11388] IPVS: starting estimator thread 0... [ 315.475013][T12873] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1672'. [ 315.499495][T12873] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1672'. [ 315.514658][T12869] IPVS: using max 28 ests per chain, 67200 per kthread [ 315.543299][T12879] netlink: 'syz.5.1670': attribute type 6 has an invalid length. [ 315.685372][T12885] tipc: Enabled bearer , priority 0 [ 315.694891][T12885] syzkaller0: entered promiscuous mode [ 315.705021][T12885] syzkaller0: entered allmulticast mode [ 315.725722][T12883] syzkaller1: entered promiscuous mode [ 315.731337][T12883] syzkaller1: entered allmulticast mode [ 315.768879][T12881] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 315.875783][T12881] tipc: Resetting bearer [ 315.934374][T12878] tipc: Resetting bearer [ 315.982276][T12878] tipc: Disabling bearer [ 316.018327][T12892] lo speed is unknown, defaulting to 1000 [ 316.024520][T12912] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1674'. [ 316.024547][T12912] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1674'. [ 316.024569][T12912] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1674'. [ 316.024606][T12912] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1674'. [ 316.047658][T12908] geneve2: entered promiscuous mode [ 316.093850][T12892] wg1 speed is unknown, defaulting to 1000 [ 316.104626][T12834] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.132138][T12834] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.164228][T12834] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.190310][T12834] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.277179][T12911] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1681'. [ 316.287012][T12911] netlink: 35 bytes leftover after parsing attributes in process `syz.9.1681'. [ 316.298485][T12926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.303777][T12911] netlink: 'syz.9.1681': attribute type 5 has an invalid length. [ 316.326909][T12911] netlink: 'syz.9.1681': attribute type 6 has an invalid length. [ 316.340134][T12926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.094836][T13011] bond3: option lacp_active: invalid value (7) [ 318.116101][T13011] bond3 (unregistering): Released all slaves [ 318.249014][T13040] tipc: Started in network mode [ 318.263665][T13040] tipc: Node identity fc000000000000000000000000000001, cluster identity 4711 [ 318.283923][T13040] tipc: Enabling of bearer rejected, failed to enable media [ 318.496807][T13054] __nla_validate_parse: 13 callbacks suppressed [ 318.496829][T13054] netlink: 300 bytes leftover after parsing attributes in process `syz.9.1714'. [ 318.498857][T13056] netlink: 'syz.6.1713': attribute type 10 has an invalid length. [ 318.525218][T13060] netlink: 'syz.5.1711': attribute type 21 has an invalid length. [ 318.560935][T13056] team0: Port device bridge0 added [ 318.598279][T13055] lo speed is unknown, defaulting to 1000 [ 318.616826][T13060] netlink: 'syz.5.1711': attribute type 6 has an invalid length. [ 318.632411][T13060] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1711'. [ 318.650476][T13055] wg1 speed is unknown, defaulting to 1000 [ 318.808174][T13072] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1718'. [ 318.952904][T13078] netlink: 'syz.9.1720': attribute type 13 has an invalid length. [ 318.975839][T13081] netlink: 'syz.5.1719': attribute type 4 has an invalid length. [ 319.265012][T13078] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 319.482583][T13094] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1723'. [ 319.614909][T13091] lo speed is unknown, defaulting to 1000 [ 319.647404][T13091] wg1 speed is unknown, defaulting to 1000 [ 319.976763][ T5844] Bluetooth: hci6: command 0x0406 tx timeout [ 319.982883][ T5844] Bluetooth: hci7: command 0x0406 tx timeout [ 319.989417][ T9653] Bluetooth: hci5: command 0x0406 tx timeout [ 319.989453][ T5840] Bluetooth: hci8: command 0x0406 tx timeout [ 320.067943][T13111] netlink: 'syz.5.1727': attribute type 13 has an invalid length. [ 320.485870][T13117] lo speed is unknown, defaulting to 1000 [ 320.495479][T13117] wg1 speed is unknown, defaulting to 1000 [ 321.235618][T13140] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1735'. [ 321.311489][T13135] lo speed is unknown, defaulting to 1000 [ 321.343438][T13135] wg1 speed is unknown, defaulting to 1000 [ 321.426227][T13143] netlink: 'syz.9.1736': attribute type 12 has an invalid length. [ 321.447006][T13143] syzkaller1: entered promiscuous mode [ 321.452681][T13143] syzkaller1: entered allmulticast mode [ 321.535812][T13153] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1738'. [ 321.700777][T13155] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 321.766523][T13155] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 321.788218][T13161] openvswitch: netlink: IP tunnel attribute has 17 unknown bytes. [ 322.520936][T13195] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1746'. [ 322.802348][T13196] lo speed is unknown, defaulting to 1000 [ 322.831953][T13202] lo speed is unknown, defaulting to 1000 [ 322.875003][T13202] wg1 speed is unknown, defaulting to 1000 [ 322.896377][T13196] wg1 speed is unknown, defaulting to 1000 [ 322.987273][T13210] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1752'. [ 323.019982][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.078831][T13214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1753'. [ 323.089217][T13214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1753'. [ 323.099848][T13214] nbd: socks must be embedded in a SOCK_ITEM attr [ 324.546434][T13230] lo speed is unknown, defaulting to 1000 [ 324.556033][T13230] wg1 speed is unknown, defaulting to 1000 [ 325.006458][T13249] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 325.055278][T13249] bridge4: entered allmulticast mode [ 325.169409][T13256] sctp: [Deprecated]: syz.7.1763 (pid 13256) Use of int in maxseg socket option. [ 325.169409][T13256] Use struct sctp_assoc_value instead [ 325.196558][T13258] netlink: 'syz.8.1764': attribute type 7 has an invalid length. [ 325.233731][T13258] __nla_validate_parse: 2 callbacks suppressed [ 325.233752][T13258] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1764'. [ 325.862973][T13278] netlink: 'syz.8.1769': attribute type 1 has an invalid length. [ 326.007730][T13284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.091498][T13277] lo speed is unknown, defaulting to 1000 [ 326.117441][T13281] lo speed is unknown, defaulting to 1000 [ 326.124518][T13277] wg1 speed is unknown, defaulting to 1000 [ 326.149493][T13281] wg1 speed is unknown, defaulting to 1000 [ 326.399837][T13290] lo speed is unknown, defaulting to 1000 [ 326.491682][T13290] wg1 speed is unknown, defaulting to 1000 [ 326.611179][T13296] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1772'. [ 326.788453][T13307] netlink: 'syz.8.1775': attribute type 39 has an invalid length. [ 326.798725][T13300] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1774'. [ 326.882323][T13298] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1773'. [ 326.891806][T13300] tipc: Failed to remove unknown binding: 66,1,1/0:4080016273/4080016275 [ 326.891878][T13300] tipc: Failed to remove unknown binding: 66,1,1/0:4080016273/4080016275 [ 327.365692][T13314] netlink: 'syz.5.1777': attribute type 58 has an invalid length. [ 327.402602][T13314] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1777'. [ 328.045965][T13341] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1782'. [ 328.280885][T13356] netlink: 428 bytes leftover after parsing attributes in process `syz.8.1785'. [ 328.540812][T13341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.553020][T13341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.565437][T13341] bond0 (unregistering): (slave team0): Releasing backup interface [ 328.575754][T13341] bond0 (unregistering): (slave 0!): Releasing backup interface [ 328.588837][T13341] bond0 (unregistering): Released all slaves [ 328.608649][T13334] lo speed is unknown, defaulting to 1000 [ 328.649336][T13334] wg1 speed is unknown, defaulting to 1000 [ 328.888847][T13370] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1789'. [ 328.971357][T13370] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1789'. [ 329.081142][T13372] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1790'. [ 329.131137][T13379] 8021q: adding VLAN 0 to HW filter on device bond3 [ 329.139024][T13379] bridge0: port 1(bond3) entered blocking state [ 329.146651][T13379] bridge0: port 1(bond3) entered disabled state [ 329.153886][T13379] bond3: entered allmulticast mode [ 329.162926][T13379] bond3: entered promiscuous mode [ 329.439395][ T31] audit: type=1800 audit(1759796753.069:5): pid=13396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1797" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=1221 res=0 errno=0 [ 329.477665][T13385] lo speed is unknown, defaulting to 1000 [ 329.579592][T13385] wg1 speed is unknown, defaulting to 1000 [ 329.769302][T13410] netlink: 'syz.6.1801': attribute type 11 has an invalid length. [ 330.009893][T13389] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 330.265763][ T31] audit: type=1800 audit(1759796753.879:6): pid=13423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1803" name="memory.events" dev="tmpfs" ino=1232 res=0 errno=0 [ 330.288912][T13425] __nla_validate_parse: 3 callbacks suppressed [ 330.288933][T13425] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1805'. [ 331.171178][T13441] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1808'. [ 331.887998][T13467] team0: Device ipip3 is of different type [ 331.938414][T13465] tipc: Enabled bearer , priority 0 [ 331.949683][T13469] syzkaller0: entered promiscuous mode [ 331.958992][T13469] syzkaller0: entered allmulticast mode [ 332.069380][T13467] tipc: Resetting bearer [ 332.150792][T13467] tipc: Disabling bearer [ 332.318000][T13487] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1821'. [ 332.362687][T13487] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1821'. [ 332.415361][T13494] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1821'. [ 332.436389][T13487] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1821'. [ 332.473818][T13494] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1821'. [ 332.538165][T13493] syzkaller0: entered promiscuous mode [ 332.548739][T13493] syzkaller0: entered allmulticast mode [ 333.535888][T13525] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 333.556801][T13523] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1828'. [ 333.757197][T13538] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1833'. [ 333.806565][T13537] lo speed is unknown, defaulting to 1000 [ 333.846883][T13537] wg1 speed is unknown, defaulting to 1000 [ 333.883209][T13544] x_tables: ip_tables: udp match: only valid for protocol 17 [ 333.887332][T13532] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1832'. [ 333.952367][T13546] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 334.416538][T13566] netlink: 'syz.8.1839': attribute type 10 has an invalid length. [ 334.544612][ T32] INFO: task syz.1.680:8722 blocked for more than 143 seconds. [ 334.552248][ T32] Not tainted syzkaller #0 [ 334.613672][ T32] Blocked by coredump. [ 334.628586][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 334.663303][ T32] task:syz.1.680 state:D stack:24632 pid:8722 tgid:8721 ppid:5851 task_flags:0x40054c flags:0x00080001 [ 334.720957][ T32] Call Trace: [ 334.736602][ T32] [ 334.743127][ T32] __schedule+0x1798/0x4cc0 [ 334.753548][ T32] ? __lock_acquire+0xab9/0xd20 [ 334.763781][ T32] ? __lock_acquire+0xab9/0xd20 [ 334.778581][ T32] ? __pfx___schedule+0x10/0x10 [ 334.785085][ T32] ? schedule+0x91/0x360 [ 334.808468][ T32] schedule+0x165/0x360 [ 334.817811][ T32] schedule_preempt_disabled+0x13/0x30 [ 334.823865][ T32] rwsem_down_write_slowpath+0x872/0xfe0 [ 334.829776][ T32] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 334.836326][ T32] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 334.842629][ T32] ? __lock_acquire+0xab9/0xd20 [ 334.848245][ T32] ? exit_mmap+0x28e/0xb50 [ 334.852886][ T32] down_write+0x1ab/0x1f0 [ 334.858307][ T32] ? __pfx_down_write+0x10/0x10 [ 334.863274][ T32] exit_mmap+0x28e/0xb50 [ 334.868373][ T32] ? uprobe_clear_state+0x20f/0x290 [ 334.873958][ T32] ? __pfx_exit_mmap+0x10/0x10 [ 334.878859][ T32] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 334.885032][ T32] ? __pfx_exit_aio+0x10/0x10 [ 334.889787][ T32] ? uprobe_clear_state+0x27c/0x290 [ 334.895154][ T32] __mmput+0x118/0x430 [ 334.899376][ T32] exit_mm+0x1da/0x2c0 [ 334.904276][ T32] ? __pfx_exit_mm+0x10/0x10 [ 334.908904][ T32] ? rcu_is_watching+0x15/0xb0 [ 334.914333][ T32] do_exit+0x648/0x2300 [ 334.918537][ T32] ? do_raw_spin_lock+0x121/0x290 [ 334.924307][ T32] ? __pfx_do_exit+0x10/0x10 [ 334.929006][ T32] do_group_exit+0x21c/0x2d0 [ 334.934362][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.939747][ T32] get_signal+0x1285/0x1340 [ 334.945167][ T32] arch_do_signal_or_restart+0xa0/0x790 [ 334.950929][ T32] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 334.957862][ T32] ? ksys_unshare+0x7b7/0x8c0 [ 334.962580][ T32] ? exit_to_user_mode_loop+0x40/0x110 [ 334.968778][ T32] exit_to_user_mode_loop+0x72/0x110 [ 334.974792][ T32] do_syscall_64+0x2bd/0x3b0 [ 334.979797][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.985852][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.991975][ T32] ? clear_bhb_loop+0x60/0xb0 [ 334.997730][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.005225][ T32] RIP: 0033:0x7fbbcbb8eec9 [ 335.009692][ T32] RSP: 002b:00007fbbccae6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 335.020061][ T32] RAX: fffffffffffffffc RBX: 00007fbbcbde5fa0 RCX: 00007fbbcbb8eec9 [ 335.031190][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 335.040489][ T32] RBP: 00007fbbcbc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 335.049380][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.058689][ T32] R13: 00007fbbcbde6038 R14: 00007fbbcbde5fa0 R15: 00007ffe429a5ce8 [ 335.067600][ T32] [ 335.070797][ T32] INFO: task syz.2.682:8737 blocked for more than 143 seconds. [ 335.081594][ T32] Not tainted syzkaller #0 [ 335.087394][ T32] Blocked by coredump. [ 335.092046][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 335.101940][ T32] task:syz.2.682 state:D stack:26888 pid:8737 tgid:8732 ppid:5846 task_flags:0x40044c flags:0x00080001 [ 335.134225][ T32] Call Trace: [ 335.137573][ T32] [ 335.140543][ T32] __schedule+0x1798/0x4cc0 [ 335.149576][ T32] ? __lock_acquire+0xab9/0xd20 [ 335.156389][ T32] ? __lock_acquire+0xab9/0xd20 [ 335.161289][ T32] ? __pfx___schedule+0x10/0x10 [ 335.167170][ T32] ? schedule+0x91/0x360 [ 335.171474][ T32] schedule+0x165/0x360 [ 335.176347][ T32] schedule_preempt_disabled+0x13/0x30 [ 335.181864][ T32] rwsem_down_write_slowpath+0x872/0xfe0 [ 335.189957][ T32] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 335.196185][ T32] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 335.202503][ T32] ? __lock_acquire+0xab9/0xd20 [ 335.207964][ T32] ? exit_mmap+0x28e/0xb50 [ 335.212440][ T32] down_write+0x1ab/0x1f0 [ 335.216870][ T32] ? __pfx_down_write+0x10/0x10 [ 335.221785][ T32] exit_mmap+0x28e/0xb50 [ 335.226453][ T32] ? uprobe_clear_state+0x20f/0x290 [ 335.231690][ T32] ? __pfx_exit_mmap+0x10/0x10 [ 335.236572][ T32] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 335.242262][ T32] ? __pfx_exit_aio+0x10/0x10 [ 335.247106][ T32] ? uprobe_clear_state+0x27c/0x290 [ 335.252341][ T32] __mmput+0x118/0x430 [ 335.256630][ T32] exit_mm+0x1da/0x2c0 [ 335.260811][ T32] ? __pfx_exit_mm+0x10/0x10 [ 335.265705][ T32] ? rcu_is_watching+0x15/0xb0 [ 335.270543][ T32] do_exit+0x648/0x2300 [ 335.274810][ T32] ? do_raw_spin_lock+0x121/0x290 [ 335.279878][ T32] ? __pfx_do_exit+0x10/0x10 [ 335.284596][ T32] do_group_exit+0x21c/0x2d0 [ 335.289231][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.294551][ T32] get_signal+0x1285/0x1340 [ 335.299110][ T32] arch_do_signal_or_restart+0xa0/0x790 [ 335.304999][ T32] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 335.311649][ T32] ? __se_sys_pselect6+0x291/0x300 [ 335.317050][ T32] ? exit_to_user_mode_loop+0x40/0x110 [ 335.322586][ T32] exit_to_user_mode_loop+0x72/0x110 [ 335.328034][ T32] do_syscall_64+0x2bd/0x3b0 [ 335.332663][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.337990][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.344295][ T32] ? clear_bhb_loop+0x60/0xb0 [ 335.349013][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.355027][ T32] RIP: 0033:0x7f752fd8eec9 [ 335.359468][ T32] RSP: 002b:00007f7530c0a038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 335.367967][ T32] RAX: 0000000000000007 RBX: 00007f752ffe6090 RCX: 00007f752fd8eec9 [ 335.376005][ T32] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 335.384277][ T32] RBP: 00007f752fe11f91 R08: 0000000000000000 R09: 0000000000000000 [ 335.392293][ T32] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 335.400416][ T32] R13: 00007f752ffe6128 R14: 00007f752ffe6090 R15: 00007ffd359e7758 [ 335.408512][ T32] [ 335.411732][ T32] INFO: task syz.0.683:8736 blocked for more than 144 seconds. [ 335.420698][ T32] Not tainted syzkaller #0 [ 335.440192][ T32] Blocked by coredump. [ 335.446303][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 335.455984][ T32] task:syz.0.683 state:D stack:25080 pid:8736 tgid:8735 ppid:5835 task_flags:0x40054c flags:0x00080001 [ 335.468811][ T32] Call Trace: [ 335.472122][ T32] [ 335.475153][ T32] __schedule+0x1798/0x4cc0 [ 335.479712][ T32] ? __lock_acquire+0xab9/0xd20 [ 335.484997][ T32] ? __lock_acquire+0xab9/0xd20 [ 335.489887][ T32] ? __pfx___schedule+0x10/0x10 [ 335.495572][ T32] ? schedule+0x91/0x360 [ 335.500391][ T32] schedule+0x165/0x360 [ 335.505520][ T32] schedule_preempt_disabled+0x13/0x30 [ 335.511176][ T32] rwsem_down_write_slowpath+0x872/0xfe0 [ 335.517657][ T32] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 335.524284][ T32] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 335.530592][ T32] ? __lock_acquire+0xab9/0xd20 [ 335.536563][ T32] ? exit_mmap+0x28e/0xb50 [ 335.541042][ T32] down_write+0x1ab/0x1f0 [ 335.546490][ T32] ? __pfx_down_write+0x10/0x10 [ 335.551498][ T32] exit_mmap+0x28e/0xb50 [ 335.556322][ T32] ? uprobe_clear_state+0x20f/0x290 [ 335.561602][ T32] ? __pfx_exit_mmap+0x10/0x10 [ 335.567225][ T32] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 335.572922][ T32] ? __pfx_exit_aio+0x10/0x10 [ 335.579694][ T32] ? uprobe_clear_state+0x27c/0x290 [ 335.585212][ T32] __mmput+0x118/0x430 [ 335.589423][ T32] exit_mm+0x1da/0x2c0 [ 335.594176][ T32] ? __pfx_exit_mm+0x10/0x10 [ 335.598821][ T32] ? rcu_is_watching+0x15/0xb0 [ 335.604359][ T32] do_exit+0x648/0x2300 [ 335.608638][ T32] ? do_raw_spin_lock+0x121/0x290 [ 335.614332][ T32] ? __pfx_do_exit+0x10/0x10 [ 335.618999][ T32] do_group_exit+0x21c/0x2d0 [ 335.624291][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.629613][ T32] get_signal+0x1285/0x1340 [ 335.634892][ T32] arch_do_signal_or_restart+0xa0/0x790 [ 335.640486][ T32] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 335.647443][ T32] ? __fput_deferred+0x215/0x390 [ 335.652611][ T32] ? exit_to_user_mode_loop+0x40/0x110 [ 335.659458][ T32] exit_to_user_mode_loop+0x72/0x110 [ 335.665554][ T32] do_syscall_64+0x2bd/0x3b0 [ 335.671050][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.677289][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.684213][ T32] ? clear_bhb_loop+0x60/0xb0 [ 335.688955][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.694973][ T32] RIP: 0033:0x7ffb8598eec9 [ 335.699541][ T32] RSP: 002b:00007ffb868da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 335.708451][ T32] RAX: fffffffffffffe00 RBX: 00007ffb85be5fa0 RCX: 00007ffb8598eec9 [ 335.716606][ T32] RDX: 000000000000006f RSI: 0000000000000084 RDI: 000000000000000c [ 335.724709][ T32] RBP: 00007ffb85a11f91 R08: 00002000000002c0 R09: 0000000000000000 [ 335.732796][ T32] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 335.741040][ T32] R13: 00007ffb85be6038 R14: 00007ffb85be5fa0 R15: 00007fff08a6a098 [ 335.749234][ T32] [ 335.752482][ T32] INFO: task syz.3.685:8746 blocked for more than 144 seconds. [ 335.760555][ T32] Not tainted syzkaller #0 [ 335.766465][ T32] Blocked by coredump. [ 335.771239][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 335.780150][ T32] task:syz.3.685 state:D stack:25304 pid:8746 tgid:8745 ppid:5837 task_flags:0x40054c flags:0x00080000 [ 335.793260][ T32] Call Trace: [ 335.797737][ T32] [ 335.800829][ T32] __schedule+0x1798/0x4cc0 [ 335.806390][ T32] ? __lock_acquire+0xab9/0xd20 [ 335.811318][ T32] ? __lock_acquire+0xab9/0xd20 [ 335.817188][ T32] ? __pfx___schedule+0x10/0x10 [ 335.822104][ T32] ? schedule+0x91/0x360 [ 335.827470][ T32] schedule+0x165/0x360 [ 335.831703][ T32] schedule_preempt_disabled+0x13/0x30 [ 335.837902][ T32] rwsem_down_write_slowpath+0x872/0xfe0 [ 335.844257][ T32] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 335.850130][ T32] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 335.857041][ T32] ? __lock_acquire+0xab9/0xd20 [ 335.861930][ T32] ? exit_mmap+0x28e/0xb50 [ 335.867139][ T32] down_write+0x1ab/0x1f0 [ 335.871867][ T32] ? __pfx_down_write+0x10/0x10 [ 335.877073][ T32] exit_mmap+0x28e/0xb50 [ 335.881396][ T32] ? uprobe_clear_state+0x20f/0x290 [ 335.887270][ T32] ? __pfx_exit_mmap+0x10/0x10 [ 335.892059][ T32] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 335.898483][ T32] ? __pfx_exit_aio+0x10/0x10 [ 335.903203][ T32] ? uprobe_clear_state+0x27c/0x290 [ 335.909509][ T32] __mmput+0x118/0x430 [ 335.914295][ T32] exit_mm+0x1da/0x2c0 [ 335.918399][ T32] ? __pfx_exit_mm+0x10/0x10 [ 335.923003][ T32] ? rcu_is_watching+0x15/0xb0 [ 335.928544][ T32] do_exit+0x648/0x2300 [ 335.932752][ T32] ? do_raw_spin_lock+0x121/0x290 [ 335.938505][ T32] ? __pfx_do_exit+0x10/0x10 [ 335.943178][ T32] do_group_exit+0x21c/0x2d0 [ 335.948461][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.954411][ T32] get_signal+0x1285/0x1340 [ 335.958957][ T32] arch_do_signal_or_restart+0xa0/0x790 [ 335.965178][ T32] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 335.971366][ T32] ? __se_sys_futex+0x36f/0x400 [ 335.976935][ T32] ? exit_to_user_mode_loop+0x40/0x110 [ 335.982431][ T32] exit_to_user_mode_loop+0x72/0x110 [ 335.988401][ T32] do_syscall_64+0x2bd/0x3b0 [ 335.993026][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.999006][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.005822][ T32] ? clear_bhb_loop+0x60/0xb0 [ 336.010552][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.017333][ T32] RIP: 0033:0x7fdc57b8eec9 [ 336.021799][ T32] RSP: 002b:00007fdc58a7e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 336.030955][ T32] RAX: fffffffffffffe00 RBX: 00007fdc57de5fa8 RCX: 00007fdc57b8eec9 [ 336.039640][ T32] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdc57de5fa8 [ 336.047834][ T32] RBP: 00007fdc57de5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 336.056377][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.064555][ T32] R13: 00007fdc57de6038 R14: 00007ffee7ad64a0 R15: 00007ffee7ad6588 [ 336.072617][ T32] [ 336.076377][ T32] INFO: task syz.4.686:8749 blocked for more than 144 seconds. [ 336.084771][ T32] Not tainted syzkaller #0 [ 336.089750][ T32] Blocked by coredump. [ 336.094987][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 336.104329][ T32] task:syz.4.686 state:D stack:26888 pid:8749 tgid:8749 ppid:5845 task_flags:0x40044c flags:0x00080002 [ 336.117027][ T32] Call Trace: [ 336.120343][ T32] [ 336.123332][ T32] __schedule+0x1798/0x4cc0 [ 336.128771][ T32] ? __lock_acquire+0xab9/0xd20 [ 336.134487][ T32] ? __lock_acquire+0xab9/0xd20 [ 336.139368][ T32] ? __pfx___schedule+0x10/0x10 [ 336.145004][ T32] ? schedule+0x91/0x360 [ 336.149293][ T32] schedule+0x165/0x360 [ 336.154254][ T32] schedule_preempt_disabled+0x13/0x30 [ 336.159746][ T32] rwsem_down_write_slowpath+0x872/0xfe0 [ 336.166648][ T32] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 336.172500][ T32] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 336.179395][ T32] ? __lock_acquire+0xab9/0xd20 [ 336.185003][ T32] ? exit_mmap+0x28e/0xb50 [ 336.189493][ T32] down_write+0x1ab/0x1f0 [ 336.194555][ T32] ? __pfx_down_write+0x10/0x10 [ 336.199464][ T32] exit_mmap+0x28e/0xb50 [ 336.204405][ T32] ? uprobe_clear_state+0x20f/0x290 [ 336.209627][ T32] ? __pfx_exit_mmap+0x10/0x10 [ 336.215243][ T32] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 336.220909][ T32] ? __pfx_exit_aio+0x10/0x10 [ 336.226292][ T32] ? uprobe_clear_state+0x27c/0x290 [ 336.231786][ T32] __mmput+0x118/0x430 [ 336.236759][ T32] exit_mm+0x1da/0x2c0 [ 336.240867][ T32] ? __pfx_exit_mm+0x10/0x10 [ 336.246117][ T32] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 336.251755][ T32] ? rcu_is_watching+0x15/0xb0 [ 336.257284][ T32] do_exit+0x648/0x2300 [ 336.261503][ T32] ? do_raw_spin_lock+0x121/0x290 [ 336.267351][ T32] ? __pfx_do_exit+0x10/0x10 [ 336.272073][ T32] do_group_exit+0x21c/0x2d0 [ 336.277601][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.282836][ T32] get_signal+0x1285/0x1340 [ 336.288135][ T32] arch_do_signal_or_restart+0xa0/0x790 [ 336.294462][ T32] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 336.300668][ T32] ? exit_to_user_mode_loop+0x40/0x110 [ 336.306817][ T32] exit_to_user_mode_loop+0x72/0x110 [ 336.312143][ T32] do_syscall_64+0x2bd/0x3b0 [ 336.317427][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.322680][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.329494][ T32] ? clear_bhb_loop+0x60/0xb0 [ 336.334406][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.340357][ T32] RIP: 0033:0x7fea1618ef03 [ 336.345117][ T32] RSP: 002b:00007fff20a0a718 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 336.353627][ T32] RAX: fffffffffffffffc RBX: 0000001b31664000 RCX: 00007fea1618ef03 [ 336.361633][ T32] RDX: 0000000000000003 RSI: 00000000003c0000 RDI: 0000001b31664000 [ 336.370371][ T32] RBP: 0000000000400000 R08: 0000000000000004 R09: 0000000000040000 [ 336.379190][ T32] R10: 0000000000100001 R11: 0000000000000246 R12: 0000000000000098 [ 336.387738][ T32] R13: 00000000000927c0 R14: 000000000002b75b R15: 00007fff20a0aa00 [ 336.396386][ T32] [ 336.399529][ T32] [ 336.399529][ T32] Showing all locks held in the system: [ 336.408032][ T32] 1 lock held by khungtaskd/32: [ 336.412980][ T32] #0: ffffffff8dd3a860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 336.423707][ T32] 2 locks held by getty/5601: [ 336.428424][ T32] #0: ffff88814da4a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 336.438889][ T32] #1: ffffc900036be2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 336.449921][ T32] 1 lock held by syz-executor/5835: [ 336.456200][ T32] #0: ffff88802e62d7e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50 [ 336.465905][ T32] 1 lock held by syz-executor/5837: [ 336.471134][ T32] #0: ffff888031ef81e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50 [ 336.480891][ T32] 1 lock held by syz-executor/5845: [ 336.486753][ T32] #0: ffff88802e62e2a0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50 [ 336.496464][ T32] 1 lock held by syz-executor/5846: [ 336.501965][ T32] #0: ffff888031efc260 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50 [ 336.511928][ T32] 1 lock held by syz-executor/5851: [ 336.517806][ T32] #0: ffff888059c3c260 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50 [ 336.527545][ T32] 1 lock held by syz.1.680/8722: [ 336.532528][ T32] #0: ffff88802ebe2220 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50 [ 336.542510][ T32] 1 lock held by syz.2.682/8737: [ 336.547981][ T32] #0: ffff88805a01cd20 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50 [ 336.557740][ T32] 1 lock held by syz.0.683/8736: [ 336.562739][ T32] #0: ffff888023f80ca0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50 [ 336.572901][ T32] 1 lock held by syz.3.685/8746: [ 336.578591][ T32] #0: ffff88805a01b7a0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50 [ 336.588391][ T32] 1 lock held by syz.4.686/8749: [ 336.593347][ T32] #0: ffff88805a01ace0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50 [ 336.603107][ T32] 4 locks held by kworker/u8:27/12831: [ 336.609260][ T32] #0: ffff88801aef6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 336.621748][ T32] #1: ffffc9002a66fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 336.633162][ T32] #2: ffffffff8f0b7c10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 336.642797][ T32] #3: ffffffff8dd401c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 336.654217][ T32] [ 336.656581][ T32] ============================================= [ 336.656581][ T32] [ 336.666445][ T32] NMI backtrace for cpu 1 [ 336.666466][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 336.666504][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 336.666526][ T32] Call Trace: [ 336.666539][ T32] [ 336.666554][ T32] dump_stack_lvl+0x189/0x250 [ 336.666604][ T32] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.666631][ T32] ? __pfx__printk+0x10/0x10 [ 336.666679][ T32] nmi_cpu_backtrace+0x39e/0x3d0 [ 336.666712][ T32] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 336.666750][ T32] ? __pfx__printk+0x10/0x10 [ 336.666787][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 336.666812][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 336.666846][ T32] watchdog+0xf93/0xfe0 [ 336.666873][ T32] ? watchdog+0x1de/0xfe0 [ 336.666900][ T32] kthread+0x711/0x8a0 [ 336.666933][ T32] ? __pfx_watchdog+0x10/0x10 [ 336.666952][ T32] ? __pfx_kthread+0x10/0x10 [ 336.666982][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 336.667014][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.667046][ T32] ? __pfx_kthread+0x10/0x10 [ 336.667077][ T32] ret_from_fork+0x436/0x7d0 [ 336.667103][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 336.667132][ T32] ? __switch_to_asm+0x39/0x70 [ 336.667160][ T32] ? __switch_to_asm+0x33/0x70 [ 336.667188][ T32] ? __pfx_kthread+0x10/0x10 [ 336.667217][ T32] ret_from_fork_asm+0x1a/0x30 [ 336.667271][ T32] [ 336.667305][ T32] Sending NMI from CPU 1 to CPUs 0: [ 336.822169][ C0] NMI backtrace for cpu 0 [ 336.822187][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 336.822209][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 336.822221][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 336.822257][ C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 c9 15 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 336.822273][ C0] RSP: 0018:ffffffff8da07d80 EFLAGS: 000002c6 [ 336.822290][ C0] RAX: e960d77659e39900 RBX: ffffffff81953917 RCX: e960d77659e39900 [ 336.822311][ C0] RDX: 0000000000000001 RSI: ffffffff8d50d356 RDI: ffffffff8b9ec4e0 [ 336.822325][ C0] RBP: ffffffff8da07eb8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 336.822339][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f5b8630 [ 336.822353][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b52a28 [ 336.822365][ C0] FS: 0000000000000000(0000) GS:ffff88812639b000(0000) knlGS:0000000000000000 [ 336.822380][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 336.822393][ C0] CR2: 00007ffedae16000 CR3: 00000000599b8000 CR4: 00000000003526f0 [ 336.822409][ C0] Call Trace: [ 336.822418][ C0] [ 336.822425][ C0] default_idle+0x13/0x20 [ 336.822446][ C0] default_idle_call+0x73/0xb0 [ 336.822468][ C0] do_idle+0x1e7/0x510 [ 336.822492][ C0] ? __pfx_do_idle+0x10/0x10 [ 336.822522][ C0] cpu_startup_entry+0x44/0x60 [ 336.822542][ C0] rest_init+0x2de/0x300 [ 336.822565][ C0] start_kernel+0x3ae/0x410 [ 336.822593][ C0] x86_64_start_reservations+0x24/0x30 [ 336.822612][ C0] x86_64_start_kernel+0x143/0x1c0 [ 336.822631][ C0] common_startup_64+0x13e/0x147 [ 336.822667][ C0] [ 336.823360][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 337.005296][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 337.014519][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 337.024599][ T32] Call Trace: [ 337.028076][ T32] [ 337.031131][ T32] dump_stack_lvl+0x99/0x250 [ 337.035740][ T32] ? __asan_memcpy+0x40/0x70 [ 337.040355][ T32] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.045824][ T32] ? __pfx__printk+0x10/0x10 [ 337.050447][ T32] vpanic+0x281/0x750 [ 337.054626][ T32] ? __pfx_vpanic+0x10/0x10 [ 337.059136][ T32] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 337.064698][ T32] ? preempt_schedule+0xae/0xc0 [ 337.069560][ T32] ? preempt_schedule_common+0x83/0xd0 [ 337.075043][ T32] panic+0xb9/0xc0 [ 337.078779][ T32] ? __pfx_panic+0x10/0x10 [ 337.083217][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 337.088609][ T32] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 337.094788][ T32] watchdog+0xfd2/0xfe0 [ 337.099071][ T32] ? watchdog+0x1de/0xfe0 [ 337.103426][ T32] kthread+0x711/0x8a0 [ 337.107604][ T32] ? __pfx_watchdog+0x10/0x10 [ 337.112288][ T32] ? __pfx_kthread+0x10/0x10 [ 337.116887][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 337.122100][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.127315][ T32] ? __pfx_kthread+0x10/0x10 [ 337.132305][ T32] ret_from_fork+0x436/0x7d0 [ 337.137006][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 337.142137][ T32] ? __switch_to_asm+0x39/0x70 [ 337.147165][ T32] ? __switch_to_asm+0x33/0x70 [ 337.152287][ T32] ? __pfx_kthread+0x10/0x10 [ 337.156979][ T32] ret_from_fork_asm+0x1a/0x30 [ 337.161776][ T32] [ 337.165206][ T32] Kernel Offset: disabled [ 337.169569][ T32] Rebooting in 86400 seconds..