last executing test programs: 12m39.579027368s ago: executing program 4 (id=2877): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x14}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001540), 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001200578300"/20, @ANYBLOB="000000000000000004"], 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x14}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) socket(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000001540), 0xffffffffffffffff) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001200578300"/20, @ANYBLOB="000000000000000004"], 0x24}}, 0x0) (async) 12m39.538571953s ago: executing program 4 (id=2878): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r4 = socket(0x10, 0x3, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x18, 0x3f9, 0x4, 0x70bd2c, 0x25dfdbfc, {0x1, 0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xbbe836683f9d1c5b) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x4e, 0x0, &(0x7f0000000180)="e0b9547ed387dbe9005bec6886dd", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001700)=@newtfilter={0x78, 0x28, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_CGROUP_ACT={0x34, 0x1, [@m_pedit={0x30, 0x7, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0x1}}}, 0x24}}, 0x810) 12m39.321247771s ago: executing program 4 (id=2879): syz_emit_ethernet(0x96, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x20, 0x4, 0x2, 0x5, 0x88, 0x65, 0x0, 0x13, 0x1, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x26, 0x2, [{0x6, 0x8, "83a4d199366c"}, {0x2, 0xb, "d9563495fa36343339"}, {0x0, 0xd, "c97e3c056d53e9b4fde503"}]}, @timestamp={0x44, 0x28, 0x6d, 0x0, 0x9, [0x1, 0xa2, 0x7, 0x7, 0x7f, 0x1, 0x5, 0xffff, 0xa3]}, @generic={0x1a1, 0x6, "13aec48b"}, @noop, @timestamp={0x44, 0x14, 0x51, 0x0, 0xd, [0x8, 0x670819c9, 0x3, 0xfffffff7]}]}}, @info_request={0xf, 0x0, 0x0, 0x0, 0x7f1}}}}}, 0x0) 12m39.273217288s ago: executing program 4 (id=2880): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60d1}, 0x94) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @local}, 0x2}}, 0x26) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)="648a6282c6e91b973836904a4a88affa0c371dd1b9c133c5e594714579d6bb3addfd43e78272aef64427ce5467d6994320cf139092452c7944ddab49e459f7e0c73f890e9e2463bd3390e20b1e472bd2aedb47094547a767a098a94a402e6aba65c0ef07eaa87f8663c763d9bb491243eb129eec434e5603956c8333a6ecdf4d3a601b9c8d3d63e3a4a57b38033e2b004f6c3e45f1645c3b7ca0d5ba5eea059b5aa4f0f80ac66904076cc60e47e1afc7d81ad937dee5efc0580e38d96cf0f53808f37d5a8811b07165e8b9aabceac06e4fa7f7668b8832877783a727a1fa8b972bfaeb232cf3e9b500965820f4adf64f1e5e", 0xf2}], 0x1}}], 0x1, 0x4044805) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd09000400000005000000080009000200000008000c00a80a000008000b000000000006000100"], 0x3c}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='mm_page_free_batched\x00', r2}, 0x18) r7 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r8, 0x0) mmap(&(0x7f0000ba5000/0x3000)=nil, 0x3000, 0x8, 0x22051, r8, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0xac141442, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) 12m38.038452668s ago: executing program 4 (id=2890): unshare(0x400) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x2, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0xc0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0x12, 0x0, 0x1}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r2, 0x26, 0x0, @void}, 0x10) 12m28.075521262s ago: executing program 4 (id=2893): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x114}], 0x1}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000025c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f0000000100)="fbffffff", 0x4) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001a00010000000000fdffffff0a00", @ANYRES32=0x0, @ANYRESHEX=r1], 0x44}}, 0x810) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, r2, 0x6e566000) sendto$inet6(r2, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) unshare(0x22020400) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYRESOCT, @ANYRES32=r4], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x51}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r5}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x5, 0x8}, 0x28) socket$tipc(0x1e, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x7, &(0x7f00000002c0)=0x6, 0x4) getsockopt$inet6_tcp_int(r7, 0x6, 0x7, 0x0, &(0x7f0000000180)) ioctl$int_out(r6, 0x5460, &(0x7f0000000080)) unshare(0x2a020400) socket$netlink(0x10, 0x3, 0x10) 12m27.693843831s ago: executing program 32 (id=2893): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x114}], 0x1}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000025c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f0000000100)="fbffffff", 0x4) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001a00010000000000fdffffff0a00", @ANYRES32=0x0, @ANYRESHEX=r1], 0x44}}, 0x810) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, r2, 0x6e566000) sendto$inet6(r2, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) unshare(0x22020400) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYRESOCT, @ANYRES32=r4], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x51}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r5}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x28, 0x0, 0x5, 0x8}, 0x28) socket$tipc(0x1e, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x7, &(0x7f00000002c0)=0x6, 0x4) getsockopt$inet6_tcp_int(r7, 0x6, 0x7, 0x0, &(0x7f0000000180)) ioctl$int_out(r6, 0x5460, &(0x7f0000000080)) unshare(0x2a020400) socket$netlink(0x10, 0x3, 0x10) 9m29.216322659s ago: executing program 0 (id=4570): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000100)={@default, @default, @null, 0x63, 0xffffffffffff0001, 0x0, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x30, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x0, r4, 0x10, 0x38, 0x4}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40008}, 0x4008000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r5}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000002b7030000000000008500000083000000bf09000000000000550901000000000095000000000000fd37cd39faffffff00b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r6}, 0x18) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r7, 0x400c6615, &(0x7f00000001c0)) r8 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r8, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000680)="b7", 0x1}], 0x1}}], 0x2, 0x24001844) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080), 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x120}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 9m28.93894236s ago: executing program 0 (id=4572): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r2, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000008}, 0x50004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002200000000000000000080071108c00000000009504000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 9m28.762048669s ago: executing program 1 (id=4575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000211002001c0012800b00010067656e65766500000c0002b04ae42f446f01fbfe8750a098bf8008000b40000000011400030067656e65766530000000000000000000"], 0x50}}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r3, 0x0, &(0x7f0000000a80)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000200000008000000f10f009cb1264566", @ANYRES32, @ANYBLOB='/\b\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="05000000050000000400"/28], 0x50) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r7) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e22, 0x7e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) connect$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0800001a00f7e800001c200000e47c3d24c8478eed000013f31b8d"], 0x1c}}, 0x0) sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0) accept(r6, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000680)=0x80) splice(r2, 0x0, r10, 0x0, 0x7fffeffd, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x2, 'veth1_vlan\x00', {0x4}, 0x80}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="006f1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64=r8, @ANYBLOB="9ba1e1a62cd69796c21fe89570"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r11, @ANYBLOB="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"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 9m28.105771542s ago: executing program 1 (id=4579): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt(r0, 0x1, 0x3, 0x0, &(0x7f0000000100)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r2, 0x4, 0x0, @val=@netfilter={0x7, 0x1, 0x5, 0x1}}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffffff80000018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 9m27.963391497s ago: executing program 1 (id=4581): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="a300efffffffff000008009600", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000100)="67acf7c8ff188befcc404b648473e4982733570ae921fb86d188c7113a8c98c9", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) socket(0x400000000010, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x140440a1) setsockopt$sock_attach_bpf(r4, 0x1, 0x12, &(0x7f00000007c0), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010101, @private=0xa010101}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r8 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r8}) socket(0x9, 0xf, 0x0) 9m27.94854263s ago: executing program 0 (id=4582): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x8814) r1 = socket$netlink(0x10, 0x3, 0x8000000004) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 64) ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, @default, @netrom={'nr', 0x0}, 0x3, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x8, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f00000003c0)={0x10, 0x0, 0xff7dffff, 0x100}, 0xc) (async) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x58, r9, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x5, 0x5d}}}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x10}, @NL80211_MESHCONF_FORWARDING={0x5, 0x13, 0x1}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x1000}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xa67, 0xb}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) (async) listen(r7, 0x6f6) (async) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 9m27.6095193s ago: executing program 0 (id=4587): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000002780)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002840)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x4, 0x2c, 0x0, 0x4}]}}}, @ip_retopts={{0xc8, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x33, 0x3, 0x6, [{@local, 0x5}, {@empty, 0x81}, {@rand_addr=0x64010101, 0x4}]}, @generic={0x82, 0xa, "e4c26352e78086db"}, @end, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x4e, 0xffffffffffffffff, [{0x3, 0x3, "be"}, {0x7, 0x7, '\x00wg?/'}, {0x5, 0x3, 'B'}, {0x0, 0xa, "82cfb032c65d3b29"}, {0x6, 0x11, "3c0eafe4f03929c9f4154b8a4248f9"}, {0x0, 0x10, "1e68d69d0ac780418d682f402cc8"}, {0x1, 0x10, "18345cdaf6b57fba3955743835ca"}]}, @cipso={0x86, 0x32, 0x0, [{0x0, 0x7, "346404bb3c"}, {0x2, 0x7, "9bc68c1926"}, {0x7, 0x2}, {0x6, 0xe, "727d823f842680e0afdf3159"}, {0x7, 0xe, "5599bd9d9d4280c717bc8580"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0x78, 0x0, 0x7, {[@end, @timestamp_prespec={0x44, 0x3c, 0xa7, 0x3, 0xe, [{@multicast2, 0xfffffffe}, {@broadcast}, {@empty, 0x10001}, {@multicast1, 0x9}, {@multicast2, 0x1ff}, {@multicast2, 0x9}, {@broadcast}]}, @ssrr={0x89, 0x7, 0x41, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x23, 0xb9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote, @rand_addr=0x64010100, @loopback, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x1e8}}], 0x2, 0x4000800) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004801) setsockopt$sock_attach_bpf(r0, 0x6, 0x25, &(0x7f0000000040), 0x4) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f00000000c0)={0x9, 0x10, [0xfd38, 0x9, 0x80000001, 0x7], &(0x7f0000000000)=[0x0, 0x0]}) pipe(&(0x7f0000000100)) 9m27.024007317s ago: executing program 1 (id=4592): r0 = socket$inet(0xa, 0x801, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x20000000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffe0}, {0x7}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3ff, 0x6361, 0x5, 0xffffffff, 0x2000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2b65, 0x267, 0x0, 0x25, 0x19dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@getchain={0x44, 0x66, 0x6f9fdf4e78a41be, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0x1}, {0x6, 0xf}, {0x3, 0x6}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x1ff}, {0x8, 0xb, 0x400001}, {0x8, 0xb, 0x200}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004025}, 0x4000080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r8 = accept4(r0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xf0, &(0x7f0000000840)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @tipc_packet={0xa, 0x6, "0118e0", 0xba, 0x6, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@srh={0x2e, 0x8, 0x4, 0x4, 0x40, 0x30, 0x1, [@mcast2, @private1, @rand_addr=' \x01\x00', @remote]}, @hopopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, @dstopts={0x62, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xd}]}], @payload_named={{{{{0x32, 0x0, 0x1, 0x0, 0x0, 0xa, 0x3, 0x2, 0x9, 0x0, 0x2, 0x3, 0x2, 0x2, 0x5, 0xfff, 0x2, 0x4e24, 0x4e20}, 0x4}, 0x0, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) sendto$inet(r8, &(0x7f00000002c0)="cc", 0x1, 0x41, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) sendmmsg$inet6(r8, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)='y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000040), 0x8) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00'}) r10 = socket$inet6(0xa, 0x80000, 0x1) setsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x20}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x4, 0x4e21, 0x7, 0xa, 0x60, 0x20, 0x87}, {0x80000000, 0x7, 0xfffffffffffffffb, 0x7, 0x9, 0x7, 0x8, 0x3}, {0x0, 0x100, 0x100, 0x6a}, 0x400, 0x6e6bb9, 0x1, 0x1, 0x1, 0x2}, {{@in6=@mcast1, 0x4d4, 0x3c}, 0xa, @in=@remote, 0x3500, 0xbf0a59c5fd157c33, 0x1, 0x5, 0xff80, 0x8, 0x9}}, 0xe8) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) 9m26.814542206s ago: executing program 1 (id=4595): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x100, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x2000, 0x21418}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x6}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x412a5d10ebf900a0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r2, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) bind$netlink(r9, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r10, 0x40004}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x100000, {0x0, 0x0, 0x0, r10, {0x6}, {}, {0x8}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r4, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50) 9m26.731812555s ago: executing program 0 (id=4596): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x100, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x55, &(0x7f0000001ac0)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRES64], 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000804) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$inet(0xa, 0x801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 9m26.594769542s ago: executing program 1 (id=4597): r0 = socket(0x1d, 0x2, 0x6) recvfrom$rxrpc(r0, 0x0, 0x0, 0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000006a000105fefdffffff1300000000000000002004"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_flags}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r2, 0x8b27, &(0x7f0000000080)) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r5, &(0x7f0000000280), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000467910000000000000000009500"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_PHYS_SWITCH_ID={0x19, 0x24, "b35cfec3966e7770a457d5c66bd5cfeb94fdbbd969"}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x48f1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x600}, 0x8000000, 0x0, 0xff, 0x2, 0x4}, 0x20) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f00000000c0)={'veth0\x00'}) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r11}, 0x10) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x4070bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x7}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) 9m26.183431285s ago: executing program 33 (id=4597): r0 = socket(0x1d, 0x2, 0x6) recvfrom$rxrpc(r0, 0x0, 0x0, 0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000006a000105fefdffffff1300000000000000002004"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_flags}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r2, 0x8b27, &(0x7f0000000080)) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r5, &(0x7f0000000280), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000467910000000000000000009500"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_PHYS_SWITCH_ID={0x19, 0x24, "b35cfec3966e7770a457d5c66bd5cfeb94fdbbd969"}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x48f1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x600}, 0x8000000, 0x0, 0xff, 0x2, 0x4}, 0x20) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f00000000c0)={'veth0\x00'}) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r11}, 0x10) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x4070bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x7}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) 9m26.175560977s ago: executing program 0 (id=4600): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x48}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0xaf, 0xfffff024}, {0x6}]}, 0x10) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000a80)={r5, 0x0, "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"}, &(0x7f0000000180)=0xfebd) 9m26.143101238s ago: executing program 34 (id=4600): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x48}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0xaf, 0xfffff024}, {0x6}]}, 0x10) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000a80)={r5, 0x0, "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"}, &(0x7f0000000180)=0xfebd) 4.230741701s ago: executing program 2 (id=7029): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x5}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000001c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000080000000010100"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x7fff}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8}, @NFTA_HASH_DREG={0x8}, @NFTA_HASH_SREG={0x8}, @NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x10001}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r14) 3.908785318s ago: executing program 7 (id=7035): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000000), 0x0, &(0x7f00000000c0)="c7737f99a3acbcf7a1583893e3a24de8ac997e658b6bd25a3c326fa35848cdc34456fde3f1fd0ddc1ea8069b692b19ebd53f7b4921fab19dc6dd18e58644914a3e105e2874e80c855de96e6ca62ab53071a4a7b2d50fe17eb02c0541bfb9e14a74bd7e8297304b2e57fe119445e8f712d56c8898177d424bb183062c094047a7b2a312b0be29c12fd870092b1a96a849e02c005921b63ff826ea897c9c41", &(0x7f0000000d40)="729ed8da822e49bfcd7d75dea820daabbbb3b345ac4965a4c693a389c8ec8d06e7cb3be268c3c9aad3f45855a0eef2d79db1cf441ebc4e6b995d418d131b3dc7a34502dab815e9f07b07aeadaec47427f7a93fb17d33ea067910655f4f40d5002f9f3628363eb1aa6179d10d09bd5cf188e95f02867344b65cdf06cca8854efb6380ce223677246c284e6ff06bb4b006f356ab2cc85869768329e3de7613837a264e7334257cd95099405bad677850093ca71192c85fa36f5c15e51ce54ad7563e9a1fe24738060db7b6b69b9156f555ee46759e2f74e7ff379c7423be1ec7b3e48f7a86eb5f503a12a596393b22111b0b1f9f76302359327574c7f6d0b331e6178a5184e85556eb81c8e62bd0e3281a6afd87fb662484832e98989d73d3a85a8202c865f74f089663531b4d5881085d7388eb005d31d920b2803ef9d092bbecf687c2ba63c2365d2de9aaa61765fc320b949ac06faeee0c52389cce871de52f79324556b24c2a77191bcbe4a3a111f15399457aa662a93b37a2bb8fa9e70fc39332b54b077d0ebafd53ddd922dac735ce6cf8154764e0f12879f5163634bd1c5fd723c60cc7f2f42e5fc7d43cb3daf93ecf6134698a65cf9fd97b5ff10640c488d54bbe4ec001fba7f0f88769cef771d5a3258bb4a275397d5a0fff69549a4b53d23872ab0b939005d306a03daaf4062f2eb0743789252e52f72cdaca8561227a34948783b58042a1e21af1ac0025d68dca5f6166670683f0c3879f0d1a58e598ed94b747957c8295c2de819586a915e31a1a45a742008b9d905c5b940034ab6f244715c18c0a492ade9bd5a21972e7ed50a878fa5ce920e7a985ebf4fcde6ed1e36e1cefb96ebb8ac81644ee61c8a1e22c77f29f17f0f00abda593d030a7f8bd8f7bae3e700c7d308ff75b7d9cbfad756277d30855e8a7173ee1f1f55fa26a7bd146b02b30545cf9d726a3daab5cb4c59f89a0f9f6ce6b0593bf171411b4099874f898721a35c74870e6851d4ef8c9ade8d8d23192775edbadbda10db8c95bf2a4c65c03d90f9e88ec4b7ab3195b8ea2fefe00ca158216bae8b27db3c0241a55a362d6f111d9be6eaea493531b8f9dca8cc65ce62624dd5886fe003c84566370adaca69a6d75bd39a65f19f50270462c0d8cc42c2f94b31f0ae69d9f5c398ea55da105a5f87d133133c9977da51b3fcb0e9a77391abf80bef1d56b89d4ff8a713fd591ce50476be9cdd556cf1c16496b58dfd541733d9c542265891897bc4ba3aa926f41a7ad5444260afe14d98d1b81a88fd9e01890bffd6e89c7ed3988b534371cda953eb31591c2e5f957f192adfe1591b55f1a3da69495a5adc0c0dad6e60bf53bed246ee787d07762b9250208a2deee9ffa1c566c690400906c2c128bfb6334df4f404d74b2b887df7cd4ed98c7eab90dc0e3ca37177d0281af7135bb66c5c50bc7bc09b07682bdee308eba62eab7d7cb6157e07998ea0e969993df1772164a151de822cbce500e68ce33f52c07963861480fa6f21849a5c86e8f4ec319648038d0bfc09a8725ab2347936369bc56d2d98fca27cf0b5d0d941ddfc796745f951d2dba5d6062d8e3816bafaa8d54d1a03bf8d4d4382e716ce2702702af360010276abef6d25f33a3fa0fc1ad9f66bdf03ab142334ae5a1819efe4984fc3fc9be5065eb62ba9d98442ce160217606ddb016377e5f9abf17aed9f6356063906d32816fcdd6c86eabd9940f8961bd035efd9552de1579a52c644892601ec0971e8d2d0f069986fc615f7d2c2bda87ed72363d3538e865b393aa7c3f1e3f69690d9be53e153fc30e3d21dd2c0c26fb5aef66bf0196280f443599d100e49853d6e24f4ae6961e29ea7e6f2be5915d8d004be87ba89446fe798bf21c20978ee8d0cdf33b3a57ad2ede64c459e2c91ef0c217644b4d52d57b8339a25ee46baeb80c1e2cc4ea6889967eb0f160afac7c92223bbc7c435198b6e761d91f06c2121b3a01773ba86d920dde8e8a62e5e16e2ebcc3c53c56ff7215dc45d04357494f52fd07c395322e56657eae39ff441a89500bd941f76b246c20ac7203cd00e1eb93b5db6e7f677fe94868946d7df60c7ecbbc6f4374f4ac6a2aebd435f22bcbd5056895cd3f3d00335a9faf2b7921207ca06826f76e459fc596f586294db7b5e10ebf0a4dcb7be94e7927998d016dd2cb3e7efbc3faff7bbbd459b4ebe19d07e20c06502a54e3707eafe0bb9852f702ed3b32c58149663c03882dea0edc58f81d58f0352b38bcf509f9b6006b6ef00e3056d28adbb31f058fc4ace0e673ca178584b687232c0757034cfe4028d3ed9ece9870e3ea8e1bcbe222808c468bf48fc4efa86d50da65661d6606f5caa753fbee1ab17262c04b4f5fab568457f8f133a487933dfc95fb179af93b876917d7bbb30ca9d0e0536059fe61c38b4256de0bb0fdafa0f66eb1c885cff98ff46f7daa6e3f64561766533bb718b9d477dda5f9bbb5cccc96ae32ea7ec95e8fcf44b4d86b3bc358d07f82714b18fb214e29c2a61dbb6a27765d59a85a632f39b20badd82be7ec7021844adb830e90d6728336cd365bacb17c32c8d6442a7f3349fb6bffc4e56b04e57c32f9e923dc44042bb316c2845abff39050ffc2ffea8d683b0832800acb27726071a45bbc8c617dab8c30779a646d6f1ac95fc99e02cdbe1280f013df731d4724c230674881981228b886f2a47abf2ed02439f5cda0f0b82c1d511dc53b90e9f96eab6496f2f911eb3fe1e4bee8a4ae9c18f87e3e0f1add39c21024679ff78849e8d1931d33dee64e828574bf2ad594cbbceaef7c11b4ecf2035b9dd3386c1d3ac0497e6c30d2affa318fc5a940db91bfd4e64995a744375dbe132778789108edada4005b0f2ed2278e032b684386ed02aed9d6c9c7342092434bf62895ac1ee182c5c806d53207b2ec996ce1c35aef89033423eca3fd536990b599f2cbef2571de32012fffb52574c640042c7b3944227c655389d307bd254b2fb72baa512e39301596b78513da20f0e941401518f2ee49c01e82551a62ea7d576ef69527686f9584332253eeaf5b1a62fd192f9e712a9540df470319ea092aa5c1246afc09940c28c222b8afcd10243aaa0efa66c9a5ef77a41b975e6702f97038b648c358cda1a8bd2a1ff58ea7514794daefc22490a1ec1d915d5bb1d4ed511ee4a31464af969e0c7009583fe181c84a4640894682a1ddb08561fb7a02f61faa771ba39cdd0f3491a01afe3d2990639abbb674260404479d3be37845aae24210d43824d94e5cac3a9955098bff9ef348a6c98c1bd0aa0794c196c9a1845c5ad9d037dac143c4bb4cdcc11bdbf9624c6a66bf619e575c5dfb5fbecff9d94d317cc7844bb9c694c87e4eaa22307fcc68eb215221af88e18a78c5f1371e88f91bd12db0369d3dc9cdceae58c89d99b8b3b31aa7115a3045d9afb3559ce91a5bde48691e151aa3237e64bc8b08449e1fed291be45d8d5994cf27acaf20ebd543a54575356dc73a494a34317c1409f432710a9c24b8dd212c6a46c0f8dd080e98642708f836e7e7c008349f296f836a5adff699a3d1e489e98b6bad60c1845c329e8d85d72982b52e0673a27f73e6bae4dade921bca3fb4d68e72a1bbf738ff39b5ca3ab33ebe0fd69865d11ac9c6c83056013aaaccef95384c294c4d41fc8f5a3cc78013e6c7db192973c59445c3d31422031aacc99a952a0e51f321f8789a0c8ac4e3f7c74f4cfc5cb80a8d91f688dd799abf4e724e67a06a914583cbb474cac39080cd7102314eaa904ef8f8ea0a2165fd9488a0bfa171edb971acac312e4e52a67e0acc8339624609af687b10b05b600bc3a362389709760837c3492d90ced619d46d1297bd6e2a86adc08a40dbbf85e55a8e285b11fb67cc894cdfff864ba1679fc48c2873a6608d99aea7392271967e57a669617c28a05037b81479ae0f1b036095ad66f1b1abae245d2dd2a997ddad88eca0ce712cd3210b01e676e02a1c9027567497e15d93b891974a9f8947cd90bafcd7ce60fbf329c32ccc9eb3194e3ba54f0e7c853444bc32a48d227d57a582070a596968b8c9afd5c10e48baf2be991fbd48a6a9cabcaf6bf25e2109fda7457a581ecc54949a989b83d23cd9caed4dd2e328c0aa14da03e64f0eca5368126a590de941ad38e26c27179a7d4665fa35346f49e4845cbeca7a8c88a5947ab9b865e0a824df975da6c77e62555ee1d728900f5c29cc5f87c5b25af4c8faf8b9f86cf51c9a7847e7f077e5de123af791b396912b6525dec9162552e978b73affbc0eb11ebc6e4d5614e33598c19401baff9c6cc10d84fb8c5cdb40fdb2999c3937e8be2206fac0d9585e444803154edc52e2f5b3db18bb61059e1f0adba95134b8b5df3496c44ca354b16f9f5937ee6ed588f0e3be8f682f925232b036f8930fe8df7734986511a0f11df329ea551ce52b59318c0e986e2c6c2e49a8c92c94d050b5e9fdfd7c373c5d6a622a5d5abec8e1f8b9162ea2ecf96bb2654a9b6c2fcc28f89fd3bef8f73d2751284b9e24902f937d40d4c45bd6aca8006cdb6d91696914e1fe09df0e92adb2eb730422b21e3e9cb02d2ff4203b4f68335974eb33d77c9776025dc4c936f1cd487d0f6893bd893ac6def74de822d835e870cfe9339ff4263b3650ccd712983ac2d28318c70ae07dc7db34581eb457057d5f46481df40c7ea2ffa45817fb03c420256e8e8170b60da4fa55e07525478618e88523c29b3437e10b51c4d67f88ea517e1e91264bb8d37c4107a83c25da3d0358a8c2cace6dc67bf2515fe72fb8674b66ac5e451496707e8cdd264911bfc44e4bc5d38132c96d17fafffe3b6b90386e15bf88f34925f8a72981df5a10f0cef4b502b4a5274e82decf8876299615bc977e04feb4bb6a7278061b58f33db370ccdf4bc8f5ca12369dd6aa3c7d2585816a0fb5955f4f0288d12aa5b2a9ca4218a449940d205a63b9f4cff98389bad4ebec06954db621254e7b9fc308d9a43ad71c574862d1a628e348af1fa586cb8eff4d82ed164f2dd42995841ad52995dc13c74b78179280c3465d6fff13ef7c5b1f83dfb5a529f41c9c8dff2971b89ec0b61e14ed68873b682203c195ce275c15bf6bf6fabf1b544ecac80c7177a39f96ae3d3bf6d6cb2607c7859bfd75f59339bd739b1a3cc385cd0a323dffd65b738c94a7491945fa7f4c7f2fa092d8e622691d09974edb225e85ac63cad518b99d702e5778f069da2702dad7dbc0462bfe65a13d940e3aa314fdd773c28e17df582968ef47b5fc91c4a34ae9ac9f8069932fd163f6c9a0e5dbf56c672ae542abaa92b4ca12d8e12a30a0b772ce2721eae527ac7bcfa6eecce93c5b730bfd9c708225865136a1027d824a1dee4e5ebcff16cb8cff67f56cf20039a5241c747a7b32748f6c28ef7f7fb841b6279e642968d747c786cc6d2a36d11d74738d64204f3fe58e78f8cbe87da58b939febc4f2a8a96b09332d7d802610762f01fb0f7ef00092fe303ae02d5e107a8a0119d9488a3cda5980c053bee1aca3cea2b9f41c2a4c98b61dbae33731d0037009d79516d25e38acba15d79ab5b08df079848007fd2ea981058fba1176569667b7b58fac984287c2ac760917b493fb7e1bdf83fc6b063b68f9e556d90810da79c9c522754798bf74ce9ba6fa11283521d6c7d2e99129587e1c29c94bd3ae490d66672821ad3be200c98a9acc2a4f2847e1f4ad8232dbb41c617d844c161a6c1a2bfb822732853ebd05553556bde8f5c22409a651f9b386986b4b30ea370537d77c", 0x8}, 0x38) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x15, &(0x7f0000000380)=@raw=[@ldst={0x0, 0x3, 0x2, 0x5, 0x2, 0xfffffffffffffff4, 0x1}, @jmp={0x5, 0x1, 0xc, 0x2, 0x6, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xe}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x4}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6f}}], &(0x7f0000000200)='GPL\x00', 0x8, 0x3c, &(0x7f0000000240)=""/60, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x4, 0x6, 0x100}, 0x400, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) accept$alg(r3, 0x0, 0x0) (async) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8dfec6af2ae8080b56c53c12b8431d17955ae1ec78709eee9acf825fdb672651f7eafb44b576930aff4b6a86ced3e4392cfe57a2c11b97e93f38debd6dc69f3a50d5742daa7081df08bd8118dcd6d9d18830c7d79d8", 0x6c}, {&(0x7f0000000240)="23ade41881a1e7ca07379924e2cb53138ec1e2ac415947eb6c7f56119ff98596d7469564e6d7c4", 0x27}, {&(0x7f0000000140)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a23", 0x34}, {&(0x7f0000000440)="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", 0x170}, {&(0x7f0000000280)="1b1eb47967b88f89e960c59413baaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c1d3f6607ce5a2183a169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0ff662c2c83431c0c2e2ece5ca6a104d1d45c1c15ca4d75cab6b1bb923cac1c51270bf577cf4c79ba54a6c45a345cc13208fa430c1e54548e5a9c5cf45337451511abc0a7d3539ac22191025d5655a5d05c4024b8cb0fb4aabeb6fd575b631eedf691f55e7f6d2c2a8b3e0852", 0xba}], 0x5, 0x0, 0x0, 0x40880}], 0x1, 0x4814) recvmmsg(r4, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x2, 0x2001, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x20, &(0x7f00000007c0)={&(0x7f0000000600)=""/155, 0x9b, 0x0, &(0x7f00000006c0)=""/200, 0xc8}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x20, &(0x7f00000007c0)={&(0x7f0000000600)=""/155, 0x9b, 0x0, &(0x7f00000006c0)=""/200, 0xc8}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x6, 0x0, 0x18, 0x10, 0x0, 0x0, r5, r2, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000240)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4044084) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) socket$netlink(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x6}], 0x3e8, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r6) sendmsg$NFC_CMD_DEV_DOWN(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf2503000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async) sendmsg$NFC_CMD_DEV_DOWN(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf2503000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) socket$kcm(0x2, 0x200000000000001, 0x106) (async) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x2404c854) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9e3fe3d86e6c1d000014a10d5a000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000000)="29dd", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r10, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c49320f", 0x20) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newlink={0x6c, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x10001}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x6c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newlink={0x6c, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x10001}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x6c}}, 0x0) 3.811163003s ago: executing program 2 (id=7038): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b, 0x40}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x805862fd}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x29}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = socket$kcm(0x29, 0x5, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000000)="4da4", 0x2}], 0x1) sendmsg$inet(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000280)="d6", 0x1}], 0x1}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x54, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e21}}]}, 0x54}}, 0x0) 3.723017963s ago: executing program 7 (id=7040): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r0, @ANYBLOB="080004007f"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x18}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 3.600233357s ago: executing program 2 (id=7042): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) unshare(0x6a040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x38, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40c0) unshare(0x44000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x4}}, 0x14}}, 0x40800) close(r3) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, 0x0) listen(r5, 0x7fff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0xffffffec) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$rxrpc(0x21, 0x2, 0xa) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000480)) 3.554944926s ago: executing program 7 (id=7043): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000d00, 0x3, 0x0, &(0x7f0000000140)="a06ad8", 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000000000000000000000000000000000000000000000000002000000000000000000800000000000000000000000000000000000000000000000000000000000000000133a595f000000000000000000000800000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa00000000040000000000000000000000000000000777976b"], 0xfc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000300)={0x14d, 0x35, 0x6}) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) write(r6, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x53, 0x0, &(0x7f0000000040)=0xf) 3.492046583s ago: executing program 5 (id=7045): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf250900000008003c83f4dfe71b"], 0x1c}}, 0x64000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000800006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b4090a79507df79f298129da487130d5f24b46001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad379e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488a010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a18159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7962b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac2bba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f407000000000000006d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab669ab377e4c2422a47e9ffe2d4a2d32f7528751313694bf57704400b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6940b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d30902208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c8000000000000003a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f000000000facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f296115d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc05000000000000006c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a4619a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806b90cc39c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d3133319e069f9648a2ff93060ff073b3a113e47e447c030931651dd315003b7a6a47c912853826c4c65433a2bb560ae99ec4b227eda2e63a1cb1a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e5f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec90f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754c68b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8adbd2c2604eab3a62a28611da1dae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412cbbdebae06edb51a134301d2627d4927287daf9dcae6720334862d3a18094f1edd9e350337cbb804004d1755cfe7d7fa01872fb99815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2b63a6038ab5546ba1e5ad6a329f2c627100e0442f865fc6c179ad3edcb6b000000000000000b0000000000000000ac192d48d76e2a8cae83ae850f73fdfbaca81b6b7b1a0d7b517f41fbd46aa24b0f4b8e0202e3a580947f1925ba4de097e8dcb6bd7f686322b45d4a544ca1e83b592d4a6d46d0a0dc39634550bc77d4cabba01b283082e66778de7c61a1a36838d36c2f8e58cef603770ee3d6a9625be0bc21d2be2da69ac9e9c5e88278d39239501b465102ad16d651ea8bb8cee35527c1ad42ac6a565e449929ccb4469bdd6824b64e13579b7188566e735200000000000000000094e05bcda1e96e4c33ccf6d74046e45bafe9d512c43a3e485dedad9a38b34f7fcd00fafcc25dc36716f0e21e0632425b7a1c1a6bc15c3fc07d914c88103411d8d2b77b72a796fd3aaa7ea493c7bc43e63b2b0d05ad5682121682096b224933fa20255d58a680cc2ec200"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r3, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x100}}, 0x30) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newnexthop={0x3c, 0x68, 0x1, 0x100003, 0x7ffffff9, {}, [@NHA_GROUP={0x24, 0x2, [{0x2, 0x3}, {0x0, 0x81}, {0x1, 0xc}, {0x0, 0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r8, &(0x7f0000000200)={&(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0xa, &(0x7f00000001c0)={&(0x7f0000000180)="a2e000", 0x3}, 0x1, 0x0, 0x0, 0x4008090}, 0x810) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r9, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r10, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) listen(r9, 0x1ad72f7) accept4(r9, 0x0, 0x0, 0x80000) r11 = accept4$netrom(r9, 0x0, 0x0, 0x80000) writev(r11, &(0x7f00000001c0), 0x7) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x5}]}, 0x1c}}, 0x20008000) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r7, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0xf9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000006c0)=ANY=[], 0x0) 2.989392745s ago: executing program 6 (id=7050): bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2}, [@alu={0x4, 0x1, 0x4, 0x760cda05bcf95fa0}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x801, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x800}}, 0x20}}, 0x4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040812}, 0x10) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 32) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (rerun: 32) 2.461543361s ago: executing program 5 (id=7052): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @private1, 0x0, 0x3}, 0x20) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xffffffff, 0x40}, 0x20) 2.250983282s ago: executing program 3 (id=7053): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, &(0x7f0000000340)={0x23, 0x5, 0x3, 0x5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x5ec37000) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}], 0x1, 0x40800) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}}, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r4, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x2000000000032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0xd5, '\x00', 0x0, r4, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000240), &(0x7f00000004c0)=r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0xffffffff}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000021000100000000000000000002000000faff000000000000080018"], 0x34}}, 0x0) 2.239893148s ago: executing program 5 (id=7054): r0 = socket$kcm(0x2, 0x3, 0x84) r1 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x6a, 0x1, 0x100, 0x4) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r4, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0) 1.954748989s ago: executing program 5 (id=7055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x4c, r3, 0x3bf9e84e1c87b8cc, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4014}, 0x20000000) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.722799252s ago: executing program 3 (id=7056): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b000457963cfa00000000070000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x2d, &(0x7f00000004c0)=0xfffffff8, 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x7, 0x25, 0x41, 0x4, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8, 0x20, 0x9, 0x7}}) (async) socket$unix(0x1, 0x5, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x7fff, 0x0, 0xfffffffd, 0x1}, 0x10) (async) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) (async) close(0x3) (async) r4 = socket(0xb, 0x80000, 0xfffffffd) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e26, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000ac0)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r2, @ANYRES16=0x0, @ANYRESHEX=r3, @ANYRESHEX, @ANYRESDEC=r3], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c0000000f1404002dbd7000ffdbdf2508000100000000006a0d000000000000727074000800030003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$netlink(r4, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc}, 0xc) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8004) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x17, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) 1.665465986s ago: executing program 5 (id=7057): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000100)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, 0x63, 0xfffffbffffff0001, 0x0, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) unshare(0x26020480) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="0c00028006"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xffffffffffffff57, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x2, 0x8, 0x2, 0x0, r4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r3}, 0x20) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000280)={'security\x00', 0x0, [0x800, 0x4, 0x9, 0x7fffffff, 0x4]}, &(0x7f0000000200)=0x54) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r11, &(0x7f0000000340), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r14 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r14, 0x0, 0x13, &(0x7f0000000040), 0x4) sendmsg$netlink(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x1c, 0x14, 0x1, 0x800000, 0x0, "", [@nested={0x4}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="ecc032c4"]}]}, 0x1c}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x30, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x0, r12, 0x10, 0xc0, 0x4}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) 1.500957394s ago: executing program 3 (id=7058): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) socket$isdn_base(0x22, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) (async, rerun: 64) pselect6(0x40, &(0x7f00000001c0)={0x400000000, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xfffffffffffffffd, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) (async, rerun: 64) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) (async) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r5, &(0x7f0000000080)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x2, 0x5) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000109000005000000", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'gre0\x00', 0x0}) (async, rerun: 32) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r6}, 0x38) (async, rerun: 32) shutdown(0xffffffffffffffff, 0x1) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) (async) unshare(0x42020000) 1.45064019s ago: executing program 6 (id=7059): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x9, 0xf9}) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x40010, r0, 0x80000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket(0x2, 0x80805, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac14141604089f034d2f87e5440c05ab845013f2325f1a39018603038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) write$cgroup_int(r0, &(0x7f0000000200)=0xf, 0x12) 1.181325737s ago: executing program 3 (id=7060): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x3c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @empty}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48081}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048814}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x3c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @empty}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48081}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048814}, 0x4000) (async) 1.085693332s ago: executing program 6 (id=7061): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xcafe28741a3524c9, 0x70bd29, 0x20000, {0x7, 0x0, 0x0, r1, 0x80, 0xce, 0xb}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 835.00678ms ago: executing program 7 (id=7062): socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000005142106"], 0x20}, 0x1, 0x0, 0x0, 0x40c5}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x4, 0x70bd2c, 0x85c9, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x20048084) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x4, 0x70bd2c, 0x85c9, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x20048084) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1401, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x4004) 834.425605ms ago: executing program 3 (id=7063): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@ipv6_getaddrlabel={0x7c, 0x4a, 0x200, 0x70bd26, 0x25dfdbfe, {0xa, 0x0, 0x80, 0x0, 0x0, 0xe320}, [@IFAL_ADDRESS={0x14, 0x1, @private2}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8, 0x2, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x890}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x25, 0x0, 0x0, 0x0, 0x1}, @initr0, @exit, @alu={0x7, 0x0, 0xa, 0x3}]}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000100)=0x82) close(r8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9}, 0x90) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r9, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r10, @ANYBLOB="23000300285df4db"], 0x34}}, 0x4008000) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="09052cbd7000fbdbdf250300000003000000000000000a000000e0b829330b0f458c63bc5fca4a013f104cec37b5fa42c361a6a1587db19aff1e89d67463c8eff962992819f9120aecebcacd6d7e8714a5a391a6"], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x40080d0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x28, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0x6}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffa}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @exit, @map_fd={0x18, 0x9, 0x1, 0x0, r4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0xa3e, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x8, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x9}, 0x94) r14 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440), 0x2, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x4c0}, {r11, 0x8229}, {r13, 0x200}, {r14, 0x9785}], 0x4, &(0x7f00000004c0)={0x0, 0x989680}, &(0x7f0000000500)={[0x7fffffff]}, 0x8) r15 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r16, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r17, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r18, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc000008000900050000000800070098010000200001"], 0x234}}, 0x0) 834.128576ms ago: executing program 5 (id=7064): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) unshare(0x400) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) getpeername$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000700)=0x14) sendmmsg$inet6(r1, &(0x7f00000008c0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @local, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x7, @remote, 0x400}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000080)="2c4373b863844955b09966fc5672d00ce6c3112db2993a433aa6dcae6787e1879446f68c1c36665decf9678df08ba7d5fa2a60c3c07d0e4a47621e1c2c80c7e5fd49383bc5194b0b8672dd24b741cc03d4f0eaa8d622752ce6a3d8da4b2b5a76a5a2eb7cc679183f8261e7f6267fb5114eb20ae5935ade48ac60d1c3500c23de6d2ef3495167973d2192749c85c4ef7c00ccfd1004c70e175b72cc6aab2a644a9259578d43c779189b2bab035985e20b6029af6c8ab4a42c3dfbdd3337bd94c2a72fc3a7fd7040fb", 0xc8}, {&(0x7f0000000180)="2b25616277e3cccdc0a6999706a7923c09e6d63e040f8a24", 0x18}, {&(0x7f00000001c0)="77780802e6ed266b076f5b5340e9d7faac359d5703bb993686ae7857ad5d6abea403729751f7ee62f011380fb6bdb54d98fdbc7c5bae1ee2c7164a476165ccf5eecc65bc90f2d68351c926baa69e44a0a7086095568e661f38d73897d2a4653311db8ef181d0e0b5cf209dde48f6", 0x6e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="db25d8d29c6065906cee8d0a9d13062535bcdc02f338", 0x16}, {&(0x7f0000000380)="d41fc4bb9246cef1ce0a52d90a598c44c1d03e3074338c53117c1b37b4e3bc981cb24c5ce26529311cf9720626d5c8d04843e8c1888c48ea30e13e9ccc87bc4e9bef08b3312a46c80e81236efc6567f902e89a358f3e6add0be73d5c37c3403e3601ebda66dfdee1f133cd", 0x6b}], 0x2}}, {{&(0x7f0000000400)={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x8}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000440)="5cd5b4d9c548b440d8c6ecde4f9e1a0b4244ea8aca20020fccb3f2dd14b77b282a2ff975690855fc", 0x28}, {&(0x7f0000000480)="27ce525e4fdcf41d2194646bc1a54ba5b96d83b8e648aa19a6861bba4061800835", 0x21}, {&(0x7f0000000740)="7807bb9febb0df0e53da44c43d8f416c7dfb631197ab7ae5f495fac4036c4ef5e4b95f7193430529d14443efb58cbc9e64973a2edbaaa13b7db0b5fad4be7d75df4d036a1c4dc1cf1a8592924fb9d4d8621880ec", 0x54}], 0x3, &(0x7f0000000ac0)=[@hopopts_2292={{0xb8, 0x29, 0x36, {0xff, 0x14, '\x00', [@ra={0x5, 0x2, 0x1}, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @local}, @calipso={0x7, 0x50, {0x0, 0x12, 0x60, 0x3, [0x8, 0x80000001, 0x6, 0x118, 0xab6, 0x91, 0x9b8, 0x5, 0x401]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}, @pad1, @enc_lim={0x4, 0x1, 0x7f}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r3}}}], 0xe0}}], 0x4, 0x24000045) 831.532108ms ago: executing program 6 (id=7065): syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x400) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xffffffffffffffa9) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0xa, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000021c0)=ANY=[@ANYBLOB="181600002400e5ff25bd7000fedbdf2505"], 0x1618}], 0x1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) readv(r1, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000380)=""/4080, 0xff0}, {0x0}], 0x3) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000502000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x4, 0x81, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x140, r4, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3722}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3ff}, @NL80211_ATTR_FRAME_MATCH={0x39, 0x5b, "6cce5a2d083253143c2bd3d4d095e196af145e887b0739bd750cf2c7ef245b6d4ab6f521a84d4e8f9126e243f96c5ba4dd577d5245"}, @NL80211_ATTR_FRAME_MATCH={0xde, 0x5b, "1bea76509f49c95cda9a4ba50c946a36d799de4151b4d073d8b564f459e784595ed8e0b43f43bef18636245d01d622fdef89e291ceedb668bf64c5992e48ef5fa57e211ddc438808700922248e5915f2b777ca153b8b4709da670a2e8d9cfa30d64a983a93ba2d4111289dd7c9215c466656f752a370b3f941c5509db9ea958e4d4f8a2a566f4f1fb5304373323e9d4ec61304411a0290c0b9f4d6f7ba0750e1c0c7ce71d8a074446f160053558778bfddf51bb0997ed494b603c226e3766c7f825c0474b6f3bf0fa6371b3a4faf7a79dff34ed2240a080e6c30"}]}, 0x140}, 0x1, 0x0, 0x0, 0xc0}, 0x80) 586.399341ms ago: executing program 7 (id=7066): r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) accept4$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x10, 0x80800) unshare(0x22020400) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e"], 0x44}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r9, 0x1}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r10, 0x107, 0x5, 0x0, 0x0) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x2, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 581.88855ms ago: executing program 6 (id=7067): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c2000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x4c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="cc130000", @ANYRES16=r1, @ANYBLOB="000128bd7000fbdbdf25830000000c009900080000002300000008001001030000008813118084130580d00700805c01038004000200b80001801800018004000b00040001000400080004000c0004000c00300001800800020000000000060004008f0000000600040006000000050005000e0000000400010004000900040009000800018004000c002400018004000c000500060006000000080002000100000004000a0008000200040000003400018005000700020000000600040008000000040001000400080005000700030000000400010004000c00050006001b0000000c00018005000600150000000400020004000200940001801c000180050007000c000000050006001900000008000200010000001c000180040001000400010004000800040008000500060015000000140001800400010004000a0004000a00040001001000018004000100050006001d0000001800018005000300090000000400080004000a0004000b001c000180050006001700000006000400000200000800020004000000c4030380040002000400020004000200e40001800c00018004000c00040009000c000180050005000c0000000c000180060004000900000048000180050003000b000000050003000d0000000400010008000200010000000500060013000000050007004000000006000400040000000500050007000000040001000400010030000180040008000800020001000000050006001200000005000600100000000500070081000000050003000c000000300001800600040009000000050007000400000004000900040001000400090004000a0004000b00050007000f0000001400018004000b0006000400010000000400090004000200b8000180140001800800020001000000050003000d000000300001800500070005000000050003000d000000050003000000000004000c00050003000a000000050006001100000010000180050003000c0000000400080018000180050005000900000004000b000400080004000b001000018004000c0005000700100000000800018004000b0024000180050006001d00000005000300000000000400010004000c0006000400050000000c0001800500070001000000500001800c00018005000300020000004000018004000c00050005000d000000050003000e00000005000500010000000400090006000400fb0000000500070007000000050003000600000004000b0014010180280001800400080004000c00080002000200000004000b00050005000c00000005000500060000002000018008000200030000000500070050000000050006001700000004000100340001800500060011000000050006001d0000000600040005000000050006000f0000000500070008000000050007000a0000001c00018004000100080002000000000004000a000500070007000000100001800400090005000300060000002c0001800400090006000400000200000400010004000b0005000600140000000400010004000b0004000c0008000180040001003400018004000c00040001000400090004000800040009000800020004000000040009000400090005000700fe0000000400010004000200ac00018014000180050006001d0000000400090004000b003400018004000800060004005e00000006000400ff0700000800020000000000080002000300000004000a00050003000b00000024000180040008000800020001000000050006000a00000005000700080000000400010024000180050005000300000004000b00050005000400000004000c00080002000100000018000180060004000600000004000b0006000400090000001002038004000200040002000801018044000180050006000900000004000a00050006001b000000050003000c000000060004000700000004000b00040008000500060015000000060004000600000004000c0010000180040009000400080004000b002c00018004000a000500050003000000050006001a00000004000900050006001b00000006000400070000002c00018004000800040009000500070000000000080002000100000004000a0004000100050003000800000020000180050006000700000004000100050006000400000005000700010000001800018004000c0004000100050007000300000004000a001800018004000800050003000900000005000600150000000800018004000900fc0001800c00018008000200000000002000018004000a00050005000b00000008000200040000000600040023000000200001800400080005000700010000000600040000800000050003000a00000034000180050006000e000000050006000e00000005000700020000000800020000000000050007000600000004000c0004000900280001800400090004000900050007000f000000080002000000000004000a000500060003000000140001800400010004000b0004000c0004000b003c00018004000900040009000500070003000000080002000400000005000500080000000500050007000000050006001f00000004000100040009003800038004000200280001801c0001800500070005000000050006001a00000006000400070000000800018004000800040002000400020014000280080027000100000008002201e30000000a000100080211000000000044000280080026006c090000080026006c0900000800a00006000000080026008f0900000500180107000000080026006c090000080022013003000008002700030000004403008030000380280001800c000180050006000100000018000180040001000400080006000400040000000400010004000200c40203800400020068000180100001800400090005000500030000002c00018004000800050005000a000000040008000400090004000c00080002000200000006000400610000002800018004000100050005000700000004000100040008000500070002000000050005000f0000007c00018020000180060004006471000004000900060004000400000008000200030000000800018004000a000800018004000900040001802400018004000100040009000500050004000000050006000a000000060004000100000020000180040009000400090004000900050003000500000004000100040008005c0001801000018004000b0006000400090000001c0001800800020004000000050005000b00000005000700060000000400018028000180050007000a00000006000400080000000400010004000100080002000400000004000c000801018018000180050006001300000004000a0005000300060000002c00018005000600090000000400090005000700f700000004000a00050007006a0000000500070011000000100001800400080004000a0004000b001800018004000900050005000b00000005000500000000000c00018004000a0004000a003400018004000a0004000800050003000c00000008000200000000000400010005000700f900000004000c000800018004000b00100001800400080004000100040009004000018004000b0004000b00080002000200000005000300000000000400010005000700c2000000050005000a000000050003000b0000000600040000f00000740001801c000180050005000e000000050006000900000005000700800000001400018004000c0004000a00080002000100000024000180080002000400000006000400070000000400010004000900050007000800000010000180060004000000000004000b000c000180050006000600000014000280080026006c0900000800a000ffff000004000380340002800800270003000000080022011103000005001801120000000800260011170000050019010e0000000800220178010000540000800a00010008021100000000000a00010008021100000000002c0003801c00018018000180060004000000000004000b00050003000a0000000400020004000200040002000a0001000802110000010000c80200802c00028008002600481c00000800260000000000050018010b00000008002201e30200000800a100070000000802038084000180200001800500050007000000060004000e0000000500050000000000040001000c0001800600040001000000240001800500060004000000050003000e0000000500060019000000040008000400010030000180050005000400000004000a0006000400f8ff000004000b0006000400f1000000040009000600040004000000040002009c0001803400018005000700020000000500060009000000050003000f00000004000b00060004000400000004000100050006001d000000380001800500050007000000050007000800000004000b0004000c0004000a000500050006000000050005000000000005000600000000002400018004000100050007007f00000004000a00050003000a0000000500070089000000080001800400090004000200dc000180140001800400010004000a00050003000a0000003c0001800400080005000600160000000500030007000000040008000500070005000000050005000d000000050003000b0000000400010004000b00380001800400010004000100060004000b0000000500060013000000060004001000000004000800050005000c00000004000c0004000a00040001801000018004000c0004000100040009001800018005000300080000000600040037e20000040008002400018004000c000400010004000c000800020003000000050005000f00000004000c0014000280080027000100000008002700030000001c0002800800a100070000000800a0001f000000050018011e0000003400028008009f000700000008009f00060000000800a10001040000050018012100000008002700010000000800a0002a0700002c00028005001901050000000800a100010000000800a100010100000500180136000000080026008a090000100000800a00010008021100000000008c0000800a00010008021100000000002400028008009f0002000000080026006c090000050019010e00000008002600851600000a00010008021100000000000c0002800800a100ff0f0000340002800800a000feffffff080027000000000008002600e0150000050019010a00000008009f00000000000800a100000000000a0001000802110000010000500000804c000280050018010e000000080026007609000008009f000700000008009f00070000000800260094090000080026006c090000080026006c09000008002600f41500000800a00007000000e00000800a0001000802110000000000240002800800220187020000050018012e00000005001801040000000800a100ffffffff0a00010008021100000100000a00010008021100000000001c000280080022010c0000000800220159000000050018011d0000007800038004000200040002006c00018014000180060004004979000005000300080000001800018004000c0004000100040001000400010004000a001800018004000800050007000e00000004000800040008002400018004000b000400090005000700ff00000008000200040000000500070005000000040000808003008014000280050019010a00000008002201d0030000b001038004000200bc0001801c000180050007000300000004000900050005000100000004000a00240001800400080004000100050005000200000004000a0004000a0004000b0004000b00180001800800020001000000040008000400080004000c002c3732e51f000a0006000400008000000400090004000100050007008000000006000400a301000004000c000800018004000a0010000180080002000200000004000b001c00018004000b0004000800050003000200000004000c0004000c0004000200340001802c00018006000400ff03000004000900050007000400000004000800040008000400010004000c0004000c0004000180740001801400018004000100040009000400010004000b000800018004000c00340001800600040006000000050006001900000005000500070000000500070003000000040001000400080006000400c20000001000018004000a00050006000c0000001000018004000a00040001000400080004000200340001800800018004000100280001800800020001000000080002000300000004000b0004000b0008000200040000000400090004000200040002004c000280080026006c09000005001801330000000800a100f60e00000800a0000800000008009f00070000000800a1000400000005001901060000000800a0000000000008002700010000000a000100ffffffffffff00000a00010008021100000100000a000100ffffffffffff00000a00010008021100000000003c0103802000018014000180040009000500030006000000040009000800018004000a0004000200180001801400018005000600070000000400090004000a00040002005400018050000180060004000700000006000400010000000500030000000000080002000400000008000200010000000500050001000000050006000700000004000c00060004005706000005000700020000006800018010000180040009000600040007000000280001800500060011000000050006001d00000004000900040001000500060019000000040009001c00018004000100050007000600000004000c000400080004000b0010000180050006001a00000004000b003800018020000180060004004b00000004000900050003000f000000050003000c00000014000180060004000000000005000300070000000400020008001001010000000a0006000802110000000000080010010100"/5062], 0x13cc}, 0x1, 0x0, 0x0, 0x8081}, 0x20008000) r6 = socket(0x29, 0x6, 0x7f) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000140)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x14, {0x2, 0x4e22, @empty}, 'veth0_vlan\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000224bd7000fbdbdf250200000005003d000600008008000b01"], 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x20040000) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001f40)=@delchain={0x16d8, 0x65, 0x300, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0x10, 0xc}, {0xb, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x6, 0x9}}, @filter_kind_options=@f_basic={{0xa}, {0x1678, 0x2, [@TCA_BASIC_ACT={0x1674, 0x3, [@m_simple={0x100, 0x7, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x8001, 0x5, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x4, 0xd35b70b6cde064fa, 0x3, 0x7}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x3, 0x5, 0x7, 0x2}}, @TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_DATA={0xa, 0x3, 'wlan0\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'GPL\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x8000, 0x6, 0x1, 0x1000}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x10, 0x1ff, 0x1, 0x7fffffff, 0xe00}}]}, {0x37, 0x6, "08cb7fb123932a5741156a2bfc9bcbcc54584031906c870020e8a76e060d07c4161a5adf956e6b469c9e475711da698590cb0a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x6b5f1cf81277f77}}}}, @m_gact={0x188, 0x7, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1bce, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x8001, 0x8, 0x9, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x5e7, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x0, 0x0, 0x7fffffff, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb, 0x3, 0x3, 0x0, 0x100}}]}, {0xfa, 0x6, "2bd756f4a55b750d8ff30e335697fcd07a4158a4fa28eb50b3759abca392a081c68298cd14ca59ee9cc5a2153f1112f0b633fa07b263731a1ec460cf02aad8d6fc98a1c932aede434be88c57ac704ba2b29cfe117a85bedb4a584445f61724fd47e2eb32ed12bd8eb393c296c88258732cebac631b6ae45a5b791bfc3d47e1b3567c7630336f4bc5eb7a34a2cff84054e17751186872e520edc3e2b4c374f5c9b1f6492f9f1f2030e09779ad11c4fd610d565a1d9d1193b6cba39ce3aa1b39f4eb0f6d9afcd7674a3822a183b1d2c2ef35abd53a307d57bd6898601d7084a9484e4732f87d57adb0529b95f3474b6674daffb1a7c708"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0x1090, 0xc, 0x0, 0x0, {{0xa}, {0xf90, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x38, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x2, 0x3, 0x2, 0xfffffffa, 0x10}, 0x1, 0x40, [{0x7b, 0x6, 0x4000, 0x9, 0x200, 0x5}, {0x80, 0x93d, 0x9, 0x1ff, 0x1, 0x530}, {0x80000000, 0x1000, 0x4, 0x0, 0x4, 0x3}, {0x0, 0x1, 0x3, 0x7, 0x5, 0x684}, {0x0, 0x6, 0xfffffe01, 0x9, 0x401, 0x40}]}, [{0x10, 0x9c7690f, 0x7, 0x7, 0x1, 0x1}, {0x6, 0x6, 0x0, 0x3, 0x8001, 0x5}, {0x3ff, 0xd699, 0x4, 0x1, 0x3, 0x8}, {0xffff, 0x4, 0x4, 0x5, 0x4, 0x959}, {0x7f, 0x5, 0x2, 0x2, 0x62f, 0x5c48}, {0xffff, 0x3a, 0x8, 0x3, 0x3, 0xa}, {0x7, 0x9, 0xd, 0x4, 0xd647, 0x7ff}, {0x6, 0x5ac, 0x80000001, 0x3, 0x40, 0xe}, {0x9, 0xe, 0x9, 0x6, 0x7, 0xfffffffa}, {0x400, 0x1ff, 0x2, 0x35, 0x3}, {0x3, 0x9, 0x2, 0x5130, 0x0, 0xfffff9aa}, {0xffff, 0x6, 0x2, 0x6, 0x231a, 0xfffffffa}, {0x872, 0x1000, 0xfffff7c4, 0x6, 0x401, 0xfff}, {0x1ff, 0x9, 0x7, 0x4, 0x4, 0xfffffffc}, {0x30000000, 0x6, 0xc, 0x0, 0xe, 0x3}, {0x7, 0xfffffff7, 0x8, 0x1, 0x2, 0x1}, {0x3, 0x2, 0x4, 0x6, 0xff, 0x10}, {0x101, 0x100, 0x5, 0x3, 0x8, 0x8}, {0x4, 0x3, 0x9, 0xfffffffa, 0xc, 0x81}, {0xdba8, 0x80, 0x3, 0x7, 0x7, 0x4}, {0x11b, 0x11, 0x2, 0xfff, 0x8001, 0x2}, {0x401, 0x1, 0x8, 0x6, 0xa9, 0xf32}, {0x5, 0x400, 0x8c, 0x9, 0x9b39, 0x3}, {0x7fffffff, 0x0, 0x0, 0x8, 0xc, 0x8}, {0xfffffffd, 0xfffffff8, 0xf, 0x5, 0xb96, 0x9}, {0x6, 0x8, 0x9, 0x9, 0x4, 0x7}, {0x12, 0x1000, 0xfffffffa, 0x1de4, 0x8, 0x3ff}, {0xfe, 0xf24, 0x8, 0x7, 0xe99c, 0x1ef9}, {0xfffffffc, 0x6, 0x401, 0x2, 0x9, 0x4}, {0x40, 0xd, 0x1, 0xfffffff7, 0x8, 0x9}, {0x2, 0x2, 0x6, 0x800, 0x8, 0x7fff}, {0x7, 0x80000001, 0x5d, 0xee4, 0xa1, 0x3}, {0x7fff, 0x1, 0x5, 0x9, 0x4, 0x26f}, {0x3, 0xe408, 0x7f, 0x2, 0x10, 0x7}, {0x40, 0x7, 0x8, 0x4, 0x9fc6, 0x1}, {0x5, 0xe2d, 0x400, 0x8, 0x2e87}, {0x34, 0xfff, 0xa, 0x9, 0x7}, {0x4, 0x6, 0x2, 0x7a9, 0x0, 0x80}, {0x10, 0x4, 0x6, 0x9, 0x80}, {0x8001, 0x9, 0x101, 0x4, 0x6, 0x9}, {0x6, 0xb4b, 0x2, 0x0, 0x1, 0x10}, {0x6, 0x1, 0x5, 0x0, 0x1, 0x5}, {0x2, 0x200, 0x5, 0x5, 0x81, 0x7}, {0x359, 0x5, 0x3, 0x0, 0x3}, {0x5, 0x6, 0x3, 0xff, 0x80000000, 0x5}, {0x2, 0x0, 0x2, 0x4eb, 0x98, 0x1}, {0xfffffff7, 0x8, 0x9, 0x6, 0x3, 0x99}, {0x1, 0x1, 0x10, 0x5, 0x3ff, 0x7}, {0x1, 0x9dbc, 0x1d78, 0xf7d, 0x5, 0x10000}, {0x4, 0xb, 0x6, 0x607, 0x7, 0xffff}, {0x8, 0x10001, 0x8, 0xf478, 0xffff4ef0, 0x7}, {0x7fffffff, 0x0, 0x3ff, 0x5, 0xb6f1, 0x80}, {0x0, 0x1, 0x158, 0x92, 0x6c, 0xc7}, {0x1, 0xfffffffa, 0x8, 0xff, 0x21, 0x2}, {0x47e, 0x8, 0x200, 0x1, 0x9, 0x4}, {0x4, 0x3, 0x3ff, 0x9, 0x6, 0xfffffffc}, {0x9, 0x8, 0xd39d, 0x94, 0x8000, 0xcfe7}, {0x0, 0x1, 0x4, 0x7b39, 0xffffffff, 0x2}, {0x40a3, 0x6, 0x8, 0x8, 0x4, 0x5}, {0x9, 0x7f, 0x4, 0x4, 0x1, 0x4}, {0x4, 0x2, 0x97d4, 0x4, 0x5, 0x800}, {0xc77, 0x0, 0x20000000, 0x5, 0x9, 0x6}, {0x2, 0x2, 0xbc, 0xe, 0x1, 0x3}, {0x4, 0x1, 0x7fff, 0x80, 0x6, 0x5}, {0xc0000000, 0x2, 0xeb2, 0x90, 0x5, 0x80000000}, {0x40, 0x3, 0x8, 0x2, 0x2, 0x5}, {0x6, 0x5, 0x1, 0x0, 0x7, 0x78ac}, {0x1d, 0x5, 0x218b641a, 0xfffffffe, 0x4, 0x8a}, {0xffff, 0x80000000, 0xd1000000, 0x6, 0xc1c, 0x1}, {0x5800000, 0x5, 0xfff, 0xbbc3}, {0x3, 0x1fd700, 0x81, 0x7, 0xcb, 0x1}, {0xfffffc01, 0xfffffffa, 0x1, 0x1, 0xcb2d}, {0x2, 0xf85, 0x1, 0x2, 0x8, 0x75}, {0x0, 0x5, 0x7, 0x6, 0xfe000000, 0x7}, {0x3ff, 0x8, 0xffffffc0, 0x5, 0x93, 0x1}, {0x0, 0x0, 0x3, 0xae, 0x1, 0xff}, {0x0, 0x2d9, 0x1, 0x1, 0x101, 0x20002}, {0x2, 0x100, 0xfff, 0x5, 0x6, 0x9c4}, {0x3, 0x7, 0x8, 0x114, 0x2, 0x7}, {0x8, 0xffffffc0, 0xfffffffe, 0x101, 0x93a, 0x8}, {0x8, 0x5, 0x200, 0x5, 0x1000, 0x3a}, {0x4, 0x8001, 0x5, 0x1, 0x7, 0x9}, {0x2, 0x8001, 0x7, 0x1, 0x4, 0x8}, {0xf4, 0x1f900000, 0x3, 0xd27, 0x0, 0xea}, {0x8001, 0x7, 0x80000000, 0x7, 0xaf97, 0xff}, {0x0, 0x4, 0x1, 0x800, 0x401, 0x303}, {0x6, 0x7, 0xd4eb, 0x1a, 0x2, 0x3}, {0x3, 0xffffffff, 0x7, 0x2, 0x4, 0xffffffff}, {0x8000, 0x4, 0xd4, 0x3c01, 0x8}, {0x1, 0x6, 0x4, 0x8, 0x80000001, 0x9}, {0xffff, 0x2c26b37b, 0x240, 0x2, 0xf, 0x1}, {0x8, 0x6, 0x80000001, 0x10, 0x2a3, 0x8001}, {0x3, 0x4, 0x2, 0x82d8, 0xfe, 0xc4}, {0x7, 0xffffff8e, 0xbc6, 0x5, 0x4, 0x9}, {0x10001, 0x6, 0x0, 0x4, 0x400, 0x9}, {0x3, 0xfdb, 0x9, 0x2, 0x6d4, 0x1}, {0x0, 0x5, 0xee, 0x6, 0x100, 0x5}, {0x2d, 0x37a5, 0xca7, 0x7, 0x2, 0x5}, {0x1, 0x18ff, 0x400, 0x8, 0x5, 0x2}, {0x5, 0x48e97b7a, 0x9, 0x7, 0x5, 0x9}, {0xeb, 0x9, 0x4, 0x0, 0x3, 0x8}, {0xffffffed, 0x1, 0x41, 0x8001, 0xd5, 0x80000001}, {0xfffffe01, 0x8, 0x5, 0xce2, 0x4, 0x9}, {0x7, 0x10001, 0xa4, 0x5b800000, 0xff, 0x40}, {0x81, 0xdb, 0xfffffff9, 0x8, 0x3, 0xc46}, {0x5, 0x8000, 0x8, 0x40, 0x9, 0x1ff}, {0xd, 0xa8da, 0x40, 0x7fff, 0xe, 0x2}, {0xfff, 0x6, 0xf7ec, 0x20, 0x3, 0xb}, {0x400, 0x2, 0x5, 0x2c, 0xfffffff7, 0xfffffffe}, {0x3, 0x8, 0x4, 0x3, 0x6, 0x4}, {0x7, 0xfff, 0x7, 0xf0, 0x94, 0x8}, {0x691, 0xc05, 0xe87a, 0x0, 0xe3c8, 0x192}, {0x8, 0x4, 0x4, 0xa14, 0x5, 0x3}, {0x81, 0x1ff, 0x81, 0x240, 0x3}, {0x9, 0xc8d, 0xb4, 0x3, 0xffff, 0x2}, {0xfce0, 0x0, 0x9, 0x0, 0x7fff, 0x4c}, {0x3, 0x3e, 0x80, 0x5, 0x778b, 0x9}, {0x1521, 0x1, 0x7ff, 0x80000001, 0x6}, {0x3, 0x9, 0x33ae, 0xfffffff7, 0x10000000, 0xb2}, {0xfffffffa, 0x3, 0x6, 0x755, 0x10, 0x160}, {0x80000000, 0x7f, 0x2, 0x30f, 0xe363, 0x5}, {0x0, 0x2, 0x7f, 0x3, 0xffff, 0x2}, {0x3, 0x8, 0x8000, 0x800, 0x1, 0x80}, {0x7, 0x9, 0x7, 0xd, 0x10, 0x9}, {0x5, 0xeeef, 0x173, 0x33, 0x6fe, 0x6}, {0x7f, 0x1, 0x4, 0x37, 0x4, 0x6}, {0x400000, 0x800, 0xba, 0x401, 0x5}, {0x4, 0x41bac1bb, 0x91c, 0x10, 0x9, 0xfffffffc}], [{0x4, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0xe}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x5}, {0x4}, {0x3}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0xb1ddd63ab587cf2f, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x1}, {0x3}, {0x7, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0xcab5cc3ac3b1b2ee}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0xbc, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0xd8, 0x6, "3beb0ca39b7b33c9147ba790dd19c48804ca4736616525d08b3bb40cee817b66becede9bc35e08809c1b40ee0f4e342521fb0e163002566ff5600b9d9477aae274cadaf74df477b277446d7a5ba00e6f28a27494388735bff461fdd6906fb14889486a2b7f2b50f15a91d713e04cbb67f53615efc4d47e2053e34ceeb82c8b1a44bb2a2f7aa16e33da45c0cd70cf00fb2edfa3bf2ba3b8221686baffc8a703a841c95e461e6f95a295bc0e47ad47d2acce16d7c331b4ae77ae7bb22380aabb6b689f6d01d97a2ed9ddbdbd9f26ff9c7d5a26859a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_csum={0x98, 0x9, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x81, 0x4, 0x2, 0x8, 0x4}, 0xc}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10000, 0x4cb, 0x6, 0x1ff, 0xfffffffe}, 0x5}}]}, {0x33, 0x6, "ae6d1602eea0ad29caeb5dddc3ae3327d79b5e055995bb9c4463aa232c283cc4c4ed49486e00a1b23343a417305b28"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0x1b8, 0x5, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x0, 0x6, 0x0, 0x6}, @multicast1, @multicast2, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xaf, 0x2, 0xffffffffffffffff, 0x5}, @broadcast, @private=0xa010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc01, 0xffff, 0x1, 0x84, 0xf}, @private=0xa010100, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x1c5, 0x7, 0x81a5}, @remote, @multicast2, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfff, 0x6, 0x4, 0x3, 0x7f}, @private=0xa010102, @empty}}]}, {0xc7, 0x6, "bae1d72852892dc3cb5619d8b69e6186106c28730d8d57679be5cf6f004a4633684c13410551fe922ac71c5af43ef43c35bb7a84fcff0a50440e490890c62e758dcc07f193d23dea289b87e25006a83449c9dca9dbbf3145bcc43c87401eb0537e4b9152e17b9122daa86c1e2818087635cd6495dad2929e173fb07fbba8c619c07a80590d73083cf09067539a8b61072f1170bf462af7ab82b0ebf41bb246af39b13ea3cdfaee05ed5e23eeabdc1e19c47737ce3b89c20111eaff31269992ffcb5123"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0x108, 0x12, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xf99, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x59f, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xf83, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x1, 0x6, 0x0, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3de8, 0x4, 0x5, 0x80000001, 0xb9}}]}, {0x87, 0x6, "13f8a55671308fc2a1ef8bf5ff0be9b1c9f6f4bd09aaca1926b4355e3a0c70e02b517f6a8207caf401b863ced51a0ef0381917e501a17997a83d4e1d524c52115d76e0e981fee1a68c6ae9d551f56a192e7960d37e1e84bfff4799077e8cc8b4b2ab1385efe249c04164bb9d0159fd09257dfa09231b8654c796fa3cd62c58ef2e1423"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0xd, 0xca}}]}, 0x16d8}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) 556.102106ms ago: executing program 2 (id=7068): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x8, 0x0, 0xffffffff}, 0x10) (async) r1 = socket(0x1e, 0x4, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) sendmmsg(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x80800) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) accept$inet(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, 0x0) (async) close(0x4) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/uts\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r4, 0x0) (async) r7 = socket(0x14, 0x2, 0x4) ioctl$SIOCX25GDTEFACILITIES(r7, 0x61e1, 0x0) (async) write(r6, &(0x7f00000000c0)="ab1ae393207716fa49cd1c342bdddc675b507187cc0a613c19d20c38e95f1b44b901e2b37054f91bea0abbd1b06d5aac6e0765e4715e9a078bd21abc75e01bcf5b4a9ec4cc0ab377843f", 0x4a) (async, rerun: 64) r8 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="86feffff10080000281e70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4254010028240100280012800b00010065727370616e00001800028004001200080015001949010000000e0000000000000016000100000000002100c2000000"], 0x5c}, 0x1, 0x0, 0x0, 0x2004c8c0}, 0x850) (async) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000340)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, 0x0}, 0x24000008) (async) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x0, 0x2) 364.196765ms ago: executing program 2 (id=7069): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdbdf2502000000050005000a000000080002000100000028000680060005004e230000060001000a00000014000400fe8000000000000000000000000000aa"], 0x4c}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000000) r1 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045"], 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 154.701047ms ago: executing program 7 (id=7070): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr, 0x0}, &(0x7f00000002c0)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x78, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKINFO_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xfc}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10c, 0x10c, 0x3, [@struct={0x0, 0xa, 0x0, 0x4, 0x0, 0x88, [{0x4, 0x1, 0x2}, {0x3, 0x0, 0x2}, {0xc, 0x4, 0x4}, {0xc, 0x0, 0x7}, {0x9, 0x0, 0x1}, {0xb, 0xff, 0x5}, {0xa, 0x2, 0x9}, {0x0, 0x2, 0x8ba}, {0x10, 0x5, 0x7}, {0x4, 0x0, 0x80000000}]}, @volatile={0x7, 0x0, 0x0, 0x9, 0x2}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x2, 0x3}, @func={0x8, 0x0, 0x0, 0xc, 0x3}, @const={0x6, 0x0, 0x0, 0xa, 0x1}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x28, 0x0, 0x70, 0x6}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x10, 0x1}, {0xc, 0x4}, {0x10, 0x2}, {0xb}, {0xa, 0x2}, {0x10, 0x5}, {0x1, 0x2}]}]}, {0x0, [0x2e]}}, &(0x7f00000000c0)=""/55, 0x127, 0x37, 0x0, 0x400, 0x10000, @value=r3}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000240)={[0x4]}, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000400)={'filter\x00', 0x3, "b9f910"}, &(0x7f00000004c0)=0x27) 149.891795ms ago: executing program 2 (id=7071): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0xf0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/68, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x44}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0x11, r2, 0x5a718000) 99.226132ms ago: executing program 6 (id=7072): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00', 0x0}) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @private=0xa010102}, 0x3, 0x0, 0x0, 0x4}}, 0x26) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x27, 0x10, 0x0, &(0x7f00000002c0)="f8ad48cc02cb29dcc8007f5b08007125", 0x0, 0x5000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x16747c6d2baaace}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x7, 0x7f, 0x1, 0x2}, 0x609d, 0x1, 0x8, 0xfffffffa, 0x2, 0x2, 0x18, 0x1, 0x6, 0xe, {0x3, 0xfffffeff, 0x5, 0x0, 0x9, 0x2}}}}]}, 0x78}}, 0x0) 0s ago: executing program 3 (id=7073): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 1002.676148][T29250] ? apparmor_capable+0x137/0x1b0 [ 1002.676175][T29250] ? bpf_lsm_capable+0x9/0x20 [ 1002.676200][T29250] ? security_capable+0x7e/0x2e0 [ 1002.676249][T29250] tipc_nl_compat_recv+0x83c/0xbe0 [ 1002.676276][T29250] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 1002.676296][T29250] ? __mutex_trylock_common+0x153/0x260 [ 1002.676328][T29250] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1002.676354][T29250] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1002.676376][T29250] ? __pfx_tipc_nl_node_reset_link_stats+0x10/0x10 [ 1002.676406][T29250] ? __pfx_tipc_nl_compat_link_reset_stats+0x10/0x10 [ 1002.676443][T29250] ? trace_contention_end+0x39/0x120 [ 1002.676484][T29250] genl_family_rcv_msg_doit+0x212/0x300 [ 1002.676526][T29250] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1002.676588][T29250] genl_rcv_msg+0x60e/0x790 [ 1002.676627][T29250] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1002.676656][T29250] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 1002.676681][T29250] ? __asan_memcpy+0x40/0x70 [ 1002.676707][T29250] ? __pfx_ref_tracker_free+0x10/0x10 [ 1002.676751][T29250] netlink_rcv_skb+0x208/0x470 [ 1002.676772][T29250] ? __lock_acquire+0xab9/0xd20 [ 1002.676794][T29250] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1002.676826][T29250] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1002.676874][T29250] ? down_read+0x1ad/0x2e0 [ 1002.676903][T29250] genl_rcv+0x28/0x40 [ 1002.676930][T29250] netlink_unicast+0x82c/0x9e0 [ 1002.676978][T29250] ? __pfx_netlink_unicast+0x10/0x10 [ 1002.677015][T29250] ? netlink_sendmsg+0x642/0xb30 [ 1002.677036][T29250] ? skb_put+0x11b/0x210 [ 1002.677066][T29250] netlink_sendmsg+0x805/0xb30 [ 1002.677102][T29250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1002.677127][T29250] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1002.677160][T29250] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1002.677194][T29250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1002.677219][T29250] __sock_sendmsg+0x21c/0x270 [ 1002.677264][T29250] ____sys_sendmsg+0x505/0x830 [ 1002.677306][T29250] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1002.677346][T29250] ? import_iovec+0x74/0xa0 [ 1002.677378][T29250] ___sys_sendmsg+0x21f/0x2a0 [ 1002.677409][T29250] ? __pfx____sys_sendmsg+0x10/0x10 [ 1002.677484][T29250] ? __fget_files+0x2a/0x420 [ 1002.677510][T29250] ? __fget_files+0x3a0/0x420 [ 1002.677547][T29250] __x64_sys_sendmsg+0x19b/0x260 [ 1002.677579][T29250] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1002.677619][T29250] ? __pfx_ksys_write+0x10/0x10 [ 1002.677643][T29250] ? rcu_is_watching+0x15/0xb0 [ 1002.677676][T29250] ? do_syscall_64+0xbe/0x3b0 [ 1002.677705][T29250] do_syscall_64+0xfa/0x3b0 [ 1002.677726][T29250] ? lockdep_hardirqs_on+0x9c/0x150 [ 1002.677761][T29250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.677784][T29250] ? clear_bhb_loop+0x60/0xb0 [ 1002.677812][T29250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.677833][T29250] RIP: 0033:0x7f2a2078eec9 [ 1002.677855][T29250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1002.677873][T29250] RSP: 002b:00007f2a216e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1002.677898][T29250] RAX: ffffffffffffffda RBX: 00007f2a209e5fa0 RCX: 00007f2a2078eec9 [ 1002.677914][T29250] RDX: 0000000000040000 RSI: 0000200000000e00 RDI: 0000000000000003 [ 1002.677929][T29250] RBP: 00007f2a216e5090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.677943][T29250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1002.677957][T29250] R13: 00007f2a209e6038 R14: 00007f2a209e5fa0 R15: 00007ffdede0ad78 [ 1002.677995][T29250] [ 1003.181601][T29209] chnl_net:caif_netlink_parms(): no params data found [ 1003.591136][T29209] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.600475][T29209] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.610888][T29209] bridge_slave_0: entered allmulticast mode [ 1003.620470][T29209] bridge_slave_0: entered promiscuous mode [ 1003.662376][T29209] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.689679][T29209] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.716172][T29209] bridge_slave_1: entered allmulticast mode [ 1003.742672][T29209] bridge_slave_1: entered promiscuous mode [ 1003.897687][ T5844] Bluetooth: hci4: command tx timeout [ 1004.139241][ T56] block nbd1: Possible stuck request ffff8880250a7000: control (read@0,1024B). Runtime 870 seconds [ 1004.153848][ T56] block nbd1: Possible stuck request ffff8880250a71c0: control (read@1024,1024B). Runtime 870 seconds [ 1004.166521][ T56] block nbd1: Possible stuck request ffff8880250a7380: control (read@2048,1024B). Runtime 870 seconds [ 1004.180425][ T56] block nbd1: Possible stuck request ffff8880250a7540: control (read@3072,1024B). Runtime 870 seconds [ 1004.383622][T29209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1004.398991][T29293] FAULT_INJECTION: forcing a failure. [ 1004.398991][T29293] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.413766][T29209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1004.438396][T29293] CPU: 0 UID: 0 PID: 29293 Comm: syz.3.5912 Not tainted syzkaller #0 PREEMPT(full) [ 1004.438431][T29293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1004.438446][T29293] Call Trace: [ 1004.438456][T29293] [ 1004.438466][T29293] dump_stack_lvl+0x189/0x250 [ 1004.438501][T29293] ? __pfx____ratelimit+0x10/0x10 [ 1004.438538][T29293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1004.438566][T29293] ? __pfx__printk+0x10/0x10 [ 1004.438607][T29293] ? __pfx___might_resched+0x10/0x10 [ 1004.438638][T29293] should_fail_ex+0x414/0x560 [ 1004.438676][T29293] should_failslab+0xa8/0x100 [ 1004.438708][T29293] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1004.438738][T29293] ? __alloc_skb+0x112/0x2d0 [ 1004.438768][T29293] __alloc_skb+0x112/0x2d0 [ 1004.438796][T29293] tipc_nl_compat_doit+0x1cc/0x5f0 [ 1004.438828][T29293] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 1004.438866][T29293] ? bpf_lsm_capable+0x9/0x20 [ 1004.438892][T29293] ? security_capable+0x7e/0x2e0 [ 1004.438932][T29293] tipc_nl_compat_recv+0x83c/0xbe0 [ 1004.438958][T29293] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 1004.438977][T29293] ? __mutex_trylock_common+0x153/0x260 [ 1004.439009][T29293] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1004.439034][T29293] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1004.439053][T29293] ? __pfx_tipc_nl_node_reset_link_stats+0x10/0x10 [ 1004.439088][T29293] ? __pfx_tipc_nl_compat_link_reset_stats+0x10/0x10 [ 1004.439116][T29293] ? trace_contention_end+0x39/0x120 [ 1004.439157][T29293] genl_family_rcv_msg_doit+0x212/0x300 [ 1004.439198][T29293] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1004.439259][T29293] genl_rcv_msg+0x60e/0x790 [ 1004.439306][T29293] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1004.439334][T29293] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 1004.439360][T29293] ? __asan_memcpy+0x40/0x70 [ 1004.439382][T29293] ? __pfx_ref_tracker_free+0x10/0x10 [ 1004.439433][T29293] netlink_rcv_skb+0x208/0x470 [ 1004.439454][T29293] ? __lock_acquire+0xab9/0xd20 [ 1004.439476][T29293] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1004.439509][T29293] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1004.439579][T29293] ? down_read+0x1ad/0x2e0 [ 1004.439609][T29293] genl_rcv+0x28/0x40 [ 1004.439636][T29293] netlink_unicast+0x82c/0x9e0 [ 1004.439683][T29293] ? __pfx_netlink_unicast+0x10/0x10 [ 1004.439727][T29293] ? netlink_sendmsg+0x642/0xb30 [ 1004.439749][T29293] ? skb_put+0x11b/0x210 [ 1004.439778][T29293] netlink_sendmsg+0x805/0xb30 [ 1004.439815][T29293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1004.439850][T29293] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1004.439885][T29293] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1004.439926][T29293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1004.439953][T29293] __sock_sendmsg+0x21c/0x270 [ 1004.439992][T29293] ____sys_sendmsg+0x505/0x830 [ 1004.440202][T29293] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1004.440259][T29293] ? import_iovec+0x74/0xa0 [ 1004.440297][T29293] ___sys_sendmsg+0x21f/0x2a0 [ 1004.440333][T29293] ? __pfx____sys_sendmsg+0x10/0x10 [ 1004.440428][T29293] ? __fget_files+0x2a/0x420 [ 1004.440465][T29293] ? __fget_files+0x3a0/0x420 [ 1004.440516][T29293] __x64_sys_sendmsg+0x19b/0x260 [ 1004.440556][T29293] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1004.440604][T29293] ? __pfx_ksys_write+0x10/0x10 [ 1004.440634][T29293] ? rcu_is_watching+0x15/0xb0 [ 1004.440674][T29293] ? do_syscall_64+0xbe/0x3b0 [ 1004.440709][T29293] do_syscall_64+0xfa/0x3b0 [ 1004.440736][T29293] ? lockdep_hardirqs_on+0x9c/0x150 [ 1004.440776][T29293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.440802][T29293] ? clear_bhb_loop+0x60/0xb0 [ 1004.440834][T29293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.440859][T29293] RIP: 0033:0x7fd583f8eec9 [ 1004.440885][T29293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1004.440909][T29293] RSP: 002b:00007fd584e84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1004.440937][T29293] RAX: ffffffffffffffda RBX: 00007fd5841e5fa0 RCX: 00007fd583f8eec9 [ 1004.440957][T29293] RDX: 0000000000040000 RSI: 0000200000000e00 RDI: 0000000000000003 [ 1004.440975][T29293] RBP: 00007fd584e84090 R08: 0000000000000000 R09: 0000000000000000 [ 1004.440992][T29293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1004.441009][T29293] R13: 00007fd5841e6038 R14: 00007fd5841e5fa0 R15: 00007fffc5beb138 [ 1004.441053][T29293] [ 1005.011896][T29304] netlink: 'syz.7.5914': attribute type 1 has an invalid length. [ 1005.065314][T29302] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5916'. [ 1005.142531][T29209] team0: Port device team_slave_0 added [ 1005.152758][T29209] team0: Port device team_slave_1 added [ 1005.200984][T29209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1005.208994][T29209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.242466][T29209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1005.256561][T29209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1005.265068][T29209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.294186][T29209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1005.498974][T29209] hsr_slave_0: entered promiscuous mode [ 1005.539351][T29209] hsr_slave_1: entered promiscuous mode [ 1005.549392][T29209] debugfs: 'hsr0' already exists in 'hsr' [ 1005.565009][T29209] Cannot create hsr debugfs directory [ 1005.705763][T29330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5924'. [ 1005.756586][T29333] FAULT_INJECTION: forcing a failure. [ 1005.756586][T29333] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.758149][T29319] syzkaller0 speed is unknown, defaulting to 1000 [ 1005.786840][T29333] CPU: 0 UID: 0 PID: 29333 Comm: syz.6.5925 Not tainted syzkaller #0 PREEMPT(full) [ 1005.786871][T29333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1005.786886][T29333] Call Trace: [ 1005.786895][T29333] [ 1005.786914][T29333] dump_stack_lvl+0x189/0x250 [ 1005.786949][T29333] ? __pfx____ratelimit+0x10/0x10 [ 1005.786986][T29333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1005.787015][T29333] ? __pfx__printk+0x10/0x10 [ 1005.787057][T29333] ? __pfx___might_resched+0x10/0x10 [ 1005.787081][T29333] ? fs_reclaim_acquire+0x7d/0x100 [ 1005.787125][T29333] should_fail_ex+0x414/0x560 [ 1005.787161][T29333] should_failslab+0xa8/0x100 [ 1005.787192][T29333] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1005.787220][T29333] ? __alloc_skb+0x112/0x2d0 [ 1005.787248][T29333] __alloc_skb+0x112/0x2d0 [ 1005.787277][T29333] tipc_get_err_tlv+0x36/0xe0 [ 1005.787302][T29333] tipc_nl_compat_recv+0x878/0xbe0 [ 1005.787330][T29333] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 1005.787349][T29333] ? __mutex_trylock_common+0x153/0x260 [ 1005.787380][T29333] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1005.787407][T29333] ? __pfx_tipc_nl_node_reset_link_stats+0x10/0x10 [ 1005.787436][T29333] ? __pfx_tipc_nl_compat_link_reset_stats+0x10/0x10 [ 1005.787468][T29333] ? trace_contention_end+0x39/0x120 [ 1005.787509][T29333] genl_family_rcv_msg_doit+0x212/0x300 [ 1005.787551][T29333] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1005.787600][T29333] ? stack_trace_save+0x9c/0xe0 [ 1005.787638][T29333] genl_rcv_msg+0x60e/0x790 [ 1005.787677][T29333] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1005.787705][T29333] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 1005.787746][T29333] netlink_rcv_skb+0x208/0x470 [ 1005.787766][T29333] ? __lock_acquire+0xab9/0xd20 [ 1005.787786][T29333] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1005.787816][T29333] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1005.787861][T29333] ? down_read+0x1ad/0x2e0 [ 1005.787891][T29333] genl_rcv+0x28/0x40 [ 1005.787928][T29333] netlink_unicast+0x82c/0x9e0 [ 1005.787974][T29333] ? __pfx_netlink_unicast+0x10/0x10 [ 1005.788012][T29333] ? netlink_sendmsg+0x642/0xb30 [ 1005.788034][T29333] ? skb_put+0x11b/0x210 [ 1005.788063][T29333] netlink_sendmsg+0x805/0xb30 [ 1005.788100][T29333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1005.788129][T29333] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1005.788164][T29333] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1005.788199][T29333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1005.788224][T29333] __sock_sendmsg+0x21c/0x270 [ 1005.788263][T29333] ____sys_sendmsg+0x505/0x830 [ 1005.788298][T29333] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1005.788338][T29333] ? import_iovec+0x74/0xa0 [ 1005.788369][T29333] ___sys_sendmsg+0x21f/0x2a0 [ 1005.788411][T29333] ? __pfx____sys_sendmsg+0x10/0x10 [ 1005.788484][T29333] ? __fget_files+0x2a/0x420 [ 1005.788515][T29333] ? __fget_files+0x3a0/0x420 [ 1005.788560][T29333] __x64_sys_sendmsg+0x19b/0x260 [ 1005.788592][T29333] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1005.788631][T29333] ? __pfx_ksys_write+0x10/0x10 [ 1005.788679][T29333] ? do_syscall_64+0xbe/0x3b0 [ 1005.788709][T29333] do_syscall_64+0xfa/0x3b0 [ 1005.788731][T29333] ? lockdep_hardirqs_on+0x9c/0x150 [ 1005.788766][T29333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.788790][T29333] ? clear_bhb_loop+0x60/0xb0 [ 1005.788819][T29333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.788841][T29333] RIP: 0033:0x7f769818eec9 [ 1005.788865][T29333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1005.788885][T29333] RSP: 002b:00007f7698fdb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1005.788917][T29333] RAX: ffffffffffffffda RBX: 00007f76983e5fa0 RCX: 00007f769818eec9 [ 1005.788935][T29333] RDX: 0000000000040000 RSI: 0000200000000e00 RDI: 0000000000000003 [ 1005.788950][T29333] RBP: 00007f7698fdb090 R08: 0000000000000000 R09: 0000000000000000 [ 1005.788965][T29333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1005.788978][T29333] R13: 00007f76983e6038 R14: 00007f76983e5fa0 R15: 00007ffda27375a8 [ 1005.789017][T29333] [ 1006.274401][ T5844] Bluetooth: hci4: command tx timeout [ 1006.395895][T29330] xfrm0: entered promiscuous mode [ 1006.402041][T29330] xfrm0: entered allmulticast mode [ 1006.427660][T29331] syzkaller0 speed is unknown, defaulting to 1000 [ 1006.435595][T29319] virt_wifi0 speed is unknown, defaulting to 1000 [ 1006.445739][T29319] wg1 speed is unknown, defaulting to 1000 [ 1006.449518][T29331] virt_wifi0 speed is unknown, defaulting to 1000 [ 1006.494186][T29331] wg1 speed is unknown, defaulting to 1000 [ 1006.883137][T29346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5930'. [ 1006.905227][T29350] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5928'. [ 1006.962773][T29353] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5929'. [ 1006.990264][T29353] netlink: 10 bytes leftover after parsing attributes in process `syz.6.5929'. [ 1007.123794][T29353] vxcan1: entered allmulticast mode [ 1007.179750][T29363] vlan0: entered promiscuous mode [ 1007.185054][T29363] team0: entered promiscuous mode [ 1007.389191][T29374] FAULT_INJECTION: forcing a failure. [ 1007.389191][T29374] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.414054][T29374] CPU: 0 UID: 0 PID: 29374 Comm: syz.7.5935 Not tainted syzkaller #0 PREEMPT(full) [ 1007.414087][T29374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1007.414101][T29374] Call Trace: [ 1007.414110][T29374] [ 1007.414121][T29374] dump_stack_lvl+0x189/0x250 [ 1007.414154][T29374] ? __pfx____ratelimit+0x10/0x10 [ 1007.414190][T29374] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1007.414217][T29374] ? __pfx__printk+0x10/0x10 [ 1007.414258][T29374] ? __pfx___might_resched+0x10/0x10 [ 1007.414280][T29374] ? fs_reclaim_acquire+0x7d/0x100 [ 1007.414317][T29374] should_fail_ex+0x414/0x560 [ 1007.414355][T29374] should_failslab+0xa8/0x100 [ 1007.414386][T29374] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1007.414415][T29374] ? __alloc_skb+0x112/0x2d0 [ 1007.414443][T29374] __alloc_skb+0x112/0x2d0 [ 1007.414472][T29374] tipc_get_err_tlv+0x36/0xe0 [ 1007.414498][T29374] tipc_nl_compat_recv+0x878/0xbe0 [ 1007.414524][T29374] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 1007.414543][T29374] ? __mutex_trylock_common+0x153/0x260 [ 1007.414574][T29374] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1007.414600][T29374] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1007.414622][T29374] ? __pfx_tipc_nl_node_reset_link_stats+0x10/0x10 [ 1007.414651][T29374] ? __pfx_tipc_nl_compat_link_reset_stats+0x10/0x10 [ 1007.414681][T29374] ? trace_contention_end+0x39/0x120 [ 1007.414719][T29374] genl_family_rcv_msg_doit+0x212/0x300 [ 1007.414778][T29374] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1007.414836][T29374] genl_rcv_msg+0x60e/0x790 [ 1007.414874][T29374] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1007.414902][T29374] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 1007.414925][T29374] ? __asan_memcpy+0x40/0x70 [ 1007.414951][T29374] ? __pfx_ref_tracker_free+0x10/0x10 [ 1007.414990][T29374] netlink_rcv_skb+0x208/0x470 [ 1007.415010][T29374] ? __lock_acquire+0xab9/0xd20 [ 1007.415031][T29374] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1007.415062][T29374] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1007.415105][T29374] ? down_read+0x1ad/0x2e0 [ 1007.415132][T29374] genl_rcv+0x28/0x40 [ 1007.415159][T29374] netlink_unicast+0x82c/0x9e0 [ 1007.415204][T29374] ? __pfx_netlink_unicast+0x10/0x10 [ 1007.415239][T29374] ? netlink_sendmsg+0x642/0xb30 [ 1007.415259][T29374] ? skb_put+0x11b/0x210 [ 1007.415287][T29374] netlink_sendmsg+0x805/0xb30 [ 1007.415322][T29374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1007.415350][T29374] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1007.415383][T29374] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1007.415416][T29374] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1007.415440][T29374] __sock_sendmsg+0x21c/0x270 [ 1007.415478][T29374] ____sys_sendmsg+0x505/0x830 [ 1007.415512][T29374] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1007.415549][T29374] ? import_iovec+0x74/0xa0 [ 1007.415579][T29374] ___sys_sendmsg+0x21f/0x2a0 [ 1007.415608][T29374] ? __pfx____sys_sendmsg+0x10/0x10 [ 1007.415682][T29374] ? __fget_files+0x2a/0x420 [ 1007.415712][T29374] ? __fget_files+0x3a0/0x420 [ 1007.415762][T29374] __x64_sys_sendmsg+0x19b/0x260 [ 1007.415794][T29374] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1007.415834][T29374] ? __pfx_ksys_write+0x10/0x10 [ 1007.415857][T29374] ? rcu_is_watching+0x15/0xb0 [ 1007.415890][T29374] ? do_syscall_64+0xbe/0x3b0 [ 1007.415918][T29374] do_syscall_64+0xfa/0x3b0 [ 1007.415938][T29374] ? lockdep_hardirqs_on+0x9c/0x150 [ 1007.415975][T29374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.415999][T29374] ? clear_bhb_loop+0x60/0xb0 [ 1007.416028][T29374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.416050][T29374] RIP: 0033:0x7f2a2078eec9 [ 1007.416072][T29374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1007.416092][T29374] RSP: 002b:00007f2a216e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1007.416117][T29374] RAX: ffffffffffffffda RBX: 00007f2a209e5fa0 RCX: 00007f2a2078eec9 [ 1007.416134][T29374] RDX: 0000000000040000 RSI: 0000200000000e00 RDI: 0000000000000003 [ 1007.416150][T29374] RBP: 00007f2a216e5090 R08: 0000000000000000 R09: 0000000000000000 [ 1007.416164][T29374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1007.416178][T29374] R13: 00007f2a209e6038 R14: 00007f2a209e5fa0 R15: 00007ffdede0ad78 [ 1007.416217][T29374] [ 1007.986232][T29379] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5937'. [ 1008.139841][T29390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5941'. [ 1008.298852][ T5844] Bluetooth: hci4: command tx timeout [ 1008.611239][T29411] netlink: 'syz.2.5945': attribute type 10 has an invalid length. [ 1008.624493][T29209] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1008.639770][T29209] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1008.652335][T29209] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1008.665787][T29411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5945'. [ 1008.694987][T29411] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5945'. [ 1008.716996][T29411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5945'. [ 1008.733832][T29209] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1008.779456][T29420] syzkaller1: entered promiscuous mode [ 1008.805849][T29420] syzkaller1: entered allmulticast mode [ 1009.041482][T29209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1009.075326][T29209] 8021q: adding VLAN 0 to HW filter on device team0 [ 1009.101307][ T7052] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.109474][ T7052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1009.123219][T29443] netlink: 'syz.6.5952': attribute type 1 has an invalid length. [ 1009.136973][ T7052] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.145817][ T7052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1009.175460][T29447] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1009.189955][T29447] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1009.309278][T29447] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1009.357025][T29447] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1009.444779][T29447] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1009.459400][T29447] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1009.554011][T29447] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1009.566789][T29447] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1009.604394][T29458] netlink: 'syz.3.5954': attribute type 12 has an invalid length. [ 1009.778402][T25998] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.807757][T25998] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 1009.845783][T25998] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1009.905754][T25998] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1010.006899][ T7052] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1010.051412][ T7052] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1010.114618][ T7052] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1010.140180][ T7052] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1010.290170][T29209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1010.368769][T29487] sock: sock_timestamping_bind_phc: sock not bind to device [ 1010.378960][ T5844] Bluetooth: hci4: command tx timeout [ 1010.394288][T29485] IPVS: Scheduler module ip_vs_sip not found [ 1010.404357][T29482] tipc: Enabled bearer , priority 0 [ 1010.430584][T29482] syzkaller0: entered promiscuous mode [ 1010.436788][T29482] syzkaller0: entered allmulticast mode [ 1010.599873][T29492] tipc: Enabling not permitted [ 1010.606117][T29492] tipc: Enabling of bearer rejected, failed to enable media [ 1010.673612][T29482] tipc: Resetting bearer [ 1010.745447][T29481] tipc: Resetting bearer [ 1010.816396][T29481] tipc: Disabling bearer [ 1010.896966][T29507] __nla_validate_parse: 4 callbacks suppressed [ 1010.896990][T29507] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5965'. [ 1010.947949][T29510] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5965'. [ 1011.236616][T29209] veth0_vlan: entered promiscuous mode [ 1011.265311][T29209] veth1_vlan: entered promiscuous mode [ 1011.288052][T29528] FAULT_INJECTION: forcing a failure. [ 1011.288052][T29528] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.310703][T29528] CPU: 1 UID: 0 PID: 29528 Comm: syz.3.5971 Not tainted syzkaller #0 PREEMPT(full) [ 1011.310737][T29528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1011.310752][T29528] Call Trace: [ 1011.310761][T29528] [ 1011.310772][T29528] dump_stack_lvl+0x189/0x250 [ 1011.310805][T29528] ? __pfx____ratelimit+0x10/0x10 [ 1011.310853][T29528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1011.310882][T29528] ? __pfx__printk+0x10/0x10 [ 1011.310923][T29528] ? __pfx___might_resched+0x10/0x10 [ 1011.310946][T29528] ? fs_reclaim_acquire+0x7d/0x100 [ 1011.310984][T29528] should_fail_ex+0x414/0x560 [ 1011.311022][T29528] should_failslab+0xa8/0x100 [ 1011.311053][T29528] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1011.311080][T29528] ? __alloc_skb+0x112/0x2d0 [ 1011.311108][T29528] __alloc_skb+0x112/0x2d0 [ 1011.311137][T29528] netlink_ack+0x146/0xa50 [ 1011.311157][T29528] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1011.311191][T29528] ? __asan_memcpy+0x40/0x70 [ 1011.311212][T29528] ? __pfx_ref_tracker_free+0x10/0x10 [ 1011.311256][T29528] netlink_rcv_skb+0x28c/0x470 [ 1011.311277][T29528] ? __lock_acquire+0xab9/0xd20 [ 1011.311299][T29528] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1011.311331][T29528] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1011.311378][T29528] ? down_read+0x1ad/0x2e0 [ 1011.311407][T29528] genl_rcv+0x28/0x40 [ 1011.311434][T29528] netlink_unicast+0x82c/0x9e0 [ 1011.311487][T29528] ? __pfx_netlink_unicast+0x10/0x10 [ 1011.311530][T29528] ? netlink_sendmsg+0x642/0xb30 [ 1011.311549][T29528] ? skb_put+0x11b/0x210 [ 1011.311578][T29528] netlink_sendmsg+0x805/0xb30 [ 1011.311613][T29528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1011.311648][T29528] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1011.311682][T29528] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1011.311717][T29528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1011.311743][T29528] __sock_sendmsg+0x21c/0x270 [ 1011.311778][T29528] ____sys_sendmsg+0x505/0x830 [ 1011.311811][T29528] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1011.311851][T29528] ? import_iovec+0x74/0xa0 [ 1011.311886][T29528] ___sys_sendmsg+0x21f/0x2a0 [ 1011.311916][T29528] ? __pfx____sys_sendmsg+0x10/0x10 [ 1011.311987][T29528] ? __fget_files+0x2a/0x420 [ 1011.312023][T29528] ? __fget_files+0x3a0/0x420 [ 1011.312067][T29528] __x64_sys_sendmsg+0x19b/0x260 [ 1011.312098][T29528] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1011.312138][T29528] ? __pfx_ksys_write+0x10/0x10 [ 1011.312163][T29528] ? rcu_is_watching+0x15/0xb0 [ 1011.312196][T29528] ? do_syscall_64+0xbe/0x3b0 [ 1011.312225][T29528] do_syscall_64+0xfa/0x3b0 [ 1011.312247][T29528] ? lockdep_hardirqs_on+0x9c/0x150 [ 1011.312282][T29528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.312306][T29528] ? clear_bhb_loop+0x60/0xb0 [ 1011.312334][T29528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.312356][T29528] RIP: 0033:0x7fd583f8eec9 [ 1011.312377][T29528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1011.312397][T29528] RSP: 002b:00007fd584e84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1011.312428][T29528] RAX: ffffffffffffffda RBX: 00007fd5841e5fa0 RCX: 00007fd583f8eec9 [ 1011.312446][T29528] RDX: 0000000000040000 RSI: 0000200000000e00 RDI: 0000000000000003 [ 1011.312461][T29528] RBP: 00007fd584e84090 R08: 0000000000000000 R09: 0000000000000000 [ 1011.312476][T29528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1011.312490][T29528] R13: 00007fd5841e6038 R14: 00007fd5841e5fa0 R15: 00007fffc5beb138 [ 1011.312530][T29528] [ 1011.382847][T29535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5970'. [ 1011.645669][T29542] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5972'. [ 1011.855236][T29542] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1011.924375][T29545] syzkaller0 speed is unknown, defaulting to 1000 [ 1011.981387][T29209] veth0_macvtap: entered promiscuous mode [ 1012.003285][T29545] virt_wifi0 speed is unknown, defaulting to 1000 [ 1012.016917][T29209] veth1_macvtap: entered promiscuous mode [ 1012.032213][T29545] wg1 speed is unknown, defaulting to 1000 [ 1012.051706][T29209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1012.114489][T29209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1012.185313][ T7049] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.215365][ T7049] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.238577][ T7049] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.272448][ T7049] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.541899][T25996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.556288][T25996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.661800][ T7052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.672769][ T7052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.808547][T29582] FAULT_INJECTION: forcing a failure. [ 1012.808547][T29582] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.824759][T29582] CPU: 0 UID: 0 PID: 29582 Comm: syz.7.5982 Not tainted syzkaller #0 PREEMPT(full) [ 1012.824792][T29582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1012.824807][T29582] Call Trace: [ 1012.824816][T29582] [ 1012.824826][T29582] dump_stack_lvl+0x189/0x250 [ 1012.824859][T29582] ? __pfx____ratelimit+0x10/0x10 [ 1012.824896][T29582] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1012.824923][T29582] ? __pfx__printk+0x10/0x10 [ 1012.824965][T29582] ? __pfx___might_resched+0x10/0x10 [ 1012.824990][T29582] ? fs_reclaim_acquire+0x7d/0x100 [ 1012.825029][T29582] should_fail_ex+0x414/0x560 [ 1012.825067][T29582] should_failslab+0xa8/0x100 [ 1012.825099][T29582] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1012.825128][T29582] ? __alloc_skb+0x112/0x2d0 [ 1012.825157][T29582] __alloc_skb+0x112/0x2d0 [ 1012.825186][T29582] netlink_ack+0x146/0xa50 [ 1012.825206][T29582] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1012.825251][T29582] ? __asan_memcpy+0x40/0x70 [ 1012.825273][T29582] ? __pfx_ref_tracker_free+0x10/0x10 [ 1012.825316][T29582] netlink_rcv_skb+0x28c/0x470 [ 1012.825337][T29582] ? __lock_acquire+0xab9/0xd20 [ 1012.825358][T29582] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1012.825390][T29582] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1012.825438][T29582] ? down_read+0x1ad/0x2e0 [ 1012.825466][T29582] genl_rcv+0x28/0x40 [ 1012.825493][T29582] netlink_unicast+0x82c/0x9e0 [ 1012.825540][T29582] ? __pfx_netlink_unicast+0x10/0x10 [ 1012.825577][T29582] ? netlink_sendmsg+0x642/0xb30 [ 1012.825598][T29582] ? skb_put+0x11b/0x210 [ 1012.825628][T29582] netlink_sendmsg+0x805/0xb30 [ 1012.825665][T29582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1012.825693][T29582] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1012.825728][T29582] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1012.825762][T29582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1012.825788][T29582] __sock_sendmsg+0x21c/0x270 [ 1012.825825][T29582] ____sys_sendmsg+0x505/0x830 [ 1012.825858][T29582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1012.825897][T29582] ? import_iovec+0x74/0xa0 [ 1012.825928][T29582] ___sys_sendmsg+0x21f/0x2a0 [ 1012.825959][T29582] ? __pfx____sys_sendmsg+0x10/0x10 [ 1012.826033][T29582] ? __fget_files+0x2a/0x420 [ 1012.826061][T29582] ? __fget_files+0x3a0/0x420 [ 1012.826104][T29582] __x64_sys_sendmsg+0x19b/0x260 [ 1012.826136][T29582] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1012.826176][T29582] ? __pfx_ksys_write+0x10/0x10 [ 1012.826198][T29582] ? rcu_is_watching+0x15/0xb0 [ 1012.826236][T29582] ? do_syscall_64+0xbe/0x3b0 [ 1012.826265][T29582] do_syscall_64+0xfa/0x3b0 [ 1012.826288][T29582] ? lockdep_hardirqs_on+0x9c/0x150 [ 1012.826322][T29582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.826345][T29582] ? clear_bhb_loop+0x60/0xb0 [ 1012.826373][T29582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.826395][T29582] RIP: 0033:0x7f2a2078eec9 [ 1012.826416][T29582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1012.826436][T29582] RSP: 002b:00007f2a216e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1012.826461][T29582] RAX: ffffffffffffffda RBX: 00007f2a209e5fa0 RCX: 00007f2a2078eec9 [ 1012.826478][T29582] RDX: 0000000000040000 RSI: 0000200000000e00 RDI: 0000000000000003 [ 1012.826493][T29582] RBP: 00007f2a216e5090 R08: 0000000000000000 R09: 0000000000000000 [ 1012.826508][T29582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1012.826522][T29582] R13: 00007f2a209e6038 R14: 00007f2a209e5fa0 R15: 00007ffdede0ad78 [ 1012.826559][T29582] [ 1013.352306][T29591] sctp: [Deprecated]: syz.7.5986 (pid 29591) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1013.352306][T29591] Use struct sctp_sack_info instead [ 1013.555111][T29609] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5987'. [ 1013.568089][T29609] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5987'. [ 1013.608286][T29610] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5988'. [ 1013.639113][T29609] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5987'. [ 1013.726739][T29620] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1013.763981][T29609] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1013.813492][T17521] IPVS: starting estimator thread 0... [ 1013.969108][T29622] IPVS: using max 24 ests per chain, 57600 per kthread [ 1013.993096][T29616] syzkaller0 speed is unknown, defaulting to 1000 [ 1014.124259][T29616] virt_wifi0 speed is unknown, defaulting to 1000 [ 1014.134162][T29629] syzkaller0 speed is unknown, defaulting to 1000 [ 1014.160508][T29629] virt_wifi0 speed is unknown, defaulting to 1000 [ 1014.170729][T29616] wg1 speed is unknown, defaulting to 1000 [ 1014.239041][T29629] wg1 speed is unknown, defaulting to 1000 [ 1014.647741][T29645] FAULT_INJECTION: forcing a failure. [ 1014.647741][T29645] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.664098][T29645] CPU: 0 UID: 0 PID: 29645 Comm: syz.5.5997 Not tainted syzkaller #0 PREEMPT(full) [ 1014.664129][T29645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1014.664144][T29645] Call Trace: [ 1014.664154][T29645] [ 1014.664164][T29645] dump_stack_lvl+0x189/0x250 [ 1014.664198][T29645] ? __pfx____ratelimit+0x10/0x10 [ 1014.664235][T29645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1014.664262][T29645] ? __pfx__printk+0x10/0x10 [ 1014.664293][T29645] ? genl_rcv+0x28/0x40 [ 1014.664322][T29645] ? ____sys_sendmsg+0x505/0x830 [ 1014.664348][T29645] ? __x64_sys_sendmsg+0x19b/0x260 [ 1014.664387][T29645] should_fail_ex+0x414/0x560 [ 1014.664425][T29645] should_failslab+0xa8/0x100 [ 1014.664457][T29645] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1014.664484][T29645] ? skb_clone+0x212/0x3a0 [ 1014.664517][T29645] skb_clone+0x212/0x3a0 [ 1014.664550][T29645] __netlink_deliver_tap+0x404/0x850 [ 1014.664589][T29645] ? netlink_deliver_tap+0x2e/0x1b0 [ 1014.664615][T29645] netlink_deliver_tap+0x19c/0x1b0 [ 1014.664641][T29645] netlink_sendskb+0x68/0x140 [ 1014.664679][T29645] netlink_unicast+0x397/0x9e0 [ 1014.664710][T29645] ? __asan_memcpy+0x40/0x70 [ 1014.664749][T29645] ? __pfx_netlink_unicast+0x10/0x10 [ 1014.664800][T29645] netlink_rcv_skb+0x28c/0x470 [ 1014.664822][T29645] ? __lock_acquire+0xab9/0xd20 [ 1014.664844][T29645] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1014.664877][T29645] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1014.664923][T29645] ? down_read+0x1ad/0x2e0 [ 1014.664951][T29645] genl_rcv+0x28/0x40 [ 1014.664979][T29645] netlink_unicast+0x82c/0x9e0 [ 1014.665024][T29645] ? __pfx_netlink_unicast+0x10/0x10 [ 1014.665071][T29645] ? netlink_sendmsg+0x642/0xb30 [ 1014.665093][T29645] ? skb_put+0x11b/0x210 [ 1014.665116][T29645] netlink_sendmsg+0x805/0xb30 [ 1014.665147][T29645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1014.665172][T29645] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1014.665201][T29645] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1014.665231][T29645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1014.665253][T29645] __sock_sendmsg+0x21c/0x270 [ 1014.665285][T29645] ____sys_sendmsg+0x505/0x830 [ 1014.665317][T29645] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1014.665355][T29645] ? import_iovec+0x74/0xa0 [ 1014.665386][T29645] ___sys_sendmsg+0x21f/0x2a0 [ 1014.665415][T29645] ? __pfx____sys_sendmsg+0x10/0x10 [ 1014.665487][T29645] ? __fget_files+0x2a/0x420 [ 1014.665515][T29645] ? __fget_files+0x3a0/0x420 [ 1014.665558][T29645] __x64_sys_sendmsg+0x19b/0x260 [ 1014.665588][T29645] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1014.665627][T29645] ? __pfx_ksys_write+0x10/0x10 [ 1014.665650][T29645] ? rcu_is_watching+0x15/0xb0 [ 1014.665682][T29645] ? do_syscall_64+0xbe/0x3b0 [ 1014.665710][T29645] do_syscall_64+0xfa/0x3b0 [ 1014.665731][T29645] ? lockdep_hardirqs_on+0x9c/0x150 [ 1014.665764][T29645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.665786][T29645] ? clear_bhb_loop+0x60/0xb0 [ 1014.665814][T29645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.665835][T29645] RIP: 0033:0x7fcb0a58eec9 [ 1014.665856][T29645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1014.665876][T29645] RSP: 002b:00007fcb0b484038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1014.665900][T29645] RAX: ffffffffffffffda RBX: 00007fcb0a7e5fa0 RCX: 00007fcb0a58eec9 [ 1014.665917][T29645] RDX: 0000000000040000 RSI: 0000200000000e00 RDI: 0000000000000003 [ 1014.665931][T29645] RBP: 00007fcb0b484090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.665945][T29645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1014.665958][T29645] R13: 00007fcb0a7e6038 R14: 00007fcb0a7e5fa0 R15: 00007ffc2bbea918 [ 1014.665995][T29645] [ 1015.502628][T29661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5999'. [ 1019.350672][T29686] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6007'. [ 1019.443605][T29686] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6007'. [ 1020.157709][T29723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6017'. [ 1020.166749][T29725] netlink: 'syz.6.6018': attribute type 2 has an invalid length. [ 1020.224960][T29725] netlink: 'syz.6.6018': attribute type 2 has an invalid length. [ 1020.280971][T29725] netlink: 'syz.6.6018': attribute type 2 has an invalid length. [ 1020.335927][T29725] netlink: 'syz.6.6018': attribute type 1 has an invalid length. [ 1020.408408][T29725] netlink: 'syz.6.6018': attribute type 1 has an invalid length. [ 1020.419852][T29725] netlink: 'syz.6.6018': attribute type 1 has an invalid length. [ 1020.433935][T29725] netlink: 'syz.6.6018': attribute type 1 has an invalid length. [ 1020.555553][T29735] netlink: 'syz.7.6021': attribute type 1 has an invalid length. [ 1020.598106][T29735] netlink: 172 bytes leftover after parsing attributes in process `syz.7.6021'. [ 1020.648329][T29736] syzkaller1: entered promiscuous mode [ 1020.655058][T29736] syzkaller1: entered allmulticast mode [ 1020.848151][T29743] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6023'. [ 1020.915459][T29743] sctp: [Deprecated]: syz.3.6023 (pid 29743) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1020.915459][T29743] Use struct sctp_sack_info instead [ 1021.051372][T29748] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6025'. [ 1021.076775][T29749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6026'. [ 1021.504821][T29768] netlink: 188 bytes leftover after parsing attributes in process `syz.5.6032'. [ 1021.575244][T29768] syzkaller0 speed is unknown, defaulting to 1000 [ 1021.589647][T29768] virt_wifi0 speed is unknown, defaulting to 1000 [ 1021.604068][T29768] wg1 speed is unknown, defaulting to 1000 [ 1021.655269][T29778] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6032'. [ 1021.710331][T29778] veth0_macvtap: left promiscuous mode [ 1022.150804][T29793] syzkaller0 speed is unknown, defaulting to 1000 [ 1022.180747][T29793] virt_wifi0 speed is unknown, defaulting to 1000 [ 1022.192074][T29793] wg1 speed is unknown, defaulting to 1000 [ 1022.323305][T29800] netlink: 'syz.6.6040': attribute type 29 has an invalid length. [ 1022.395496][T29800] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6040'. [ 1022.419831][T29804] netlink: 'syz.6.6040': attribute type 29 has an invalid length. [ 1022.452533][ T7049] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.488866][ T7049] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.502058][ T7049] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.867405][ T7049] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1022.981371][T29821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1023.033352][T29821] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1023.064689][T29816] syzkaller0 speed is unknown, defaulting to 1000 [ 1023.144866][T29822] batadv0: entered promiscuous mode [ 1023.204923][T29822] batadv0: entered allmulticast mode [ 1023.263592][T29822] bond0: (slave batadv0): Releasing backup interface [ 1023.304864][T29822] bridge0: port 4(batadv0) entered blocking state [ 1023.342453][T29822] bridge0: port 4(batadv0) entered disabled state [ 1023.411482][T29816] virt_wifi0 speed is unknown, defaulting to 1000 [ 1023.428574][T29831] syzkaller0 speed is unknown, defaulting to 1000 [ 1023.490013][T29831] virt_wifi0 speed is unknown, defaulting to 1000 [ 1023.528947][T29816] wg1 speed is unknown, defaulting to 1000 [ 1023.551770][T29831] wg1 speed is unknown, defaulting to 1000 [ 1023.848144][T25998] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1023.860436][T25998] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1023.991705][T29860] vlan0: entered promiscuous mode [ 1024.270334][T29851] syzkaller0 speed is unknown, defaulting to 1000 [ 1024.286896][T29872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1024.312778][T29851] virt_wifi0 speed is unknown, defaulting to 1000 [ 1024.314092][T29861] syzkaller0 speed is unknown, defaulting to 1000 [ 1024.405905][T29861] virt_wifi0 speed is unknown, defaulting to 1000 [ 1024.407230][T29851] wg1 speed is unknown, defaulting to 1000 [ 1024.431425][T29878] mac80211_hwsim hwsim51 syzkaller0: left promiscuous mode [ 1024.440058][T29878] mac80211_hwsim hwsim51 syzkaller0: left allmulticast mode [ 1024.452645][T29878] tipc: Resetting bearer [ 1024.478005][T29861] wg1 speed is unknown, defaulting to 1000 [ 1025.163503][T29899] __nla_validate_parse: 5 callbacks suppressed [ 1025.163640][T29899] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6065'. [ 1025.198831][T29902] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6064'. [ 1025.409815][T29905] syzkaller0 speed is unknown, defaulting to 1000 [ 1025.461740][T29905] virt_wifi0 speed is unknown, defaulting to 1000 [ 1025.484976][T29917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6069'. [ 1025.496054][T29917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6069'. [ 1025.543213][T29905] wg1 speed is unknown, defaulting to 1000 [ 1025.555335][T29911] syzkaller0 speed is unknown, defaulting to 1000 [ 1025.584675][T29919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6070'. [ 1025.596646][T29911] virt_wifi0 speed is unknown, defaulting to 1000 [ 1025.692810][T29922] netlink: 112 bytes leftover after parsing attributes in process `syz.6.6067'. [ 1025.734285][T29911] wg1 speed is unknown, defaulting to 1000 [ 1025.997777][T29933] syzkaller0 speed is unknown, defaulting to 1000 [ 1026.009089][T29933] virt_wifi0 speed is unknown, defaulting to 1000 [ 1026.093971][T29933] wg1 speed is unknown, defaulting to 1000 [ 1026.923851][T29960] syzkaller0 speed is unknown, defaulting to 1000 [ 1026.962310][T29960] virt_wifi0 speed is unknown, defaulting to 1000 [ 1027.021413][T29960] wg1 speed is unknown, defaulting to 1000 [ 1027.720359][T29978] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6083'. [ 1027.845210][T29974] syzkaller0 speed is unknown, defaulting to 1000 [ 1027.856471][T29974] virt_wifi0 speed is unknown, defaulting to 1000 [ 1027.868408][T29974] wg1 speed is unknown, defaulting to 1000 [ 1028.130562][T29984] bridge_slave_0: left allmulticast mode [ 1028.166547][T29984] bridge_slave_0: left promiscuous mode [ 1028.177897][T29984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.200632][T29984] bridge_slave_1: left allmulticast mode [ 1028.223429][T29984] bridge_slave_1: left promiscuous mode [ 1028.248317][T29984] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.315048][T29984] bond0: (slave bond_slave_0): Releasing backup interface [ 1028.360279][T29984] bond0: (slave bond_slave_1): Releasing backup interface [ 1028.410221][T29984] team0: Port device team_slave_0 removed [ 1028.429562][T29984] team0: Port device team_slave_1 removed [ 1028.438403][T29984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1028.449829][T29984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1028.464088][T29984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1028.478167][T29984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1028.490051][T29984] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1028.623113][T30000] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6087'. [ 1028.895684][T30010] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6089'. [ 1029.344188][T30031] atomic_op ffff8880783de998 conn xmit_atomic 0000000000000000 [ 1029.676087][T30045] syzkaller0 speed is unknown, defaulting to 1000 [ 1029.700665][T30045] virt_wifi0 speed is unknown, defaulting to 1000 [ 1029.729226][T30045] wg1 speed is unknown, defaulting to 1000 [ 1029.736683][T30046] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6100'. [ 1030.445162][T30070] __nla_validate_parse: 2 callbacks suppressed [ 1030.445187][T30070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6105'. [ 1030.483477][T30070] vlan0: entered promiscuous mode [ 1030.542945][T30072] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6107'. [ 1030.553852][T30072] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1030.952935][T30079] syzkaller0 speed is unknown, defaulting to 1000 [ 1030.973176][T30079] virt_wifi0 speed is unknown, defaulting to 1000 [ 1031.009805][T30079] wg1 speed is unknown, defaulting to 1000 [ 1031.026200][T30081] tap0: tun_chr_ioctl cmd 1074025677 [ 1031.088163][T30081] tap0: linktype set to 825 [ 1031.969116][T30098] syzkaller0 speed is unknown, defaulting to 1000 [ 1031.989685][T30098] virt_wifi0 speed is unknown, defaulting to 1000 [ 1032.004401][T30105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6114'. [ 1032.015001][T30098] wg1 speed is unknown, defaulting to 1000 [ 1032.502434][T30117] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6116'. [ 1032.993030][T30130] nft_compat: unsupported protocol 0 [ 1033.189102][T30142] netlink: 29 bytes leftover after parsing attributes in process `syz.2.6124'. [ 1033.209611][T30144] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6125'. [ 1033.222584][T30144] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6125'. [ 1033.804965][T30171] syzkaller0 speed is unknown, defaulting to 1000 [ 1033.816469][T30171] virt_wifi0 speed is unknown, defaulting to 1000 [ 1033.826127][T30171] wg1 speed is unknown, defaulting to 1000 [ 1033.834387][T30172] syzkaller0 speed is unknown, defaulting to 1000 [ 1033.855483][T30181] pim6reg99999999: entered allmulticast mode [ 1033.947890][T30172] virt_wifi0 speed is unknown, defaulting to 1000 [ 1033.996403][T30172] wg1 speed is unknown, defaulting to 1000 [ 1034.064064][T30192] netlink: 27 bytes leftover after parsing attributes in process `syz.3.6137'. [ 1034.218387][ T56] block nbd1: Possible stuck request ffff8880250a7000: control (read@0,1024B). Runtime 900 seconds [ 1034.233457][ T56] block nbd1: Possible stuck request ffff8880250a71c0: control (read@1024,1024B). Runtime 900 seconds [ 1034.246888][ T56] block nbd1: Possible stuck request ffff8880250a7380: control (read@2048,1024B). Runtime 900 seconds [ 1034.259679][ T56] block nbd1: Possible stuck request ffff8880250a7540: control (read@3072,1024B). Runtime 900 seconds [ 1034.585309][T30206] netlink: 404 bytes leftover after parsing attributes in process `syz.5.6139'. [ 1034.638634][T30206] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6139'. [ 1035.184489][T30229] tipc: Enabled bearer , priority 0 [ 1035.270508][T30227] syzkaller0 speed is unknown, defaulting to 1000 [ 1035.278615][T30236] syzkaller0: entered promiscuous mode [ 1035.278644][T30236] syzkaller0: entered allmulticast mode [ 1035.316787][T30229] tipc: Resetting bearer [ 1035.359026][T30227] virt_wifi0 speed is unknown, defaulting to 1000 [ 1035.391216][T30228] tipc: Resetting bearer [ 1035.471284][T30228] tipc: Disabling bearer [ 1035.540655][T30227] wg1 speed is unknown, defaulting to 1000 [ 1035.848413][T30256] __nla_validate_parse: 3 callbacks suppressed [ 1035.848435][T30256] netlink: 248 bytes leftover after parsing attributes in process `syz.7.6150'. [ 1035.875225][T30261] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6153'. [ 1035.901519][T30259] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6153'. [ 1036.236525][T30273] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16) [ 1036.255375][T30273] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1036.398788][T30273] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6156'. [ 1036.419907][T30273] vlan1: entered promiscuous mode [ 1036.425104][T30273] veth0: entered promiscuous mode [ 1036.433440][T30279] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6159'. [ 1036.815165][T30291] tipc: Started in network mode [ 1036.828788][T30291] tipc: Node identity aaaaaaaaaa1c, cluster identity 4711 [ 1036.845390][T30291] tipc: Enabled bearer , priority 10 [ 1036.876601][T30289] syzkaller0 speed is unknown, defaulting to 1000 [ 1036.888622][T30289] virt_wifi0 speed is unknown, defaulting to 1000 [ 1036.898641][T30289] wg1 speed is unknown, defaulting to 1000 [ 1037.066555][T30306] validate_nla: 4 callbacks suppressed [ 1037.066578][T30306] netlink: 'syz.3.6168': attribute type 8 has an invalid length. [ 1037.447719][T30312] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6170'. [ 1037.625878][T30334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6175'. [ 1037.651247][T30334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6175'. [ 1037.865352][T30335] syzkaller0 speed is unknown, defaulting to 1000 [ 1037.889701][T30335] virt_wifi0 speed is unknown, defaulting to 1000 [ 1037.957416][ T55] tipc: Node number set to 11971242 [ 1037.959594][T30335] wg1 speed is unknown, defaulting to 1000 [ 1038.070693][T30352] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6180'. [ 1038.232773][T30360] netlink: 'syz.2.6182': attribute type 10 has an invalid length. [ 1038.263650][T30360] 8021q: adding VLAN 0 to HW filter on device team0 [ 1038.297923][T30360] bond0: (slave team0): Enslaving as an active interface with an up link [ 1038.320420][T30355] syzkaller0 speed is unknown, defaulting to 1000 [ 1038.364476][T30355] virt_wifi0 speed is unknown, defaulting to 1000 [ 1038.393375][T30355] wg1 speed is unknown, defaulting to 1000 [ 1038.682963][T30335] netlink: 'syz.5.6176': attribute type 2 has an invalid length. [ 1038.705217][T30335] tipc: Failed to remove unknown binding: 66,1,1/11971242:1822261327/1822261329 [ 1039.100451][T30379] vxcan4: entered allmulticast mode [ 1039.469094][T30389] bond1: invalid ARP target 0.0.0.0 specified for addition [ 1039.477832][T30389] bond1: option arp_ip_target: invalid value (0) [ 1039.497484][T30389] bond1 (unregistering): Released all slaves [ 1039.533453][T30391] netlink: 'syz.7.6190': attribute type 12 has an invalid length. [ 1039.579114][T30397] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6192'. [ 1040.182474][T30428] tipc: Resetting bearer [ 1040.470211][T30449] sctp: [Deprecated]: syz.7.6206 (pid 30449) Use of int in maxseg socket option. [ 1040.470211][T30449] Use struct sctp_assoc_value instead [ 1040.798211][T30465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1040.811904][T30469] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_virt_wifi, syncid = 1, id = 0 [ 1041.036187][T30478] __nla_validate_parse: 6 callbacks suppressed [ 1041.036211][T30478] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6215'. [ 1041.036656][T30479] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6214'. [ 1041.068457][T30479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1041.280413][T30487] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6218'. [ 1041.304498][T30492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6218'. [ 1041.316858][T30486] tipc: Enabled bearer , priority 0 [ 1041.334225][T30486] syzkaller0: entered promiscuous mode [ 1041.343518][T30486] syzkaller0: entered allmulticast mode [ 1041.491686][T30484] tipc: Resetting bearer [ 1041.709479][T30484] tipc: Disabling bearer [ 1041.735648][T30510] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6223'. [ 1041.785937][T30505] syzkaller0 speed is unknown, defaulting to 1000 [ 1041.795270][T30505] virt_wifi0 speed is unknown, defaulting to 1000 [ 1041.804344][T30510] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6223'. [ 1041.834468][T30505] wg1 speed is unknown, defaulting to 1000 [ 1042.052485][T30525] netlink: 'syz.7.6226': attribute type 13 has an invalid length. [ 1042.076524][T30522] nft_compat: unsupported protocol 1 [ 1042.087753][T30525] netlink: 'syz.7.6226': attribute type 17 has an invalid length. [ 1042.266176][T30525] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1042.309175][T30541] netlink: 'syz.2.6228': attribute type 49 has an invalid length. [ 1042.322916][T30541] netlink: 'syz.2.6228': attribute type 49 has an invalid length. [ 1042.351833][T30535] netlink: 'syz.5.6230': attribute type 4 has an invalid length. [ 1042.372829][T30535] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6230'. [ 1042.483161][T30546] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6231'. [ 1042.533159][T30546] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6231'. [ 1042.638999][T30529] syzkaller0 speed is unknown, defaulting to 1000 [ 1042.744155][T30529] virt_wifi0 speed is unknown, defaulting to 1000 [ 1042.776277][T30559] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6233'. [ 1042.840747][T30529] wg1 speed is unknown, defaulting to 1000 [ 1042.892554][T30555] syzkaller0 speed is unknown, defaulting to 1000 [ 1042.913092][T30555] virt_wifi0 speed is unknown, defaulting to 1000 [ 1042.936722][T30555] wg1 speed is unknown, defaulting to 1000 [ 1043.358403][T30570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1043.393511][T30585] netlink: 'syz.6.6242': attribute type 1 has an invalid length. [ 1043.472484][T30585] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1043.500133][T30589] sctp: [Deprecated]: syz.7.6241 (pid 30589) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1043.500133][T30589] Use struct sctp_sack_info instead [ 1043.591296][T30587] bond6: (slave geneve4): making interface the new active one [ 1043.634103][T30587] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 1043.645386][T23802] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.674233][T23802] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.761709][T23802] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.878436][T23802] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.270589][T25998] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.349934][T25998] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.403709][T25998] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.423948][T30661] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1045.439143][T25998] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.574449][T30671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1046.067999][T30702] __nla_validate_parse: 6 callbacks suppressed [ 1046.068023][T30702] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6274'. [ 1046.184104][T30695] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1046.533511][T30725] tipc: Enabling of bearer rejected, already enabled [ 1046.671323][T30732] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6280'. [ 1046.832031][T30741] bridge_slave_1: left allmulticast mode [ 1046.839904][T30741] bridge_slave_1: left promiscuous mode [ 1046.846645][T30741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.858610][T30741] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1046.983841][T30748] syzkaller0 speed is unknown, defaulting to 1000 [ 1046.994629][T30748] virt_wifi0 speed is unknown, defaulting to 1000 [ 1047.005635][T30748] wg1 speed is unknown, defaulting to 1000 [ 1047.019793][T30753] netlink: 'syz.7.6286': attribute type 3 has an invalid length. [ 1047.028862][T30753] netlink: 3 bytes leftover after parsing attributes in process `syz.7.6286'. [ 1047.498034][T30772] netem: incorrect gi model size [ 1047.503942][T30772] netem: change failed [ 1047.555810][T30774] syzkaller0 speed is unknown, defaulting to 1000 [ 1047.567526][T30774] virt_wifi0 speed is unknown, defaulting to 1000 [ 1047.583961][T30774] wg1 speed is unknown, defaulting to 1000 [ 1047.981518][T30783] syzkaller0 speed is unknown, defaulting to 1000 [ 1048.004821][T30783] virt_wifi0 speed is unknown, defaulting to 1000 [ 1048.061719][T30786] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6294'. [ 1048.086918][T30783] wg1 speed is unknown, defaulting to 1000 [ 1048.152274][T30786] netlink: 'syz.2.6294': attribute type 3 has an invalid length. [ 1048.549319][T30805] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6297'. [ 1049.580769][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1052.110966][T30799] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6298'. [ 1052.314734][T30828] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6301'. [ 1052.789863][T30839] tipc: Enabled bearer , priority 0 [ 1052.810420][T30839] syzkaller0: entered promiscuous mode [ 1052.863019][T30839] syzkaller0: entered allmulticast mode [ 1052.963675][T30839] tipc: Resetting bearer [ 1052.987457][T30837] tipc: Resetting bearer [ 1053.205361][T30837] tipc: Disabling bearer [ 1053.768651][T30863] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1053.786704][T30863] bridge0: port 1(bond9) entered blocking state [ 1053.823507][T30863] bridge0: port 1(bond9) entered disabled state [ 1053.831626][T30863] bond9: entered allmulticast mode [ 1053.841907][T30863] bond9: entered promiscuous mode [ 1053.881279][T30858] delete_channel: no stack [ 1053.921573][T30871] netlink: 'syz.6.6314': attribute type 29 has an invalid length. [ 1053.951404][T30871] netlink: 'syz.6.6314': attribute type 29 has an invalid length. [ 1054.008447][T30872] netlink: 'syz.6.6314': attribute type 29 has an invalid length. [ 1054.060108][T30871] netlink: 'syz.6.6314': attribute type 29 has an invalid length. [ 1054.083696][T30871] netlink: 504 bytes leftover after parsing attributes in process `syz.6.6314'. [ 1054.270852][T30882] wg1: entered promiscuous mode [ 1054.559070][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1054.573860][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1054.574274][T30900] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6322'. [ 1054.629809][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1054.641893][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1054.651776][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1054.725022][T30895] syzkaller0 speed is unknown, defaulting to 1000 [ 1054.734857][T30895] virt_wifi0 speed is unknown, defaulting to 1000 [ 1054.744604][T30895] wg1 speed is unknown, defaulting to 1000 [ 1054.838842][T30919] netlink: 64691 bytes leftover after parsing attributes in process `syz.6.6325'. [ 1055.087008][T30926] syzkaller0 speed is unknown, defaulting to 1000 [ 1055.100061][T30926] virt_wifi0 speed is unknown, defaulting to 1000 [ 1055.100128][T30924] netlink: 'syz.5.6326': attribute type 1 has an invalid length. [ 1055.110508][T30926] wg1 speed is unknown, defaulting to 1000 [ 1055.239652][T30935] netlink: 'syz.7.6329': attribute type 4 has an invalid length. [ 1055.272706][T30935] netlink: 17 bytes leftover after parsing attributes in process `syz.7.6329'. [ 1055.290416][T30938] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6330'. [ 1055.301340][T30938] netlink: 236 bytes leftover after parsing attributes in process `syz.3.6330'. [ 1055.311971][T30938] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6330'. [ 1055.324557][T30937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6330'. [ 1055.346385][T30895] chnl_net:caif_netlink_parms(): no params data found [ 1055.843543][T30958] syzkaller0 speed is unknown, defaulting to 1000 [ 1055.934560][T30895] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.955552][T30895] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.968740][T30895] bridge_slave_0: entered allmulticast mode [ 1055.977031][T30895] bridge_slave_0: entered promiscuous mode [ 1055.990395][T30958] virt_wifi0 speed is unknown, defaulting to 1000 [ 1055.991485][T30895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.006008][T30895] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.015579][T30895] bridge_slave_1: entered allmulticast mode [ 1056.024994][T30895] bridge_slave_1: entered promiscuous mode [ 1056.088453][T30958] wg1 speed is unknown, defaulting to 1000 [ 1056.101999][T30895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1056.154436][T30895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1056.314481][T30895] team0: Port device team_slave_0 added [ 1056.364902][T30895] team0: Port device team_slave_1 added [ 1056.583672][T30895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1056.593691][T30895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.623489][T30895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1056.638346][T31001] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1056.700143][ T5845] Bluetooth: hci5: command tx timeout [ 1056.779208][T30895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.786780][T30895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.824423][T30895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1057.050333][T30895] hsr_slave_0: entered promiscuous mode [ 1057.062572][T30895] hsr_slave_1: entered promiscuous mode [ 1057.070938][T30895] debugfs: 'hsr0' already exists in 'hsr' [ 1057.091740][T30895] Cannot create hsr debugfs directory [ 1057.411631][T31041] netlink: 'syz.3.6353': attribute type 49 has an invalid length. [ 1057.500628][T31043] syz_tun: entered allmulticast mode [ 1057.534384][T31043] dvmrp8: entered allmulticast mode [ 1057.583342][T30895] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1057.600660][T30895] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1057.624608][T31045] netlink: 'syz.6.6354': attribute type 23 has an invalid length. [ 1057.669905][T31043] syzkaller0 speed is unknown, defaulting to 1000 [ 1057.720161][T30895] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1057.731993][T31047] __nla_validate_parse: 4 callbacks suppressed [ 1057.732016][T31047] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6355'. [ 1057.733707][T30895] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1057.743889][T31047] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6355'. [ 1057.774769][T31043] virt_wifi0 speed is unknown, defaulting to 1000 [ 1057.786170][T31043] wg1 speed is unknown, defaulting to 1000 [ 1057.828495][T30895] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1057.841237][T30895] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1057.949212][T31049] tipc: Enabled bearer , priority 0 [ 1057.977012][T30895] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1057.993212][T30895] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1058.018177][T31049] syzkaller0: entered promiscuous mode [ 1058.024246][T31049] syzkaller0: entered allmulticast mode [ 1058.070940][T31049] netlink: 2 bytes leftover after parsing attributes in process `syz.7.6356'. [ 1058.105432][T31049] tipc: Resetting bearer [ 1058.123058][T31040] syz_tun: left allmulticast mode [ 1058.141086][T31040] dvmrp8: left allmulticast mode [ 1058.221821][T31048] tipc: Resetting bearer [ 1058.336350][T31048] tipc: Disabling bearer [ 1058.778361][ T5845] Bluetooth: hci5: command tx timeout [ 1059.026167][T30895] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1059.083447][T30895] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1059.111719][T30895] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1059.156124][T30895] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1059.216365][T31080] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6364'. [ 1059.571700][T30895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1059.595172][T31094] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6366'. [ 1059.667657][T30895] 8021q: adding VLAN 0 to HW filter on device team0 [ 1059.709314][T30908] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.717044][T30908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1059.754966][T30908] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.763575][T30908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1059.892846][T30895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1060.285940][T31131] netlink: 'syz.6.6376': attribute type 1 has an invalid length. [ 1060.365260][T31135] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6378'. [ 1060.365293][T31136] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6378'. [ 1060.401099][T30895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1060.449947][T31138] netlink: 120 bytes leftover after parsing attributes in process `syz.7.6377'. [ 1060.604998][T30895] veth0_vlan: entered promiscuous mode [ 1060.683549][T30895] veth1_vlan: entered promiscuous mode [ 1060.791729][T30895] veth0_macvtap: entered promiscuous mode [ 1060.823284][T30895] veth1_macvtap: entered promiscuous mode [ 1060.861451][ T5845] Bluetooth: hci5: command tx timeout [ 1060.877716][T30895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1060.891045][T31145] netlink: 'syz.7.6380': attribute type 1 has an invalid length. [ 1060.909368][T30895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1060.984508][T31145] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1061.009761][T31147] bond7: (slave wlan0): Opening slave failed [ 1061.083125][T31145] vlan3: entered allmulticast mode [ 1061.113765][T31150] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6381'. [ 1061.128801][T31145] veth1: entered allmulticast mode [ 1061.182189][T31145] bond7: (slave vlan3): Opening slave failed [ 1061.202523][ T7456] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.238961][ T7456] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.305052][ T7456] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.337043][ T7456] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.357969][T31153] 8021q: VLANs not supported on ip_vti0 [ 1061.623906][T30910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.654249][T30910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.768937][T30913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.784191][T30913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.212875][T31188] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6393'. [ 1062.890545][T31219] tipc: Enabling of bearer rejected, already enabled [ 1062.903955][T31219] mac80211_hwsim hwsim51 syzkaller0: entered promiscuous mode [ 1062.938918][ T5845] Bluetooth: hci5: command tx timeout [ 1062.945733][T31219] mac80211_hwsim hwsim51 syzkaller0: entered allmulticast mode [ 1062.988425][T31219] tipc: Resetting bearer [ 1063.331305][T31243] __nla_validate_parse: 1 callbacks suppressed [ 1063.331327][T31243] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6421'. [ 1063.826082][T31269] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6434'. [ 1063.911711][T31269] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1064.298537][ T56] block nbd1: Possible stuck request ffff8880250a7000: control (read@0,1024B). Runtime 930 seconds [ 1064.311263][ T56] block nbd1: Possible stuck request ffff8880250a71c0: control (read@1024,1024B). Runtime 930 seconds [ 1064.325023][ T56] block nbd1: Possible stuck request ffff8880250a7380: control (read@2048,1024B). Runtime 930 seconds [ 1064.354780][ T56] block nbd1: Possible stuck request ffff8880250a7540: control (read@3072,1024B). Runtime 930 seconds [ 1064.552565][T31309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6452'. [ 1064.730502][T31318] netlink: 'syz.7.6455': attribute type 9 has an invalid length. [ 1064.745778][T31319] netlink: 772 bytes leftover after parsing attributes in process `syz.5.6456'. [ 1065.505942][T31349] sctp: [Deprecated]: syz.2.6467 (pid 31349) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1065.505942][T31349] Use struct sctp_sack_info instead [ 1066.052432][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1066.067759][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1066.083299][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1066.096212][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1066.113768][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1066.464248][T31364] syzkaller0 speed is unknown, defaulting to 1000 [ 1066.776378][T31364] virt_wifi0 speed is unknown, defaulting to 1000 [ 1066.788659][T31364] wg1 speed is unknown, defaulting to 1000 [ 1066.988583][T31393] netlink: 'syz.6.6480': attribute type 10 has an invalid length. [ 1066.998810][T31393] syz_tun: entered promiscuous mode [ 1067.012826][T31393] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1067.022389][T31397] netlink: 'syz.5.6481': attribute type 39 has an invalid length. [ 1067.119067][T31398] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1067.402805][ T1150] bond9: left allmulticast mode [ 1067.408080][ T1150] bond9: left promiscuous mode [ 1067.413710][ T1150] bridge0: port 1(bond9) entered disabled state [ 1067.574207][T31410] netlink: 188 bytes leftover after parsing attributes in process `syz.6.6487'. [ 1067.652766][T31412] netlink: 'syz.6.6488': attribute type 1 has an invalid length. [ 1067.664850][T31412] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6488'. [ 1068.219383][ T5845] Bluetooth: hci1: command tx timeout [ 1069.253755][ T1150] bond0 (unregistering): Released all slaves [ 1069.520884][ T1150] bond1 (unregistering): Released all slaves [ 1069.794386][ T1150] bond2 (unregistering): Released all slaves [ 1069.819599][ T1150] bond3 (unregistering): Released all slaves [ 1069.841508][ T1150] bond4 (unregistering): Released all slaves [ 1069.954564][T31444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6501'. [ 1070.074613][ T1150] bond5 (unregistering): Released all slaves [ 1070.278220][ T1150] bond6 (unregistering): Released all slaves [ 1070.298722][ T5845] Bluetooth: hci1: command tx timeout [ 1070.483814][ T1150] bond7 (unregistering): Released all slaves [ 1070.502008][ T1150] bond8 (unregistering): Released all slaves [ 1070.712440][ T1150] bond9 (unregistering): Released all slaves [ 1070.806133][T31444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1070.962717][T31444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1071.104177][T31364] chnl_net:caif_netlink_parms(): no params data found [ 1071.132098][T31446] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1071.171743][ T1150] tipc: Disabling bearer [ 1071.183729][ T1150] tipc: Left network mode [ 1071.218626][ T1150] IPVS: stopping backup sync thread 28792 ... [ 1071.231592][T31455] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6504'. [ 1071.445857][T31465] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1071.536980][T31455] team0 (unregistering): Port device team_slave_0 removed [ 1071.550773][T31455] team0 (unregistering): Port device team_slave_1 removed [ 1072.222660][T31364] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.240222][T31480] netlink: 'syz.2.6508': attribute type 13 has an invalid length. [ 1072.250116][T31364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.252063][T31481] netlink: 'syz.2.6508': attribute type 13 has an invalid length. [ 1072.271658][T31364] bridge_slave_0: entered allmulticast mode [ 1072.289601][T31480] netlink: 'syz.2.6508': attribute type 17 has an invalid length. [ 1072.302259][T31364] bridge_slave_0: entered promiscuous mode [ 1072.344958][T31481] netlink: 'syz.2.6508': attribute type 17 has an invalid length. [ 1072.368447][T31364] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.377748][ T5845] Bluetooth: hci1: command tx timeout [ 1072.386055][T31364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.403728][T31364] bridge_slave_1: entered allmulticast mode [ 1072.418411][T31364] bridge_slave_1: entered promiscuous mode [ 1072.661546][T31480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1072.716164][T31481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1072.904291][T31493] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6510'. [ 1072.915657][T31493] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6510'. [ 1073.036014][T31364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1073.057426][T31364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1073.098105][T31504] netlink: 'syz.5.6514': attribute type 13 has an invalid length. [ 1073.109729][T31504] netlink: 'syz.5.6514': attribute type 17 has an invalid length. [ 1073.242607][T31504] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1073.328342][T31364] team0: Port device team_slave_0 added [ 1073.340306][T31364] team0: Port device team_slave_1 added [ 1073.464935][ T1150] team0: left allmulticast mode [ 1073.473799][ T1150] team0: left promiscuous mode [ 1073.566784][ T1150] pim6reg (unregistering): left allmulticast mode [ 1073.932921][T31523] IPVS: set_ctl: invalid protocol: 185 255.255.255.255:20003 [ 1074.457394][ T5845] Bluetooth: hci1: command tx timeout [ 1074.893711][T31364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1074.903166][T31364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1074.935364][T31364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1075.006798][T31364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1075.031601][T31364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.086346][T31364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1075.143888][T31526] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6520'. [ 1075.171980][T31530] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6521'. [ 1075.384611][T31364] hsr_slave_0: entered promiscuous mode [ 1075.410622][T31364] hsr_slave_1: entered promiscuous mode [ 1075.428810][T31364] debugfs: 'hsr0' already exists in 'hsr' [ 1075.434950][T31364] Cannot create hsr debugfs directory [ 1075.538900][T31540] netlink: 280 bytes leftover after parsing attributes in process `syz.7.6523'. [ 1075.583364][T31540] netlink: 64 bytes leftover after parsing attributes in process `syz.7.6523'. [ 1076.165968][T31559] syzkaller0 speed is unknown, defaulting to 1000 [ 1076.276590][T31559] virt_wifi0 speed is unknown, defaulting to 1000 [ 1076.301130][T31559] wg1 speed is unknown, defaulting to 1000 [ 1076.581496][T31577] bridge4: entered promiscuous mode [ 1076.994924][T31592] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6537'. [ 1077.217762][T31364] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1077.270635][T31599] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6538'. [ 1077.281339][T31364] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1077.388777][T31364] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1077.442801][T31364] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1077.731283][T31623] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6545'. [ 1077.832957][T31637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6546'. [ 1077.834665][T31630] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1077.860326][T31630] bond1 (unregistering): Released all slaves [ 1077.890559][T31637] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6546'. [ 1077.982861][T31625] syzkaller0 speed is unknown, defaulting to 1000 [ 1078.081792][T31625] virt_wifi0 speed is unknown, defaulting to 1000 [ 1078.132839][T31625] wg1 speed is unknown, defaulting to 1000 [ 1078.146428][T31643] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6548'. [ 1078.310736][T31364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1078.443902][T31364] 8021q: adding VLAN 0 to HW filter on device team0 [ 1078.481695][T30913] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.489188][T30913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1078.519905][T31657] syzkaller0: entered promiscuous mode [ 1078.526719][T31657] syzkaller0: entered allmulticast mode [ 1078.549805][T30913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.557443][T30913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1078.600887][T31657] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1079.481188][T31675] bond2: entered promiscuous mode [ 1079.489819][T31675] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1079.573147][T31684] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1079.584549][T31684] bond3: entered promiscuous mode [ 1079.596757][T31684] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1079.635985][T31364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1079.715594][T31690] macsec0: entered promiscuous mode [ 1079.727777][T31690] macsec0: entered allmulticast mode [ 1079.735627][T31690] veth1_macvtap: entered allmulticast mode [ 1079.757543][T31690] macsec0: left promiscuous mode [ 1079.763498][T31690] macsec0: left allmulticast mode [ 1079.797567][T31690] veth1_macvtap: left allmulticast mode [ 1079.879753][T31683] syzkaller0 speed is unknown, defaulting to 1000 [ 1079.912879][T31683] virt_wifi0 speed is unknown, defaulting to 1000 [ 1079.923305][T31683] wg1 speed is unknown, defaulting to 1000 [ 1080.181094][T31702] netlink: 'syz.5.6565': attribute type 21 has an invalid length. [ 1080.245310][T31706] dvmrp8: entered allmulticast mode [ 1080.299936][T31708] __nla_validate_parse: 5 callbacks suppressed [ 1080.299957][T31708] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6566'. [ 1080.332676][T31364] veth0_vlan: entered promiscuous mode [ 1080.379417][T31708] vlan1: entered promiscuous mode [ 1080.385971][T31708] dummy0: entered promiscuous mode [ 1080.483499][T31364] veth1_vlan: entered promiscuous mode [ 1080.517897][T31707] syzkaller0 speed is unknown, defaulting to 1000 [ 1080.646118][T31707] virt_wifi0 speed is unknown, defaulting to 1000 [ 1080.669425][T31707] wg1 speed is unknown, defaulting to 1000 [ 1080.730176][T31364] veth0_macvtap: entered promiscuous mode [ 1080.792181][T31364] veth1_macvtap: entered promiscuous mode [ 1080.883275][T31713] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.006431][T31713] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.100232][T31364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1081.133651][T31364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1081.197933][T31713] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.233685][T31716] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6568'. [ 1081.245177][T31716] nbd: must specify at least one socket [ 1081.278931][ T7052] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.281709][T31718] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1081.300174][ T7052] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.367863][ T7052] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.432760][T31713] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.467223][ T7052] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.489338][T31723] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6569'. [ 1081.509460][T31723] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6569'. [ 1081.580582][T31723] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6569'. [ 1081.607531][T31723] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6569'. [ 1081.702828][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.725534][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.909965][T30913] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.934026][T31732] netlink: 'syz.6.6572': attribute type 1 has an invalid length. [ 1082.134059][T31735] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6572'. [ 1082.212569][T31732] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1082.236938][T31733] vlan1: entered promiscuous mode [ 1082.243799][T31733] bond8: entered promiscuous mode [ 1082.250905][T31733] vlan1: entered allmulticast mode [ 1082.258263][T31733] bond8: entered allmulticast mode [ 1082.268427][T30913] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.305278][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.340200][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.403982][T31735] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 1082.435699][T31735] bond9 (unregistering): Released all slaves [ 1082.478711][T30913] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.506196][T30913] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.642502][T31740] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6573'. [ 1082.808850][T31749] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6575'. [ 1082.849004][T31749] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6575'. [ 1082.974284][T31751] bridge_slave_0: left allmulticast mode [ 1083.004406][T31751] bridge_slave_0: left promiscuous mode [ 1083.006893][T31754] netlink: 'syz.3.6576': attribute type 10 has an invalid length. [ 1083.029280][T31751] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.058601][T31751] bridge_slave_1: left allmulticast mode [ 1083.076381][T31751] bridge_slave_1: left promiscuous mode [ 1083.087101][T31751] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.129507][T31751] bond0: (slave bond_slave_0): Releasing backup interface [ 1083.165242][T31751] bond0: (slave bond_slave_1): Releasing backup interface [ 1083.214014][T31751] team0: Port device team_slave_0 removed [ 1083.261877][T31751] team0: Port device team_slave_1 removed [ 1083.296910][T31751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1083.326150][T31751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1083.361484][T31751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1083.393469][T31751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1083.409812][T31751] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1083.482545][T31754] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1083.852090][T31783] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1084.091138][T31799] !: renamed from dummy0 [ 1084.415207][T31812] tipc: Started in network mode [ 1084.432647][T31812] tipc: Node identity 0e5fe75984da, cluster identity 4711 [ 1084.468108][T31812] tipc: Enabled bearer , priority 0 [ 1084.479683][T31806] syzkaller0 speed is unknown, defaulting to 1000 [ 1084.493015][T31806] virt_wifi0 speed is unknown, defaulting to 1000 [ 1084.513727][T31806] wg1 speed is unknown, defaulting to 1000 [ 1084.797048][ T7456] tipc: Resetting bearer [ 1084.916082][T31822] ip6gre0: left allmulticast mode [ 1085.213807][T31831] netlink: 'syz.6.6594': attribute type 10 has an invalid length. [ 1085.292249][T31807] tipc: Resetting bearer [ 1085.519350][T31838] netlink: 'syz.7.6597': attribute type 10 has an invalid length. [ 1085.519357][T31839] netlink: 'syz.7.6597': attribute type 10 has an invalid length. [ 1085.577351][T17520] tipc: Node number set to 2324031321 [ 1088.826505][T31802] Set syz1 is full, maxelem 65536 reached [ 1089.926783][T31807] tipc: Disabling bearer [ 1089.939990][T31828] bond0: (slave syz_tun): Releasing backup interface [ 1089.951317][T31828] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1090.379875][T31870] __nla_validate_parse: 3 callbacks suppressed [ 1090.379902][T31870] netlink: 172 bytes leftover after parsing attributes in process `syz.3.6607'. [ 1090.437820][T31870] netlink: 172 bytes leftover after parsing attributes in process `syz.3.6607'. [ 1090.636992][T31880] tc_dump_action: action bad kind [ 1090.808772][T31891] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6613'. [ 1090.831447][T31885] bond4: (slave bond_slave_1): Device is not our slave [ 1090.839118][T31885] bond4: option active_slave: invalid value (bond_slave_1) [ 1090.852851][T31885] bond4 (unregistering): Released all slaves [ 1091.091199][T31903] tipc: Enabled bearer , priority 0 [ 1091.130167][T31903] syzkaller0: entered promiscuous mode [ 1091.148220][T31903] syzkaller0: entered allmulticast mode [ 1091.236360][T31903] tipc: Resetting bearer [ 1091.278500][T31900] tipc: Resetting bearer [ 1091.328555][T31900] tipc: Disabling bearer [ 1091.434936][T31919] syzkaller0 speed is unknown, defaulting to 1000 [ 1091.488877][T31921] netlink: 'syz.2.6620': attribute type 16 has an invalid length. [ 1091.490408][T31919] virt_wifi0 speed is unknown, defaulting to 1000 [ 1091.515356][T31921] netlink: 'syz.2.6620': attribute type 17 has an invalid length. [ 1091.589935][T31919] wg1 speed is unknown, defaulting to 1000 [ 1091.674933][T31928] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6623'. [ 1091.710913][T31921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1091.825391][T31933] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6623'. [ 1091.866711][T31932] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6623'. [ 1091.895592][T31932] bridge0: port 4(batadv0) entered disabled state [ 1091.929360][T31932] batadv_slave_1: left allmulticast mode [ 1091.939802][T31932] bridge0: port 3(batadv_slave_1) entered disabled state [ 1091.949120][T31936] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1091.975548][T31932] bridge_slave_0: left promiscuous mode [ 1091.985133][T31932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.994483][T31939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6626'. [ 1092.613126][T31962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6631'. [ 1092.657899][T31962] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6631'. [ 1092.720571][T31962] vxcan3: entered allmulticast mode [ 1093.064337][T31987] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6636'. [ 1093.381019][T31992] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1093.722179][T32012] netlink: 'syz.2.6640': attribute type 1 has an invalid length. [ 1093.842082][T32014] netlink: 'syz.2.6640': attribute type 1 has an invalid length. [ 1093.843408][T31978] delete_channel: no stack [ 1094.343943][T31992] bond8 (unregistering): Released all slaves [ 1094.368538][T31987] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1094.383188][ T56] block nbd1: Possible stuck request ffff8880250a7000: control (read@0,1024B). Runtime 960 seconds [ 1094.405079][ T56] block nbd1: Possible stuck request ffff8880250a71c0: control (read@1024,1024B). Runtime 960 seconds [ 1094.419972][ T56] block nbd1: Possible stuck request ffff8880250a7380: control (read@2048,1024B). Runtime 960 seconds [ 1094.436704][ T56] block nbd1: Possible stuck request ffff8880250a7540: control (read@3072,1024B). Runtime 960 seconds [ 1094.480737][T32012] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1094.500858][T32013] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1094.514257][T32013] bond4: (slave batadv1): making interface the new active one [ 1094.528616][T32013] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 1094.654739][T32024] netlink: 'syz.3.6644': attribute type 7 has an invalid length. [ 1094.665039][T32024] netlink: 'syz.3.6644': attribute type 8 has an invalid length. [ 1095.041252][T32014] bond4 (unregistering): (slave batadv1): Releasing active interface [ 1095.056493][T32014] bond4 (unregistering): Released all slaves [ 1095.282469][T32031] tipc: Enabled bearer , priority 0 [ 1095.334522][T32032] syzkaller0: entered promiscuous mode [ 1095.347198][T32032] syzkaller0: entered allmulticast mode [ 1095.574434][T32041] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 1095.612726][T32041] bond1 (unregistering): Released all slaves [ 1095.790448][T32032] tipc: Resetting bearer [ 1095.920630][T32058] __nla_validate_parse: 7 callbacks suppressed [ 1095.920655][T32058] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6648'. [ 1095.940914][T32032] tipc: Disabling bearer [ 1095.966257][T32060] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6649'. [ 1095.984381][T32061] netlink: 'syz.7.6648': attribute type 10 has an invalid length. [ 1096.210595][T32074] netlink: 'syz.2.6652': attribute type 1 has an invalid length. [ 1096.324713][T32077] bond4: (slave gretap1): making interface the new active one [ 1096.338420][T32077] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1096.375480][T32075] mac80211_hwsim hwsim94 wlan0: entered promiscuous mode [ 1096.394620][T32075] macvtap1: entered allmulticast mode [ 1096.401383][T32075] mac80211_hwsim hwsim94 wlan0: entered allmulticast mode [ 1096.425148][T32075] mac80211_hwsim hwsim94 wlan0: left allmulticast mode [ 1096.442762][T32075] mac80211_hwsim hwsim94 wlan0: left promiscuous mode [ 1096.518469][T32063] syzkaller0 speed is unknown, defaulting to 1000 [ 1096.527982][T32063] virt_wifi0 speed is unknown, defaulting to 1000 [ 1096.563295][T32063] wg1 speed is unknown, defaulting to 1000 [ 1096.593344][T32081] syzkaller0 speed is unknown, defaulting to 1000 [ 1096.644820][T32081] virt_wifi0 speed is unknown, defaulting to 1000 [ 1096.681305][T32085] netlink: 'syz.2.6655': attribute type 1 has an invalid length. [ 1096.693606][T32085] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6655'. [ 1096.706307][T32085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6655'. [ 1096.707723][T32081] wg1 speed is unknown, defaulting to 1000 [ 1096.751452][T32087] netlink: 'syz.6.6656': attribute type 2 has an invalid length. [ 1096.799101][T32085] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6655'. [ 1097.316406][T32114] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6661'. [ 1097.451816][T32119] netlink: 'syz.2.6664': attribute type 13 has an invalid length. [ 1097.564034][T32123] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6666'. [ 1098.002351][T32132] syzkaller1: entered promiscuous mode [ 1098.027273][T32132] syzkaller1: entered allmulticast mode [ 1098.057054][T32141] tipc: Enabled bearer , priority 0 [ 1098.120353][T32147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6672'. [ 1098.132149][T32141] syzkaller0: entered promiscuous mode [ 1098.138704][T32141] syzkaller0: entered allmulticast mode [ 1098.285987][T32155] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6673'. [ 1098.324629][T32157] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6669'. [ 1098.401720][T32141] tipc: Resetting bearer [ 1098.492233][T32141] tipc: Disabling bearer [ 1098.525886][T32165] ip6tnl0: Caught tx_queue_len zero misconfig [ 1098.586142][T32164] xfrm2: entered promiscuous mode [ 1098.594491][T32164] xfrm2: entered allmulticast mode [ 1098.769328][T32172] veth7: entered promiscuous mode [ 1098.915856][T32177] lo: Caught tx_queue_len zero misconfig [ 1098.990723][T32180] syzkaller0 speed is unknown, defaulting to 1000 [ 1099.002780][T32180] virt_wifi0 speed is unknown, defaulting to 1000 [ 1099.033674][T32180] wg1 speed is unknown, defaulting to 1000 [ 1099.270234][ T30] audit: type=1800 audit(1759658660.744:22): pid=32197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6685" name="memory.events" dev="tmpfs" ino=2126 res=0 errno=0 [ 1100.379274][T32272] netlink: 'syz.2.6707': attribute type 13 has an invalid length. [ 1100.420675][T32271] netlink: 'syz.2.6707': attribute type 13 has an invalid length. [ 1100.468140][T32272] netlink: 'syz.2.6707': attribute type 17 has an invalid length. [ 1100.470434][T32271] netlink: 'syz.2.6707': attribute type 17 has an invalid length. [ 1100.737933][T32272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1100.885406][T32271] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1101.331643][T19220] IPVS: starting estimator thread 0... [ 1101.447998][T32319] IPVS: using max 24 ests per chain, 57600 per kthread [ 1101.509611][T32325] __nla_validate_parse: 6 callbacks suppressed [ 1101.509634][T32325] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6720'. [ 1101.563644][T32330] sctp: [Deprecated]: syz.6.6721 (pid 32330) Use of int in maxseg socket option. [ 1101.563644][T32330] Use struct sctp_assoc_value instead [ 1101.748118][T32337] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6724'. [ 1101.778030][T32337] netlink: 'syz.6.6724': attribute type 74 has an invalid length. [ 1101.853876][T32341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6722'. [ 1101.865045][T32341] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6722'. [ 1101.876591][T32341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6722'. [ 1101.979511][T32350] nbd: nbd2 already in use [ 1102.005154][T32350] block nbd2: NBD_DISCONNECT [ 1102.013631][T32350] block nbd2: Send disconnect failed -32 [ 1102.041821][T32350] block nbd2: shutting down sockets [ 1102.185156][T32351] bond5: entered promiscuous mode [ 1102.197694][T32351] bond5: entered allmulticast mode [ 1102.209952][T32351] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1102.279617][T25996] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1102.390507][T25996] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1102.489500][T25996] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1102.576107][T25996] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1102.604274][T32368] netlink: 'syz.7.6731': attribute type 11 has an invalid length. [ 1102.849987][T32379] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6736'. [ 1102.878136][T32376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6733'. [ 1102.902003][T32376] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6733'. [ 1102.929968][T32386] netlink: 'syz.5.6734': attribute type 5 has an invalid length. [ 1103.305926][T32398] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6739'. [ 1103.694943][T25996] bond2 (unregistering): (slave erspan0): Releasing active interface [ 1104.228017][T25996] bond0 (unregistering): Released all slaves [ 1104.243906][T25996] bond1 (unregistering): Released all slaves [ 1104.401744][T25996] bond2 (unregistering): Released all slaves [ 1104.552766][T25996] bond3 (unregistering): Released all slaves [ 1104.709525][T25996] bond4 (unregistering): Released all slaves [ 1104.826788][T19220] wg1 speed is unknown, defaulting to 1000 [ 1104.860084][T19220] syz0: Port: 1 Link DOWN [ 1104.918856][T25996] : left promiscuous mode [ 1104.997865][T32423] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6745'. [ 1105.078163][T25996] tipc: Disabling bearer [ 1105.153864][T25996] tipc: Left network mode [ 1105.204712][T25996] IPVS: stopping master sync thread 19117 ... [ 1105.220140][T32429] netlink: 'syz.7.6746': attribute type 30 has an invalid length. [ 1105.880649][T32465] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1106.106178][T25996] hsr_slave_0: left promiscuous mode [ 1106.116540][T25996] hsr_slave_1: left promiscuous mode [ 1106.191383][T32490] netlink: 'syz.5.6761': attribute type 10 has an invalid length. [ 1106.231893][T25996] pimreg3 (unregistering): left allmulticast mode [ 1107.337226][T32490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.350129][T32490] bond0: (slave wlan1): Opening slave failed [ 1107.892326][T32514] bond9: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 1107.904967][T32519] __nla_validate_parse: 4 callbacks suppressed [ 1107.904991][T32519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6769'. [ 1107.966613][T32514] bond9 (unregistering): Released all slaves [ 1108.115677][T25996] IPVS: stop unused estimator thread 0... [ 1108.161958][T32528] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6772'. [ 1108.424569][T32546] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6777'. [ 1108.450903][T32544] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6777'. [ 1108.560580][T32555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6781'. [ 1108.593358][T32556] pim6reg: entered allmulticast mode [ 1108.609819][T32556] pim6reg: left allmulticast mode [ 1108.882269][T32572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6784'. [ 1109.105178][T32579] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6786'. [ 1109.149312][T32576] netlink: 'syz.6.6785': attribute type 83 has an invalid length. [ 1109.174631][T32581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6787'. [ 1109.229882][T32581] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1109.248202][T32587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6787'. [ 1109.322796][T32587] macsec0: entered promiscuous mode [ 1109.352166][T32587] bond6: entered promiscuous mode [ 1109.362174][T32587] macsec0: entered allmulticast mode [ 1109.371119][T32587] bond6: entered allmulticast mode [ 1109.402043][T32587] bond6: left allmulticast mode [ 1109.409074][T32587] bond6: left promiscuous mode [ 1109.439440][T32589] tipc: New replicast peer: 255.255.255.255 [ 1109.446766][T32589] tipc: Enabled bearer , priority 10 [ 1109.462592][T32595] netlink: 136 bytes leftover after parsing attributes in process `syz.7.6791'. [ 1109.464556][T32593] netlink: 'syz.3.6790': attribute type 1 has an invalid length. [ 1109.636019][T32597] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1109.685441][T32597] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1109.734528][T32593] vlan2: entered allmulticast mode [ 1109.743095][T32593] bridge0: entered allmulticast mode [ 1109.758221][T32593] bridge0: entered promiscuous mode [ 1109.765470][T32593] bridge0: left promiscuous mode [ 1109.783149][T32593] bond1: (slave vlan2): Enslaving as an active interface with a down link [ 1110.186824][T32624] netlink: 'syz.3.6796': attribute type 1 has an invalid length. [ 1110.274368][T32626] veth3: entered promiscuous mode [ 1110.436375][T32624] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1110.479752][T32624] netlink: 'syz.3.6796': attribute type 1 has an invalid length. [ 1110.554282][T32624] netlink: 'syz.3.6796': attribute type 1 has an invalid length. [ 1110.604820][T32624] netlink: 'syz.3.6796': attribute type 1 has an invalid length. [ 1110.643814][T32624] netlink: 'syz.3.6796': attribute type 1 has an invalid length. [ 1110.662433][T32624] netlink: 'syz.3.6796': attribute type 1 has an invalid length. [ 1110.719194][T32624] netlink: 'syz.3.6796': attribute type 1 has an invalid length. [ 1110.735639][T32639] pim6reg1: entered promiscuous mode [ 1110.760044][T32639] pim6reg1: entered allmulticast mode [ 1110.770408][T32624] netlink: 'syz.3.6796': attribute type 1 has an invalid length. [ 1110.954578][T32653] syzkaller1: entered promiscuous mode [ 1110.982800][T32653] syzkaller1: entered allmulticast mode [ 1111.320480][T32676] bond0: entered promiscuous mode [ 1111.344510][T32676] bond0: left promiscuous mode [ 1111.409575][T32685] bond0: entered promiscuous mode [ 1111.477752][T32685] bond0: left promiscuous mode [ 1111.531769][T32687] erspan0: entered promiscuous mode [ 1111.541709][T32687] erspan0: left promiscuous mode [ 1111.738398][T32704] syzkaller0 speed is unknown, defaulting to 1000 [ 1111.933489][T32710] syzkaller0 speed is unknown, defaulting to 1000 [ 1112.029395][T32709] syzkaller0 speed is unknown, defaulting to 1000 [ 1112.134808][T32726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1112.526632][T32735] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1112.868744][T32763] syzkaller0 speed is unknown, defaulting to 1000 [ 1113.509050][ T317] __nla_validate_parse: 7 callbacks suppressed [ 1113.509075][ T317] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6832'. [ 1113.541177][ T321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6831'. [ 1113.612695][ T327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6831'. [ 1114.064200][ T339] netlink: 15586 bytes leftover after parsing attributes in process `syz.6.6837'. [ 1114.080085][ T343] vxcan1: tx address claim with different name [ 1114.436275][ T353] validate_nla: 31 callbacks suppressed [ 1114.436299][ T353] netlink: 'syz.2.6839': attribute type 1 has an invalid length. [ 1114.462355][ T353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6839'. [ 1114.479339][ T358] tipc: Enabled bearer , priority 0 [ 1114.591156][ T355] syzkaller0: entered promiscuous mode [ 1114.596882][ T355] syzkaller0: entered allmulticast mode [ 1114.734362][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.742159][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.771310][ T366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6840'. [ 1114.913533][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1115.086253][ T361] bond2: left promiscuous mode [ 1115.094281][ T361] bond3: left promiscuous mode [ 1115.118983][ T361] xfrm2: left promiscuous mode [ 1115.124841][ T361] xfrm2: left allmulticast mode [ 1115.138492][ T361] bond5: left promiscuous mode [ 1115.144220][ T361] bond5: left allmulticast mode [ 1115.159979][ T355] tipc: Resetting bearer [ 1115.201192][ T355] tipc: Disabling bearer [ 1115.230451][ T366] geneve2: entered promiscuous mode [ 1115.236066][ T366] geneve2: entered allmulticast mode [ 1115.332869][ T368] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1115.646068][ T403] netlink: zone id is out of range [ 1115.656419][ T403] netlink: zone id is out of range [ 1115.672741][ T403] netlink: zone id is out of range [ 1115.690640][ T403] netlink: zone id is out of range [ 1115.702286][ T403] netlink: zone id is out of range [ 1115.831817][ T411] netlink: 88 bytes leftover after parsing attributes in process `syz.6.6852'. [ 1116.080863][ T422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6857'. [ 1116.115698][ T422] netlink: 'syz.3.6857': attribute type 15 has an invalid length. [ 1116.150299][ T7456] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1116.150521][ T422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6857'. [ 1116.168620][ T7456] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1116.179370][ T422] netlink: 'syz.3.6857': attribute type 15 has an invalid length. [ 1116.189709][ T7456] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1116.230112][ T7456] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1116.277793][ T428] netlink: 'syz.6.6859': attribute type 3 has an invalid length. [ 1116.286105][ T428] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6859'. [ 1116.692172][ T447] netlink: 'syz.7.6862': attribute type 1 has an invalid length. [ 1116.873972][ T448] tipc: Resetting bearer [ 1117.033970][ T448] vlan0: left promiscuous mode [ 1117.074976][ T448] vxcan3: left allmulticast mode [ 1117.139195][ T451] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1117.152377][ T451] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 1117.270437][T25996] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.348270][T25996] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.378270][T25996] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.386901][T25996] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.472632][ T480] netlink: 'syz.3.6871': attribute type 7 has an invalid length. [ 1117.481674][ T480] netlink: 'syz.3.6871': attribute type 8 has an invalid length. [ 1117.499658][ T484] netlink: 'syz.7.6873': attribute type 4 has an invalid length. [ 1117.512413][ T477] syzkaller0 speed is unknown, defaulting to 1000 [ 1117.525609][ T491] netlink: 'syz.2.6869': attribute type 1 has an invalid length. [ 1117.563567][ T484] netlink: 'syz.7.6873': attribute type 4 has an invalid length. [ 1118.630075][ T531] __nla_validate_parse: 10 callbacks suppressed [ 1118.630097][ T531] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6883'. [ 1118.756648][ T533] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1119.381893][ T548] gre1: entered promiscuous mode [ 1119.398763][ T548] gre1: entered allmulticast mode [ 1119.505869][ T555] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 1119.582918][ T559] netlink: 'syz.7.6892': attribute type 21 has an invalid length. [ 1119.634238][ T559] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6892'. [ 1119.690175][ T568] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1119.840081][ T577] tipc: Enabled bearer , priority 0 [ 1119.851256][ T577] syzkaller0: entered promiscuous mode [ 1119.856979][ T577] syzkaller0: entered allmulticast mode [ 1119.881699][ T581] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6898'. [ 1119.896766][ T577] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1119.922285][ T582] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6898'. [ 1119.982635][ T573] tipc: Resetting bearer [ 1120.031881][ T573] tipc: Disabling bearer [ 1120.042426][ T588] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6900'. [ 1120.160928][ T591] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1120.216607][ T593] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6902'. [ 1120.220453][ T591] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6901'. [ 1120.291420][ T599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6904'. [ 1120.428295][ T598] nbd5: detected capacity change from 0 to 64 [ 1120.459244][ T5845] block nbd5: Receive control failed (result -32) [ 1120.582725][ T613] netlink: 596 bytes leftover after parsing attributes in process `syz.6.6907'. [ 1120.598892][ T614] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 1120.615785][ T591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1120.630453][ T591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1120.641485][ T591] bond0 (unregistering): Released all slaves [ 1120.674369][ T599] syz_tun: entered allmulticast mode [ 1120.890570][ T625] netlink: 'syz.7.6910': attribute type 4 has an invalid length. [ 1120.958534][ T622] vlan2: entered promiscuous mode [ 1120.984464][ T622] geneve1: entered promiscuous mode [ 1121.001605][ T622] vlan2: entered allmulticast mode [ 1121.006899][ T622] geneve1: entered allmulticast mode [ 1121.029008][ T635] netlink: 'syz.2.6911': attribute type 12 has an invalid length. [ 1121.047473][ T635] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.6911'. [ 1121.106064][ T621] syzkaller0 speed is unknown, defaulting to 1000 [ 1121.323280][ T644] netlink: 'syz.2.6911': attribute type 29 has an invalid length. [ 1121.505214][ T628] syzkaller0 speed is unknown, defaulting to 1000 [ 1121.961810][ T672] syzkaller0 speed is unknown, defaulting to 1000 [ 1122.014741][ T673] netlink: 'syz.7.6923': attribute type 12 has an invalid length. [ 1122.057288][ T673] syzkaller1: entered promiscuous mode [ 1122.067000][ T673] syzkaller1: entered allmulticast mode [ 1122.218923][ T677] syzkaller0 speed is unknown, defaulting to 1000 [ 1122.299556][ T684] syzkaller0 speed is unknown, defaulting to 1000 [ 1122.359052][ T672] tipc: Enabling of bearer rejected, failed to enable media [ 1122.533100][ T698] vlan2: entered promiscuous mode [ 1122.539523][ T698] bridge0: entered promiscuous mode [ 1122.979598][ T728] netlink: 'syz.2.6936': attribute type 1 has an invalid length. [ 1122.988536][ T728] netlink: 'syz.2.6936': attribute type 2 has an invalid length. [ 1122.996675][ T728] netlink: 'syz.2.6936': attribute type 1 has an invalid length. [ 1123.488396][ T723] bond1: (slave vlan2): Releasing active interface [ 1123.783972][ T752] netlink: 'syz.2.6943': attribute type 4 has an invalid length. [ 1124.458057][ T56] block nbd1: Possible stuck request ffff8880250a7000: control (read@0,1024B). Runtime 990 seconds [ 1124.469772][ T56] block nbd1: Possible stuck request ffff8880250a71c0: control (read@1024,1024B). Runtime 990 seconds [ 1124.482165][ T56] block nbd1: Possible stuck request ffff8880250a7380: control (read@2048,1024B). Runtime 990 seconds [ 1124.494028][ T56] block nbd1: Possible stuck request ffff8880250a7540: control (read@3072,1024B). Runtime 990 seconds [ 1124.528358][ T789] __nla_validate_parse: 9 callbacks suppressed [ 1124.528382][ T789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6954'. [ 1124.749975][ T794] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6956'. [ 1125.357907][ T832] sctp: [Deprecated]: syz.7.6965 (pid 832) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1125.357907][ T832] Use struct sctp_sack_info instead [ 1125.378592][ T824] syzkaller0: entered promiscuous mode [ 1125.384129][ T824] syzkaller0: entered allmulticast mode [ 1125.408515][ T832] sctp: [Deprecated]: syz.7.6965 (pid 832) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1125.408515][ T832] Use struct sctp_sack_info instead [ 1125.687587][ T835] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.274068][ T835] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.381229][ T835] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.446824][ T866] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6974'. [ 1129.460302][ T867] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6974'. [ 1129.474245][ T868] netlink: 10 bytes leftover after parsing attributes in process `syz.6.6973'. [ 1129.599482][ T835] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.638519][ T880] netlink: 'syz.7.6975': attribute type 13 has an invalid length. [ 1129.692025][ T880] netlink: 'syz.7.6975': attribute type 17 has an invalid length. [ 1129.902352][ T880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1129.906831][ T894] netlink: 'syz.6.6979': attribute type 21 has an invalid length. [ 1129.929952][ T880] 8021q: adding VLAN 0 to HW filter on device team0 [ 1129.945746][ T880] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1129.978441][ T882] syzkaller0 speed is unknown, defaulting to 1000 [ 1130.010471][ T899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1130.090202][ T894] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6979'. [ 1130.177032][ T883] syzkaller0 speed is unknown, defaulting to 1000 [ 1130.241779][T30910] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.275591][ T7456] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.608462][ T7456] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.664587][ T929] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6985'. [ 1130.712519][ T928] syzkaller0 speed is unknown, defaulting to 1000 [ 1130.714945][ T932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1130.730679][T30908] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.900845][ T952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6990'. [ 1131.939751][ T952] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6990'. [ 1131.945849][ T968] netlink: 'syz.3.6995': attribute type 5 has an invalid length. [ 1131.961067][ T968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6995'. [ 1131.986910][ T952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6990'. [ 1132.021971][ T952] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6990'. [ 1132.271573][ T981] syzkaller0 speed is unknown, defaulting to 1000 [ 1132.539508][ T985] syzkaller0 speed is unknown, defaulting to 1000 [ 1133.058890][ T1026] netlink: 'syz.3.7010': attribute type 10 has an invalid length. [ 1133.173403][ T1038] netlink: 'syz.3.7010': attribute type 10 has an invalid length. [ 1133.236526][ T1043] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7013'. [ 1133.381757][ T1050] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1133.382123][ T1053] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7015'. [ 1133.396636][ T1050] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1133.409263][ T1053] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7015'. [ 1133.882430][ T1082] netlink: zone id is out of range [ 1133.888688][ T1082] netlink: zone id is out of range [ 1133.894360][ T1082] netlink: zone id is out of range [ 1133.907836][ T1082] netlink: zone id is out of range [ 1133.922568][ T1082] netlink: zone id is out of range [ 1133.942466][ T1082] netlink: zone id is out of range [ 1133.963151][ T1082] netlink: zone id is out of range [ 1134.007819][ T1082] netlink: zone id is out of range [ 1134.014540][ T1082] netlink: zone id is out of range [ 1134.039003][ T1088] bond9: option lp_interval: invalid value (0) [ 1134.051551][ T1088] bond9: option lp_interval: allowed values 1 - 2147483647 [ 1134.069986][ T1088] bond9 (unregistering): Released all slaves [ 1134.566818][ T1117] tipc: Enabled bearer , priority 0 [ 1134.855897][ T1144] tipc: Enabling of bearer rejected, failed to enable media [ 1135.068312][ T1159] syzkaller0 speed is unknown, defaulting to 1000 [ 1135.345740][ T1163] syzkaller0 speed is unknown, defaulting to 1000 [ 1135.388443][ T1181] team0: Mode changed to "broadcast" [ 1135.458080][ T1162] syzkaller0 speed is unknown, defaulting to 1000 [ 1136.488966][ T1213] __nla_validate_parse: 4 callbacks suppressed [ 1136.488990][ T1213] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7053'. [ 1137.498285][ T1246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7060'. [ 1137.608331][ T1248] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7060'. [ 1137.758817][ T1252] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7062'. [ 1137.814238][ T1258] netlink: 5636 bytes leftover after parsing attributes in process `syz.6.7065'. [ 1137.927847][ T1261] batadv_slave_0: entered promiscuous mode [ 1137.959944][ T1261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7063'. [ 1138.003788][ T1255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7063'. [ 1138.079349][ T1255] netlink: 428 bytes leftover after parsing attributes in process `syz.3.7063'. [ 1138.126501][ T1272] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7067'. [ 1138.401624][ T1255] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7063'. [ 1138.701679][ T1214] Bluetooth: hci4: command 0x0406 tx timeout [ 1139.875521][ T1300] syz_tun (unregistering): left allmulticast mode [ 1139.904085][ T7456] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.989890][ T7456] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.036349][ T7456] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.093094][ T7456] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.226765][ T7456] bridge_slave_1: left allmulticast mode [ 1140.232758][ T7456] bridge_slave_1: left promiscuous mode [ 1140.239174][ T7456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.248775][ T7456] bridge_slave_0: left allmulticast mode [ 1140.254466][ T7456] bridge_slave_0: left promiscuous mode [ 1140.261412][ T7456] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.455443][ T7456] bond4 (unregistering): (slave gretap1): Releasing active interface [ 1140.514775][ T7456] dvmrp8 (unregistering): left allmulticast mode [ 1140.691524][ T7456] bond1 (unregistering): Released all slaves [ 1140.843133][ T7456] bond2 (unregistering): (slave bond3): Releasing backup interface [ 1140.853818][ T7456] bond2 (unregistering): Released all slaves [ 1141.016516][ T7456] bond3 (unregistering): Released all slaves [ 1141.033928][ T7456] bond4 (unregistering): Released all slaves [ 1141.215875][ T7456] bond5 (unregistering): Released all slaves [ 1141.384632][ T7456] bond6 (unregistering): Released all slaves [ 1141.529737][ T7456] tipc: Disabling bearer [ 1141.550839][ T7456] tipc: Left network mode [ 1141.818916][ T7456] hsr_slave_0: left promiscuous mode [ 1141.826419][ T7456] hsr_slave_1: left promiscuous mode [ 1141.836567][ T7456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1142.241788][ T7456] team0 (unregistering): Port device team_slave_1 removed [ 1142.310552][ T7456] team0 (unregistering): Port device team_slave_0 removed [ 1143.342414][ T7456] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1143.359199][ T7456] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.453545][ T7456] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1143.464777][ T7456] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.542814][ T7456] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1143.555189][ T7456] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.640224][ T7456] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1143.653166][ T7456] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.261432][ T7456] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1144.273126][ T7456] bond0 (unregistering): Released all slaves [ 1144.289870][ T7456] bond1 (unregistering): Released all slaves [ 1144.473310][ T7456] bond2 (unregistering): Released all slaves [ 1144.489302][ T7456] bond3 (unregistering): Released all slaves [ 1144.810080][ T7456] hsr_slave_0: left promiscuous mode [ 1144.816573][ T7456] hsr_slave_1: left promiscuous mode [ 1144.844991][ T7456] veth1_macvtap: left promiscuous mode [ 1144.852489][ T7456] veth0_macvtap: left promiscuous mode [ 1144.860397][ T7456] veth1_vlan: left promiscuous mode [ 1144.866173][ T7456] veth0_vlan: left promiscuous mode [ 1146.346944][ T7456] IPVS: stop unused estimator thread 0... [ 1146.641358][ T7456] ------------[ cut here ]------------ [ 1146.648754][ T7456] ida_free called for id=997 which is not allocated. [ 1146.657961][ T7456] WARNING: CPU: 1 PID: 7456 at lib/idr.c:592 ida_free+0x280/0x310 [ 1146.666511][ T7456] Modules linked in: [ 1146.672190][ T7456] CPU: 1 UID: 0 PID: 7456 Comm: kworker/u8:21 Not tainted syzkaller #0 PREEMPT(full) [ 1146.682982][ T7456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1146.694016][ T7456] Workqueue: netns cleanup_net [ 1146.700812][ T7456] RIP: 0010:ida_free+0x280/0x310 [ 1146.706354][ T7456] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 81 2c 0c 00 90 48 c7 c7 20 27 74 8c 44 89 fe e8 91 1c 59 f6 90 <0f> 0b 90 90 eb 34 e8 75 ae 95 f6 49 bd 00 00 00 00 00 fc ff df eb [ 1146.727195][ T7456] RSP: 0018:ffffc900031277a0 EFLAGS: 00010246 [ 1146.733783][ T7456] RAX: 3badad05ac6a2500 RBX: 0000000000000a02 RCX: ffff888047091e40 [ 1146.742620][ T7456] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1146.751991][ T7456] RBP: ffffc90003127888 R08: 0000000000000003 R09: 0000000000000004 [ 1146.770659][ T7456] R10: dffffc0000000000 R11: fffffbfff1b7a118 R12: 1ffff92000624ef8 [ 1146.780030][ T7456] R13: dffffc0000000000 R14: ffff888140ae1000 R15: 00000000000003e5 [ 1146.788848][ T7456] FS: 0000000000000000(0000) GS:ffff88812649b000(0000) knlGS:0000000000000000 [ 1146.800078][ T7456] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1146.808197][ T7456] CR2: 000000110c34017c CR3: 000000000db36000 CR4: 00000000003526f0 [ 1146.818938][ T7456] Call Trace: [ 1146.822409][ T7456] [ 1146.825820][ T7456] ? __pfx_ida_free+0x10/0x10 [ 1146.831622][ T7456] ? remove_proc_entry+0x33d/0x4b0 [ 1146.838050][ T7456] pde_put+0x7e/0x1b0 [ 1146.842854][ T7456] proc_net_ns_exit+0x47/0x70 [ 1146.849271][ T7456] ops_undo_list+0x49a/0x990 [ 1146.854516][ T7456] ? __pfx_ops_undo_list+0x10/0x10 [ 1146.860023][ T7456] ? do_raw_spin_unlock+0x122/0x240 [ 1146.865958][ T7456] cleanup_net+0x4d8/0x820 [ 1146.870779][ T7456] ? __pfx_cleanup_net+0x10/0x10 [ 1146.875989][ T7456] ? _raw_spin_unlock_irq+0x23/0x50 [ 1146.881703][ T7456] ? process_scheduled_works+0x9ef/0x17b0 [ 1146.888156][ T7456] ? process_scheduled_works+0x9ef/0x17b0 [ 1146.894045][ T7456] process_scheduled_works+0xade/0x17b0 [ 1146.901030][ T7456] ? __pfx_process_scheduled_works+0x10/0x10 [ 1146.907993][ T7456] worker_thread+0x8a0/0xda0 [ 1146.913106][ T7456] kthread+0x711/0x8a0 [ 1146.918234][ T7456] ? __pfx_worker_thread+0x10/0x10 [ 1146.923390][ T7456] ? __pfx_kthread+0x10/0x10 [ 1146.928680][ T7456] ? _raw_spin_unlock_irq+0x23/0x50 [ 1146.935013][ T7456] ? lockdep_hardirqs_on+0x9c/0x150 [ 1146.942747][ T7456] ? __pfx_kthread+0x10/0x10 [ 1146.949417][ T7456] ret_from_fork+0x436/0x7d0 [ 1146.954506][ T7456] ? __pfx_ret_from_fork+0x10/0x10 [ 1146.960346][ T7456] ? __switch_to_asm+0x39/0x70 [ 1146.966103][ T7456] ? __switch_to_asm+0x33/0x70 [ 1146.972124][ T7456] ? __pfx_kthread+0x10/0x10 [ 1146.977917][ T7456] ret_from_fork_asm+0x1a/0x30 [ 1146.983240][ T7456] [ 1146.986364][ T7456] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1146.994190][ T7456] CPU: 1 UID: 0 PID: 7456 Comm: kworker/u8:21 Not tainted syzkaller #0 PREEMPT(full) [ 1147.004142][ T7456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1147.016119][ T7456] Workqueue: netns cleanup_net [ 1147.022274][ T7456] Call Trace: [ 1147.026837][ T7456] [ 1147.030498][ T7456] dump_stack_lvl+0x99/0x250 [ 1147.035850][ T7456] ? __asan_memcpy+0x40/0x70 [ 1147.041957][ T7456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1147.048881][ T7456] ? __pfx__printk+0x10/0x10 [ 1147.055029][ T7456] vpanic+0x281/0x750 [ 1147.060390][ T7456] ? __pfx__printk+0x10/0x10 [ 1147.065894][ T7456] ? __pfx_vpanic+0x10/0x10 [ 1147.072362][ T7456] ? is_bpf_text_address+0x26/0x2b0 [ 1147.079618][ T7456] panic+0xb9/0xc0 [ 1147.084601][ T7456] ? __pfx_panic+0x10/0x10 [ 1147.091361][ T7456] __warn+0x31b/0x4b0 [ 1147.096058][ T7456] ? ida_free+0x280/0x310 [ 1147.101455][ T7456] ? ida_free+0x280/0x310 [ 1147.106733][ T7456] report_bug+0x2be/0x4f0 [ 1147.111488][ T7456] ? ida_free+0x280/0x310 [ 1147.117544][ T7456] ? ida_free+0x280/0x310 [ 1147.122536][ T7456] ? ida_free+0x282/0x310 [ 1147.128422][ T7456] handle_bug+0x84/0x160 [ 1147.134856][ T7456] exc_invalid_op+0x1a/0x50 [ 1147.140018][ T7456] asm_exc_invalid_op+0x1a/0x20 [ 1147.145367][ T7456] RIP: 0010:ida_free+0x280/0x310 [ 1147.150437][ T7456] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 81 2c 0c 00 90 48 c7 c7 20 27 74 8c 44 89 fe e8 91 1c 59 f6 90 <0f> 0b 90 90 eb 34 e8 75 ae 95 f6 49 bd 00 00 00 00 00 fc ff df eb [ 1147.172948][ T7456] RSP: 0018:ffffc900031277a0 EFLAGS: 00010246 [ 1147.179771][ T7456] RAX: 3badad05ac6a2500 RBX: 0000000000000a02 RCX: ffff888047091e40 [ 1147.188127][ T7456] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1147.197967][ T7456] RBP: ffffc90003127888 R08: 0000000000000003 R09: 0000000000000004 [ 1147.206415][ T7456] R10: dffffc0000000000 R11: fffffbfff1b7a118 R12: 1ffff92000624ef8 [ 1147.215021][ T7456] R13: dffffc0000000000 R14: ffff888140ae1000 R15: 00000000000003e5 [ 1147.223244][ T7456] ? __pfx_ida_free+0x10/0x10 [ 1147.228225][ T7456] ? remove_proc_entry+0x33d/0x4b0 [ 1147.234050][ T7456] pde_put+0x7e/0x1b0 [ 1147.238441][ T7456] proc_net_ns_exit+0x47/0x70 [ 1147.243797][ T7456] ops_undo_list+0x49a/0x990 [ 1147.250199][ T7456] ? __pfx_ops_undo_list+0x10/0x10 [ 1147.255975][ T7456] ? do_raw_spin_unlock+0x122/0x240 [ 1147.261504][ T7456] cleanup_net+0x4d8/0x820 [ 1147.266942][ T7456] ? __pfx_cleanup_net+0x10/0x10 [ 1147.274665][ T7456] ? _raw_spin_unlock_irq+0x23/0x50 [ 1147.280311][ T7456] ? process_scheduled_works+0x9ef/0x17b0 [ 1147.286707][ T7456] ? process_scheduled_works+0x9ef/0x17b0 [ 1147.292628][ T7456] process_scheduled_works+0xade/0x17b0 [ 1147.298611][ T7456] ? __pfx_process_scheduled_works+0x10/0x10 [ 1147.306171][ T7456] worker_thread+0x8a0/0xda0 [ 1147.311880][ T7456] kthread+0x711/0x8a0 [ 1147.316783][ T7456] ? __pfx_worker_thread+0x10/0x10 [ 1147.323427][ T7456] ? __pfx_kthread+0x10/0x10 [ 1147.329638][ T7456] ? _raw_spin_unlock_irq+0x23/0x50 [ 1147.336876][ T7456] ? lockdep_hardirqs_on+0x9c/0x150 [ 1147.342608][ T7456] ? __pfx_kthread+0x10/0x10 [ 1147.348316][ T7456] ret_from_fork+0x436/0x7d0 [ 1147.353229][ T7456] ? __pfx_ret_from_fork+0x10/0x10 [ 1147.358824][ T7456] ? __switch_to_asm+0x39/0x70 [ 1147.363964][ T7456] ? __switch_to_asm+0x33/0x70 [ 1147.370154][ T7456] ? __pfx_kthread+0x10/0x10 [ 1147.375267][ T7456] ret_from_fork_asm+0x1a/0x30 [ 1147.381125][ T7456] [ 1147.384868][ T7456] Kernel Offset: disabled [ 1147.390010][ T7456] Rebooting in 86400 seconds..