last executing test programs: 2m46.291632273s ago: executing program 4 (id=1214): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) clock_gettime(0xfffffffb, 0x0) bind$packet(r5, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r7, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@llc={0x606, {@llc={0x42, 0x8e, "e2"}}}}}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r11, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r12, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) syz_emit_ethernet(0x39d, &(0x7f0000000740)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x6, 0x6, 'jQ$', 0x367, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, @private1, {[@routing={0x4, 0x8, 0x1, 0x1, 0x0, [@mcast2, @loopback, @dev={0xfe, 0x80, '\x00', 0x3c}, @dev={0xfe, 0x80, '\x00', 0x37}]}, @hopopts={0x88, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x7}]}, @fragment={0x21, 0x0, 0xbd, 0x0, 0x0, 0x11, 0x66}, @srh={0x0, 0x8, 0x4, 0x4, 0x6, 0x0, 0x101, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}]}, @fragment={0x32, 0x0, 0xe, 0x0, 0x0, 0x0, 0x65}, @dstopts={0x3a, 0x17, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x6f, 0x8, [0x10000, 0x5, 0x1ff, 0x6, 0x6]}}, @pad1, @calipso={0x7, 0x38, {0x0, 0xc, 0x0, 0x7f, [0xf3aa, 0x6, 0x2, 0x8, 0xc20d, 0x1ff]}}, @calipso={0x7, 0x48, {0x1, 0x10, 0x5, 0x0, [0x6f9, 0x787, 0x1ff, 0x6, 0x80, 0x9, 0xfffffffffffffffb, 0x0]}}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xa0, 0x2, [0x8], "bc9547d5995a036f6f443376ec80d64081912f325df36112b40366bc2da3afbba2969f738ff02fc8b0225cbf5d63a3c9b12c4cb0552949f6522f64ab26c0150d1e7b711ebf356d8b57770ad60a5b5b39c1903c591add951cd4500b1b554ae8a49ab7f1a22f69c34d277a6a8a490cc93e1d30d3fbe81b14e4fe8cfd0f55638ad02c8fa3a8b363523b5ddd23d3cfe00ed8dc7ac90d816038b2fe3585285adacce0"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "f49e7a97d09e7e57efe6c171e6b421e8058e701867d3eaa5cd613ddd3124b6d68d904d75445886852110f70006fd7006571a4d6b4c829554f8"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x3, 0x3, 0x2], "fa891ac10483dc8755645eded9f75ca5891a965187f153d500017cc0a6374dc1468156b5ab28129e1c2f4ac1db6e36221c22a80c81c3ca14b57d49b145f865972a106fef227c1485f3a2cffa231f821704aaadfb60c9ed1e9d921bf41e6b3f161fb975b6f620fc47058edee23c46fdb2415c28916ff692691c463304b1796db3882c5079dbd49616f300ca6c85df6bfeb460fa0b390ade"}, {0x8, 0x88be, 0x1, {{0x2, 0x1, 0x9, 0x1, 0x0, 0x0, 0x3, 0x9}, 0x1, {0xffffff80}}}, {0x8, 0x22eb, 0x3, {{0xa, 0x2, 0x0, 0x3, 0x0, 0x2, 0x0, 0x2}, 0x2, {0x3, 0x2000, 0x2, 0x1b, 0x0, 0x0, 0x2, 0x1}}}, {0x8, 0x6558, 0x1, "5a319d5b56372eb3a70a85a5dc8c11b1f931d6d877189f03c3980e2423a48bdf8342cacd0537f8166e8962"}}}}}}}, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/135, 0x87}], 0x28b) r13 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001b00)={0x154c, 0x1c, 0x20, 0x70bd27, 0x25dfdbfd, "", [@nested={0x52d, 0x0, 0x0, 0x1, [@nested={0x18, 0x139, 0x0, 0x1, [@typed={0x14, 0x70, 0x0, 0x0, @ipv6=@local}]}, @typed={0x4, 0xb0}, @generic="286b3eea5347ef4a540ed68a698abe387ae15393298936a1f89b377f514043851df85adabe92bc4d78b9c456bc47285dc996d00cdd13fa5451d77d6a8375e97a172433af8e6f8354091040cc38bc783c7d4f4f6a5e52029eeb9daf9e7d2550e539a6844b143837ee8d00d138d45c5f36e3436c2a82b81746076f2fe9eb40d3b3070347128951f71d21dad5e655a5d8205e2948f043a34553ea4136e9a941cf7a199bec841b62c41ea1094488e9b50f04476a57a0c46d606fc48f987ab720a4ab9f3177dad6e88269121102849acc3e569b46a6291d90fab44038aa12551fd1a2", @generic="ea25f6bf7ba5017d518a8349762dac23d09b0325ddc29ae702bb1cc426a308d4f25ebb8e4285114a1907202731df7e41295462192ebc38cf4638dfbef702e2ca10b406e8ac3340ca8cad1acf6dc8f39a0c15497866c8332fbfc315fd7b337912943c14be66d4bb27a892b64720fe155d0e3698a1fe614e071f0ff8099b26d6576f4eaf43d5e778e21a25b3cc63b02addfefd9762070bb43308466d0ffcb6d6bf", @typed={0x8, 0x1b, 0x0, 0x0, @u32=0x10}, @generic="fe359e78d2a2c3410da5260f64059569a9ddb8b027d5523d66dcd9574c444f9624e02d3b8d9842cbf94d0b26", @nested={0x2b3, 0x126}, @generic="88c24e95f4d1cab3518e88f2cc8b939e6bbcaf04154e5c8e924258c58b223e5536136a8acc1f7e34f325f319811e657129ed7c3b0a907d43d855592b45dcfb7b1cd6d648d2cff5795e575be5b1642e22bd233bb1dd45395b77e2cc7f6e397c41a088fb47f251f711d531ed1b88dd0d0ff4db87f63cb3e6b30e59d25541c4614cbf3d107893caa8966f8b3cffb05525e2f60c38d871aacd31837c7a6a80f885503b711ff734"]}, @generic="049c90b9e4dbc0cf0bf04f", @generic="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"]}, 0x154c}, {&(0x7f00000005c0)={0x10, 0x2a, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x10}], 0x1000000000000171, 0x0, 0x0, 0x4044810}, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x181}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="3000000081a0b2bb754573cd8d0000c52221cfec842d60671fce1b9d6dffdc3411d9d3104fd08f75579e71e9ff664fbae7810b9de10b8ba438bbb10c19a5deabf556a08729cbd171bbac08cd1bc08eccc0e635500f1a120de7cae49c33e818ebf553670fafd44ce4e706a372cf91f46e9230867778d3a584780a7455e022b7dcca4851f5f5d57348f6613d191c7043ce2f93c1af2a40de60991fe2648e0a4597865baa9411812e59957ddcab0453c87a0922da0d5d8bd1880000", @ANYRES16=0x0, @ANYBLOB="000225bd7000fbdbdf2501000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x821) 2m44.202485321s ago: executing program 4 (id=1224): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'nicvf0\x00', 0x100}) 2m43.644292715s ago: executing program 4 (id=1228): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x2, 0x2, 0x0, 0x4}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x3, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xda1a}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "000000200100", "376a30a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e580c", '\x00', "fffffffffffffffd"}, 0x38) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f000010d000)={{0x0, 0x51, 0x4, 0x81, 0x8, 0x2, 0x5, 0x9, 0x5, 0x7c7, 0x3, 0x4, 0x4, 0x9, 0x6}}) shutdown(r4, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000a40)={0xa, 0x4e22, 0x7fff, @remote, 0x9}, 0x1c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000001700)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e24, 0x50000000, @loopback, 0x1}, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0xd3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}], 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5, 0x0, 0xd}, 0x18) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 2m42.911631875s ago: executing program 4 (id=1232): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c80)={{r2}, &(0x7f0000000c00), &(0x7f0000000c40)='%ps \x00'}, 0x20) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@dellinkprop={0x138, 0x6d, 0x20, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x40000, 0x800}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xf38}, @IFLA_VF_PORTS={0xe4, 0x18, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xc, 0x2, 'macvlan\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "11db60880da49e585fa80f0000cc35f3"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7e4d5239c48249470cd79cf17211dc7e"}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "6e2c1a8e991f7aff8ef2f34a771cc304"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "f9aeffc84d87cdf108e61ac965bb2626"}, @IFLA_PORT_PROFILE={0x9, 0x2, '\\))@\x00'}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f3452267aed4c71a008174e72cd44bf5"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "471834c45e09a202be37bc753de7d4cf"}, @IFLA_PORT_VF={0x8, 0x1, 0x200}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ab5db42b8f35bb710bb5d9534fd815ec"}, @IFLA_PORT_VF={0x8, 0x1, 0x229}]}]}, @IFLA_EVENT={0x8, 0x2c, 0x1}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x3ff}, @IFLA_LINK_NETNSID={0x8}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x138}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 2m42.691799582s ago: executing program 4 (id=1234): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32001200000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r7, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) syz_emit_ethernet(0x66, &(0x7f0000000780)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={@map=r5, 0xffffffffffffffff, 0x17, 0x1, r6, @void, @value=r6, @void, @void, r8}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000c40)={0x44, r11, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_DEVKEY={0xffffffffffffffaf, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4885}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r3, r4, 0x34, 0x0, @val=@tcx={@void, @value=r9, @void, @void, r8}}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, r13, 0x80000001, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@cgroup=r13, r0, 0xe, 0x8, r1, @void, @value=r0, @void, @void, r8}, 0x20) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32=r14, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x43}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) 2m27.629003863s ago: executing program 32 (id=1234): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32001200000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r7, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) syz_emit_ethernet(0x66, &(0x7f0000000780)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={@map=r5, 0xffffffffffffffff, 0x17, 0x1, r6, @void, @value=r6, @void, @void, r8}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000c40)={0x44, r11, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_DEVKEY={0xffffffffffffffaf, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4885}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r3, r4, 0x34, 0x0, @val=@tcx={@void, @value=r9, @void, @void, r8}}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, r13, 0x80000001, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@cgroup=r13, r0, 0xe, 0x8, r1, @void, @value=r0, @void, @void, r8}, 0x20) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32=r14, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x43}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) 2m5.994874625s ago: executing program 33 (id=1420): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x3d, &(0x7f00000002c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x1b, 0x0, @gue={{0x2, 0x0, 0x1, 0x7}, "75de8b187f39dd7f3731c0"}}}}}}, 0x0) (async) unshare(0x62040200) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) setsockopt$inet_int(r5, 0x0, 0x1, &(0x7f00000002c0)=0x6d, 0x4) (async) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) (async) close(r0) (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f00000001c0)={0x40000008}) 1m57.456972204s ago: executing program 34 (id=1488): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x4, 0x8, 0x1}, 0x50) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c00)={{r0}, &(0x7f0000000b80), &(0x7f0000000bc0)='%-5lx \x00'}, 0x20) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) close(0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (rerun: 32) listen(0xffffffffffffffff, 0x9) (async, rerun: 64) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) r4 = accept(r2, &(0x7f0000000600)=@in6={0xa, 0x0, 0x0, @empty}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_WOWLAN(r4, 0x0, 0x0) (async, rerun: 64) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'pim6reg\x00', 0x1000}) (async, rerun: 64) r6 = socket$kcm(0x2, 0x3, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r7, 0x0, 0xc9b}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 1m56.748433868s ago: executing program 35 (id=1491): bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001f40)=ANY=[@ANYRES32=0x0, @ANYRES16=r3, @ANYBLOB="000000000000000000000000000000000000000000000000000000004f689912cf579b55590b65b786dec00085c427ed7898b0e73b302c0397e77365fe3f3b60cda8c5d03bdf06b0b67abad06878db74695442a0f6646ffdf0078f8cc7cd16efe0905278716ec28bce77d355fc18930080ffffc296a9455edc81efca1cbfa1333d"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x4, 0x32, 0x8}, 0x9c) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{}, &(0x7f0000000100), &(0x7f0000000440)='%pI4 \x00'}, 0xbdde7aff396df1c9) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r4, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x4048894) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) close(0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5, 0x0, 0xff}, 0x18) bpf$MAP_CREATE(0x600000000000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="0f00000004000000040000000200020000000000", @ANYRES32=0x1, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="0000000024000000000000000000000000000000000000000000e4ffa026efaffad949c7e5da06c89b0d33075df053a7d6118f07b673ce0dbec19804c6dbb705ceb4"], 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_WIPHY(r6, 0x0, 0x400c4) 1m13.237007741s ago: executing program 36 (id=1816): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) unshare(0x60600) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x11, &(0x7f0000000040)=0x100000001, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xa8, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6674}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x4) openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x7a05, 0x1700) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000580)={'filter\x00', 0x0, [0x5, 0xfffffff7, 0x7e, 0x101, 0xc]}, &(0x7f0000000600)=0x54) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') (async) unshare(0x6a040000) (async) socket$netlink(0x10, 0x3, 0xb) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) (async) unshare(0x60600) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x11, &(0x7f0000000040)=0x100000001, 0x4) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xa8, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6674}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x7a05, 0x1700) (async) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000580)={'filter\x00', 0x0, [0x5, 0xfffffff7, 0x7e, 0x101, 0xc]}, &(0x7f0000000600)=0x54) (async) 1m9.119819358s ago: executing program 37 (id=1861): r0 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000a00)={r1}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffff}, [@ldst={0x0, 0x3, 0x6, 0x2, 0x0, 0x0, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @alu={0x4, 0x0, 0xd, 0x3, 0x0, 0x0, 0xfffffffffffffff0}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x7}]}, &(0x7f0000000140)='syzkaller\x00', 0xa3d, 0x4c, &(0x7f0000000180)=""/76, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xa, 0x7, 0xe}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, 0x3, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x44001) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r11, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={@map=r9, 0xffffffffffffffff, 0x17, 0x1, r10, @void, @value=r10, @void, @void, r12}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r7, r8, 0x34, 0x0, @val=@tcx={@void, @value=r13, @void, @void, r12}}, 0x1c) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x9}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x3c, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xa8, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@map=r14, r3, 0x26, 0x30, 0x0, @void, @void, @void, @value=r15, r12}, 0x20) 58.307552246s ago: executing program 38 (id=1953): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) recvmsg(0xffffffffffffffff, 0x0, 0x102) (async) socket$inet(0x2, 0x80001, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 58.020484264s ago: executing program 7 (id=2032): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r3 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r1) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x893}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xb}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x4020010) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000000000e0000000f47e6aeb8067cdc3721310a0e029cfd0afa3742129b1fd0df14d877d93e17f467044d52e66937973a86f3e228429e901655992b6ab785f3e43d87543519f2c9c4c7221b23518797c2ec75af2961beb777bd5e5076cdea9e449f683c5d8f81e3b4e68f7eb9cb1d1bfd0c229f9a6add639b66c302a203ddc6a1095e76e86e8bea712436883157d35102d80b30b3e79c51b49000bca2df4ad93f028b7e345c2e94883f9d876593046fdd82e8edd9eaf3ddac5093eb3627b7666188dbbb0ab4a2f4bd4f1897bb157ce24bbe1b2a22a78120637a9ac527ed0372bcb71ee9688943b408fee306d181d1db8b599c53bec09fa0cea8f6a5901c1b0d9269c559584cbb373550aca62b2b29c1a746becfb779d0e979e013101b2665fc7a89c760a08ba42c4d5867a254e4b8d0506a33c2b3d1a0256b4cbb968f351e3d9f64a5cf940b9cdbc7b06111ad4c161c394a74ce94c3119fdf721c6d5ffa40d95502cae5fd113d45bd67e39dd64a17921bec7ad03e87b4de2a42e376c5744e8ea8e2b45442bf18c54e217935d00816d46ab827473744f219de02172dd3ac5c4a9ead68e5451790f95120e30f8b6ada15ca4198becdfa2988f21323bfe889e"], &(0x7f0000000100)=0x104) 57.784265967s ago: executing program 7 (id=2033): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r0 = socket(0x10, 0x803, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004340)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="09534afb89880fa2e51c97cc78753e0dd1", 0x11}, {&(0x7f00000006c0)="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", 0x3ec}], 0x2, &(0x7f0000000340)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000080) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) 57.514579514s ago: executing program 7 (id=2035): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x52200, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0x8029, 0x1}) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000000c0)=0x1, 0x4) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000100)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000140)=0x4) (async, rerun: 64) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r1, r1}, 0xc) (async, rerun: 64) r2 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x4, 0xff, 0x0, 0x7, 0x38, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private0, 0x700, 0x8000, 0xd, 0xff}}) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000280)={'sit0\x00', r3, 0x7800, 0x7, 0x0, 0x6, {{0x23, 0x4, 0x2, 0x15, 0x8c, 0x66, 0x0, 0x5, 0x29, 0x0, @empty, @private=0xa010102, {[@timestamp_prespec={0x44, 0x54, 0x18, 0x3, 0x3, [{@rand_addr=0x64010102, 0x6}, {@broadcast, 0xff}, {@private=0xa010102, 0x3}, {@multicast1, 0x7cfc}, {@broadcast, 0x4}, {@private=0xa010102, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x8001}, {@private=0xa010101, 0x800}, {@rand_addr=0x64010102, 0x18f}, {@empty, 0xe}]}, @timestamp={0x44, 0x20, 0x77, 0x0, 0x5, [0x9, 0x0, 0x2, 0x5, 0x0, 0x76, 0x482e00]}, @end]}}}}}) (async) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000380)) (async) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000480)=@get={0x1, &(0x7f00000003c0)=""/140, 0x75}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r1) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x220c010a}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r6, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_macvtap\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40c90) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000600)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x401}) (async) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) (async) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000680), &(0x7f00000006c0)=0x4) (async, rerun: 32) r8 = openat$cgroup_subtree(r1, &(0x7f0000000700), 0x2, 0x0) (rerun: 32) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) ppoll(&(0x7f0000000740)=[{r2, 0x8}, {r8, 0x40}, {r0, 0x5c3}, {0xffffffffffffffff, 0xa0}, {0xffffffffffffffff, 0x2000}], 0x5, &(0x7f00000007c0)={r9, r10+10000000}, &(0x7f0000000800)={[0x5]}, 0x8) getpeername$netrom(r7, &(0x7f0000000840)={{0x3, @null}, [@remote, @remote, @remote, @rose, @null, @rose, @rose]}, &(0x7f00000008c0)=0x48) shutdown(r5, 0x0) (async) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), r1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r11, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x240000c0}, 0x41) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000a40)={0x2, 0x3c, "ebd4beb39c87bccb5bfa1c6c23171618fd2f62846577f79ce55d706be865fc3e46659ec795aff31e0cfa8ca54295f0f20f6d4f1340917c746e311dd9"}) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), r7) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x9, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFCTH_QUEUE_NUM={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0xade8635d614ec4bf) (async) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000c40)={0x1f, 0x7ff}, 0xe) 56.999975905s ago: executing program 7 (id=2037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x20) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) (async) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x67, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x0, 0xe21, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x2, 0x0, @void}}}}}}}, 0x0) 56.80975906s ago: executing program 7 (id=2038): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x20, 0x0, 0xfffffffe, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x696}]}}}]}, 0x44}}, 0x40000d0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x20, 0x0, 0xfffffffe, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x696}]}}}]}, 0x44}}, 0x40000d0) (async) 56.700893277s ago: executing program 7 (id=2039): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000001080)=ANY=[@ANYBLOB="000000f602"], 0x124a) connect$inet(0xffffffffffffffff, 0x0, 0x0) r9 = socket(0x2b, 0x80801, 0x1) sendmsg$nl_route_sched(r9, 0x0, 0x20000000) setsockopt$sock_int(r9, 0x1, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r10, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x458, 0x5, 0x1, 0xc}, 0xb, 0x4, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0x11, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008840}, 0x8000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 50.4238215s ago: executing program 4 (id=1978): unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0xa, 0xba, &(0x7f00000002c0)=""/186, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x0, 0x1fffffe}, 0xaa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f000033d000/0x4000)=nil, 0x4000, 0x100000c, 0x11, 0xffffffffffffffff, 0x75e06000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000200)={0x29e9c934, 0x3, 0xffd, 0x3}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) 44.859431596s ago: executing program 2 (id=2087): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'lo\x00', {0x1}, 0xff7b}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) recvmmsg(r2, &(0x7f0000009100)=[{{0x0, 0x0, 0x0}, 0x35040a6c}], 0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'bridge_slave_0\x00', {0x1}, 0xfff7}) 43.923933698s ago: executing program 2 (id=2097): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000114640a03ef877d965748a48917ee38000000040000070000000000000100000000002e306100"], &(0x7f0000000440)=""/173, 0x29, 0xad, 0x0, 0x5}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x1, 0x0}, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) close(r6) sendfile(r6, r5, 0x0, 0xf03a0005) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x6f9, '\x00', r2, 0xffffffffffffffff, 0x3, 0x200002, 0x6}, 0x50) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r10, &(0x7f0000000100)=[{&(0x7f0000000140)="2fcf", 0x2}], 0x1) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x10, r10, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)='%-5lx \x00'}, 0x20) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@o_path={&(0x7f0000000780)='./file0\x00', 0x0, 0x4010, r1}, 0x18) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000007882"], 0x48) r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r14, r8, 0x5}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r15, r14, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x18, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0xe, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x50395b1ecfcd0397, 0x12, '\x00', r2, @fallback=0x2d, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x4, 0x7, 0xb5, 0x1000}, 0x10, r4, 0xffffffffffffffff, 0x1, &(0x7f0000000800)=[r6, r7, r9, r10, r11, r12, r13, r14], &(0x7f0000000840)=[{0x4, 0x3, 0x3, 0xf}], 0x10, 0x3}, 0x94) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r16 = accept4(r1, 0x0, 0x0, 0x0) ioctl$int_in(r16, 0x5452, &(0x7f0000000500)=0xd0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r16) 43.691950851s ago: executing program 2 (id=2101): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x508, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x438, 0x2e0, 0x2e0, 0x438, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x348, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0xe4e7, 0x7, 0x0, 0x0, "756a1796ba7709aaf1afdd4c49089efda626f1a5ffe85e8698e207ea56736661698e1f152f8d024dc4c4dacc58a88e7f1e8534a8b0b9f8704e591c0762a21d16"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xe15}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000004c0)={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x40000, 0x40, 0xcc84, 0x100, 0x1}) 43.581432523s ago: executing program 2 (id=2104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x8c, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x20080000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xd6ca}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xba6f}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2200a094}, 0x20044000) 43.447094536s ago: executing program 2 (id=2105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000018000100fc0f00000000000002000000000000090000000006001500060000000c001680050002007f0000ee906793a2b8811a13730170ba00"], 0x30}}, 0x44890) close(r1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) close(0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000e397578bc05d7afd08c68670a242dbd462f9f668e8b98d9a175ca102ba19569eaf9e192c4add76bb4c34f7bdaf32ed454f0966a2b2d218ded8dcc0dac9525711ca59a9b052a950c28494bee3f4309687751fc6d2a6e660d8a5ea2cb16db3e25d0133e3ad4d7d253ada90c18f36f37a5665e1fe60e311f403445a1fad2ac452a52106f07b5ba7627f51ef7213a3734df60b7e5fe005575691857ea8662e3c68807f2fc451a17f2f", @ANYRES16=0x0, @ANYBLOB="31832abd7000ffffffff190000000c0001800800030003000000"], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf2523090000", @ANYRES32, @ANYBLOB="140002"], 0x34}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r8, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x1001}], 0x1, 0x0, 0x0, 0x300}, 0x0) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e28, 0xa, @ipv4={'\x00', '\xff\xff', @empty}, 0x7fff}, 0x1c) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="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", 0xfff}, {&(0x7f0000000180)="dd43", 0x2}], 0x2}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a3100000000140005800800014000000000080002"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40008d0) 43.263609935s ago: executing program 2 (id=2108): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe90, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) vmsplice(r0, &(0x7f0000000400)=[{&(0x7f0000000100)="ecb758202a1de49f7404058a89ef0c05554dd33eebe7c2e7c00910d6c00f9045444ad41e00328eebab3ec33749e4187bf75cf8148dbc0c61af61df92293e27d11c3262425760ba6af9b2e3ae0158ef7c8a448c63bb2e18e8c863e3c18dc8c0ba8334a87601ee2928241db7392999c6cf5bac6efa4fefd9ac701ae1e07025fbf0b1d23bbe0dcabe540c88aa44956012bf62bcd2b967b44ae5af71dee94bc518f16d8547866c1aadc91fcfe7ae2d97354c2119ae266f2e176d9f38fbbf66e805f7218ec2820d42a5b4b28caa9834bb2cc9d2e791e2203a1baf110e4d12be4ad42ad00b660759ba", 0xe6}, {&(0x7f0000000200)="cb46e0da73bef8b9ab28b0cea3873a6077bd9bb05b41dd5a2ea2398c14ad9beb1bee9a3a70e1bc495b1fd93acd87599d4eef6b659b824e907167347dc3c629f6331a45269baf26c3a798de7898569a4f3f312d3c25f240ea2d4c8ea221408c4f0a9c07985620c483c0283e1ee279", 0x6e}, {&(0x7f0000000080)="66514e786ab8885219c3f48ec2e818d52abd", 0x12}, {&(0x7f0000000300)="45788ff57f29541cf0f452598e834ea7a6436191711de231f11c055be03d2732d291fa59073709a6b1b7f5890f482366004ce14f7a9a914a56a41be623e47c7c53b91886f0897b627081aa03dd76054b0d956b817cfd1e9bde4e3287576bb6810a39e8563cca7e79c7186cb6243e4866092a83253f2536367e56716419d1b081db2d54b7ddfc688099e8f34270717f711f780e3adb2e9cb29afca30b3e988716bb66f0b6baf99c6695cd7955a4b70e9db7067e114fc1008b8910b0b7a22c68614a7da7c4af724979b578221ca560fa91a56ad2f4cc8c955e19df36d63e442280b21a862178f6a5adf7185b1577202a3c0d7bdce1", 0xf4}, {&(0x7f0000000280)="81ed", 0x2}], 0x5, 0x1) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000480)={0x2, 'xfrm0\x00', {0x4b39}, 0x8}) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x6a040000) socketpair(0x3, 0x100000005, 0x0, &(0x7f00000002c0)) 41.603351445s ago: executing program 39 (id=2039): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000001080)=ANY=[@ANYBLOB="000000f602"], 0x124a) connect$inet(0xffffffffffffffff, 0x0, 0x0) r9 = socket(0x2b, 0x80801, 0x1) sendmsg$nl_route_sched(r9, 0x0, 0x20000000) setsockopt$sock_int(r9, 0x1, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r10, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x458, 0x5, 0x1, 0xc}, 0xb, 0x4, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0x11, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008840}, 0x8000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 35.34624182s ago: executing program 40 (id=1978): unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0xa, 0xba, &(0x7f00000002c0)=""/186, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x0, 0x1fffffe}, 0xaa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f000033d000/0x4000)=nil, 0x4000, 0x100000c, 0x11, 0xffffffffffffffff, 0x75e06000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000200)={0x29e9c934, 0x3, 0xffd, 0x3}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) 35.146382505s ago: executing program 3 (id=2182): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x11}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_subtree(r1, &(0x7f0000000540)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000427bd7000f7dbdf25000010000000000e000000059464703a4f797ab82353063885145c774c8ff66c51edad3100000000e75c57e87fc5825f34fe2d83fb38887cdeef8249b167aa233674fb14396e0b8934b9f9931af7a41ea0f3403a03b50a070fb24d98b7017ec4b2dbac5787b143092009"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4004080) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100)=0x10, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) 34.859632866s ago: executing program 3 (id=2183): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c 1:'], 0xa) 34.743386933s ago: executing program 3 (id=2185): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000002200000000000000160000008500000061000000850000005000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f0000000580)="f4b80500115d64204a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@delqdisc={0x124, 0x25, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff3}, {0xc, 0x1e}, {0x9, 0x6}}, [@q_dsmark={{0xb}, {0x48, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1000}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x38}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1ff}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfffd}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x28}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x24}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x19}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4004810}, 0x84) 34.642931657s ago: executing program 3 (id=2187): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x6, 0xfffffffc, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xba8dfda36448d7fe}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x4, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c031}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r11, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r11) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r12, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)={0x68, r10, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r12}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xa}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001000000807507a2758999e5fa0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 31.939147812s ago: executing program 3 (id=2190): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x0, @rand_addr, 0x4e21, 0x0, 'rr\x00', 0x1e, 0x0, 0x7c}, 0x2c) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) (async) r3 = socket(0x1e, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) (async) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="ca", 0x1}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0xe803) (async) accept4(r5, 0x0, 0x0, 0x80000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) close(r4) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYRES32=r2, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) 31.78020267s ago: executing program 3 (id=2193): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000004) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1600000000000000080000000200010000010000", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB="000000a725f20a332870074544a2eb61066b72fe2501d96a6000feffffff00"/50], 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000b500000000000a180000000636740400000000000000000200fffe040004801400000011000100000000cd586403189384874800000000000000000a"], 0x40}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r6, @ANYRES16=r7, @ANYRES32=r12, @ANYRESDEC, @ANYRESDEC=r5, @ANYBLOB="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", @ANYRESDEC=r11], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) connect$802154_dgram(r5, &(0x7f0000000340)={0x24, @none={0x0, 0x2}}, 0x14) socket$unix(0x1, 0x7, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400e044}, 0x0) r13 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r13, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x13}, 0x4e20, 0x3, 'none\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$802154_dgram(r2, &(0x7f000000b8c0)={&(0x7f000000b800)={0x24, @short={0x2, 0x2, 0xffff}}, 0x14, &(0x7f000000b880)={0x0}}, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan1\x00'}) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)="b8", 0x1) 31.005587028s ago: executing program 9 (id=2200): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x96}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x100}}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x7b, 0x0, 0x53, 0x1}]}, {0x0, [0x61, 0x6d59c4b9cd2bba59]}}, &(0x7f00000002c0)=""/98, 0x44, 0x62, 0x0, 0xffff02ab}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x11, 0xffffffffffffffff, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 30.858628742s ago: executing program 9 (id=2201): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x18, 0x80000, 0x3) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket$isdn_base(0x22, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x4c, {0x2, 0x0, @multicast1=0xe000cc02}}) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x1, 0x8, 0x4ccf, 0x3}, 0x8) r4 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x20040000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x1}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000900000004000000e4ff000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000200)=r7, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r5}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000300)={'gre0\x00', 0x0}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r8}, 0x38) socket$vsock_stream(0x28, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) unshare(0x42020000) 30.126361239s ago: executing program 9 (id=2202): ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000001000000fe8800000000000000000000000001010000000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000078ef00000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003300000000000000ffffffff0000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003300000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00000000330000000000000000000000000000000000000000000000000000000000fe0000000000000000000000000020010000000000000000000000000002000000006c0000000200000064010101000000000000000000000000000000000400000000000000020000000800ddde841cf1d2819c0000ff01000000000000000000000000000100000000330000000000000000000000000000000000ffff0a"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c000180090001007866726d000000001c0002800800024000000005080001400000000205000300010000000900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x3c, r4, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x10000002}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x84, r4, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x44, 0xa8, @random="890d85b8c1953152034b49b9f134057b6fb8f7ad199c7d5dc77a413525bdd7cb476c938cf1afd5632bf3fc52627f051852c6887e935562b5cde8b2225195ffd9"}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040000) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x2c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ff020000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000900)={{0x84, @private=0xa010101, 0x4e23, 0x4, 'none\x00', 0x11, 0x3, 0x5e}, {@remote, 0x4e21, 0x1, 0xfffffffb, 0xfffffffe, 0xf}}, 0x44) ioctl$FICLONE(r7, 0x40049409, r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000010000107000040000000001a0a0000000600010011"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r6, r9, 0x25, 0x2, @val=@tcx}, 0x1c) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r11 = socket(0x5, 0x4, 0x2) getsockname$packet(r11, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000980)=0x14) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x64, 0x10, 0x437, 0x3, 0xffffffff, {0x0, 0x0, 0x0, r12, 0x51b4b}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r12}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x48800}, 0x4) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername$tipc(r11, &(0x7f0000000000)=@id, &(0x7f0000000040)=0x10) 29.758178149s ago: executing program 9 (id=2205): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x771e, 0x6, 0x5, 0x3, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1b343}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0xc0, 0x1, 0x3, 0x410, 0x1, 0x3, '\x00', r2, r3, 0x2, 0x0, 0x4, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000d7cabbd408e5d102ad0e10085c52578edb0f5871e12a85ab977513a66a5f8b4bb8d8101aada233b5c89fd56c02795a51f578d53957c8c6e34f0f1c0591329c0dc1d614c1ae202fa97eb22c717c70093d210d650bad3060098c97ac338f13297fecb8dcd999a309df98629b87b8eea59c831677e0bcd4e86aba595705d637e50bfd2710294625374cfc818695e8ce585efdb9a085f32191ce4d37dc50eb2c4668bb732abec4bf314d1c7a5618280b00c5d2819de4ab793b1127cd001a999d02fa2aab3fda8bc389c40deea1daebd760", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r8}, 0x10) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/73}, 0x20) 29.531271814s ago: executing program 9 (id=2207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010080fb05000000000000000100000005002f000000000008000300", @ANYRES32=r4, @ANYBLOB="08000b0009000000050038000000000005002e000100000005002f000000000008003a00ebe6000008000600", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x4000020) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) (async) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket(0x1a, 0x3, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000840)={0x42, 0x3, 0x3}, 0x10) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\a\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r9, @ANYBLOB, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000003000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r6}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_ifreq(r7, 0x8991, &(0x7f0000000200)={'netdevsim0\x00', @ifru_mtu=0x5}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000160700000fff07003506000002000000170600000ee50000bf250000000000003d350000000000006507000002000000070700004c0001000f75000000000000bf54000000000000070400000400f9ff3d3501000000000095000000000000000500000000000000950007000000000001722fabb733a0c857c7c45402000000a2d23da04d1ffc187fa130c7267c2de00435fd233cc0f0d9b2c3127c46b0f408398d09ee4dc258d726eae098804de25df627a64ac7efde50fd7f1dd5b17ed764c33b06598bae66ea38541a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d8a4b6e6155cecc13a5ddfab726eca91bd5fecb254ab358488c400330171128be291297947d474c570a385a459db8e7ada8ee987cc0000f6aae6a2213f4bb7b72ee19baaa6496c921b500fab987b62bbfd769664875469f58151b5ba0e4b84ea6500aeae078084123b254aeed0055787c01db742ed418ff76ee08d6fe0cc780a1005da7b778501e12cd7a0bb3780196d1fb84e6c12dddc60addc75a1f880bd58e7d1056a4d177e0067aa7c5ec09e1b762390a4f38d15794e698611b97a1bc9bc62513ad5ba767998919ccb61028200000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r12) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x0, &(0x7f0000000180)=0x8, 0x4) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) 29.087274274s ago: executing program 9 (id=2208): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)="76d8318f947da4a9d5b73d5ae3a490632b5d3b965af2f5eb7f7d178d07567ed83bd8355a9be7471064bdd2d5ed408b34d99a4a3dda88f3f75d8db356862c369b911efeed1ac30719e00e000000b9246bacc6269b87b92686365ef26ab9ba2d56420e5660a6e1a4f9", 0x0, 0x8}, 0x38) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x40, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6f}, @SEG6_ATTR_SECRET={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES16=r2, @ANYBLOB="01000000000000000000010005000500070000000000080009000300000014002000ff000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x60008001) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="08000000000000000000000000000000000000000000000000000000a125726a4289ac165f1daa0c58397640d566d7f197f826335b88d5be873f6327781958b248aeb8c1c9dd504485dbbae5e6bbdaec286738c64fd658dd5daeccf7cb7f5de84a5a831fa25a9d9bc18ba238034aed641a7b565e521959af7b9eb5de6bca3a30befa53bc1f3533f2796642d7af364bb0d393fd1149"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="04000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYBLOB="677d575c6a1236d0440b0c802537134fc6ce7b3073671d8b86b39c2e62012a7813deb3ee4d566644ef2560cef7961b3e7937ad715819a4a0e6466613517c398f10a5dec1adeb68f53509596269b8e6036af1e224c648b436ed6d888769d458d6b6de3ba966146a15042eff004f24d27e5fc823ad270f02a12778331c04dafdf285a7bd927fef217e776facd4ee595c97da7379273990147090f2a5b648d38c81f183c0dc3ed96cd62bbea094275ce5c0d7709ef1737fcdcb189e6427a53fabb343", @ANYBLOB="0000000000000000b7080000290200007b8af8ff00190000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000078dbb0297c18f4bcaf1cee7a35867af091511a170e3fd1a4d757083857e98db4a148bdd0f28185cf5d7d7f0fd0a569c163ab539dad6c7140b10b4fa74c39a3584ba37eb7c4e8cdcaa706d3e373f4d1e5211bb7cace9ee82c28a89db9e0cd1b0853a98d34f954f", @ANYRES32=r5, @ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000500)={0x0, @dev, @multicast2}, &(0x7f0000000540)=0xc) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', r7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x10) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r11 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32001200000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r4, 0x0, 0x1, 0x8, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={@map=r11, 0xffffffffffffffff, 0x17, 0x1, r12, @void, @value=r12, @void, @void, r14}, 0x20) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r15}, 0x10) 28.198848366s ago: executing program 41 (id=2108): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe90, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) vmsplice(r0, &(0x7f0000000400)=[{&(0x7f0000000100)="ecb758202a1de49f7404058a89ef0c05554dd33eebe7c2e7c00910d6c00f9045444ad41e00328eebab3ec33749e4187bf75cf8148dbc0c61af61df92293e27d11c3262425760ba6af9b2e3ae0158ef7c8a448c63bb2e18e8c863e3c18dc8c0ba8334a87601ee2928241db7392999c6cf5bac6efa4fefd9ac701ae1e07025fbf0b1d23bbe0dcabe540c88aa44956012bf62bcd2b967b44ae5af71dee94bc518f16d8547866c1aadc91fcfe7ae2d97354c2119ae266f2e176d9f38fbbf66e805f7218ec2820d42a5b4b28caa9834bb2cc9d2e791e2203a1baf110e4d12be4ad42ad00b660759ba", 0xe6}, {&(0x7f0000000200)="cb46e0da73bef8b9ab28b0cea3873a6077bd9bb05b41dd5a2ea2398c14ad9beb1bee9a3a70e1bc495b1fd93acd87599d4eef6b659b824e907167347dc3c629f6331a45269baf26c3a798de7898569a4f3f312d3c25f240ea2d4c8ea221408c4f0a9c07985620c483c0283e1ee279", 0x6e}, {&(0x7f0000000080)="66514e786ab8885219c3f48ec2e818d52abd", 0x12}, {&(0x7f0000000300)="45788ff57f29541cf0f452598e834ea7a6436191711de231f11c055be03d2732d291fa59073709a6b1b7f5890f482366004ce14f7a9a914a56a41be623e47c7c53b91886f0897b627081aa03dd76054b0d956b817cfd1e9bde4e3287576bb6810a39e8563cca7e79c7186cb6243e4866092a83253f2536367e56716419d1b081db2d54b7ddfc688099e8f34270717f711f780e3adb2e9cb29afca30b3e988716bb66f0b6baf99c6695cd7955a4b70e9db7067e114fc1008b8910b0b7a22c68614a7da7c4af724979b578221ca560fa91a56ad2f4cc8c955e19df36d63e442280b21a862178f6a5adf7185b1577202a3c0d7bdce1", 0xf4}, {&(0x7f0000000280)="81ed", 0x2}], 0x5, 0x1) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000480)={0x2, 'xfrm0\x00', {0x4b39}, 0x8}) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x6a040000) socketpair(0x3, 0x100000005, 0x0, &(0x7f00000002c0)) 16.701336722s ago: executing program 42 (id=2193): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000004) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1600000000000000080000000200010000010000", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB="000000a725f20a332870074544a2eb61066b72fe2501d96a6000feffffff00"/50], 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000b500000000000a180000000636740400000000000000000200fffe040004801400000011000100000000cd586403189384874800000000000000000a"], 0x40}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r6, @ANYRES16=r7, @ANYRES32=r12, @ANYRESDEC, @ANYRESDEC=r5, @ANYBLOB="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", @ANYRESDEC=r11], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) connect$802154_dgram(r5, &(0x7f0000000340)={0x24, @none={0x0, 0x2}}, 0x14) socket$unix(0x1, 0x7, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400e044}, 0x0) r13 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r13, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x13}, 0x4e20, 0x3, 'none\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$802154_dgram(r2, &(0x7f000000b8c0)={&(0x7f000000b800)={0x24, @short={0x2, 0x2, 0xffff}}, 0x14, &(0x7f000000b880)={0x0}}, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan1\x00'}) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)="b8", 0x1) 13.889075762s ago: executing program 43 (id=2208): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)="76d8318f947da4a9d5b73d5ae3a490632b5d3b965af2f5eb7f7d178d07567ed83bd8355a9be7471064bdd2d5ed408b34d99a4a3dda88f3f75d8db356862c369b911efeed1ac30719e00e000000b9246bacc6269b87b92686365ef26ab9ba2d56420e5660a6e1a4f9", 0x0, 0x8}, 0x38) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x40, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6f}, @SEG6_ATTR_SECRET={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES16=r2, @ANYBLOB="01000000000000000000010005000500070000000000080009000300000014002000ff000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x60008001) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="08000000000000000000000000000000000000000000000000000000a125726a4289ac165f1daa0c58397640d566d7f197f826335b88d5be873f6327781958b248aeb8c1c9dd504485dbbae5e6bbdaec286738c64fd658dd5daeccf7cb7f5de84a5a831fa25a9d9bc18ba238034aed641a7b565e521959af7b9eb5de6bca3a30befa53bc1f3533f2796642d7af364bb0d393fd1149"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="04000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYBLOB="677d575c6a1236d0440b0c802537134fc6ce7b3073671d8b86b39c2e62012a7813deb3ee4d566644ef2560cef7961b3e7937ad715819a4a0e6466613517c398f10a5dec1adeb68f53509596269b8e6036af1e224c648b436ed6d888769d458d6b6de3ba966146a15042eff004f24d27e5fc823ad270f02a12778331c04dafdf285a7bd927fef217e776facd4ee595c97da7379273990147090f2a5b648d38c81f183c0dc3ed96cd62bbea094275ce5c0d7709ef1737fcdcb189e6427a53fabb343", @ANYBLOB="0000000000000000b7080000290200007b8af8ff00190000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000078dbb0297c18f4bcaf1cee7a35867af091511a170e3fd1a4d757083857e98db4a148bdd0f28185cf5d7d7f0fd0a569c163ab539dad6c7140b10b4fa74c39a3584ba37eb7c4e8cdcaa706d3e373f4d1e5211bb7cace9ee82c28a89db9e0cd1b0853a98d34f954f", @ANYRES32=r5, @ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000500)={0x0, @dev, @multicast2}, &(0x7f0000000540)=0xc) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', r7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r10}, 0x10) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r11 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32001200000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r4, 0x0, 0x1, 0x8, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={@map=r11, 0xffffffffffffffff, 0x17, 0x1, r12, @void, @value=r12, @void, @void, r14}, 0x20) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r15}, 0x10) 8.314906348s ago: executing program 5 (id=2339): r0 = socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x46, &(0x7f0000000ac0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x73, 0x1, '\x00', [@ra, @ra]}]}}}}}, 0x0) r1 = accept4$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10, 0x80000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000004c0)=[@in6={0xa, 0x4e20, 0xc, @mcast1, 0xffffffff}]}, &(0x7f00000003c0)=0xfffffffffffffed5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000040)={r4, 0xf}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000140)={r4, 0x10}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) close(r0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.idle_time\x00', 0x275a, 0x0) writev(r5, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd5896", 0x84}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000280)={r4, 0xa7, "0dd21a64f80b0f48be55697709a7a4769bce11ac0a594f408537e22070c7ea882fcd2415acf427b2e25fb6134f703b207d9322b0db93fa9f856d0da2dbaf1e44f92ebace660dee10eabb2d0a90d321f9afb7aa251102be34767a5c3b59fe8e0e282f02ca63a827037b83a924368fbce990892488fa461b4939197de70c5b90fe04367601bf90fe62b721103552740fa4834fc0ef582fd49211909f49de459fb87a67ad1eaf43a3"}, &(0x7f00000001c0)=0xaf) ioctl$SIOCGSKNS(r5, 0x894c, &(0x7f0000000340)={'ip6_vti0\x00', 0x600}) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r6, 0x11, 0x1, 0x0, &(0x7f0000000080)) 8.20166986s ago: executing program 5 (id=2340): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@o_path={&(0x7f00000024c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x11, &(0x7f0000000080)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x6a}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x1}, {0xffff, 0xa}, {0x1}}}, 0x24}}, 0x80) 7.847955351s ago: executing program 5 (id=2343): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010004b0400400000fcdbdf257a000000", @ANYRES32=r4, @ANYBLOB="00900200000000001ca775a1ad01b0f99aa2495d926f3bc5d20012800b00010062726964676500000c0002800800030017000000c5618c080d17f0e9b224fbf7d4be6371cfc3f98610dc00cc79f660"], 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) sendfile(r5, r5, 0x0, 0x856) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x19, 0x3, &(0x7f0000000500)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0x6}, @alu={0x4, 0x1, 0x6, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc}], &(0x7f00000002c0)='GPL\x00', 0x4d, 0xbc, &(0x7f0000000300)=""/188, 0x40f00, 0x2a, '\x00', r1, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[r2], 0x0, 0x10, 0xd}, 0x94) sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x20, 0x3fa, 0x10, 0x70bd26, 0x25dfdbfb, {0x1, 0x1, 0x0, 0xc13a82acbb82f9bc}, ["", "", "", "", "", ""]}, 0x20}}, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000240), &(0x7f0000000400)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r11 = accept4$alg(r10, 0x0, 0x0, 0x0) sendmmsg$alg(r11, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r11, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000000640)=""/82, 0x52}], 0x2}, 0x40}], 0x1, 0x102, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r9, 0x84, 0x4, &(0x7f0000000800), &(0x7f0000000840)=0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r7}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x5, 0xc, 0x80000000, 0x1}, 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000005000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000cb0c00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r13, r12}, 0x4) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$FIONCLEX(r14, 0x5450) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0) socket$kcm(0x10, 0x2, 0x0) 6.821789615s ago: executing program 5 (id=2349): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x851, 0x8000000000000001, 0x100000001}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000043c0)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x9, 0x8, 0x4, 0xfffff43e, 0x97}, &(0x7f0000004480)=0x98) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710429000000000095000000"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x851, 0x8000000000000001, 0x100000001}) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000043c0)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x9, 0x8, 0x4, 0xfffff43e, 0x97}, &(0x7f0000004480)=0x98) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710429000000000095000000"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) (async) 5.853239365s ago: executing program 5 (id=2353): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x80000000000000a, 0x2, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="ffefffffffffaaaaaaaaaaaa8100280088476e74dd16002c0600fe8000000000000000000000000000bb000000000000000000000000000000010000000000000000000000000000000200004e2400004e240000000300000003000000000200000000000000"], 0x66) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) r6 = epoll_create1(0x0) unshare(0x2c020400) (async) epoll_wait(r6, &(0x7f000000affb)=[{}], 0x1, 0x7fff) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000240)={0xa0000004}) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)={0x14c, r4, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "dd31f64830b642c0682ca5f816c56fc0780ea16fec25a8201b1b"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "caf263cba9b8e50a4f3c71b5b7e388d984404dfc57dad71437128b79308f2a"}}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x14c}}, 0x4040800) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket(0x10, 0x3, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00'], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES8=r7], 0x64}, 0x1, 0x0, 0x0, 0x200040c1}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r8], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) sendmsg$inet6(r1, &(0x7f00000013c0)={&(0x7f0000000040)={0xa, 0x4e21, 0x2, @mcast2, 0xb5}, 0x18, 0x0, 0x0, &(0x7f00000012c0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}, 0x100) 5.46222274s ago: executing program 0 (id=2355): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@RTM_NEWMDB={0x17, 0x55, 0x1e5, 0x7, 0xffffffff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@in6_addr=@private1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48c0}, 0x40004c0) sendmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001a00010000000000fddbdf251c000000000000000000000008000100c5b8bb"], 0x30}}, 0x20000800) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 5.235231263s ago: executing program 5 (id=2357): unshare(0x6a040000) (async) socket$l2tp(0x2, 0x2, 0x73) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x2, 0x7, 0x14, @dev={0xfe, 0x80, '\x00', 0x1e}, @loopback, 0x7, 0x8, 0x400, 0xb94}}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) (async) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @private=0xa010102}, 0x10) r5 = accept$inet(r1, &(0x7f0000000700)={0x2, 0x0, @dev}, &(0x7f0000000200)=0x10) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000780)={{0x2, 0x4e24, @private=0xa010101}, {0x1}, 0x4, {0x2, 0x4e23, @local}, 'veth0_vlan\x00'}) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0xfffc, @local}, 0x10) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000050028bd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="0500000020410000140003006e657464657673696d30000000000000200016801c00018018000c8009"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002", @ANYRES32, @ANYRESDEC=r3, @ANYRESDEC], 0x0, 0x1a}, 0x28) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreq(r7, 0x0, 0x24, &(0x7f00000001c0)={@dev, @dev}, &(0x7f0000000240)=0x8) (async) socket$kcm(0xa, 0x5, 0x0) (async) r8 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="6e07dd8c381672e68423235d887c8a45a716f4038922535b918018a48bc5d210e8b53657025549c3e05582b0a8fb9610ca9fd590850a1a7507dda75a1edbf0df71cfb8421a111db68cf8ecee53205fa5d3d23b67e08c09b7cd74301f8d092e89cfe687b6b189cbce059f5655e532e748a4002b6fa8f3c1cdcdb796fabe06abb9dd71dca8cbe08e2b859c99fa1e6fe2b75bfeaa8493850fa406709e1435fad91ab65fb659ada6812e4aa22dfbba3f5f13b7d9d435102f84f59e0a", 0xba}, {&(0x7f00000003c0)="04a2880a88529c58c3a783b4c3e3a16c5eb2d4a4fe6969e244325dca7de823ee08c70bb03a3396fbf83d65bcc267a56c0500447b6672497553b8aac3abbb368a9bf4ed305e52d12d73c3ead880dceb976961b4564b1fbe721095acda5dacf0379fa721155130f3ec6b6f79c0d2aa01325ac4b9", 0x73}], 0x1, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x1c0, 0xc000}, 0x38) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000b00)=@newtaction={0x13c, 0x30, 0x9, 0x3, 0x0, {}, [{0x128, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf8, 0x2, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file2\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file2\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xc4, 0x81, 0x5, 0x9, 0x5}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file2\x00'}]}, {0x8b, 0x6, "34cd612c7a0ab41aeee4f2749c717405930291dd10c14ec41a0491357d7c632f458556e624bdab00958fafb08c18760601b0943a67d82a91d915c3984342a367d3b2e58cea49cb7452d570292ec56138e6a1ba36da3d664c8523216a7b39db943810932dbdc81b60f442a6febd49c70976736c5a483baea68dd16a08fa7222f24f93b11f380ddb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}]}]}, 0x13c}}, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 5.147802163s ago: executing program 0 (id=2359): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8}) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40080) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000b80)=""/199, 0xc7}], 0x1}, 0x22) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080)={0xbf, 0x99, 0x15, 0x5, 0xff, 0x5, 0xfb, 0x8, 0xec, 0x2, 0x81, 0x84, 0x8, 0x5}, 0xe) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async, rerun: 64) r4 = socket(0x10, 0x3, 0x0) (rerun: 64) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) (async) sendto$inet6(r4, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) sendto$inet6(r2, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000300)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000680)={{}, r5, 0x10, @inherit={0x50, 0x0}, @devid}) (async) shutdown(r2, 0x1) (async) recvmmsg(r2, 0x0, 0x0, 0x20, 0x0) (async) shutdown(r1, 0x0) (async) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_emit_ethernet(0x0, 0x0, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040), 0x4) 4.580024531s ago: executing program 0 (id=2364): syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@multicast1, @in=@rand_addr=0x64010102, 0x4e23, 0x4da, 0x4e22, 0xb, 0xa, 0x80, 0xa0, 0x32}, {0x2, 0x4, 0x2, 0xc0ec, 0x5, 0x9, 0x24, 0xffffffff}, {0x81, 0x1, 0x2, 0x3}, 0xb148, 0x6e6bbc, 0x0, 0x0, 0x2, 0x2}, {{@in=@local, 0x4d2, 0x7b}, 0xa, @in=@private=0xa010100, 0x0, 0x7, 0x2, 0x0, 0x1, 0x6e}}, 0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a0008"], 0x3c}}, 0x40000) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x3) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x200008d4) (fail_nth: 2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 3.963510824s ago: executing program 0 (id=2367): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="3000000011140100000000000000000008004b0013000000080001000000000008004f"], 0x30}}, 0x40) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000080)="3c7ff6779d54072c3d456c08c51b9324340ee2b8b2ea20fb61514bc2c191811c51d0a6b1e7c6fee4a1c6cce76d5c6fbc64f9c15dc21d9ab68b7954f6e38c047d86f239fd4342f72d1f806928265e41593dd64989aaf8fbdd5ffadcf7f9d43a6cb55a0fb4af25f8069cb63290eb9603ae9341993dce8272f1fb5a5a570cbb5094c79f32bc60159df46c70ca83", 0x8c}, {&(0x7f00000001c0)="d208019af2a5c216c52b31516a40f4435616033c06586b403d9d6178b1efae9ce201621e5e27b40436216705154604d60264ae5f5ad3fc2aea3bc4d553d6b5b292a6ed5e9d59994e8711318e8edd803459fe01671211f5ce64b43252eeba02a9a8c7", 0x62}, {&(0x7f0000000240)="477aa07855980ab92aa87a9a1cf07adfdaceffa27993c3a001157f90e5b6f44fda73abd5afbbd9c556f44aa026b256c350c5f0e90450cc1de76f5771456675137ac5deb5942403aa02dc4977a8636883f9f15932c3bf58f64e3644c7831d022ef6194a7bd855ad87879228f9a011b2898bd0463450643fc535ffa94a3fdf371c0aeec5b84f6a281970c034558948094dc01d763f4de1f6f171bcc38544c9b9e6261f36a6b7c64fa5d10dcd4954f54c3b07f529984a4019d35a99f072197c3b60f22aab24f78e050c7c0e21aeb2e344d762f7d8daf08d07b43822d0054b50f306842e594f0aff8dd4e16b9cacd4c34a1f060e", 0xf2}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000000000)="e61d3644051d5bc2195836e5550fbab2a9b3f7a2c30a8d94104dc1", 0x1b}, {&(0x7f0000001340)="69f29dcd8daaf60b085b83b08d5ee951e55cad681d813aa463", 0x19}], 0x6, &(0x7f0000001400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_ttl={{0x14}}], 0x30}}, {{0x0, 0x0, &(0x7f0000001440), 0x0, &(0x7f0000001480)=[@ip_retopts={{0x5c, 0x0, 0x7, {[@end, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x44, 0x40, 0x1, 0x4, [{@remote, 0x8}, {@private=0xa010102, 0xe2}, {@empty, 0x1}, {@multicast2, 0x6c144f1e}, {@broadcast, 0x8}, {@multicast1, 0x6}, {@loopback, 0x9}, {@rand_addr=0x64010101, 0xc}]}]}}}, @ip_retopts={{0x10c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0x4a, 0x3, 0x2, [{@empty, 0x80}, {@local, 0xe866}, {@multicast1, 0x1de604f8}, {@loopback, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@empty}]}, @end, @lsrr={0x83, 0x2b, 0xea, [@private=0xa010102, @rand_addr=0x64010101, @remote, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty, @empty, @local, @local]}, @timestamp_prespec={0x44, 0x3c, 0xe3, 0x3, 0x5, [{@empty, 0x80}, {@remote, 0x4}, {@private=0xa010102, 0x2}, {@broadcast, 0xfffffffb}, {@local, 0xc45}, {@private=0xa010100, 0x849}, {@multicast1, 0xb}]}, @timestamp_prespec={0x44, 0x44, 0x45, 0x3, 0x5, [{@remote, 0x6}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}, {@private=0xa010101, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0xa2ab}, {@rand_addr=0x64010101, 0x7}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x1ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @lsrr={0x83, 0x7, 0x2e, [@multicast1]}, @cipso={0x86, 0x15, 0x0, [{0x2, 0xf, "742723a539179486f5411ce53a"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x1b}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x1f0}}], 0x2, 0x4000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x38, 0x301, 0x70bd27, 0xfffffffc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 3.875157584s ago: executing program 0 (id=2368): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) listen(r2, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x1, 0x100003, 0x7ffffffd, {0x0, 0x0, 0x4}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0x4, 0x24}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x4000080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r6, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r6, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r6, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) setsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f00000001c0)={r7, r8/1000+10000}, 0x10) write(r6, &(0x7f0000000000)='\"', 0x1) recvmmsg(r6, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x44, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}}, 0x24000044) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000200)=ANY=[@ANYBLOB="e8010000", @ANYRES16=r9, @ANYBLOB="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"], 0x1e8}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x1, 0xfffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xddf0, 0xfffe]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 3.865060025s ago: executing program 6 (id=2369): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f00000002c0)="a8f0a41a27961e364eaa9eca01bf464e5f5c245f01a86472cba7334d7e2bf070ce1cab1c65f844c570971999233026581d1e8d34f2ee725db3a099d2f85e779ba8eaea9028d3ff101c00224836a1555c3ab05e67653547a7d3db0a1da7a279be85e306cf4f9b32454ec115007d3e7115ac7f48f8be37b777765bc8b7efbdab583b07bfcde0ef130f21912ee605da760bf9695b79256c0b", &(0x7f0000000000)=@tcp}, 0x20) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000380)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb4) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x10, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="91104f000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r2}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 3.100854908s ago: executing program 6 (id=2376): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000001540)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xa00}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x5, 0x0, 0xb, 0x2}, {}, {0x4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x8, 0x1001, &(0x7f0000002e80)=""/4097, 0x0, 0x9, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket(0x9, 0x803, 0xeac4) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x9, 0x81}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r9) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket(0x2, 0x2, 0x0) bind$inet6(r12, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffff1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8f0}, 0x1c) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r11, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r13, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x200003b2, 0x0, &(0x7f0000000380)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db6b2ebdb7da4818a778bb7c2e4f", 0x0}, 0x50) socket$kcm(0x2, 0x200000000000001, 0x106) 2.347044767s ago: executing program 1 (id=2382): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_LOCAL6={0x14, 0x8, @empty}]}}}]}, 0x4c}}, 0x40) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3e8, 0x20, 0x70bd28, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 2.135686903s ago: executing program 1 (id=2384): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000a00000500150003000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400deef000008001b0000000000"], 0x30}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x20000804}, 0x0) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f60) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200087a31d66e3db9220056bc6302208d42363716172761c59c095d244ec36eb4a9c1d0c25f9dc473a02b270a2a503923821e7a79d714981f4e7a5377aacf3f641b47118e5ac1f24cbdc30b112549ef46242c7cf165bc0f1fad5db3206b3775ae8a30983e8c135fd5779feccf3a82b525d5de729c9478"], 0x17) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) sendmsg$inet(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) r7 = accept4(r1, &(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000340)=0x80, 0x800) setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, &(0x7f00000002c0)='\x00', 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3577], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f000000b440)=[{{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001740)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r9, 0xd}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000300)={0x0, 0x3, 0x1, 0x5, 0x82, 0xb, 0x8, 0x4e9, r9}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f0000000140)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x18}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="f91aba82d490761af2aee35066c28f94509d3500", 0x14}, {&(0x7f0000000380)="ad0f", 0x2}, {&(0x7f0000000440)="600fe0c45f24a0eeed954483f7e9efc0a09a7cb4a8e5af44947f3940e19102a87f2153aa70b19ed86a93f0abd06f", 0x2e}], 0x3}}, {{0x0, 0x0, &(0x7f00000012c0)=[{0x0}, {&(0x7f0000001080)="8374e5233945507d14d8c2d1a59cac681a14369316a6f556a16b2c0dab4852", 0x1f}, {&(0x7f0000000600)="054e65ebac44c4e6d6d7bb9e6f829f1ef099cb1ff49412", 0x17}, {&(0x7f0000000740)="b3369e", 0x3}, {&(0x7f0000001180)="68e104c744cec1345bd7dd1b812f58dd21fdc41b8f3602dc52811f05c48a470260d0b4d62316e47f2c02ffff", 0x2c}, {&(0x7f00000011c0)="fc7d59a7783d606fae2a1e0af0aa49b9cad13383fe9743203013bbcf1c5af22100f6819f5b1776d858a20484f31ed8f6cd0fa42eccecf6bff7f818425b8385036721b6d4a95b33b1c31c24fc7c23ffedf6c61a794cf14526c277b2d4297b3ea48d00d1b0e226e04c20ade01662a489c2ed51da4cacc53325ffe208617ae6a3ce3e1fe9ee723c9891d528e7177ef796603cc702ea059f20f7b9324f77fae3e4b2ea1ab8baac1ffa51180e30935ca0254df304649119df904df5330c256d71ea75ae2c8b63bb1d", 0xc6}], 0x6}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001380)="61ff198c", 0x4}], 0x1}}], 0x4, 0x48040) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x29, 0x82, 0x5, 0xff, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x3c20, 0x1, 0xfffffffc, 0x7f}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) bind$llc(0xffffffffffffffff, 0x0, 0x0) recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) recvmsg(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xa3) 1.998504164s ago: executing program 8 (id=2386): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x8, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00}, 0x94) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x2}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xf, 0x2010, r1, 0xebf67000) r5 = socket$kcm(0x2d, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e3, &(0x7f0000000180)={r5, r6}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x38, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xd}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x20044010) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 1.746869249s ago: executing program 6 (id=2387): r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "000001", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x8, 0x1, 0x3}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0300000000000000000000000400000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000aa97", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc0100000000000000000000000000010000000004000000000000002500000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d04b0000000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x13, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/13], 0x48) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x144, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x9c, 0x3, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x91, 0x2, "72b94441137553aa1af71fdfba097465b5ed2234cb525a370a61c900947fa423e462d92380f8391bc9f57cbef0554a54528623f17f699eb2e17ff96fd4b8a5661e6f476b62334c33a393eae7bfee3c1ae3d1cddb51aef3817292b6dfa014b966968831ec874c7d9a3672e5bb5587844ac35a6da9993fd7e3b5b876b2677d1cdf37986c3e8e688b1ca5cf7e3f79"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x74, 0x3, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x59, 0x1, "fad0a188603989541077891545179412320b72cad3959c587f9b0f496bdcd31168b0bd3991570f2c7719c557a1980b00ac623eaa6a2c21ec24fe65781cee6073133531fef85a117a7332a4810aaeb9aff0a2aec40d"}}, {0x10, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xa, 0x2, "023bd2fb2388"}}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0}, &(0x7f00000007c0), &(0x7f0000000340)=r3}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r4, &(0x7f00000004c0)}, 0x20) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x48046}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r8, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46054) 1.647264172s ago: executing program 8 (id=2388): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@routing={0x0, 0x6, 0x0, 0x1d, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @ipv4={'\x00', '\xff\xff', @remote}]}, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000080900020073797a31000000000900010073797a3100400000180003"], 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 1.469846948s ago: executing program 6 (id=2389): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0cac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x6}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xfffffffffffffff4}, @TCA_CAKE_TARGET={0x8, 0x8, 0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48884}, 0x4090) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl0\x00', r4, 0x29, 0x1, 0x7, 0x3, 0x3, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x20, 0x574}}) 1.245493981s ago: executing program 1 (id=2390): unshare(0x6020400) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x3ffff, 0x0, 0x90, [0x200000000100, 0x200000000130, 0x200000000160, 0x200000000100, 0x200000000100, 0x200000000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) unshare(0x2e000400) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180100002e00010000000000ffdbdf250501f2800c00180008ac0f000000000014000a0000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd0400e900000000230d09595255dc2c62468576e644c9b34f2b421675e5610c95dfffe09d1b545c28bffded7315e6bd93f3437d599661d33bf2488b9710a8bba393acdbb380a8d95e02416c61ccee9471dc7b47c7f807fca081c2eaf8bc5fd607d3b16ea2a26da94d59e5f61ae0777240850ce5f323ee41ff6e86c852c350f73da72e93b573cd"], 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) 1.143957094s ago: executing program 6 (id=2391): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000400)={0x42, 0x9}, 0xffffffffffffff64) r3 = epoll_create1(0x0) epoll_pwait(r3, &(0x7f0000000000)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x7f]}, 0x8) close(r3) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000000a06030000000000000d00000a0000050900020073797a31000000000500019e000000b41d00a1b8080f0a46dd8d1f01abc2263c867b5dc49d77f2605879b65a9995886b6c5182d03561ee7646f3b735745741042148bc9fc25f782a2dec3400"/113], 0x34}}, 0x9f15a82143cf0dd0) bind$tipc(r2, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @loopback, @broadcast}, &(0x7f0000000240)=0xc) socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r7}, 0x18) nanosleep(&(0x7f00000001c0)={0x77359400}, &(0x7f0000000040)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000001, 0x20012, r8, 0x0) unshare(0x6a040000) 889.742104ms ago: executing program 1 (id=2392): syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@multicast1, @in=@rand_addr=0x64010102, 0x4e23, 0x4da, 0x4e22, 0xb, 0xa, 0xe0, 0xa0, 0x32}, {0x2, 0x7f, 0x2, 0xfffffffffffffff3, 0x5, 0x9, 0x24, 0xffffffff}, {0x81, 0x1, 0x2, 0x3}, 0xb148, 0x6e6bbc, 0x0, 0x0, 0x2, 0x2}, {{@in=@remote, 0x4d2, 0x7b}, 0xa, @in=@private=0xa010100, 0x0, 0x7, 0x2, 0x0, 0x1, 0x6e}}, 0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a0008"], 0x3c}}, 0x40000) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, r5, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_VERSION={0x5, 0x6, 0xff}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) close(0x3) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r9, 0x28, 0x8, 0x0, &(0x7f0000000400)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009fbffffff000000000073827a310000000005000100070000001c0007800c00018008000140ac1414bb0c0002800800ef407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x200008d4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) 728.3508ms ago: executing program 8 (id=2393): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket(0x1d, 0x2, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0xa, 0x3, 0xff) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x2000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x2c}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r6, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x401, 0x44000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x2}, 0x50) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000140)={0xa, 0x4e23, 0x800, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x21}, 0x40c0) 498.238936ms ago: executing program 1 (id=2394): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00Q', @ANYRES16=0x0, @ANYBLOB="010000000000fcffffff08000000180001801400020073797a5f74756e000000000000000000100002800c0003800800018004"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r5}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r4}, &(0x7f0000000140), &(0x7f0000000700)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r3, 0x80646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xf}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000690}, 0x20048040) 485.864505ms ago: executing program 8 (id=2395): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) r1 = socket(0x2b, 0x1, 0x3) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000040)=@fragment={0x3b, 0x0, 0x8f, 0x1, 0x0, 0x0, 0x66}, 0x8) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00012dbd7000fedbdf", @ANYBLOB="78be"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x40000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x491b, 0x4) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x3e, @ipv4={'\x00', '\xff\xff', @empty}, 0x2e}, 0x1c, 0x0}}], 0x1, 0x4004800) 340.165037ms ago: executing program 1 (id=2396): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xff00000000000000}, 0x800, 0x0, 0xff, 0x3, 0x3, 0xffff}, 0x20) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000101040100fa000000000000000100040005000100010100003be09bdd1f79a0b241c1e0fe929002123f8dc01e25cb50d18e58bdab"], 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="88001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000140)=0x1, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000008000000000000"], 0x0, 0xf2, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2d18b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) writev(r3, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000080)="f6893b79c2e5a142b29b8065", 0xc}], 0x2) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000180)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000280)) recvmmsg(r4, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000640)={0x3, 0x8000}, 0x4) tee(r5, r5, 0x5, 0x2) r6 = socket(0x1d, 0x2, 0x6) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, 0x0, 0x0) 275.956577ms ago: executing program 8 (id=2397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r5, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x1ec, r6, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x1a}}}}, [@NL80211_ATTR_CQM={0x70, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x53f}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0xffff, 0x41, 0x8000, 0x9, 0x736, 0x8000]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x40}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x595}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x100}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xe694}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x200, 0x9, 0x96c, 0x9, 0xfffffffb]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xad}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x9, 0x8, 0x7fffffff, 0x0, 0x5, 0x80000000, 0x5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x37}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffff0001}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x10}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x59}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7ff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}, @NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x800, 0x6, 0xa0b, 0xffff, 0x9, 0x6, 0xe, 0x0]}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xd}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1af}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x40}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x7, 0x3, 0x9, 0x1, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8000}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1}]}, @NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x22}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0xc, 0x3, 0x7c, 0xf5, 0x1, 0x2]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x58d}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3eb}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x8]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffff7}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x6, 0x0]}]}, @NL80211_ATTR_CQM={0x4}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000010}, 0x81) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 139.657323ms ago: executing program 6 (id=2398): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYBLOB="845a7cb504ac71ddfcdf31a33d55cb599c31721bef653b4f1ae3e2ee1843452f07b1bab1f307d6d1f3dfabec57a5e645d8dabf548027dd7ae8ecb295466013a064e9134608f9185ede7ceae875", @ANYRES32=r1, @ANYRES64=r1, @ANYBLOB="925d35e89c6b71b06c71b15706ed346cc50a9c11ad", @ANYRES8=r1, @ANYRES16=r0, @ANYRES32=r0, @ANYRESOCT=r1, @ANYRESHEX=r0], 0x3c}}, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES32], 0x2c}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00'}) socket$rds(0x15, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r6, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) r7 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000100)={0x30000000}) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010829bd7000000000000700000005900983d900972cd0160800"/42], 0x30}}, 0x0) sendmmsg$inet(r0, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004) 48.399482ms ago: executing program 0 (id=2399): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @broadcast, 'team0\x00'}}, 0x1e) (async, rerun: 32) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) (rerun: 32) recvfrom$inet6(r1, &(0x7f0000000040)=""/99, 0x63, 0x20, &(0x7f00000000c0)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x7}, 0x1c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000100)=0x8, 0x4) r3 = socket$kcm(0x29, 0x2, 0x0) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@private1, 0x77, 0x2, 0x1, 0x9, 0xc1, 0x4a8}, &(0x7f0000000180)=0x20) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10) (async) r4 = socket(0x9, 0x1, 0x21) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x8, 0x4, 0x9}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000280)=r5, 0x4) r6 = accept4$tipc(r4, &(0x7f00000002c0)=@id, &(0x7f0000000300)=0x10, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r6, 0x10f, 0x82, &(0x7f0000000340), &(0x7f0000000380)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x99, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@getnexthop={0x3c, 0x6a, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NHA_OIF={0x8, 0x5, r7}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x404c044) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000800)=0x40000, 0x4) (async) getsockname$netrom(r4, &(0x7f0000000840)={{0x3, @null}, [@default, @null, @netrom, @bcast, @remote, @default, @default, @bcast]}, &(0x7f00000008c0)=0x48) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$inet6(r4, &(0x7f0000000900)="4001091ad3f1ae62966806acf0938bd2a6771732c1a221c5e5f81eecf9f97f2a228393251a05831c4be53b8bef1a2ea934bb1d7af7463d3445cbf920322fba3c6e94856c1d8a1d94a46ceff84c4682ff954ba7abd56cc52aab7a7fc2121c20df503bf31e0df43a01363ea22e93affe52501cef879a9f913b4feac168deabf04e2f3335010719ced96228fff158a785c9531098e9201fbf79f9acb019ef87969c3ac59b1bc552cfc4c5ab24ecfb933926bfed65d1c7b780f081b093aac08e7f628e33f8f99e148603d2594389f66b80eae7dbea73532864648a3865430a5bc75138a7a466d391ee38ce915d", 0xeb, 0xc0, &(0x7f0000000a00)={0xa, 0x4e20, 0x4e80, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) (async) sendto$isdn(r3, &(0x7f0000000a40)={0x4, 0xfffffffd, "9b78024f543fee6b364702de3df531b81faff8849b1ead46a481eb1f244d33b8afdbb276b3c0c3362eab70d50dd9dfbde6876b79eb42b203c7159d1a123aa9a38fc1915330618212c70070328ea4a051212898058943cb871898a4ff223c22c881f5a1d43eac52d76994c9ac4e91cd73b3079afcd17b6da1d353061f253fce6e8f78460cf4a82e7e91714f3c65454fe78877f079a578f701cd1350a76645bd1e91433d596fe6f6d666b56863ebb8355a32"}, 0xb9, 0x800, 0x0, 0x0) (async) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000b00)={0x1}) (async, rerun: 64) r9 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCOUTQ(r9, 0x5411, &(0x7f0000000b40)) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r10, 0x29, 0x45, &(0x7f0000000b80)={'ah\x00'}, &(0x7f0000000bc0)=0x1e) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c40), r4) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c80)={0xcc, r11, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000880}, 0x40040c1) sendto$inet(r2, &(0x7f0000000e00)="570b86e9a804eb615ce292922f679cc27e9d24a2195b24ff9cf0e7fcc3469029545e089028f578cf2e9a74b0666dedc5e3", 0x31, 0x40, &(0x7f0000000e40)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) 0s ago: executing program 8 (id=2400): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000200000000020000000000000602000000020000000000000e0300000000000000000061"], 0x0, 0x54}, 0x28) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) socket$tipc(0x1e, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="1c0c010700000000ff02000000000063c4fd1553144c71c4b9bd625c000000000001fc020000489d0a7a4713e9cfa204b4000000007a88000000000000ff010000000000000000000000000001fe880000000000000000000000000101fc00000000000000000000000000e7ffff1e0000000001000000000000002001a71ed77bcd03bebc061fae748f83e6873e9c48cc864cc449e2c31252fca80c94e9a29f7addf204f6c3473b95931c6e"], 0x68) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000d0000000000000000080000850000007b00000095000000000000000c0d9c64c0fcb9"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) r5 = socket(0x2a, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) kernel console output (not intermixed with test programs): .930255][T12128] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 279.018327][T12266] bridge0: entered promiscuous mode [ 279.029587][T12266] bridge0: port 3(macvtap1) entered blocking state [ 279.046825][T12266] bridge0: port 3(macvtap1) entered disabled state [ 279.053675][T12266] macvtap1: entered allmulticast mode [ 279.065029][T12266] bridge0: entered allmulticast mode [ 279.115201][T12266] macvtap1: left allmulticast mode [ 279.128788][T12266] bridge0: left allmulticast mode [ 279.143025][T12266] bridge0: left promiscuous mode [ 279.236936][T12267] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.293950][T12128] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 279.317604][T12128] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 279.370915][T12267] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.393655][T12128] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 279.447203][T12267] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.525024][T12267] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.714860][T12286] netlink: 'syz.6.1626': attribute type 83 has an invalid length. [ 279.752250][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.806394][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.818951][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.876544][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.053192][T12302] netlink: 'syz.5.1629': attribute type 13 has an invalid length. [ 280.115011][T12305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1630'. [ 280.155519][ T5832] Bluetooth: hci7: command tx timeout [ 280.175122][T12302] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.182571][T12302] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.301957][T12302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.326624][T12302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.456921][T12140] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 280.480507][ T12] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.489662][ T12] netdevsim netdevsim5 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 280.515658][ T12] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.524164][ T12] netdevsim netdevsim5 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 280.551382][T12140] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 280.569329][T12311] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1631'. [ 280.577951][T12140] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 280.592230][ T12] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.601135][ T12] netdevsim netdevsim5 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 280.609941][ T12] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.618604][ T12] netdevsim netdevsim5 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 280.630634][T12140] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 280.750219][T12128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.810985][T12128] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.852927][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.860272][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.911653][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.918923][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.941094][T12326] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1634'. [ 280.965184][ T5832] Bluetooth: hci8: command tx timeout [ 281.131926][T12330] bridge0: port 3(macvtap1) entered blocking state [ 281.155820][T12330] bridge0: port 3(macvtap1) entered disabled state [ 281.201489][T12330] macvtap1: entered allmulticast mode [ 281.207284][T12330] bridge0: entered allmulticast mode [ 281.217066][T12330] macvtap1: left allmulticast mode [ 281.231494][T12330] bridge0: left allmulticast mode [ 281.412711][T12140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.447708][T12339] bond0: entered promiscuous mode [ 281.455173][T12339] bond_slave_0: entered promiscuous mode [ 281.466080][T12339] bond_slave_1: entered promiscuous mode [ 281.474828][T12339] batadv0: entered promiscuous mode [ 281.483215][T12339] debugfs: 'hsr1' already exists in 'hsr' [ 281.493343][T12339] Cannot create hsr debugfs directory [ 281.500424][T12339] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 281.509853][T12339] bond0: left promiscuous mode [ 281.514775][T12339] bond_slave_0: left promiscuous mode [ 281.548635][T12339] bond_slave_1: left promiscuous mode [ 281.563517][T12339] batadv0: left promiscuous mode [ 281.769152][T12349] 8021q: adding VLAN 0 to HW filter on device bond22 [ 281.786635][T12140] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.804050][T12349] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1637'. [ 281.851643][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.859233][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.909617][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.916968][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.934953][T12128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.974603][T12353] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1638'. [ 282.050463][T12357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1640'. [ 282.067112][T12140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 282.236168][ T5832] Bluetooth: hci7: command tx timeout [ 282.247664][T12355] wg1 speed is unknown, defaulting to 1000 [ 282.622220][T12140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.783845][T12128] veth0_vlan: entered promiscuous mode [ 282.814746][T12128] veth1_vlan: entered promiscuous mode [ 282.863839][T12128] veth0_macvtap: entered promiscuous mode [ 282.883119][T12128] veth1_macvtap: entered promiscuous mode [ 282.950392][T12128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.000923][T12393] bridge0: port 3(macvtap1) entered blocking state [ 283.008371][T12393] bridge0: port 3(macvtap1) entered disabled state [ 283.036832][ T5832] Bluetooth: hci8: command tx timeout [ 283.050328][T12393] macvtap1: entered allmulticast mode [ 283.068243][T12393] bridge0: entered allmulticast mode [ 283.086922][T12393] macvtap1: left allmulticast mode [ 283.095543][T12393] bridge0: left allmulticast mode [ 283.265203][T12128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.352512][ T50] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.375083][ T50] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.391312][ T50] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.434664][ T50] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.650129][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.666777][T12140] veth0_vlan: entered promiscuous mode [ 283.672681][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.741585][T12140] veth1_vlan: entered promiscuous mode [ 283.793682][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.809284][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.899509][T12140] veth0_macvtap: entered promiscuous mode [ 283.938104][T12140] veth1_macvtap: entered promiscuous mode [ 283.998661][T12140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.051513][T12140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.130778][T12428] netlink: 'syz.5.1655': attribute type 5 has an invalid length. [ 284.149419][ T71] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.176178][ T71] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.221900][ T71] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.270948][ T71] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.445738][T12436] netlink: 'syz.5.1658': attribute type 2 has an invalid length. [ 284.455906][T12436] netlink: 'syz.5.1658': attribute type 5 has an invalid length. [ 284.471537][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.499954][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.596100][T12449] bridge0: entered promiscuous mode [ 284.617055][T12449] bridge0: port 3(macvtap1) entered blocking state [ 284.648283][T12449] bridge0: port 3(macvtap1) entered disabled state [ 284.656731][T12449] macvtap1: entered allmulticast mode [ 284.662438][T12449] bridge0: entered allmulticast mode [ 284.675460][T12449] macvtap1: left allmulticast mode [ 284.680675][T12449] bridge0: left allmulticast mode [ 284.691390][T12449] bridge0: left promiscuous mode [ 284.774730][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.797578][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.227707][T12447] FAULT_INJECTION: forcing a failure. [ 285.227707][T12447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.261675][T12447] CPU: 1 UID: 0 PID: 12447 Comm: syz.7.1661 Not tainted syzkaller #0 PREEMPT(full) [ 285.261779][T12447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 285.261791][T12447] Call Trace: [ 285.261799][T12447] [ 285.261809][T12447] dump_stack_lvl+0x189/0x250 [ 285.261841][T12447] ? __pfx____ratelimit+0x10/0x10 [ 285.261871][T12447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.261897][T12447] ? __pfx__printk+0x10/0x10 [ 285.261917][T12447] ? __might_fault+0xb0/0x130 [ 285.261958][T12447] should_fail_ex+0x414/0x560 [ 285.261993][T12447] _copy_from_user+0x2d/0xb0 [ 285.262019][T12447] __sys_sendto+0x25c/0x520 [ 285.262043][T12447] ? __pfx___sys_sendto+0x10/0x10 [ 285.262059][T12447] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 285.262095][T12447] ? __fget_files+0x3a0/0x420 [ 285.262127][T12447] ? ksys_write+0x22a/0x250 [ 285.262157][T12447] ? __pfx_ksys_write+0x10/0x10 [ 285.262189][T12447] __x64_sys_sendto+0xde/0x100 [ 285.262214][T12447] do_syscall_64+0xfa/0xfa0 [ 285.262233][T12447] ? lockdep_hardirqs_on+0x9c/0x150 [ 285.262252][T12447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.262271][T12447] ? clear_bhb_loop+0x60/0xb0 [ 285.262295][T12447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.262314][T12447] RIP: 0033:0x7ff9fef8f749 [ 285.262334][T12447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.262351][T12447] RSP: 002b:00007ff9ffdbb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 285.262374][T12447] RAX: ffffffffffffffda RBX: 00007ff9ff1e5fa0 RCX: 00007ff9fef8f749 [ 285.262388][T12447] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 285.262428][T12447] RBP: 00007ff9ffdbb090 R08: 0000200000000200 R09: 0000000000000014 [ 285.262439][T12447] R10: 00000000240000c4 R11: 0000000000000246 R12: 0000000000000001 [ 285.262448][T12447] R13: 00007ff9ff1e6038 R14: 00007ff9ff1e5fa0 R15: 00007fff0e7c8418 [ 285.262476][T12447] [ 285.494252][T12467] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1664'. [ 286.437846][ T30] audit: type=1800 audit(1763665517.526:3): pid=12506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1671" name="3" dev="tmpfs" ino=2008 res=0 errno=0 [ 286.855115][T12523] bridge0: entered promiscuous mode [ 286.910817][T12523] bridge0: port 3(macvtap1) entered blocking state [ 286.952636][T12523] bridge0: port 3(macvtap1) entered disabled state [ 287.015738][T12523] macvtap1: entered allmulticast mode [ 287.021730][T12523] bridge0: entered allmulticast mode [ 287.086891][T12523] macvtap1: left allmulticast mode [ 287.105003][T12523] bridge0: left allmulticast mode [ 287.126989][T12523] bridge0: left promiscuous mode [ 287.149497][T12538] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1681'. [ 287.188700][T12533] FAULT_INJECTION: forcing a failure. [ 287.188700][T12533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.209372][T12540] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1681'. [ 287.217653][T12528] vlan2: entered promiscuous mode [ 287.224370][T12533] CPU: 1 UID: 0 PID: 12533 Comm: syz.6.1679 Not tainted syzkaller #0 PREEMPT(full) [ 287.224397][T12533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.224408][T12533] Call Trace: [ 287.224417][T12533] [ 287.224425][T12533] dump_stack_lvl+0x189/0x250 [ 287.224455][T12533] ? __pfx____ratelimit+0x10/0x10 [ 287.224481][T12533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.224506][T12533] ? __pfx__printk+0x10/0x10 [ 287.224537][T12533] should_fail_ex+0x414/0x560 [ 287.224570][T12533] _copy_to_user+0x31/0xb0 [ 287.224596][T12533] simple_read_from_buffer+0xe1/0x170 [ 287.224631][T12533] proc_fail_nth_read+0x1b3/0x220 [ 287.224659][T12533] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 287.224686][T12533] ? rw_verify_area+0x2a6/0x4d0 [ 287.224711][T12533] ? __lock_acquire+0xab9/0xd20 [ 287.224739][T12533] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 287.224765][T12533] vfs_read+0x200/0xa30 [ 287.224789][T12533] ? fdget_pos+0x247/0x320 [ 287.224813][T12533] ? __pfx___mutex_lock+0x10/0x10 [ 287.224834][T12533] ? __pfx_vfs_read+0x10/0x10 [ 287.224860][T12533] ? __fget_files+0x2a/0x420 [ 287.224882][T12533] ? __fget_files+0x3a0/0x420 [ 287.224897][T12533] ? __fget_files+0x2a/0x420 [ 287.224924][T12533] ksys_read+0x145/0x250 [ 287.224950][T12533] ? __pfx_ksys_read+0x10/0x10 [ 287.224980][T12533] ? do_syscall_64+0xbe/0xfa0 [ 287.225003][T12533] do_syscall_64+0xfa/0xfa0 [ 287.225019][T12533] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.225036][T12533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.225054][T12533] ? clear_bhb_loop+0x60/0xb0 [ 287.225077][T12533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.225093][T12533] RIP: 0033:0x7f04a798e15c [ 287.225110][T12533] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 287.225125][T12533] RSP: 002b:00007f04a8813030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 287.225145][T12533] RAX: ffffffffffffffda RBX: 00007f04a7be5fa0 RCX: 00007f04a798e15c [ 287.225158][T12533] RDX: 000000000000000f RSI: 00007f04a88130a0 RDI: 0000000000000004 [ 287.225169][T12533] RBP: 00007f04a8813090 R08: 0000000000000000 R09: 0000000000000014 [ 287.225179][T12533] R10: 00000000240000c4 R11: 0000000000000246 R12: 0000000000000001 [ 287.225191][T12533] R13: 00007f04a7be6038 R14: 00007f04a7be5fa0 R15: 00007ffd24462748 [ 287.225224][T12533] [ 287.227582][T12528] !: entered promiscuous mode [ 287.808096][T12541] syzkaller0: entered promiscuous mode [ 287.829731][T12541] syzkaller0: entered allmulticast mode [ 287.860576][T12554] netlink: 'syz.2.1683': attribute type 2 has an invalid length. [ 287.909811][T12554] : entered promiscuous mode [ 288.265147][T12568] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1685'. [ 291.309477][T12586] kthread_run failed with err -4 [ 291.348489][T12600] bridge0: entered promiscuous mode [ 291.355246][T12600] bridge0: port 3(macvtap1) entered blocking state [ 291.375718][T12600] bridge0: port 3(macvtap1) entered disabled state [ 291.406529][T12600] macvtap1: entered allmulticast mode [ 291.412074][T12600] bridge0: entered allmulticast mode [ 291.437425][T12600] macvtap1: left allmulticast mode [ 291.443089][T12600] bridge0: left allmulticast mode [ 291.458112][T12600] bridge0: left promiscuous mode [ 291.668201][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1696'. [ 292.525304][T12643] wg1 speed is unknown, defaulting to 1000 [ 292.886824][T12665] bridge0: entered promiscuous mode [ 292.978586][T12665] bridge0: port 3(macvtap1) entered blocking state [ 293.127557][T12665] bridge0: port 3(macvtap1) entered disabled state [ 293.208857][T12665] macvtap1: entered allmulticast mode [ 293.231833][T12679] Bluetooth: MGMT ver 1.23 [ 293.237612][T12665] bridge0: entered allmulticast mode [ 293.270132][T12665] macvtap1: left allmulticast mode [ 293.276030][T12665] bridge0: left allmulticast mode [ 293.290815][T12665] bridge0: left promiscuous mode [ 293.352403][T12668] netdevsim netdevsim7: Direct firmware load for . failed with error -2 [ 293.376714][T12668] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 293.517644][T12684] syzkaller0: entered promiscuous mode [ 293.523524][T12684] syzkaller0: entered allmulticast mode [ 293.703290][T12695] wg1 speed is unknown, defaulting to 1000 [ 293.716659][T12698] netlink: 'syz.5.1714': attribute type 1 has an invalid length. [ 293.753322][T12698] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 293.782933][T12687] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1712'. [ 293.931552][T12687] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1712'. [ 294.483828][T12728] ip6tnl0: Caught tx_queue_len zero misconfig [ 294.600972][T12746] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1727'. [ 294.625796][T12744] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1724'. [ 294.635140][T12748] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1727'. [ 294.667641][T12744] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1724'. [ 294.850288][T12759] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1731'. [ 294.911850][ T5923] IPVS: starting estimator thread 0... [ 295.075463][T12765] IPVS: using max 27 ests per chain, 64800 per kthread [ 295.150895][T12771] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1734'. [ 295.344906][T12772] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:20004 [ 296.097315][T12795] netlink: 'syz.6.1743': attribute type 3 has an invalid length. [ 296.429451][T12814] netlink: 232 bytes leftover after parsing attributes in process `syz.7.1748'. [ 296.465476][T12807] bond23: entered allmulticast mode [ 296.749077][T12827] __nla_validate_parse: 1 callbacks suppressed [ 296.749101][T12827] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1751'. [ 296.839833][T12240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.859273][T12240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.168691][T12851] ip6gre1: entered promiscuous mode [ 297.200031][T12851] ip6gre1: entered allmulticast mode [ 297.768942][T12873] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1767'. [ 297.798566][T12878] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1765'. [ 298.534909][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1769'. [ 298.545075][T12898] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1769'. [ 298.606763][T12891] syzkaller0: entered promiscuous mode [ 298.612364][T12891] syzkaller0: entered allmulticast mode [ 298.630704][T12907] Unsupported ieee802154 address type: 0 [ 298.650984][T12893] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.787758][T12905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1771'. [ 298.837606][T12893] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.099522][T12893] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.119971][ T30] audit: type=1800 audit(1763665530.196:4): pid=12900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1771" name="cgroup.controllers" dev="tmpfs" ino=2135 res=0 errno=0 [ 299.254489][T12893] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.681008][T12922] netlink: 'syz.7.1781': attribute type 15 has an invalid length. [ 299.688013][T12921] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1780'. [ 299.811677][T12926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.918398][T12936] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1779'. [ 300.152809][T12944] wg1 speed is unknown, defaulting to 1000 [ 300.204666][T12952] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1788'. [ 300.223239][T12940] tipc: Started in network mode [ 300.228981][T12940] tipc: Node identity aa1929b73023, cluster identity 4711 [ 300.240739][T12940] tipc: Enabled bearer , priority 0 [ 300.344430][T12956] syzkaller0: entered promiscuous mode [ 300.355470][T12956] syzkaller0: entered allmulticast mode [ 300.435237][T12964] netlink: 1 bytes leftover after parsing attributes in process `syz.8.1789'. [ 300.522892][T12939] tipc: Resetting bearer [ 300.651131][T12939] tipc: Disabling bearer [ 300.723305][T12958] hsr_slave_0: left promiscuous mode [ 300.732978][T12958] hsr_slave_1: left promiscuous mode [ 300.895709][T12971] 8021q: adding VLAN 0 to HW filter on device bond1 [ 300.909017][T12974] bond1: option ad_select: unable to set because the bond device is up [ 301.221408][T12993] netlink: 'syz.7.1795': attribute type 10 has an invalid length. [ 301.232374][T12992] lo: Caught tx_queue_len zero misconfig [ 301.265451][T12993] team0: Port device dummy0 added [ 301.518163][T13001] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 301.986491][T13020] __nla_validate_parse: 6 callbacks suppressed [ 301.986515][T13020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1807'. [ 302.103961][T13029] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1809'. [ 302.141917][T13033] RDS: rds_bind could not find a transport for ::ffff:172.30.1.7, load rds_tcp or rds_rdma? [ 302.161577][T13027] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1808'. [ 302.198234][T13027] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1808'. [ 302.848326][T13063] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 302.867824][T13067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1817'. [ 302.898971][T13060] wg1 speed is unknown, defaulting to 1000 [ 302.923372][T13061] wg1 speed is unknown, defaulting to 1000 [ 303.303939][T13075] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1819'. [ 303.530399][T13079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1821'. [ 303.535132][T13077] netlink: 'syz.8.1820': attribute type 4 has an invalid length. [ 303.719540][T13093] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1825'. [ 303.732195][T13093] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1825'. [ 303.744649][T13093] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1825'. [ 303.831529][T13096] xt_connbytes: Forcing CT accounting to be enabled [ 304.069168][T13108] bridge0: entered promiscuous mode [ 304.085268][T13108] bridge0: port 3(macvtap1) entered blocking state [ 304.112262][T13108] bridge0: port 3(macvtap1) entered disabled state [ 304.125758][T13108] macvtap1: entered allmulticast mode [ 304.131706][T13108] bridge0: entered allmulticast mode [ 304.151129][T13108] macvtap1: left allmulticast mode [ 304.209427][T13108] bridge0: left allmulticast mode [ 304.241523][T13108] bridge0: left promiscuous mode [ 304.884561][T13141] syzkaller0: entered promiscuous mode [ 304.891154][T13141] syzkaller0: entered allmulticast mode [ 305.300237][T13170] bridge0: entered promiscuous mode [ 305.307683][T13170] bridge0: port 3(macvtap1) entered blocking state [ 305.315876][T13170] bridge0: port 3(macvtap1) entered disabled state [ 305.322735][T13170] macvtap1: entered allmulticast mode [ 305.328341][T13170] bridge0: entered allmulticast mode [ 305.344425][T13170] macvtap1: left allmulticast mode [ 305.355290][T13170] bridge0: left allmulticast mode [ 305.387127][T13170] bridge0: left promiscuous mode [ 306.813518][T13230] siw: device registration error -23 [ 306.837120][T13233] netlink: 'syz.2.1862': attribute type 29 has an invalid length. [ 306.977039][T13240] bridge0: entered promiscuous mode [ 306.984871][T13240] bridge0: port 3(macvtap1) entered blocking state [ 306.991940][T13240] bridge0: port 3(macvtap1) entered disabled state [ 306.999121][T13240] macvtap1: entered allmulticast mode [ 307.004762][T13240] bridge0: entered allmulticast mode [ 307.014093][T13240] macvtap1: left allmulticast mode [ 307.019918][T13240] bridge0: left allmulticast mode [ 307.027201][T13240] bridge0: left promiscuous mode [ 307.060554][T13242] netdevsim netdevsim8: Direct firmware load for . failed with error -2 [ 307.070604][T13242] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 307.540227][T13247] __nla_validate_parse: 6 callbacks suppressed [ 307.540247][T13247] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1865'. [ 307.574636][T13248] netlink: 'syz.7.1865': attribute type 12 has an invalid length. [ 307.586185][T13248] netlink: 'syz.7.1865': attribute type 12 has an invalid length. [ 307.594746][T13248] netlink: 'syz.7.1865': attribute type 12 has an invalid length. [ 307.603220][T13248] netlink: 'syz.7.1865': attribute type 12 has an invalid length. [ 307.611515][T13248] netlink: 'syz.7.1865': attribute type 12 has an invalid length. [ 307.620050][T13248] netlink: 'syz.7.1865': attribute type 12 has an invalid length. [ 307.629145][T13248] netlink: 'syz.7.1865': attribute type 12 has an invalid length. [ 307.637988][T13248] netlink: 'syz.7.1865': attribute type 12 has an invalid length. [ 307.646434][T13248] netlink: 'syz.7.1865': attribute type 12 has an invalid length. [ 307.780306][T13253] pimreg: entered allmulticast mode [ 307.968458][T13264] wg1 speed is unknown, defaulting to 1000 [ 308.146128][T13272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1871'. [ 308.468249][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1875'. [ 308.626487][T13289] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1877'. [ 309.565924][T13324] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1885'. [ 309.585231][T13324] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1885'. [ 309.665001][T13331] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.806431][T13362] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 310.877813][T13367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1894'. [ 311.308527][T13383] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1897'. [ 311.417936][T13386] IPv6: NLM_F_CREATE should be specified when creating new route [ 311.426991][T13386] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 311.434458][T13386] IPv6: NLM_F_CREATE should be set when creating new route [ 311.441892][T13386] IPv6: NLM_F_CREATE should be set when creating new route [ 311.449299][T13386] IPv6: NLM_F_CREATE should be set when creating new route [ 311.985899][T13399] geneve3: entered promiscuous mode [ 311.993432][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.002468][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.030550][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.039579][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.281878][T13417] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 312.337079][T13417] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.347066][T13417] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.502798][T13430] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1908'. [ 312.521783][T13430] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 312.906680][T13451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.124263][T13455] wg1 speed is unknown, defaulting to 1000 [ 313.190269][T13460] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 313.902215][T13494] tipc: Started in network mode [ 313.907668][T13494] tipc: Node identity b294b5297ee1, cluster identity 4711 [ 313.919404][T13494] tipc: Enabled bearer , priority 0 [ 313.948786][T13494] syzkaller0: entered promiscuous mode [ 313.954627][T13494] syzkaller0: entered allmulticast mode [ 313.992837][T13494] wg1 speed is unknown, defaulting to 1000 [ 314.163923][T13505] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1924'. [ 314.174447][T13505] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1924'. [ 314.187932][T13505] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1924'. [ 314.201546][T13493] tipc: Resetting bearer [ 314.276059][T13493] tipc: Disabling bearer [ 314.350069][T13513] bridge0: entered promiscuous mode [ 314.359275][T13513] bridge0: port 3(macvtap1) entered blocking state [ 314.367094][T13513] bridge0: port 3(macvtap1) entered disabled state [ 314.373952][T13513] macvtap1: entered allmulticast mode [ 314.383377][T13513] bridge0: entered allmulticast mode [ 314.391798][T13513] macvtap1: left allmulticast mode [ 314.403673][T13513] bridge0: left allmulticast mode [ 314.418718][T13513] bridge0: left promiscuous mode [ 314.451715][T13515] netdevsim netdevsim7: Direct firmware load for . failed with error -2 [ 314.461254][T13515] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 314.560005][T13520] 8021q: adding VLAN 0 to HW filter on device bond25 [ 314.667931][T13525] validate_nla: 28 callbacks suppressed [ 314.667945][T13525] netlink: 'syz.2.1929': attribute type 11 has an invalid length. [ 315.637998][T13559] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1936'. [ 315.843193][T13568] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1939'. [ 315.961231][T13572] bridge_slave_0: left allmulticast mode [ 315.968017][T13572] bridge_slave_0: left promiscuous mode [ 315.973950][T13572] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.987254][T13572] bridge_slave_1: left allmulticast mode [ 315.993095][T13572] bridge_slave_1: left promiscuous mode [ 315.999311][T13572] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.020784][T13572] bond0: (slave bond_slave_0): Releasing backup interface [ 316.047261][T13572] bond0: (slave bond_slave_1): Releasing backup interface [ 316.087254][T13572] team0: Port device team_slave_0 removed [ 316.109548][T13572] team0: Port device team_slave_1 removed [ 316.117440][T13572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.125168][T13572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.137078][T13572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.144503][T13572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.175294][T13574] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 316.398162][T13586] netlink: 416 bytes leftover after parsing attributes in process `syz.8.1944'. [ 316.420683][T13586] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1944'. [ 316.564760][T13590] wg1 speed is unknown, defaulting to 1000 [ 316.954802][T13608] wg1 speed is unknown, defaulting to 1000 [ 317.308439][T13627] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1950'. [ 317.359920][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.440323][T13631] dvmrp0: entered allmulticast mode [ 317.549678][T13635] wg1 speed is unknown, defaulting to 1000 [ 318.250140][ T52] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 318.260698][ T52] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 318.269914][ T52] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 318.280817][ T52] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 318.289330][ T52] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 318.311108][T13658] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1959'. [ 318.344702][T13655] wg1 speed is unknown, defaulting to 1000 [ 318.419914][T13665] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1961'. [ 318.444527][T13663] tunl0: Caught tx_queue_len zero misconfig [ 318.752084][T13655] chnl_net:caif_netlink_parms(): no params data found [ 318.978119][T13655] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.986335][T13655] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.993843][T13655] bridge_slave_0: entered allmulticast mode [ 319.002870][T13655] bridge_slave_0: entered promiscuous mode [ 319.013969][T13655] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.022465][T13655] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.030146][T13655] bridge_slave_1: entered allmulticast mode [ 319.044669][T13655] bridge_slave_1: entered promiscuous mode [ 319.114393][T13684] netlink: 'syz.7.1965': attribute type 6 has an invalid length. [ 319.153653][T13684] netlink: 'syz.7.1965': attribute type 5 has an invalid length. [ 319.165569][T13684] netlink: 'syz.7.1965': attribute type 4 has an invalid length. [ 319.176994][T13683] netlink: 'syz.7.1965': attribute type 4 has an invalid length. [ 319.179888][T13655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.200562][T13655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.267902][T13655] team0: Port device team_slave_0 added [ 319.279083][T13655] team0: Port device team_slave_1 added [ 319.331321][T13655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.340316][T13655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.368225][T13655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.382609][T13655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.390567][T13655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.418223][T13655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.540612][T13655] hsr_slave_0: entered promiscuous mode [ 319.558161][T13655] hsr_slave_1: entered promiscuous mode [ 319.574262][T13655] debugfs: 'hsr0' already exists in 'hsr' [ 319.583804][T13655] Cannot create hsr debugfs directory [ 319.671995][T13696] can: request_module (can-proto-4) failed. [ 319.957514][T13704] netlink: 'syz.7.1969': attribute type 3 has an invalid length. [ 319.965312][T13704] __nla_validate_parse: 6 callbacks suppressed [ 319.989230][T13704] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1969'. [ 320.090521][T13709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1971'. [ 320.182338][T13655] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 320.199285][T13655] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 320.228634][T13655] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 320.242178][T13655] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 320.315652][ T5832] Bluetooth: hci9: command tx timeout [ 320.386515][T13655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.424258][T13655] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.440652][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.448017][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.469056][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.476994][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.714725][T13655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.942499][T13655] veth0_vlan: entered promiscuous mode [ 320.956617][T13655] veth1_vlan: entered promiscuous mode [ 320.993453][T13655] veth0_macvtap: entered promiscuous mode [ 321.004860][T13655] veth1_macvtap: entered promiscuous mode [ 321.027400][T13655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.044126][T13655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.068850][T12240] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.078668][T12240] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.099132][T12240] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.129347][T12240] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.216888][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.226970][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.285215][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.295016][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.530216][T13750] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1976'. [ 321.701877][T13753] wg1 speed is unknown, defaulting to 1000 [ 321.841636][T13756] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1977'. [ 321.985472][T13754] wg1 speed is unknown, defaulting to 1000 [ 322.083229][T13762] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1980'. [ 322.229414][T13766] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1980'. [ 322.240372][T13765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1981'. [ 322.279724][ T52] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 322.292135][ T52] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 322.302407][ T52] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 322.316852][ T52] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 322.325058][ T52] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 322.402762][ T5832] Bluetooth: hci9: command tx timeout [ 322.484220][T13767] wg1 speed is unknown, defaulting to 1000 [ 322.547869][T13766] wg1 speed is unknown, defaulting to 1000 [ 323.304949][T13767] chnl_net:caif_netlink_parms(): no params data found [ 323.570967][T13767] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.579311][T13767] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.597367][T13767] bridge_slave_0: entered allmulticast mode [ 323.606262][T13767] bridge_slave_0: entered promiscuous mode [ 323.624087][T13767] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.631575][T13767] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.640042][T13767] bridge_slave_1: entered allmulticast mode [ 323.649386][T13767] bridge_slave_1: entered promiscuous mode [ 323.777865][T13815] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.789950][T13809] syzkaller0: entered promiscuous mode [ 323.810503][T13809] syzkaller0: entered allmulticast mode [ 324.001236][T13820] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1995'. [ 324.397246][ T5832] Bluetooth: hci10: command tx timeout [ 324.475786][ T52] Bluetooth: hci9: command tx timeout [ 326.486375][ T52] Bluetooth: hci10: command tx timeout [ 326.566541][ T52] Bluetooth: hci9: command tx timeout [ 326.621095][T13767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.634853][T13767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.754794][T13767] team0: Port device team_slave_0 added [ 326.770635][T13767] team0: Port device team_slave_1 added [ 326.812880][T13835] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2002'. [ 326.891740][T13767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.899580][T13767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.929309][T13767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.944889][T13767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.952871][T13767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.009726][T13767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.021532][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2001'. [ 327.036023][T13840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2001'. [ 327.052219][T13840] netlink: 'syz.2.2001': attribute type 6 has an invalid length. [ 327.077813][T13845] Bluetooth: MGMT ver 1.23 [ 327.083269][T13845] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2001'. [ 327.142539][T13839] syzkaller0: entered promiscuous mode [ 327.150557][T13839] syzkaller0: entered allmulticast mode [ 327.258331][T13840] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2001'. [ 328.557261][ T52] Bluetooth: hci10: command tx timeout [ 329.864251][T13767] hsr_slave_0: entered promiscuous mode [ 329.871318][T13767] hsr_slave_1: entered promiscuous mode [ 329.877994][T13767] debugfs: 'hsr0' already exists in 'hsr' [ 329.883833][T13767] Cannot create hsr debugfs directory [ 329.890739][T12240] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.900288][T12240] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.971447][T12240] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.037539][T12240] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.089408][T13872] sock: sock_timestamping_bind_phc: sock not bind to device [ 330.380247][T13882] tipc: Started in network mode [ 330.385826][T13882] tipc: Node identity 2e158e47a77d, cluster identity 4711 [ 330.394179][T13882] tipc: Enabled bearer , priority 0 [ 330.436824][T13884] syzkaller0: entered promiscuous mode [ 330.448478][T13884] syzkaller0: entered allmulticast mode [ 330.467106][T13767] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 330.480320][T13767] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 330.523215][T13885] geneve4: entered promiscuous mode [ 330.549851][ T8222] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.565541][ T8222] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.578736][ T8222] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.594178][T13767] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 330.605825][T13767] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 330.627224][T13884] tipc: Resetting bearer [ 330.636341][ T52] Bluetooth: hci10: command tx timeout [ 330.642142][ T8222] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.657831][T13881] tipc: Resetting bearer [ 330.686921][T13881] tipc: Disabling bearer [ 330.689182][T13890] netlink: 'syz.7.2015': attribute type 30 has an invalid length. [ 330.701012][T13890] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2015'. [ 330.837002][T13767] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 330.848023][T13767] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 330.896189][T13894] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2016'. [ 330.897072][T13890] bond1: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 330.937124][T13890] bond1 (unregistering): Released all slaves [ 330.963890][T13767] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 330.975178][T13767] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 331.071248][T13896] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.091564][T13896] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.092954][T13902] netlink: 'syz.7.2019': attribute type 7 has an invalid length. [ 331.213511][T13896] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.239031][T13896] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.283207][T13904] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2019'. [ 331.316555][T12240] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.330689][T12240] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.376677][T12240] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.387053][T12240] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.406473][T13896] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.418704][T13896] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.510946][T13896] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.545950][T13896] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.674632][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.692726][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.705744][T13767] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 331.734781][ T50] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.753541][ T50] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.773699][T13767] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 331.819717][T13910] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2021'. [ 331.846181][T13767] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 331.859486][T13767] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 331.877052][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.887428][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.915142][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.928443][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.102628][T13926] syzkaller0: refused to change device tx_queue_len [ 332.123087][T13767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.165215][T13767] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.200767][ T8222] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.208119][ T8222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.260446][T13930] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2025'. [ 332.271779][T13930] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2025'. [ 332.288687][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.296646][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.318833][T13930] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2025'. [ 332.328446][T13930] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2025'. [ 332.419134][T13935] netlink: 'syz.9.2027': attribute type 29 has an invalid length. [ 332.434903][T13935] netlink: 'syz.9.2027': attribute type 29 has an invalid length. [ 332.448456][T13935] netlink: 500 bytes leftover after parsing attributes in process `syz.9.2027'. [ 332.542718][T13940] netlink: 'syz.9.2027': attribute type 16 has an invalid length. [ 332.586056][T13940] netlink: 156 bytes leftover after parsing attributes in process `syz.9.2027'. [ 332.696212][T13946] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2029'. [ 332.986065][T13952] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2031'. [ 333.037702][T13954] No such timeout policy "syz1" [ 333.060116][T13952] Cannot find set identified by id 65534 to match [ 333.106780][T13767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.560860][ T5834] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 333.584260][ T5834] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 333.586611][T13968] geneve2: entered promiscuous mode [ 333.600411][ T5834] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 333.616836][ T5834] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 333.621012][ T12] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 49558 - 0 [ 333.635953][ T5834] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 333.661739][ T12] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 49558 - 0 [ 333.732024][ T12] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 49558 - 0 [ 333.753070][ T12] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 49558 - 0 [ 333.831351][T13964] wg1 speed is unknown, defaulting to 1000 [ 333.916208][ T52] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 333.917939][ T5832] Bluetooth: hci2: command 0x0405 tx timeout [ 334.050053][T13974] wg1 speed is unknown, defaulting to 1000 [ 334.398274][T13986] tipc: Started in network mode [ 334.403293][T13986] tipc: Node identity 6e61f7b073be, cluster identity 4711 [ 334.411396][T13986] tipc: Enabled bearer , priority 0 [ 334.430137][T13767] veth0_vlan: entered promiscuous mode [ 334.440216][T13991] syzkaller0: entered promiscuous mode [ 334.446000][T13991] syzkaller0: entered allmulticast mode [ 334.517285][T13767] veth1_vlan: entered promiscuous mode [ 334.648758][T13964] chnl_net:caif_netlink_parms(): no params data found [ 334.672248][T13991] wg1 speed is unknown, defaulting to 1000 [ 334.718452][T13767] veth0_macvtap: entered promiscuous mode [ 334.892064][T13767] veth1_macvtap: entered promiscuous mode [ 334.982692][T14016] tipc: Resetting bearer [ 335.014070][T14017] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2043'. [ 335.206358][T13964] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.214030][T13964] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.221806][T13964] bridge_slave_0: entered allmulticast mode [ 335.230292][T13964] bridge_slave_0: entered promiscuous mode [ 335.260014][T13985] tipc: Resetting bearer [ 335.279941][T13985] tipc: Disabling bearer [ 335.300918][T13767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.308908][T13964] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.317589][T13964] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.324880][T13964] bridge_slave_1: entered allmulticast mode [ 335.334079][T13964] bridge_slave_1: entered promiscuous mode [ 335.491723][T13767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.676244][ T5832] Bluetooth: hci11: command tx timeout [ 337.611760][T13964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.626688][T14039] __nla_validate_parse: 6 callbacks suppressed [ 337.626707][T14039] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2050'. [ 337.648034][T13964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.707427][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.720444][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.755801][ T5832] Bluetooth: hci11: command tx timeout [ 337.791034][T13964] team0: Port device team_slave_0 added [ 337.801652][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.810764][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.822958][T14045] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2052'. [ 337.824654][T13964] team0: Port device team_slave_1 added [ 337.881178][T13964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.889198][T13964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.917751][T13964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.941148][T13964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.949638][T13964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.978655][T13964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.130888][T14050] syzkaller0: entered promiscuous mode [ 338.137304][T14050] syzkaller0: entered allmulticast mode [ 338.171239][T13964] hsr_slave_0: entered promiscuous mode [ 338.179307][T13964] hsr_slave_1: entered promiscuous mode [ 338.188139][T13964] debugfs: 'hsr0' already exists in 'hsr' [ 338.194136][T13964] Cannot create hsr debugfs directory [ 339.843174][ T5832] Bluetooth: hci11: command tx timeout [ 340.262738][T12240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.286257][T12240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.383356][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.401523][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.828512][T14061] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 341.108135][T14070] xt_TCPMSS: Only works on TCP SYN packets [ 341.137856][T14068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2060'. [ 341.146085][T14070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.160028][T13964] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 341.189189][T13964] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 341.223225][T13964] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 341.250513][T13964] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 341.456139][T14066] wg1 speed is unknown, defaulting to 1000 [ 341.718190][T14087] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2063'. [ 341.743909][T14086] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2063'. [ 341.920410][ T5832] Bluetooth: hci11: command tx timeout [ 342.007875][T14092] netlink: 'syz.9.2064': attribute type 1 has an invalid length. [ 342.024433][T13964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.026369][T14092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.088214][T13964] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.169059][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.176581][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.190173][T14094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2065'. [ 342.204116][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.211500][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.782903][T13964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.929910][T14111] tipc: Enabled bearer , priority 0 [ 342.982603][T13964] veth0_vlan: entered promiscuous mode [ 342.990753][T14111] syzkaller0: entered promiscuous mode [ 342.998227][T14111] syzkaller0: entered allmulticast mode [ 343.038391][T14111] tipc: Resetting bearer [ 343.044646][T14111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.053158][T14111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.068765][T13964] veth1_vlan: entered promiscuous mode [ 343.078479][T14110] tipc: Resetting bearer [ 343.103717][T14110] tipc: Disabling bearer [ 343.189701][T13964] veth0_macvtap: entered promiscuous mode [ 343.222402][T13964] veth1_macvtap: entered promiscuous mode [ 343.304729][T13964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.351441][T13964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.400871][ T4048] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.427673][ T4048] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.500464][ T4048] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.522422][ T4048] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.798102][T12240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.845956][T12240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.887321][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.895200][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.137106][T14130] bond0: (slave rose0): Error: Device can not be enslaved while up [ 344.160834][T14130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2030'. [ 344.287577][T14132] wg1 speed is unknown, defaulting to 1000 [ 344.657202][T14144] nbd3: detected capacity change from 0 to 63 [ 344.664050][T14146] block nbd3: NBD_DISCONNECT [ 344.671228][T14146] block nbd3: Disconnected due to user request. [ 344.679880][T14146] block nbd3: shutting down sockets [ 344.733124][T14144] bond1: entered promiscuous mode [ 344.742243][T14144] bond1: entered allmulticast mode [ 344.756280][T14144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 345.153707][T14156] netlink: 34 bytes leftover after parsing attributes in process `syz.3.2080'. [ 345.205244][T14161] netlink: 'syz.2.2081': attribute type 10 has an invalid length. [ 345.620148][T14167] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2082'. [ 346.106879][T14180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2086'. [ 346.117362][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2086'. [ 346.126812][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2086'. [ 346.136134][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2086'. [ 346.406887][T14189] veth0_to_bond: entered allmulticast mode [ 347.142936][T14221] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2098'. [ 347.194529][T14220] netlink: 'syz.9.2099': attribute type 1 has an invalid length. [ 347.203658][T14220] netlink: 'syz.9.2099': attribute type 1 has an invalid length. [ 347.503388][T14238] netlink: 'syz.2.2105': attribute type 2 has an invalid length. [ 347.511474][T14238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2105'. [ 347.584219][T14241] wg1 speed is unknown, defaulting to 1000 [ 347.645184][T14243] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 347.656676][T14243] bridge1: entered allmulticast mode [ 347.837541][T14250] wg1 speed is unknown, defaulting to 1000 [ 348.949700][T14281] netlink: 'syz.9.2116': attribute type 1 has an invalid length. [ 349.217950][T14289] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2119'. [ 349.229934][T14286] wg1 speed is unknown, defaulting to 1000 [ 349.389981][T14293] tipc: Started in network mode [ 349.395996][T14293] tipc: Node identity 4, cluster identity 4711 [ 349.402285][T14293] tipc: Node number set to 4 [ 349.419325][T14293] tipc: Enabling of bearer rejected, failed to enable media [ 349.673336][ T52] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 349.684855][ T52] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 349.694853][ T52] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 349.703673][ T52] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 349.716376][ T52] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 349.729772][T14300] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.741977][T14300] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 49558 - 0 [ 349.787819][T14301] wg1 speed is unknown, defaulting to 1000 [ 349.851805][T14300] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.864899][T14300] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 49558 - 0 [ 349.952346][T14300] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.963681][T14300] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 49558 - 0 [ 350.058463][T14300] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.070567][T14300] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 49558 - 0 [ 350.101305][T14301] chnl_net:caif_netlink_parms(): no params data found [ 350.282886][ T4048] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 49558 - 0 [ 350.291534][ T4048] netdevsim netdevsim9 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 350.313404][T14301] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.322879][T14301] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.331656][T14301] bridge_slave_0: entered allmulticast mode [ 350.341532][T14301] bridge_slave_0: entered promiscuous mode [ 350.371861][T14301] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.381069][T14301] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.390075][T14301] bridge_slave_1: entered allmulticast mode [ 350.400081][T14301] bridge_slave_1: entered promiscuous mode [ 350.408456][ T4048] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 49558 - 0 [ 350.423705][ T4048] netdevsim netdevsim9 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 350.510643][T14301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.526990][T14301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.549248][ T4048] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 49558 - 0 [ 350.558813][ T4048] netdevsim netdevsim9 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 350.595910][ T4048] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 49558 - 0 [ 350.604430][ T4048] netdevsim netdevsim9 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 350.653469][T14301] team0: Port device team_slave_0 added [ 350.664898][T14301] team0: Port device team_slave_1 added [ 350.711472][T14329] IPVS: set_ctl: invalid protocol: 60 100.1.1.1:20003 [ 350.720490][T14329] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 350.735016][T14301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.753600][T14301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.790056][T14301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.828365][T14301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.836046][T14301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.864354][T14301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.020998][T14301] hsr_slave_0: entered promiscuous mode [ 351.029145][T14301] hsr_slave_1: entered promiscuous mode [ 351.037214][T14301] debugfs: 'hsr0' already exists in 'hsr' [ 351.043609][T14301] Cannot create hsr debugfs directory [ 351.053995][T14337] tipc: Enabled bearer , priority 0 [ 351.080917][T14337] syzkaller0: entered promiscuous mode [ 351.088831][T14337] syzkaller0: entered allmulticast mode [ 351.108029][T14337] netlink: 'syz.3.2130': attribute type 6 has an invalid length. [ 351.127783][T14337] netlink: 'syz.3.2130': attribute type 6 has an invalid length. [ 351.227866][T14337] tipc: Resetting bearer [ 351.243526][T14301] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.308286][T14301] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.394848][T14344] netlink: 84 bytes leftover after parsing attributes in process `syz.9.2133'. [ 351.411456][T14301] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.505096][T14301] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.594249][T14351] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 351.710343][T14301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 351.757582][ T52] Bluetooth: hci12: command tx timeout [ 351.780773][T14301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 351.794085][T14301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 351.812711][T14301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 351.882331][T14366] netlink: 'syz.3.2139': attribute type 1 has an invalid length. [ 351.890894][T14366] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2139'. [ 351.985195][T14301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.000908][T14372] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 352.009042][T14371] IPVS: stopping master sync thread 14372 ... [ 352.040364][T14301] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.061174][ T4048] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.068421][ T4048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.087401][T12240] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.094725][T12240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.351264][T14301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.421059][T14301] veth0_vlan: entered promiscuous mode [ 352.452296][T14385] x_tables: duplicate underflow at hook 2 [ 352.454876][T14301] veth1_vlan: entered promiscuous mode [ 352.468666][T14385] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2143'. [ 352.522655][T14301] veth0_macvtap: entered promiscuous mode [ 352.596435][T14301] veth1_macvtap: entered promiscuous mode [ 352.632584][T14390] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2144'. [ 352.656679][T14301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.677508][T14301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.690986][T14390] netlink: 'syz.9.2144': attribute type 21 has an invalid length. [ 352.702764][ T71] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.712054][T14390] netlink: 'syz.9.2144': attribute type 22 has an invalid length. [ 352.726192][T14390] netlink: 'syz.9.2144': attribute type 23 has an invalid length. [ 352.726537][ T71] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.734227][T14390] netlink: 136 bytes leftover after parsing attributes in process `syz.9.2144'. [ 352.744664][ T71] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.775077][ T71] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.892955][T14393] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2145'. [ 352.899984][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.916112][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.985162][T14395] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 353.001061][ T8222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.020302][ T8222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.191703][T14408] xt_hashlimit: max too large, truncated to 1048576 [ 353.384064][T14421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2151'. [ 353.416403][T14421] bridge0: entered promiscuous mode [ 353.427381][T14421] bridge0: port 3(macvtap1) entered blocking state [ 353.434275][T14421] bridge0: port 3(macvtap1) entered disabled state [ 353.442955][T14421] macvtap1: entered allmulticast mode [ 353.454301][T14421] bridge0: entered allmulticast mode [ 353.463529][T14421] macvtap1: left allmulticast mode [ 353.468864][T14421] bridge0: left allmulticast mode [ 353.476698][T14421] bridge0: left promiscuous mode [ 353.511115][T14427] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 353.539373][T14427] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 353.703082][T14437] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2156'. [ 353.713112][T14437] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2156'. [ 353.846050][ T52] Bluetooth: hci12: command tx timeout [ 353.860951][T14441] netlink: 'syz.9.2159': attribute type 39 has an invalid length. [ 353.922611][T14443] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 353.941174][T14443] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 353.971563][T14445] macvlan2: entered promiscuous mode [ 353.977398][T14445] macvlan2: entered allmulticast mode [ 354.424149][T14462] __nla_validate_parse: 7 callbacks suppressed [ 354.424168][T14462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2165'. [ 354.488903][T14462] team0: Port device team_slave_1 removed [ 354.591910][T14468] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.2167'. [ 354.651645][T14470] netlink: 14560 bytes leftover after parsing attributes in process `syz.9.2168'. [ 354.707118][T14472] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2169'. [ 355.050075][T14484] netlink: 'syz.3.2171': attribute type 1 has an invalid length. [ 355.104134][T14484] 8021q: adding VLAN 0 to HW filter on device bond3 [ 355.143858][T14491] bond3: (slave ip6gretap1): making interface the new active one [ 355.153792][T14491] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 355.186349][T14484] erspan0: entered allmulticast mode [ 355.210890][T14484] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 355.278786][ T52] Bluetooth: hci2: command 0x0405 tx timeout [ 355.422801][ T50] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.448098][ T50] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.484109][ T50] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.495966][ T50] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.540175][T14516] wg1 speed is unknown, defaulting to 1000 [ 355.915930][ T5832] Bluetooth: hci12: command tx timeout [ 356.207311][T14533] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2184'. [ 356.234656][ T52] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 356.245290][ T52] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 356.254427][ T52] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 356.265087][ T52] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 356.273501][ T52] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 356.317503][T14538] tipc: Enabling of bearer rejected, failed to enable media [ 356.352930][T14535] wg1 speed is unknown, defaulting to 1000 [ 356.400567][T14540] tipc: Enabling of bearer rejected, already enabled [ 356.411617][T14542] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 356.412920][T14540] netlink: 'syz.3.2187': attribute type 13 has an invalid length. [ 356.468354][T14538] syzkaller0: entered promiscuous mode [ 356.473935][T14538] syzkaller0: entered allmulticast mode [ 356.591371][T14542] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2188'. [ 358.006611][ T52] Bluetooth: hci12: command tx timeout [ 358.331958][ T52] Bluetooth: hci13: command tx timeout [ 358.882488][T14546] syzkaller0: Caught tx_queue_len zero misconfig [ 359.052939][T14551] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001 [ 359.241856][T14535] chnl_net:caif_netlink_parms(): no params data found [ 359.435477][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.444495][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.489434][T14575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2195'. [ 359.529288][T14575] veth0_vlan: entered allmulticast mode [ 359.720236][T14579] tap0: tun_chr_ioctl cmd 2148553947 [ 359.728263][T14582] tap0: tun_chr_ioctl cmd 2148553947 [ 359.744233][T14535] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.752028][T14572] wg1 speed is unknown, defaulting to 1000 [ 359.770098][T14535] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.778570][ T5923] IPVS: starting estimator thread 0... [ 359.785997][T14535] bridge_slave_0: entered allmulticast mode [ 359.795887][T14535] bridge_slave_0: entered promiscuous mode [ 359.810170][T14535] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.817694][T14535] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.825876][T14535] bridge_slave_1: entered allmulticast mode [ 359.833417][T14535] bridge_slave_1: entered promiscuous mode [ 359.877166][T14589] IPVS: using max 23 ests per chain, 55200 per kthread [ 359.950558][T14535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.983077][T14535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.111155][T14535] team0: Port device team_slave_0 added [ 360.141734][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.143341][T14535] team0: Port device team_slave_1 added [ 360.284502][T14600] wg1 speed is unknown, defaulting to 1000 [ 360.294747][T14535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.308408][T14535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.336003][T14535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.354388][T14535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.361949][T14535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.388254][T14535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.399685][ T52] Bluetooth: hci13: command tx timeout [ 360.471998][T14596] wg1 speed is unknown, defaulting to 1000 [ 360.475541][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.521427][T14535] hsr_slave_0: entered promiscuous mode [ 360.528682][T14535] hsr_slave_1: entered promiscuous mode [ 360.536047][T14535] debugfs: 'hsr0' already exists in 'hsr' [ 360.541839][T14535] Cannot create hsr debugfs directory [ 360.833742][T14535] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.910915][T14606] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2203'. [ 361.046280][T14535] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.059516][T14610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2204'. [ 361.129970][T14535] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.232327][T14535] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.459117][T14623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2206'. [ 361.797153][T14535] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 361.823084][T14535] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 361.850917][T14535] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 361.867338][T14535] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 361.908026][T14628] siw: device registration error -23 [ 362.039916][T14535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.084220][T14535] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.101612][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.108885][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.130120][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.137505][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.472316][T14646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2210'. [ 362.486464][ T52] Bluetooth: hci13: command tx timeout [ 362.491303][T14535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.569298][T14535] veth0_vlan: entered promiscuous mode [ 362.588649][T14535] veth1_vlan: entered promiscuous mode [ 362.639343][T14535] veth0_macvtap: entered promiscuous mode [ 362.652639][T14535] veth1_macvtap: entered promiscuous mode [ 362.682102][T14535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.738117][T14651] bond1 (unregistering): Released all slaves [ 362.811036][T14535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.848044][T14482] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.909519][T14482] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.931845][T14482] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.959606][T14482] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.097146][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.107612][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.189393][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.227080][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.252399][ T52] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 363.262986][ T52] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 363.275260][ T52] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 363.293163][ T52] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 363.305756][ T52] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 363.511591][T14658] wg1 speed is unknown, defaulting to 1000 [ 363.535856][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.584342][T14667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2214'. [ 363.586069][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.602112][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.634852][T14667] xt_CT: No such helper "snmp" [ 363.776851][T14672] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 364.272111][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.354569][T14673] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.362608][T14673] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.523015][T14673] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 364.540494][T14673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.555827][ T52] Bluetooth: hci13: command tx timeout [ 364.569980][T14673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.635710][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.644155][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.700436][T14658] chnl_net:caif_netlink_parms(): no params data found [ 364.757651][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.767271][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.776937][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.802554][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.842339][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.854800][T14692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2219'. [ 364.888686][T14689] wg1 speed is unknown, defaulting to 1000 [ 364.898843][T14692] macvtap1: entered promiscuous mode [ 364.904168][T14692] veth1_to_hsr: entered promiscuous mode [ 364.912910][T14692] macvtap1: entered allmulticast mode [ 364.919501][T14692] veth1_to_hsr: entered allmulticast mode [ 365.028232][T14658] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.037487][T14658] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.046793][T14658] bridge_slave_0: entered allmulticast mode [ 365.054489][T14658] bridge_slave_0: entered promiscuous mode [ 365.075153][T14658] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.082913][T14658] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.090751][T14658] bridge_slave_1: entered allmulticast mode [ 365.102476][T14658] bridge_slave_1: entered promiscuous mode [ 365.204855][T14658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.224587][T14658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.309322][T14658] team0: Port device team_slave_0 added [ 365.331241][T14658] team0: Port device team_slave_1 added [ 365.360911][ T52] Bluetooth: hci14: command tx timeout [ 365.396752][T14711] netlink: 'syz.1.2224': attribute type 10 has an invalid length. [ 365.466689][T14711] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 365.477911][T14658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.484970][T14658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.512282][T14658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.530295][T14658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.538000][T14658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.565038][T14658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.577350][T14709] team_slave_0: entered promiscuous mode [ 365.583236][T14709] team_slave_0: entered allmulticast mode [ 365.657603][T14658] hsr_slave_0: entered promiscuous mode [ 365.664398][T14658] hsr_slave_1: entered promiscuous mode [ 365.673049][T14658] debugfs: 'hsr0' already exists in 'hsr' [ 365.679863][T14658] Cannot create hsr debugfs directory [ 365.692497][T14718] wg1 speed is unknown, defaulting to 1000 [ 366.010445][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.340578][T14725] nftables ruleset with unbound set [ 366.622895][T14658] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 366.641038][T14658] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 366.670222][T14658] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 366.690742][T14658] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 366.710222][T14742] tipc: Enabling of bearer rejected, failed to enable media [ 366.719231][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.883686][T14658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.940942][T14658] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.962314][ T4048] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.969594][ T4048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.017846][ T4048] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.025064][ T4048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.040798][T14752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2233'. [ 367.407831][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.438661][ T52] Bluetooth: hci14: command tx timeout [ 367.509360][T14772] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2236'. [ 367.523958][T14772] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2236'. [ 367.535886][T14772] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2236'. [ 367.628891][T14658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.755597][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.818439][T14781] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2238'. [ 368.016354][T14790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.073326][T14792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2241'. [ 368.092219][T14792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2241'. [ 368.232926][T14658] veth0_vlan: entered promiscuous mode [ 368.275147][T14658] veth1_vlan: entered promiscuous mode [ 368.277047][T14800] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 368.349455][T14658] veth0_macvtap: entered promiscuous mode [ 368.371176][T14802] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2244'. [ 368.380696][T14658] veth1_macvtap: entered promiscuous mode [ 368.422698][T14658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.450939][T14658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.465154][T14807] netlink: 'syz.1.2245': attribute type 16 has an invalid length. [ 368.469519][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.484014][T14807] netlink: 'syz.1.2245': attribute type 17 has an invalid length. [ 368.492635][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.492684][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.492720][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.537012][T14810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.578283][T14812] IPv6: NLM_F_REPLACE set, but no existing node found! [ 368.649705][T14807] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.657291][T14807] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.773375][T14807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.790977][T14807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.798609][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.925170][T14809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2245'. [ 368.949794][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.967922][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.017137][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.037876][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.091340][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.101636][T14816] lo: entered allmulticast mode [ 369.105430][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.110311][T14816] tunl0: entered allmulticast mode [ 369.121253][T14816] gre0: entered allmulticast mode [ 369.129310][T14816] gretap0: entered allmulticast mode [ 369.134953][T14816] erspan0: entered allmulticast mode [ 369.140833][T14816] ip_vti0: entered allmulticast mode [ 369.146741][T14816] ip6_vti0: entered allmulticast mode [ 369.152303][T14816] sit0: entered allmulticast mode [ 369.157845][T14816] ip6tnl0: entered allmulticast mode [ 369.163491][T14816] ip6gre0: entered allmulticast mode [ 369.170224][T14816] syz_tun: entered allmulticast mode [ 369.176057][T14816] ip6gretap0: entered allmulticast mode [ 369.181838][T14816] bridge0: entered allmulticast mode [ 369.188269][T14816] vcan0: entered allmulticast mode [ 369.193663][T14816] bond0: entered allmulticast mode [ 369.201519][T14816] bond_slave_0: entered allmulticast mode [ 369.210026][T14816] bond_slave_1: entered allmulticast mode [ 369.216639][T14816] mac80211_hwsim hwsim46 wlan1: entered allmulticast mode [ 369.223895][T14816] team0: entered allmulticast mode [ 369.229485][T14816] team_slave_0: entered allmulticast mode [ 369.235258][T14816] team_slave_1: entered allmulticast mode [ 369.241583][T14816] dummy0: entered allmulticast mode [ 369.247859][T14816] nlmon0: entered allmulticast mode [ 369.253412][T14816] caif0: entered allmulticast mode [ 369.258973][T14816] batadv0: entered allmulticast mode [ 369.264509][T14816] vxcan0: entered allmulticast mode [ 369.270119][T14816] vxcan1: entered allmulticast mode [ 369.276947][T14816] veth0: entered allmulticast mode [ 369.282456][T14816] veth1: entered allmulticast mode [ 369.288196][T14816] wg0: entered allmulticast mode [ 369.293291][T14816] wg1: entered allmulticast mode [ 369.298843][T14816] wg2: entered allmulticast mode [ 369.303980][T14816] veth0_to_bridge: entered allmulticast mode [ 369.310287][T14816] veth1_to_bridge: entered allmulticast mode [ 369.317594][T14816] veth0_to_bond: entered allmulticast mode [ 369.323737][T14816] veth1_to_bond: entered allmulticast mode [ 369.330153][T14816] veth0_to_team: entered allmulticast mode [ 369.336403][T14816] veth1_to_team: entered allmulticast mode [ 369.342534][T14816] veth0_to_batadv: entered allmulticast mode [ 369.349550][T14816] batadv_slave_0: entered allmulticast mode [ 369.356426][T14816] veth1_to_batadv: entered allmulticast mode [ 369.362789][T14816] batadv_slave_1: entered allmulticast mode [ 369.369878][T14816] xfrm0: entered allmulticast mode [ 369.375099][T14816] veth0_to_hsr: entered allmulticast mode [ 369.381405][T14816] hsr_slave_0: entered allmulticast mode [ 369.388232][T14816] veth1_to_hsr: entered allmulticast mode [ 369.394205][T14816] hsr_slave_1: entered allmulticast mode [ 369.400688][T14816] hsr0: entered allmulticast mode [ 369.407343][T14816] veth1_virt_wifi: entered allmulticast mode [ 369.416333][T14816] veth0_virt_wifi: entered allmulticast mode [ 369.422617][T14816] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 369.430394][T14816] veth1_vlan: entered allmulticast mode [ 369.437904][T14816] veth0_vlan: entered allmulticast mode [ 369.443990][T14816] vlan0: entered allmulticast mode [ 369.449961][T14816] vlan1: entered allmulticast mode [ 369.455635][T14816] macvlan0: entered allmulticast mode [ 369.461332][T14816] macvlan1: entered allmulticast mode [ 369.468760][T14816] ipvlan0: entered allmulticast mode [ 369.474476][T14816] ipvlan1: entered allmulticast mode [ 369.480092][T14816] veth1_macvtap: entered allmulticast mode [ 369.487187][T14816] veth0_macvtap: entered allmulticast mode [ 369.493299][T14816] macvtap0: entered allmulticast mode [ 369.502571][T14816] macsec0: entered allmulticast mode [ 369.511226][T14816] geneve0: entered allmulticast mode [ 369.518765][ T52] Bluetooth: hci14: command tx timeout [ 369.520866][T14816] geneve1: entered allmulticast mode [ 369.530290][T14816] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 369.537976][T14816] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 369.546141][T14816] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 369.553967][T14816] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 369.561782][T14816] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode [ 369.632538][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.662578][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.836356][ C0] net_ratelimit: 1 callbacks suppressed [ 369.836376][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.689395][T14848] wg1 speed is unknown, defaulting to 1000 [ 371.370137][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.522232][T14866] __nla_validate_parse: 4 callbacks suppressed [ 371.522253][T14866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2260'. [ 371.563145][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.595817][ T52] Bluetooth: hci14: command tx timeout [ 371.641427][T14871] bond0: entered promiscuous mode [ 371.646918][T14871] bond_slave_0: entered promiscuous mode [ 371.653173][T14871] bond_slave_1: entered promiscuous mode [ 371.662694][T14871] batadv0: entered promiscuous mode [ 371.684770][T14871] debugfs: 'hsr1' already exists in 'hsr' [ 371.696702][T14871] Cannot create hsr debugfs directory [ 371.716402][T14871] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 371.735601][T14871] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 371.750208][T14871] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 371.771941][T14871] bond0: left promiscuous mode [ 371.778898][T14871] bond_slave_0: left promiscuous mode [ 371.784626][T14871] bond_slave_1: left promiscuous mode [ 371.792911][T14871] batadv0: left promiscuous mode [ 371.820842][T14870] bond0: entered promiscuous mode [ 371.826028][T14870] bond_slave_0: entered promiscuous mode [ 371.831914][T14870] bond_slave_1: entered promiscuous mode [ 371.840157][T14870] batadv0: entered promiscuous mode [ 371.846653][T14870] debugfs: 'hsr1' already exists in 'hsr' [ 371.852433][T14870] Cannot create hsr debugfs directory [ 371.858151][T14870] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 371.869043][T14870] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 371.886077][T14870] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 371.895032][T14870] bond0: left promiscuous mode [ 371.901487][T14870] bond_slave_0: left promiscuous mode [ 371.907254][T14870] bond_slave_1: left promiscuous mode [ 371.915510][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.928258][T14870] batadv0: left promiscuous mode [ 372.132412][T14889] tipc: Started in network mode [ 372.138177][T14889] tipc: Node identity 9658770ce9ae, cluster identity 4711 [ 372.146165][T14889] tipc: Enabled bearer , priority 0 [ 372.218286][T14893] tipc: Resetting bearer [ 372.275003][T14888] tipc: Disabling bearer [ 372.527558][T14896] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 372.572793][T14900] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 372.673542][T14905] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2270'. [ 372.955542][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.966666][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.012544][T14916] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2273'. [ 373.064616][T14916] wg1 speed is unknown, defaulting to 1000 [ 373.241531][T14923] syzkaller0: entered promiscuous mode [ 373.247871][T14923] syzkaller0: entered allmulticast mode [ 373.397168][T14932] æÿîÿ: entered promiscuous mode [ 373.598679][T14942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.169780][T14946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2283'. [ 374.174320][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.879260][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.048946][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.117038][ T5832] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 375.119286][T14967] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2289'. [ 375.134958][ T5832] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 375.144450][ T5832] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 375.154159][ T5832] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 375.162532][ T5832] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 376.012835][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.075719][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.540115][T14969] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.548200][T14969] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.729274][T14969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.752803][T14969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.774934][T14987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2294'. [ 376.917597][ T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.938796][ T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.995601][ T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.009247][ T13] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.119406][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.198546][ T52] Bluetooth: hci15: command tx timeout [ 377.208638][T14966] wg1 speed is unknown, defaulting to 1000 [ 377.220715][T14996] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2298'. [ 377.266542][T14996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2298'. [ 377.291940][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.297139][T14996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2298'. [ 377.447150][T15005] lo speed is unknown, defaulting to 1000 [ 377.538275][T15005] lo speed is unknown, defaulting to 1000 [ 377.544970][T15005] lo speed is unknown, defaulting to 1000 [ 377.583638][T14966] chnl_net:caif_netlink_parms(): no params data found [ 377.644049][T15010] netlink: 'syz.0.2301': attribute type 1 has an invalid length. [ 377.672848][T15010] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2301'. [ 377.700277][T15005] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 377.864348][ T5832] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 377.876756][ T5832] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 377.886240][ T5832] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 377.911984][ T5832] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 377.925744][ T5832] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 378.008954][T14966] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.018252][T14966] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.025872][T14966] bridge_slave_0: entered allmulticast mode [ 378.034281][T14966] bridge_slave_0: entered promiscuous mode [ 378.052945][T15005] lo speed is unknown, defaulting to 1000 [ 378.063043][T14966] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.076738][T14966] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.084462][T14966] bridge_slave_1: entered allmulticast mode [ 378.093454][T14966] bridge_slave_1: entered promiscuous mode [ 378.136657][T15005] lo speed is unknown, defaulting to 1000 [ 378.204354][T14966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.224789][T15030] netlink: 'syz.1.2305': attribute type 43 has an invalid length. [ 378.261964][T15005] lo speed is unknown, defaulting to 1000 [ 378.281058][T14966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.377847][T15005] lo speed is unknown, defaulting to 1000 [ 378.432545][T14966] team0: Port device team_slave_0 added [ 378.442441][T15018] wg1 speed is unknown, defaulting to 1000 [ 378.442487][T15005] lo speed is unknown, defaulting to 1000 [ 378.464981][T14966] team0: Port device team_slave_1 added [ 378.508518][T15038] netlink: 'syz.0.2306': attribute type 32 has an invalid length. [ 378.520508][T15038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2306'. [ 378.539705][T15018] lo speed is unknown, defaulting to 1000 [ 378.541419][T14966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.553940][T14966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.589216][T14966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.643292][T15038] bond1: option coupled_control: invalid value (12) [ 378.652752][T15038] bond1 (unregistering): Released all slaves [ 378.678520][T15005] lo speed is unknown, defaulting to 1000 [ 378.686114][T14966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.693241][T14966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.725163][T14966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.782720][T15005] lo speed is unknown, defaulting to 1000 [ 378.807375][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.823411][T15005] lo speed is unknown, defaulting to 1000 [ 378.878842][T15005] lo speed is unknown, defaulting to 1000 [ 378.918901][T15005] lo speed is unknown, defaulting to 1000 [ 378.933091][T14966] hsr_slave_0: entered promiscuous mode [ 378.944457][T14966] hsr_slave_1: entered promiscuous mode [ 378.953983][T14966] debugfs: 'hsr0' already exists in 'hsr' [ 378.961671][T14966] Cannot create hsr debugfs directory [ 378.980053][T15005] lo speed is unknown, defaulting to 1000 [ 379.019029][T15005] lo speed is unknown, defaulting to 1000 [ 379.049835][T15005] lo speed is unknown, defaulting to 1000 [ 379.218929][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.244697][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.251753][T15005] lo speed is unknown, defaulting to 1000 [ 379.277378][ T52] Bluetooth: hci15: command tx timeout [ 379.375508][T15005] lo speed is unknown, defaulting to 1000 [ 379.446130][T15005] lo speed is unknown, defaulting to 1000 [ 379.500562][T15005] lo speed is unknown, defaulting to 1000 [ 379.557072][T15005] lo speed is unknown, defaulting to 1000 [ 379.590113][T15005] lo speed is unknown, defaulting to 1000 [ 379.714653][T15005] lo speed is unknown, defaulting to 1000 [ 379.764667][T15005] lo speed is unknown, defaulting to 1000 [ 379.773502][T15018] chnl_net:caif_netlink_parms(): no params data found [ 379.814821][T15005] lo speed is unknown, defaulting to 1000 [ 379.900076][T15005] lo speed is unknown, defaulting to 1000 [ 379.938010][T15005] lo speed is unknown, defaulting to 1000 [ 379.943826][T15068] trusted_key: syz.0.2314 sent an empty control message without MSG_MORE. [ 379.990051][T15005] lo speed is unknown, defaulting to 1000 [ 379.996687][ T52] Bluetooth: hci16: command tx timeout [ 380.042215][T15005] lo speed is unknown, defaulting to 1000 [ 380.093217][T15005] lo speed is unknown, defaulting to 1000 [ 380.109494][T15074] ip6gre1: entered allmulticast mode [ 380.118187][T15018] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.133344][T15018] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.143222][T15018] bridge_slave_0: entered allmulticast mode [ 380.151878][T15018] bridge_slave_0: entered promiscuous mode [ 380.162559][T15018] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.171121][T15018] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.182004][T15018] bridge_slave_1: entered allmulticast mode [ 380.194070][T15018] bridge_slave_1: entered promiscuous mode [ 380.228756][T15005] lo speed is unknown, defaulting to 1000 [ 380.234800][T15077] tipc: Enabling of bearer rejected, failed to enable media [ 380.282180][T15018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.311440][T15005] lo speed is unknown, defaulting to 1000 [ 380.339203][T15018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.354197][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.357881][T15005] lo speed is unknown, defaulting to 1000 [ 380.448524][T15085] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 380.464626][T14966] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 380.473407][T15005] lo speed is unknown, defaulting to 1000 [ 380.482722][T15088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.501790][T15018] team0: Port device team_slave_0 added [ 380.511219][T14966] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 380.519892][T15005] lo speed is unknown, defaulting to 1000 [ 380.536511][T14966] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 380.551346][T15018] team0: Port device team_slave_1 added [ 380.583687][T15005] lo speed is unknown, defaulting to 1000 [ 380.602970][T14966] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 380.614039][T15005] lo speed is unknown, defaulting to 1000 [ 380.627335][T15018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.649509][T15018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.681199][T15018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.694777][T15018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.702128][T15018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.731633][T15018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.748959][T15005] lo speed is unknown, defaulting to 1000 [ 380.769640][T15005] lo speed is unknown, defaulting to 1000 [ 380.813969][T15005] lo speed is unknown, defaulting to 1000 [ 380.862552][T15005] lo speed is unknown, defaulting to 1000 [ 380.876410][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 380.892862][T15018] hsr_slave_0: entered promiscuous mode [ 380.900622][T15018] hsr_slave_1: entered promiscuous mode [ 380.907887][T15018] debugfs: 'hsr0' already exists in 'hsr' [ 380.913622][T15018] Cannot create hsr debugfs directory [ 380.920367][T15103] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2322'. [ 380.925847][T15005] lo speed is unknown, defaulting to 1000 [ 380.977618][T15005] lo speed is unknown, defaulting to 1000 [ 381.022056][T15005] lo speed is unknown, defaulting to 1000 [ 381.045223][T15005] lo speed is unknown, defaulting to 1000 [ 381.119717][T15005] lo speed is unknown, defaulting to 1000 [ 381.144134][T15005] lo speed is unknown, defaulting to 1000 [ 381.182112][T15005] lo speed is unknown, defaulting to 1000 [ 381.207352][T15005] lo speed is unknown, defaulting to 1000 [ 381.238696][T15005] lo speed is unknown, defaulting to 1000 [ 381.250897][T14966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.266313][T15005] lo speed is unknown, defaulting to 1000 [ 381.275226][T15111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2325'. [ 381.288333][T15111] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2325'. [ 381.301349][T15111] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2325'. [ 381.308207][T15005] lo speed is unknown, defaulting to 1000 [ 381.355195][T15005] lo speed is unknown, defaulting to 1000 [ 381.363047][ T5832] Bluetooth: hci15: command tx timeout [ 381.437212][T14966] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.490640][ T4048] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.498253][ T4048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.562394][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.569695][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.623597][T15018] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.666760][T15123] digital: digital_start_poll: Unknown protocol [ 381.733236][T15018] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.821296][T15018] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.879151][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.939134][T15131] __nla_validate_parse: 9 callbacks suppressed [ 381.939158][T15131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2331'. [ 381.949027][T15133] x_tables: unsorted underflow at hook 2 [ 381.956951][T15018] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.039157][ T4048] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.061535][ T4048] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.077275][ T5832] Bluetooth: hci16: command tx timeout [ 382.087134][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.092062][ T71] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.112535][ T4048] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.234964][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.278052][T15139] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2334'. [ 382.425935][T15018] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 382.454019][T15018] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 382.477698][T15145] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.523356][T15018] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 382.551063][T15018] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 382.628622][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.663318][T15150] tipc: Enabled bearer , priority 0 [ 382.717992][T15150] syzkaller0: entered promiscuous mode [ 382.724219][T15150] syzkaller0: entered allmulticast mode [ 382.747996][T14966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.764677][T15160] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2340'. [ 382.777470][T15150] tipc: Resetting bearer [ 382.790418][T15149] tipc: Resetting bearer [ 382.816697][T15149] tipc: Disabling bearer [ 382.947808][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.017789][T15162] wg1 speed is unknown, defaulting to 1000 [ 383.144473][T15162] lo speed is unknown, defaulting to 1000 [ 383.193288][T15177] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2343'. [ 383.307040][T15018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.356295][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.377588][T15018] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.421977][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.429335][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.438201][ T5832] Bluetooth: hci15: command tx timeout [ 383.453326][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.460575][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.592413][T15186] syzkaller0: entered promiscuous mode [ 383.598678][T15186] syzkaller0: entered allmulticast mode [ 383.629310][T15186] tipc: Enabled bearer , priority 0 [ 383.654907][T14966] veth0_vlan: entered promiscuous mode [ 383.663957][T15185] tipc: Resetting bearer [ 383.691970][T15185] tipc: Disabling bearer [ 383.747803][T14966] veth1_vlan: entered promiscuous mode [ 383.879461][T14966] veth0_macvtap: entered promiscuous mode [ 383.914608][T14966] veth1_macvtap: entered promiscuous mode [ 383.987923][T14966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.038961][T14966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.103487][ T71] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.130933][ T71] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.152208][T15200] wg1 speed is unknown, defaulting to 1000 [ 384.167982][T15200] lo speed is unknown, defaulting to 1000 [ 384.168584][ T5832] Bluetooth: hci16: command tx timeout [ 384.217524][ T71] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.229205][ T71] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.396474][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.404686][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.427434][T15018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.495228][T12240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.515984][T12240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.856001][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.884978][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.937896][T15225] wg1 speed is unknown, defaulting to 1000 [ 385.009574][T15225] lo speed is unknown, defaulting to 1000 [ 385.151100][T15235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2354'. [ 385.157279][T15232] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2284'. [ 385.191026][T15235] FAULT_INJECTION: forcing a failure. [ 385.191026][T15235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.239226][T15235] CPU: 0 UID: 0 PID: 15235 Comm: syz.0.2354 Not tainted syzkaller #0 PREEMPT(full) [ 385.239256][T15235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 385.239268][T15235] Call Trace: [ 385.239276][T15235] [ 385.239285][T15235] dump_stack_lvl+0x189/0x250 [ 385.239316][T15235] ? __pfx____ratelimit+0x10/0x10 [ 385.239351][T15235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.239384][T15235] ? __pfx__printk+0x10/0x10 [ 385.239405][T15235] ? __might_fault+0xb0/0x130 [ 385.239445][T15235] should_fail_ex+0x414/0x560 [ 385.239488][T15235] _copy_from_user+0x2d/0xb0 [ 385.239514][T15235] ___sys_sendmsg+0x158/0x2a0 [ 385.239541][T15235] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.239606][T15235] ? __fget_files+0x2a/0x420 [ 385.239624][T15235] ? __fget_files+0x3a0/0x420 [ 385.239655][T15235] __x64_sys_sendmsg+0x19b/0x260 [ 385.239681][T15235] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 385.239709][T15235] ? __pfx_ksys_write+0x10/0x10 [ 385.239735][T15235] ? do_syscall_64+0xbe/0xfa0 [ 385.239755][T15235] do_syscall_64+0xfa/0xfa0 [ 385.239769][T15235] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.239786][T15235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.239801][T15235] ? clear_bhb_loop+0x60/0xb0 [ 385.239822][T15235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.239836][T15235] RIP: 0033:0x7f8e6498f749 [ 385.239851][T15235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.239865][T15235] RSP: 002b:00007f8e658c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.239884][T15235] RAX: ffffffffffffffda RBX: 00007f8e64be5fa0 RCX: 00007f8e6498f749 [ 385.239896][T15235] RDX: 00000000200008d4 RSI: 0000200000000000 RDI: 0000000000000007 [ 385.239906][T15235] RBP: 00007f8e658c7090 R08: 0000000000000000 R09: 0000000000000000 [ 385.239916][T15235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.239925][T15235] R13: 00007f8e64be6038 R14: 00007f8e64be5fa0 R15: 00007fff792327d8 [ 385.239959][T15235] [ 385.263389][T15232] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2284'. [ 385.435513][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.481118][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.499279][T15018] veth0_vlan: entered promiscuous mode [ 385.629406][T15246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2355'. [ 385.647079][T15018] veth1_vlan: entered promiscuous mode [ 385.734830][T15251] netlink: 'syz.1.2358': attribute type 39 has an invalid length. [ 385.763145][T15018] veth0_macvtap: entered promiscuous mode [ 385.814336][T15018] veth1_macvtap: entered promiscuous mode [ 385.863529][T15253] wg1 speed is unknown, defaulting to 1000 [ 385.872606][T15018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.914618][T15253] lo speed is unknown, defaulting to 1000 [ 385.942640][T15018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.944645][T15262] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2360'. [ 386.012737][T15260] netlink: 'syz.0.2359': attribute type 4 has an invalid length. [ 386.022383][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.046523][T15260] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2359'. [ 386.063622][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.117475][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.165997][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.252644][ T52] Bluetooth: hci16: command tx timeout [ 386.440907][T15276] FAULT_INJECTION: forcing a failure. [ 386.440907][T15276] name failslab, interval 1, probability 0, space 0, times 0 [ 386.454342][T15276] CPU: 0 UID: 0 PID: 15276 Comm: syz.0.2364 Not tainted syzkaller #0 PREEMPT(full) [ 386.454371][T15276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 386.454383][T15276] Call Trace: [ 386.454391][T15276] [ 386.454410][T15276] dump_stack_lvl+0x189/0x250 [ 386.454442][T15276] ? __pfx____ratelimit+0x10/0x10 [ 386.454471][T15276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.454496][T15276] ? __pfx__printk+0x10/0x10 [ 386.454520][T15276] ? __pfx___might_resched+0x10/0x10 [ 386.454540][T15276] ? fs_reclaim_acquire+0x7d/0x100 [ 386.454564][T15276] should_fail_ex+0x414/0x560 [ 386.454598][T15276] should_failslab+0xa8/0x100 [ 386.454628][T15276] kmem_cache_alloc_node_noprof+0x77/0x710 [ 386.454655][T15276] ? __alloc_skb+0x255/0x430 [ 386.454674][T15276] ? napi_skb_cache_get+0x4a5/0x790 [ 386.454691][T15276] ? napi_skb_cache_get+0x151/0x790 [ 386.454715][T15276] __alloc_skb+0x255/0x430 [ 386.454738][T15276] ? __pfx___alloc_skb+0x10/0x10 [ 386.454760][T15276] ? netlink_autobind+0xdb/0x300 [ 386.454780][T15276] ? netlink_autobind+0x2c2/0x300 [ 386.454807][T15276] netlink_sendmsg+0x5c6/0xb30 [ 386.454837][T15276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.454862][T15276] ? aa_sock_msg_perm+0xf1/0x1d0 [ 386.454893][T15276] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 386.454912][T15276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.454935][T15276] __sock_sendmsg+0x21c/0x270 [ 386.454967][T15276] ____sys_sendmsg+0x505/0x830 [ 386.454997][T15276] ? __pfx_____sys_sendmsg+0x10/0x10 [ 386.455030][T15276] ? import_iovec+0x74/0xa0 [ 386.455061][T15276] ___sys_sendmsg+0x21f/0x2a0 [ 386.455084][T15276] ? __pfx____sys_sendmsg+0x10/0x10 [ 386.455148][T15276] ? __fget_files+0x2a/0x420 [ 386.455165][T15276] ? __fget_files+0x3a0/0x420 [ 386.455196][T15276] __x64_sys_sendmsg+0x19b/0x260 [ 386.455232][T15276] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 386.455267][T15276] ? __pfx_ksys_write+0x10/0x10 [ 386.455302][T15276] ? do_syscall_64+0xbe/0xfa0 [ 386.455325][T15276] do_syscall_64+0xfa/0xfa0 [ 386.455340][T15276] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.455359][T15276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.455376][T15276] ? clear_bhb_loop+0x60/0xb0 [ 386.455408][T15276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.455426][T15276] RIP: 0033:0x7f8e6498f749 [ 386.455444][T15276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.455460][T15276] RSP: 002b:00007f8e658c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.455481][T15276] RAX: ffffffffffffffda RBX: 00007f8e64be5fa0 RCX: 00007f8e6498f749 [ 386.455495][T15276] RDX: 00000000200008d4 RSI: 0000200000000000 RDI: 0000000000000007 [ 386.455507][T15276] RBP: 00007f8e658c7090 R08: 0000000000000000 R09: 0000000000000000 [ 386.455519][T15276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.455530][T15276] R13: 00007f8e64be6038 R14: 00007f8e64be5fa0 R15: 00007fff792327d8 [ 386.455565][T15276] [ 386.749482][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.772941][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.782942][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.847871][T15280] netlink: 'syz.6.2365': attribute type 2 has an invalid length. [ 386.907922][T15280] !: entered promiscuous mode [ 386.915120][T15284] netlink: 'syz.6.2365': attribute type 2 has an invalid length. [ 386.931187][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.941065][T15284] !: left promiscuous mode [ 386.953453][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.972481][T15286] __nla_validate_parse: 2 callbacks suppressed [ 386.972503][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2367'. [ 386.990620][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2367'. [ 387.138041][T15295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2370'. [ 387.147615][T15295] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2370'. [ 387.189889][T15298] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2296'. [ 387.199426][T15298] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2296'. [ 387.229011][T15298] ip6gretap1: entered promiscuous mode [ 387.264654][T15301] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2371'. [ 387.274471][T15298] ip6gretap1: entered allmulticast mode [ 387.653495][T15311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2373'. [ 387.755796][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.765944][ T5832] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 387.773060][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 387.937204][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.941136][T15316] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2376'. [ 388.080446][T15319] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2377'. [ 388.166812][T15316] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.310229][T15316] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.466690][T15316] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.658529][T15316] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.796210][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.929569][ T71] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.966205][ T50] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.009922][ T50] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.028541][T15340] tls_set_device_offload_rx: netdev not found [ 389.089432][T12240] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.753677][T15350] netlink: 'syz.1.2390': attribute type 10 has an invalid length. [ 389.835411][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.878159][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.044601][T15352] wg1 speed is unknown, defaulting to 1000 [ 390.055986][T15352] lo speed is unknown, defaulting to 1000 [ 390.468538][T15367] netlink: 'syz.1.2394': attribute type 1 has an invalid length. [ 390.512126][T15368] bond1: entered allmulticast mode [ 390.875418][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.957218][ T31] INFO: task kworker/u8:6:335 blocked for more than 143 seconds. [ 390.968228][ T31] Not tainted syzkaller #0 [ 390.973303][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 390.998676][ T31] task:kworker/u8:6 state:D stack:21864 pid:335 tgid:335 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 391.066170][ T31] Workqueue: netns cleanup_net [ 391.071023][ T31] Call Trace: [ 391.074324][ T31] [ 391.108927][ T31] __schedule+0x1798/0x4cc0 [ 391.113552][ T31] ? __lock_acquire+0xab9/0xd20 [ 391.144248][ T31] ? __lock_acquire+0xab9/0xd20 [ 391.169439][ T31] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 391.192874][ T31] ? schedule+0x91/0x360 [ 391.208235][ T31] schedule+0x165/0x360 [ 391.238078][ T31] schedule_preempt_disabled+0x13/0x30 [ 391.266685][ T31] __mutex_lock+0x7e6/0x1350 [ 391.274593][ T31] ? __mutex_lock+0x5bb/0x1350 [ 391.288240][ T31] ? rdma_dev_change_netns+0x39/0x300 [ 391.306667][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 391.316176][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 391.322093][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 391.334513][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 391.340467][ T31] ? _raw_spin_unlock+0x28/0x50 [ 391.350669][ T31] rdma_dev_change_netns+0x39/0x300 [ 391.379931][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.419638][ T31] rdma_dev_exit_net+0x203/0x340 [ 391.476051][ T31] ? __pfx___might_resched+0x10/0x10 [ 391.481530][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 391.505887][ T31] ? net_generic+0x1e/0x240 [ 391.510561][ T31] ? mutex_is_locked+0x17/0x50 [ 391.520674][ T31] ? rtnl_is_locked+0x15/0x20 [ 391.529022][ T31] ops_undo_list+0x49a/0x990 [ 391.535282][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 391.540808][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 391.546533][ T31] cleanup_net+0x4d8/0x820 [ 391.551087][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 391.556516][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.561956][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 391.567948][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 391.573714][ T31] process_scheduled_works+0xae1/0x17b0 [ 391.579391][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 391.585801][ T31] worker_thread+0x8a0/0xda0 [ 391.590546][ T31] kthread+0x711/0x8a0 [ 391.594664][ T31] ? __pfx_worker_thread+0x10/0x10 [ 391.601046][ T31] ? __pfx_kthread+0x10/0x10 [ 391.606408][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.611689][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.617097][ T31] ? __pfx_kthread+0x10/0x10 [ 391.621732][ T31] ret_from_fork+0x4bc/0x870 [ 391.626530][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 391.631687][ T31] ? __switch_to_asm+0x39/0x70 [ 391.638490][ T31] ? __switch_to_asm+0x33/0x70 [ 391.643297][ T31] ? __pfx_kthread+0x10/0x10 [ 391.648293][ T31] ret_from_fork_asm+0x1a/0x30 [ 391.653115][ T31] [ 391.656482][ T31] INFO: task syz.4.1234:10819 blocked for more than 144 seconds. [ 391.664234][ T31] Not tainted syzkaller #0 [ 391.670307][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.695857][ T31] task:syz.4.1234 state:D stack:24504 pid:10819 tgid:10818 ppid:5826 task_flags:0x400140 flags:0x00080003 [ 391.719112][ T31] Call Trace: [ 391.722450][ T31] [ 391.725522][ T31] __schedule+0x1798/0x4cc0 [ 391.730077][ T31] ? validate_chain+0x897/0x2140 [ 391.735138][ T31] ? __lock_acquire+0xab9/0xd20 [ 391.742000][ T31] ? __pfx___schedule+0x10/0x10 [ 391.747217][ T31] ? schedule+0x91/0x360 [ 391.751516][ T31] schedule+0x165/0x360 [ 391.755971][ T31] schedule_timeout+0x9a/0x270 [ 391.760783][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 391.766432][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.771694][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.777117][ T31] ? wait_for_completion+0x267/0x5d0 [ 391.782516][ T31] wait_for_completion+0x2bf/0x5d0 [ 391.787774][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 391.793459][ T31] ? up_write+0x1c4/0x420 [ 391.797951][ T31] ? remove_client_context+0xc0/0x1e0 [ 391.803392][ T31] disable_device+0x1c6/0x320 [ 391.808211][ T31] ? __pfx_disable_device+0x10/0x10 [ 391.813575][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 391.819272][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 391.825412][ T31] ib_unregister_device_and_put+0xb8/0xf0 [ 391.831272][ T31] nldev_dellink+0x2d1/0x320 [ 391.836759][ T31] ? __lock_acquire+0xab9/0xd20 [ 391.843262][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 391.848981][ T31] ? apparmor_capable+0x137/0x1b0 [ 391.854112][ T31] ? bpf_lsm_capable+0x9/0x20 [ 391.859028][ T31] ? security_capable+0x7e/0x2e0 [ 391.863994][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 391.869202][ T31] rdma_nl_rcv+0x6ae/0x980 [ 391.873753][ T31] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 391.879082][ T31] ? __lock_acquire+0xab9/0xd20 [ 391.883992][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 391.889402][ T31] netlink_unicast+0x82f/0x9e0 [ 391.894216][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 391.899711][ T31] ? plist_check_list+0x30f/0x330 [ 391.904843][ T31] ? netlink_sendmsg+0x642/0xb30 [ 391.909826][ T31] ? skb_put+0x11b/0x210 [ 391.914159][ T31] netlink_sendmsg+0x805/0xb30 [ 391.919512][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.924858][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 391.929877][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 391.935174][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.940564][ T31] __sock_sendmsg+0x21c/0x270 [ 391.946578][ T31] ____sys_sendmsg+0x505/0x830 [ 391.951487][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.957022][ T31] ? import_iovec+0x74/0xa0 [ 391.961549][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 391.966442][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.971667][ T31] ? __fget_files+0x2a/0x420 [ 391.976343][ T31] ? __fget_files+0x3a0/0x420 [ 391.981028][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 391.986063][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 391.991763][ T31] ? do_syscall_64+0xbe/0xfa0 [ 391.998448][ T31] do_syscall_64+0xfa/0xfa0 [ 392.003004][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.008580][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.014965][ T31] ? clear_bhb_loop+0x60/0xb0 [ 392.019817][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.025879][ T31] RIP: 0033:0x7f4aa518f749 [ 392.030498][ T31] RSP: 002b:00007f4aa606a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.039013][ T31] RAX: ffffffffffffffda RBX: 00007f4aa53e5fa0 RCX: 00007f4aa518f749 [ 392.048129][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 392.056263][ T31] RBP: 00007f4aa5213f91 R08: 0000000000000000 R09: 0000000000000000 [ 392.064447][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.072558][ T31] R13: 00007f4aa53e6038 R14: 00007f4aa53e5fa0 R15: 00007ffe31225c08 [ 392.082732][ T31] [ 392.088740][ T31] [ 392.088740][ T31] Showing all locks held in the system: [ 392.113261][ T31] 2 locks held by kworker/u8:1/13: [ 392.118711][ T31] 1 lock held by khungtaskd/31: [ 392.123587][ T31] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 392.134099][ T31] 5 locks held by kworker/u8:3/50: [ 392.149607][ T31] #0: ffff8880b883a218 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 392.160535][ T31] #1: ffff8880b8824048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 392.170192][ T31] #2: ffffffff8df3d700 (rcu_read_lock_bh){....}-{1:3}, at: mod_peer_timer+0x21/0x260 [ 392.180347][ T31] #3: ffff8880b8925958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 392.189691][ T31] #4: ffffffff99a5a650 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 392.200076][ T31] 3 locks held by kworker/u8:4/71: [ 392.205387][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 392.217567][ T31] #1: ffffc9000216fba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 392.228606][ T31] #2: ffffffff8f2cc1c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 392.238713][ T31] 4 locks held by kworker/u8:6/335: [ 392.244837][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 392.257372][ T31] #1: ffffc90003027ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 392.268370][ T31] #2: ffffffff8f2bf210 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 392.277889][ T31] #3: ffff88807c0f4700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 392.289477][ T31] 2 locks held by getty/5582: [ 392.294167][ T31] #0: ffff88814d3660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 392.304124][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 392.314282][ T31] 3 locks held by kworker/0:5/5899: [ 392.319798][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 392.330870][ T31] #1: ffffc9000450fba0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 392.343935][ T31] #2: ffff88809652a240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1f7/0x3b0 [ 392.355068][ T31] 2 locks held by syz.4.1234/10819: [ 392.360518][ T31] #0: ffffffff99b68938 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 392.370618][ T31] #1: ffff88807c0f4700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 392.382245][ T31] 2 locks held by syz.3.1420/11494: [ 392.387583][ T31] #0: ffffffff8f2bf210 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 392.397283][ T31] #1: ffff88807c0f4700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 392.408697][ T31] 2 locks held by syz.0.1488/11744: [ 392.413927][ T31] #0: ffffffff8f2bf210 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 392.423418][ T31] #1: ffff88807c0f4700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 392.434805][ T31] 2 locks held by syz.1.1491/11761: [ 392.440111][ T31] #0: ffffffff8f2bf210 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 392.449563][ T31] #1: ffff88807c0f4700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 392.461888][ T31] 2 locks held by syz.1.1491/11763: [ 392.467259][ T31] #0: ffffffff8f2bf210 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 392.477047][ T31] #1: ffff88807c0f4700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 392.488605][ T31] 2 locks held by kworker/u8:9/12240: [ 392.494006][ T31] 2 locks held by syz.5.1816/13060: [ 392.499425][ T31] #0: ffffffff8f2bf210 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 392.508914][ T31] #1: ffff88807c0f4700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 392.520380][ T31] 2 locks held by syz.6.1861/13230: [ 392.525654][ T31] #0: ffffffff99b68938 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 392.535993][ T31] #1: ffff88807c0f4700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 392.547932][ T31] 2 locks held by syz.8.1953/13635: [ 392.553314][ T31] #0: ffffffff8f2bf210 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 392.564283][ T31] #1: ffff88807c0f4700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 392.575970][ T31] 2 locks held by syz.7.2039/13991: [ 392.581197][ T31] #0: ffffffff8f2bf210 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 392.590804][ T31] #1: ffff88807c0f4700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 392.602256][ T31] 2 locks held by syz.4.1978/14066: [ 392.607534][ T31] #0: ffffffff8f2bf210 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 392.617224][ T31] #1: ffff88807c0f4700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 392.628764][ T31] 2 locks held by syz.2.2108/14250: [ 392.634069][ T31] #0: ffffffff8f2bf210 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 392.643824][ T31] #1: ffff88807c0f4700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 392.655274][ T31] 5 locks held by syz-executor/14301: [ 392.661771][ T31] #0: ffff88808b9a0dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 392.672347][ T31] #1: ffff88808b9a00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 392.682201][ T31] #2: ffffffff8f4361e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 392.692327][ T31] #3: ffff888039f3c338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 392.701705][ T31] #4: ffffffff8df43138 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 392.712781][ T31] 2 locks held by syz.3.2193/14572: [ 392.718288][ T31] #0: ffffffff8f2bf210 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 392.727833][ T31] #1: ffff88807c0f4700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 392.739639][ T31] 2 locks held by syz.9.2208/14628: [ 392.744859][ T31] #0: ffffffff99b68938 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 392.755163][ T31] #1: ffff88807c0f4700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 392.767994][ T31] 2 locks held by syz.5.2357/15253: [ 392.773240][ T31] #0: ffffffff8f2bf210 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 392.783283][ T31] #1: ffff88807c0f4700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 392.795123][ T31] 2 locks held by syz.6.2398/15379: [ 392.801562][ T31] #0: ffffffff8f2cc1c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 392.811058][ T31] #1: ffffffff8df43138 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 392.822390][ T31] 1 lock held by syz.8.2400/15389: [ 392.827893][ T31] #0: ffffffff8f2cc1c8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 392.837109][ T31] [ 392.839472][ T31] ============================================= [ 392.839472][ T31] [ 392.850342][ T31] NMI backtrace for cpu 0 [ 392.850361][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 392.850383][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 392.850393][ T31] Call Trace: [ 392.850401][ T31] [ 392.850409][ T31] dump_stack_lvl+0x189/0x250 [ 392.850442][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.850468][ T31] ? __pfx__printk+0x10/0x10 [ 392.850503][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 392.850532][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 392.850561][ T31] ? __pfx__printk+0x10/0x10 [ 392.850586][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 392.850608][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 392.850637][ T31] watchdog+0xf60/0xfa0 [ 392.850663][ T31] ? watchdog+0x1e2/0xfa0 [ 392.850688][ T31] kthread+0x711/0x8a0 [ 392.850715][ T31] ? __pfx_watchdog+0x10/0x10 [ 392.850733][ T31] ? __pfx_kthread+0x10/0x10 [ 392.850761][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 392.850789][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.850806][ T31] ? __pfx_kthread+0x10/0x10 [ 392.850832][ T31] ret_from_fork+0x4bc/0x870 [ 392.850855][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 392.850883][ T31] ? __switch_to_asm+0x39/0x70 [ 392.850898][ T31] ? __switch_to_asm+0x33/0x70 [ 392.850911][ T31] ? __pfx_kthread+0x10/0x10 [ 392.850934][ T31] ret_from_fork_asm+0x1a/0x30 [ 392.850965][ T31] [ 392.850971][ T31] Sending NMI from CPU 0 to CPUs 1: [ 392.956909][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.017344][ C1] NMI backtrace for cpu 1 [ 393.017367][ C1] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 393.017395][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 393.017405][ C1] Workqueue: events drain_vmap_area_work [ 393.017428][ C1] RIP: 0010:filter_irq_stacks+0x26/0xa0 [ 393.017451][ C1] Code: 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 53 85 f6 74 70 49 89 fe 41 89 f4 31 db 49 bd 00 00 00 00 00 fc ff df 49 89 ff <4c> 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 c4 8a 79 00 [ 393.017464][ C1] RSP: 0018:ffffc90000b37448 EFLAGS: 00000206 [ 393.017477][ C1] RAX: ffffffff818bbc01 RBX: 0000000000000009 RCX: 0000000000000001 [ 393.017488][ C1] RDX: 0000000000002000 RSI: 000000000000000c RDI: ffffc90000b37520 [ 393.017499][ C1] RBP: ffffc90000b37620 R08: 000000000000001f R09: ffffffff81738c45 [ 393.017510][ C1] R10: ffffc90000b373f8 R11: ffffffff81ac2ea0 R12: 000000000000000c [ 393.017520][ C1] R13: dffffc0000000000 R14: ffffc90000b37520 R15: ffffc90000b37568 [ 393.017532][ C1] FS: 0000000000000000(0000) GS:ffff888126238000(0000) knlGS:0000000000000000 [ 393.017544][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 393.017555][ C1] CR2: 000055dfb0e9c000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 393.017572][ C1] Call Trace: [ 393.017578][ C1] [ 393.017588][ C1] stack_depot_save_flags+0x40/0x860 [ 393.017616][ C1] save_stack+0x103/0x1f0 [ 393.017638][ C1] ? __pfx_save_stack+0x10/0x10 [ 393.017657][ C1] ? __free_frozen_pages+0xbc4/0xd30 [ 393.017676][ C1] ? kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 393.017696][ C1] ? __apply_to_page_range+0xb66/0x13d0 [ 393.017712][ C1] ? kasan_release_vmalloc+0xa2/0xd0 [ 393.017730][ C1] ? purge_vmap_node+0x214/0x8f0 [ 393.017743][ C1] ? __purge_vmap_area_lazy+0x7a4/0xb40 [ 393.017756][ C1] ? drain_vmap_area_work+0x27/0x40 [ 393.017769][ C1] ? process_scheduled_works+0xae1/0x17b0 [ 393.017785][ C1] ? worker_thread+0x8a0/0xda0 [ 393.017800][ C1] ? kthread+0x711/0x8a0 [ 393.017817][ C1] ? ret_from_fork+0x4bc/0x870 [ 393.017831][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 393.017849][ C1] ? page_ext_put+0x97/0xc0 [ 393.017871][ C1] __reset_page_owner+0x71/0x1f0 [ 393.017893][ C1] __free_frozen_pages+0xbc4/0xd30 [ 393.017917][ C1] kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 393.017937][ C1] __apply_to_page_range+0xb66/0x13d0 [ 393.017953][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 393.017974][ C1] ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 393.018005][ C1] ? __pfx___apply_to_page_range+0x10/0x10 [ 393.018027][ C1] kasan_release_vmalloc+0xa2/0xd0 [ 393.018047][ C1] purge_vmap_node+0x214/0x8f0 [ 393.018068][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 393.018091][ C1] ? __pfx_purge_vmap_node+0x10/0x10 [ 393.018107][ C1] ? flush_tlb_kernel_range+0x37c/0x470 [ 393.018131][ C1] __purge_vmap_area_lazy+0x7a4/0xb40 [ 393.018148][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 393.018165][ C1] drain_vmap_area_work+0x27/0x40 [ 393.018179][ C1] process_scheduled_works+0xae1/0x17b0 [ 393.018213][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 393.018244][ C1] worker_thread+0x8a0/0xda0 [ 393.018261][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 393.018287][ C1] ? __kthread_parkme+0x7b/0x200 [ 393.018308][ C1] kthread+0x711/0x8a0 [ 393.018328][ C1] ? __pfx_worker_thread+0x10/0x10 [ 393.018344][ C1] ? __pfx_kthread+0x10/0x10 [ 393.018363][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 393.018390][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 393.018403][ C1] ? __pfx_kthread+0x10/0x10 [ 393.018422][ C1] ret_from_fork+0x4bc/0x870 [ 393.018439][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 393.018458][ C1] ? __switch_to_asm+0x39/0x70 [ 393.018471][ C1] ? __switch_to_asm+0x33/0x70 [ 393.018483][ C1] ? __pfx_kthread+0x10/0x10 [ 393.018502][ C1] ret_from_fork_asm+0x1a/0x30 [ 393.018524][ C1] [ 393.626213][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.704967][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.995502][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.035474][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.077989][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.086320][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.235707][ T5832] Bluetooth: hci7: command 0x0406 tx timeout [ 396.879041][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.115544][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.201509][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.195540][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.486604][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.235471][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.243869][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog