last executing test programs: 3m28.454038071s ago: executing program 3 (id=1923): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 3m28.355169925s ago: executing program 3 (id=1925): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x200, 0x0) vmsplice(r7, &(0x7f0000000100)=[{&(0x7f00000003c0)="89a25031b0f94f0cd90348a0d21ee413fa36ee8608f0844238e86d19f73752712e44cf133f8e6f0d32d614bbc3926a2e37f261021dd991c941e3e6f1f3856cc68dfe41ae7eaf23ba91d8cbfbb99cae9c90c9dcac5cf843794592a5d408bd312d70e145a62181e3aaa9c243d775a318fc99b7", 0x72}, {&(0x7f0000002c40)="9478c03da986c8917ac188d57dfe2d81772faa04b076834e076131c31c48decbb84f4ae61fbdad0adfeebf690cd98e00dc4e09c31e1acd29123eda33867ac2db2b06749b5348c785985c17947b08349d385f1b31c0edce31faf4adc2f1d39ab252210c6b35f7ea67d525044c20326e328fdd28f3d3a04dd3a7e4ad6ec9db6b78cb28dcecadc27f7765ebfcf3214fdef0dd672e4942d2d51365fd1bd724428c2453a82dc24b9b5ea2650267dc772aeed140331e388393821011521cf33cec66130398a2143ee088f0099a460d383c2dfd842e7e5b05fe2fb08f2746aa4183e7d94c7998fa198c30b1d5a156e191be8d194e645c6e1add171913b7e1e9af5d65d618c0da6878cce85538b78cc30b53befbc9c3b746f3b6f1990a512de078a8729cd2916cbede4b48cbdc31d6c4eb0fc384533a4b27b54d1a242bb4b3b0e9ab668915e46a4aedf19c363e6365c935d8a3b3f1d8c4ee8686ad954b62e9a083f9b0cb391d44f6e638b2c3688897fef4a2cceabe2c24540c0816ce7ad05cf3d22822f275c8c5960ccad8a044d6297c810869", 0x18f}], 0x2, 0xa) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="99c22b4e0800c82852ae91e5e4e8604d707700", @ANYRES32=0x0, @ANYBLOB="0c00ea800800020003000000"], 0x24}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}}, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000080)={'icmp\x00'}, &(0x7f0000000440)=0x1e) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x7, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000040028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514000000110001"], 0xe8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000c80)) getpeername$packet(r7, &(0x7f0000000cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d00)=0x14) getsockname$packet(r6, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d80)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000e40)={'syztnl1\x00', &(0x7f0000000dc0)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x0, 0x1, 0x66, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x38, 0x3, 0xd}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r10, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) 3m28.036471687s ago: executing program 3 (id=1927): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0x40000018}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0xa396, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000140), 0x4) syz_emit_ethernet(0xe, &(0x7f00000000c0)=ANY=[], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000190001002dbd7000f8dbdf2502202000ff02ff02001a000008000100ac1414aa0c0009000800281004"], 0x30}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/uts\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) socket(0x14, 0x6, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1900000004000000040000000a"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r11}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000003ec0)={0x1, [{r7, r9}, {r7, r9}, {r8, r9}, {r7, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r7, r9}, {r8, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r7, r9}, {r8, r9}, {r8, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {0x0, r9}, {r8, r9}, {r8, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {0x0, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {r8, r9}, {r8}, {r7, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r8}, {r8, r9}, {r8, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8, r9}, {0x0, r9}, {r7, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r7, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {0x0, r9}, {r7, r9}, {r8, r9}, {r7, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r8}, {r8, r9}, {r8, r9}, {0x0, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r7, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {0x0, r9}, {r8, r9}, {r8}, {r8, r9}, {r8, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {r8, r9}, {r7, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r8}, {r8, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {r8, r9}, {r7, r9}, {r8, r9}, {r7, r9}, {0x0, r9}, {r7, r9}, {r8, r9}, {r8, r9}, {r8, r9}, {r8, r9}, {0x0, r9}, {0x0, r9}, {r8, r9}, {r7, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r8, r9}, {r7}, {r7, r9}, {r8, r9}, {r7, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r8}, {r7, r9}, {r8, r9}, {r7, r9}, {r8}, {0x0, r9}, {r7, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r7, r9}, {r8, r9}, {r7, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r8}, {r7, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r8}, {r7, r9}, {r7, r9}, {r8, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r7, r9}, {r7}, {r8, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {r7, r9}, {r8, r9}, {r8, r9}, {r7, r9}, {r7, r9}], 0x7, "3113d84c0ab819"}) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f00000002c0)={r8, 0x9a9}) 3m27.297568194s ago: executing program 3 (id=1934): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000006100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x80000a, 0x11, r2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x28, 0x0, &(0x7f00000000c0)="7a7fa22c5fe77b4a53ef2a2d86ddfa770bff3826590b65c397c86dd2c1105f000000000104000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x28, 0x0, &(0x7f00000000c0)="7a7fa22c5fe77b4a53ef2a2d86ddfa770bff3826590b65c397c86dd2c1105f000000000104000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$kcm(0x2, 0x5, 0x0) (async) r4 = socket$kcm(0x2, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r4, r3}) socket(0x400000000010, 0x3, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}) 3m27.188142151s ago: executing program 3 (id=1935): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$packet(0x11, 0x4, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000aaaf02000000850000000f0000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r6, r5, 0x25, 0x4, @val=@tcx}, 0x1c) syz_emit_ethernet(0xd81, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001180)=@newqdisc={0x32, 0x24, 0x4ee4e6a52ff56551, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x0, 0x5, 0xfffb, 0x6, 0x1, 0x49f, 0x1}}, {0x0, 0x2, [0xfffc, 0x9, 0x6, 0x7, 0x6, 0x5, 0xd5]}}, {{0x0, 0x1, {0xd, 0xe, 0x8, 0x0, 0x2, 0x1, 0x1}}, {0x0, 0x2, [0x8, 0x3, 0x800, 0xfff7]}}, {{0x0, 0x1, {0x9, 0x9, 0x0, 0x8, 0x1, 0x605, 0x2}}, {0x0, 0x2, [0x9, 0x6aed, 0x0, 0x401, 0xfff7, 0x0, 0x10]}}]}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0xe, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000}, 0x8010) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r9 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0xf, &(0x7f00000000c0), 0x4) sendmsg$inet(r9, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x31, &(0x7f0000000640)=r8, 0x4) setsockopt$sock_attach_bpf(r9, 0x1, 0x31, &(0x7f0000000000), 0x4) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001480)=@newtfilter={0xa0, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {}, {0x8, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x8}}, @filter_kind_options=@f_route={{0xa}, {0x10, 0x2, [@TCA_ROUTE4_POLICE={0xc, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1ff}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x48, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x9, 0x5, 0x0, 0x4}, {0xfeff, 0x10, 0x6, 0x1}, {0x4, 0x3, 0x40, 0x6}, {0x2, 0x88, 0x8, 0x10}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xb, 0xfff1}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x10, 0xb}}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000}, 0x44001) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001040)="ad00000000000089f45f429a8ce31f4dfc2c0328150aab698cdd29aa6f484062b883726e98144fba01043336fca5e3821083b6f20c0bcfa75b715e9d63ec0308235b44ae5df3f5e7b78b547e161552f3d713bb2b5771acf9555eaece24e11e053f62dabdef07e5082199791ef96111c6b4952ce73f44a6b8f6b0d4cc3f02", 0x7e) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x1) recvmmsg(r1, &(0x7f0000001140)=[{{&(0x7f00000010c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001000)}, 0x6}], 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000001000)={'sit0\x00', &(0x7f0000001300)={'tunl0\x00', r5, 0x40, 0x8000, 0x7, 0x8, {{0x12, 0x4, 0x1, 0x1, 0x48, 0x64, 0x0, 0x15, 0x29, 0x0, @private=0xa010101, @broadcast, {[@ssrr={0x89, 0x27, 0x24, [@dev={0xac, 0x14, 0x14, 0x18}, @empty, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x39}, @local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp_addr={0x44, 0xc, 0x14, 0x1, 0x1, [{@multicast2}]}]}}}}}) unshare(0x22020600) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) 3m26.420399373s ago: executing program 3 (id=1945): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) close(r1) 3m11.295977687s ago: executing program 32 (id=1945): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) close(r1) 2m38.284811422s ago: executing program 5 (id=2293): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x44b, 0x40000000, 0x25dfdbfc, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2m38.076264124s ago: executing program 5 (id=2298): syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) (async) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r4 = socket$qrtr(0x2a, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x2f}]}}]}, 0x3c}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e24, 0xfffffffe, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}, 0xfffffffe, 0x7, 0x2, 0xff, 0x42, 0x9, 0x6}, &(0x7f0000000500)=0x9c) bind$qrtr(r4, &(0x7f0000000180)={0x2a, 0xffffffff, 0x7fff}, 0xc) close(0x3) (async) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000001c0)={r0}) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="020000000000fddbe18752ab3266b4eb0edf", @ANYRES32=r8, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc040000", @ANYRES16=r7, @ANYBLOB="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"], 0x4fc}, 0x1, 0x0, 0x0, 0x80c0}, 0x24000040) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'veth1_vlan\x00', 0x2}) (async) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r9, 0x89ed, 0x0) (async) socket(0x15, 0x5, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r10, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000030000000900010073797a310000000014000000020a010400000000000000000000000034000000140a03000000000000000000030000000800034000000000090001000001000000000000090002"], 0x90}}, 0x0) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x41, 0x2003206, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010104}, 0x10) 2m37.667300106s ago: executing program 5 (id=2303): sendmmsg(0xffffffffffffffff, &(0x7f0000001fc0), 0x0, 0x24044015) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x6c00}, 0x0) r1 = accept4(r0, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000240)=0x80, 0x800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000008c0)={0x84, @dev={0xac, 0x14, 0x14, 0x3f}, 0x4e22, 0x1, 'sed\x00', 0x2, 0x10001, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'none\x00', 0x9, 0x821}, 0x2c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x1e9c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x7, 0x5}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1e68, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0xb}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0x3}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0x2}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xb}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_ACT={0x1e2c, 0x2, [@m_police={0x1da8, 0x6, 0x0, 0x0, {{0xb}, {0x1d14, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x8, 0x2000000, 0x3, 0x9767, 0xd, 0x8000, 0x4, 0xe3a4, 0x7ff, 0x4, 0x2, 0x8, 0x9, 0x9, 0xa, 0x2, 0xfff, 0x85e, 0x2, 0x80000001, 0x3, 0x8001, 0x6, 0x101, 0x5, 0x0, 0x2, 0x9, 0x5, 0x400, 0xfffffff7, 0x3, 0x7, 0x1, 0x4, 0x1, 0x5, 0x5, 0x0, 0x827b, 0xffffcec8, 0x4, 0x80000001, 0x3, 0x800, 0x4710, 0x2, 0x4, 0x6, 0xffff, 0x5, 0x1, 0x9, 0x1, 0x7, 0x2, 0x4, 0x7fff, 0x8, 0x0, 0x7, 0x3, 0x97, 0xfffffffb, 0x400, 0xa42a, 0xfffffbff, 0x3fe9, 0x5dfa, 0xa, 0x746, 0x8001, 0x9, 0x8, 0x7, 0xa, 0x77a, 0xc828, 0x5c, 0x0, 0x2, 0x2, 0x7, 0x7ff, 0x0, 0x7fff, 0x1ff, 0x4, 0x3, 0x7f, 0x4, 0xfffffff8, 0x7, 0x7, 0xfffffe01, 0x3, 0x2, 0xffffffff, 0x4c, 0x80000000, 0x8, 0x7, 0x7, 0x0, 0x7fffffff, 0x1, 0x4, 0x81, 0x1, 0x80000001, 0x7f, 0x0, 0x84, 0x0, 0x2, 0x51a8, 0x881, 0x6, 0x4, 0x7, 0x2, 0x7, 0xfffff0d5, 0x6, 0x4, 0x3, 0x80000001, 0x7, 0x700000, 0x3, 0x1, 0x87, 0xffe, 0x5, 0x7e, 0xc61, 0x4, 0x7, 0x0, 0x7f, 0x2, 0xff, 0x46, 0x7, 0x5, 0x6, 0x2, 0x5, 0xc887, 0x4, 0x6, 0x2, 0x8fe, 0x55ba, 0x7fffffff, 0x7fffffff, 0x5, 0x6, 0x401, 0x8, 0x2, 0x4, 0x8, 0x7fffffff, 0x7, 0x4, 0xffffffff, 0xfffff801, 0x3, 0x9, 0x7, 0xe5f, 0x1, 0x114, 0x5, 0x8, 0x7, 0x84, 0x80, 0x1, 0x2, 0x7fffffff, 0x0, 0x7a9, 0x4, 0xe, 0x4a, 0x5c, 0x8, 0x401, 0x8, 0xfffffe00, 0x6, 0x6, 0x0, 0x5, 0x9, 0x6, 0x7, 0x3, 0xb, 0x80, 0x8, 0x5, 0xfffffff7, 0x1, 0x3, 0x1, 0x4, 0x1, 0x8, 0x10001, 0x6, 0x101, 0x7, 0x100, 0x4, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x1, 0x6e, 0x4ef73afd, 0xffff, 0x8, 0x7, 0x2, 0xae9, 0x1, 0x0, 0x5, 0xfff, 0x2, 0x1, 0xc782, 0x81, 0x1, 0x1000000, 0x3, 0x0, 0x7d9c, 0x8, 0x80000001, 0x7ff, 0x3, 0x7, 0x2, 0x80000000, 0x8, 0x3, 0x6, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x6, 0x86f, 0x7, 0xdb0, 0x8, 0x4, 0x7fffffff, 0x6, 0xb7, 0x0, 0x3, 0x8, 0x8, 0xfa, 0x0, 0x0, 0x0, 0xffffffff, 0xf8, 0x0, 0x4af0, 0x5, 0x5, 0x8, 0xe, 0x7fff, 0x800, 0x927c, 0x2, 0x3caf, 0x6, 0x4, 0xc, 0x9, 0xff, 0x3, 0xffffd8e4, 0x4, 0x6, 0xffffff01, 0xfffff462, 0x9, 0x101, 0x1, 0x644, 0x1, 0x6, 0x8, 0x9, 0xe, 0x253b9315, 0x9, 0x3, 0x4, 0x1, 0x81, 0x101, 0x5, 0x8, 0x100, 0xff, 0x6, 0x754, 0x9, 0x9, 0x4, 0xe, 0x8, 0x8, 0x7fff, 0x8867, 0x7fff, 0x8, 0x8, 0xfffffffc, 0x5, 0x9edc, 0x81, 0xfff, 0x80, 0x4, 0x5, 0x7, 0x101, 0x7fff, 0x9, 0x5, 0x1, 0xfffff998, 0xffffffff, 0x6, 0x9, 0x8533, 0x6, 0xfff, 0x770, 0x0, 0x10, 0x9, 0x2, 0x7, 0x31, 0x7, 0x9, 0x9, 0x4, 0x4, 0xc, 0x3, 0x1, 0x5, 0x8001, 0x7, 0x5a2b, 0x7, 0x9, 0x9, 0x0, 0x7, 0x1, 0x5, 0xfffffff9, 0x8, 0x4, 0x7, 0x2ff, 0x2425, 0x1000, 0xdde, 0x6, 0xffff, 0xf2, 0xd, 0x2, 0x1, 0xfffffffb, 0xfffffffd, 0xb65f, 0x6, 0xf89, 0xfffffb0c, 0x7, 0x464, 0x7efe, 0x8, 0x200, 0x3, 0x7, 0x4, 0x101, 0x3, 0x381f, 0x4, 0xd31e, 0x1, 0x7, 0x5, 0xffff, 0x0, 0x1ff, 0x5438, 0x453, 0x2, 0x8, 0x7fffffff, 0x1, 0x6, 0x6b9f, 0x1, 0x557, 0x8000, 0x2, 0x7, 0x1ff, 0x5, 0x7, 0x4, 0x78d, 0xaa0, 0x5, 0x6, 0x62, 0x8, 0x2, 0x4, 0x477c, 0x7, 0x8, 0x0, 0x10, 0x2, 0xfffffff7, 0x82e, 0x80000000, 0x9, 0x7, 0xffff, 0x1000, 0xff, 0x32, 0x5f, 0x4, 0x8, 0x2, 0x6, 0x0, 0x3, 0x80, 0x6, 0x0, 0x1, 0x1, 0xfffffffc, 0x8, 0xfc4, 0x7, 0xab0, 0xedb, 0x51b, 0x81, 0x200, 0xffffffff, 0x7bec58eb, 0x4, 0x8, 0x7, 0xfffffffd, 0x6, 0x7, 0x6, 0x503, 0x7, 0x6, 0x183, 0x0, 0x8, 0xc2, 0xab8, 0x8, 0x0, 0x9, 0x8, 0x1, 0x0, 0x75, 0x6, 0xfffffff2, 0x8, 0x400, 0x2, 0x9, 0x8, 0x2, 0xcee, 0xfffffc01]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x12}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x0, 0xc0000000, 0x81, 0xfffffffd, {0x7, 0x1, 0x0, 0x82e4, 0x401, 0x4}, {0x44, 0x2, 0x122c, 0x81, 0xfff8, 0x9}, 0x80000001, 0xff, 0xc}}], [], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x4, 0x9, 0x10, 0x4, 0x8, 0x9, 0x40, 0x8, 0x2, 0x8, 0xb, 0xe0, 0x6, 0xffff3ff7, 0x80000, 0x6, 0xc, 0x879, 0xd7, 0x7fff, 0x7, 0x0, 0x8, 0x1729, 0x8, 0x5, 0xff, 0x8341, 0x7ff, 0x40, 0x200, 0x4, 0x6, 0x8, 0xfffffff9, 0xd, 0x80000002, 0x7, 0xffffffff, 0x9, 0x10000, 0x3, 0x800, 0xa6, 0x8, 0x0, 0x7, 0x5, 0x0, 0xd6, 0x1000, 0x3, 0x7, 0x5, 0x7, 0x2, 0x5, 0x9, 0x6, 0x200, 0x80000001, 0x2, 0x8001, 0x7, 0x5, 0x1, 0x2, 0xffffffe4, 0x4, 0x4, 0x4e92a1d5, 0xe, 0xffff, 0x23, 0x0, 0x7, 0x81, 0x2, 0x4, 0xdd, 0x2d, 0x7, 0xf1f6, 0x9, 0x5, 0x1, 0xffff, 0x3, 0xaff1, 0xb00000, 0x7, 0x8, 0x2b, 0x1, 0x3, 0x1ff, 0x1, 0x7, 0x1, 0x4, 0x2, 0x2, 0x2, 0x2, 0x3, 0x6, 0x8, 0x3, 0x9, 0x284ae85e, 0x7, 0x3, 0x0, 0x10000000, 0x3, 0x8, 0x8001, 0x7, 0x77, 0xc, 0xfe0, 0x800, 0x6, 0x5, 0x6, 0x90b, 0x5, 0x434e, 0x7, 0x1000, 0x2, 0x40, 0x8, 0x1, 0x4, 0x2, 0x1, 0x7db, 0x1, 0x7fff, 0xfff, 0x0, 0x8, 0xa, 0x0, 0xd7, 0x80d0, 0x0, 0x8424, 0x1, 0x8, 0x9, 0x7, 0x40, 0x3, 0xc577, 0x0, 0x0, 0x1, 0x1, 0x172, 0x1000, 0x6, 0x0, 0x5, 0x22, 0x2, 0x8, 0xfffffff9, 0x4, 0xb5e, 0x5, 0x0, 0x1, 0x200, 0x800, 0x2b, 0x87c0, 0x9, 0x3, 0x80000000, 0x1, 0x6, 0x7, 0x7fffffff, 0xffff8001, 0x8, 0x0, 0x10, 0x9, 0x7ff, 0x6, 0xfff, 0x401, 0x3, 0x4, 0x95, 0x8, 0x10000, 0x3, 0x2, 0xfffffffa, 0x100, 0x0, 0x1, 0x2, 0xffffffff, 0x800, 0x51d, 0x8, 0x7, 0x400, 0x5, 0x69d0, 0x5, 0xdea, 0x1, 0x94c4, 0x3dbc, 0x1ff, 0x8001, 0x118, 0x2, 0x2d2d, 0x7ff, 0x81, 0x7, 0xb49, 0x81, 0x9, 0x5, 0x2, 0x1, 0x1, 0xa, 0xffff, 0xffff54a2, 0xa, 0xe757, 0x6, 0x7, 0x208, 0x68a669c, 0xffffffff, 0xffffffff, 0x9, 0x0, 0x7ff, 0x401, 0x5, 0x6, 0x4, 0x20000, 0xfffffff1, 0xfffffffc]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x7, 0x232, 0x3, 0x2, 0x40, 0xff, 0x0, 0xc0000000, 0x1, 0x5, 0x80000001, 0x19e, 0x2, 0x40000000, 0x1, 0x9, 0xf9, 0x80000000, 0xd, 0x4, 0x4, 0x400, 0x7, 0x5, 0x306, 0x1, 0x99, 0x4, 0x3, 0xffff0000, 0x22, 0x9, 0xf, 0x8000, 0x7, 0x2, 0x1, 0xb, 0x7, 0x710e, 0x2, 0xca, 0x9, 0xffffffc1, 0x1, 0xac, 0x5, 0xfff, 0x9, 0x3, 0xf3c3, 0x9, 0x1, 0x1, 0x7, 0x4, 0x8, 0x7, 0x9, 0xffff0a47, 0x4, 0x8, 0x1, 0x4, 0x8, 0xb5, 0xee67, 0x0, 0x1b, 0x1, 0xfffffff2, 0x3, 0x0, 0x69f, 0x4, 0x4, 0xc0, 0x1, 0x2, 0x2, 0x5, 0xffffffff, 0x3, 0x4, 0x2, 0x20000000, 0x9, 0x40, 0x5, 0x3, 0x3, 0x8d, 0xfffffffb, 0x8, 0x8, 0x3ff, 0x3e0, 0x5, 0x10000, 0x7, 0x81, 0xfffffffd, 0xff, 0xfffffffd, 0x9, 0x2, 0x3, 0xfffffff9, 0x0, 0x5, 0x0, 0x1000, 0x3, 0x4, 0x2b6c, 0x8, 0x4, 0x8, 0x2, 0x2, 0x8, 0x7c4, 0xfffffff8, 0x5, 0x800, 0x7f, 0xd, 0x3887, 0x5, 0x200, 0x1, 0x661, 0x2, 0x10001, 0x2, 0x1, 0xa4, 0x1000, 0x0, 0x3, 0x8001, 0x6000, 0x152a, 0x34b, 0xffff8000, 0x6, 0xfffffffe, 0xc5f, 0x90b5, 0x9, 0x69, 0x10, 0x9, 0x5, 0xd, 0xce1, 0x1, 0xffffffff, 0x5, 0x7f, 0x6, 0xf3, 0x5, 0x6, 0x84b5, 0x80000000, 0xfffffff8, 0x2, 0xf1d, 0xe, 0x800, 0x0, 0xd1cd, 0x1, 0xa2, 0x5, 0x8, 0x9, 0x400, 0x3, 0x25, 0x57, 0x4, 0x2, 0x10001, 0x1, 0x9, 0x4, 0x9, 0x9, 0x57, 0x6c9, 0x5, 0x6, 0x4, 0x0, 0x7, 0x8, 0x5, 0x7, 0x4, 0xff, 0x401, 0xfffffffc, 0x3ff, 0x5, 0x2, 0xf, 0x2, 0x5, 0x8, 0x1, 0xab000000, 0xffffffff, 0x80, 0x6b, 0x2, 0x9, 0x5, 0x0, 0xd, 0x5, 0x40, 0x8, 0x400, 0x9, 0x7, 0x5, 0xd, 0x6, 0x2, 0x100, 0x1, 0x7, 0x100, 0x9, 0xfff, 0x7f, 0x2, 0x1d, 0x3, 0x6, 0x3, 0xfffffffc, 0x2, 0x8, 0xdaf, 0x6, 0x7fffffff, 0x1, 0x100, 0x2, 0xffffff23, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x54f5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xfffffff5, 0x200, 0x80000000, 0x8, 0x8, 0x9, 0x80000000, 0x6, 0x7, 0x8, 0x6, 0xa, 0x9, 0x5, 0xb, 0xa7, 0x7, 0x380d, 0x87ec, 0x0, 0x60000000, 0x5, 0x9, 0x7fffffff, 0x7, 0x10000, 0x1, 0x8, 0x208c0bc6, 0xb, 0x1, 0x2, 0x80, 0x8, 0x7fff, 0x4, 0x10, 0x7, 0x100, 0x8, 0xaab8, 0xfffffffb, 0x8, 0x2, 0x100, 0x7, 0x4, 0x6, 0x200, 0x5, 0x2b, 0x6, 0x1000, 0x13, 0x7, 0xc, 0x3, 0xfff, 0x10000000, 0x6, 0x7, 0x6, 0x7, 0x4, 0x2, 0xf50, 0xfffffff8, 0x1ff, 0x40, 0x7, 0x5, 0x9, 0x83e, 0x4, 0x9, 0x1ff, 0x0, 0x7f, 0xbf, 0xffffffff, 0x7, 0x8, 0x5, 0x0, 0x5, 0x5, 0x2, 0x0, 0xc, 0x3, 0x1, 0x400, 0x2, 0xa8d2, 0x5, 0x651, 0x0, 0x6, 0x8, 0x4, 0x3, 0x5, 0x9, 0x3, 0x9, 0x2, 0xc642, 0x0, 0x2, 0xc, 0x6, 0x3, 0xd, 0x7, 0x8b, 0xfffffff7, 0x6, 0xb, 0x2, 0x6, 0x2, 0x99ea, 0xfffffffa, 0xf1, 0x3, 0xf, 0xe92, 0x6b, 0x1, 0x4, 0x4, 0x8, 0xe, 0x9, 0x1, 0x10000, 0xfff, 0x0, 0x7ff, 0x2, 0x1, 0xe, 0xc, 0x2, 0x1, 0x0, 0xd99, 0x4f03, 0x1, 0xfffffffa, 0x0, 0x101, 0x0, 0x9, 0x80000000, 0x1, 0x81, 0x20000000, 0x4, 0x3ff, 0x2, 0x7fff, 0x9258, 0x9, 0x6, 0x7ff, 0x3, 0xa, 0x7, 0x7a, 0x4, 0x0, 0xcb0, 0x4, 0x401, 0x3, 0x2, 0xffff, 0x7, 0x9561, 0x7f, 0x8a, 0x5, 0xffffffff, 0x1, 0x200, 0x3, 0x1ffe0000, 0x0, 0x1, 0x1, 0x1, 0x7, 0x5, 0x3fecd0e4, 0x4, 0x5, 0x7, 0x4, 0xffff, 0x26c6, 0xd26b, 0x2, 0x2, 0x8, 0x5, 0x6, 0x9, 0x3, 0x7, 0x7819aa5b, 0x9, 0x4, 0x5, 0x4, 0x800, 0x5, 0x0, 0x1a, 0xc, 0x7fff, 0xfffffffa, 0x9, 0x0, 0x1, 0x80, 0x2, 0x100, 0x8926d9, 0x7, 0x81, 0x80000001, 0xc, 0x8000, 0x3, 0xb, 0x100, 0x4, 0x5, 0xfffffffe, 0x0, 0x3, 0x7f, 0x3, 0xfffffffa, 0x3fe00000, 0x2, 0xc33d, 0x5, 0x7, 0x7, 0x45870899, 0x3, 0x16, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x8, 0xfffffffa, 0x6, 0x8c5, 0x7fffffff, 0xffffff01, 0x80000000, 0x2, 0x8, 0x7, 0x6000000, 0xfffffff9, 0x80000000, 0x401, 0x5235, 0x8c8, 0x7ff, 0xeb2a, 0x9, 0x0, 0xd, 0x0, 0x0, 0xffff, 0x6, 0x4, 0x0, 0x7, 0x7, 0x7fb13dfd, 0x5, 0x6, 0x4, 0x2, 0x4353bd4c, 0x6, 0x101, 0x7, 0x0, 0x7, 0x5a, 0x7, 0x10000, 0x0, 0x4a1, 0x1, 0xfffffffd, 0x8, 0x1, 0x0, 0x1, 0x6, 0x3, 0x8, 0x2, 0xd, 0x7, 0x2, 0x3, 0x1, 0x9, 0x9, 0x3, 0xa7, 0xdf3, 0xaa2, 0x0, 0x3ff, 0x7, 0xf, 0xfff, 0x7, 0x5, 0x1, 0x2987, 0xd, 0x3cf, 0x0, 0x8, 0x8, 0x3ff, 0x7ff8, 0x51, 0x7, 0x7c, 0x0, 0x4, 0x5, 0x4, 0x4, 0x9, 0x2, 0x1b7732e, 0x3ff, 0x54, 0x4, 0x8, 0x6, 0x8, 0x6, 0x9c, 0x3, 0x8, 0x80000001, 0x2, 0x6, 0x3, 0x0, 0x9, 0x3, 0x5, 0x6, 0xfffffffe, 0x172e3da3, 0x5, 0x3, 0x4a7, 0xda, 0x9, 0x7, 0x73, 0x8, 0x1, 0xf463, 0x0, 0x5, 0x3, 0x80, 0x6, 0x1, 0xd, 0x5, 0x5, 0x8, 0x5, 0x57e0, 0xffffb2ec, 0x4, 0x7, 0x0, 0x3, 0x9, 0xfffffff7, 0x8, 0x1000, 0x5, 0x8d5, 0x4, 0x5, 0xf, 0x7, 0x9, 0x1, 0x3, 0x6, 0x1000, 0x3f7, 0xfff, 0x83c3, 0x0, 0x3, 0x0, 0x1, 0x4, 0x3, 0x40, 0x80000000, 0x73b3, 0x9, 0x0, 0x68, 0x10, 0x101, 0x1, 0xffff, 0x4b6, 0xff, 0x8, 0xe7, 0xf5, 0x7, 0x3, 0x8c, 0xaf, 0x9, 0x40, 0x10001, 0x8, 0x10, 0xb5, 0xc, 0x3, 0x10000, 0x2, 0x4, 0x2, 0x7, 0x4, 0x5, 0xf, 0x1442, 0x4fa, 0x1, 0x1, 0x6, 0xcd, 0x7, 0x1f6, 0x7ff, 0x9, 0x8, 0x1, 0x4, 0x6, 0x5, 0x7, 0xffff, 0x5, 0x81, 0x6, 0x1, 0x5, 0xfffffffc, 0x80000000, 0x80000001, 0x5, 0x20, 0x40, 0x4, 0x7, 0x1, 0xfffffff8, 0xc, 0x7, 0xa, 0xc8, 0x1, 0x902e, 0x800, 0x8, 0x7, 0x7fff, 0x8, 0x92, 0x7b53, 0x2, 0xa15, 0x6, 0x1, 0x5, 0x1, 0xd02, 0x0, 0x392b, 0x5]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x4, 0x7, 0xfffffffe, 0x923d, {0x9, 0x65786a5179f66c19, 0x2, 0x830, 0xbfc, 0x7}, {0x1, 0x1, 0x0, 0x738, 0x884, 0x8}, 0x1, 0x6, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xbaa, 0x2, 0x4, 0x8, 0xfffffff9, 0x1d, 0x32da, 0x200, 0x2, 0xfc5, 0xf9, 0x8, 0x0, 0x5, 0x1, 0x6, 0x2, 0xa000, 0x4, 0x80, 0x7403012a, 0xd7d3, 0x8001, 0x2, 0x5, 0xe, 0x4, 0x5, 0x6, 0x80, 0x3, 0x10000, 0x4, 0x1, 0x4, 0x4, 0x81, 0x7, 0xf, 0x1, 0x8, 0x7, 0x5db, 0x800, 0x9, 0x2, 0xc87, 0x800, 0x35bb, 0xd7, 0x1, 0x8, 0x4, 0x1, 0xc, 0xfffffffb, 0x0, 0x2c, 0x2, 0x7, 0xc8000000, 0x1, 0x80000000, 0x6, 0xa, 0x1, 0x800, 0x9, 0x6, 0xff, 0x400, 0x2, 0x9, 0x3, 0x1, 0x81, 0xfff, 0xa2, 0x1, 0x1, 0x7fffffff, 0x0, 0x6, 0x2, 0x6b, 0x7, 0x1, 0x3, 0x5, 0x0, 0xfffffffc, 0xae, 0x6, 0xffff0000, 0x10000, 0x62d, 0x9, 0x2, 0x80000000, 0x5, 0x800, 0xfffffffb, 0x7, 0x5, 0x3, 0x6, 0x401a, 0x9, 0x8, 0xff, 0x3, 0xbbe8, 0xfffff861, 0x6, 0x3, 0x6, 0x1a, 0x2, 0x1000, 0x4, 0x8, 0xad8, 0x9, 0x4, 0x3, 0x38ba7eb1, 0x9, 0x101, 0xd, 0x4372, 0x6, 0x2, 0x3ff, 0xacb, 0x7, 0x4, 0x9, 0x8, 0x5, 0x0, 0x4, 0x9, 0x2, 0x1, 0x600, 0x8, 0x5, 0x100007, 0x8, 0x10000, 0x8, 0x0, 0x2, 0x2, 0x7, 0x1, 0x5, 0x1, 0x400, 0x10, 0x3, 0x200, 0x10001, 0x800, 0x80, 0x0, 0x9, 0x6, 0x9, 0x6, 0x0, 0x8183, 0x1, 0x7, 0xfffffffe, 0x401, 0x400, 0x40, 0x7f7, 0x6, 0x4, 0x80000000, 0xfffffff7, 0xffffc30a, 0xc2, 0x5, 0x88, 0xf0, 0x2, 0x0, 0x5, 0x2, 0x8, 0x10000, 0x80000000, 0xab, 0x4, 0x3, 0x8e1, 0xd, 0x2, 0xfffeffff, 0x1, 0x5957, 0x2, 0xfffffffa, 0x2, 0x91, 0x3, 0xf7f7, 0xa1, 0xd07b, 0x24a, 0x4, 0x5, 0x101, 0xa7c, 0x5, 0x3, 0x9, 0x9, 0x200, 0x6, 0x2, 0x3ff, 0x7, 0x9, 0x9, 0x0, 0x400, 0x2, 0x0, 0x0, 0x7, 0x90, 0x3, 0x6, 0x49c, 0x0, 0x5, 0x40, 0x7, 0x2952, 0x7ff, 0xf9, 0x4, 0x5, 0x6, 0x10000000, 0x5, 0x3, 0x0, 0x4, 0x8, 0x9, 0x7]}]]}, {0x6c, 0x6, "1d105aa302e7184b10eff9f461ff9a6e0cf985cfa7f7e29553b2d826de57e6b6e5426ad5aa8d658ba344556b28f8844a363020ec246df173a7918f0ac97e9bd6364759419b948dd928f39076fc32ee8a9543e15c4628dc4d4755334561939d09c51ff39550788ab8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x80, 0x13, 0x0, 0x0, {{0xd}, {0x4}, {0x4d, 0x6, "43f5874acecd91534aa07589857a0d4e1332a634f67b076cc6590026ffc708aa2a8bf780a6a0bc9d3526042b089dd1f151fe5e3fc7a09e12ef3148f815f8861705eb07b0c121e33cd5"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x1e9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="00000200", @ANYRES16=r11, @ANYBLOB="11072abd7000fcdbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xe}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip_vti0\x00', 0x0}) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012bbd7000ffdbdf2501000000040002800400030004000300040000040003000400030004000300"], 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 2m37.305352359s ago: executing program 5 (id=2306): sendmmsg(0xffffffffffffffff, &(0x7f0000001fc0), 0x0, 0x24044015) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x6c00}, 0x0) r1 = accept4(r0, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000240)=0x80, 0x800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000008c0)={0x84, @dev={0xac, 0x14, 0x14, 0x3f}, 0x4e22, 0x1, 'sed\x00', 0x2, 0x10001, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'none\x00', 0x9, 0x821}, 0x2c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x1aa4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x7, 0x5}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1a70, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0xb}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0x3}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0x2}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xb}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_ACT={0x1a34, 0x2, [@m_police={0x19b0, 0x6, 0x0, 0x0, {{0xb}, {0x191c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x8, 0x2000000, 0x3, 0x9767, 0xd, 0x8000, 0x4, 0xe3a4, 0x7ff, 0x4, 0x2, 0x8, 0x9, 0x9, 0xa, 0x2, 0xfff, 0x85e, 0x2, 0x80000001, 0x3, 0x8001, 0x6, 0x101, 0x5, 0x0, 0x2, 0x9, 0x5, 0x400, 0xfffffff7, 0x3, 0x7, 0x1, 0x4, 0x1, 0x5, 0x5, 0x0, 0x827b, 0xffffcec8, 0x4, 0x80000001, 0x3, 0x800, 0x4710, 0x2, 0x4, 0x6, 0xffff, 0x5, 0x1, 0x9, 0x1, 0x7, 0x2, 0x4, 0x7fff, 0x8, 0x0, 0x7, 0x3, 0x97, 0xfffffffb, 0x400, 0xa42a, 0xfffffbff, 0x3fe9, 0x5dfa, 0xa, 0x746, 0x8001, 0x9, 0x8, 0x7, 0xa, 0x77a, 0xc828, 0x5c, 0x0, 0x2, 0x2, 0x7, 0x7ff, 0x0, 0x7fff, 0x1ff, 0x4, 0x3, 0x7f, 0x4, 0xfffffff8, 0x7, 0x7, 0xfffffe01, 0x3, 0x2, 0xffffffff, 0x4c, 0x80000000, 0x8, 0x7, 0x7, 0x0, 0x7fffffff, 0x1, 0x4, 0x81, 0x1, 0x80000001, 0x7f, 0x0, 0x84, 0x0, 0x2, 0x51a8, 0x881, 0x6, 0x4, 0x7, 0x2, 0x7, 0xfffff0d5, 0x6, 0x4, 0x3, 0x80000001, 0x7, 0x700000, 0x3, 0x1, 0x87, 0xffe, 0x5, 0x7e, 0xc61, 0x4, 0x7, 0x0, 0x7f, 0x2, 0xff, 0x46, 0x7, 0x5, 0x6, 0x2, 0x5, 0xc887, 0x4, 0x6, 0x2, 0x8fe, 0x55ba, 0x7fffffff, 0x7fffffff, 0x5, 0x6, 0x401, 0x8, 0x2, 0x4, 0x8, 0x7fffffff, 0x7, 0x4, 0xffffffff, 0xfffff801, 0x3, 0x9, 0x7, 0xe5f, 0x1, 0x114, 0x5, 0x8, 0x7, 0x84, 0x80, 0x1, 0x2, 0x7fffffff, 0x0, 0x7a9, 0x4, 0xe, 0x4a, 0x5c, 0x8, 0x401, 0x8, 0xfffffe00, 0x6, 0x6, 0x0, 0x5, 0x9, 0x6, 0x7, 0x3, 0xb, 0x80, 0x8, 0x5, 0xfffffff7, 0x1, 0x3, 0x1, 0x4, 0x1, 0x8, 0x10001, 0x6, 0x101, 0x7, 0x100, 0x4, 0x0, 0x9, 0x7, 0x7fffffff, 0x0, 0x0, 0x1, 0x6e, 0x4ef73afd, 0xffff, 0x8, 0x7, 0x2, 0xae9, 0x1, 0x0, 0x5, 0xfff, 0x2, 0x1, 0xc782, 0x81, 0x1, 0x1000000, 0x3, 0x0, 0x7d9c, 0x8, 0x80000001, 0x7ff, 0x3, 0x7, 0x2, 0x80000000, 0x8, 0x3, 0x6, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x12}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x0, 0xc0000000, 0x81, 0xfffffffd, {0x7, 0x1, 0x0, 0x82e4, 0x401, 0x4}, {0x44, 0x2, 0x122c, 0x81, 0xfff8, 0x9}, 0x80000001, 0xff, 0xc}}], [], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x4, 0x9, 0x10, 0x4, 0x8, 0x9, 0x40, 0x8, 0x2, 0x8, 0xb, 0xe0, 0x6, 0xffff3ff7, 0x80000, 0x6, 0xc, 0x879, 0xd7, 0x7fff, 0x7, 0x0, 0x8, 0x1729, 0x8, 0x5, 0xff, 0x8341, 0x7ff, 0x40, 0x200, 0x4, 0x6, 0x8, 0xfffffff9, 0xd, 0x80000002, 0x7, 0xffffffff, 0x9, 0x10000, 0x3, 0x800, 0xa6, 0x8, 0x0, 0x7, 0x5, 0x0, 0xd6, 0x1000, 0x3, 0x7, 0x5, 0x7, 0x2, 0x5, 0x9, 0x6, 0x200, 0x80000001, 0x2, 0x8001, 0x7, 0x5, 0x1, 0x2, 0xffffffe4, 0x4, 0x4, 0x4e92a1d5, 0xe, 0xffff, 0x23, 0x0, 0x7, 0x81, 0x2, 0x4, 0xdd, 0x2d, 0x7, 0xf1f6, 0x9, 0x5, 0x1, 0xffff, 0x3, 0xaff1, 0xb00000, 0x7, 0x8, 0x2b, 0x1, 0x3, 0x1ff, 0x1, 0x7, 0x1, 0x4, 0x2, 0x2, 0x2, 0x2, 0x3, 0x6, 0x8, 0x3, 0x9, 0x284ae85e, 0x7, 0x3, 0x0, 0x10000000, 0x3, 0x8, 0x8001, 0x7, 0x77, 0xc, 0xfe0, 0x800, 0x6, 0x5, 0x6, 0x90b, 0x5, 0x434e, 0x7, 0x1000, 0x2, 0x40, 0x8, 0x1, 0x4, 0x2, 0x1, 0x7db, 0x1, 0x7fff, 0xfff, 0x0, 0x8, 0xa, 0x0, 0xd7, 0x80d0, 0x0, 0x8424, 0x1, 0x8, 0x9, 0x7, 0x40, 0x3, 0xc577, 0x0, 0x0, 0x1, 0x1, 0x172, 0x1000, 0x6, 0x0, 0x5, 0x22, 0x2, 0x8, 0xfffffff9, 0x4, 0xb5e, 0x5, 0x0, 0x1, 0x200, 0x800, 0x2b, 0x87c0, 0x9, 0x3, 0x80000000, 0x1, 0x6, 0x7, 0x7fffffff, 0xffff8001, 0x8, 0x0, 0x10, 0x9, 0x7ff, 0x6, 0xfff, 0x401, 0x3, 0x4, 0x95, 0x8, 0x10000, 0x3, 0x2, 0xfffffffa, 0x100, 0x0, 0x1, 0x2, 0xffffffff, 0x800, 0x51d, 0x8, 0x7, 0x400, 0x5, 0x69d0, 0x5, 0xdea, 0x1, 0x94c4, 0x3dbc, 0x1ff, 0x8001, 0x118, 0x2, 0x2d2d, 0x7ff, 0x81, 0x7, 0xb49, 0x81, 0x9, 0x5, 0x2, 0x1, 0x1, 0xa, 0xffff, 0xffff54a2, 0xa, 0xe757, 0x6, 0x7, 0x208, 0x68a669c, 0xffffffff, 0xffffffff, 0x9, 0x0, 0x7ff, 0x401, 0x5, 0x6, 0x4, 0x20000, 0xfffffff1, 0xfffffffc]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x7, 0x232, 0x3, 0x2, 0x40, 0xff, 0x0, 0xc0000000, 0x1, 0x5, 0x80000001, 0x19e, 0x2, 0x40000000, 0x1, 0x9, 0xf9, 0x80000000, 0xd, 0x4, 0x4, 0x400, 0x7, 0x5, 0x306, 0x1, 0x99, 0x4, 0x3, 0xffff0000, 0x22, 0x9, 0xf, 0x8000, 0x7, 0x2, 0x1, 0xb, 0x7, 0x710e, 0x2, 0xca, 0x9, 0xffffffc1, 0x1, 0xac, 0x5, 0xfff, 0x9, 0x3, 0xf3c3, 0x9, 0x1, 0x1, 0x7, 0x4, 0x8, 0x7, 0x9, 0xffff0a47, 0x4, 0x8, 0x1, 0x4, 0x8, 0xb5, 0xee67, 0x0, 0x1b, 0x1, 0xfffffff2, 0x3, 0x0, 0x69f, 0x4, 0x4, 0xc0, 0x1, 0x2, 0x2, 0x5, 0xffffffff, 0x3, 0x4, 0x2, 0x20000000, 0x9, 0x40, 0x5, 0x3, 0x3, 0x8d, 0xfffffffb, 0x8, 0x8, 0x3ff, 0x3e0, 0x5, 0x10000, 0x7, 0x81, 0xfffffffd, 0xff, 0xfffffffd, 0x9, 0x2, 0x3, 0xfffffff9, 0x0, 0x5, 0x0, 0x1000, 0x3, 0x4, 0x2b6c, 0x8, 0x4, 0x8, 0x2, 0x2, 0x8, 0x7c4, 0xfffffff8, 0x5, 0x800, 0x7f, 0xd, 0x3887, 0x5, 0x200, 0x1, 0x661, 0x2, 0x10001, 0x2, 0x1, 0xa4, 0x1000, 0x0, 0x3, 0x8001, 0x6000, 0x152a, 0x34b, 0xffff8000, 0x6, 0xfffffffe, 0xc5f, 0x90b5, 0x9, 0x69, 0x10, 0x9, 0x5, 0xd, 0xce1, 0x1, 0xffffffff, 0x5, 0x7f, 0x6, 0xf3, 0x5, 0x6, 0x84b5, 0x80000000, 0xfffffff8, 0x2, 0xf1d, 0xe, 0x800, 0x0, 0xd1cd, 0x1, 0xa2, 0x5, 0x8, 0x9, 0x400, 0x3, 0x25, 0x57, 0x4, 0x2, 0x10001, 0x1, 0x9, 0x4, 0x9, 0x9, 0x57, 0x6c9, 0x5, 0x6, 0x4, 0x0, 0x7, 0x8, 0x5, 0x7, 0x4, 0xff, 0x401, 0xfffffffc, 0x3ff, 0x5, 0x2, 0xf, 0x2, 0x5, 0x8, 0x1, 0xab000000, 0xffffffff, 0x80, 0x6b, 0x2, 0x9, 0x5, 0x0, 0xd, 0x5, 0x40, 0x8, 0x400, 0x9, 0x7, 0x5, 0xd, 0x6, 0x2, 0x100, 0x1, 0x7, 0x100, 0x9, 0xfff, 0x7f, 0x2, 0x1d, 0x3, 0x6, 0x3, 0xfffffffc, 0x2, 0x8, 0xdaf, 0x6, 0x7fffffff, 0x1, 0x100, 0x2, 0xffffff23, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x54f5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xfffffff5, 0x200, 0x80000000, 0x8, 0x8, 0x9, 0x80000000, 0x6, 0x7, 0x8, 0x6, 0xa, 0x9, 0x5, 0xb, 0xa7, 0x7, 0x380d, 0x87ec, 0x0, 0x60000000, 0x5, 0x9, 0x7fffffff, 0x7, 0x10000, 0x1, 0x8, 0x208c0bc6, 0xb, 0x1, 0x2, 0x80, 0x8, 0x7fff, 0x4, 0x10, 0x7, 0x100, 0x8, 0xaab8, 0xfffffffb, 0x8, 0x2, 0x100, 0x7, 0x4, 0x6, 0x200, 0x5, 0x2b, 0x6, 0x1000, 0x13, 0x7, 0xc, 0x3, 0xfff, 0x10000000, 0x6, 0x7, 0x6, 0x7, 0x4, 0x2, 0xf50, 0xfffffff8, 0x1ff, 0x40, 0x7, 0x5, 0x9, 0x83e, 0x4, 0x9, 0x1ff, 0x0, 0x7f, 0xbf, 0xffffffff, 0x7, 0x8, 0x5, 0x0, 0x5, 0x5, 0x2, 0x0, 0xc, 0x3, 0x1, 0x400, 0x2, 0xa8d2, 0x5, 0x651, 0x0, 0x6, 0x8, 0x4, 0x3, 0x5, 0x9, 0x3, 0x9, 0x2, 0xc642, 0x0, 0x2, 0xc, 0x6, 0x3, 0xd, 0x7, 0x8b, 0xfffffff7, 0x6, 0xb, 0x2, 0x6, 0x2, 0x99ea, 0xfffffffa, 0xf1, 0x3, 0xf, 0xe92, 0x6b, 0x1, 0x4, 0x4, 0x8, 0xe, 0x9, 0x1, 0x10000, 0xfff, 0x0, 0x7ff, 0x2, 0x1, 0xe, 0xc, 0x2, 0x1, 0x0, 0xd99, 0x4f03, 0x1, 0xfffffffa, 0x0, 0x101, 0x0, 0x9, 0x80000000, 0x1, 0x81, 0x20000000, 0x4, 0x3ff, 0x2, 0x7fff, 0x9258, 0x9, 0x6, 0x7ff, 0x3, 0xa, 0x7, 0x7a, 0x4, 0x0, 0xcb0, 0x4, 0x401, 0x3, 0x2, 0xffff, 0x7, 0x9561, 0x7f, 0x8a, 0x5, 0xffffffff, 0x1, 0x200, 0x3, 0x1ffe0000, 0x0, 0x1, 0x1, 0x1, 0x7, 0x5, 0x3fecd0e4, 0x4, 0x5, 0x7, 0x4, 0xffff, 0x26c6, 0xd26b, 0x2, 0x2, 0x8, 0x5, 0x6, 0x9, 0x3, 0x7, 0x7819aa5b, 0x9, 0x4, 0x5, 0x4, 0x800, 0x5, 0x0, 0x1a, 0xc, 0x7fff, 0xfffffffa, 0x9, 0x0, 0x1, 0x80, 0x2, 0x100, 0x8926d9, 0x7, 0x81, 0x80000001, 0xc, 0x8000, 0x3, 0xb, 0x100, 0x4, 0x5, 0xfffffffe, 0x0, 0x3, 0x7f, 0x3, 0xfffffffa, 0x3fe00000, 0x2, 0xc33d, 0x5, 0x7, 0x7, 0x45870899, 0x3, 0x16, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x8, 0xfffffffa, 0x6, 0x8c5, 0x7fffffff, 0xffffff01, 0x80000000, 0x2, 0x8, 0x7, 0x6000000, 0xfffffff9, 0x80000000, 0x401, 0x5235, 0x8c8, 0x7ff, 0xeb2a, 0x9, 0x0, 0xd, 0x0, 0x0, 0xffff, 0x6, 0x4, 0x0, 0x7, 0x7, 0x7fb13dfd, 0x5, 0x6, 0x4, 0x2, 0x4353bd4c, 0x6, 0x101, 0x7, 0x0, 0x7, 0x5a, 0x7, 0x10000, 0x0, 0x4a1, 0x1, 0xfffffffd, 0x8, 0x1, 0x0, 0x1, 0x6, 0x3, 0x8, 0x2, 0xd, 0x7, 0x2, 0x3, 0x1, 0x9, 0x9, 0x3, 0xa7, 0xdf3, 0xaa2, 0x0, 0x3ff, 0x7, 0xf, 0xfff, 0x7, 0x5, 0x1, 0x2987, 0xd, 0x3cf, 0x0, 0x8, 0x8, 0x3ff, 0x7ff8, 0x51, 0x7, 0x7c, 0x0, 0x4, 0x5, 0x4, 0x4, 0x9, 0x2, 0x1b7732e, 0x3ff, 0x54, 0x4, 0x8, 0x6, 0x8, 0x6, 0x9c, 0x3, 0x8, 0x80000001, 0x2, 0x6, 0x3, 0x0, 0x9, 0x3, 0x5, 0x6, 0xfffffffe, 0x172e3da3, 0x5, 0x3, 0x4a7, 0xda, 0x9, 0x7, 0x73, 0x8, 0x1, 0xf463, 0x0, 0x5, 0x3, 0x80, 0x6, 0x1, 0xd, 0x5, 0x5, 0x8, 0x5, 0x57e0, 0xffffb2ec, 0x4, 0x7, 0x0, 0x3, 0x9, 0xfffffff7, 0x8, 0x1000, 0x5, 0x8d5, 0x4, 0x5, 0xf, 0x7, 0x9, 0x1, 0x3, 0x6, 0x1000, 0x3f7, 0xfff, 0x83c3, 0x0, 0x3, 0x0, 0x1, 0x4, 0x3, 0x40, 0x80000000, 0x73b3, 0x9, 0x0, 0x68, 0x10, 0x101, 0x1, 0xffff, 0x4b6, 0xff, 0x8, 0xe7, 0xf5, 0x7, 0x3, 0x8c, 0xaf, 0x9, 0x40, 0x10001, 0x8, 0x10, 0xb5, 0xc, 0x3, 0x10000, 0x2, 0x4, 0x2, 0x7, 0x4, 0x5, 0xf, 0x1442, 0x4fa, 0x1, 0x1, 0x6, 0xcd, 0x7, 0x1f6, 0x7ff, 0x9, 0x8, 0x1, 0x4, 0x6, 0x5, 0x7, 0xffff, 0x5, 0x81, 0x6, 0x1, 0x5, 0xfffffffc, 0x80000000, 0x80000001, 0x5, 0x20, 0x40, 0x4, 0x7, 0x1, 0xfffffff8, 0xc, 0x7, 0xa, 0xc8, 0x1, 0x902e, 0x800, 0x8, 0x7, 0x7fff, 0x8, 0x92, 0x7b53, 0x2, 0xa15, 0x6, 0x1, 0x5, 0x1, 0xd02, 0x0, 0x392b, 0x5]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x4, 0x7, 0xfffffffe, 0x923d, {0x9, 0x65786a5179f66c19, 0x2, 0x830, 0xbfc, 0x7}, {0x1, 0x1, 0x0, 0x738, 0x884, 0x8}, 0x1, 0x6, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xbaa, 0x2, 0x4, 0x8, 0xfffffff9, 0x1d, 0x32da, 0x200, 0x2, 0xfc5, 0xf9, 0x8, 0x0, 0x5, 0x1, 0x6, 0x2, 0xa000, 0x4, 0x80, 0x7403012a, 0xd7d3, 0x8001, 0x2, 0x5, 0xe, 0x4, 0x5, 0x6, 0x80, 0x3, 0x10000, 0x4, 0x1, 0x4, 0x4, 0x81, 0x7, 0xf, 0x1, 0x8, 0x7, 0x5db, 0x800, 0x9, 0x2, 0xc87, 0x800, 0x35bb, 0xd7, 0x1, 0x8, 0x4, 0x1, 0xc, 0xfffffffb, 0x0, 0x2c, 0x2, 0x7, 0xc8000000, 0x1, 0x80000000, 0x6, 0xa, 0x1, 0x800, 0x9, 0x6, 0xff, 0x400, 0x2, 0x9, 0x3, 0x1, 0x81, 0xfff, 0xa2, 0x1, 0x1, 0x7fffffff, 0x0, 0x6, 0x2, 0x6b, 0x7, 0x1, 0x3, 0x5, 0x0, 0xfffffffc, 0xae, 0x6, 0xffff0000, 0x10000, 0x62d, 0x9, 0x2, 0x80000000, 0x5, 0x800, 0xfffffffb, 0x7, 0x5, 0x3, 0x6, 0x401a, 0x9, 0x8, 0xff, 0x3, 0xbbe8, 0xfffff861, 0x6, 0x3, 0x6, 0x1a, 0x2, 0x1000, 0x4, 0x8, 0xad8, 0x9, 0x4, 0x3, 0x38ba7eb1, 0x9, 0x101, 0xd, 0x4372, 0x6, 0x2, 0x3ff, 0xacb, 0x7, 0x4, 0x9, 0x8, 0x5, 0x0, 0x4, 0x9, 0x2, 0x1, 0x600, 0x8, 0x5, 0x100007, 0x8, 0x10000, 0x8, 0x0, 0x2, 0x2, 0x7, 0x1, 0x5, 0x1, 0x400, 0x10, 0x3, 0x200, 0x10001, 0x800, 0x80, 0x0, 0x9, 0x6, 0x9, 0x6, 0x0, 0x8183, 0x1, 0x7, 0xfffffffe, 0x401, 0x400, 0x40, 0x7f7, 0x6, 0x4, 0x80000000, 0xfffffff7, 0xffffc30a, 0xc2, 0x5, 0x88, 0xf0, 0x2, 0x0, 0x5, 0x2, 0x8, 0x10000, 0x80000000, 0xab, 0x4, 0x3, 0x8e1, 0xd, 0x2, 0xfffeffff, 0x1, 0x5957, 0x2, 0xfffffffa, 0x2, 0x91, 0x3, 0xf7f7, 0xa1, 0xd07b, 0x24a, 0x4, 0x5, 0x101, 0xa7c, 0x5, 0x3, 0x9, 0x9, 0x200, 0x6, 0x2, 0x3ff, 0x7, 0x9, 0x9, 0x0, 0x400, 0x2, 0x0, 0x0, 0x7, 0x90, 0x3, 0x6, 0x49c, 0x0, 0x5, 0x40, 0x7, 0x2952, 0x7ff, 0xf9, 0x4, 0x5, 0x6, 0x10000000, 0x5, 0x3, 0x0, 0x4, 0x8, 0x9, 0x7]}]]}, {0x6c, 0x6, "1d105aa302e7184b10eff9f461ff9a6e0cf985cfa7f7e29553b2d826de57e6b6e5426ad5aa8d658ba344556b28f8844a363020ec246df173a7918f0ac97e9bd6364759419b948dd928f39076fc32ee8a9543e15c4628dc4d4755334561939d09c51ff39550788ab8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x80, 0x13, 0x0, 0x0, {{0xd}, {0x4}, {0x4d, 0x6, "43f5874acecd91534aa07589857a0d4e1332a634f67b076cc6590026ffc708aa2a8bf780a6a0bc9d3526042b089dd1f151fe5e3fc7a09e12ef3148f815f8861705eb07b0c121e33cd5"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x1aa4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="00000200", @ANYRES16=r11, @ANYBLOB="11072abd7000fcdbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xe}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip_vti0\x00', 0x0}) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012bbd7000ffdbdf2501000000040002800400030004000300040000040003000400030004000300"], 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 2m36.990196079s ago: executing program 5 (id=2312): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = socket(0xa, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000700)={0x1, @bcast, @bpq0, 0x4, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x9, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x68, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010102}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x68}, 0x1, 0x0, 0x0, 0x404c054}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000000000020000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b5020000000000008500000086000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000000700000085000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1006}, 0x94) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f00000002c0)={'veth0\x00', 0x9}) 2m36.796392358s ago: executing program 5 (id=2314): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @loopback}], 0x20) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 2m21.790929758s ago: executing program 33 (id=2314): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @loopback}], 0x20) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 1m2.335970097s ago: executing program 6 (id=2998): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="500400001e0001002dbd7000fb0400000000fe"], 0x450}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) socket(0x10, 0x803, 0x0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r4, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r3, r3, 0x2e, 0x0, 0x0, @void, @value=r2}, 0x20) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 1m2.076275881s ago: executing program 6 (id=3002): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xd, 0x8, 0xc, 0x84000000, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f18e55afb9fdd672bad09dd4a7ccd2dfa8237788bb71f36b177a8074e891a0c708000200544545000900020073d4b5e1fc000000140000001100010000000000000000000100000a0000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) unshare(0x2a020400) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r4) sendmsg$FOU_CMD_GET(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x40, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x4080) write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r7, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x6, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000400)={0x8000000000000001, {0x10, 0x7, 0x8000000000000001, 0x0, 0x8}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1m1.756125649s ago: executing program 6 (id=3005): getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000001080)={0xb, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x30) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000014000100000000000000fd2929bf64daedcfeb488e63463d8554add1da6e87f783980a4d1634c6450559443c29240956451306cf000000000000000000000000a92d8bb70312fc00dc4b019eb585f36dba3b"], 0x44}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffd31, &(0x7f0000000300), 0x18}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0x80000001, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x6, 0x9, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f80)=[{{&(0x7f0000000300)={0x2, 0x4e2c, @rand_addr=0x64410101}, 0x10, &(0x7f0000000900)=[{&(0x7f00000006c0)="e515060086d2a14bb3df23022f691041e43bf59e75cd3683b6d992b3ff32d3b9bf9865106fbf227e28541ff541dafc58c257286065f80c26ff201170dbe18af9e2a85091bc230fa46d4f93be70f0173d04e5a703bedf4abee74fefea5034607b7468d0329fdfd42da870741acba24d5cd6eb33348620130dc8", 0x79}, {&(0x7f0000000640)="e19061ccb4ecb1638f65f0b354b1a4e232af20bc955838e6c7b234629e9c518676fad3e1082f664a1990aa4408", 0x2d}, {&(0x7f0000000740)="c8340bd99b677b9dfad43ce416b0944010776af60ad42b1e1b5d850059470eee57da0f9ae8340b2e9ac6c52fefad669cd6e998b0056d4658b9ed74c5e7de825e21e275bf88f1da5a28bba81697ce62f731cee34ee7623b5999580d11064e08598ceaa69b0be20892625ed1e43a5eccad147f6d685975f1f7b3cd0db612aee4398ad2d353c249555eadd36ab06ca31bb7c7487933f38d4144640e4071", 0x9c}, {&(0x7f00000010c0)="e8d7d9635ab67231647c65e825caa6c43bd939bc0addb31b9d194318cdac9ce05d3bdfa0f3ba48725f67c2f246626bb7ba46f883d4ff2e7d4e5a2fc6f4405dde9565ae9ad9f6e00c3f90b9", 0x4b}, {&(0x7f00000008c0)="73af319d8c", 0x5}], 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="d80000000000000000000000070000000094040100008636ffffffff020369050f2eda3a44fb35ee675c94885e910608ec3a56e1249a060432f9011285a196ddffd2b8933923f7552c95785e0703ee862500000000070ba04faf29649738d2f6060b0e12bbceb1dbee3ed30509cfe355f322cd1994040100861000000003070a26cb0c781e9cf802442c24910a010101000000020000000000000007ffffffff00000008e000000100000005ffffffff00000009832338ac1414aaac1414bbe00000017f000001e0000002ac1414aaac1414bbac1414aa00", @ANYBLOB="a03f20d9abff9e938c3bb40f4e008df47a0e2668369ee0453f1c393df935675e07faf3a32c9295b47e3ebcb9b4c9e2658ba0686c46067973a89a0c94061870ede8b18bf1bc04f941b335b1f9c45b65cff28ac8f99f4e3ac36be264c2ff3487b7b63de8dc9cb764ac15e5444e356b3681e90ccce29cb1fe968d47a9953f44b7", @ANYRESHEX=r1, @ANYRES16=r0], 0xd8}}, {{&(0x7f0000000a80)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000ac0)="b5c9ac1dbe6c2e1f2a51ff34b26f621ae2863e0f37b1e20694c1713088aa040c64", 0x21}, {&(0x7f0000000cc0)="37c0f84eee480dc2131b49ecf655127ee950adc244f55a9ddf3813d4bb838e5e9aae69a7665c0a7a80b497d64366a9c6434aeb493e7d2c199dc85d956962820f1e6de2154440b4457e44a8ac6edeab030fe7bbad3429bddf46c14e5424cf8597e94ca8d980fda18855dbaa45d2c64e777dcd89d1c9b80aab9cc44f4c588dc3c39e2d72d48ecd559f63cc56ed0a04850b6224a6d12badfe51e544399ac0ed5d2b794fd4150801ebfad19bbd741352d41638ca055d7806d97c8b78dab263635ba9e27e06b48a3aadbeb73a28410e76", 0xce}, {&(0x7f0000000dc0)="6cf3f188d8877c613ba693da4b5fefb3aaed2f4bc528972dd40a59ddc0a75f385c857238f8fd9b1410ab41bbd64087819718a4f8db23dce843f0fc8f391ed44c861b2715e2896ba1a981f786cf4bf38b28e167455efbcd4d10d6a07cf29af7ceda8ffdbf4b1f8f8b6636a2a0e9", 0x6d}], 0x3, &(0x7f0000000e80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x200}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_ttl={{0x14, 0x0, 0x2, 0x361}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffa}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffff1a}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0xd8}}], 0x2, 0x90) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="819b00"/14], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)=ANY=[@ANYBLOB="3400000010000108000000040000a8ed35262ef200000000030068899d37221155f8cb7c398c0aa7c7e3f02ace2dd500000000", @ANYRES32=0x0, @ANYBLOB="31200000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000008000641100fe80000000f0ffffffffffffff0000bbff02000000000000000000000000000100004e22004d9078020000000000000000000000eaf12af8010d4894322fd8f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb201f3a70a41ef6c2fca06a9bd768d5f176c198150020000000000000000010009514b06796dbf2ea9e520f1475c8f65b13efcfbfc9b1d0e5c58b4be6608c9608e393ff14c36c9c3390f375043be439a02b275fa5b79c00e7ae925b94dcc6a70a1afb34cb5cb991a40a2f23"], 0x0) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x1, 0x1, 0x4000}, 0x20) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b04, &(0x7f0000000200)={'wlan1\x00'}) 1m0.741212973s ago: executing program 6 (id=3009): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x20) 1m0.463961608s ago: executing program 6 (id=3010): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) socket$inet6(0xa, 0x803, 0x81) (async) r1 = socket$inet6(0xa, 0x803, 0x81) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010100, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa}, {0x0, 0x7, 0x0, 0x6, 0xffffffffffffffff, 0x7, 0x0, 0x40000000000000}, {0x9, 0x5f94c303, 0x53e5, 0x20}, 0xfffffff7, 0x1, 0x1, 0x0, 0x3, 0x2}, {{@in=@loopback, 0x1, 0x32}, 0x2, @in6=@local, 0x1502, 0x4, 0x3, 0x0, 0xc36, 0x101}}, 0xe8) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @loopback, 0xfffffffd}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @loopback, 0xfffffffd}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00', 0x0, 0x0, 0x6f}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00', 0x0, 0x0, 0x6f}, 0x2c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) (async) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='+cpu'], 0x5) r6 = openat$cgroup_int(r3, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) openat$cgroup_int(r3, &(0x7f0000000040)='cpu.weight\x00', 0x2, 0x0) (async) openat$cgroup_int(r3, &(0x7f0000000040)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000600)=ANY=[@ANYBLOB='-cpu'], 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="0000000000000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x20, 0x6, 0x1, @rand_addr=' \x01\x00', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@sack={0x5, 0xa, [0xc3, 0x5]}]}}}}}}}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) (async) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000000240)={0x1, 0x7}) accept4(r7, 0x0, 0x0, 0x80800) (async) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000003780)=[{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)="a6", 0x1}], 0x1, &(0x7f0000001b00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x200008c0}], 0x1, 0x44840) recvmsg$can_j1939(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/128, 0x80}], 0x1}, 0x1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="400000001300010028bd7000f8dbdf2508003300", @ANYRES32=r9, @ANYBLOB="04004a802000258008002e800400920014001c"], 0x40}], 0x1, 0x0, 0x0, 0x8811}, 0x8880) 1m0.318670749s ago: executing program 6 (id=3011): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 44.800080481s ago: executing program 34 (id=3011): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 5.627285813s ago: executing program 2 (id=3440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x44, 0x0, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4040) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @broadcast}, {0x1, @remote}, 0x1c, {0x2, 0x0, @multicast1}}) getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000080)={@local, @loopback, @loopback}, &(0x7f00000000c0)=0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100ac1e000108000200ac1414e80c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e01010800020000000000080007400000000024000e801400018008000100ac14142a08000200ac1414380c0002"], 0x88}}, 0x0) 5.430255928s ago: executing program 2 (id=3442): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="80fd05000000", 0x6}], 0x1, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ppoll(&(0x7f0000000100)=[{r1, 0x8000}], 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006300e0ff0000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xb9, &(0x7f00000002c0)=""/185, 0x0, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa1}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x18, 0x42, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') unshare(0x6a040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x14, r4, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf5}, 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) close(0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) socket$packet(0x11, 0x3, 0x300) 3.75275504s ago: executing program 0 (id=3454): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xac, 0x1, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffff}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffc00}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x401}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_BYTES={0xc}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x100}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xdac}]}, 0xac}, 0x1, 0x0, 0x0, 0x2}, 0x40) r2 = socket(0x15, 0x5, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x10001, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000700000000060015000400000014001680100008800c0002c0"], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llx, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x44}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'wg1\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0xff, 0xfd, 0x5, 0x4, 0x2, 0x4, 0x28, 0x1, 0x3, [0x1, 0x6, 0x2, 0x200, 0x81, 0x8001, 0x5]}}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000b00)={0xb4, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x7c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_VALUE={0x5e, 0x4, "5d5b405df35d91860ebd78ce69147c01ed27c788172fca4c0c7d5354c05dfc1f196a8b47f5261f145e95744aad707dc19625d5e10f518c51c5205943a2edab927cc675e0406de157545d32d9b403a731990dad7ed2f309ea864f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}]}, 0xb4}}, 0x4040004) sendmmsg$inet(r0, &(0x7f0000005200), 0x0, 0x0) 3.563357735s ago: executing program 1 (id=3456): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00.'], 0x34}], 0x1}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x0, {0x9, 0x6, 0x10, 0x3800000, 0x9}}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000081000010400"/20, @ANYRES32=0x0, @ANYRESOCT=r2, @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) 3.364898068s ago: executing program 1 (id=3458): getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000001080)={0xb, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x30) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000014000100000000000000fd2929bf64daedcfeb488e63463d8554add1da6e87f783980a4d1634c6450559443c29240956451306cf000000000000000000000000a92d8bb70312fc00dc4b019eb585f36dba3b"], 0x44}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffd31, &(0x7f0000000300), 0x18}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0x80000001, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x6, 0x9, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f80)=[{{&(0x7f0000000300)={0x2, 0x4e2c, @rand_addr=0x64410101}, 0x10, &(0x7f0000000900)=[{&(0x7f00000006c0)="e515060086d2a14bb3df23022f691041e43bf59e75cd3683b6d992b3ff32d3b9bf9865106fbf227e28541ff541dafc58c257286065f80c26ff201170dbe18af9e2a85091bc230fa46d4f93be70f0173d04e5a703bedf4abee74fefea5034607b7468d0329fdfd42da870741acba24d5cd6eb33348620130dc8", 0x79}, {&(0x7f0000000640)="e19061ccb4ecb1638f65f0b354b1a4e232af20bc955838e6c7b234629e9c518676fad3e1082f664a1990aa4408", 0x2d}, {&(0x7f0000000740)="c8340bd99b677b9dfad43ce416b0944010776af60ad42b1e1b5d850059470eee57da0f9ae8340b2e9ac6c52fefad669cd6e998b0056d4658b9ed74c5e7de825e21e275bf88f1da5a28bba81697ce62f731cee34ee7623b5999580d11064e08598ceaa69b0be20892625ed1e43a5eccad147f6d685975f1f7b3cd0db612aee4398ad2d353c249555eadd36ab06ca31bb7c7487933f38d4144640e4071", 0x9c}, {&(0x7f00000010c0)="e8d7d9635ab67231647c65e825caa6c43bd939bc0addb31b9d194318cdac9ce05d3bdfa0f3ba48725f67c2f246626bb7ba46f883d4ff2e7d4e5a2fc6f4405dde9565ae9ad9f6e00c3f90b9", 0x4b}, {&(0x7f00000008c0)="73af319d8c", 0x5}], 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="d80000000000000000000000070000000094040100008636ffffffff020369050f2eda3a44fb35ee675c94885e910608ec3a56e1249a060432f9011285a196ddffd2b8933923f7552c95785e0703ee862500000000070ba04faf29649738d2f6060b0e12bbceb1dbee3ed30509cfe355f322cd1994040100861000000003070a26cb0c781e9cf802442c24910a010101000000020000000000000007ffffffff00000008e000000100000005ffffffff00000009832338ac1414aaac1414bbe00000017f000001e0000002ac1414aaac1414bbac1414aa00", @ANYBLOB="a03f20d9abff9e938c3bb40f4e008df47a0e2668369ee0453f1c393df935675e07faf3a32c9295b47e3ebcb9b4c9e2658ba0686c46067973a89a0c94061870ede8b18bf1bc04f941b335b1f9c45b65cff28ac8f99f4e3ac36be264c2ff3487b7b63de8dc9cb764ac15e5444e356b3681e90ccce29cb1fe968d47a9953f44b7", @ANYRESHEX=r1, @ANYRES16=r0], 0xd8}}, {{&(0x7f0000000a80)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000ac0)="b5c9ac1dbe6c2e1f2a51ff34b26f621ae2863e0f37b1e20694c1713088aa040c64", 0x21}, {&(0x7f0000000cc0)="37c0f84eee480dc2131b49ecf655127ee950adc244f55a9ddf3813d4bb838e5e9aae69a7665c0a7a80b497d64366a9c6434aeb493e7d2c199dc85d956962820f1e6de2154440b4457e44a8ac6edeab030fe7bbad3429bddf46c14e5424cf8597e94ca8d980fda18855dbaa45d2c64e777dcd89d1c9b80aab9cc44f4c588dc3c39e2d72d48ecd559f63cc56ed0a04850b6224a6d12badfe51e544399ac0ed5d2b794fd4150801ebfad19bbd741352d41638ca055d7806d97c8b78dab263635ba9e27e06b48a3aadbeb73a28410e76", 0xce}, {&(0x7f0000000dc0)="6cf3f188d8877c613ba693da4b5fefb3aaed2f4bc528972dd40a59ddc0a75f385c857238f8fd9b1410ab41bbd64087819718a4f8db23dce843f0fc8f391ed44c861b2715e2896ba1a981f786cf4bf38b28e167455efbcd4d10d6a07cf29af7ceda8ffdbf4b1f8f8b6636a2a0e9", 0x6d}], 0x3, &(0x7f0000000e80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x200}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_ttl={{0x14, 0x0, 0x2, 0x361}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffa}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffff1a}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0xd8}}], 0x2, 0x90) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r6) sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="819b00"/14], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)=ANY=[@ANYBLOB="3400000010000108000000040000a8ed35262ef200000000030068899d37221155f8cb7c398c0aa7c7e3f02ace2dd500000000", @ANYRES32=0x0, @ANYBLOB="31200000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000008000641100fe80000000f0ffffffffffffff0000bbff02000000000000000000000000000100004e22004d9078020000000000000000000000eaf12af8010d4894322fd8f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb201f3a70a41ef6c2fca06a9bd768d5f176c198150020000000000000000010009514b06796dbf2ea9e520f1475c8f65b13efcfbfc9b1d0e5c58b4be6608c9608e393ff14c36c9c3390f375043be439a02b275fa5b79c00e7ae925b94dcc6a70a1afb34cb5cb991a40a2f23"], 0x0) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x1, 0x1, 0x4000}, 0x20) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b04, &(0x7f0000000200)={'wlan1\x00'}) 2.972178643s ago: executing program 4 (id=3460): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000010003cfdb95cb4fa45c1a18bc5d9fa6895bc4e8a9864a96dfc7a2a0257856eecac0972be2bc43f9ea2aaac4b7d0c14e67b9e8c3b6cd74568e3d3223a9be7ff3d60d50a333ce98487f4ab45a82ffce2b69883013b4d96c1ea451253a3614003b8628689b99d30e25156b9cac7ea575a7270520f39106073af79079156e53f0010b9d075145eb5f2ef3f9e83e396f773d37db7af7c949536c7217ed3", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES16=r1, @ANYRES8=r2, @ANYRES32=r0], 0x1c}}, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xd27, 0xffffffff, 0xfffffffc, {0x0, 0x0, 0x0, r4, {0x4, 0x9}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85}, 0x20054004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex=r4, 0x33, 0x1, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)="f7", 0x1}, {&(0x7f0000000580)="fd", 0x1}], 0x2}], 0x1, 0x40800) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0xffe0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x43f0008da1ed8c2a}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @multicast1}}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x9}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000004d090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.843893877s ago: executing program 4 (id=3461): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = socket(0x200000100000011, 0x803, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x2, &(0x7f00000000c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x238}], &(0x7f0000000140)='syzkaller\x00', 0x400, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000d00)={0x1, 0xc, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000d40)=[{0xfffffff8, 0x1, 0x1, 0x9}], 0x10, 0x1}, 0x94) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000000)={'batadv_slave_1\x00', &(0x7f0000000040)=@ethtool_cmd={0x4b, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000e40), 0x20000, 0x0) ioctl$PPPIOCGIDLE(r4, 0x8010743f, &(0x7f0000000e80)) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) 2.811812528s ago: executing program 2 (id=3462): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = epoll_create1(0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x840) write$nci(r5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="7008010b"], 0x4) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r9 = socket$unix(0x1, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40040) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xbffffffd, {0x0, 0x0, 0x0, r11, {0xc}, {0x9}, {0x2, 0x12}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x40400d4) pselect6(0x40, &(0x7f00000001c0)={0x7f}, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x2004}) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)={0x64, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40f0}, 0x910) 2.672739299s ago: executing program 4 (id=3463): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926", 0x20}], 0x2}], 0x1, 0x40800) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18070000f6ff18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005010400000000000000000001002000472b4ff329db281968d3fcf83643562d79bf8dfc0e7bbbfe7f18e523395a4d4ad712f32b26d1a0d8710a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000680)='objagg_obj_parent_unassign\x00', r3}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYRES64=r2], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) r7 = socket$kcm(0x2, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_j1939(r9, &(0x7f0000000280)={&(0x7f0000000140)={0x1d, r10, 0x0, {0x1, 0x0, 0x2}, 0x2}, 0x18, &(0x7f0000000200)={&(0x7f0000000180)="5743ecd2d1", 0x5}, 0x1, 0x0, 0x0, 0x4}, 0x20044804) (async) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2.511422867s ago: executing program 0 (id=3464): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfff}, 0x1c) 2.459838487s ago: executing program 0 (id=3465): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 2.459016715s ago: executing program 4 (id=3466): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x28, r2, 0x301, 0x70bd28, 0x0, {{}, {@val={0x8, 0x1, 0x63}, @void, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x28}}, 0x44) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2}, [@alu={0x4, 0x1, 0x4, 0x760cda05bcf95fa0}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007ca20efff5a115001c00ff11142603600e12080005007a010401a80016002000034004000000035c0461c9c67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b3d7a37077646f948017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a56e2b0137bdfc65025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x0) 2.450138942s ago: executing program 1 (id=3467): syz_emit_ethernet(0x66, &(0x7f0000000780)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0) socket(0xf, 0x800, 0x0) 2.371958466s ago: executing program 1 (id=3469): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_OIF={0x8, 0x5, r1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x90) 2.366913108s ago: executing program 0 (id=3470): r0 = socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x2}]}, {0x0, [0x2e, 0x5f, 0x5f]}}, &(0x7f0000000280)=""/47, 0x29, 0x2f, 0x1, 0xffffffff}, 0x28) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, r4, 0x301, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x4004) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) socket$unix(0x1, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r5, 0x20, &(0x7f0000000440)={&(0x7f0000000300)=""/186, 0xba, 0x0, &(0x7f00000003c0)=""/76, 0x4c}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x12, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000005000000000000009c00d2000109a50f010000005bffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000af821000040000002dc7000004000000716a08000400000085100000020000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @sched_cls=0x36, r5, 0x8, &(0x7f00000000c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x2, 0xa78, 0x5}, 0x10, r6, r5, 0x2, &(0x7f0000000580)=[r5], &(0x7f00000005c0)=[{0x1, 0x1, 0xa, 0x4}, {0x2, 0x4, 0x5}], 0x10, 0x7}, 0x94) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f00000006c0), 0x4) writev(r5, &(0x7f0000000700)=[{&(0x7f0000000100)="0232e6003953b008fefa8ce2d4c1c866321c084bb58c3dd1666a19af3c73704fb3e64365", 0x24}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) connect$unix(r5, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 2.311476684s ago: executing program 1 (id=3471): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000180)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in6=@private0, 0xfffd, 0x1, 0x4e20, 0x0, 0xa}, {0x80000000000002, 0x9, 0x200000000006, 0x3, 0xffffffffffffffff, 0x4, 0x1, 0x200002}, {0x40000000058, 0x7, 0xfffffffffffffff9, 0xc7e}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d6, 0x32}, 0x2, @in=@rand_addr=0x64010102, 0x3504, 0x5, 0x67a01bcf906970c1, 0x7f, 0x7, 0x0, 0x5e0ba9f6}}, 0xe8) sendmmsg$inet6(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x40040d4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x60, 0x10, 0x439, 0x70bd2b, 0x4000, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xe03c5dc0}, @IFLA_GRE_TOS={0x5}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x60}}, 0x0) 2.168501538s ago: executing program 1 (id=3472): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="80fd05000000", 0x6}], 0x1, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ppoll(&(0x7f0000000100)=[{r1, 0x8000}], 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006300e0ff0000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xb9, &(0x7f00000002c0)=""/185, 0x0, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa1}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x18, 0x42, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') unshare(0x6a040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x14, r4, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbf5}, 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) close(0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) socket$packet(0x11, 0x3, 0x300) 1.896617651s ago: executing program 4 (id=3473): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x885) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010025bd7000facbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100804000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, 0x0, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000080), 0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@empty, @in=@loopback}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000800)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000840), &(0x7f0000000880)=0xc) r3 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001500010000000000ffffffff0d00000008000100", @ANYRES32=r3, @ANYBLOB="1456ed42c0baf87c60a064d5259f4e1608b4a5e888fc26782df2f03d"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@private2, @in=@private}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000a80)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000ac0)) getgid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) getpid() r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000002c00010000000015413839a4263f3448a0555e85e52d000000000008000000", @ANYRES32=r5, @ANYBLOB="0b000280976b6408686030001600018088046fa3301e12b1dbed7c66a9a96b6904650000"], 0x3c}], 0x1}, 0x0) r6 = getgid() socket$qrtr(0x2a, 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000001800020028bd7000fddbdf250a0068bc299c08001900", @ANYRESOCT=r6, @ANYBLOB="0c00090008001002", @ANYRESHEX=r5, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x89a8c171de03ddc2}, 0x0) 1.884379059s ago: executing program 7 (id=3474): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1401, 0x10, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x10) r1 = socket$inet(0x2, 0x1, 0x7) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000180)={r2, 0xb2, "a769ddf9a0d8d0612829e5de62f7db1bc96da9a6f99e060b1d09721c2f89944c53649f472c99b943b11b08557f039dcb08a3c921606cfc25fcc846ad2c6db706db2538653d073a7b707db9b51f3df615eb5913ecbe14e8970679b2661d602fed4709c1c492b8123b6bee3fd1fcdc7485e1bd1a009eff6fe6a7ccb8ffd15a8c051a72b58b50d534915d748815062329eba54810d90a4cb2cb7bcde3aca90627f349bfc383953125fa5c704c763d4f7fd757f0"}, &(0x7f0000000240)=0xba) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000280), 0x4) r4 = accept$ax25(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @rose}, [@default, @default, @bcast, @default, @rose, @bcast, @bcast, @bcast]}, &(0x7f0000000340)=0x48) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000400)={0x3, @bcast, r5}) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000440), 0x4) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000480)=@netrom={'nr', 0x0}, 0x10) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x8000, 0x1, 0x4, 0x3, {{0x1a, 0x4, 0x3, 0x1, 0x68, 0x66, 0x7, 0x2, 0x2f, 0x0, @broadcast, @local, {[@lsrr={0x83, 0xf, 0x80, [@loopback, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x3c, 0x94, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@multicast1, 0x7f}, {@empty, 0x3}, {@empty}, {@multicast1, 0x2}, {@rand_addr=0x64010101, 0x3ff}, {@rand_addr=0x64010100, 0x2}]}, @rr={0x7, 0x7, 0xb1, [@multicast1]}]}}}}}) bind$can_j1939(r6, &(0x7f00000005c0)={0x1d, r7, 0x0, {0x1, 0x1, 0x2}, 0x1}, 0x18) sendto(r6, &(0x7f0000000600)="1887f460a7cb85dfa98b2bf5059489dfc87b9446a711f34b1c11c8cfa5", 0x1d, 0x8c, &(0x7f0000000640)=@nl=@kern={0x10, 0x0, 0x0, 0x20000000}, 0x80) syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000700)={0x3, 'veth1_virt_wifi\x00', {0x800}, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000780)={r6, 0x6, 0x62ce, 0x6}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xfc, r9, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x200, 0x75}}}}, [@NL80211_ATTR_VENDOR_DATA={0xc9, 0xc5, "4cf54f0ba95fdd2c3e0eeecff4f5bcdfe07c7da4c3f9656c2ab6485d002ceae1037b61118ec9c41ccd0bc672562db80248d3a7e461397f70fdf5d456ea55d2699a9ee8e56ce559c4974582068ea86899525070f1ffc309979769b6bba9e7ee915abeab43e9be7fa2690654678b43c37186eb18179ffddc61894db71aa11135a60b48708bfcda68162a1f664ee0e3652a16618e821cc67690b4ea584124085f9bc9b20131ccfd5fd4b42568068c2555e1164f21d95eca75401ac7655d67a5e4b4af5b7e6eef"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1000}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r11, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, 0xa, 0xa, 0x1002, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40810) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000b40)={r3, 0x14, "fd7ac0b4823eaf0a8fb9163a67366fdec4132c49"}, &(0x7f0000000b80)=0x1c) sendto$inet6(r8, &(0x7f0000000bc0)="371b8904d7b9502a9fb988edd280e5b1bb3349a917a1cb228ee94f5e34", 0x1d, 0x8000, &(0x7f0000000c00)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000ec0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000c80)={0x1cc, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x80000000}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x5}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x236}, {0x5, 0x14, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xff}, {0x8, 0x13, 0xe0a}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xe048}, {0x8, 0x13, 0x7ad8debd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1ff}, {0x8, 0x13, 0x401}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfe63}, {0x6, 0x11, 0x200}, {0x8}, {0x5}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x48, 0x8, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x4048045) shutdown(r11, 0x1) 1.804342779s ago: executing program 0 (id=3475): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x80000000, 0x800, 0x3a, 0x0, 0x0, 0x1}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newlink={0x50, 0x10, 0x1, 0x70bd2c, 0x20, {0x0, 0x0, 0x0, 0x0, 0xdf15003157970113, 0x8084}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0x634}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x81, 0x80}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x800) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c) r3 = socket(0x23, 0x80805, 0x2) listen(r3, 0x0) connect$llc(r3, &(0x7f0000000540)={0x1a, 0x205, 0x2, 0x1, 0x6, 0x0, @broadcast}, 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfff}, 0x1c) 1.638384159s ago: executing program 7 (id=3476): unshare(0x2a020400) (async) unshare(0x2a020400) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x4a}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e20, @private=0xa010100}}, 0x0, 0x0, 0x19, 0x0, "2e3ecac19b6c83f5e0ccf6cbdccc8a9b64a2ba9a8e1d4e55b1b1ba4d7c9cb808309f118362ba50256fa5e1f5de923e80294fc7ca32f1f7ca46a56aef533adf87a407d7be08c6ad6cda4cd39485c24f23"}, 0xd8) sendto$inet(r1, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) close(r1) (async) close(r1) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f00000001c0)=@assoc_value, &(0x7f00000004c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r5, 0xfffffffe}, &(0x7f0000000240)=0x8) listen(r2, 0x0) (async) listen(r2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r7, r6, 0x26}, 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r7, r6, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) close(0x3) (async) close(0x3) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r8, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x72}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044880}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150700"/66], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) close(r9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 1.511192613s ago: executing program 2 (id=3477): getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000001080)={0xb, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x30) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000014000100000000000000fd2929bf64daedcfeb488e63463d8554add1da6e87f783980a4d1634c6450559443c29240956451306cf000000000000000000000000a92d8bb70312fc00dc4b019eb585f36dba3b"], 0x44}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffd31, &(0x7f0000000300), 0x18}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0x80000001, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x6, 0x9, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f80)=[{{&(0x7f0000000300)={0x2, 0x4e2c, @rand_addr=0x64410101}, 0x10, &(0x7f0000000900)=[{&(0x7f00000006c0)="e515060086d2a14bb3df23022f691041e43bf59e75cd3683b6d992b3ff32d3b9bf9865106fbf227e28541ff541dafc58c257286065f80c26ff201170dbe18af9e2a85091bc230fa46d4f93be70f0173d04e5a703bedf4abee74fefea5034607b7468d0329fdfd42da870741acba24d5cd6eb33348620130dc8", 0x79}, {&(0x7f0000000640)="e19061ccb4ecb1638f65f0b354b1a4e232af20bc955838e6c7b234629e9c518676fad3e1082f664a1990aa4408", 0x2d}, {&(0x7f0000000740)="c8340bd99b677b9dfad43ce416b0944010776af60ad42b1e1b5d850059470eee57da0f9ae8340b2e9ac6c52fefad669cd6e998b0056d4658b9ed74c5e7de825e21e275bf88f1da5a28bba81697ce62f731cee34ee7623b5999580d11064e08598ceaa69b0be20892625ed1e43a5eccad147f6d685975f1f7b3cd0db612aee4398ad2d353c249555eadd36ab06ca31bb7c7487933f38d4144640e4071", 0x9c}, {&(0x7f00000010c0)="e8d7d9635ab67231647c65e825caa6c43bd939bc0addb31b9d194318cdac9ce05d3bdfa0f3ba48725f67c2f246626bb7ba46f883d4ff2e7d4e5a2fc6f4405dde9565ae9ad9f6e00c3f90b9", 0x4b}, {&(0x7f00000008c0)="73af319d8c", 0x5}], 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="d80000000000000000000000070000000094040100008636ffffffff020369050f2eda3a44fb35ee675c94885e910608ec3a56e1249a060432f9011285a196ddffd2b8933923f7552c95785e0703ee862500000000070ba04faf29649738d2f6060b0e12bbceb1dbee3ed30509cfe355f322cd1994040100861000000003070a26cb0c781e9cf802442c24910a010101000000020000000000000007ffffffff00000008e000000100000005ffffffff00000009832338ac1414aaac1414bbe00000017f000001e0000002ac1414aaac1414bbac1414aa00", @ANYBLOB="a03f20d9abff9e938c3bb40f4e008df47a0e2668369ee0453f1c393df935675e07faf3a32c9295b47e3ebcb9b4c9e2658ba0686c46067973a89a0c94061870ede8b18bf1bc04f941b335b1f9c45b65cff28ac8f99f4e3ac36be264c2ff3487b7b63de8dc9cb764ac15e5444e356b3681e90ccce29cb1fe968d47a9953f44b7", @ANYRESHEX=r1, @ANYRES16=r0], 0xd8}}, {{&(0x7f0000000a80)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000ac0)="b5c9ac1dbe6c2e1f2a51ff34b26f621ae2863e0f37b1e20694c1713088aa040c64", 0x21}, {&(0x7f0000000cc0)="37c0f84eee480dc2131b49ecf655127ee950adc244f55a9ddf3813d4bb838e5e9aae69a7665c0a7a80b497d64366a9c6434aeb493e7d2c199dc85d956962820f1e6de2154440b4457e44a8ac6edeab030fe7bbad3429bddf46c14e5424cf8597e94ca8d980fda18855dbaa45d2c64e777dcd89d1c9b80aab9cc44f4c588dc3c39e2d72d48ecd559f63cc56ed0a04850b6224a6d12badfe51e544399ac0ed5d2b794fd4150801ebfad19bbd741352d41638ca055d7806d97c8b78dab263635ba9e27e06b48a3aadbeb73a28410e76", 0xce}, {&(0x7f0000000dc0)="6cf3f188d8877c613ba693da4b5fefb3aaed2f4bc528972dd40a59ddc0a75f385c857238f8fd9b1410ab41bbd64087819718a4f8db23dce843f0fc8f391ed44c861b2715e2896ba1a981f786cf4bf38b28e167455efbcd4d10d6a07cf29af7ceda8ffdbf4b1f8f8b6636a2a0e9", 0x6d}], 0x3, &(0x7f0000000e80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x200}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_ttl={{0x14, 0x0, 0x2, 0x361}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffa}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffff1a}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0xd8}}], 0x2, 0x90) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r6) sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="819b00"/14], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)=ANY=[@ANYBLOB="3400000010000108000000040000a8ed35262ef200000000030068899d37221155f8cb7c398c0aa7c7e3f02ace2dd500000000", @ANYRES32=0x0, @ANYBLOB="31200000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000008000641100fe80000000f0ffffffffffffff0000bbff02000000000000000000000000000100004e22004d9078020000000000000000000000eaf12af8010d4894322fd8f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb201f3a70a41ef6c2fca06a9bd768d5f176c198150020000000000000000010009514b06796dbf2ea9e520f1475c8f65b13efcfbfc9b1d0e5c58b4be6608c9608e393ff14c36c9c3390f375043be439a02b275fa5b79c00e7ae925b94dcc6a70a1afb34cb5cb991a40a2f23"], 0x0) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x1, 0x1, 0x4000}, 0x20) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b04, &(0x7f0000000200)={'wlan1\x00'}) 798.722058ms ago: executing program 4 (id=3478): r0 = epoll_create1(0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket(0x1e, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000200)) unshare(0x400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) 724.341448ms ago: executing program 7 (id=3479): bpf$PROG_LOAD(0x5, 0x0, 0x0) write$nci(0xffffffffffffffff, 0x0, 0xfffffeea) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000640)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb38c8557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179", 0x41}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0xe) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 706.594034ms ago: executing program 0 (id=3480): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x966, 0x0, 0xfffc, 0xa}, {0x1, 0x4, 0x0, 0x80000000, 0x6, 0x9, 0x0, 0x40000000000000}, {0x0, 0x9, 0x53e5, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x2, @in=@multicast1, 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8) getsockopt(0xffffffffffffffff, 0x101, 0x4, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40}}, 0x0, 0x9, 0xc5, &(0x7f00000002c0)=""/197, 0x0, 0x8}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0x20040800) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x4c9ae14, 0x2, 0x7]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040805}, 0x810) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000190001000100000000000a0080201400000400050000081e0e0009"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r3, 0x0, 0x1ff) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup(r3, 0x0, 0x200002, 0x0) mkdirat$cgroup(r4, 0x0, 0x1ff) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r6 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r5, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) 567.950362ms ago: executing program 2 (id=3481): syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) gettid() bind$llc(0xffffffffffffffff, &(0x7f0000000780)={0x1a, 0x118, 0x63, 0x81, 0x20, 0x9, @broadcast}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$igmp6(0xa, 0x3, 0x2) shutdown(r3, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16], 0x6c}}, 0x0) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000040)=0x6e) recvmsg$unix(r4, &(0x7f0000000300)={&(0x7f0000000180), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/200, 0xc8}], 0x1, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x10000) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x400d0c1) socket$kcm(0x2, 0x3, 0x106) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) sendmsg$NFT_BATCH(r5, &(0x7f0000000740)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000037c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0xa4, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0x90, 0x6, "18dbabad9df0a840b9f4f72391177282a529720d87f6f11ce3925cf34ca026069225f8b6a287a090ff97f7ea2f865f170487cd70f71b8fcc9a13f2454504f10fd2020c3605dbda233429a48ea592380477a0f447229caae080466b331e6a3913feba04065813d34ce79c32c08309863112c22505f320ed0409da54140c1e37e140a4fb2b49db8ea210608e41"}]}, @NFT_MSG_DELSETELEM={0xbc4, 0xe, 0xa, 0x103, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xb78, 0x3, 0x0, 0x1, [{0x3a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x34c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x6, 0x1, "2a95"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xe1, 0x1, "99acbcbbe6657f9bcabb671537eb205882b2aa37c644d016a95e1b2e41ef883f4e49a7b75b57563c0c8327cca589b9ccaaad8514c30b34d092d2f28e91069ccdb0fea1fe048c3b3a84c547f1683aec34a093f03860b01a64b1ed8545f36541a08803365a8309f7b64d30bc698378bc7fea0636e7c59cd462fa41f2cde1e4b3c06b7fe54d857755c1046a548b90c8449b9ce69e16add3c76cfd8efabaa499593529df569f7f51561c576f632acdc318474b14aba24e73641a3a4c1dd555ac206f5392f2d4432d0c2c66b597547b2bcf3170f7a873ccdaec608544375617"}, @NFTA_DATA_VALUE={0x1f, 0x1, "77a1055a5a4ed1394605a9758a8fbb32cda5d9927702ff16e8364a"}, @NFTA_DATA_VALUE={0xf6, 0x1, "7c22947b0f6a213ce5c6dc080e6b132296c2ecb476ada79ea98620ba053aa40fe6178f59343478debb74ab3e11759523dab66ffbd07d5453cbad038934f4c275ac487f712c3dc836f6761465dfec9b87e14f5d74a8246526c3cd44b6e09c8735753f646d40965d5d87c0f1a269d3b3d37ea58657bf0038dc3fc2f98739bbaf08ddaa89bdefd7cc038b1005d9fdc4255ebfa7d70fcc1919bd0a6963e61c771a2a5c366bc7305cf92f2d3b347be588cafcbff394f2d6f8a3f773dc56de94b7591f4cddd6587e43da948af71f28f1ba1e89d016662d557d1053f291a698c2372bc6b06884ff8ee2dcfa698722c029e4b24e79b1"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_DATA={0x50, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}, {0xac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffff8}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10000}, @NFTA_SET_ELEM_KEY={0x1c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x1c, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, {0xa8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY_END={0x24, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_DATA={0x40, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}, {0x27c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x1dc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x5c, 0x1, "45825ad0873b518dec1e1e3deb364b8aee5a788a333d710a5dbceb81b894e1b357ee693716cd507a0fc8ab491c605b57f2efd39d2eebec95a92d6b205e03e0ee834e5e073e5f093ac666b6da544af1d2308451b2cd7727f3"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xe8, 0x1, "0a7a9b925fde5bd81f7c450ce137fb98f9de8e2a5207168274c36f6d23ec1df310d1f1f13396de24616e42cd2d061a23a670c48b1900df8176ef9200218da440a37cdb344b7a2c91c4b3792f8b178e4a4ee76fbb778965f75b5d631245477c55e2bcec34046baefdc75cb99375fd2f545f7014642bdf73c61b8cb587b92bf35710096dd64ca886723042afe49c5009387b129c3ada2a78fea31c8b4575c80c7c80af18c586781daaedb26ce27fce12b200353b6913cf4b2c43e1ee9c46e9302704473d59c1a258b16cc5a6f8ce82d2ad92ecee02f98952337ed474cff83956dc7b4b7852"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @masq={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x50}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x14}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x64, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x34, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}]}, {0x1dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x1d0, 0xb, 0x0, 0x1, [{0xd8, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xc8, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x3b, 0x3, "19476974e14a5fdeef9f2564d706f480aa834fdb49b66a9821b54fcd59688e0d71b178096f869c62cae83c34129b09cae0e592dd8a1182"}, @NFTA_TARGET_NAME={0xd, 0x1, 'CLASSIFY\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_INFO={0x59, 0x3, "f5425e33df5a05f1debc967bb321e19a077954b1bebbd1a617362bbb55493691e81367b3f5d4951c86e2ad73af9b062c60c9d6b7a6ba497f8a2be0df57710df1697e695f5027d9a1f1a03c2a2de1d93e94b02d5c2c"}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}, {0x3c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x50, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x8}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x8}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xb4}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x4}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x240}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x24, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'hashlimit\x00'}]}}}]}]}, {0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x208, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x3c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8f}]}}}, @NFTA_SET_ELEM_USERDATA={0x36, 0x6, 0x1, 0x0, "8b2fa5f42514ddee1a5ef8290e7caafd0dbd26413a30ce3d78ca3c497d7c47b3590f6d4d45446342018734d07cda6c840592"}, @NFTA_SET_ELEM_EXPRESSIONS={0x74, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x4c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xec4}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x8b, 0x6, 0x1, 0x0, "bfbc9ba050e7a84bf138becbc570d7fe4588296771b9113a89a5a0a62d18a93cb6ddf5e898d0392f735329209edacc49a787421d67e39c04a2d76e89a91bfcff9d019de7a7f1cef345dea4007e54c43f418cdcf41227f869844e4b5fd81360492356cd191a40400d9751e4fef23c8b3c48aa4ec3c073c2345161d1b6e54de500338166dd9e2ca0"}, @NFTA_SET_ELEM_USERDATA={0x55, 0x6, 0x1, 0x0, "228611f828467fea098802f4805b2d5453f552dfe8a34e8eeda47385cd822424a74266ecb6c10ee63971c05019b8c4be54c0513336c3658722679a78e4c253b79d14cb085bbaabb063bf932f96a560632c"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}]}]}, @NFT_MSG_DELCHAIN={0x94, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_USERDATA={0x47, 0xc, "420d6483de3ee4f367d74814e81d302abbc44b604f57239f28d2f92e3f9b0d0c80136c672fe6760a7bdf08bac7a339be1056c916387be4fcf66c52d2f4e86a41114d2f"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9a28aa2}]}]}, @NFT_MSG_NEWTABLE={0x124, 0x0, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x33, 0x6, "ad03b45d7fe26d3fe7fff566ca835707be5f9f51dce8878ffa09f42bd1f1d9b2badf5dd1c7df52306301698f8e332b"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0xc4, 0x6, "7579fee657fd3c9414e468997957addbbfb0aa65b9196451ecfb72644b6eda63d4ec8fa05965f7ace76f112c217837464d85cfea7d078d4053edac45b09e04a160edb48e4a48d3f77b285537eff4d858454d575f39e7d9cabaf4aa4c4e5aa67f81df29504c54bb10f4cbb32023d5caeab13076f467be06518fbbb4ce3b98e0e0e6b4b5433c47cb98c25fa0e4d63ef686e452d8bf3deb6b99304f441211d2e8adba030118e45137e7a503453eab1db63adcf7c720d70e4914eb8b2f9859d14990"}]}, @NFT_MSG_DELCHAIN={0x94, 0x5, 0xa, 0x201, 0x0, 0x0, {0x6, 0x0, 0x9}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_USERDATA={0x71, 0xc, "9b3c48e02d40b7915813414c33c31f257f7c67fc6b5d233a3f97eb6d2b4f876404cdd9d490a1a7f36a3b8384830760a6318a9667ce260e53954c6255b55c31dcb0470ae635a93d130d3fc438a00e1f72a261116adfa501c3a4377cdaceb1a9b9cb2f61a29e5d5e936b4f9d8ad1"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x4}}}, 0xf24}, 0x1, 0x0, 0x0, 0x10}, 0x4004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x22, 0x6000, &(0x7f0000000680)="b9ff03316844268cb89e14f008001d1abd52f4a1615756b4c22b76e2e2b477293f2a", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 461.790337ms ago: executing program 7 (id=3482): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000880}, 0x840c0) accept(r0, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x70bd28, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000880}, 0x840c0) (async) accept(r0, 0x0, &(0x7f0000000080)) (async) 317.256915ms ago: executing program 2 (id=3483): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) syz_emit_ethernet(0x72, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x3c, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f008400000000110000"}}}}}}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffff01, 0xb7c56ad10922c48a, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000440)}, 0x10) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffff}, 0x94) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000040)="9070bdd004896d419b7b03d30f55247e8789a0ada05cdb37b188107f92e1bb74abde015aa0b169741a020efb1bc6c5e293b2615d16f7da8cc47029bd6c6c2e36fcdee2e1f3a62abc727341222f6c9e145740840dd69129", 0x57}, {&(0x7f00000000c0)="157da4c42d83633c2b62d42ff023e0e02de5b73203c74711cd6219eb5e862e4d", 0x20}, {&(0x7f0000000100)="e330b15c29f1c2da4dee1d4a39b88daa8332dfd816a1ddb0441cb740", 0x1c}, {&(0x7f00000002c0)="ecd241ad9a8f0c25a3f3f3526b5b119eeff40451f8a754596d9de76418f670748ca2b9a4b6abd5dc9d771e68c705d153a2677553843334023de050d9d618fc1111ec5d29d1fd956c6aec07251c5131ef1b1e61cb645304fb551475990a403c44f2fe80a3", 0x64}], 0x4) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b84954fc5dc2f"], 0xdd12}], 0x1}, 0x20040051) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) syz_emit_ethernet(0x72, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x3c, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f008400000000110000"}}}}}}}, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) (async) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffff01, 0xb7c56ad10922c48a, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) (async) socket(0x11, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00'}) (async) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000440)}, 0x10) (async) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffff}, 0x94) (async) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000040)="9070bdd004896d419b7b03d30f55247e8789a0ada05cdb37b188107f92e1bb74abde015aa0b169741a020efb1bc6c5e293b2615d16f7da8cc47029bd6c6c2e36fcdee2e1f3a62abc727341222f6c9e145740840dd69129", 0x57}, {&(0x7f00000000c0)="157da4c42d83633c2b62d42ff023e0e02de5b73203c74711cd6219eb5e862e4d", 0x20}, {&(0x7f0000000100)="e330b15c29f1c2da4dee1d4a39b88daa8332dfd816a1ddb0441cb740", 0x1c}, {&(0x7f00000002c0)="ecd241ad9a8f0c25a3f3f3526b5b119eeff40451f8a754596d9de76418f670748ca2b9a4b6abd5dc9d771e68c705d153a2677553843334023de050d9d618fc1111ec5d29d1fd956c6aec07251c5131ef1b1e61cb645304fb551475990a403c44f2fe80a3", 0x64}], 0x4) (async) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b84954fc5dc2f"], 0xdd12}], 0x1}, 0x20040051) (async) 244.257206ms ago: executing program 7 (id=3484): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @mcast1, 0x200005}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f00000004c0)=0x9, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d617463680000002000028008000300b07346e30a0001007374617465000000080002"], 0xd0}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x1404, 0x100, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)="89e7ee0c7cdad9b4b47380c988cafbe863ca162afbdb9ceacc04d25983c69fa21c815735a1597b3eb59cb760d833def78e56a9", 0x33}, {&(0x7f0000000100)="f15e327d935bdfeb", 0x8}], 0x2) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r8, 0x10e, 0x6, &(0x7f0000000300)={0x5, 0x2, 0xfffffff7, 0x7}, 0x10) 0s ago: executing program 7 (id=3485): socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x2, @empty, 'veth0_to_hsr\x00'}}, 0x1e) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "b4003a00"}, 0x28) shutdown(r1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) getsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000100)=""/33, &(0x7f0000000240)=0x21) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\b'], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x112000, 0x800}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000280)=0x30200, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300000000000000, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x58}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) kernel console output (not intermixed with test programs): 49.270464][T14732] ? __pfx__printk+0x10/0x10 [ 349.270482][T14732] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 349.270508][T14732] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 349.270534][T14732] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 349.270559][T14732] warn_alloc+0x214/0x310 [ 349.270590][T14732] ? __pfx_warn_alloc+0x10/0x10 [ 349.270623][T14732] ? __get_vm_area_node+0x28f/0x300 [ 349.270648][T14732] ? ip_set_sockfn_get+0x13a/0xc30 [ 349.270679][T14732] __vmalloc_node_range_noprof+0x690/0x12d0 [ 349.270703][T14732] ? alloc_vmap_area+0xda0/0x14c0 [ 349.270749][T14732] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 349.270774][T14732] ? ip_set_sockfn_get+0x13a/0xc30 [ 349.270800][T14732] ? __get_vm_area_node+0x28f/0x300 [ 349.270824][T14732] ? ip_set_sockfn_get+0x13a/0xc30 [ 349.270850][T14732] __vmalloc_node_range_noprof+0x578/0x12d0 [ 349.270876][T14732] ? ip_set_sockfn_get+0x13a/0xc30 [ 349.270923][T14732] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 349.270961][T14732] ? ip_set_sockfn_get+0x13a/0xc30 [ 349.270985][T14732] vmalloc_noprof+0xb2/0xf0 [ 349.271009][T14732] ? ip_set_sockfn_get+0x13a/0xc30 [ 349.271037][T14732] ip_set_sockfn_get+0x13a/0xc30 [ 349.271069][T14732] nf_getsockopt+0x26e/0x290 [ 349.271100][T14732] ip_getsockopt+0x1c4/0x220 [ 349.271127][T14732] ? __pfx_ip_getsockopt+0x10/0x10 [ 349.271151][T14732] ? sock_common_getsockopt+0x2d/0xb0 [ 349.271175][T14732] ? raw_getsockopt+0xce/0x200 [ 349.271197][T14732] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 349.271225][T14732] do_sock_getsockopt+0x372/0x450 [ 349.271248][T14732] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 349.271267][T14732] ? do_syscall_64+0xa0/0xfa0 [ 349.271285][T14732] ? __fget_files+0x2a/0x420 [ 349.271302][T14732] ? __fget_files+0x3a0/0x420 [ 349.271316][T14732] ? __fget_files+0x2a/0x420 [ 349.271343][T14732] __x64_sys_getsockopt+0x1a5/0x250 [ 349.271360][T14732] ? do_syscall_64+0xa0/0xfa0 [ 349.271377][T14732] ? do_syscall_64+0xa0/0xfa0 [ 349.271399][T14732] do_syscall_64+0xfa/0xfa0 [ 349.271416][T14732] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.271432][T14732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.271447][T14732] ? clear_bhb_loop+0x60/0xb0 [ 349.271467][T14732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.271481][T14732] RIP: 0033:0x7f403838f6c9 [ 349.271496][T14732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.271512][T14732] RSP: 002b:00007f40365f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 349.271529][T14732] RAX: ffffffffffffffda RBX: 00007f40385e5fa0 RCX: 00007f403838f6c9 [ 349.271541][T14732] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000007 [ 349.271553][T14732] RBP: 00007f4038411f91 R08: 0000200000000080 R09: 0000000000000000 [ 349.271565][T14732] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.271576][T14732] R13: 00007f40385e6038 R14: 00007f40385e5fa0 R15: 00007ffc4cf363d8 [ 349.271606][T14732] [ 349.271639][T14732] Mem-Info: [ 349.607248][T14732] active_anon:10961 inactive_anon:0 isolated_anon:0 [ 349.607248][T14732] active_file:3566 inactive_file:39991 isolated_file:0 [ 349.607248][T14732] unevictable:768 dirty:352 writeback:0 [ 349.607248][T14732] slab_reclaimable:12577 slab_unreclaimable:135267 [ 349.607248][T14732] mapped:45546 shmem:7165 pagetables:1570 [ 349.607248][T14732] sec_pagetables:0 bounce:0 [ 349.607248][T14732] kernel_misc_reclaimable:0 [ 349.607248][T14732] free:1225651 free_pcp:17596 free_cma:0 [ 349.653273][T14732] Node 0 active_anon:43644kB inactive_anon:0kB active_file:14264kB inactive_file:159764kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:178084kB dirty:1404kB writeback:0kB shmem:27124kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13640kB pagetables:6240kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 349.687369][T14732] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 349.747275][T14732] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 349.777314][T14732] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 349.784585][T14732] Node 0 DMA32 free:996596kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43644kB inactive_anon:0kB active_file:14264kB inactive_file:159764kB unevictable:1536kB writepending:1404kB zspages:0kB present:3129332kB managed:2565108kB mlocked:0kB bounce:0kB free_pcp:52280kB local_pcp:29056kB free_cma:0kB [ 349.824298][T14732] lowmem_reserve[]: 0 0 0 0 0 [ 349.829308][T14732] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 349.858730][T14732] lowmem_reserve[]: 0 0 0 0 0 [ 349.863464][T14732] Node 1 Normal free:3890648kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20132kB local_pcp:9568kB free_cma:0kB [ 349.896094][T14732] lowmem_reserve[]: 0 0 0 0 0 [ 349.900940][T14732] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 349.913772][T14732] Node 0 DMA32: 2*4kB (ME) 19*8kB (ME) 2*16kB (ME) 3*32kB (UME) 2*64kB (ME) 2*128kB (UM) 264*256kB (UME) 249*512kB (UM) 166*1024kB (UM) 4*2048kB (UM) 152*4096kB (M) = 996512kB [ 349.931881][T14732] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 349.943707][T14732] Node 1 Normal: 228*4kB (UME) 67*8kB (UME) 49*16kB (UME) 125*32kB (UME) 40*64kB (UME) 7*128kB (UME) 4*256kB (UME) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 946*4096kB (UM) = 3890648kB [ 349.950092][T14768] bond6: invalid ARP target 0.0.0.0 specified for addition [ 349.987580][T14768] bond6: option arp_ip_target: invalid value (0) [ 349.997691][T14732] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 350.014123][T14768] bond6 (unregistering): Released all slaves [ 350.027128][T14732] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 350.037180][T14732] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 350.050755][T14732] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 350.060350][T14732] 48951 total pagecache pages [ 350.065085][T14732] 0 pages in swap cache [ 350.071369][T14732] Free swap = 124996kB [ 350.075540][T14732] Total swap = 124996kB [ 350.080676][T14732] 2097051 pages RAM [ 350.084548][T14732] 0 pages HighMem/MovableOnly [ 350.113238][T14732] 424132 pages reserved [ 350.117425][T14732] 0 pages cma reserved [ 350.370960][T14776] wg1 speed is unknown, defaulting to 1000 [ 350.601448][T14780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2373'. [ 350.617498][T14780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2373'. [ 350.686758][T14776] vxcan1 speed is unknown, defaulting to 1000 [ 351.103788][T14783] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 351.252666][T14788] wg1 speed is unknown, defaulting to 1000 [ 351.297008][T14793] wg1 speed is unknown, defaulting to 1000 [ 351.426525][T14801] netlink: 'syz.0.2379': attribute type 1 has an invalid length. [ 351.455397][T14801] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2379'. [ 351.504760][T14804] netlink: 'syz.4.2376': attribute type 83 has an invalid length. [ 351.632406][T14801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2379'. [ 352.088971][T14805] bridge7: port 1(veth7) entered blocking state [ 352.095650][T14805] bridge7: port 1(veth7) entered disabled state [ 352.105703][T14805] veth7: entered allmulticast mode [ 352.140787][T14805] veth7: entered promiscuous mode [ 352.206538][T14808] bridge7: port 2(veth9) entered blocking state [ 352.228162][T14808] bridge7: port 2(veth9) entered disabled state [ 352.244996][T14808] veth9: entered allmulticast mode [ 352.266638][T14808] veth9: entered promiscuous mode [ 352.409818][T14810] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2380'. [ 352.571483][T14793] vxcan1 speed is unknown, defaulting to 1000 [ 352.772616][T14788] vxcan1 speed is unknown, defaulting to 1000 [ 352.772686][T14813] wg1 speed is unknown, defaulting to 1000 [ 353.283863][T14813] vxcan1 speed is unknown, defaulting to 1000 [ 353.729236][T14827] SET target dimension over the limit! [ 353.745769][T14827] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.755954][T14827] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.860571][T14827] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.885858][T14827] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.033194][T14827] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.043669][T14827] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.131354][T14832] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input9 [ 354.172184][T14834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2388'. [ 354.222905][T14827] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.233677][T14827] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.310656][T14833] wg1 speed is unknown, defaulting to 1000 [ 354.458596][ T8773] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.475022][ T8773] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.527408][ T8773] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.544981][ T8773] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.641716][ T8773] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.670089][ T8773] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.727031][ T8773] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.756770][ T8773] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.838177][T14841] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2391'. [ 354.927177][T14844] wg1 speed is unknown, defaulting to 1000 [ 354.941089][T14833] vxcan1 speed is unknown, defaulting to 1000 [ 355.129363][T14848] syzkaller1: entered promiscuous mode [ 355.134929][T14848] syzkaller1: entered allmulticast mode [ 355.394179][T14844] vxcan1 speed is unknown, defaulting to 1000 [ 355.581801][T14848] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 356.194681][T14852] tipc: Enabled bearer , priority 0 [ 356.214785][T14852] syzkaller0: entered promiscuous mode [ 356.226309][T14852] syzkaller0: entered allmulticast mode [ 356.266769][T14852] tipc: Resetting bearer [ 356.294172][T14851] tipc: Resetting bearer [ 356.336393][T14851] tipc: Disabling bearer [ 356.404399][T14854] wg1 speed is unknown, defaulting to 1000 [ 356.689993][T14859] netlink: 'syz.0.2397': attribute type 39 has an invalid length. [ 356.709404][T14862] veth0_virt_wifi: entered promiscuous mode [ 356.776767][T14854] vxcan1 speed is unknown, defaulting to 1000 [ 356.857206][ T8769] tipc: Subscription rejected, illegal request [ 356.881249][T14866] netlink: 'syz.1.2401': attribute type 4 has an invalid length. [ 356.986973][T14868] netlink: 'syz.0.2402': attribute type 8 has an invalid length. [ 357.024136][T14868] bridge8: entered promiscuous mode [ 357.043220][T14868] bridge8: entered allmulticast mode [ 357.189466][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 357.208683][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 357.217142][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 357.232182][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 357.243814][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 357.349094][T14877] wg1 speed is unknown, defaulting to 1000 [ 357.484437][T14872] wg1 speed is unknown, defaulting to 1000 [ 357.863418][T14872] vxcan1 speed is unknown, defaulting to 1000 [ 358.104911][T14877] vxcan1 speed is unknown, defaulting to 1000 [ 358.732853][T14872] chnl_net:caif_netlink_parms(): no params data found [ 358.805925][T14915] dvmrp12: entered allmulticast mode [ 358.985535][T14925] wg1 speed is unknown, defaulting to 1000 [ 359.176601][T14872] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.207657][T14872] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.214981][T14872] bridge_slave_0: entered allmulticast mode [ 359.248609][T14872] bridge_slave_0: entered promiscuous mode [ 359.263465][T14872] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.270924][T14872] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.278925][T14872] bridge_slave_1: entered allmulticast mode [ 359.287148][T14872] bridge_slave_1: entered promiscuous mode [ 359.308621][ T5840] Bluetooth: hci6: command tx timeout [ 359.338618][T14872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.356522][T14872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.441689][T14872] team0: Port device team_slave_0 added [ 359.447287][T14925] vxcan1 speed is unknown, defaulting to 1000 [ 359.476193][T14872] team0: Port device team_slave_1 added [ 359.586022][T14872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.602942][T14872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.629639][T14872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.640991][T14914] dvmrp12: left allmulticast mode [ 359.673865][T14872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.681304][T14872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.709797][T14872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.925329][T14872] hsr_slave_0: entered promiscuous mode [ 359.966842][T14872] hsr_slave_1: entered promiscuous mode [ 359.977139][T14872] debugfs: 'hsr0' already exists in 'hsr' [ 359.998601][T14872] Cannot create hsr debugfs directory [ 360.701760][T14872] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 360.734479][T14872] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 360.769906][T14872] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 360.791160][T14963] netlink: 'syz.1.2428': attribute type 1 has an invalid length. [ 360.819188][T14872] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 360.822435][T14963] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2428'. [ 360.975725][T14980] wg1 speed is unknown, defaulting to 1000 [ 361.079982][T14872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.132644][T14872] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.161157][ T8773] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.168364][ T8773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.201062][ T8773] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.208255][ T8773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.243559][T14987] wg1 speed is unknown, defaulting to 1000 [ 361.387448][T14997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2436'. [ 361.397230][ T5840] Bluetooth: hci6: command tx timeout [ 361.430069][T14980] vxcan1 speed is unknown, defaulting to 1000 [ 361.681055][T15003] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2437'. [ 361.858916][T14872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.004983][T14987] vxcan1 speed is unknown, defaulting to 1000 [ 362.011598][T15011] wg1 speed is unknown, defaulting to 1000 [ 362.473374][T14872] veth0_vlan: entered promiscuous mode [ 362.522287][T14872] veth1_vlan: entered promiscuous mode [ 362.713710][T14872] veth0_macvtap: entered promiscuous mode [ 362.737287][T15011] vxcan1 speed is unknown, defaulting to 1000 [ 362.756749][T14872] veth1_macvtap: entered promiscuous mode [ 362.883448][T14872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.885113][T15037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2445'. [ 362.931566][T14872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.945012][T15037] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2445'. [ 362.974118][ T8771] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.983328][ T8771] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.995221][ T8771] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.005183][ T8771] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.146282][T15035] wg1 speed is unknown, defaulting to 1000 [ 363.161875][ T8771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.187587][ T8771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.278675][ T1831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.293602][ T1831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.467970][ T5840] Bluetooth: hci6: command tx timeout [ 363.520973][T15043] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2446'. [ 363.720761][T15050] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2448'. [ 363.750364][T15035] vxcan1 speed is unknown, defaulting to 1000 [ 363.853721][T15052] netlink: 'syz.2.2449': attribute type 11 has an invalid length. [ 363.868493][T15052] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2449'. [ 364.025007][T15057] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2451'. [ 364.053101][T15060] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2452'. [ 365.313394][T15086] wg1 speed is unknown, defaulting to 1000 [ 365.521877][T15098] netlink: 'syz.1.2463': attribute type 8 has an invalid length. [ 365.547736][ T5840] Bluetooth: hci6: command tx timeout [ 365.564813][T15098] bridge6: entered promiscuous mode [ 365.571670][T15098] bridge6: entered allmulticast mode [ 365.924047][T15121] __nla_validate_parse: 1 callbacks suppressed [ 365.924066][T15121] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2469'. [ 366.123740][T15127] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2459'. [ 366.198282][T15132] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 366.253889][T15086] vxcan1 speed is unknown, defaulting to 1000 [ 366.352894][T15113] wg1 speed is unknown, defaulting to 1000 [ 366.414871][T15135] wg1 speed is unknown, defaulting to 1000 [ 366.616390][T15143] netlink: 'syz.1.2476': attribute type 8 has an invalid length. [ 366.650858][T15143] bridge7: entered promiscuous mode [ 366.656193][T15143] bridge7: entered allmulticast mode [ 366.851532][T15150] wg1 speed is unknown, defaulting to 1000 [ 367.028791][T15113] vxcan1 speed is unknown, defaulting to 1000 [ 367.100203][T15164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2482'. [ 367.430653][T15153] netlink: 'syz.4.2479': attribute type 2 has an invalid length. [ 367.829436][T15175] wg1 speed is unknown, defaulting to 1000 [ 367.835922][T15135] vxcan1 speed is unknown, defaulting to 1000 [ 368.140160][T15150] vxcan1 speed is unknown, defaulting to 1000 [ 368.321951][T15182] netlink: 'syz.1.2488': attribute type 8 has an invalid length. [ 368.623916][T15175] vxcan1 speed is unknown, defaulting to 1000 [ 368.840341][T15190] netlink: 'syz.1.2491': attribute type 29 has an invalid length. [ 368.850883][T15190] netlink: 'syz.1.2491': attribute type 29 has an invalid length. [ 368.860810][T15190] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2491'. [ 368.942260][T15192] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2491'. [ 369.163649][T15197] netlink: 'syz.1.2492': attribute type 1 has an invalid length. [ 369.226094][T15199] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2493'. [ 369.330682][T15201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2494'. [ 370.112604][T15212] wg1 speed is unknown, defaulting to 1000 [ 370.385740][T15225] netlink: 'syz.2.2499': attribute type 8 has an invalid length. [ 370.445489][T15212] vxcan1 speed is unknown, defaulting to 1000 [ 370.631317][T15234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2503'. [ 370.941324][T15252] netlink: 71 bytes leftover after parsing attributes in process `syz.0.2507'. [ 370.956160][T15246] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2506'. [ 371.256314][T15269] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2509'. [ 371.505965][T15264] wg1 speed is unknown, defaulting to 1000 [ 371.508087][T15278] FAULT_INJECTION: forcing a failure. [ 371.508087][T15278] name failslab, interval 1, probability 0, space 0, times 0 [ 371.524875][T15278] CPU: 0 UID: 0 PID: 15278 Comm: syz.2.2512 Not tainted syzkaller #0 PREEMPT(full) [ 371.524897][T15278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 371.524907][T15278] Call Trace: [ 371.524915][T15278] [ 371.524923][T15278] dump_stack_lvl+0x189/0x250 [ 371.524949][T15278] ? __pfx____ratelimit+0x10/0x10 [ 371.524972][T15278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.524993][T15278] ? __pfx__printk+0x10/0x10 [ 371.525013][T15278] ? __pfx___might_resched+0x10/0x10 [ 371.525028][T15278] ? fs_reclaim_acquire+0x7d/0x100 [ 371.525046][T15278] should_fail_ex+0x414/0x560 [ 371.525073][T15278] should_failslab+0xa8/0x100 [ 371.525091][T15278] __kvmalloc_node_noprof+0x158/0x910 [ 371.525111][T15278] ? net_generic+0x1e/0x240 [ 371.525131][T15278] ? alloc_netdev_mqs+0xa6/0x11b0 [ 371.525157][T15278] alloc_netdev_mqs+0xa6/0x11b0 [ 371.525175][T15278] ? __pfx_ipip6_tunnel_setup+0x10/0x10 [ 371.525197][T15278] ipip6_tunnel_locate+0x4c4/0x770 [ 371.525221][T15278] ? __pfx_ipip6_tunnel_locate+0x10/0x10 [ 371.525248][T15278] ipip6_tunnel_ctl+0x6b0/0x9e0 [ 371.525271][T15278] ip_tunnel_siocdevprivate+0xf5/0x180 [ 371.525292][T15278] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 371.525328][T15278] ipip6_tunnel_siocdevprivate+0x24e/0x1580 [ 371.525350][T15278] ? rcu_is_watching+0x15/0xb0 [ 371.525371][T15278] ? __pfx_ipip6_tunnel_siocdevprivate+0x10/0x10 [ 371.525389][T15278] ? preempt_schedule_irq+0xde/0x150 [ 371.525406][T15278] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 371.525420][T15278] ? trace_contention_end+0x39/0x120 [ 371.525448][T15278] ? irqentry_exit+0x74/0x90 [ 371.525464][T15278] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.525487][T15278] ? __pfx_ipip6_tunnel_siocdevprivate+0x10/0x10 [ 371.525508][T15278] ? dev_ifsioc+0xb27/0xf00 [ 371.525531][T15278] dev_ifsioc+0xb57/0xf00 [ 371.525558][T15278] dev_ioctl+0x84c/0x1150 [ 371.525579][T15278] sock_ioctl+0x719/0x790 [ 371.525603][T15278] ? __pfx_sock_ioctl+0x10/0x10 [ 371.525629][T15278] ? __fget_files+0x3a0/0x420 [ 371.525644][T15278] ? __fget_files+0x2a/0x420 [ 371.525664][T15278] ? bpf_lsm_file_ioctl+0x9/0x20 [ 371.525682][T15278] ? __pfx_sock_ioctl+0x10/0x10 [ 371.525703][T15278] __se_sys_ioctl+0xfc/0x170 [ 371.525727][T15278] do_syscall_64+0xfa/0xfa0 [ 371.525750][T15278] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.525766][T15278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.525784][T15278] ? clear_bhb_loop+0x60/0xb0 [ 371.525805][T15278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.525822][T15278] RIP: 0033:0x7f1b0058f6c9 [ 371.525837][T15278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.525851][T15278] RSP: 002b:00007f1b01484038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 371.525870][T15278] RAX: ffffffffffffffda RBX: 00007f1b007e5fa0 RCX: 00007f1b0058f6c9 [ 371.525883][T15278] RDX: 0000200000001040 RSI: 00000000000089f1 RDI: 0000000000000003 [ 371.525894][T15278] RBP: 00007f1b01484090 R08: 0000000000000000 R09: 0000000000000000 [ 371.525904][T15278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.525915][T15278] R13: 00007f1b007e6038 R14: 00007f1b007e5fa0 R15: 00007ffd1808e8a8 [ 371.525946][T15278] [ 372.320698][T15292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2518'. [ 372.383972][T15264] vxcan1 speed is unknown, defaulting to 1000 [ 372.910390][T15322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2525'. [ 373.021886][T15325] netlink: 'syz.4.2526': attribute type 8 has an invalid length. [ 373.295051][T15333] netlink: 'syz.6.2529': attribute type 13 has an invalid length. [ 373.373929][T15341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2533'. [ 373.397276][T15345] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2532'. [ 373.580288][T15351] No such timeout policy "syz1" [ 373.612448][T15355] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2529'. [ 373.815499][T15341] erspan0: entered promiscuous mode [ 373.821254][T15341] macsec1: entered promiscuous mode [ 373.826684][T15341] macsec1: entered allmulticast mode [ 373.832398][T15341] erspan0: entered allmulticast mode [ 373.840918][T15341] erspan0: left allmulticast mode [ 373.846481][T15341] erspan0: left promiscuous mode [ 373.880143][T15348] netlink: 'syz.0.2535': attribute type 15 has an invalid length. [ 373.889288][T15357] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 373.897970][T15357] syzkaller0: entered promiscuous mode [ 373.903638][T15357] syzkaller0: entered allmulticast mode [ 374.083782][T15363] netlink: 'syz.4.2538': attribute type 1 has an invalid length. [ 374.240007][T15363] 8021q: adding VLAN 0 to HW filter on device bond6 [ 374.247296][T15362] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2537'. [ 374.549824][T15363] bond6 (unregistering): Released all slaves [ 374.577071][T15368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2539'. [ 374.673338][T15385] x_tables: unsorted underflow at hook 3 [ 374.787055][T15389] wg1 speed is unknown, defaulting to 1000 [ 374.917791][T15394] veth0_to_team: entered promiscuous mode [ 375.296345][T15389] vxcan1 speed is unknown, defaulting to 1000 [ 376.778666][T15454] __nla_validate_parse: 7 callbacks suppressed [ 376.778684][T15454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2566'. [ 376.976421][T15455] wg1 speed is unknown, defaulting to 1000 [ 377.202307][T15455] vxcan1 speed is unknown, defaulting to 1000 [ 377.322309][T15460] tipc: Failed to remove unknown binding: 66,1,1/59233485:3470362582/3470362584 [ 377.408520][T15462] tipc: Failed to remove unknown binding: 66,1,1/59233485:3470362582/3470362584 [ 377.456040][T15462] tipc: Failed to remove unknown binding: 66,1,1/59233485:3470362582/3470362584 [ 377.593056][T15471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2569'. [ 377.734478][T15474] netlink: 'syz.4.2570': attribute type 1 has an invalid length. [ 377.806486][T15474] 8021q: adding VLAN 0 to HW filter on device bond6 [ 377.888567][T15476] bond6: (slave syz_tun): making interface the new active one [ 377.924978][T15476] bond6: (slave syz_tun): Enslaving as an active interface with an up link [ 378.080984][T15483] netlink: 'syz.4.2574': attribute type 8 has an invalid length. [ 378.238746][T15488] netlink: 'syz.2.2573': attribute type 1 has an invalid length. [ 378.328436][T15490] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20000 [ 378.448106][T15494] bridge8: entered promiscuous mode [ 378.682195][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 378.691621][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.698047][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.832997][T15504] wg1 speed is unknown, defaulting to 1000 [ 379.524925][T15542] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 379.544186][T15542] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 379.690772][T15504] vxcan1 speed is unknown, defaulting to 1000 [ 379.974981][T15557] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 380.056444][T15558] wg1 speed is unknown, defaulting to 1000 [ 380.489218][T15558] vxcan1 speed is unknown, defaulting to 1000 [ 380.854578][T15575] syzkaller0: entered promiscuous mode [ 380.867725][T15575] syzkaller0: entered allmulticast mode [ 383.761953][T15595] wg1 speed is unknown, defaulting to 1000 [ 384.145447][T15605] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 384.244305][T15595] vxcan1 speed is unknown, defaulting to 1000 [ 384.329299][T15612] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2606'. [ 384.358619][T15612] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2606'. [ 385.062114][T15635] lo speed is unknown, defaulting to 1000 [ 385.103663][T15635] lo speed is unknown, defaulting to 1000 [ 385.123784][T15635] lo speed is unknown, defaulting to 1000 [ 385.208121][T15635] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 385.306583][T15635] lo speed is unknown, defaulting to 1000 [ 385.378867][T15635] lo speed is unknown, defaulting to 1000 [ 385.393977][T15642] netlink: 'syz.0.2616': attribute type 3 has an invalid length. [ 385.418664][T15635] lo speed is unknown, defaulting to 1000 [ 385.439950][T15642] syz_tun: entered allmulticast mode [ 385.445359][T15635] lo speed is unknown, defaulting to 1000 [ 385.468900][T15635] lo speed is unknown, defaulting to 1000 [ 385.476819][T15635] lo speed is unknown, defaulting to 1000 [ 385.485696][T15635] lo speed is unknown, defaulting to 1000 [ 385.492996][T15642] siw: device registration error -23 [ 385.538555][T15642] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 385.576728][T15641] syz_tun: left allmulticast mode [ 385.773944][T15649] wg1 speed is unknown, defaulting to 1000 [ 386.180518][T15649] vxcan1 speed is unknown, defaulting to 1000 [ 386.440248][T15649] lo speed is unknown, defaulting to 1000 [ 386.606501][T15664] dvmrp1: entered allmulticast mode [ 386.621304][T15670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2628'. [ 386.626104][T15664] dvmrp1: left allmulticast mode [ 386.635807][T15670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2628'. [ 386.839788][T15684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2629'. [ 386.911514][T15684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2629'. [ 386.945192][T15672] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2627'. [ 387.099774][T15690] wg1 speed is unknown, defaulting to 1000 [ 387.454302][T15690] vxcan1 speed is unknown, defaulting to 1000 [ 387.528102][T15708] netlink: 'syz.4.2633': attribute type 1 has an invalid length. [ 387.569917][T15708] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 387.781785][T15721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2637'. [ 387.988438][T15719] wg1 speed is unknown, defaulting to 1000 [ 388.004989][T15690] lo speed is unknown, defaulting to 1000 [ 388.045768][T15734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2641'. [ 388.171186][T15738] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 388.176987][T15738] dvmrp1: linktype set to 769 [ 388.341389][ T8766] tipc: Subscription rejected, illegal request [ 388.490629][T15749] netlink: 'syz.1.2644': attribute type 4 has an invalid length. [ 388.723390][T15719] vxcan1 speed is unknown, defaulting to 1000 [ 388.823779][T15751] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2646'. [ 389.259549][T15761] wg1 speed is unknown, defaulting to 1000 [ 389.275329][T15719] lo speed is unknown, defaulting to 1000 [ 389.576551][T15765] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2650'. [ 389.733537][T15761] vxcan1 speed is unknown, defaulting to 1000 [ 389.928388][T15769] netlink: 'syz.2.2652': attribute type 8 has an invalid length. [ 389.976719][T15761] lo speed is unknown, defaulting to 1000 [ 390.148808][T15775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2654'. [ 390.675246][T15787] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2658'. [ 390.963079][T15802] netlink: 'syz.0.2663': attribute type 8 has an invalid length. [ 391.517987][T15817] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2668'. [ 391.546535][T15817] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2668'. [ 391.556381][T15817] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2668'. [ 391.937003][T15833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2673'. [ 391.955386][T15832] wg1 speed is unknown, defaulting to 1000 [ 392.300747][T15832] vxcan1 speed is unknown, defaulting to 1000 [ 392.398107][ T5883] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 392.749364][T15858] wg1 speed is unknown, defaulting to 1000 [ 392.899189][T15832] lo speed is unknown, defaulting to 1000 [ 392.901921][ T8766] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 393.026817][ T5883] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 393.053755][T15876] netlink: 'syz.6.2681': attribute type 4 has an invalid length. [ 393.105936][T15882] netlink: 'syz.6.2681': attribute type 4 has an invalid length. [ 393.183320][T15879] netlink: 'syz.2.2682': attribute type 10 has an invalid length. [ 393.195918][T15858] vxcan1 speed is unknown, defaulting to 1000 [ 393.435297][T15892] batadv_slave_1: entered promiscuous mode [ 393.445377][T15892] batadv_slave_1: left promiscuous mode [ 393.494335][T15897] netlink: 'syz.6.2686': attribute type 11 has an invalid length. [ 393.503176][T15897] netlink: 'syz.6.2686': attribute type 23 has an invalid length. [ 393.514760][T15897] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2686'. [ 393.579727][T15858] lo speed is unknown, defaulting to 1000 [ 394.060903][ T8766] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 394.070010][ T8766] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 394.152994][T15918] tipc: Started in network mode [ 394.171613][T15918] tipc: Node identity 8e08675a364a, cluster identity 4711 [ 394.186728][T15918] tipc: Enabled bearer , priority 0 [ 394.214535][T15913] syzkaller0: entered promiscuous mode [ 394.233670][T15913] syzkaller0: entered allmulticast mode [ 394.354311][T15913] syzkaller0: mtu greater than device maximum [ 394.371046][T15912] tipc: Resetting bearer [ 394.399479][T15912] tipc: Disabling bearer [ 394.558089][ T5952] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 394.943614][T15942] wg1 speed is unknown, defaulting to 1000 [ 394.977768][T15946] netlink: 'syz.6.2700': attribute type 13 has an invalid length. [ 394.985624][T15946] netlink: 'syz.6.2700': attribute type 17 has an invalid length. [ 395.297850][T15946] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 395.335002][T15960] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 395.389185][T15942] vxcan1 speed is unknown, defaulting to 1000 [ 395.466381][T15969] netlink: 'syz.0.2704': attribute type 8 has an invalid length. [ 395.515956][T15973] SET target dimension over the limit! [ 395.712160][T15977] tipc: Enabled bearer , priority 0 [ 395.781143][T15977] syzkaller0: entered promiscuous mode [ 395.803789][T15977] syzkaller0: entered allmulticast mode [ 395.859638][T15977] syzkaller0: mtu greater than device maximum [ 395.875508][T15976] tipc: Resetting bearer [ 395.916526][T15976] tipc: Disabling bearer [ 395.992746][T15991] tipc: Enabled bearer , priority 0 [ 396.046201][T15942] lo speed is unknown, defaulting to 1000 [ 396.310300][T16016] netlink: 'syz.0.2716': attribute type 8 has an invalid length. [ 396.340791][T15992] syzkaller0: entered promiscuous mode [ 396.346459][T15992] syzkaller0: entered allmulticast mode [ 396.354589][T16013] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2714'. [ 396.391803][T15984] tipc: Resetting bearer [ 396.439159][T15984] tipc: Disabling bearer [ 396.447752][T16019] netlink: 'syz.2.2714': attribute type 1 has an invalid length. [ 396.501558][T16025] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2714'. [ 397.136296][T16056] wg1 speed is unknown, defaulting to 1000 [ 397.153129][T16055] wg1 speed is unknown, defaulting to 1000 [ 397.162956][T16058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2724'. [ 397.175671][T16060] netlink: 'syz.1.2727': attribute type 29 has an invalid length. [ 397.554833][T16056] vxcan1 speed is unknown, defaulting to 1000 [ 397.751747][T16073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2730'. [ 397.867895][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 398.162159][T16095] openvswitch: netlink: IP tunnel dst address not specified [ 398.215897][T16056] lo speed is unknown, defaulting to 1000 [ 398.215934][T16055] vxcan1 speed is unknown, defaulting to 1000 [ 398.551531][T16115] netlink: 'syz.0.2739': attribute type 11 has an invalid length. [ 398.562258][T16115] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2739'. [ 398.829766][T16055] lo speed is unknown, defaulting to 1000 [ 399.009444][T16135] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2747'. [ 399.442920][T16147] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2750'. [ 399.443054][T16148] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2749'. [ 399.515508][T16148] ieee802154 phy0 wpan0: encryption failed: -22 [ 399.706342][T16154] tipc: Enabling of bearer rejected, already enabled [ 399.766494][T16158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2754'. [ 399.774110][T16154] syzkaller0: mtu greater than device maximum [ 399.827037][T16158] ipvlan1: entered promiscuous mode [ 399.834668][T16158] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 399.926467][T16160] wg1 speed is unknown, defaulting to 1000 [ 399.999571][ T8769] tipc: Subscription rejected, illegal request [ 400.002720][T16168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2756'. [ 400.024955][T16163] netlink: 'syz.4.2757': attribute type 4 has an invalid length. [ 400.134884][T16175] tipc: Enabling of bearer rejected, already enabled [ 400.159549][T16175] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 400.166982][T16175] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 400.420010][T16160] vxcan1 speed is unknown, defaulting to 1000 [ 400.702737][T16160] lo speed is unknown, defaulting to 1000 [ 401.762859][T16228] wg1 speed is unknown, defaulting to 1000 [ 401.774244][T16242] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 402.244454][T16228] vxcan1 speed is unknown, defaulting to 1000 [ 402.254480][T16247] IPVS: Error connecting to the multicast addr [ 402.706037][T16228] lo speed is unknown, defaulting to 1000 [ 403.665983][T16301] __nla_validate_parse: 1 callbacks suppressed [ 403.666001][T16301] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2793'. [ 403.902415][T16311] netlink: 'syz.6.2798': attribute type 2 has an invalid length. [ 403.917386][T16311] 9: entered promiscuous mode [ 404.243422][T16332] wg1 speed is unknown, defaulting to 1000 [ 404.280917][T16329] syzkaller0: entered promiscuous mode [ 404.288192][T16329] syzkaller0: entered allmulticast mode [ 404.334354][T16329] wg1 speed is unknown, defaulting to 1000 [ 404.652732][T16332] vxcan1 speed is unknown, defaulting to 1000 [ 404.882544][T16346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2808'. [ 405.057478][T16329] vxcan1 speed is unknown, defaulting to 1000 [ 405.140847][T16351] syzkaller0: entered promiscuous mode [ 405.146353][T16351] syzkaller0: entered allmulticast mode [ 405.152089][T16332] lo speed is unknown, defaulting to 1000 [ 405.655724][T16329] lo speed is unknown, defaulting to 1000 [ 405.984111][T16381] wg1 speed is unknown, defaulting to 1000 [ 406.187751][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 406.723023][T16381] vxcan1 speed is unknown, defaulting to 1000 [ 407.077804][T16381] lo speed is unknown, defaulting to 1000 [ 407.280337][T16395] netlink: 'syz.2.2821': attribute type 4 has an invalid length. [ 408.328575][T16407] netlink: 'syz.6.2825': attribute type 4 has an invalid length. [ 408.367288][T16407] netlink: 'syz.6.2825': attribute type 4 has an invalid length. [ 408.470180][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 408.485470][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 408.496624][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 408.514257][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 408.527765][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 408.616597][T16413] wg1 speed is unknown, defaulting to 1000 [ 408.671026][T16418] raw_sendmsg: syz.6.2827 forgot to set AF_INET. Fix it! [ 409.099147][T16413] vxcan1 speed is unknown, defaulting to 1000 [ 409.153398][T16436] netlink: 'syz.0.2833': attribute type 10 has an invalid length. [ 409.160874][T16437] netlink: 'syz.6.2832': attribute type 10 has an invalid length. [ 409.171304][T16437] bridge0: port 3(macsec0) entered blocking state [ 409.178071][T16437] bridge0: port 3(macsec0) entered disabled state [ 409.185093][T16437] macsec0: entered allmulticast mode [ 409.207581][T16437] veth1_macvtap: entered allmulticast mode [ 409.220165][T16437] macsec0: entered promiscuous mode [ 409.226767][T16437] bridge0: port 3(macsec0) entered blocking state [ 409.233380][T16437] bridge0: port 3(macsec0) entered forwarding state [ 409.348877][T16443] sock: sock_timestamping_bind_phc: sock not bind to device [ 409.570471][T16454] wg1 speed is unknown, defaulting to 1000 [ 409.655850][T16413] lo speed is unknown, defaulting to 1000 [ 409.667926][T16460] netlink: 'syz.6.2836': attribute type 10 has an invalid length. [ 409.729174][T16460] team0: Port device dummy0 added [ 409.863329][T16472] netlink: 'syz.6.2836': attribute type 10 has an invalid length. [ 410.070350][T16454] vxcan1 speed is unknown, defaulting to 1000 [ 410.388624][T16413] chnl_net:caif_netlink_parms(): no params data found [ 410.583570][T16454] lo speed is unknown, defaulting to 1000 [ 410.667834][ T5837] Bluetooth: hci0: command tx timeout [ 410.771174][T16413] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.786009][T16413] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.796257][T16413] bridge_slave_0: entered allmulticast mode [ 410.804171][T16413] bridge_slave_0: entered promiscuous mode [ 410.817255][T16413] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.825135][T16413] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.832813][T16413] bridge_slave_1: entered allmulticast mode [ 410.840770][T16413] bridge_slave_1: entered promiscuous mode [ 410.843430][T16497] netlink: 332 bytes leftover after parsing attributes in process `syz.0.2843'. [ 410.862742][T16497] netlink: 'syz.0.2843': attribute type 9 has an invalid length. [ 410.870689][T16497] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2843'. [ 410.879855][T16497] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2843'. [ 410.907158][T16492] syzkaller0: entered promiscuous mode [ 410.912900][T16492] syzkaller0: entered allmulticast mode [ 410.985049][T16413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.849460][T16516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.483969][T16501] wg1 speed is unknown, defaulting to 1000 [ 412.492627][T16413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.730387][T16413] team0: Port device team_slave_0 added [ 412.747997][ T5837] Bluetooth: hci0: command tx timeout [ 412.821716][T16413] team0: Port device team_slave_1 added [ 412.881024][T16501] vxcan1 speed is unknown, defaulting to 1000 [ 412.927712][T16413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.948113][T16413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.978948][T16413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.997041][T16413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.014744][T16413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.043140][T16413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.224232][T16413] hsr_slave_0: entered promiscuous mode [ 413.241780][T16413] hsr_slave_1: entered promiscuous mode [ 413.261861][T16413] debugfs: 'hsr0' already exists in 'hsr' [ 413.276611][T16413] Cannot create hsr debugfs directory [ 413.297964][T16501] lo speed is unknown, defaulting to 1000 [ 413.493100][T16540] pim6reg1: entered promiscuous mode [ 413.511073][T16540] pim6reg1: entered allmulticast mode [ 414.418570][T16571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2863'. [ 414.542615][T16575] netlink: 'syz.4.2864': attribute type 4 has an invalid length. [ 414.590713][T16575] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2864'. [ 414.615452][T16575] netlink: 'syz.4.2864': attribute type 10 has an invalid length. [ 414.635283][T16575] bond6: (slave syz_tun): Releasing active interface [ 414.658012][T16575] team0: Port device syz_tun added [ 414.830213][ T5837] Bluetooth: hci0: command tx timeout [ 414.950540][T16585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2867'. [ 415.031227][T16413] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 415.051938][T16583] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2866'. [ 415.074857][T16413] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 415.099566][T16413] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 415.132531][T16413] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 415.201711][T16590] wg1 speed is unknown, defaulting to 1000 [ 415.321618][T16413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.335466][T16610] netlink: 'syz.4.2871': attribute type 1 has an invalid length. [ 415.363587][T16413] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.390305][ T8778] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.397598][ T8778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.454981][ T8769] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.462227][ T8769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.616912][T16590] vxcan1 speed is unknown, defaulting to 1000 [ 415.944826][T16413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.016742][T16627] netlink: 'syz.2.2875': attribute type 21 has an invalid length. [ 416.075175][T16627] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2875'. [ 416.116889][T16590] lo speed is unknown, defaulting to 1000 [ 416.132013][T16413] veth0_vlan: entered promiscuous mode [ 416.184175][T16625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2875'. [ 416.220067][T16413] veth1_vlan: entered promiscuous mode [ 416.248004][T16633] wg1 speed is unknown, defaulting to 1000 [ 416.336431][T16413] veth0_macvtap: entered promiscuous mode [ 416.373650][T16413] veth1_macvtap: entered promiscuous mode [ 416.445207][T16413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.511516][T16413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.536249][ T8769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.555013][T16647] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.584063][ T8769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.601990][T16646] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2880'. [ 416.620903][ T8769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.647605][ T8769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.701813][T16647] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.784396][T16647] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.831766][T16652] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20000 [ 416.853678][ T8769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.874914][T16654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.888706][ T8769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.901366][T16647] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.908113][ T5837] Bluetooth: hci0: command tx timeout [ 416.941793][T16635] veth7: left allmulticast mode [ 416.946697][T16635] veth7: left promiscuous mode [ 416.952130][T16635] bridge7: port 1(veth7) entered disabled state [ 416.963020][T16635] veth9: left allmulticast mode [ 416.968699][T16635] veth9: left promiscuous mode [ 416.973775][T16635] bridge7: port 2(veth9) entered disabled state [ 417.000327][T16633] vxcan1 speed is unknown, defaulting to 1000 [ 417.006605][ T8769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.034781][ T8769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.115041][ T8769] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.172439][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.220418][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.282202][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.422004][T16667] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 417.454862][T16633] lo speed is unknown, defaulting to 1000 [ 417.458753][T16667] netlink: 'syz.1.2882': attribute type 4 has an invalid length. [ 418.103035][T16691] netlink: 'syz.1.2890': attribute type 39 has an invalid length. [ 418.457240][T16699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2893'. [ 418.530658][T16699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2893'. [ 418.626810][ T30] audit: type=1800 audit(1763392427.837:9): pid=16704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2895" name="memory.events" dev="tmpfs" ino=345 res=0 errno=0 [ 419.253458][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 419.269711][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 419.280305][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 419.312913][T16724] netlink: 'syz.4.2899': attribute type 4 has an invalid length. [ 419.321759][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 419.338553][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 419.368030][T16725] netlink: 'syz.4.2899': attribute type 4 has an invalid length. [ 419.496728][T16710] wg1 speed is unknown, defaulting to 1000 [ 419.532120][T16722] wg1 speed is unknown, defaulting to 1000 [ 419.636039][T16734] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2900'. [ 419.655715][T16734] 0ªX¹¦À: renamed from caif0 [ 419.827293][T16734] 0ªX¹¦À: entered allmulticast mode [ 419.844152][T16734] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 420.148872][T16710] vxcan1 speed is unknown, defaulting to 1000 [ 420.856784][T16722] vxcan1 speed is unknown, defaulting to 1000 [ 420.858874][T16710] lo speed is unknown, defaulting to 1000 [ 421.183232][T16765] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2910'. [ 421.288316][T16768] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2911'. [ 421.299195][T16765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2910'. [ 421.319040][T16765] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2910'. [ 421.321518][T16758] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2909'. [ 421.338902][T16765] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2910'. [ 421.381479][T16765] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2910'. [ 421.397396][T16769] netlink: 'syz.4.2910': attribute type 4 has an invalid length. [ 421.409835][ T5840] Bluetooth: hci3: command tx timeout [ 421.410520][T16765] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2910'. [ 421.425167][T16765] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2910'. [ 421.448777][T16773] netlink: 'syz.4.2910': attribute type 4 has an invalid length. [ 421.465253][T16765] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2910'. [ 421.842675][T16722] lo speed is unknown, defaulting to 1000 [ 422.040675][ T5936] vxcan1 speed is unknown, defaulting to 1000 [ 422.061342][ T5936] syz2: Port: 1 Link DOWN [ 422.152175][ T5936] vxcan1 speed is unknown, defaulting to 1000 [ 422.187802][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 422.360150][T16794] wg1 speed is unknown, defaulting to 1000 [ 422.713586][T16722] chnl_net:caif_netlink_parms(): no params data found [ 422.952300][T16794] vxcan1 speed is unknown, defaulting to 1000 [ 423.039142][T16722] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.047262][T16722] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.055317][T16722] bridge_slave_0: entered allmulticast mode [ 423.063792][T16722] bridge_slave_0: entered promiscuous mode [ 423.095593][T16722] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.108886][T16722] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.125064][T16722] bridge_slave_1: entered allmulticast mode [ 423.154795][T16722] bridge_slave_1: entered promiscuous mode [ 423.342803][T16722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.360376][T16794] lo speed is unknown, defaulting to 1000 [ 423.372301][T16722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.433348][T16722] team0: Port device team_slave_0 added [ 423.452801][T16722] team0: Port device team_slave_1 added [ 423.469241][ T5840] Bluetooth: hci3: command tx timeout [ 423.569298][T16722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.576839][T16722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.606031][T16722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.626515][T16722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.634579][T16722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.678267][T16722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.895850][T16722] hsr_slave_0: entered promiscuous mode [ 423.913300][T16722] hsr_slave_1: entered promiscuous mode [ 423.961405][T16722] debugfs: 'hsr0' already exists in 'hsr' [ 423.967337][T16722] Cannot create hsr debugfs directory [ 424.574935][T16854] netlink: 'syz.2.2931': attribute type 1 has an invalid length. [ 424.664914][T16854] 8021q: adding VLAN 0 to HW filter on device bond5 [ 424.682427][T16855] bond5: (slave ip6gretap1): making interface the new active one [ 424.691236][T16855] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 424.725138][T16854] veth5: entered promiscuous mode [ 424.733068][T16854] bond5: (slave veth5): Enslaving as an active interface with a down link [ 424.752971][T16855] erspan0: entered allmulticast mode [ 424.777364][T16855] bond5: (slave erspan0): Enslaving as an active interface with an up link [ 424.828252][T16867] netlink: 'syz.1.2934': attribute type 1 has an invalid length. [ 424.836121][T16867] netlink: 'syz.1.2934': attribute type 3 has an invalid length. [ 424.854276][T16867] NCSI netlink: No device for ifindex 813332851 [ 424.883582][ T8769] bond5: (slave erspan0): link status definitely down, disabling slave [ 424.907162][ T8769] ip6gretap1: entered promiscuous mode [ 425.044395][T16877] tipc: Resetting bearer [ 425.078752][T16722] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 425.091345][T16722] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 425.131257][T16722] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 425.142109][T16722] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 425.156294][T16881] IPVS: Error connecting to the multicast addr [ 425.423587][T16722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.461018][T16722] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.484398][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.491638][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.507357][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.514539][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.559083][ T5840] Bluetooth: hci3: command tx timeout [ 425.912948][T16915] netlink: 'syz.1.2943': attribute type 4 has an invalid length. [ 426.154012][T16722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.187005][T16921] ip6gre1: entered promiscuous mode [ 426.356338][T16925] __nla_validate_parse: 91 callbacks suppressed [ 426.356356][T16925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2947'. [ 426.795592][T16908] xt_TCPMSS: Only works on TCP SYN packets [ 427.637712][ T5840] Bluetooth: hci3: command tx timeout [ 428.006269][T16722] veth0_vlan: entered promiscuous mode [ 428.026774][T16722] veth1_vlan: entered promiscuous mode [ 428.113954][T16722] veth0_macvtap: entered promiscuous mode [ 428.143059][T16722] veth1_macvtap: entered promiscuous mode [ 428.161926][T16940] veth1_to_bond: entered allmulticast mode [ 428.193121][T16938] veth1_to_bond: left allmulticast mode [ 428.201521][T16945] tipc: Enabled bearer , priority 0 [ 428.213692][T16945] syzkaller0: entered promiscuous mode [ 428.248135][T16945] syzkaller0: entered allmulticast mode [ 428.282654][T16722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.315077][T16945] tipc: Resetting bearer [ 428.329592][T16722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.380567][T16949] tipc: Failed to remove unknown binding: 66,1,1/59233485:370091329/370091331 [ 428.423396][T16941] tipc: Resetting bearer [ 428.441958][T16954] tipc: Failed to remove unknown binding: 66,1,1/59233485:370091329/370091331 [ 428.452565][T16941] tipc: Disabling bearer [ 428.452775][T16954] tipc: Failed to remove unknown binding: 66,1,1/59233485:370091329/370091331 [ 428.476309][T16956] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 428.495792][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.505540][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.525608][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.546290][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.644501][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.664865][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.704116][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.713331][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.808766][T16964] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 428.987180][T16969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2959'. [ 429.026783][T16969] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2959'. [ 429.552695][T16980] wg1 speed is unknown, defaulting to 1000 [ 429.600015][T16986] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2963'. [ 429.613000][T16983] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2963'. [ 429.793954][T16990] Bluetooth: MGMT ver 1.23 [ 429.817029][ T5837] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 429.837955][ T5837] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 429.862204][ T5837] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 429.871009][ T5837] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 429.886925][ T5837] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 429.941220][ T5825] team0: Port device syz_tun removed [ 430.089600][T17002] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2965'. [ 430.203595][T16980] vxcan1 speed is unknown, defaulting to 1000 [ 430.276892][T17008] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2969'. [ 430.507013][T16980] lo speed is unknown, defaulting to 1000 [ 430.587192][T17020] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2972'. [ 430.788923][T17024] "syz.1.2973" (17024) uses obsolete ecb(arc4) skcipher [ 431.024244][T17041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2978'. [ 431.371636][T17048] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input10 [ 431.424471][T16976] mpoa:mpoad_close: () going down [ 431.484878][T16992] wg1 speed is unknown, defaulting to 1000 [ 431.510483][T17053] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2980'. [ 431.548757][T17036] wg1 speed is unknown, defaulting to 1000 [ 431.659337][T17047] wg1 speed is unknown, defaulting to 1000 [ 431.951777][ T5837] Bluetooth: hci7: command tx timeout [ 431.963775][T16992] vxcan1 speed is unknown, defaulting to 1000 [ 432.163825][T17058] netlink: 'syz.6.2982': attribute type 142 has an invalid length. [ 432.282196][T17062] veth0: entered promiscuous mode [ 432.308533][T17060] wg1 speed is unknown, defaulting to 1000 [ 432.394782][T17036] vxcan1 speed is unknown, defaulting to 1000 [ 432.403095][T16992] lo speed is unknown, defaulting to 1000 [ 432.503842][T17061] veth0: left promiscuous mode [ 432.808558][T17071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2985'. [ 432.857550][T17047] vxcan1 speed is unknown, defaulting to 1000 [ 432.868421][T17036] lo speed is unknown, defaulting to 1000 [ 433.000282][T16992] chnl_net:caif_netlink_parms(): no params data found [ 433.281350][T16992] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.288960][T16992] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.296295][T16992] bridge_slave_0: entered allmulticast mode [ 433.318890][T16992] bridge_slave_0: entered promiscuous mode [ 433.338151][T16992] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.345454][T16992] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.352885][T16992] bridge_slave_1: entered allmulticast mode [ 433.361928][T16992] bridge_slave_1: entered promiscuous mode [ 433.436396][T16992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.469979][T16992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.523991][T17060] vxcan1 speed is unknown, defaulting to 1000 [ 433.531278][T17047] lo speed is unknown, defaulting to 1000 [ 433.621174][T17090] wg1 speed is unknown, defaulting to 1000 [ 433.677944][T16992] team0: Port device team_slave_0 added [ 433.700690][T16992] team0: Port device team_slave_1 added [ 433.807162][T16992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.817607][T16992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.848971][T16992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.932366][T16992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.940624][T16992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.979268][T16992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.027853][ T5837] Bluetooth: hci7: command tx timeout [ 434.137172][T17090] vxcan1 speed is unknown, defaulting to 1000 [ 434.144216][T17060] lo speed is unknown, defaulting to 1000 [ 434.165254][T16992] hsr_slave_0: entered promiscuous mode [ 434.201204][T16992] hsr_slave_1: entered promiscuous mode [ 434.209099][T16992] debugfs: 'hsr0' already exists in 'hsr' [ 434.214915][T16992] Cannot create hsr debugfs directory [ 434.602229][T17090] lo speed is unknown, defaulting to 1000 [ 434.629419][T16992] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.653742][T16992] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.892691][T16992] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.912228][T16992] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.096010][T17100] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2990'. [ 435.096389][T16992] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.119001][T16992] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.253893][T17104] netlink: 'syz.1.2991': attribute type 30 has an invalid length. [ 435.264478][T16992] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.277403][T16992] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.509800][T17110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2992'. [ 435.776901][T16992] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 435.812324][T16992] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 435.843524][T16992] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 435.881375][T16992] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 435.909999][T17119] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2996'. [ 435.923731][T17119] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2996'. [ 436.050391][T16992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.091948][T16992] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.107529][ T8778] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.109841][ T5837] Bluetooth: hci7: command tx timeout [ 436.114705][ T8778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.192371][ T8778] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.199667][ T8778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.332496][T17139] wg1 speed is unknown, defaulting to 1000 [ 436.347938][ T8778] ip6gretap1: left promiscuous mode [ 436.372351][T17145] tipc: Can't bind to reserved service type 1 [ 436.396628][ T12] tipc: Subscription rejected, illegal request [ 436.406013][T17146] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3002'. [ 436.444547][T17143] netlink: 'syz.1.3001': attribute type 4 has an invalid length. [ 436.685842][T17157] wg1 speed is unknown, defaulting to 1000 [ 436.731738][T16992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.826118][T17169] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3005'. [ 436.835053][T17139] vxcan1 speed is unknown, defaulting to 1000 [ 437.301354][T16992] veth0_vlan: entered promiscuous mode [ 437.338239][T16992] veth1_vlan: entered promiscuous mode [ 437.345889][T17157] vxcan1 speed is unknown, defaulting to 1000 [ 437.357699][T17139] lo speed is unknown, defaulting to 1000 [ 437.521580][T16992] veth0_macvtap: entered promiscuous mode [ 437.567023][T17182] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 437.619922][T16992] veth1_macvtap: entered promiscuous mode [ 437.662874][T16992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.683464][T16992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.710700][ T8776] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.721389][T17185] netlink: 'syz.6.3009': attribute type 8 has an invalid length. [ 437.721601][ T8776] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.748823][ T8776] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.835391][T17157] lo speed is unknown, defaulting to 1000 [ 437.844594][ T8776] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.965543][T17187] netlink: 'syz.6.3010': attribute type 1 has an invalid length. [ 437.976290][T17187] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3010'. [ 437.988264][T17187] netlink: 'syz.6.3010': attribute type 28 has an invalid length. [ 437.996328][T17187] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3010'. [ 438.191285][ T5837] Bluetooth: hci7: command tx timeout [ 438.324605][ T8778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.343766][ T8778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.441290][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.462410][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.237250][T17226] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3018'. [ 439.320421][T17235] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3021'. [ 439.342462][T17235] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3021'. [ 439.363255][T17235] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3021'. [ 439.390386][T17235] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3021'. [ 439.652399][T17255] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 439.692990][T17259] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3026'. [ 439.965533][T17270] wg1 speed is unknown, defaulting to 1000 [ 440.023144][T17272] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3032'. [ 440.093937][T17277] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.102375][T17277] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.134907][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.262554][T17270] vxcan1 speed is unknown, defaulting to 1000 [ 440.471104][T17270] lo speed is unknown, defaulting to 1000 [ 440.581318][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 440.593145][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 440.609332][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 440.618225][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 440.638032][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 440.835780][T17285] wg1 speed is unknown, defaulting to 1000 [ 441.009261][ T5883] IPVS: starting estimator thread 0... [ 441.028183][T17303] netlink: 'syz.1.3038': attribute type 1 has an invalid length. [ 441.101177][T17303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 441.118048][T17285] vxcan1 speed is unknown, defaulting to 1000 [ 441.158278][T17304] IPVS: using max 32 ests per chain, 76800 per kthread [ 441.185418][T17306] 8021q: adding VLAN 0 to HW filter on device bond1 [ 441.197231][T17306] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 441.233365][T17306] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 441.324835][T17303] veth3: entered promiscuous mode [ 441.343026][T17303] bond1: (slave veth3): Enslaving as an active interface with a down link [ 441.455861][T17285] lo speed is unknown, defaulting to 1000 [ 441.455882][T17309] wg1 speed is unknown, defaulting to 1000 [ 441.835563][T17325] __nla_validate_parse: 3 callbacks suppressed [ 441.835581][T17325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3044'. [ 442.400960][T17285] chnl_net:caif_netlink_parms(): no params data found [ 442.424694][T17309] vxcan1 speed is unknown, defaulting to 1000 [ 442.615314][T17340] wg1 speed is unknown, defaulting to 1000 [ 442.668866][T17341] wg1 speed is unknown, defaulting to 1000 [ 442.748925][ T5840] Bluetooth: hci2: command tx timeout [ 442.812975][T17285] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.820385][T17285] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.838922][T17285] bridge_slave_0: entered allmulticast mode [ 442.847126][T17285] bridge_slave_0: entered promiscuous mode [ 442.860213][T17309] lo speed is unknown, defaulting to 1000 [ 442.867184][T17285] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.888375][T17285] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.895674][T17285] bridge_slave_1: entered allmulticast mode [ 442.929075][T17285] bridge_slave_1: entered promiscuous mode [ 443.026668][T17340] vxcan1 speed is unknown, defaulting to 1000 [ 443.060691][T17285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.092072][T17285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.241285][T17285] team0: Port device team_slave_0 added [ 443.261589][T17285] team0: Port device team_slave_1 added [ 443.595649][T17285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.603589][T17285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.648086][T17285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.668883][T17340] lo speed is unknown, defaulting to 1000 [ 443.674817][T17341] vxcan1 speed is unknown, defaulting to 1000 [ 443.713878][T17285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.727624][T17285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.793763][T17285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.019727][T17285] hsr_slave_0: entered promiscuous mode [ 444.026555][T17285] hsr_slave_1: entered promiscuous mode [ 444.066040][T17285] debugfs: 'hsr0' already exists in 'hsr' [ 444.075252][T17285] Cannot create hsr debugfs directory [ 444.210647][T17341] lo speed is unknown, defaulting to 1000 [ 444.837783][ T5840] Bluetooth: hci2: command tx timeout [ 445.289060][T17285] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.563795][T17285] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.740466][T17285] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.856997][T17285] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.211005][T17285] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 446.253614][T17285] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 446.269421][T17285] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 446.303071][T17285] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 446.412399][T17368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3054'. [ 446.544650][T17285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.593700][T17375] netlink: 'syz.1.3056': attribute type 1 has an invalid length. [ 446.599917][T17317] Set syz1 is full, maxelem 65536 reached [ 446.608069][T17375] netlink: 16090 bytes leftover after parsing attributes in process `syz.1.3056'. [ 446.611783][T17285] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.660497][ T8769] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.667687][ T8769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.701093][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.708294][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.810570][T17382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3058'. [ 446.873749][T17390] pim6reg99999999: entered allmulticast mode [ 446.910377][ T5840] Bluetooth: hci2: command tx timeout [ 446.922634][T17390] bond2: invalid ARP target 0.0.0.0 specified for addition [ 446.930797][T17390] bond2: option arp_ip_target: invalid value (0) [ 446.942899][T17390] bond2 (unregistering): Released all slaves [ 446.946125][T17395] GUP no longer grows the stack in syz.1.3060 (17395): 200000003000-20000000a000 (200000001000) [ 446.964541][T17395] CPU: 1 UID: 0 PID: 17395 Comm: syz.1.3060 Not tainted syzkaller #0 PREEMPT(full) [ 446.964566][T17395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 446.964582][T17395] Call Trace: [ 446.964590][T17395] [ 446.964597][T17395] dump_stack_lvl+0x189/0x250 [ 446.964631][T17395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 446.964655][T17395] ? __pfx__printk+0x10/0x10 [ 446.964671][T17395] ? find_vma+0xe7/0x160 [ 446.964709][T17395] __get_user_pages+0x2470/0x2a00 [ 446.964738][T17395] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 446.964786][T17395] ? rcu_is_watching+0x15/0xb0 [ 446.964831][T17395] __gup_longterm_locked+0xde4/0x1660 [ 446.964860][T17395] ? try_grab_folio_fast+0x1bf/0x6a0 [ 446.964894][T17395] ? gup_fast_fallback+0x1b86/0x22d0 [ 446.964921][T17395] gup_fast_fallback+0x1d65/0x22d0 [ 446.964983][T17395] ? __pfx_gup_fast_fallback+0x10/0x10 [ 446.965002][T17395] ? __mutex_lock+0x335/0x1350 [ 446.965031][T17395] ? is_valid_gup_args+0x11f/0x200 [ 446.965056][T17395] ? get_user_pages_fast+0x4d/0xb0 [ 446.965081][T17395] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 446.965112][T17395] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 446.965130][T17395] ? wait_for_space+0x248/0x2d0 [ 446.965150][T17395] iov_iter_get_pages2+0x5e/0xa0 [ 446.965176][T17395] __se_sys_vmsplice+0x548/0x10d0 [ 446.965221][T17395] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 446.965239][T17395] ? __pfx_futex_wait+0x10/0x10 [ 446.965329][T17395] ? do_syscall_64+0xbe/0xfa0 [ 446.965352][T17395] do_syscall_64+0xfa/0xfa0 [ 446.965368][T17395] ? lockdep_hardirqs_on+0x9c/0x150 [ 446.965385][T17395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.965406][T17395] ? clear_bhb_loop+0x60/0xb0 [ 446.965426][T17395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.965448][T17395] RIP: 0033:0x7f6918d8f6c9 [ 446.965464][T17395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.965480][T17395] RSP: 002b:00007f6919cbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 446.965499][T17395] RAX: ffffffffffffffda RBX: 00007f6918fe6090 RCX: 00007f6918d8f6c9 [ 446.965511][T17395] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 446.965523][T17395] RBP: 00007f6918e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 446.965534][T17395] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 446.965545][T17395] R13: 00007f6918fe6128 R14: 00007f6918fe6090 R15: 00007fff1c6d5558 [ 446.965576][T17395] [ 447.241141][T17381] bridge1: entered allmulticast mode [ 447.266637][T17285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.360297][T17285] veth0_vlan: entered promiscuous mode [ 447.381961][T17285] veth1_vlan: entered promiscuous mode [ 447.396624][T17400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3061'. [ 447.415794][T17403] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3062'. [ 447.495467][T17285] veth0_macvtap: entered promiscuous mode [ 447.519066][T16782] IPVS: starting estimator thread 0... [ 447.519174][T17285] veth1_macvtap: entered promiscuous mode [ 447.571661][T17285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.580315][T17412] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3065'. [ 447.597371][T17285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.608308][T17414] IPVS: using max 30 ests per chain, 72000 per kthread [ 447.613658][ T8769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.640545][ T8769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.656310][ T8769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.674778][ T8769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.821877][ T8769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.833793][ T8769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.870117][T17425] veth0: entered promiscuous mode [ 447.876264][T17423] bond0: (slave sit0): Error: Device type is different from other slaves [ 447.890851][T17425] netlink: 'syz.0.3069': attribute type 4 has an invalid length. [ 447.894129][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.909097][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.929175][T17425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3069'. [ 448.059894][T17429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3029'. [ 448.073682][T17431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3029'. [ 448.392598][T17434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3071'. [ 448.525195][T17443] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3073'. [ 448.671934][T17447] xt_CT: No such helper "pptp" [ 448.988348][ T5840] Bluetooth: hci2: command tx timeout [ 449.111018][T17471] wg1 speed is unknown, defaulting to 1000 [ 449.884168][T17477] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3082'. [ 449.893374][T17477] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3082'. [ 449.965170][T17471] vxcan1 speed is unknown, defaulting to 1000 [ 450.020159][T17480] netlink: 'syz.1.3083': attribute type 8 has an invalid length. [ 450.236132][T17492] gre1: entered allmulticast mode [ 450.363978][T17471] lo speed is unknown, defaulting to 1000 [ 450.479961][T17503] netlink: 'syz.1.3091': attribute type 8 has an invalid length. [ 450.663192][T17512] netlink: 'syz.0.3093': attribute type 1 has an invalid length. [ 450.882918][T17519] netem: change failed [ 451.174308][T17532] wg1 speed is unknown, defaulting to 1000 [ 451.287341][T17536] netlink: 'syz.0.3097': attribute type 8 has an invalid length. [ 451.494452][T17532] vxcan1 speed is unknown, defaulting to 1000 [ 451.874546][T17532] lo speed is unknown, defaulting to 1000 [ 451.949414][T17556] mac80211_hwsim hwsim48 ªªªªª;: renamed from wlan0 (while UP) [ 452.159838][T17559] netlink: 'syz.4.3106': attribute type 4 has an invalid length. [ 452.522741][T17563] netlink: 'syz.4.3108': attribute type 8 has an invalid length. [ 452.573209][T17565] __nla_validate_parse: 13 callbacks suppressed [ 452.573222][T17565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3109'. [ 452.712377][T17570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3110'. [ 452.757952][T16774] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 452.896951][T17576] wg1 speed is unknown, defaulting to 1000 [ 453.093997][T17576] vxcan1 speed is unknown, defaulting to 1000 [ 453.118029][T16779] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 453.226428][T17576] lo speed is unknown, defaulting to 1000 [ 453.691472][T17592] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3117'. [ 453.833726][T17599] vlan0: entered promiscuous mode [ 454.006662][T17607] wg1 speed is unknown, defaulting to 1000 [ 454.188608][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 454.304415][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 454.314382][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 454.322765][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 454.331044][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 454.343546][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 454.454720][T17607] vxcan1 speed is unknown, defaulting to 1000 [ 454.489864][T17615] wg1 speed is unknown, defaulting to 1000 [ 454.678213][T17607] lo speed is unknown, defaulting to 1000 [ 455.062688][T17627] netlink: 'syz.1.3127': attribute type 1 has an invalid length. [ 455.134351][T17627] 8021q: adding VLAN 0 to HW filter on device bond2 [ 455.168065][T17615] vxcan1 speed is unknown, defaulting to 1000 [ 455.366619][T17643] netlink: 'syz.0.3130': attribute type 21 has an invalid length. [ 455.392846][T17643] netlink: 'syz.0.3130': attribute type 22 has an invalid length. [ 455.419813][T17643] netlink: 'syz.0.3130': attribute type 23 has an invalid length. [ 455.452481][T17643] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3130'. [ 455.493163][T17642] netlink: 'syz.0.3130': attribute type 21 has an invalid length. [ 455.508103][T17642] netlink: 'syz.0.3130': attribute type 22 has an invalid length. [ 455.517854][T17642] netlink: 'syz.0.3130': attribute type 23 has an invalid length. [ 455.525755][T17642] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3130'. [ 455.642568][T17615] lo speed is unknown, defaulting to 1000 [ 455.695080][T17651] netlink: 'syz.0.3133': attribute type 8 has an invalid length. [ 456.250015][T17615] chnl_net:caif_netlink_parms(): no params data found [ 456.453842][T17678] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3141'. [ 456.507809][ T5837] Bluetooth: hci4: command tx timeout [ 456.582755][T17615] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.600815][T17615] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.616833][T17615] bridge_slave_0: entered allmulticast mode [ 456.628921][T17615] bridge_slave_0: entered promiscuous mode [ 456.637992][T17615] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.645227][T17615] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.669048][T17615] bridge_slave_1: entered allmulticast mode [ 456.676915][T17615] bridge_slave_1: entered promiscuous mode [ 456.790607][T17615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.810609][T17703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3149'. [ 456.821449][T17703] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3149'. [ 456.840563][T17615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.850565][T17703] netlink: 540 bytes leftover after parsing attributes in process `syz.4.3149'. [ 456.948984][T17709] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3151'. [ 456.966030][T17615] team0: Port device team_slave_0 added [ 456.977175][T17709] Set syz1 is full, maxelem 65536 reached [ 457.157307][T17615] team0: Port device team_slave_1 added [ 457.174013][T17705] wg1 speed is unknown, defaulting to 1000 [ 457.300247][T17615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.319008][T17615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.542823][T17615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.574553][T17705] vxcan1 speed is unknown, defaulting to 1000 [ 457.609048][T17615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.616490][T17615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.699065][T17615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.813143][T17732] wg1 speed is unknown, defaulting to 1000 [ 457.823119][T17736] validate_nla: 1 callbacks suppressed [ 457.823136][T17736] netlink: 'syz.4.3156': attribute type 7 has an invalid length. [ 457.824598][T17615] hsr_slave_0: entered promiscuous mode [ 457.850309][T17615] hsr_slave_1: entered promiscuous mode [ 457.857018][T17615] debugfs: 'hsr0' already exists in 'hsr' [ 457.863134][T17615] Cannot create hsr debugfs directory [ 457.941852][T17736] bond1: (slave bond_slave_1): Device is not our slave [ 457.975247][T17741] netlink: 'syz.1.3157': attribute type 8 has an invalid length. [ 457.978193][T17736] bond1: option active_slave: invalid value (bond_slave_1) [ 457.992650][T17736] bond1 (unregistering): Released all slaves [ 458.018230][T17705] lo speed is unknown, defaulting to 1000 [ 458.362352][T17732] vxcan1 speed is unknown, defaulting to 1000 [ 458.546918][T17757] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3162'. [ 458.566345][T17615] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 458.583209][T17615] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 458.598706][ T5837] Bluetooth: hci4: command tx timeout [ 458.605550][T17615] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 458.625162][T17615] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 458.752616][T17732] lo speed is unknown, defaulting to 1000 [ 458.794650][T17773] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 459.211869][T17615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.267366][T17615] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.290127][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.297392][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.334191][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.341455][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.541735][T17781] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3167'. [ 459.824592][T17787] wg1 speed is unknown, defaulting to 1000 [ 459.893015][T17792] wg1 speed is unknown, defaulting to 1000 [ 460.000660][T17615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.137334][T17803] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3172'. [ 460.191524][T17803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.239262][T17803] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3172'. [ 460.262812][T17787] vxcan1 speed is unknown, defaulting to 1000 [ 460.280078][T17803] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.287845][T17803] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.296636][T17803] bridge0: entered allmulticast mode [ 460.662083][T17615] veth0_vlan: entered promiscuous mode [ 460.679256][ T5837] Bluetooth: hci4: command tx timeout [ 460.763214][T17615] veth1_vlan: entered promiscuous mode [ 460.777446][T17792] vxcan1 speed is unknown, defaulting to 1000 [ 460.780670][T17813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3175'. [ 460.803208][T17813] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3175'. [ 460.839072][T17787] lo speed is unknown, defaulting to 1000 [ 460.852759][T17615] veth0_macvtap: entered promiscuous mode [ 460.890033][T17615] veth1_macvtap: entered promiscuous mode [ 461.011759][T17615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.055695][T17615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.253144][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.282487][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.295316][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.308502][T17833] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3178'. [ 461.369165][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.643247][T17792] lo speed is unknown, defaulting to 1000 [ 461.737272][T17832] wg1 speed is unknown, defaulting to 1000 [ 461.994246][T16431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.009221][T16431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.320776][T17839] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.343889][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.354215][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.450669][T17839] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.477105][T17832] vxcan1 speed is unknown, defaulting to 1000 [ 462.580631][T17839] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.713471][T17839] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.755107][ T5837] Bluetooth: hci4: command tx timeout [ 462.775124][T17846] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3181'. [ 462.811406][T17846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 462.920653][T17832] lo speed is unknown, defaulting to 1000 [ 462.920716][ T8778] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.025594][ T8769] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.246254][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.291374][ T8769] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.797404][T17867] siw: device registration error -23 [ 464.241290][T17890] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3189'. [ 464.735237][T17902] wg1 speed is unknown, defaulting to 1000 [ 464.944874][T17917] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 465.152284][T17902] vxcan1 speed is unknown, defaulting to 1000 [ 465.194865][T17935] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3202'. [ 465.207845][T17927] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3200'. [ 465.276630][T17936] netlink: 'syz.4.3203': attribute type 7 has an invalid length. [ 465.697065][T17902] lo speed is unknown, defaulting to 1000 [ 466.099888][T17958] netlink: 'syz.7.3208': attribute type 1 has an invalid length. [ 466.110415][T17958] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3208'. [ 466.118220][T17960] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3209'. [ 466.137683][T17960] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3209'. [ 466.156941][T17960] netlink: 'syz.0.3209': attribute type 6 has an invalid length. [ 466.177178][T17960] netlink: 'syz.0.3209': attribute type 5 has an invalid length. [ 466.209488][T17960] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3209'. [ 466.294992][T17960] netlink: 'syz.0.3209': attribute type 4 has an invalid length. [ 466.330586][T17960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3209'. [ 466.347152][T17960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3209'. [ 466.535751][T17966] wg1 speed is unknown, defaulting to 1000 [ 466.606075][T17969] wg1 speed is unknown, defaulting to 1000 [ 466.648144][T17975] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3213'. [ 466.668578][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 467.197988][T17966] vxcan1 speed is unknown, defaulting to 1000 [ 467.375506][T17990] warn_alloc: 1 callbacks suppressed [ 467.375524][T17990] syz.1.3217: vmalloc error: size 6930432, failed to allocated page array size 13536, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 467.497295][T17990] CPU: 0 UID: 0 PID: 17990 Comm: syz.1.3217 Not tainted syzkaller #0 PREEMPT(full) [ 467.497322][T17990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 467.497333][T17990] Call Trace: [ 467.497340][T17990] [ 467.497348][T17990] dump_stack_lvl+0x189/0x250 [ 467.497378][T17990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.497400][T17990] ? __pfx__printk+0x10/0x10 [ 467.497419][T17990] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 467.497442][T17990] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 467.497469][T17990] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 467.497491][T17990] warn_alloc+0x214/0x310 [ 467.497520][T17990] ? __pfx_warn_alloc+0x10/0x10 [ 467.497553][T17990] ? __get_vm_area_node+0x28f/0x300 [ 467.497575][T17990] ? translate_table+0x19b/0x2040 [ 467.497596][T17990] __vmalloc_node_range_noprof+0x690/0x12d0 [ 467.497647][T17990] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 467.497669][T17990] ? translate_table+0x19b/0x2040 [ 467.497689][T17990] ? rcu_is_watching+0x15/0xb0 [ 467.497708][T17990] ? translate_table+0x19b/0x2040 [ 467.497724][T17990] __kvmalloc_node_noprof+0x674/0x910 [ 467.497748][T17990] ? translate_table+0x19b/0x2040 [ 467.497762][T17990] ? do_ip6t_set_ctl+0x88a/0xce0 [ 467.497778][T17990] ? nf_setsockopt+0x26f/0x290 [ 467.497799][T17990] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 467.497816][T17990] ? do_syscall_64+0xfa/0xfa0 [ 467.497837][T17990] translate_table+0x19b/0x2040 [ 467.497865][T17990] ? __lock_acquire+0xab9/0xd20 [ 467.497885][T17990] ? __pfx_translate_table+0x10/0x10 [ 467.497902][T17990] ? __might_fault+0xb0/0x130 [ 467.497939][T17990] ? _copy_from_user+0x94/0xb0 [ 467.497963][T17990] do_ip6t_set_ctl+0x970/0xce0 [ 467.497993][T17990] ? rcu_is_watching+0x15/0xb0 [ 467.498013][T17990] ? trace_contention_end+0x39/0x120 [ 467.498034][T17990] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 467.498071][T17990] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 467.498099][T17990] ? __pfx_aa_sk_perm+0x10/0x10 [ 467.498127][T17990] nf_setsockopt+0x26f/0x290 [ 467.498151][T17990] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 467.498177][T17990] do_sock_setsockopt+0x17c/0x1b0 [ 467.498200][T17990] __x64_sys_setsockopt+0x13f/0x1b0 [ 467.498224][T17990] do_syscall_64+0xfa/0xfa0 [ 467.498238][T17990] ? lockdep_hardirqs_on+0x9c/0x150 [ 467.498254][T17990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.498271][T17990] ? clear_bhb_loop+0x60/0xb0 [ 467.498292][T17990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.498309][T17990] RIP: 0033:0x7f6918d8f6c9 [ 467.498325][T17990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.498340][T17990] RSP: 002b:00007f6919c9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 467.498360][T17990] RAX: ffffffffffffffda RBX: 00007f6918fe6180 RCX: 00007f6918d8f6c9 [ 467.498372][T17990] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007 [ 467.498380][T17990] RBP: 00007f6918e11f91 R08: 00000000000003f0 R09: 0000000000000000 [ 467.498391][T17990] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000000 [ 467.498401][T17990] R13: 00007f6918fe6218 R14: 00007f6918fe6180 R15: 00007fff1c6d5558 [ 467.498430][T17990] [ 467.824312][T17990] Mem-Info: [ 467.828072][T17990] active_anon:8594 inactive_anon:0 isolated_anon:0 [ 467.828072][T17990] active_file:3631 inactive_file:40052 isolated_file:0 [ 467.828072][T17990] unevictable:768 dirty:246 writeback:0 [ 467.828072][T17990] slab_reclaimable:13452 slab_unreclaimable:172158 [ 467.828072][T17990] mapped:47835 shmem:4218 pagetables:1524 [ 467.828072][T17990] sec_pagetables:0 bounce:0 [ 467.828072][T17990] kernel_misc_reclaimable:0 [ 467.828072][T17990] free:1205249 free_pcp:15927 free_cma:0 [ 467.914847][T17990] Node 0 active_anon:34376kB inactive_anon:0kB active_file:14524kB inactive_file:160008kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:191340kB dirty:980kB writeback:0kB shmem:15336kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16120kB pagetables:6056kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 467.916478][T17966] lo speed is unknown, defaulting to 1000 [ 468.012927][T17990] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 468.044281][T17990] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 468.075740][T17990] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 468.081675][T17990] Node 0 DMA32 free:916752kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34276kB inactive_anon:0kB active_file:14524kB inactive_file:160008kB unevictable:1536kB writepending:1040kB zspages:0kB present:3129332kB managed:2565108kB mlocked:0kB bounce:0kB free_pcp:42048kB local_pcp:19836kB free_cma:0kB [ 468.119134][T17990] lowmem_reserve[]: 0 0 0 0 0 [ 468.123884][T17990] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 468.154058][T17990] lowmem_reserve[]: 0 0 0 0 0 [ 468.158943][T17990] Node 1 Normal free:3892988kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17824kB local_pcp:9312kB free_cma:0kB [ 468.225675][T17990] lowmem_reserve[]: 0 0 0 0 0 [ 468.231041][T17990] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB [ 468.246038][T18006] netlink: 'syz.2.3223': attribute type 10 has an invalid length. [ 468.249873][T17990] 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 468.282016][T17990] Node 0 DMA32: 1*4kB (M) 73*8kB (M) 195*16kB (ME) 110*32kB (ME) 118*64kB (UME) 39*128kB (UME) 68*256kB (UM) 313*512kB (UME) 197*1024kB (UME) 2*2048kB (UM) 125*4096kB (UM) = 915260kB [ 468.303084][T18006] team0: Port device dummy0 added [ 468.317369][T17990] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 468.330611][T17990] Node 1 Normal: 227*4kB (UME) 68*8kB (UME) 49*16kB (UME) 168*32kB (UME) 49*64kB (UME) 10*128kB (UME) 4*256kB (UME) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 946*4096kB (UM) = 3892988kB [ 468.340208][T18006] netlink: 'syz.2.3223': attribute type 10 has an invalid length. [ 468.359732][T17990] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 468.379363][T17990] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 468.402907][T17990] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 468.409986][T18006] team0: Port device dummy0 removed [ 468.412909][T17990] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 468.431257][T17990] 47906 total pagecache pages [ 468.433146][T18006] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 468.436070][T17990] 0 pages in swap cache [ 468.436084][T17990] Free swap = 124996kB [ 468.436094][T17990] Total swap = 124996kB [ 468.436103][T17990] 2097051 pages RAM [ 468.436118][T17990] 0 pages HighMem/MovableOnly [ 468.436124][T17990] 424132 pages reserved [ 468.436130][T17990] 0 pages cma reserved [ 468.485887][T17969] vxcan1 speed is unknown, defaulting to 1000 [ 468.634033][T18018] bridge0: port 3(gretap0) entered blocking state [ 468.640799][T18018] bridge0: port 3(gretap0) entered disabled state [ 468.647817][T18018] gretap0: entered allmulticast mode [ 468.662865][T18018] gretap0: entered promiscuous mode [ 468.675439][T18021] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20001 [ 468.685474][T18018] bridge0: port 3(gretap0) entered blocking state [ 468.692462][T18018] bridge0: port 3(gretap0) entered forwarding state [ 468.887327][T17969] lo speed is unknown, defaulting to 1000 [ 468.902200][ T5890] IPVS: starting estimator thread 0... [ 469.016480][T18031] IPVS: using max 31 ests per chain, 74400 per kthread [ 469.730493][T18042] wg1 speed is unknown, defaulting to 1000 [ 470.490268][T18066] __nla_validate_parse: 2 callbacks suppressed [ 470.490284][T18066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3238'. [ 470.494480][T18042] vxcan1 speed is unknown, defaulting to 1000 [ 470.525714][T18065] wg1 speed is unknown, defaulting to 1000 [ 470.653057][T18075] netlink: 'syz.4.3238': attribute type 1 has an invalid length. [ 470.659359][T18073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3239'. [ 470.731982][T18073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3239'. [ 470.788678][T18073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3239'. [ 470.841303][T18073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3239'. [ 470.864794][T18073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3239'. [ 470.894403][T18073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3239'. [ 470.908482][T18073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3239'. [ 470.923932][T18073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3239'. [ 470.946988][T18073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3239'. [ 470.999060][ T5890] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 471.013087][T18073] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 471.199950][T18065] vxcan1 speed is unknown, defaulting to 1000 [ 471.305424][T18042] lo speed is unknown, defaulting to 1000 [ 471.626540][T18065] lo speed is unknown, defaulting to 1000 [ 471.645377][T18091] wg1 speed is unknown, defaulting to 1000 [ 471.867982][ T5890] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 472.068482][T18091] vxcan1 speed is unknown, defaulting to 1000 [ 472.268436][T18107] bridge3: entered promiscuous mode [ 472.450656][T18113] netlink: 'syz.0.3252': attribute type 2 has an invalid length. [ 472.696947][T18118] tipc: Started in network mode [ 472.723700][T18118] tipc: Node identity a277c438c705, cluster identity 4711 [ 472.766835][T18118] tipc: Enabled bearer , priority 0 [ 472.794977][T18118] syzkaller0: entered promiscuous mode [ 472.821499][T18118] syzkaller0: entered allmulticast mode [ 472.967032][T18091] lo speed is unknown, defaulting to 1000 [ 473.040734][T18118] tipc: Resetting bearer [ 473.172746][T18117] tipc: Resetting bearer [ 473.219731][T18117] tipc: Disabling bearer [ 473.483359][T18150] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 474.856382][T18206] wg1 speed is unknown, defaulting to 1000 [ 474.877081][T18222] wg1 speed is unknown, defaulting to 1000 [ 475.123575][T18206] vxcan1 speed is unknown, defaulting to 1000 [ 475.219101][T18231] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 475.285602][T18231] syzkaller1: entered promiscuous mode [ 475.291605][T18231] syzkaller1: entered allmulticast mode [ 475.441832][T18206] lo speed is unknown, defaulting to 1000 [ 475.442686][T18222] vxcan1 speed is unknown, defaulting to 1000 [ 475.670040][T18237] __nla_validate_parse: 14 callbacks suppressed [ 475.670057][T18237] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3279'. [ 475.992719][T18222] lo speed is unknown, defaulting to 1000 [ 475.996080][T13229] svc: failed to register nfsdv3 RPC service (errno 512). [ 476.040415][T13229] svc: failed to register nfsaclv3 RPC service (errno 512). [ 476.486454][T18269] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3288'. [ 476.504169][T18261] wg1 speed is unknown, defaulting to 1000 [ 476.737929][T18268] veth0_to_team: entered promiscuous mode [ 476.754473][T18271] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 476.961092][T18261] vxcan1 speed is unknown, defaulting to 1000 [ 477.028137][T18278] netlink: 'syz.1.3292': attribute type 4 has an invalid length. [ 477.035908][T18278] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3292'. [ 477.116446][T18261] lo speed is unknown, defaulting to 1000 [ 477.661404][T18290] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3296'. [ 477.723234][T18289] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3296'. [ 478.009674][T18299] atomic_op ffff888075105998 conn xmit_atomic 0000000000000000 [ 478.391939][T18323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3306'. [ 478.455450][T18304] wg1 speed is unknown, defaulting to 1000 [ 478.580555][T18331] ip6gretap1: entered allmulticast mode [ 478.619775][T16782] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 478.729287][T18304] vxcan1 speed is unknown, defaulting to 1000 [ 478.809588][T18338] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3309'. [ 479.065640][T18304] lo speed is unknown, defaulting to 1000 [ 479.524887][ T1831] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 479.554741][T16777] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 480.388854][T18365] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3317'. [ 480.440898][T18365] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3317'. [ 480.495031][T18365] netlink: 'syz.0.3317': attribute type 4 has an invalid length. [ 480.606387][ T6095] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 480.619471][ T6095] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 480.763255][T18380] x_tables: duplicate underflow at hook 2 [ 480.888528][T18382] netlink: 'syz.2.3321': attribute type 2 has an invalid length. [ 480.948751][T18384] netlink: 'syz.2.3321': attribute type 2 has an invalid length. [ 481.019780][T18382] !: entered promiscuous mode [ 481.030893][T18384] !: left promiscuous mode [ 481.069779][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 481.117110][T18398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3326'. [ 481.126314][T18398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3326'. [ 481.157902][T18398] nbd: socks must be embedded in a SOCK_ITEM attr [ 481.177756][T16782] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 481.192959][T18401] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 481.375806][T18419] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3330'. [ 481.415748][T18421] netlink: 'syz.2.3334': attribute type 13 has an invalid length. [ 481.487643][T18418] Bluetooth: MGMT ver 1.23 [ 481.566209][T18430] syzkaller0: entered promiscuous mode [ 481.567432][T18437] netlink: 'syz.0.3337': attribute type 2 has an invalid length. [ 481.575382][T18430] syzkaller0: entered allmulticast mode [ 481.588238][T18427] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3335'. [ 481.638391][T18435] tipc: Started in network mode [ 481.643305][T18435] tipc: Node identity 2a92c0936ffe, cluster identity 4711 [ 481.653742][T18435] tipc: Enabled bearer , priority 0 [ 481.723524][T18415] tipc: Resetting bearer [ 481.755379][T18442] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3339'. [ 481.781872][T18415] tipc: Disabling bearer [ 481.852598][T18446] netlink: 'syz.4.3342': attribute type 4 has an invalid length. [ 481.988068][T18452] tipc: Enabled bearer , priority 0 [ 481.995614][T18452] syzkaller0: entered promiscuous mode [ 482.001435][T18452] syzkaller0: entered allmulticast mode [ 482.008306][T18457] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3345'. [ 482.213024][T18468] tipc: Started in network mode [ 482.218207][T18468] tipc: Node identity fa3dca4464d, cluster identity 4711 [ 482.225449][T18468] tipc: Enabled bearer , priority 0 [ 482.236979][T18468] syzkaller0: entered promiscuous mode [ 482.253024][T18468] syzkaller0: entered allmulticast mode [ 482.330921][T18474] netlink: 'syz.0.3352': attribute type 11 has an invalid length. [ 482.340056][T18474] netlink: 'syz.0.3352': attribute type 11 has an invalid length. [ 482.351852][T18474] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3352'. [ 482.570259][T18483] tipc: Resetting bearer [ 482.581353][T18483] syzkaller0: tun_net_xmit 90 [ 482.588010][T18485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3356'. [ 482.615731][T18486] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 482.654066][T18490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3354'. [ 482.717927][ C0] syzkaller0: tun_net_xmit 90 [ 482.792290][T18451] tipc: Resetting bearer [ 482.826699][T18451] tipc: Disabling bearer [ 482.826947][T18494] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3358'. [ 482.860688][T18453] tipc: Resetting bearer [ 482.911684][T18453] tipc: Disabling bearer [ 483.008153][T18500] netlink: 'syz.4.3360': attribute type 63 has an invalid length. [ 483.016891][T18500] netlink: 'syz.4.3360': attribute type 63 has an invalid length. [ 483.061589][T18501] netlink: 'syz.1.3359': attribute type 12 has an invalid length. [ 483.072848][T18501] netlink: 'syz.1.3359': attribute type 4 has an invalid length. [ 483.486100][T18516] netlink: 'syz.4.3365': attribute type 1 has an invalid length. [ 483.535719][T18516] netlink: 'syz.4.3365': attribute type 3 has an invalid length. [ 483.547862][ T5837] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 483.548021][ T5840] Bluetooth: hci2: command 0x0401 tx timeout [ 483.575078][T18516] NCSI netlink: No device for ifindex 813332851 [ 483.685417][T18542] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 483.705081][T18531] bond1: entered promiscuous mode [ 483.737441][T18531] 8021q: adding VLAN 0 to HW filter on device bond1 [ 483.804665][T18538] 8021q: adding VLAN 0 to HW filter on device bond2 [ 483.813184][T18538] bond2: entered promiscuous mode [ 483.822666][T18538] bond1: (slave bond2): Enslaving as an active interface with an up link [ 484.096589][T18533] wg1 speed is unknown, defaulting to 1000 [ 484.571207][T18533] vxcan1 speed is unknown, defaulting to 1000 [ 484.590309][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 484.628097][T18587] netlink: 'syz.2.3381': attribute type 39 has an invalid length. [ 484.901904][T18595] IPv6: Can't replace route, no match found [ 484.947304][T18586] syzkaller0: entered promiscuous mode [ 484.967555][T18586] syzkaller0: entered allmulticast mode [ 486.634656][T18533] lo speed is unknown, defaulting to 1000 [ 486.774337][T18619] dummy0: entered promiscuous mode [ 486.800477][T18619] macsec1: entered promiscuous mode [ 486.816654][T18619] macsec1: entered allmulticast mode [ 486.839504][T18619] dummy0: entered allmulticast mode [ 486.878824][T18619] dummy0: left allmulticast mode [ 486.884848][T18619] dummy0: left promiscuous mode [ 486.915813][T18635] __nla_validate_parse: 7 callbacks suppressed [ 486.915830][T18635] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3393'. [ 486.949781][T18635] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 486.965244][T18635] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 487.055007][T18635] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3393'. [ 487.066159][T18635] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3393'. [ 487.101812][T18636] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3393'. [ 487.521609][T18653] tipc: Started in network mode [ 487.529231][T18653] tipc: Node identity f22f032e33f3, cluster identity 4711 [ 487.552712][T18653] tipc: Enabled bearer , priority 0 [ 487.563980][T18657] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3399'. [ 487.609796][T18660] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3402'. [ 487.777997][T18647] tipc: Resetting bearer [ 487.808906][T18647] tipc: Disabling bearer [ 487.829474][T18665] wg1 speed is unknown, defaulting to 1000 [ 487.842152][T18664] wg1 speed is unknown, defaulting to 1000 [ 487.940018][T18669] sctp: [Deprecated]: syz.4.3403 (pid 18669) Use of int in maxseg socket option. [ 487.940018][T18669] Use struct sctp_assoc_value instead [ 488.065242][T18665] vxcan1 speed is unknown, defaulting to 1000 [ 488.140559][T18674] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3405'. [ 488.269010][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 488.311897][T18679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3404'. [ 488.622523][T18683] bond3: ARP target 9.0.0.0 is already present [ 488.648068][T18683] bond3: option arp_ip_target: invalid value (9) [ 488.700594][T18683] bond3 (unregistering): Released all slaves [ 488.786282][T18664] vxcan1 speed is unknown, defaulting to 1000 [ 488.830238][T18665] lo speed is unknown, defaulting to 1000 [ 488.871800][T18695] wg1 speed is unknown, defaulting to 1000 [ 489.415413][T18715] sctp: [Deprecated]: syz.2.3412 (pid 18715) Use of int in max_burst socket option. [ 489.415413][T18715] Use struct sctp_assoc_value instead [ 489.482938][T18664] lo speed is unknown, defaulting to 1000 [ 489.506286][T18695] vxcan1 speed is unknown, defaulting to 1000 [ 489.981009][T18695] lo speed is unknown, defaulting to 1000 [ 490.131574][T18731] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3417'. [ 490.186351][T18734] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3417'. [ 490.612706][T18739] netlink: 'syz.4.3420': attribute type 3 has an invalid length. [ 490.628878][T18739] netlink: 'syz.4.3420': attribute type 1 has an invalid length. [ 491.213471][T18762] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001 [ 491.403224][T18760] wg1 speed is unknown, defaulting to 1000 [ 491.501621][T18768] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.509429][T18768] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.610293][T18768] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 491.631168][T18768] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 491.649351][T18768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.664732][T18768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.806074][ T1831] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.830530][ T1831] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.846603][ T1831] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.857074][ T1831] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.176792][T18760] vxcan1 speed is unknown, defaulting to 1000 [ 492.240985][T18793] xt_CT: You must specify a L4 protocol and not use inversions on it [ 492.298594][T18791] wg1 speed is unknown, defaulting to 1000 [ 492.587756][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 492.839556][T18821] netlink: 'syz.2.3440': attribute type 1 has an invalid length. [ 492.858003][T18821] netlink: 'syz.2.3440': attribute type 2 has an invalid length. [ 492.867194][T18821] __nla_validate_parse: 6 callbacks suppressed [ 492.867210][T18821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3440'. [ 492.871168][T18760] lo speed is unknown, defaulting to 1000 [ 492.874853][T18791] vxcan1 speed is unknown, defaulting to 1000 [ 493.153448][T18834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3441'. [ 493.203699][T18823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3441'. [ 493.295073][T18835] wg1 speed is unknown, defaulting to 1000 [ 493.408622][T18791] lo speed is unknown, defaulting to 1000 [ 493.717045][T18835] vxcan1 speed is unknown, defaulting to 1000 [ 493.779572][T18841] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3444'. [ 494.028533][ T5837] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 494.032414][ T52] Bluetooth: hci2: command 0x0401 tx timeout [ 494.084170][T18845] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3446'. [ 494.301839][T18835] lo speed is unknown, defaulting to 1000 [ 494.486819][T18863] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 494.736366][T18868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3454'. [ 494.756091][T18870] ªªªªªª: renamed from wg2 [ 495.166022][T18880] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3458'. [ 496.081982][T18917] netlink: 'syz.4.3466': attribute type 28 has an invalid length. [ 496.097618][T18917] netlink: 'syz.4.3466': attribute type 3 has an invalid length. [ 496.112597][T18917] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3466'. [ 496.245800][T18923] wg1 speed is unknown, defaulting to 1000 [ 496.406376][T18923] vxcan1 speed is unknown, defaulting to 1000 [ 496.661583][T18939] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3473'. [ 497.003639][T18948] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3477'. [ 497.200189][T18932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.225646][T18932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.515332][T18932] bridge1: left allmulticast mode [ 497.523995][T18932] ip6gretap1: left allmulticast mode [ 497.540719][T18936] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 497.557406][T18923] lo speed is unknown, defaulting to 1000 [ 497.649796][T18139] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.693963][T18139] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.726070][T18139] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.735687][T18139] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.863426][T18967] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.029997][T18967] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.194417][T18967] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.259370][T18985] tipc: Enabled bearer , priority 0 [ 498.351850][ T31] INFO: task syz.5.2314:14566 blocked for more than 143 seconds. [ 498.364716][ T31] Not tainted syzkaller #0 [ 498.370837][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 498.401622][ T31] task:syz.5.2314 state:D stack:26440 pid:14566 tgid:14564 ppid:13554 task_flags:0x400140 flags:0x00080002 [ 498.421484][ T31] Call Trace: [ 498.424917][ T31] [ 498.432896][ T31] __schedule+0x1798/0x4cc0 [ 498.438688][ T31] ? __lock_acquire+0xab9/0xd20 [ 498.446795][ T31] ? __lock_acquire+0xab9/0xd20 [ 498.454370][ T31] ? __pfx___schedule+0x10/0x10 [ 498.462854][ T31] ? schedule+0x91/0x360 [ 498.467250][ T31] schedule+0x165/0x360 [ 498.497945][ T31] schedule_preempt_disabled+0x13/0x30 [ 498.503456][ T31] __mutex_lock+0x7e6/0x1350 [ 498.509985][ T31] ? __mutex_lock+0x5bb/0x1350 [ 498.514960][ T31] ? nfsd_nl_threads_set_doit+0x2cb/0x960 [ 498.522024][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 498.527264][ T31] ? net_generic+0x1e/0x240 [ 498.534036][ T31] ? net_generic+0x1e/0x240 [ 498.538758][ T31] ? net_generic+0x1e/0x240 [ 498.543399][ T31] ? net_generic+0x1e/0x240 [ 498.548332][ T31] nfsd_nl_threads_set_doit+0x2cb/0x960 [ 498.553903][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 498.559735][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 498.565840][ T31] ? bpf_lsm_capable+0x9/0x20 [ 498.571157][ T31] ? security_capable+0x7e/0x2e0 [ 498.576253][ T31] genl_rcv_msg+0x60e/0x790 [ 498.580904][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 498.586009][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 498.592617][ T31] netlink_rcv_skb+0x208/0x470 [ 498.597674][ T31] ? __lock_acquire+0xab9/0xd20 [ 498.602744][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 498.608824][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 498.614232][ T31] ? down_read+0x1ad/0x2e0 [ 498.619118][ T31] genl_rcv+0x28/0x40 [ 498.623193][ T31] netlink_unicast+0x82f/0x9e0 [ 498.628333][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 498.633833][ T31] ? netlink_sendmsg+0x642/0xb30 [ 498.639633][ T31] ? skb_put+0x11b/0x210 [ 498.644105][ T31] netlink_sendmsg+0x805/0xb30 [ 498.649305][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.654805][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 498.660050][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 498.665559][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.672821][ T31] __sock_sendmsg+0x21c/0x270 [ 498.678121][ T31] ____sys_sendmsg+0x505/0x830 [ 498.682984][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 498.688889][ T31] ? import_iovec+0x74/0xa0 [ 498.693488][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 498.699085][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 498.704641][ T31] ? __fget_files+0x2a/0x420 [ 498.709769][ T31] ? __fget_files+0x3a0/0x420 [ 498.714543][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 498.720065][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 498.725631][ T31] ? do_syscall_64+0xbe/0xfa0 [ 498.731399][ T31] do_syscall_64+0xfa/0xfa0 [ 498.736001][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.741669][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.748136][ T31] ? clear_bhb_loop+0x60/0xb0 [ 498.753028][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.759914][ T31] RIP: 0033:0x7ff94b98f6c9 [ 498.764573][ T31] RSP: 002b:00007ff94c855038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.774790][ T31] RAX: ffffffffffffffda RBX: 00007ff94bbe5fa0 RCX: 00007ff94b98f6c9 [ 498.783198][ T31] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 0000000000000009 [ 498.792221][ T31] RBP: 00007ff94ba11f91 R08: 0000000000000000 R09: 0000000000000000 [ 498.800694][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.809272][ T31] R13: 00007ff94bbe6038 R14: 00007ff94bbe5fa0 R15: 00007ffd60b96ec8 [ 498.817368][ T31] [ 498.831519][ T31] [ 498.831519][ T31] Showing all locks held in the system: [ 498.839712][ T31] 1 lock held by khungtaskd/31: [ 498.844806][ T31] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 498.860206][T18967] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.904312][ T31] 5 locks held by kworker/u8:5/1831: [ 498.911778][ T31] 2 locks held by getty/5587: [ 498.916530][ T31] #0: ffff88814e0620a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 498.926736][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 498.937133][ T31] 2 locks held by syz-executor/5812: [ 498.942641][ T31] #0: ffff8880b883a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 498.953040][ T31] #1: ffff8880b8824048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 498.962112][ T31] 2 locks held by syz.3.1945/13229: [ 498.967374][ T31] #0: ffffffff8f3320b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 498.975609][ T31] #1: ffffffff8e226fe8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 498.985889][ T31] 2 locks held by syz.5.2314/14566: [ 498.991657][ T31] #0: ffffffff8f3320b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 499.000039][ T31] #1: ffffffff8e226fe8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 499.010148][ T31] 2 locks held by syz.6.3011/17190: [ 499.015344][ T31] #0: ffffffff8f3320b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 499.023616][ T31] #1: ffffffff8e226fe8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 499.033663][ T31] 2 locks held by syz.1.3472/18923: [ 499.038929][ T31] #0: ffffffff8f2bf1b0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 499.048349][ T31] #1: ffffffff8f2cc148 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x19/0xe0 [ 499.058206][ T31] 5 locks held by syz.0.3480/18967: [ 499.063402][ T31] #0: ffffffff8f3320b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 499.071609][ T31] #1: ffff8880328630e8 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x240/0x3a0 [ 499.082049][ T31] #2: ffff888053201250 (&devlink->lock_key#9){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x24f/0x3a0 [ 499.093313][ T31] #3: ffffffff8f2cc148 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xed/0x680 [ 499.102350][ T31] #4: ffffffff8df43138 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 499.113407][ T31] [ 499.116715][ T31] ============================================= [ 499.116715][ T31] [ 499.126421][ T31] NMI backtrace for cpu 0 [ 499.126440][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 499.126459][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 499.126468][ T31] Call Trace: [ 499.126476][ T31] [ 499.126483][ T31] dump_stack_lvl+0x189/0x250 [ 499.126514][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.126536][ T31] ? __pfx__printk+0x10/0x10 [ 499.126565][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 499.126588][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 499.126612][ T31] ? __pfx__printk+0x10/0x10 [ 499.126633][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 499.126653][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 499.126677][ T31] watchdog+0xf60/0xfa0 [ 499.126700][ T31] ? watchdog+0x1e2/0xfa0 [ 499.126723][ T31] kthread+0x711/0x8a0 [ 499.126749][ T31] ? __pfx_watchdog+0x10/0x10 [ 499.126765][ T31] ? __pfx_kthread+0x10/0x10 [ 499.126788][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 499.126812][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.126826][ T31] ? __pfx_kthread+0x10/0x10 [ 499.126849][ T31] ret_from_fork+0x4bc/0x870 [ 499.126869][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 499.126894][ T31] ? __switch_to_asm+0x39/0x70 [ 499.126908][ T31] ? __switch_to_asm+0x33/0x70 [ 499.126921][ T31] ? __pfx_kthread+0x10/0x10 [ 499.126943][ T31] ret_from_fork_asm+0x1a/0x30 [ 499.126974][ T31] [ 499.126987][ T31] Sending NMI from CPU 0 to CPUs 1: [ 499.276313][ C1] NMI backtrace for cpu 1 [ 499.276343][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 499.276359][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 499.276367][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 499.276387][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 20 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 499.276399][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 499.276414][ C1] RAX: 087cdbae47981300 RBX: ffffffff81967b47 RCX: 087cdbae47981300 [ 499.276425][ C1] RDX: 0000000000000001 RSI: ffffffff8d7102db RDI: ffffffff8bbf0760 [ 499.276435][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 499.276445][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7cfd70 [ 499.276456][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d3b58 [ 499.276466][ C1] FS: 0000000000000000(0000) GS:ffff888126238000(0000) knlGS:0000000000000000 [ 499.276477][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 499.276487][ C1] CR2: 0000200001000000 CR3: 0000000026792000 CR4: 00000000003526f0 [ 499.276500][ C1] Call Trace: [ 499.276508][ C1] [ 499.276515][ C1] default_idle+0x13/0x20 [ 499.276531][ C1] default_idle_call+0x73/0xb0 [ 499.276547][ C1] do_idle+0x1e7/0x510 [ 499.276565][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 499.276580][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.276594][ C1] ? __pfx_do_idle+0x10/0x10 [ 499.276614][ C1] ? do_idle+0xa/0x510 [ 499.276630][ C1] cpu_startup_entry+0x44/0x60 [ 499.276644][ C1] start_secondary+0x101/0x110 [ 499.276658][ C1] common_startup_64+0x13e/0x147 [ 499.276684][ C1] [ 499.589976][ T5882] tipc: Node number set to 1164755091 [ 499.595596][ T1831] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.608592][ T1831] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.616871][ T1831] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.625367][ T1831] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.553902][ T1299] ieee802154 phy1 wpan1: encryption failed: -22