last executing test programs: 4.758918339s ago: executing program 1 (id=31): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r3, @ANYBLOB="003000000000000014001a8010000480"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @loopback, @broadcast}, &(0x7f00000001c0)=0xc) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @local}, 0x2}}, 0x26) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xdf, &(0x7f0000000000)=""/223, 0x0, 0x43}, 0x94) 4.060558515s ago: executing program 1 (id=34): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r1 = socket(0x1, 0x5, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x1c, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xa0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r7], 0x20}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r11}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt(r0, 0x8000, 0xfffffffa, &(0x7f00000012c0)=""/1, &(0x7f0000001300)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) 3.300050442s ago: executing program 3 (id=39): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000f10000000000000020000018010000202070250000000000202020db1af87f00010000bfa100000000000007010000f8ffffffb702000008000000b703001d0000000085000000ca00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0xcf, &(0x7f0000000000)=""/207, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000800008500000087000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x7}, 0x1c) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000500), 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0xfffffffffffffdf8) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x12, &(0x7f00000004c0)=ANY=[], 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r3}, 0x49) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="09000000010001", 0x7) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)="b2", 0x1}], 0x1, &(0x7f0000000480)=ANY=[@ANYRES64], 0x18, 0x20040801}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r7, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0x4e23, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="06", 0x1}], 0x1}, 0x80001) 2.814194782s ago: executing program 2 (id=41): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702fc0014000000b7030000000000000083000000bf090000000000005509010000000000950000000000000018110000000000b48d1eda91bc6c78d4bf7f5bc45780f693dc20ac518c1841546949f8572f9d3b5caeee90419e122151fcf4118f4d8eb52f2394515743001729227eff573a191cf6a09321c13c53c50810a1ac9b81188770ec7a", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1, 0x5}, 0x90) 2.409602261s ago: executing program 4 (id=44): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0xa000000, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff06000700260a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x3a, 0x0, 0x0, 0x200, 0x8, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x6a, 0x2, 0x10, @local, @empty, 0x20, 0x8, 0x8000000, 0x8000}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@private0, @private2, @private0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x41, r5}) 2.319480935s ago: executing program 3 (id=45): socket$kcm(0x11, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x80000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40004000}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[@ANYRES16=r4, @ANYBLOB="8c", @ANYRES16=r4, @ANYRESHEX=r1, @ANYBLOB="ec0000000906010100000000000000000500000105000100070000000900020073797a3000000000080009404000000030000880100007800c00194000000000000000060c000780050003000c000000100007800900130073797a30000000007c000880100007800cea184000000000000000000c000780060005404e2100000c00078006001d4000090000100007800900120073797a3000000000100007", @ANYRES64=r1], 0xec}, 0x1, 0x0, 0x0, 0x24000000}, 0x80c0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r6, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r6, &(0x7f0000000940), 0x10) close(0x3) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) recvmmsg(r5, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10122, 0x0) r8 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f00000006c0)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x10, 0x4, 0x1, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2}, 0x50) close(r9) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x800) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a5c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000001c300004802c0001800c0001007061796c6f6164001c00028008000340ffff00000800024000000002080004400000000014000000110001000000000000000000007c827c"], 0x84}, 0x1, 0x0, 0x0, 0x48046}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 2.149243718s ago: executing program 1 (id=46): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xf, &(0x7f0000000740)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="00000000000000b70200000000f7d4000085ebff00f92f8600000010010000646c6c2500000000002020207b1af8ff00000000bfa1000000e1a8fbce1ff500000007010000f8ffffffb702f0ff07000000000000e59d"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80002002}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @val={@void, {0x8100, 0x3, 0x1, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x36) 2.031600197s ago: executing program 4 (id=47): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3}, 0x14}}, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) (async, rerun: 64) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) sendto$inet6(r3, &(0x7f00000000c0)="a6", 0xffffffffffffff90, 0x40854, 0x0, 0xfffffd08) (async, rerun: 64) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/243, 0xf3}], 0x10}, 0x142) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4254010028000100200012800b008cf15664b1a0ecae69088fba1ef7ebfc010065727370616e0000100002800400120008001400b967702d837f53534434a1df591b922cee4e30d27b7787"], 0x40}, 0x1, 0x0, 0x0, 0x48854}, 0x88c0) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x32}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) (async) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r6}, 0x10) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r7, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800), 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @flow_dissector=0x11, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff801}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.95729156s ago: executing program 4 (id=48): socket$isdn(0x22, 0x2, 0x4) close(0x3) 1.832410499s ago: executing program 2 (id=49): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400000000fddbdf2500007400", @ANYRES32=0x0, @ANYBLOB="000800800100000001000000676500010400027c020000000f00000008001b0000800000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000100540)={{0x0, 0x1000, 0xfffffffffffffffb, 0x8b, 0x0, 0x6, 0xe, 0xfff, 0x3, 0x10001, 0x15dbc, 0x401, 0xecf0, 0xc8d3, 0x7c}}) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x16, 0x4, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x27}, 0x8, 0x8, 0x2, 0x9}}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x18, r7, 0x1, 0x3, 0x6, @multicast}, 0x14) 1.779725625s ago: executing program 1 (id=50): r0 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r6, r5, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) close(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020692500000000002020207b1af8ff00000000bfa100000000000087010000f8ffffffb702000008000000b703000002000000850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x2}, 0x94) 1.77853456s ago: executing program 4 (id=51): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001500)=ANY=[@ANYBLOB="18000080", @ANYRES16=r4, @ANYBLOB="410328bd7000fddbdf250700000004000280"], 0x18}, 0x1, 0x0, 0x0, 0x8810}, 0x14) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) writev(r3, &(0x7f00000007c0)=[{&(0x7f0000000280)="a6254ea90735f6c7c8c2f07ba13ebcbbb80e1f4bd28bee5e4244df30aeea616d9c2afc5a6a425f76507b84a11aef62479a27ef75b113f456487b2d48e5c9916ae1f74b86bbd203bc68648e2ab5ff34d8f0c4", 0x52}, {&(0x7f00000000c0)="f3b0d1341b8025c9ec8329fcd6b6a723edca1fa896d52f9905e1e835eca80f9afa6a", 0x22}, {&(0x7f0000000400)="328ff8a4db5cb3761f64c4c3d0db3ad1dac8156f871624f13ebe9258440d4f4e1e541a8a19d6090e9711b6810beaddbb7828e2fa4567d6f50c7d5687871729e033", 0x41}, {&(0x7f0000000480)="4bdbd6bc624bbbcd23048018c137d146217d35cf7b07435bb0982adc847a79c94f5ed2b6c5bc69c88ab5e5a7b80535fe7ad2a88af5655890cc7f0c554c9c1a791b7d71fdda370f55fc15c59538ff7141436bea9298049fc7326f58db2707bb8dc3fc52959dadc9473df5b24529bc06b4beb8a85dab7296faaf239a62208ce0d506c0fb91c6aef2073afcc59613d67b143b06bbfd57c409a76711195957c9dd24cc409206e1cc06aca76331563923c4367344c5b7ce795841c176dd40f72e809b8b6239d979a909feaa310e4396f0c60155cb747c9eb84a000760bd7eca38d5ee9aa7ca650deaf5b0bf6acb40471cab", 0xef}, {&(0x7f0000000180)="4c39612509ecc0536d31db8df24efcce2103a5a0899eaee7f7a6af9409b8f9c16f83f88c03fe9ad7a9393c", 0x2b}, {&(0x7f0000000600)="651b7a9e89453ff42a0c1271537959519f83e20e591c86622d1d60246ee633d5e3248f8431b66da1afe1f1e1e82a9e934169335ac86e02ebfecdd3793f9307465e2f2b82542e27cda3252809d84171988b4a2e546e0930e8c8c0f64f878a88b5fa6e72ad895af235589e5dcecdcb1a8962dab7e93a412d5eb199db38ca0f54ad66e22b09a75ef9ff6f30d309d4f90799e0854eb152b357f40aeaa71087e70e25a30f6ec21139bbb8b811f261e1121de2e2258a284f2a", 0xb6}, {&(0x7f00000006c0)="f3ad3b8c7bba586b36c3bf025a8a4ebd70c44ca87f3709c78a6cb0d630dea582f3864c6610082ec58c0103e08413d40c69ea43607493d33731bbca13409bf41601282936a738e414ad388ee7bc50d3d9d4a88401", 0x54}, {&(0x7f0000000740)="cc8a0db85d1b9d8401795b31c66e037227a9917a20109d914d0bd9d94d51e0783db91a9c01873df4b9d9c1256cab1ae96f172595a6833b26f07ee595b111d929c493", 0x42}], 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xfffffffffffffffd, 0xa, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r11, @ANYRES16=r5, @ANYBLOB="010000fedbdf020d000000000300", @ANYRES32=r11, @ANYBLOB='$\x00/'], 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x6000811) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.542322044s ago: executing program 0 (id=53): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r0, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5}]}]}]}, 0x38}}, 0xc0801) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 64) socket$unix(0x1, 0x5, 0x0) (async, rerun: 64) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0) (async) openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000240), &(0x7f00000003c0)=0x30) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) pipe(&(0x7f0000000140)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@const={0x0, 0x0, 0x0, 0x9}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}]}, {0x0, [0x61]}}, 0x0, 0x4b}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) (async, rerun: 32) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, r7, 0x25, 0x2, @val=@netfilter={0x3, 0x1, 0x0, 0x1}}, 0x20) (async) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[], 0x0) (async) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000280)) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 1.331628413s ago: executing program 4 (id=54): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x24, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x13c}, {}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xef1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000540)='GPL\x00', 0x14000, 0x41, &(0x7f0000000640)=""/65, 0x40f00, 0x42, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x6, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000740)=[{0x2, 0x4, 0x2, 0x4}, {0x0, 0x2, 0x6, 0x2}, {0x2, 0x1, 0x2, 0x9}, {0x5, 0x4, 0x2, 0x3}, {0x2, 0x1, 0x1, 0xa}], 0x10, 0x2}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000008c0)={r2, 0xffffffffffffffff, 0x34, 0x0, @val=@netfilter={0x5, 0x1, 0x7}}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100080a}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40804) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r8, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r9, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0xe4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc}}}}, 0x28}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x7, 0x7f, 0x10}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r12}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r11}, &(0x7f0000000200), &(0x7f0000000280)=r12}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 1.144263518s ago: executing program 0 (id=55): syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x6e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@dev}, {@local}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x44b, 0x1000, 0x40, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}]}}}]}, 0x44}}, 0x0) 999.548052ms ago: executing program 0 (id=56): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYRES8=r0], &(0x7f0000000880)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @val=@uprobe_multi={&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=[0x1ff, 0x8, 0x7fffffff], 0x0, 0xe5, 0x3, 0x0, 0xffffffffffffffff}}, 0x40) syz_emit_ethernet(0x10c6, &(0x7f00000005c0)=ANY=[@ANYRES16], 0x0) 907.685307ms ago: executing program 4 (id=57): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000006280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000006400)={0x0, 0x0, &(0x7f00000063c0)={&(0x7f00000062c0)={0x44, r1, 0x601, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x4000010) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000000c0)=0x100000b7, 0xfffffffffffffdc9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@deltaction={0x14, 0x31, 0x100, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0xc080) r3 = socket$netlink(0x10, 0x3, 0xa) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e28, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom(r5, &(0x7f0000000000)=""/4, 0x4, 0x4121, &(0x7f0000000040)=@generic={0x1, "5501bd07a776f6b8f75178bc1934489b5c6db81da2847f6798ebe5e816d7a0fc081c746803c5241b3365ffbc7a46aa809970042cfd486d2660dcc5bea40e14028d59b656272c8b30363fc9920f6ae7a1df66e90ebd492d06fc40f25d53601949e27aac067e74be802616109aa29c6c35a67751004ebb7e0431ff04903f7f"}, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@nat={'nat\x00', 0x2, 0x5, 0x508, 0x368, 0x220, 0xffffffff, 0xf0, 0x0, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0xff0000ff]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @port=0x4e21, @gre_key=0xa2}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x9, 0xe], 0x3166, 0x1e, 0x1}}, @common=@unspec=@cgroup0={{0x28}, {0xff}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @port=0x4e22}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) 885.917003ms ago: executing program 3 (id=58): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000)='\x00', 0x1, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000280)=""/62, 0x3e, 0x40000160, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40114}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0xbc, 0x3, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3e}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x2f0c4c9a}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x344}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f5}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40040}, 0x14) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000061db00000000000a14000000160a0302000000000000000002000000140000001100050000000000000000000000000a"], 0x3c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x218, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x1f8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'macvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x26c}}, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x146, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xf, '\x00', 0x0, r0, 0x2, 0x3, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r7, &(0x7f00000006c0)="4d0a186da4128c4c5bbd1a6140cd30068870dc2e9d95a01591ca16fe5329c089df2d06c1b7139abe6c6a1944a989e2f90ce2612e716a3df4c0588651c86ea2b1815245e98dab7bbe3ef02d4507720da37b4981119c0f766af27907ab9a3c0f5c32e42662bb5d79a1d7ff41fca39395ded27f8f9c63684c73019dbf", &(0x7f0000000580)=@tcp=r5, 0x1}, 0x20) sendto$inet(r6, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) 817.372354ms ago: executing program 0 (id=59): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x488a1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x10448) (async) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f00000002c0)={'pim6reg0\x00', 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x15, 0x6, 0x1, 0x0, 0xcf}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20002000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$kcm(0x10, 0x2, 0x4) (async) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec80000ec00120c00014006040400070404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec80000ec00120c00014006040400070404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r8, 0x20, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/21, 0x15}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r2], &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x1, 0x7ff}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r2], &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x1, 0x7ff}, 0x28) 770.476118ms ago: executing program 2 (id=60): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) (async) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xd8e0}) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newtclass={0x44, 0x28, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xf, 0xa}, {0xfff3, 0xffff}, {0xb, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x4f}}, @TCA_RATE={0x6, 0x5, {0x2e, 0x6}}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}, @TCA_RATE={0x6, 0x5, {0x2, 0x81}}]}, 0x44}}, 0x0) 750.244483ms ago: executing program 1 (id=61): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = socket(0x10, 0x1000, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x3c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x9}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x40}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x6c}}, 0x0) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x1d, r2, 0x0, {0x2, 0x0, 0x4}, 0xff}, 0x18, &(0x7f00000001c0)={&(0x7f0000000100)="da354c93", 0x4}, 0x1, 0x0, 0x0, 0x80}, 0x814) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xb, [@struct={0x3, 0x1, 0x0, 0x4, 0x1, 0x2, [{0x8, 0x4, 0x1}]}, @typedef={0x46, 0x0, 0x0, 0x8, 0x4}, @float={0x3, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x61, 0x0, 0x4f, 0x5f, 0x0, 0x5f, 0x5f, 0x61, 0x2e]}}, &(0x7f0000000780)=""/150, 0x53, 0x96, 0x0, 0x8}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="186f46f6d9722f0f1eea041d14a67a5d58020000000000000000003ae780fe6355205cf80000000000183300000304000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x40, '\x00', r2, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100ac1e000108000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e01010800020000000000080007400000000024000e8014000180080001"], 0x88}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x3b, 0x4880) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in={{0x2, 0x4e23, @private=0xa010100}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8004}, 0xffc4) getsockopt$bt_hci(r8, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) 749.549542ms ago: executing program 3 (id=62): unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0xff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010"], 0x80}}, 0x4814) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pread64(r1, &(0x7f0000000300)=""/23, 0x17, 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000008000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000df2743f60000000000000000000000000000000000000000000017d64c9bf5196d6b2fc3ff9e6bee38f4ece6792215a42018d0522b101f23b75df44808cf8f03807c3dbb700de4690abdac67a4fb3a983450ee6813a3bfdd3f9c226442f63d82e59fd3"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f00000000c0)={'virt_wifi0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@loopback, @in6=@rand_addr=' \x01\x00', 0x4e24, 0x0, 0x4e22, 0x4, 0xa}, {0x7e, 0x40101, 0xe96, 0x20000000000, 0xfffffffbfffffffd, 0x1, 0x1ff, 0x8}, {0xcb29, 0x40001000000000, 0x8000, 0x20}, 0x6, 0x6e6bb6, 0x1, 0x0, 0x2, 0x3}, {{@in6=@local, 0x0, 0x6c}, 0x2, @in6=@loopback, 0x1502, 0x1, 0x2, 0x0, 0x5, 0xfffffffd, 0x1}}, 0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) r6 = socket$inet(0x2, 0x3, 0x30) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)={0x88, 0x4, 0x8, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x24d6c338}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0xa}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x295}, @CTA_TIMEOUT_SCTP_CLOSED={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x34}}, 0x1c) 567.802614ms ago: executing program 0 (id=63): close(0x4) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000010900020073797a310000000008000440040002000900010073797a30000000000800034000000004"], 0x64}}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0x84, @remote, 0x4e23, 0x3, 'lblcr\x00', 0x0, 0xa7e, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010105, 0x4e21, 0x3, 'lc\x00', 0x5, 0x2008, 0x77}, {@remote, 0x4620, 0x4, 0x20000cd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r6, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 483.810946ms ago: executing program 1 (id=64): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreq(r2, 0x0, 0x4, &(0x7f0000000240)={@empty, @dev={0xac, 0x14, 0x14, 0x19}}, 0x8) setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000000)=0x5, 0x4) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x0) ioctl$sock_netdev_private(r1, 0x89f8, &(0x7f0000000340)="b4d7a86bef05cee4367ac43cbe88d3148e51e78def0f6f396fd978c3f9f89582370b5fc1558d6b9bdd7c467f0e154c6d86541ba11a5134cc3dfbea012b9400a70facdd52ff01facd9731daee60eda94c9fa84af35cffac6d39d5a056bff6c355842234c28fbc21ea082b3e68943ecb7758cc490f5333c2b02f36cec80cbda0d14b55ce32d394373516c87d974fe7cd39ba4f4e10f8dddd939c79f2c98b87ea2ecfd7e0e708f4b1f2206a1b9c83852e506f26") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003000000000000000000000002000000000000000047d43c23bd6d33"], 0x0, 0x56, 0x0, 0x0, 0x4}, 0x28) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) ioctl$int_out(r0, 0x4, &(0x7f0000000000)) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000000c0)={'team0\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'syzkaller0\x00', 0x400}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x84000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r5], 0x20}}, 0x0) 479.809726ms ago: executing program 3 (id=65): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x23, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe6f9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @jmp={0x5, 0x0, 0x9, 0x6, 0x8, 0x8, 0xfffffffffffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x7, 0x4a, &(0x7f0000000180)=""/74, 0x41100, 0x62, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x8, 0x9, 0x35}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f00000002c0)=[{0x0, 0x4, 0x5, 0x7}, {0x5, 0x5, 0x3, 0x9}, {0x0, 0x5, 0xf, 0x9}, {0x4, 0x5, 0xa, 0x3}, {0x3, 0x3, 0xe, 0x6}, {0x7f, 0x1, 0x10, 0xa}, {0x2, 0x3, 0x8, 0x2}, {0x2, 0x2, 0x1, 0x3}, {0x5, 0x5, 0xa, 0xa}, {0x1, 0x2, 0x9, 0x7}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0x5, 0xe7, &(0x7f0000000440)="033a62ca2a", &(0x7f0000000480)=""/231, 0x1, 0x0, 0x1000, 0xd5, &(0x7f0000001180)="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", &(0x7f0000000580)="4962d093c46737c4072316a8d246c7848011c5874de800b74e09ff6bc369b40625280f5a2f435d8e0f7833e420a2dc7f349fa3c94c2b57e5e6c3c69eb3c3fd7ffb6304ea46a90c2ed9b57ab145ab7c9039118665ea66894b9a8d7849524feb36a8a50c936fb4ed4bfbbab7c1d4593a3887d7cface9df099ac1cc07b275af32443835947cd6710c7d05c29c33a72929862b11b85d607dbed8f35511b48e49f5903e5b1dcc70860156ab48292226ec0a2ab49501e1b81bf5fec8283a38413fa782cf77d4858fc3650682eefb8ce42dc622237eae2a93", 0x1, 0x0, 0xeba}, 0x50) socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES16=r1], 0x54}, 0x1, 0x0, 0x0, 0x200004c1}, 0x0) 223.252581ms ago: executing program 3 (id=66): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r0, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) write$cgroup_subtree(r0, 0x0, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000072000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x1843}, 0x18) r5 = socket(0x2b, 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ec0000002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r9 = socket(0x840000000002, 0x3, 0x100) connect$inet(r9, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000bc0)={0x0, 0x2, 0x0, [0x4, 0xff, 0xb5b, 0x8, 0xffffffff], [0x0, 0x2, 0x8, 0x45, 0x8000000000000000, 0x8000, 0x8, 0x4, 0x7, 0x7fffffffffffffff, 0xfffffffffffff935, 0xffffffff, 0x7, 0x13c6c37b, 0x5, 0xfffffffffffffff8, 0x2, 0x0, 0x400, 0xa7, 0x6, 0x1, 0x46, 0x4, 0x4, 0xf7, 0x7fffffffffffffff, 0x2, 0xe4, 0x8, 0x1, 0x400, 0x7b2f, 0x9, 0x0, 0x0, 0x0, 0x8, 0x2, 0xd8, 0x9f9, 0x8951, 0x8, 0x1, 0x3, 0x0, 0x8000000000000001, 0x7ff, 0x9, 0x8, 0x5, 0x80000001, 0x69ec, 0x89, 0x0, 0x2, 0x4, 0x81, 0xfffffffffffffffa, 0xfffffffffffffffd, 0x6, 0x2, 0x7, 0x9, 0x9, 0x7, 0x8, 0x85e2, 0x9, 0x0, 0x8, 0x7, 0x0, 0xe, 0xfff, 0xfffffffffffffa59, 0xdc4, 0x1, 0x9, 0x3, 0x9, 0x6000000000000, 0x100000000, 0x401, 0x8108, 0x8, 0x4, 0xffffffff80000001, 0x3, 0x7, 0x2, 0x5, 0x6, 0x200000000, 0xa4, 0x3, 0x8, 0x100000000, 0x3, 0xf, 0x40, 0x2, 0x8, 0x2, 0x3f6c, 0x9fc, 0x1, 0x3, 0xcea, 0x3d0, 0x81, 0x7, 0x3, 0x2, 0x0, 0x3, 0x0, 0x7ff, 0x1, 0xe, 0x101]}) r10 = socket(0x8000000010, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write(r10, &(0x7f00000002c0)="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", 0xfc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x32600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0xbd}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 212.891603ms ago: executing program 2 (id=67): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x25}]}]}, 0x38}}, 0x4000) sendmmsg$inet(r0, &(0x7f0000005140)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)="94510bc6c4", 0x5}], 0x1}}, {{&(0x7f0000000c00)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000c40)="c2", 0x1}], 0x1}}], 0x2, 0x8000) 95.869881ms ago: executing program 0 (id=68): connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x2, 0x4) 73.648972ms ago: executing program 2 (id=69): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001814010000000000000000000800030001000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x4008084}, 0x2004c040) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xa, &(0x7f0000000100)=0x7d06, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e5000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) recvfrom$inet6(r5, 0x0, 0x0, 0x40010001, 0x0, 0x49) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES8, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRESHEX=r3, @ANYRES16=r2, @ANYRESOCT=r5, @ANYBLOB="f556c2f3f7feff8d1a7f97ce885e95ab6556b6b5e0a6595f131aec9be9a8c2047051a4510c75bf63be839982d391112144c3794c289538b735d3a446fcba349e5e25b71b8796bdb170cce7b249a09e486f72483f4ee27e39f9f58795a23d4f21b1bce976db8de68563af19e5ec7a5f"], 0x24}, 0x1, 0x0, 0x0, 0x4004844}, 0x4000000) 0s ago: executing program 2 (id=70): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000100007042bbd60000000008000000000954914776a1cca7c085e4394f2c892ed9264fd0856f977a69d3a7ba0b3a9909a4ce1eb7e8f6d6ea7e584b53f35ecf2b6b298f77ac5077eee8ddd8a9c0c77ca0fab78fda70dd918386e6e10253b4135681b6c5b5b608be9c0f02830dc2a3214f978059b9565a912c0f454c26952b6fe26a6a947e1acfba4a63baff1320d0471c36ea2c98cd0c8123400"/167, @ANYRES32=0x0, @ANYBLOB="a5fdad88000000001400128009000100626f6e6400000000040002800a000200ffffffffffff000008000d00520d0000"], 0x48}}, 0x0) socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r2, 0x20, &(0x7f0000000080)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, &(0x7f0000000000)=""/102, 0x66}}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x10, 0x4) sendmmsg$inet6(r3, &(0x7f00000024c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0xcb, @dev={0xfe, 0x80, '\x00', 0x17}, 0x9}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="a70e4d7142230d8216b123753ff05845fc6271ea", 0x14}], 0x1}}, {{&(0x7f0000000380)={0xa, 0x4e23, 0xff, @ipv4={'\x00', '\xff\xff', @empty}, 0x7fffffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000003c0)=']', 0x1}], 0x1}}], 0x2, 0x200400c0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x0, 0x30, 0x0, &(0x7f0000000240)="6ebca58ce6ffffffffc9252388f74c818387fe2a8d4ca77531639bd6b80074fda1a93dea20ed52ab9b69dd560cd8d20c", 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000006c0)={0x0, 0x7ff, 0x0, [0x9, 0x0, 0x3, 0x100000000, 0x100000000], [0x7, 0x401, 0x7fff, 0x5cd7, 0x2, 0x7, 0x6, 0x1, 0x0, 0x2, 0x2, 0x3, 0x9a, 0x9, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x10001, 0x80000000, 0x3, 0x3ff, 0x0, 0xfe, 0x4, 0x6, 0x26f, 0x8, 0x8000000000000001, 0x3, 0x4, 0x48, 0x2, 0x9, 0x6, 0x3, 0x4, 0x7, 0x1123, 0xf47, 0x7, 0x0, 0xf0, 0x3ff, 0x5, 0x0, 0x1, 0x5, 0xe, 0x7, 0xebd1, 0x9, 0x1, 0x100000000, 0x6, 0x4, 0x4, 0x9, 0xe, 0x940, 0x10, 0x1, 0x3, 0x6, 0x4, 0x7ffffffffffffffc, 0x0, 0x9, 0x9b87, 0x800000000, 0x3, 0x2, 0x40, 0x5d, 0x4, 0x7, 0xcf66, 0x6, 0x8, 0x80000001, 0x4, 0x7, 0x3, 0x7, 0x1a, 0x9, 0x8, 0x6, 0x6, 0x6, 0x8, 0xf, 0x9, 0x2, 0xf, 0x9, 0x14, 0x800, 0xfff, 0x8, 0x3, 0x5, 0xf, 0x2, 0x1, 0xd, 0x2, 0xdc7, 0x4, 0x1, 0xebc0, 0x20, 0x9, 0xffffffffffffff69, 0x1, 0x1002, 0x1, 0x9, 0xde8, 0x100000000000000, 0x10001]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000c00)={r10, 0x7, 0x0, [0x1ffc0000000, 0x42, 0x0, 0x1, 0x401], [0x100000001, 0xd75, 0x2, 0x3, 0x1, 0x800, 0x7ff, 0xfffffffffffffffd, 0x9, 0xa, 0x6, 0x7, 0x6, 0x4, 0x0, 0x2, 0x5, 0x7, 0x100, 0x7, 0xdaae, 0x1e5b, 0x0, 0x0, 0x9, 0x1, 0xb7b9, 0x4, 0x1, 0x3, 0xfffffffffffffffc, 0x6, 0x0, 0x4, 0x8, 0x1, 0x3, 0x7, 0x3, 0x40, 0x1, 0x2, 0x40, 0x0, 0x6, 0x1, 0x9, 0x9, 0x6, 0x7fff, 0x6, 0x3, 0x1, 0x107d, 0x3, 0x5, 0x2, 0x4, 0x7, 0x8, 0x2, 0x7, 0x1, 0x4, 0xff, 0x604d, 0x40, 0x5, 0x5, 0x7fffffffffffffff, 0x4, 0xffff, 0x3, 0x7902, 0x2000003, 0x7, 0x3, 0x4, 0x3ff, 0x9, 0x5, 0x400, 0xbd19, 0x6, 0xffffffffffffff01, 0x401, 0x81, 0x1000, 0x3, 0x8a64, 0x7, 0x7fffffffffffffff, 0x2, 0x9, 0xfffffffffffffff7, 0x8, 0x7, 0x7, 0x8, 0x0, 0x4, 0x8001, 0xb, 0x6, 0x3, 0xb7b8, 0x4f9041ca, 0xffff, 0x9, 0x1, 0x5, 0x40, 0x16, 0x4, 0x2, 0x4db8, 0x6, 0x7, 0x80000000, 0x7f, 0x6]}) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r9) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb00000800060000000000080005000000000024000724"], 0xd0}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0), r0) r12 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r12, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.26' (ED25519) to the list of known hosts. [ 67.135214][ T5815] cgroup: Unknown subsys name 'net' [ 67.311841][ T5815] cgroup: Unknown subsys name 'cpuset' [ 67.321707][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.749517][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.062755][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.077486][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.085598][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.097643][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.105486][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.236123][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.244280][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.253110][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.261208][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.270181][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.278392][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.286158][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.293771][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.360501][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.370007][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.395172][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.417104][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.425950][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.427095][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.443170][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.445957][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.463638][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.463765][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.481358][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.481446][ T5148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.499398][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.501553][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.882754][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 72.117674][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.125105][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.133497][ T5825] bridge_slave_0: entered allmulticast mode [ 72.141432][ T5825] bridge_slave_0: entered promiscuous mode [ 72.150030][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 72.209620][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.218016][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.225606][ T5825] bridge_slave_1: entered allmulticast mode [ 72.234182][ T5825] bridge_slave_1: entered promiscuous mode [ 72.341919][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 72.361660][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.413013][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.433855][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 72.497251][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.505360][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.513524][ T5832] bridge_slave_0: entered allmulticast mode [ 72.521905][ T5832] bridge_slave_0: entered promiscuous mode [ 72.550973][ T5825] team0: Port device team_slave_0 added [ 72.583934][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.591806][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.599518][ T5832] bridge_slave_1: entered allmulticast mode [ 72.606981][ T5832] bridge_slave_1: entered promiscuous mode [ 72.621214][ T5825] team0: Port device team_slave_1 added [ 72.669640][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 72.734921][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.743501][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.772011][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.798666][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.837838][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.845160][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.872832][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.901774][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.911434][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.919129][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.927125][ T5831] bridge_slave_0: entered allmulticast mode [ 72.934753][ T5831] bridge_slave_0: entered promiscuous mode [ 72.955142][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.962697][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.971527][ T5841] bridge_slave_0: entered allmulticast mode [ 72.979177][ T5841] bridge_slave_0: entered promiscuous mode [ 73.016176][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.024336][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.032893][ T5831] bridge_slave_1: entered allmulticast mode [ 73.040591][ T5831] bridge_slave_1: entered promiscuous mode [ 73.053755][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.062681][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.070853][ T5841] bridge_slave_1: entered allmulticast mode [ 73.079177][ T5841] bridge_slave_1: entered promiscuous mode [ 73.102919][ T5832] team0: Port device team_slave_0 added [ 73.137411][ T5844] Bluetooth: hci0: command tx timeout [ 73.158332][ T5832] team0: Port device team_slave_1 added [ 73.167622][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.232682][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.245813][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.263801][ T5825] hsr_slave_0: entered promiscuous mode [ 73.271400][ T5825] hsr_slave_1: entered promiscuous mode [ 73.315926][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.341457][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.349274][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.356599][ T5836] bridge_slave_0: entered allmulticast mode [ 73.364044][ T5836] bridge_slave_0: entered promiscuous mode [ 73.372179][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.380072][ T5844] Bluetooth: hci2: command tx timeout [ 73.380580][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.413766][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.458860][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.466959][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.475018][ T5836] bridge_slave_1: entered allmulticast mode [ 73.482882][ T5836] bridge_slave_1: entered promiscuous mode [ 73.490643][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.497986][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.525481][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.537013][ T5844] Bluetooth: hci3: command tx timeout [ 73.543832][ T5829] Bluetooth: hci4: command tx timeout [ 73.548555][ T5841] team0: Port device team_slave_0 added [ 73.577811][ T5831] team0: Port device team_slave_0 added [ 73.596982][ T5841] team0: Port device team_slave_1 added [ 73.616570][ T5844] Bluetooth: hci1: command tx timeout [ 73.630069][ T5831] team0: Port device team_slave_1 added [ 73.665187][ T5832] hsr_slave_0: entered promiscuous mode [ 73.672459][ T5832] hsr_slave_1: entered promiscuous mode [ 73.679298][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 73.685550][ T5832] Cannot create hsr debugfs directory [ 73.714084][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.736978][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.744293][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.773157][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.809069][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.820803][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.828647][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.855716][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.881330][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.888715][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.916773][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.970493][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.978202][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.010205][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.061922][ T5836] team0: Port device team_slave_0 added [ 74.105775][ T5836] team0: Port device team_slave_1 added [ 74.185688][ T5841] hsr_slave_0: entered promiscuous mode [ 74.194136][ T5841] hsr_slave_1: entered promiscuous mode [ 74.202529][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 74.210205][ T5841] Cannot create hsr debugfs directory [ 74.273949][ T5831] hsr_slave_0: entered promiscuous mode [ 74.280920][ T5831] hsr_slave_1: entered promiscuous mode [ 74.287815][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 74.293826][ T5831] Cannot create hsr debugfs directory [ 74.300591][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.308500][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.337037][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.352270][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.359439][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.389136][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.631361][ T5836] hsr_slave_0: entered promiscuous mode [ 74.638223][ T5836] hsr_slave_1: entered promiscuous mode [ 74.644832][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 74.651639][ T5836] Cannot create hsr debugfs directory [ 74.827129][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.863033][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.888826][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.909445][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.004668][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.036053][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.063187][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.074123][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.171127][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.205689][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.216609][ T5844] Bluetooth: hci0: command tx timeout [ 75.217302][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.252169][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.344593][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.383461][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.395954][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.407651][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.445074][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.460187][ T5844] Bluetooth: hci2: command tx timeout [ 75.513770][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.525705][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.539597][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.564772][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.573525][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.586232][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.617076][ T5844] Bluetooth: hci3: command tx timeout [ 75.617104][ T5829] Bluetooth: hci4: command tx timeout [ 75.636802][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.644504][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.670130][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.683199][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.690774][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.696957][ T5829] Bluetooth: hci1: command tx timeout [ 75.743310][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.751297][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.791116][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.798320][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.838649][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.921416][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.997096][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.005251][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.037639][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.045423][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.083415][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.221122][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.263978][ T4576] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.273585][ T4576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.315983][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.331500][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.339081][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.375499][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.435639][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.468799][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.514369][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.522745][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.553974][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.561897][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.648492][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.754009][ T5825] veth0_vlan: entered promiscuous mode [ 76.844688][ T5825] veth1_vlan: entered promiscuous mode [ 76.919173][ T5841] veth0_vlan: entered promiscuous mode [ 76.988072][ T5841] veth1_vlan: entered promiscuous mode [ 77.005452][ T5825] veth0_macvtap: entered promiscuous mode [ 77.042442][ T5825] veth1_macvtap: entered promiscuous mode [ 77.086241][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.139125][ T5832] veth0_vlan: entered promiscuous mode [ 77.154046][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.170414][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.209358][ T5832] veth1_vlan: entered promiscuous mode [ 77.227163][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.238820][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.253387][ T5841] veth0_macvtap: entered promiscuous mode [ 77.267456][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.277432][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.300057][ T5829] Bluetooth: hci0: command tx timeout [ 77.308035][ T5841] veth1_macvtap: entered promiscuous mode [ 77.367097][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.383762][ T5832] veth0_macvtap: entered promiscuous mode [ 77.422905][ T5832] veth1_macvtap: entered promiscuous mode [ 77.434045][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.444277][ T5831] veth0_vlan: entered promiscuous mode [ 77.464627][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.520203][ T5831] veth1_vlan: entered promiscuous mode [ 77.533046][ T136] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.544880][ T5829] Bluetooth: hci2: command tx timeout [ 77.544948][ T136] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.569296][ T4576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.580105][ T4576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.581282][ T136] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.597672][ T136] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.614343][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.655386][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.685656][ T1325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.695694][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.705448][ T1325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.705854][ T5829] Bluetooth: hci3: command tx timeout [ 77.716533][ T5844] Bluetooth: hci4: command tx timeout [ 77.724448][ T5836] veth0_vlan: entered promiscuous mode [ 77.751835][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.762165][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.781460][ T5844] Bluetooth: hci1: command tx timeout [ 77.786311][ T5831] veth0_macvtap: entered promiscuous mode [ 77.821808][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.840423][ T5836] veth1_vlan: entered promiscuous mode [ 77.852392][ T5831] veth1_macvtap: entered promiscuous mode [ 77.874148][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.945785][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.015019][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.020335][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.031718][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.068892][ T4576] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.089178][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.106990][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.119623][ T4576] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.134792][ T4576] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.169047][ T4576] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.224679][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.230424][ T5941] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1'. [ 78.244176][ T4576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.261162][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.270768][ T4576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.290245][ T5836] veth0_macvtap: entered promiscuous mode [ 78.342788][ T5836] veth1_macvtap: entered promiscuous mode [ 78.400158][ T4576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.420680][ T4576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.508346][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.518650][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.625808][ T5940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.645408][ T5940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.788297][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.835139][ T5946] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 78.879822][ T44] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.910214][ T44] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.950463][ T44] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.000956][ T44] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.078546][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.103758][ T4576] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.132205][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.159815][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.192345][ T4576] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.223554][ T4576] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.245044][ T4576] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.377847][ T5844] Bluetooth: hci0: command tx timeout [ 79.389230][ T5975] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 79.617298][ T5844] Bluetooth: hci2: command tx timeout [ 79.681222][ T5988] netlink: 'syz.0.13': attribute type 1 has an invalid length. [ 79.690964][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.711609][ T5987] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.725919][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.757478][ T5989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.778341][ T5844] Bluetooth: hci4: command tx timeout [ 79.780585][ T5829] Bluetooth: hci3: command tx timeout [ 79.799608][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.824328][ T5988] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13'. [ 79.846645][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.867532][ T5829] Bluetooth: hci1: command tx timeout [ 79.873473][ T5987] xt_CT: No such helper "snmp_trap" [ 80.313459][ T6011] warning: `syz.0.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.388665][ T6018] netlink: 'syz.4.21': attribute type 4 has an invalid length. [ 80.400816][ T6017] netlink: 'syz.4.21': attribute type 4 has an invalid length. [ 80.662623][ T6030] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20001 [ 80.838196][ T6037] tipc: Started in network mode [ 80.868287][ T6037] tipc: Node identity 0e2036dcf84d, cluster identity 4711 [ 80.906253][ T6037] tipc: Enabled bearer , priority 0 [ 80.939562][ T6041] syzkaller0: entered promiscuous mode [ 80.992697][ T6041] syzkaller0: entered allmulticast mode [ 81.114096][ T6053] syz.3.29: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 81.145936][ T6058] Zero length message leads to an empty skb [ 81.168090][ T6053] CPU: 0 UID: 0 PID: 6053 Comm: syz.3.29 Not tainted syzkaller #0 PREEMPT(full) [ 81.168116][ T6053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 81.168132][ T6053] Call Trace: [ 81.168139][ T6053] [ 81.168147][ T6053] dump_stack_lvl+0x189/0x250 [ 81.168199][ T6053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.168221][ T6053] ? __pfx__printk+0x10/0x10 [ 81.168238][ T6053] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 81.168260][ T6053] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 81.168285][ T6053] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 81.168310][ T6053] warn_alloc+0x214/0x310 [ 81.168342][ T6053] ? __pfx_warn_alloc+0x10/0x10 [ 81.168375][ T6053] ? __get_vm_area_node+0x28f/0x300 [ 81.168399][ T6053] ? xskq_create+0xbf/0x170 [ 81.168422][ T6053] __vmalloc_node_range_noprof+0x690/0x12d0 [ 81.168475][ T6053] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 81.168502][ T6053] ? __kasan_kmalloc+0x93/0xb0 [ 81.168532][ T6053] vmalloc_user_noprof+0xad/0xf0 [ 81.168555][ T6053] ? xskq_create+0xbf/0x170 [ 81.168575][ T6053] xskq_create+0xbf/0x170 [ 81.168617][ T6053] xsk_init_queue+0xb0/0x110 [ 81.168639][ T6053] xsk_setsockopt+0x57b/0x8d0 [ 81.168660][ T6053] ? __pfx_xsk_setsockopt+0x10/0x10 [ 81.168681][ T6053] ? __pfx_aa_sk_perm+0x10/0x10 [ 81.168706][ T6053] ? aa_sock_opt_perm+0xff/0x1b0 [ 81.168739][ T6053] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 81.168754][ T6053] ? __pfx_xsk_setsockopt+0x10/0x10 [ 81.168772][ T6053] do_sock_setsockopt+0x17c/0x1b0 [ 81.168792][ T6053] __x64_sys_setsockopt+0x13f/0x1b0 [ 81.168815][ T6053] do_syscall_64+0xfa/0xfa0 [ 81.168834][ T6053] ? lockdep_hardirqs_on+0x9c/0x150 [ 81.168854][ T6053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.168871][ T6053] ? clear_bhb_loop+0x60/0xb0 [ 81.168892][ T6053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.168908][ T6053] RIP: 0033:0x7f1d86b8efc9 [ 81.168930][ T6053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.168944][ T6053] RSP: 002b:00007f1d87999038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 81.168961][ T6053] RAX: ffffffffffffffda RBX: 00007f1d86de5fa0 RCX: 00007f1d86b8efc9 [ 81.168973][ T6053] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005 [ 81.168982][ T6053] RBP: 00007f1d86c11f91 R08: 0000000000000004 R09: 0000000000000000 [ 81.168991][ T6053] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 81.169002][ T6053] R13: 00007f1d86de6038 R14: 00007f1d86de5fa0 R15: 00007ffd114558f8 [ 81.169031][ T6053] [ 81.169042][ T6053] Mem-Info: [ 81.481250][ T6041] tipc: Resetting bearer [ 81.512089][ T6053] active_anon:5616 inactive_anon:0 isolated_anon:0 [ 81.512089][ T6053] active_file:2949 inactive_file:39872 isolated_file:0 [ 81.512089][ T6053] unevictable:768 dirty:1580 writeback:0 [ 81.512089][ T6053] slab_reclaimable:10518 slab_unreclaimable:93476 [ 81.512089][ T6053] mapped:30255 shmem:1356 pagetables:1174 [ 81.512089][ T6053] sec_pagetables:0 bounce:0 [ 81.512089][ T6053] kernel_misc_reclaimable:0 [ 81.512089][ T6053] free:1324305 free_pcp:27842 free_cma:0 [ 81.513388][ T6061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.31'. [ 81.569835][ T6053] Node 0 active_anon:22464kB inactive_anon:0kB active_file:11796kB inactive_file:159284kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121020kB dirty:6304kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11996kB pagetables:4568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 81.613490][ T6053] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 81.647572][ T6053] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 81.679836][ T6053] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 81.685735][ T6053] Node 0 DMA32 free:1382404kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22464kB inactive_anon:0kB active_file:11796kB inactive_file:159284kB unevictable:1536kB writepending:6304kB zspages:0kB present:3129332kB managed:2565192kB mlocked:0kB bounce:0kB free_pcp:93524kB local_pcp:35380kB free_cma:0kB [ 81.725411][ T6053] lowmem_reserve[]: 0 0 0 0 0 [ 81.731775][ T6053] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 81.779435][ T5829] Bluetooth: hci0: command tx timeout [ 81.796772][ T6053] lowmem_reserve[]: 0 0 0 0 0 [ 81.802167][ T6053] Node 1 Normal free:3899456kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:16kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17708kB local_pcp:7788kB free_cma:0kB [ 81.844700][ T6036] tipc: Resetting bearer [ 81.863212][ T6053] lowmem_reserve[]: 0 0 0 0 0 [ 81.869534][ T6053] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 81.885537][ T6053] Node 0 DMA32: 3*4kB (ME) 4*8kB (UME) 3*16kB (ME) 2*32kB (M) 3*64kB (ME) 2*128kB (M) 3*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 335*4096kB (M) = 1382236kB [ 81.904528][ T6053] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 81.919761][ T6053] Node 1 Normal: 102*4kB (UME) 43*8kB (UME) 42*16kB (UME) 68*32kB (UME) 20*64kB (UME) 3*128kB (UM) 4*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 949*4096kB (M) = 3899536kB [ 81.927568][ T6036] tipc: Disabling bearer [ 81.939880][ T6053] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 81.958407][ T6053] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 81.974867][ T6053] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 82.002186][ T6053] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 82.072966][ T6053] 44326 total pagecache pages [ 82.099156][ T6053] 0 pages in swap cache [ 82.126694][ T6053] Free swap = 124996kB [ 82.130901][ T6053] Total swap = 124996kB [ 82.148616][ T6053] 2097051 pages RAM [ 82.156776][ T6053] 0 pages HighMem/MovableOnly [ 82.161683][ T6053] 424111 pages reserved [ 82.215796][ T6053] 0 pages cma reserved [ 82.225997][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34'. [ 82.241266][ T6071] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.249169][ T6071] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.260904][ T6080] netlink: 20 bytes leftover after parsing attributes in process `syz.0.36'. [ 82.654452][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.710356][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.718002][ T6090] Bluetooth: MGMT ver 1.23 [ 82.832300][ T6081] hsr_slave_0: left promiscuous mode [ 82.839218][ T6081] hsr_slave_1: left promiscuous mode [ 82.968201][ T1325] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.991246][ T1325] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.007382][ T1325] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.036133][ T1325] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.479634][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.44'. [ 83.828274][ T6117] syz.1.46 uses obsolete (PF_INET,SOCK_PACKET) [ 84.112901][ T6127] netlink: 36 bytes leftover after parsing attributes in process `syz.2.49'. [ 84.232130][ T6131] netlink: 216 bytes leftover after parsing attributes in process `syz.4.51'. [ 84.708435][ T6151] netlink: 156 bytes leftover after parsing attributes in process `syz.4.54'. [ 84.762317][ T6151] netlink: 156 bytes leftover after parsing attributes in process `syz.4.54'. [ 85.145225][ T6172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.61'. [ 85.177960][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.61'. [ 85.207322][ T6177] net veth1_virt_wifi ªªªªª: renamed from virt_wifi0 [ 85.382183][ T6182] netlink: 'syz.0.63': attribute type 2 has an invalid length. [ 85.422811][ T5938] IPVS: starting estimator thread 0... [ 85.449967][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'. [ 85.513302][ T6182] netlink: 20 bytes leftover after parsing attributes in process `syz.0.63'. [ 85.528010][ T6189] IPVS: using max 33 ests per chain, 79200 per kthread [ 85.574127][ T6190] gretap0: entered promiscuous mode [ 85.822936][ T6203] skbuff: skb_over_panic: text:ffffffff8a19ce23 len:400 put:72 head:ffff888055fec340 data:ffff888055fec340 tail:0x190 end:0x180 dev: [ 85.860764][ T6203] ------------[ cut here ]------------ [ 85.866568][ T6203] kernel BUG at net/core/skbuff.c:212! [ 85.883306][ T6205] netlink: 40 bytes leftover after parsing attributes in process `syz.2.70'. [ 85.907218][ T6203] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 85.913976][ T6203] CPU: 0 UID: 0 PID: 6203 Comm: syz.3.66 Not tainted syzkaller #0 PREEMPT(full) [ 85.918195][ T6206] netlink: 'syz.3.66': attribute type 12 has an invalid length. [ 85.923370][ T6203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 85.923389][ T6203] RIP: 0010:skb_panic+0x157/0x160 [ 85.947403][ T6203] Code: c7 20 b0 6c 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 be 92 f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 85.967370][ T6203] RSP: 0018:ffffc9000bcdeb68 EFLAGS: 00010282 [ 85.973461][ T6203] RAX: 0000000000000088 RBX: dffffc0000000000 RCX: 048ac86b1b8ea600 [ 85.981568][ T6203] RDX: ffffc9000e7f9000 RSI: 0000000000005038 RDI: 0000000000005039 [ 85.989659][ T6203] RBP: 0000000000000180 R08: ffffc9000bcde867 R09: 1ffff9200179bd0c [ 85.997742][ T6203] R10: dffffc0000000000 R11: fffff5200179bd0d R12: ffff888023b46c90 [ 86.005996][ T6203] R13: ffff888055fec340 R14: ffff888055fec340 R15: 0000000000000190 [ 86.014445][ T6203] FS: 00007f1d879786c0(0000) GS:ffff888126140000(0000) knlGS:0000000000000000 [ 86.024088][ T6203] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.031701][ T6203] CR2: 00007f1d87957d58 CR3: 0000000028256000 CR4: 00000000003526f0 [ 86.040690][ T6203] Call Trace: [ 86.043979][ T6203] [ 86.047344][ T6203] ? set_ipsecrequest+0x73/0x680 [ 86.052495][ T6203] ? set_ipsecrequest+0x73/0x680 [ 86.057685][ T6203] skb_put+0x159/0x210 [ 86.061841][ T6203] set_ipsecrequest+0x73/0x680 [ 86.066717][ T6203] pfkey_send_migrate+0x129c/0x1de0 [ 86.071932][ T6203] ? __pfx_pfkey_send_migrate+0x10/0x10 [ 86.077466][ T6203] km_migrate+0x155/0x260 [ 86.081786][ T6203] ? km_migrate+0x3c/0x260 [ 86.086301][ T6203] xfrm_migrate+0x2020/0x2330 [ 86.091064][ T6203] ? __pfx_xfrm_migrate+0x10/0x10 [ 86.096091][ T6203] ? kasan_save_track+0x4f/0x80 [ 86.101038][ T6203] xfrm_do_migrate+0x796/0x900 [ 86.105814][ T6203] ? ____sys_sendmsg+0x505/0x830 [ 86.110756][ T6203] ? ___sys_sendmsg+0x21f/0x2a0 [ 86.115962][ T6203] ? __pfx_xfrm_do_migrate+0x10/0x10 [ 86.121363][ T6203] ? __nla_parse+0x40/0x60 [ 86.125875][ T6203] xfrm_user_rcv_msg+0x7a3/0xab0 [ 86.130921][ T6203] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 86.136755][ T6203] ? __pfx___mutex_trylock_common+0x10/0x10 [ 86.142692][ T6203] ? rcu_is_watching+0x15/0xb0 [ 86.147806][ T6203] ? trace_contention_end+0x39/0x120 [ 86.153185][ T6203] ? __mutex_lock+0x335/0x1350 [ 86.158322][ T6203] netlink_rcv_skb+0x208/0x470 [ 86.163215][ T6203] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 86.169019][ T6203] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 86.174862][ T6203] ? netlink_deliver_tap+0x2e/0x1b0 [ 86.180451][ T6203] ? netlink_deliver_tap+0x2e/0x1b0 [ 86.185663][ T6203] xfrm_netlink_rcv+0x79/0x90 [ 86.190426][ T6203] netlink_unicast+0x82f/0x9e0 [ 86.195638][ T6203] ? __pfx_netlink_unicast+0x10/0x10 [ 86.200915][ T6203] ? netlink_sendmsg+0x642/0xb30 [ 86.205845][ T6203] ? skb_put+0x11b/0x210 [ 86.210086][ T6203] netlink_sendmsg+0x805/0xb30 [ 86.214846][ T6203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.220119][ T6203] ? aa_sock_msg_perm+0xf1/0x1d0 [ 86.225155][ T6203] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 86.230617][ T6203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.235978][ T6203] __sock_sendmsg+0x21c/0x270 [ 86.241104][ T6203] ____sys_sendmsg+0x505/0x830 [ 86.246051][ T6203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 86.251329][ T6203] ? import_iovec+0x74/0xa0 [ 86.255925][ T6203] ___sys_sendmsg+0x21f/0x2a0 [ 86.260637][ T6203] ? __pfx____sys_sendmsg+0x10/0x10 [ 86.265940][ T6203] ? __fget_files+0x2a/0x420 [ 86.270521][ T6203] ? __fget_files+0x3a0/0x420 [ 86.275189][ T6203] __x64_sys_sendmsg+0x19b/0x260 [ 86.280115][ T6203] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 86.285686][ T6203] ? do_syscall_64+0xbe/0xfa0 [ 86.290473][ T6203] do_syscall_64+0xfa/0xfa0 [ 86.294988][ T6203] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.300411][ T6203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.306558][ T6203] ? clear_bhb_loop+0x60/0xb0 [ 86.311246][ T6203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.317151][ T6203] RIP: 0033:0x7f1d86b8efc9 [ 86.321571][ T6203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.341357][ T6203] RSP: 002b:00007f1d87978038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.349939][ T6203] RAX: ffffffffffffffda RBX: 00007f1d86de6090 RCX: 00007f1d86b8efc9 [ 86.358158][ T6203] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 000000000000000a [ 86.366202][ T6203] RBP: 00007f1d86c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 86.374250][ T6203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.382211][ T6203] R13: 00007f1d86de6128 R14: 00007f1d86de6090 R15: 00007ffd114558f8 [ 86.390205][ T6203] [ 86.393211][ T6203] Modules linked in: [ 86.399741][ T6203] ---[ end trace 0000000000000000 ]--- [ 86.426624][ T6203] RIP: 0010:skb_panic+0x157/0x160 [ 86.433483][ T6203] Code: c7 20 b0 6c 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 be 92 f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 86.491368][ T6203] RSP: 0018:ffffc9000bcdeb68 EFLAGS: 00010282 [ 86.497699][ T6203] RAX: 0000000000000088 RBX: dffffc0000000000 RCX: 048ac86b1b8ea600 [ 86.505939][ T6203] RDX: ffffc9000e7f9000 RSI: 0000000000005038 RDI: 0000000000005039 [ 86.515934][ T6203] RBP: 0000000000000180 R08: ffffc9000bcde867 R09: 1ffff9200179bd0c [ 86.524216][ T6203] R10: dffffc0000000000 R11: fffff5200179bd0d R12: ffff888023b46c90 [ 86.532649][ T6203] R13: ffff888055fec340 R14: ffff888055fec340 R15: 0000000000000190 [ 86.542498][ T6203] FS: 00007f1d879786c0(0000) GS:ffff888126140000(0000) knlGS:0000000000000000 [ 86.551749][ T6203] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.558636][ T6203] CR2: 0000001b30963fff CR3: 0000000028256000 CR4: 00000000003526f0 [ 86.566929][ T6203] Kernel panic - not syncing: Fatal exception [ 86.573435][ T6203] Kernel Offset: disabled [ 86.577751][ T6203] Rebooting in 86400 seconds..