last executing test programs: 2.638271599s ago: executing program 4 (id=445): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) listen(r1, 0x4000) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x6c, r4, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x91}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) unshare(0x62040200) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, 0x18, @mcast2, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x80002, 0x0) 2.403964702s ago: executing program 4 (id=448): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/163}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91101c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0xfb5, 0xfffffffe}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000001600156f"], 0x18}, 0x1, 0x0, 0x0, 0x810}, 0x8080) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 2.265890805s ago: executing program 1 (id=450): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) unshare(0x26020480) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, 0x3}, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) r2 = socket(0x2b, 0x1, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x11e, 0x1, 0x0, 0x20000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x1b, &(0x7f0000000380)={r6, 0x80005}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000540)={r6, 0x3}, 0x8) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r0, 0x11, 0x0, 0x0, @void, @value=r8}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000500)={r8}, 0x8) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req={0x2, 0x6, 0x10200, 0x43}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="002424d4", @ANYRES16=r11, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000004000000000000000000000000000000000000000100000000120002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73797a3100000000"], 0x6c}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x1a4, r11, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbce}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x25}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xaf2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe1c}]}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_NAME={0xfffffff1, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}]}]}, 0x1a4}}, 0xd2) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$TUNSETSTEERINGEBPF(r9, 0x800454e0, &(0x7f0000000080)=r0) 2.076954841s ago: executing program 4 (id=452): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000700", @ANYRES16=r1, @ANYBLOB="010000000000fddbdf252300000004000280"], 0x18}}, 0x0) 2.035952654s ago: executing program 1 (id=453): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, 0x0, 0x68) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="12000000210003"], 0x24}}, 0x80) 1.899567438s ago: executing program 4 (id=454): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet(0x2, 0x4000000805, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x488, 0x2e0, 0x218, 0x0, 0x180, 0x2e0, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x378}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) listen(r1, 0x5) sendmmsg(r1, &(0x7f0000000180)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}}], 0x2, 0x844) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90624fc60", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$inet(0x2, 0x4000000805, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x488, 0x2e0, 0x218, 0x0, 0x180, 0x2e0, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x378}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) (async) listen(r1, 0x5) (async) sendmmsg(r1, &(0x7f0000000180)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}}], 0x2, 0x844) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90624fc60", 0x14}], 0x1}, 0x0) (async) 1.865042341s ago: executing program 1 (id=455): setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x7d8, 0x66, 0x0, 0xb, 0x11, 0x0, @rand_addr=0x6401011e, @multicast2}, "3297e3ba0faca2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d014"}}, 0x7e6) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000f80)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r1, @ANYBLOB="0400460005003400c4000000080026006c090000300051802c00008005000900"], 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1.771511018s ago: executing program 1 (id=457): socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)={r0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00', 0x48e3}, @in6={0xa, 0x4e24, 0xffffffff, @mcast1, 0x9}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e23, 0x400, @remote, 0x20c3}, @in={0x2, 0x4e22, @loopback}], 0x74) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) connect$netlink(r0, &(0x7f0000000640)=@unspec, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=r3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket(0x8, 0x2, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$nfc_llcp(r7, 0x6, 0xc, 0x0, 0x2000e881) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r9}, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r10}, 0x10) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r11}, 0x8) write$cgroup_int(r12, &(0x7f00000001c0), 0xfffffdef) write$cgroup_int(r12, &(0x7f0000000280)=0xffffffff, 0x12) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r12}, 0x8) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYRES16=r8, @ANYBLOB="100027bd70000000000002"], 0x20}}, 0x40004) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000000540)={&(0x7f0000000240), 0xc, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="10002abd7000fcdbdf2513000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000100000006001100220f00000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b00000000000600110005000000"], 0x80}, 0x1, 0x0, 0x0, 0xc010}, 0x4040050) 1.695383087s ago: executing program 4 (id=458): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r0, &(0x7f0000000040)={0x10, 0x0, 0xffffffff, @hyper}, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000020000006d0500000200000000000000", @ANYRES32, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38) (async, rerun: 64) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r1}, 0x38) (rerun: 64) r2 = socket(0xa, 0x3, 0x3a) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x10, @loopback, 0x10001}}, 0xfff, 0x7, 0x8, 0xfffffffc, 0x12, 0x9, 0x1}, &(0x7f0000000080)=0x9c) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='cgroup.kill\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f00000014c0)={0x1100, 0x1, 0x52, 0xf6a}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={r3, 0x4}, &(0x7f0000000200)=0xc) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x100000}, 0xc) (async) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) bpf$MAP_LOOKUP_ELEM(0x1d, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0xd22f7c2db1585cba}, 0x20) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000000c0)=0x1800, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) r6 = socket$igmp(0x2, 0x3, 0x2) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000540)="e313866f1e018b5621fefc7c403001b788a14f06774cf8d88e240ec71abb3eea308b69fb5c80cae204f2a94324345a9afb8c3552b851496a0aac6710a4e53d7f753814a71559817aeac5b5c7157bcdd5bc41f72440e704bca2bf7ab3ebfb17afa91f513598d42241d5da52fbc7dc9436c7c3474d1204c252047e160c5e4ab2189bb21cf45d54e9d7757fbe82ab6e148095121ad4b6b9dc1b603e12d9275f8a8b7191193f884bac9bb597402e34", 0xad}, {&(0x7f0000000480)="7e389fa1f852b1204d57c0dc848ce41e24d7d35dcd3c4c26e1af44da913ba17ecaf216682041e24184331225bf0e0f2f243ec022f5a3771c8a51acdbd11ea2f91dc1f6607af3d38be60b4c6f69604e77", 0x50}, {&(0x7f0000000700)="64768c050e4a9ffda67fc9dcc5d2c7a3779af573bb5fbdac424cb859aeba33e7a4771b506e551b19b8e8600e1c7d86c849f115f90558b10c6c4d3fca6b068b8e099d1d66f8dd0db6fccfc335520495264ce6aca7cf7f283476013256993024d5a3f8e29ac72307c01137201f293cfb3cbf5cbb140f93fa854382d3f2c0a0396df07839f1054b136573a4a1acf66062abf595439cecf4f1582b0dd36cf07910179b529afca1cd9a55bac525ccfa240e48e49b63db69f3ba80c20ff4971088746a1015b946944d249ddb989f92b9e7ba48815653b31249420aaeaf6fb8c6d1772a56403b5a6a93dacc3db192a55adfd112a57c27082e", 0xf5}, {&(0x7f0000000600)="a98ad216692878964588f6a4da4ea39eafe7f3c01d59dab0ace0d4dd58904aaa9d6d02f2a4cf711abe48e08336ff8800cb2261d0b87feeaa19d8328c1acd7e721dfcc2ba109c8330b3b90d5caf4ea732aa6e626a046e2852e287e11cc4fe95336250187018668a05454d7103c8cd7ba474a703eadf3a7f2a4ceff0bb29ec32cedbcd760b50b4a6f6993f279e18013c3ea9", 0x91}, {&(0x7f0000000800)="ed4cd68c2641c1a3fbb2b2240a59e221212e7509c04f16be86b1a9b86da7dba829327134588357579e60484e40b5ddd4761a7644e0b9bea4b14446b6489ea32b5ed3d0c27d15d80b4b126431fc254bb72d6c04aea6d63f2b299208c5b51cc3f04ed9eb4ce0101c56baa8a6b3f3", 0x6d}, {&(0x7f0000000980)="16ecf9119af129c3bec5d2efc5b6942294a2c81a8f973a17f2320f7f22", 0x1d}, {&(0x7f0000000300)="e4f42d377ee92cfabf08d4243cd90e81bc97", 0x12}, {&(0x7f0000000880)="ff2a22076912aebfda3191f5f640119fbc504f166b795a443c9fbbd8d293e3aba78d9843bb9b169c0abdd9ba58638dc86f8df06763fc3bb32c2ddd", 0x3b}], 0x8) (async, rerun: 64) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async, rerun: 64) r7 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x43, &(0x7f0000000340)={{{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x2000000000}}, {{@in6=@mcast1}, 0x0, @in6=@private1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0xe8) (async, rerun: 64) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) (async, rerun: 64) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) (async) shutdown(r8, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000100)={r9, 0x0, 0x3, 0x0, 0x10, 0x7}, 0x14) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010300000000000000000000000005000100070000000900020073797a3100000000140007800800130000000fff08001240000000000500050002000000050004000000000011000300686173683a69702c836f727400000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async, rerun: 32) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) (rerun: 32) 1.684627757s ago: executing program 2 (id=460): r0 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}]}, 0x58}}, 0x0) (async) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_int(r4, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}}, 0x0) (async) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r3, r4, 0x0, 0xffffffff000) sendto(r3, 0x0, 0x0, 0x0, &(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x6, @empty, 0x10001, 0x3}, 0x80) (async) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r6, &(0x7f0000000080)={0x1a, 0x320, 0x7f, 0x8, 0xfd, 0x1}, 0x10) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x13, &(0x7f0000000000), 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket(0x28, 0x1, 0x0) getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003e80)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) 1.448677307s ago: executing program 2 (id=462): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000900000014100000", @ANYRES32, @ANYBLOB="0000000000632be96dc53240", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) unshare(0x22020400) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r2}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.178904232s ago: executing program 2 (id=464): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f00000000c0)=""/35, &(0x7f0000000100)=0x23) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000000)) 1.178203916s ago: executing program 3 (id=465): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000003d0007010000000000000000047c000008000880040008000c00018006000600894f"], 0x38}}, 0xc000) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) (rerun: 64) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r2}, 0x4) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180b0000", @ANYRES16=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1020, &(0x7f0000002240)=""/4128, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64) 1.067632269s ago: executing program 2 (id=466): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xbc, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0xffff, 0x4}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x8, [0x8, 0x0, 0x5, 0xff, 0xff, 0x0, 0xb, 0x3, 0x0, 0x0, 0x0, 0x3, 0xfd, 0x1], 0x1, [0x1, 0x0, 0x6, 0x0, 0xeef, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x4], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7949}]}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000340)="b9ff03316844268cb89914f00800", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x1}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80d0}, 0x4002000) 1.045737728s ago: executing program 0 (id=467): setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x7d8, 0x66, 0x0, 0xb, 0x11, 0x0, @rand_addr=0x6401011e, @multicast2}, "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"}}, 0x7e6) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000f80)=ANY=[@ANYRES16=r2, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r1, @ANYBLOB="0400460005003400c4000000080026006c090000300051802c00008005000900"], 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 867.679494ms ago: executing program 3 (id=468): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x840000000002, 0x3, 0x100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xcafe28741a3524c9, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, r2, 0x80, 0x1e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)) socket$inet6(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c01000013000500"/20, @ANYRES32=r4, @ANYBLOB="000000000000000014000300766c616e3000000000000000000000000a000100aaaaaaaaaa30000008001b"], 0x11c}}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x1000000000000002, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304016100"/20, @ANYRES32=0x0, @ANYBLOB="d3ddd1de00000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r7], 0x44}}, 0x0) 866.851191ms ago: executing program 4 (id=469): setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x5, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x58, &(0x7f0000000080)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e20, 0x1000, @mcast1, 0x7}, @in6={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}, 0x1c, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000240)}, {&(0x7f0000000280)="ecd07fc03d3a437853c1e93026c9c3f06ebb142f2ea00c7d64fbe404b95452aae7596e6969300187bbe5fb180d90ad8c4421a83e2f7b06515fe183e472855ebac94d", 0x42}, {&(0x7f0000000300)="3d10e363685fc8533d417cf9eb71fca2fc228f53bfa3a649e5673c5c25250e2fa970402626721c0c4b", 0x29}], 0x4}, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40144) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000008180)={{0x0, 0x8, 0x8, 0x1, 0x7, 0x2, 0x4, 0x3, 0x4, 0x9, 0x200, 0xb0, 0x9, 0xcf7, 0xd}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000540)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {0x0}], 0x9, "90be8d6cf67e98"}) r4 = socket(0x10, 0x80003, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x40880}, 0x40) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001540)={{r2, 0x80000000, 0x3, 0x2, 0xe, 0x401, 0x40000000000, 0x7, 0x5, 0x748cf7cc, 0x5, 0x7fff, 0x1, 0xffffffffffffffff, 0x8}}) r8 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r8, &(0x7f0000002540)={0x2a, 0x1, 0x3fff}, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000002640)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x2c, 0x2, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2004}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xd}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0x2c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000001c0)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)=ANY=[@ANYBLOB="78000000070a05000000000000000000040000020900010073797a30000000000c00034000000000000000020c000340000000000000000408000a40160000020c00034000000000000000020c000340000000000000000308000b40000000010c00058008000140000000330c0006400000000000000402"], 0x78}, 0x1, 0x0, 0x0, 0x20}, 0x8090) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000027c0)=0x8e2, 0x8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r9, &(0x7f0000002900)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x14, r10, 0x4, 0x70bd26, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) recvmmsg(r8, &(0x7f0000006d40)=[{{&(0x7f0000002940)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002d40)=[{&(0x7f00000029c0)=""/165, 0xa5}, {0x0}, {&(0x7f0000002b40)=""/72, 0x48}, {&(0x7f0000002bc0)=""/247, 0xf7}, {0x0}], 0x5, &(0x7f0000002dc0)=""/3, 0x3}}, {{&(0x7f0000002e00)=@l2, 0x80, &(0x7f00000042c0)=[{&(0x7f0000002e80)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003f40)=""/37, 0x25}, {&(0x7f0000003f80)=""/92, 0x5c}, {&(0x7f0000004000)=""/172, 0xac}, {&(0x7f00000040c0)=""/9, 0x9}, {&(0x7f0000004100)=""/104, 0x68}, {&(0x7f0000004240)=""/101, 0x65}], 0x8, &(0x7f0000004380)=""/107, 0x6b}, 0x3ff}, {{0x0, 0x0, &(0x7f0000005080)=[{0x0}], 0x1, &(0x7f00000050c0)=""/198, 0xc6}, 0x3}, {{&(0x7f00000051c0)=@alg, 0x80, &(0x7f0000005280)=[{&(0x7f0000005240)=""/29, 0x1d}], 0x1, &(0x7f00000052c0)=""/210, 0xd2}, 0xfffffffc}, {{0x0, 0x0, &(0x7f0000005480)=[{0x0}], 0x1}, 0x5e8cffcb}, {{&(0x7f00000054c0)=@x25={0x9, @remote}, 0x80, 0x0, 0x0, &(0x7f0000005a00)=""/224, 0xe0}, 0x7f}, {{&(0x7f0000005b00)=@hci, 0x80, &(0x7f0000006c40)=[{&(0x7f0000005b80)=""/4096, 0x1000}, {&(0x7f0000006b80)=""/136, 0x88}], 0x2, &(0x7f0000006c80)=""/177, 0xb1}, 0x5}], 0x7, 0x0, &(0x7f0000006f80)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000006fc0)={{r3, 0xa6, 0x9, 0x6, 0xc15a, 0x2, 0x6, 0xfffffffc, 0xa, 0x56a6, 0x7, 0x5, 0x5, 0x8, 0x1ac5}}) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000008080)={&(0x7f0000007fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000008040)={&(0x7f0000008000)=ANY=[@ANYBLOB="28000000020301020000000000000000030000050d00020000000001020000000800044000000025"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000080c0)={0x6, 0x7, 0xfff, 0x2}, 0x10) socketpair(0x2c, 0x801, 0x6, &(0x7f0000008100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_int(r11, 0x0, 0x22, &(0x7f0000008140)=0xe33f, 0x4) 843.02113ms ago: executing program 0 (id=470): socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) recvmmsg(r0, &(0x7f0000001dc0), 0x0, 0x40, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x47, &(0x7f0000000340)='cgroup\x00'}, 0x30) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$sock_attach_bpf(r0, 0x110, 0x5, 0x0, 0x1f) socket$rds(0x15, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/100, 0x64}, {&(0x7f0000000580)=""/209, 0xd1}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000840)=""/128, 0x80}], 0x4, 0x10001, 0x7fff) close(r0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) (async) recvmmsg(r0, &(0x7f0000001dc0), 0x0, 0x40, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x31) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x47, &(0x7f0000000340)='cgroup\x00'}, 0x30) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000340)) (async) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) setsockopt$sock_attach_bpf(r0, 0x110, 0x5, 0x0, 0x1f) (async) socket$rds(0x15, 0x5, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/100, 0x64}, {&(0x7f0000000580)=""/209, 0xd1}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000840)=""/128, 0x80}], 0x4, 0x10001, 0x7fff) (async) close(r0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) 716.920641ms ago: executing program 1 (id=471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x12}, @val={0xfffffffffffffe36, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x0, 0x1, 0x1, 0x0, 0x1d}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0xffffffffffffff5b, 0x1, 0x1}}}}]}, 0x38}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x6}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_RAW={0x8}]}}, @TCA_STAB={0x4}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x114, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0xfb, 0x7, 0xa424, 0x0, 0x7, 0xd, 0x8}}, {0x14, 0x2, [0x3ff, 0x1, 0x7, 0x3, 0x2, 0xe, 0xdf17, 0x8]}}, {{0x1c, 0x1, {0x1, 0x7, 0x9, 0x5, 0x0, 0x9, 0x71, 0x5}}, {0xe, 0x2, [0x800, 0x1ff, 0xac50, 0xaa, 0x8000]}}, {{0x1c, 0x1, {0x8, 0x3, 0x4, 0x4d, 0x0, 0x3, 0xfffeffff, 0x6}}, {0x10, 0x2, [0x0, 0x7ff, 0x7, 0x81, 0x0, 0x9]}}, {{0x1c, 0x1, {0x5, 0xff, 0x4, 0x9, 0x1, 0x800, 0x10001, 0x3}}, {0xa, 0x2, [0x8, 0x8, 0x7]}}, {{0x1c, 0x1, {0x9, 0xf6, 0x9, 0x0, 0x2, 0x6ff, 0xfffffffa, 0x6}}, {0x10, 0x2, [0x3, 0xecb, 0x100, 0xc, 0x7c84, 0xff]}}]}]}, 0x114}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x40, 0x2c, 0x52f, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {}, {0x2, 0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0xf, 0x7}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x5, 0xffff}}]}}]}, 0x40}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r8, 0x0, &(0x7f0000000100)=0x4) connect$netrom(r8, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x48) r9 = accept4$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000380)=0x1c, 0x80000) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000440)={r9}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r10, 0x0, 0x114, 0xe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={0x0, r10, 0x0, 0x5, &(0x7f0000000540)='cake\x00'}, 0x30) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x6, 0x11, 0x0, @empty, @loopback}, {0x4e24, 0x4e22, 0x8}}}}}, 0x0) connect$netrom(r8, 0x0, 0x0) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', r6, r12, 0xffffffff, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x15, &(0x7f0000000640)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x90}, @map_fd={0x18, 0x3, 0x1, 0x0, r13}, @tail_call={{0x18, 0x2, 0x1, 0x0, r13}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x9}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 713.999094ms ago: executing program 2 (id=472): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000380)={@void, @void, @ipv6=@udp={0xd, 0x6, "6ff169", 0x64, 0x11, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[], {0x4e25, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x0, "2a6fc62da102b492cfeb01a43a4cc01cf3e05e4039913ea1373a5a7de06bc75b", "944bf18001c6b2b37b3a9ece3d4b2cb8", {"05ab87c9e07114beab774932e734e9d2", "23539a3b33a0e4e34b06effbb8439eee"}}}}}}, 0x8c) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x7, [@var={0x1, 0x0, 0x0, 0xe, 0x3, 0x2}, @ptr={0x2, 0x0, 0x0, 0xb, 0x4}, @ptr={0xa, 0x0, 0x0, 0x2, 0x6}, @volatile={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) getpeername$netrom(r1, &(0x7f0000000180)={{0x3, @netrom}, [@null, @remote, @default, @bcast, @default, @bcast, @netrom, @bcast]}, &(0x7f00000000c0)=0x48) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001e00)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYRES8, @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x40000) 635.733507ms ago: executing program 3 (id=473): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r3) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6107863fa6075d3eb97257967df35076de082388cf9039bbad1b189debe0f99f76", @ANYRES16=r1, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="0400130006001200000000000600b500850100000a000600080211000001000006001a0102000000"], 0x44}}, 0x0) 613.378079ms ago: executing program 0 (id=474): socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0xb, 0x2, 0xb, 0x8c, 0xf, 0x4, 0x1, 0x6, 0xa, 0xf, 0x10, 0x2, 0xd, 0x8, 0x5, 0x9], 0x1, [0x809, 0x67ef, 0x2, 0x4, 0x4, 0x8, 0x3, 0xfff9, 0x9, 0xd4e8, 0x6, 0x200, 0x10, 0x0, 0xc73, 0x5], [0x800, 0x1, 0x4, 0x3d3e, 0xff, 0x4, 0x2, 0x50ad, 0x81, 0xc5, 0x8000, 0xc, 0x3, 0x7, 0x8, 0xce]}}}}]}, 0x88}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x14, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x18}]}, 0x14}], 0x1}, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) socket(0x15, 0x5, 0x0) (async, rerun: 32) socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) (async, rerun: 64) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x4, 0x0, 0x3}, 0x0, 0x0) (rerun: 64) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x40000000, 0x0, 0x0}, 0x2000c040) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r5, 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r7, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) 505.514079ms ago: executing program 3 (id=475): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000001500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xdcdcbca144caf2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x6, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x81) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000e0000001000000000000000000000000e000000100000000000000000000120000000000000000000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="b80000001300e9990000000002000000e0000001000000000000000000000000e00000010000000000000000000000004e2400000000000002000010"], 0xb8}}, 0x0) 447.343898ms ago: executing program 2 (id=476): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) close(r2) ioctl(0xffffffffffffffff, 0x8b2a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010800"/18, @ANYRES32=0x0, @ANYBLOB="000004001004000024001a80200002801c00018008001a0006000000080016000200000008001000000400000800"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000400)=0x8, 0x12) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r5, &(0x7f0000000200)=[{&(0x7f0000000300)=""/136, 0x88}], 0x1) sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r11, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd7400040000000500000008000c00a80a000014000800767863616e31000000000000000000000c001000ff0700000000000008000b00040000000800090002000000060001000b000000"], 0x54}}, 0x0) ppoll(&(0x7f00000003c0)=[{r5, 0x80a0}, {r1, 0x80}, {r7, 0x2180}, {r2, 0x2}, {r6, 0x2390}, {r5, 0x9008}, {r1, 0x2610}, {r1, 0x408a}], 0x8, &(0x7f0000000440), &(0x7f0000000480)={[0x8]}, 0x8) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="010000000000000008001b0000000000"], 0x28}}, 0x0) 346.700193ms ago: executing program 3 (id=477): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a0080"], 0x1c}}, 0x0) 264.260787ms ago: executing program 0 (id=478): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd28, 0x10000, {{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x1, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x4, 0xf7f5, 0xffffffffffffb473, 0xfffffffffffffffa}, {0xffffffffc, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x20, 0x3f, 0xb, 0x70bd25, 0x0, {0x4}, [@typed={0xc, 0x6, 0x0, 0x0, @u64=0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x40880) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 115.410816ms ago: executing program 3 (id=479): r0 = socket$inet(0x10, 0x3, 0x400) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000440)=[@in6={0xa, 0x4e23, 0x843, @local, 0x5}, @in={0x2, 0x4e21, @remote}], 0x2c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x20, 0x68, 0x601, 0x3, 0x0, {0x2, 0x0, 0x1, 0x0, 0x4}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x5c, r4, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x1}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x34, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x3}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x2}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x7}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x6}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x44805) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz1\x00', 0x1ff) syz_emit_ethernet(0x72, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e400ff003c3a00fc020000000000000000000000000000ff020000000000000000000000000001020090780000000060000000000011000000000000000000000000000000000000000000000000000000ffffe000000117c17f079171000700840000d98a70c8a5c43b9a6ac3a099a26e2b0148310b06ca3217bd9df9223ac1ccaad568270634d5b57b350f22584f063cfb351a40780c2bf2bb5647d4db58b40710"], 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2, 0x90, 0x10, 0xf8, 0x9, 0x0, 0x0, 0x7, 0x8}, [@FRA_FLOW={0x8, 0xb, 0x8000}, @FRA_SRC={0x8, 0x2, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40c4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x4, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6004}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}}, 0x20008000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'veth0_to_team\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b70500000000000079105c000000000005000000000000009500000000000000045deb497403e574cbc2452a08546d06f98c930d8e572b73415d11c0717dbb9620625647e8a04f951e768a659cbc1451eee1c437e0d5440a4994b4742c33358d626e74c92eca7b0ec92b0c5f6a1dae3c6c0071b2b5d7e188daca43cee12b6581d6a7b1691e9e5c35bb0352ef52f367f01c31bbe26d4228c6f3bf372099eba19fd12fbf718e4ae5ab7d6af0cc3445634d99c2461ea0ac21ca579f75af9a8b45b0ca5f91121c569919e991bc00f9c53b5239baa54df300c663229c6a22d1bf6533"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xfffffff9}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}}, 0x0) 115.075059ms ago: executing program 0 (id=480): setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x7d8, 0x66, 0x0, 0xb, 0x11, 0x0, @rand_addr=0x6401011e, @multicast2}, "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"}}, 0x7e6) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000f80)=ANY=[@ANYRES16=r2, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r1, @ANYBLOB="0400460005003400c4000000080026006c090000300051802c00008005000900"], 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 109.367116ms ago: executing program 1 (id=481): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1a, 0x3, &(0x7f0000000000)=@framed={{0x18, 0xa, 0x0, 0x11}}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)=r0}, 0x20) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) (async, rerun: 64) r5 = socket$kcm(0x2, 0x5, 0x84) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x10, &(0x7f0000000000)=r7, 0xc) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000003c001a8038000280070001800800000000000000080000000000000008000000000000d6000000000000000008000000000000000800000000000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES8=r2, @ANYRES64=r5, @ANYRES8=0x0], 0x70}}, 0x0) (async) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x15864}]}}]}, 0x3c}}, 0x4000) (async) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_fd={0x18, 0xa, 0x1, 0x0, r3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x0, 0x0, 0x7, 0xb, 0xfffffffffffffffc, 0x8}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x11, '\x00', r10, @fallback=0xf, r11, 0x8, &(0x7f0000000280)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xe, 0x7, 0x400}, 0x10, 0xffffffffffffffff, r0, 0x3, &(0x7f00000003c0)=[0x1, r12], &(0x7f00000004c0)=[{0x4, 0x5, 0x2, 0x5}, {0x4, 0x5, 0xa, 0xa}, {0x2, 0x2, 0x8, 0x9}], 0x10, 0xffffffff, @void, @value}, 0x94) 0s ago: executing program 0 (id=482): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @empty}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000002}) ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x44, @loopback}, {0x2, 0x4e2f, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x74, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='lo\x00', 0xffffffff}) unshare(0x400) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f00000002c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x2, @null}, 0x1c) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r2, 0x917}, 0x14}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x1f, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8001}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffd}, @ldst={0x1, 0x0, 0x1, 0xb, 0x6, 0xfffffffffffffff8}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9}, @ldst={0x3, 0x1, 0x6, 0x2, 0xf, 0xffffffffffffffff, 0xffffffffffffffff}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}], &(0x7f0000000140)='GPL\x00', 0x7f, 0x6d, &(0x7f0000000180)=""/109, 0x41100, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x8, 0x1, 0xfff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x1], 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4, 0x0, 0x8}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={r0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r7, 0x100, 0x70bd2a, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) sendmsg$can_bcm(r5, &(0x7f0000000700)={&(0x7f00000005c0), 0x10, &(0x7f00000006c0)={&(0x7f0000000600)={0x5, 0x402, 0xf, {0x77359400}, {}, {0x3, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0xe, 0x1, 0x0, 0x0, "d096b3f38fe1310cd09e8bef9230617a4adb93cf8a68a4e126447d64257f5b48732283845310bb3e78cdcf5791196c10acbbe8c8bf25fba5485e9688ae8bc756"}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x70) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.80' (ED25519) to the list of known hosts. [ 81.998772][ T5822] cgroup: Unknown subsys name 'net' [ 82.103621][ T5822] cgroup: Unknown subsys name 'cpuset' [ 82.112361][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.684805][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.227659][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.236798][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.237683][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.245888][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.254461][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.260978][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.266845][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.285673][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.293396][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.294320][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.310568][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.318060][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.318910][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.333322][ T5854] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.341380][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.362073][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.377906][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.378295][ T5148] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.393819][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.394146][ T5148] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.410212][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.410917][ T5148] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.425379][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.435806][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.443085][ T5854] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.451063][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.458934][ T5854] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 86.466487][ T5148] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.480558][ T5148] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.492772][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.913802][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 87.013066][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 87.033605][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 87.095902][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 87.218292][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.226606][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.234395][ T5837] bridge_slave_0: entered allmulticast mode [ 87.242866][ T5837] bridge_slave_0: entered promiscuous mode [ 87.305202][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.313211][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.320960][ T5837] bridge_slave_1: entered allmulticast mode [ 87.327764][ T5837] bridge_slave_1: entered promiscuous mode [ 87.335518][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 87.345077][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.353274][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.360823][ T5833] bridge_slave_0: entered allmulticast mode [ 87.367604][ T5833] bridge_slave_0: entered promiscuous mode [ 87.383692][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.390897][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.398096][ T5832] bridge_slave_0: entered allmulticast mode [ 87.405423][ T5832] bridge_slave_0: entered promiscuous mode [ 87.425586][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.432773][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.440917][ T5833] bridge_slave_1: entered allmulticast mode [ 87.447764][ T5833] bridge_slave_1: entered promiscuous mode [ 87.482778][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.490177][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.497415][ T5832] bridge_slave_1: entered allmulticast mode [ 87.504867][ T5832] bridge_slave_1: entered promiscuous mode [ 87.538362][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.551596][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.568822][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.576226][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.583946][ T5835] bridge_slave_0: entered allmulticast mode [ 87.591126][ T5835] bridge_slave_0: entered promiscuous mode [ 87.610828][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.651627][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.661337][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.668511][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.676214][ T5835] bridge_slave_1: entered allmulticast mode [ 87.683580][ T5835] bridge_slave_1: entered promiscuous mode [ 87.692558][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.719632][ T5837] team0: Port device team_slave_0 added [ 87.727458][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.780557][ T5837] team0: Port device team_slave_1 added [ 87.797792][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.810201][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.821659][ T5832] team0: Port device team_slave_0 added [ 87.853923][ T5833] team0: Port device team_slave_0 added [ 87.862700][ T5832] team0: Port device team_slave_1 added [ 87.870265][ T5833] team0: Port device team_slave_1 added [ 87.890151][ T5835] team0: Port device team_slave_0 added [ 87.943974][ T5835] team0: Port device team_slave_1 added [ 87.969824][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.976816][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.006907][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.021011][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.027987][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.054723][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.092279][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.099334][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.125546][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.138645][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.145936][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.153268][ T5834] bridge_slave_0: entered allmulticast mode [ 88.162116][ T5834] bridge_slave_0: entered promiscuous mode [ 88.170106][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.177233][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.184612][ T5834] bridge_slave_1: entered allmulticast mode [ 88.191882][ T5834] bridge_slave_1: entered promiscuous mode [ 88.206906][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.214322][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.240790][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.253881][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.261303][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.287797][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.300691][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.307676][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.334397][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.347615][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.358638][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.391056][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.407179][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.414605][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.433096][ T5839] Bluetooth: hci0: command tx timeout [ 88.445190][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.509504][ T5839] Bluetooth: hci2: command tx timeout [ 88.515219][ T55] Bluetooth: hci3: command tx timeout [ 88.520770][ T5148] Bluetooth: hci1: command tx timeout [ 88.521159][ T55] Bluetooth: hci4: command tx timeout [ 88.584014][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.661240][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.688813][ T5832] hsr_slave_0: entered promiscuous mode [ 88.696682][ T5832] hsr_slave_1: entered promiscuous mode [ 88.708337][ T5833] hsr_slave_0: entered promiscuous mode [ 88.715745][ T5833] hsr_slave_1: entered promiscuous mode [ 88.722193][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.730147][ T5833] Cannot create hsr debugfs directory [ 88.740308][ T5837] hsr_slave_0: entered promiscuous mode [ 88.746841][ T5837] hsr_slave_1: entered promiscuous mode [ 88.754214][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.762185][ T5837] Cannot create hsr debugfs directory [ 88.783081][ T5835] hsr_slave_0: entered promiscuous mode [ 88.790503][ T5835] hsr_slave_1: entered promiscuous mode [ 88.796734][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.804677][ T5835] Cannot create hsr debugfs directory [ 88.908847][ T5834] team0: Port device team_slave_0 added [ 88.917550][ T5834] team0: Port device team_slave_1 added [ 89.003435][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.010971][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.037513][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.084286][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.091497][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.117563][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.215446][ T5834] hsr_slave_0: entered promiscuous mode [ 89.222235][ T5834] hsr_slave_1: entered promiscuous mode [ 89.228310][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.236070][ T5834] Cannot create hsr debugfs directory [ 89.459988][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.474266][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.492867][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.508319][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.551526][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.576843][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.594445][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.615780][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.655600][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.667357][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.678683][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.699971][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.763303][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.791671][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.823883][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.854618][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.891990][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.913983][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.930836][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.943149][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.018426][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.083779][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.094139][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.111105][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.132556][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.139918][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.173836][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.181019][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.201504][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.256719][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.263944][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.277566][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.300054][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.307184][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.317810][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.325009][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.357878][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.365079][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.379735][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.428249][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.502981][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.510203][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.517688][ T55] Bluetooth: hci0: command tx timeout [ 90.562052][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.569256][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.589569][ T5849] Bluetooth: hci2: command tx timeout [ 90.589588][ T5839] Bluetooth: hci1: command tx timeout [ 90.595101][ T5849] Bluetooth: hci3: command tx timeout [ 90.606681][ T55] Bluetooth: hci4: command tx timeout [ 90.636091][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.707907][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.794082][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.864587][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.871818][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.924408][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.931617][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.071265][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.107598][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.216397][ T5835] veth0_vlan: entered promiscuous mode [ 91.266651][ T5832] veth0_vlan: entered promiscuous mode [ 91.305305][ T5832] veth1_vlan: entered promiscuous mode [ 91.318723][ T5835] veth1_vlan: entered promiscuous mode [ 91.359742][ T5833] veth0_vlan: entered promiscuous mode [ 91.385058][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.432060][ T5833] veth1_vlan: entered promiscuous mode [ 91.483630][ T5832] veth0_macvtap: entered promiscuous mode [ 91.496281][ T5835] veth0_macvtap: entered promiscuous mode [ 91.511675][ T5832] veth1_macvtap: entered promiscuous mode [ 91.536283][ T5835] veth1_macvtap: entered promiscuous mode [ 91.545185][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.564456][ T5833] veth0_macvtap: entered promiscuous mode [ 91.586095][ T5834] veth0_vlan: entered promiscuous mode [ 91.598808][ T5833] veth1_macvtap: entered promiscuous mode [ 91.624793][ T5834] veth1_vlan: entered promiscuous mode [ 91.645577][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.656400][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.668650][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.686358][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.703250][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.714253][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.725700][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.736855][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.750622][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.763383][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.772226][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.781220][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.801565][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.812195][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.822593][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.833225][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.845010][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.870266][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.879375][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.888196][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.897787][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.932800][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.944046][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.954469][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.966901][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.978003][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.991865][ T5837] veth0_vlan: entered promiscuous mode [ 92.014117][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.024905][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.036330][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.045850][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.067677][ T5834] veth0_macvtap: entered promiscuous mode [ 92.132503][ T5834] veth1_macvtap: entered promiscuous mode [ 92.148237][ T5837] veth1_vlan: entered promiscuous mode [ 92.199559][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.207592][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.269418][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.277281][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.308307][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.316763][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.327742][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.338298][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.361125][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.376696][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.387562][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.398252][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.408251][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.419163][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.432683][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.453278][ T5837] veth0_macvtap: entered promiscuous mode [ 92.485148][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.496424][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.506806][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.517838][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.528071][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.538668][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.550062][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.564397][ T5837] veth1_macvtap: entered promiscuous mode [ 92.569293][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.578097][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.596874][ T55] Bluetooth: hci0: command tx timeout [ 92.600117][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.613070][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.615950][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.641405][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.650226][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.669370][ T55] Bluetooth: hci1: command tx timeout [ 92.670274][ T5849] Bluetooth: hci2: command tx timeout [ 92.674819][ T55] Bluetooth: hci4: command tx timeout [ 92.680533][ T5849] Bluetooth: hci3: command tx timeout [ 92.751868][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.770423][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.778186][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.804502][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.824283][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.855316][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.865968][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.876832][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.886785][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.897283][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.910363][ T5922] Zero length message leads to an empty skb [ 92.910915][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.961553][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.019209][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.043904][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.055072][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.065432][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.076206][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.087951][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.098882][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.110858][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.165846][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.189148][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.197916][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.207101][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.240707][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.263965][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.283706][ T5927] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 93.372329][ T5921] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 93.438794][ T5921] syzkaller1: entered promiscuous mode [ 93.444671][ T5921] syzkaller1: entered allmulticast mode [ 93.466763][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.476467][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.703785][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.745412][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.995185][ T5937] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.673012][ T5849] Bluetooth: hci0: command tx timeout [ 94.752457][ T55] Bluetooth: hci2: command tx timeout [ 94.757965][ T5148] Bluetooth: hci1: command tx timeout [ 94.759945][ T5849] Bluetooth: hci4: command tx timeout [ 94.764536][ T5839] Bluetooth: hci3: command tx timeout [ 95.506005][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.514917][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.529025][ T5955] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.608949][ T5955] netlink: 124 bytes leftover after parsing attributes in process `syz.1.9'. [ 95.794183][ T5958] lo speed is unknown, defaulting to 1000 [ 95.835628][ T5958] lo speed is unknown, defaulting to 1000 [ 95.903865][ T5958] lo speed is unknown, defaulting to 1000 [ 95.951294][ T5958] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 96.015871][ T5958] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 96.085750][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 96.098540][ T5958] lo speed is unknown, defaulting to 1000 [ 96.118850][ T5958] lo speed is unknown, defaulting to 1000 [ 96.135029][ T5958] lo speed is unknown, defaulting to 1000 [ 96.146581][ T5958] lo speed is unknown, defaulting to 1000 [ 96.153179][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 96.172185][ T5964] netlink: 'syz.2.3': attribute type 11 has an invalid length. [ 96.196005][ T5958] lo speed is unknown, defaulting to 1000 [ 96.343068][ T5967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 96.620823][ T5959] dccp_close: ABORT with 28 bytes unread [ 96.785383][ T5972] netlink: 'syz.2.14': attribute type 1 has an invalid length. [ 96.805161][ T5972] netlink: 224 bytes leftover after parsing attributes in process `syz.2.14'. [ 96.854402][ T5982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17'. [ 96.919578][ T47] IPVS: starting estimator thread 0... [ 96.927797][ T5980] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 97.030192][ T5985] IPVS: using max 22 ests per chain, 52800 per kthread [ 97.333825][ T5975] syz.0.15 (5975) used greatest stack depth: 18800 bytes left [ 97.428982][ T5996] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.461420][ T5998] netlink: 7084 bytes leftover after parsing attributes in process `syz.0.23'. [ 97.637703][ T5998] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.23'. [ 97.648042][ T5998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.693361][ T5998] bridge0: port 3(vlan2) entered blocking state [ 97.704504][ T5998] bridge0: port 3(vlan2) entered disabled state [ 97.719940][ T5998] vlan2: entered allmulticast mode [ 97.727042][ T6007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27'. [ 97.728946][ T5998] bond0: entered allmulticast mode [ 97.760850][ T6007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27'. [ 97.765238][ T5998] bond_slave_0: entered allmulticast mode [ 97.815870][ T5998] bond_slave_1: entered allmulticast mode [ 97.838791][ T5998] vlan2: entered promiscuous mode [ 97.888766][ T5998] bond0: entered promiscuous mode [ 97.927437][ T5998] bond_slave_0: entered promiscuous mode [ 98.019451][ T5998] bond_slave_1: entered promiscuous mode [ 98.085388][ T6004] netlink: 40 bytes leftover after parsing attributes in process `syz.2.26'. [ 98.486634][ T9] cfg80211: failed to load regulatory.db [ 98.724149][ T6097] sctp: [Deprecated]: syz.2.32 (pid 6097) Use of int in max_burst socket option. [ 98.724149][ T6097] Use struct sctp_assoc_value instead [ 98.937785][ T6100] netlink: 'syz.2.33': attribute type 1 has an invalid length. [ 99.093434][ T6101] lo speed is unknown, defaulting to 1000 [ 99.224954][ T6109] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 99.578327][ T6126] netlink: 'syz.3.43': attribute type 9 has an invalid length. [ 99.669382][ T6131] netlink: 'syz.1.41': attribute type 1 has an invalid length. [ 99.806815][ T6123] lo speed is unknown, defaulting to 1000 [ 99.894757][ T6130] lo speed is unknown, defaulting to 1000 [ 100.438594][ T6150] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 100.460182][ T6150] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 100.725468][ T6161] netlink: 'syz.3.52': attribute type 13 has an invalid length. [ 100.768826][ T6161] __nla_validate_parse: 3 callbacks suppressed [ 100.768845][ T6161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.52'. [ 100.801994][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'. [ 100.827173][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'. [ 100.846752][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'. [ 100.870651][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'. [ 100.886215][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'. [ 100.897245][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'. [ 100.916001][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'. [ 100.934727][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'. [ 100.943956][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'. [ 100.954642][ T6150] lo speed is unknown, defaulting to 1000 [ 100.955021][ T6161] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 101.074910][ T6168] netlink: 'syz.0.53': attribute type 5 has an invalid length. [ 101.099564][ T6168] warning: `syz.0.53' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.809987][ T6198] netlink: 'syz.1.60': attribute type 1 has an invalid length. [ 101.817628][ T6198] netlink: 'syz.1.60': attribute type 1 has an invalid length. [ 101.830811][ T6196] netlink: 'syz.0.61': attribute type 1 has an invalid length. [ 101.849359][ T6198] netlink: 'syz.1.60': attribute type 2 has an invalid length. [ 102.086659][ T6206] batadv1: entered allmulticast mode [ 102.337688][ T6214] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.346747][ T6214] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.526447][ T6214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.554580][ T6214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.775721][ T6214] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.808630][ T6214] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.824546][ T6214] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.844569][ T6214] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.876434][ T6233] netlink: 'syz.0.68': attribute type 1 has an invalid length. [ 103.613764][ T6250] lo speed is unknown, defaulting to 1000 [ 103.667051][ T6265] xt_hashlimit: size too large, truncated to 1048576 [ 104.112282][ T6279] macvtap0: entered promiscuous mode [ 104.205594][ T6279] macvtap0: entered allmulticast mode [ 104.245832][ T6279] veth0_macvtap: entered allmulticast mode [ 104.297428][ T6287] macvtap0: left promiscuous mode [ 104.328088][ T6287] macvtap0: left allmulticast mode [ 104.339271][ T6287] veth0_macvtap: left allmulticast mode [ 105.231765][ T6339] validate_nla: 1 callbacks suppressed [ 105.231786][ T6339] netlink: 'syz.2.99': attribute type 10 has an invalid length. [ 105.250984][ T6334] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.304535][ T6339] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 105.331138][ T6339] team0: Failed to send options change via netlink (err -105) [ 105.343698][ T6342] netlink: 'syz.1.100': attribute type 32 has an invalid length. [ 105.353121][ T6339] team0: Port device geneve0 added [ 105.377833][ T6334] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.552050][ T6334] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.728828][ T6334] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.731097][ T6351] netlink: 'syz.3.101': attribute type 10 has an invalid length. [ 105.852688][ T6351] team0: Port device wlan1 added [ 106.047777][ T6334] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.147299][ T6334] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.206259][ T6334] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.221822][ T6376] __nla_validate_parse: 60 callbacks suppressed [ 106.221844][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 106.268325][ T6334] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.332894][ T6376] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 106.376444][ T6383] netlink: 32 bytes leftover after parsing attributes in process `syz.4.108'. [ 106.393424][ T6376] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 106.398111][ T6381] lo speed is unknown, defaulting to 1000 [ 106.978693][ T6412] netlink: 32 bytes leftover after parsing attributes in process `syz.0.118'. [ 107.306918][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.121'. [ 107.471400][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'. [ 108.332466][ T6461] netlink: 'syz.4.132': attribute type 3 has an invalid length. [ 108.412207][ T6461] netlink: 'syz.4.132': attribute type 3 has an invalid length. [ 108.510431][ T6465] netlink: 17 bytes leftover after parsing attributes in process `syz.0.133'. [ 108.852770][ T6478] netlink: 'syz.4.138': attribute type 3 has an invalid length. [ 108.872994][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.138'. [ 109.302043][ T6495] netlink: 96 bytes leftover after parsing attributes in process `syz.3.145'. [ 109.471722][ T6507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.148'. [ 109.525869][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'. [ 109.638242][ T5838] IPVS: starting estimator thread 0... [ 109.656689][ T6522] tipc: Started in network mode [ 109.667904][ T6522] tipc: Node identity ac14142f, cluster identity 4711 [ 109.683477][ T6522] tipc: New replicast peer: 0.0.0.0 [ 109.696752][ T6522] tipc: Enabled bearer , priority 10 [ 109.703570][ T6518] tipc: Enabling of bearer rejected, already enabled [ 109.759493][ T6521] IPVS: using max 20 ests per chain, 48000 per kthread [ 110.067327][ C0] vcan0: j1939_tp_rxtimer: 0xffff888022791400: rx timeout, send abort [ 110.568015][ C0] vcan0: j1939_tp_rxtimer: 0xffff888022791800: rx timeout, send abort [ 110.576950][ C0] vcan0: j1939_tp_rxtimer: 0xffff888022791400: abort rx timeout. Force session deactivation [ 110.752003][ T6557] netlink: 'syz.0.165': attribute type 8 has an invalid length. [ 110.822119][ T5838] tipc: Node number set to 2886997039 [ 111.076355][ C0] vcan0: j1939_tp_rxtimer: 0xffff888022791800: abort rx timeout. Force session deactivation [ 111.217772][ T6574] hsr0: entered promiscuous mode [ 111.280341][ T6582] __nla_validate_parse: 6 callbacks suppressed [ 111.280363][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.170'. [ 111.369403][ T6582] bridge_slave_1 (unregistering): left allmulticast mode [ 111.385248][ T6582] bridge_slave_1 (unregistering): left promiscuous mode [ 111.395947][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.541747][ T6574] hsr0: left promiscuous mode [ 111.575906][ T6590] sctp: [Deprecated]: syz.0.175 (pid 6590) Use of int in max_burst socket option. [ 111.575906][ T6590] Use struct sctp_assoc_value instead [ 111.763625][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 111.773499][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 111.988581][ T6611] netlink: 256 bytes leftover after parsing attributes in process `syz.0.181'. [ 112.047286][ T6611] netlink: 256 bytes leftover after parsing attributes in process `syz.0.181'. [ 112.150525][ T6619] netlink: 'syz.1.182': attribute type 3 has an invalid length. [ 112.180064][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'. [ 112.194937][ T6622] netlink: 256 bytes leftover after parsing attributes in process `syz.3.179'. [ 112.222716][ T6622] unsupported nlmsg_type 40 [ 112.236833][ T6625] netlink: 'syz.0.183': attribute type 21 has an invalid length. [ 112.251947][ T6625] IPv6: NLM_F_CREATE should be specified when creating new route [ 112.282368][ T6625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.290047][ T6625] IPv6: NLM_F_CREATE should be set when creating new route [ 112.297364][ T6625] IPv6: NLM_F_CREATE should be set when creating new route [ 112.304666][ T6625] IPv6: NLM_F_CREATE should be set when creating new route [ 112.374620][ T6630] batman_adv: batadv0: Adding interface: dummy0 [ 112.390100][ T6630] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.443436][ T6636] netlink: 312 bytes leftover after parsing attributes in process `syz.1.186'. [ 112.456402][ T6638] netlink: 312 bytes leftover after parsing attributes in process `syz.1.186'. [ 112.471069][ T6630] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 112.584033][ T6642] netlink: 52 bytes leftover after parsing attributes in process `syz.0.187'. [ 112.610577][ T6646] netlink: set zone limit has 4 unknown bytes [ 112.662574][ T6647] bond0: option resend_igmp: invalid value (5160963) [ 112.679272][ T6647] bond0: option resend_igmp: allowed values 0 - 255 [ 113.041928][ T6671] !: renamed from bond_slave_0 [ 113.141237][ T6678] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 113.163067][ T6678] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 113.595043][ T6698] syzkaller0: entered promiscuous mode [ 113.610061][ T6698] syzkaller0: entered allmulticast mode [ 115.812858][ T6752] vlan2: entered promiscuous mode [ 115.817993][ T6752] bond0: entered promiscuous mode [ 115.823766][ T6752] bond_slave_0: entered promiscuous mode [ 115.833959][ T6752] bond_slave_1: entered promiscuous mode [ 116.448762][ T6793] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 116.527891][ T6799] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 116.554433][ T6799] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 116.561919][ T6799] IPv6: NLM_F_CREATE should be set when creating new route [ 116.569254][ T6799] IPv6: NLM_F_CREATE should be set when creating new route [ 116.576527][ T6799] IPv6: NLM_F_CREATE should be set when creating new route [ 116.761917][ T6806] __nla_validate_parse: 4 callbacks suppressed [ 116.761939][ T6806] netlink: 48 bytes leftover after parsing attributes in process `syz.0.222'. [ 116.796531][ T6806] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.805930][ T6806] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.910480][ T6810] lo speed is unknown, defaulting to 1000 [ 117.246263][ T6833] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.254068][ T6833] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.301769][ T6833] bridge0: entered allmulticast mode [ 117.456875][ T6833] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.464176][ T6833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.472606][ T6833] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.479859][ T6833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.538280][ T6833] bridge0: entered promiscuous mode [ 118.506867][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.255'. [ 118.524294][ T6892] bridge_slave_1: left allmulticast mode [ 118.532118][ T6892] bridge_slave_1: left promiscuous mode [ 118.544323][ T6892] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.555755][ T6892] bridge_slave_0: left allmulticast mode [ 118.570390][ T6892] bridge_slave_0: left promiscuous mode [ 118.585096][ T6892] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.585371][ T6896] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 118.631823][ T6895] netlink: 'syz.2.257': attribute type 2 has an invalid length. [ 118.826967][ T6895] : entered promiscuous mode [ 119.094563][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.260'. [ 119.118707][ T6912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.260'. [ 119.598852][ T6932] sctp: [Deprecated]: syz.1.268 (pid 6932) Use of int in max_burst socket option. [ 119.598852][ T6932] Use struct sctp_assoc_value instead [ 119.681276][ T6932] Bluetooth: MGMT ver 1.23 [ 119.953718][ T6956] lo speed is unknown, defaulting to 1000 [ 121.163467][ T6996] xt_cgroup: invalid path, errno=-2 [ 121.667563][ T7018] netlink: 16 bytes leftover after parsing attributes in process `syz.3.293'. [ 121.686046][ T7021] netlink: 44 bytes leftover after parsing attributes in process `syz.1.291'. [ 121.774872][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.291'. [ 121.994358][ T7034] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 122.100558][ T7039] pim6reg: entered allmulticast mode [ 122.138776][ T7039] pim6reg: left allmulticast mode [ 122.548256][ T7065] netlink: 44 bytes leftover after parsing attributes in process `syz.3.305'. [ 122.589942][ T7065] netlink: 48 bytes leftover after parsing attributes in process `syz.3.305'. [ 122.781612][ T7070] netlink: 'syz.1.308': attribute type 5 has an invalid length. [ 123.076430][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'. [ 123.113202][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.313'. [ 123.126854][ T7086] bpq0: entered allmulticast mode [ 123.134328][ T7088] netlink: 'syz.0.313': attribute type 3 has an invalid length. [ 123.404489][ T7098] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 123.667480][ T7113] netlink: 'syz.2.321': attribute type 11 has an invalid length. [ 123.675553][ T7113] netlink: 44 bytes leftover after parsing attributes in process `syz.2.321'. [ 123.682087][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 123.866093][ T7128] netlink: 32 bytes leftover after parsing attributes in process `syz.1.327'. [ 124.205968][ T7137] netlink: 'syz.4.328': attribute type 1 has an invalid length. [ 124.216891][ T7137] netlink: 224 bytes leftover after parsing attributes in process `syz.4.328'. [ 124.354361][ T7148] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.368024][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.333'. [ 124.399878][ T7151] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 124.545711][ T7148] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.743896][ T7148] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.937164][ T7148] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.070023][ T7148] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.090861][ T7148] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.109619][ T7148] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.131953][ T7176] NCSI netlink: No device for ifindex 0 [ 125.135110][ T7148] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.158942][ T7179] No such timeout policy "syz0" [ 125.165011][ T7150] syz.1.333 (7150) used greatest stack depth: 18512 bytes left [ 125.536325][ T7194] netlink: 'syz.3.352': attribute type 72 has an invalid length. [ 125.889358][ T7211] lo: entered promiscuous mode [ 125.910450][ T7211] lo: entered allmulticast mode [ 125.918622][ T7215] netlink: 'syz.2.358': attribute type 1 has an invalid length. [ 125.956262][ T7211] tunl0: entered promiscuous mode [ 126.030503][ T7211] tunl0: entered allmulticast mode [ 126.061104][ T7211] gre0: entered promiscuous mode [ 126.066149][ T7211] gre0: entered allmulticast mode [ 126.123969][ T7211] gretap0: entered promiscuous mode [ 126.151752][ T7211] gretap0: entered allmulticast mode [ 126.247670][ T7211] erspan0: entered promiscuous mode [ 126.253128][ T7211] erspan0: entered allmulticast mode [ 126.284681][ T7211] ip_vti0: entered promiscuous mode [ 126.299456][ T7211] ip_vti0: entered allmulticast mode [ 126.326443][ T7211] ip6_vti0: entered promiscuous mode [ 126.350259][ T7211] ip6_vti0: entered allmulticast mode [ 126.370312][ T7211] sit0: entered promiscuous mode [ 126.375340][ T7211] sit0: entered allmulticast mode [ 126.429936][ T7211] ip6tnl0: entered promiscuous mode [ 126.439614][ T7211] ip6tnl0: entered allmulticast mode [ 126.494238][ T7211] ip6gre0: entered promiscuous mode [ 126.509160][ T7211] ip6gre0: entered allmulticast mode [ 126.549618][ T7211] syz_tun: entered promiscuous mode [ 126.555196][ T7211] syz_tun: entered allmulticast mode [ 126.583260][ T7211] ip6gretap0: entered promiscuous mode [ 126.598751][ T7211] ip6gretap0: entered allmulticast mode [ 126.620330][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.628025][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.638534][ T7211] bridge0: entered promiscuous mode [ 126.644393][ T7211] bridge0: entered allmulticast mode [ 126.662989][ T7211] vcan0: entered promiscuous mode [ 126.671050][ T7211] vcan0: entered allmulticast mode [ 126.681513][ T7211] bond0: entered promiscuous mode [ 126.686760][ T7211] bond_slave_0: entered promiscuous mode [ 126.693286][ T7211] bond_slave_1: entered promiscuous mode [ 126.699806][ T7211] bond0: entered allmulticast mode [ 126.705136][ T7211] bond_slave_0: entered allmulticast mode [ 126.711070][ T7211] bond_slave_1: entered allmulticast mode [ 126.726255][ T7211] team0: entered promiscuous mode [ 126.732754][ T7211] team_slave_0: entered promiscuous mode [ 126.738782][ T7211] team_slave_1: entered promiscuous mode [ 126.745238][ T7211] team0: entered allmulticast mode [ 126.751375][ T7211] team_slave_0: entered allmulticast mode [ 126.757698][ T7211] team_slave_1: entered allmulticast mode [ 126.769722][ T7211] dummy0: entered promiscuous mode [ 126.774901][ T7211] dummy0: entered allmulticast mode [ 126.786446][ T7211] nlmon0: entered promiscuous mode [ 126.799801][ T7211] nlmon0: entered allmulticast mode [ 126.806964][ T7211] caif0: entered promiscuous mode [ 126.813074][ T7211] caif0: entered allmulticast mode [ 126.818982][ T7211] batadv0: entered promiscuous mode [ 126.824527][ T7211] batadv0: entered allmulticast mode [ 126.837137][ T7211] vxcan0: entered promiscuous mode [ 126.843669][ T7211] vxcan0: entered allmulticast mode [ 126.852116][ T7211] vxcan1: entered promiscuous mode [ 126.857526][ T7211] vxcan1: entered allmulticast mode [ 126.865405][ T7211] veth0: entered promiscuous mode [ 126.870986][ T7211] veth0: entered allmulticast mode [ 126.895926][ T7211] veth1: entered promiscuous mode [ 126.901684][ T7211] veth1: entered allmulticast mode [ 126.923895][ T7211] wg0: entered promiscuous mode [ 126.950380][ T7211] wg0: entered allmulticast mode [ 126.961368][ T7211] wg1: entered promiscuous mode [ 126.966300][ T7211] wg1: entered allmulticast mode [ 126.974998][ T7211] wg2: entered promiscuous mode [ 126.980053][ T7211] wg2: entered allmulticast mode [ 126.988220][ T7211] veth0_to_bridge: entered promiscuous mode [ 126.995011][ T7211] veth0_to_bridge: entered allmulticast mode [ 127.058838][ T7211] veth1_to_bridge: entered promiscuous mode [ 127.085351][ T7211] veth1_to_bridge: entered allmulticast mode [ 127.132162][ T7211] veth0_to_bond: entered promiscuous mode [ 127.155822][ T7211] veth0_to_bond: entered allmulticast mode [ 127.204048][ T7211] veth1_to_bond: entered promiscuous mode [ 127.217562][ T7211] veth1_to_bond: entered allmulticast mode [ 127.277925][ T7211] veth0_to_team: entered promiscuous mode [ 127.291388][ T7211] veth0_to_team: entered allmulticast mode [ 127.312784][ T7211] veth1_to_team: entered promiscuous mode [ 127.318599][ T7211] veth1_to_team: entered allmulticast mode [ 127.395524][ T7211] veth0_to_batadv: entered promiscuous mode [ 127.404454][ T7211] veth0_to_batadv: entered allmulticast mode [ 127.418960][ T7211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.428390][ T7211] batadv_slave_0: entered promiscuous mode [ 127.434572][ T7211] batadv_slave_0: entered allmulticast mode [ 127.448107][ T7211] veth1_to_batadv: entered promiscuous mode [ 127.454951][ T7211] veth1_to_batadv: entered allmulticast mode [ 127.477594][ T7211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.496360][ T7211] batadv_slave_1: entered promiscuous mode [ 127.511110][ T7211] batadv_slave_1: entered allmulticast mode [ 127.525737][ T7211] xfrm0: entered promiscuous mode [ 127.532402][ T7211] xfrm0: entered allmulticast mode [ 127.548790][ T7211] veth0_to_hsr: entered promiscuous mode [ 127.554701][ T7211] veth0_to_hsr: entered allmulticast mode [ 127.570946][ T7211] hsr_slave_0: entered allmulticast mode [ 127.588063][ T7211] veth1_to_hsr: entered promiscuous mode [ 127.596249][ T7211] veth1_to_hsr: entered allmulticast mode [ 127.606850][ T7211] hsr_slave_1: entered allmulticast mode [ 127.622804][ T7211] hsr0: entered promiscuous mode [ 127.627913][ T7211] hsr0: entered allmulticast mode [ 127.640951][ T7211] veth1_virt_wifi: entered promiscuous mode [ 127.648087][ T7211] veth1_virt_wifi: entered allmulticast mode [ 127.665059][ T7211] veth0_virt_wifi: entered promiscuous mode [ 127.671467][ T7211] veth0_virt_wifi: entered allmulticast mode [ 127.686017][ T7211] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 127.693548][ T7211] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 127.708306][ T7211] veth1_vlan: entered allmulticast mode [ 127.724906][ T7211] veth0_vlan: entered allmulticast mode [ 127.748407][ T7211] vlan0: entered promiscuous mode [ 127.768371][ T7211] vlan0: entered allmulticast mode [ 127.775165][ T7211] vlan1: entered promiscuous mode [ 127.780951][ T7211] vlan1: entered allmulticast mode [ 127.787041][ T7211] macvlan0: entered promiscuous mode [ 127.794944][ T7211] macvlan0: entered allmulticast mode [ 127.812493][ T7211] macvlan1: entered promiscuous mode [ 127.817855][ T7211] macvlan1: entered allmulticast mode [ 127.835252][ T7211] ipvlan0: entered promiscuous mode [ 127.843963][ T7211] ipvlan0: entered allmulticast mode [ 127.854201][ T7211] ipvlan1: entered promiscuous mode [ 127.859972][ T7211] ipvlan1: entered allmulticast mode [ 127.867357][ T7211] veth1_macvtap: entered allmulticast mode [ 127.888893][ T7211] veth0_macvtap: entered allmulticast mode [ 127.901360][ T7211] macvtap0: entered promiscuous mode [ 127.906874][ T7211] macvtap0: entered allmulticast mode [ 127.917935][ T7211] macsec0: entered promiscuous mode [ 127.924043][ T7211] macsec0: entered allmulticast mode [ 127.933211][ T7211] geneve0: entered promiscuous mode [ 127.938498][ T7211] geneve0: entered allmulticast mode [ 127.963360][ T7211] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.977176][ T7211] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.986510][ T7211] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.999135][ T7211] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.013759][ T7211] geneve1: entered promiscuous mode [ 128.020428][ T7211] geneve1: entered allmulticast mode [ 128.040885][ T7211] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 128.048413][ T7211] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 128.071558][ T7211] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 128.079376][ T7211] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 128.112413][ T7211] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 128.120592][ T7211] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 128.137296][ T7211] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 128.145383][ T7211] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 128.183679][ T7211] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 128.191436][ T7211] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 128.216154][ T7211] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 128.224468][ T7211] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 128.235608][ T7211] vlan0004: entered promiscuous mode [ 128.241573][ T7211] vlan0004: entered allmulticast mode [ 128.247419][ T7211] : entered promiscuous mode [ 128.258107][ T7211] : entered allmulticast mode [ 128.263668][ T7211] sit1: entered promiscuous mode [ 128.268712][ T7211] sit1: entered allmulticast mode [ 128.274160][ T7211] ip6tnl1: entered promiscuous mode [ 128.280101][ T7211] ip6tnl1: entered allmulticast mode [ 128.286139][ T7215] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 128.345774][ T7228] veth1_macvtap: left promiscuous mode [ 128.381215][ T7228] macsec0: entered allmulticast mode [ 128.408554][ T7249] __nla_validate_parse: 5 callbacks suppressed [ 128.408575][ T7249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.363'. [ 128.436277][ T7251] netlink: 'syz.1.364': attribute type 72 has an invalid length. [ 128.454614][ T7251] netlink: 68 bytes leftover after parsing attributes in process `syz.1.364'. [ 128.686514][ T7259] lo speed is unknown, defaulting to 1000 [ 128.712198][ T7265] netlink: 'syz.0.366': attribute type 1 has an invalid length. [ 128.775206][ T7265] bond1: entered promiscuous mode [ 128.790493][ T7265] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.834671][ T7265] netlink: 3 bytes leftover after parsing attributes in process `syz.0.366'. [ 128.856452][ T7270] netlink: 'syz.3.370': attribute type 1 has an invalid length. [ 128.868277][ T7270] netlink: 'syz.3.370': attribute type 2 has an invalid length. [ 128.971096][ T7265] batadv1: entered allmulticast mode [ 128.979841][ T7265] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 128.988807][ T7265] bond1: (slave batadv1): making interface the new active one [ 129.013392][ T7265] batadv1: entered promiscuous mode [ 129.030024][ T7265] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 129.420187][ T7304] netlink: 'syz.3.380': attribute type 72 has an invalid length. [ 129.428639][ T7304] netlink: 68 bytes leftover after parsing attributes in process `syz.3.380'. [ 129.586854][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.383'. [ 129.610787][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.383'. [ 129.624052][ T7315] FAULT_INJECTION: forcing a failure. [ 129.624052][ T7315] name failslab, interval 1, probability 0, space 0, times 1 [ 129.639606][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.383'. [ 129.643588][ T7315] CPU: 1 UID: 0 PID: 7315 Comm: syz.2.385 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 129.643621][ T7315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 129.643640][ T7315] Call Trace: [ 129.643657][ T7315] [ 129.643672][ T7315] dump_stack_lvl+0x241/0x360 [ 129.643736][ T7315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.643761][ T7315] ? __pfx__printk+0x10/0x10 [ 129.643786][ T7315] ? fs_reclaim_acquire+0x93/0x130 [ 129.643812][ T7315] ? __pfx___might_resched+0x10/0x10 [ 129.643848][ T7315] should_fail_ex+0x40a/0x550 [ 129.643891][ T7315] should_failslab+0xac/0x100 [ 129.643925][ T7315] __kmalloc_noprof+0xdd/0x4c0 [ 129.643954][ T7315] ? kstrtouint_from_user+0x128/0x190 [ 129.643978][ T7315] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 129.644011][ T7315] tomoyo_realpath_from_path+0xcf/0x5e0 [ 129.644048][ T7315] tomoyo_path_number_perm+0x239/0x770 [ 129.644079][ T7315] ? __lock_acquire+0x1397/0x2100 [ 129.644116][ T7315] ? tomoyo_path_number_perm+0x209/0x770 [ 129.644149][ T7315] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 129.644225][ T7315] ? __fget_files+0x2a/0x410 [ 129.644261][ T7315] ? __fget_files+0x2a/0x410 [ 129.644298][ T7315] security_file_ioctl+0xc6/0x2a0 [ 129.644331][ T7315] __se_sys_ioctl+0x46/0x170 [ 129.644358][ T7315] do_syscall_64+0xf3/0x230 [ 129.644400][ T7315] ? clear_bhb_loop+0x35/0x90 [ 129.644436][ T7315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.644473][ T7315] RIP: 0033:0x7f078198d169 [ 129.644540][ T7315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.644557][ T7315] RSP: 002b:00007f0782889038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.644580][ T7315] RAX: ffffffffffffffda RBX: 00007f0781ba5fa0 RCX: 00007f078198d169 [ 129.644595][ T7315] RDX: 0000200000000840 RSI: 000000000000890c RDI: 0000000000000003 [ 129.644609][ T7315] RBP: 00007f0782889090 R08: 0000000000000000 R09: 0000000000000000 [ 129.644622][ T7315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.644634][ T7315] R13: 0000000000000000 R14: 00007f0781ba5fa0 R15: 00007fff5cf59b08 [ 129.644666][ T7315] [ 129.645600][ T7315] ERROR: Out of memory at tomoyo_realpath_from_path. [ 129.924740][ T7324] netlink: 30 bytes leftover after parsing attributes in process `syz.3.387'. [ 130.135798][ T7319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.156897][ T7319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.240926][ T7319] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.251121][ T7319] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.259652][ T7319] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.268145][ T7319] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.471457][ T7336] netlink: 68 bytes leftover after parsing attributes in process `syz.2.393'. [ 130.645605][ T7351] batadv_slave_1: entered promiscuous mode [ 130.651600][ T7351] batadv_slave_1: entered allmulticast mode [ 130.658588][ T7351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.678456][ T7351] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 130.705135][ T7352] netlink: 'syz.0.396': attribute type 1 has an invalid length. [ 130.717105][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.396'. [ 130.717170][ T7356] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 130.767049][ T7352] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.788977][ T5889] lo speed is unknown, defaulting to 1000 [ 130.806250][ T7354] lo speed is unknown, defaulting to 1000 [ 131.364131][ T7386] macsec0: left promiscuous mode [ 131.398007][ T7386] macsec0: left allmulticast mode [ 131.696554][ T7402] netlink: 'syz.3.411': attribute type 1 has an invalid length. [ 131.704686][ T7402] netlink: 'syz.3.411': attribute type 2 has an invalid length. [ 131.830108][ T7408] netlink: 'syz.1.413': attribute type 21 has an invalid length. [ 132.038212][ T7414] FAULT_INJECTION: forcing a failure. [ 132.038212][ T7414] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 132.054219][ T7414] CPU: 1 UID: 0 PID: 7414 Comm: syz.1.416 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 132.054260][ T7414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 132.054272][ T7414] Call Trace: [ 132.054278][ T7414] [ 132.054287][ T7414] dump_stack_lvl+0x241/0x360 [ 132.054318][ T7414] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.054339][ T7414] ? __pfx__printk+0x10/0x10 [ 132.054360][ T7414] ? __pfx_lock_release+0x10/0x10 [ 132.054398][ T7414] should_fail_ex+0x40a/0x550 [ 132.054432][ T7414] _copy_from_user+0x2d/0xb0 [ 132.054459][ T7414] inet_ioctl+0x2d9/0x4f0 [ 132.054506][ T7414] ? __pfx_inet_ioctl+0x10/0x10 [ 132.054549][ T7414] ? tomoyo_path_number_perm+0x5dd/0x770 [ 132.054591][ T7414] ? __lock_acquire+0x1397/0x2100 [ 132.054633][ T7414] sock_do_ioctl+0x158/0x460 [ 132.054672][ T7414] ? __pfx_sock_do_ioctl+0x10/0x10 [ 132.054721][ T7414] sock_ioctl+0x626/0x8e0 [ 132.054753][ T7414] ? __pfx_sock_ioctl+0x10/0x10 [ 132.054782][ T7414] ? __fget_files+0x2a/0x410 [ 132.054815][ T7414] ? __fget_files+0x2a/0x410 [ 132.054849][ T7414] ? __pfx_sock_ioctl+0x10/0x10 [ 132.054878][ T7414] __se_sys_ioctl+0xf5/0x170 [ 132.054903][ T7414] do_syscall_64+0xf3/0x230 [ 132.054934][ T7414] ? clear_bhb_loop+0x35/0x90 [ 132.054965][ T7414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.054993][ T7414] RIP: 0033:0x7fe67218d169 [ 132.055010][ T7414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.055026][ T7414] RSP: 002b:00007fe673036038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.055047][ T7414] RAX: ffffffffffffffda RBX: 00007fe6723a5fa0 RCX: 00007fe67218d169 [ 132.055062][ T7414] RDX: 0000200000000840 RSI: 000000000000890c RDI: 0000000000000003 [ 132.055074][ T7414] RBP: 00007fe673036090 R08: 0000000000000000 R09: 0000000000000000 [ 132.055086][ T7414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.055097][ T7414] R13: 0000000000000000 R14: 00007fe6723a5fa0 R15: 00007ffc8511bf08 [ 132.055127][ T7414] [ 132.503839][ T7426] netlink: 'syz.0.422': attribute type 10 has an invalid length. [ 132.532489][ T7426] syz_tun: entered promiscuous mode [ 132.587592][ T7426] syz_tun: entered allmulticast mode [ 132.610400][ T7426] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 132.772239][ T7426] bond2: entered promiscuous mode [ 132.787315][ T7426] 8021q: adding VLAN 0 to HW filter on device bond2 [ 133.093211][ T7453] netlink: 'syz.4.426': attribute type 11 has an invalid length. [ 133.181181][ T7426] bond2 (unregistering): Released all slaves [ 133.559396][ T7464] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 133.945881][ T7489] netlink: 'syz.3.438': attribute type 1 has an invalid length. [ 133.955132][ T7489] __nla_validate_parse: 15 callbacks suppressed [ 133.955152][ T7489] netlink: 16 bytes leftover after parsing attributes in process `syz.3.438'. [ 134.197489][ T7504] netlink: 72 bytes leftover after parsing attributes in process `syz.3.444'. [ 134.405358][ T7523] netlink: 'syz.4.448': attribute type 1 has an invalid length. [ 134.452976][ T7523] bond1: entered promiscuous mode [ 134.477264][ T7523] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.511723][ T7524] ipip0: entered promiscuous mode [ 134.516838][ T7524] ipip0: entered allmulticast mode [ 134.537084][ T7524] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.544727][ T7524] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 134.554941][ T7524] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 134.565745][ T7531] netlink: 'syz.3.449': attribute type 21 has an invalid length. [ 134.572809][ T7524] bond1: (slave ipip0): making interface the new active one [ 134.584664][ T7524] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 135.135414][ T7558] netlink: 'syz.0.459': attribute type 10 has an invalid length. [ 135.230940][ T7558] team0: Cannot enslave team device to itself [ 135.254394][ T7559] vlan4: entered promiscuous mode [ 135.279143][ T7559] vlan0: entered promiscuous mode [ 135.284772][ T7559] vlan4: entered allmulticast mode [ 135.300768][ T7559] vlan0: entered allmulticast mode [ 135.305970][ T7559] veth0_vlan: entered allmulticast mode [ 135.362302][ T7559] team0: Port device vlan4 added [ 135.666298][ T7583] netlink: 16 bytes leftover after parsing attributes in process `syz.3.465'. [ 135.951437][ T7591] netlink: 212 bytes leftover after parsing attributes in process `syz.3.468'. [ 136.162449][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.469'. [ 136.245809][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.471'. [ 136.410642][ T7622] netlink: 44 bytes leftover after parsing attributes in process `syz.2.476'. [ 136.654497][ T7626] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.662162][ T7626] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.778810][ T7626] ================================================================== [ 136.786943][ T7626] BUG: KASAN: slab-use-after-free in udp_tunnel_update_gro_lookup+0x23c/0x2c0 [ 136.795813][ T7626] Read of size 8 at addr ffff88807a87bd68 by task syz.2.476/7626 [ 136.803536][ T7626] [ 136.805868][ T7626] CPU: 0 UID: 0 PID: 7626 Comm: syz.2.476 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 136.805889][ T7626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 136.805900][ T7626] Call Trace: [ 136.805907][ T7626] [ 136.805915][ T7626] dump_stack_lvl+0x241/0x360 [ 136.805949][ T7626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.805967][ T7626] ? __pfx__printk+0x10/0x10 [ 136.805984][ T7626] ? _printk+0xd5/0x120 [ 136.805999][ T7626] ? __virt_addr_valid+0x183/0x530 [ 136.806016][ T7626] ? __virt_addr_valid+0x183/0x530 [ 136.806032][ T7626] print_report+0x16e/0x5b0 [ 136.806055][ T7626] ? __virt_addr_valid+0x183/0x530 [ 136.806070][ T7626] ? __virt_addr_valid+0x183/0x530 [ 136.806084][ T7626] ? __virt_addr_valid+0x45f/0x530 [ 136.806099][ T7626] ? __phys_addr+0xba/0x170 [ 136.806114][ T7626] ? udp_tunnel_update_gro_lookup+0x23c/0x2c0 [ 136.806134][ T7626] kasan_report+0x143/0x180 [ 136.806156][ T7626] ? udp_tunnel_update_gro_lookup+0x23c/0x2c0 [ 136.806183][ T7626] udp_tunnel_update_gro_lookup+0x23c/0x2c0 [ 136.806202][ T7626] ? udp_destroy_sock+0x2fa/0x340 [ 136.806228][ T7626] ? __pfx_udp_destroy_sock+0x10/0x10 [ 136.806252][ T7626] sk_common_release+0x71/0x2e0 [ 136.806270][ T7626] inet_release+0x17d/0x200 [ 136.806291][ T7626] sock_release+0x82/0x150 [ 136.806316][ T7626] wg_socket_reinit+0x215/0x380 [ 136.806345][ T7626] wg_stop+0x59f/0x600 [ 136.806365][ T7626] ? __pfx_wg_stop+0x10/0x10 [ 136.806381][ T7626] __dev_close_many+0x3a6/0x700 [ 136.806410][ T7626] ? __pfx___dev_close_many+0x10/0x10 [ 136.806438][ T7626] ? dev_set_rx_mode+0x23c/0x2e0 [ 136.806458][ T7626] __dev_change_flags+0x30e/0x6f0 [ 136.806479][ T7626] ? __pfx___dev_change_flags+0x10/0x10 [ 136.806497][ T7626] ? validate_linkmsg+0x828/0xa40 [ 136.806520][ T7626] ? netdev_state_change+0xa8/0x1a0 [ 136.806550][ T7626] ? __pfx_netdev_state_change+0x10/0x10 [ 136.806576][ T7626] ? __pfx_validate_linkmsg+0x10/0x10 [ 136.806599][ T7626] netif_change_flags+0x8b/0x1a0 [ 136.806620][ T7626] do_setlink+0xd94/0x41d0 [ 136.806648][ T7626] ? __pfx_do_setlink+0x10/0x10 [ 136.806670][ T7626] ? __pfx___might_resched+0x10/0x10 [ 136.806694][ T7626] ? __pfx___mutex_trylock_common+0x10/0x10 [ 136.806716][ T7626] ? rcu_is_watching+0x15/0xb0 [ 136.806735][ T7626] ? trace_contention_end+0x3c/0x120 [ 136.806754][ T7626] ? __mutex_lock+0x397/0x1010 [ 136.806780][ T7626] ? __pfx_aa_get_newest_label+0x10/0x10 [ 136.806810][ T7626] ? rtnl_newlink+0xc4c/0x1d90 [ 136.806825][ T7626] ? __pfx___mutex_lock+0x10/0x10 [ 136.806853][ T7626] ? ns_capable+0x8a/0xf0 [ 136.806873][ T7626] ? rtnl_link_get_net_capable+0x168/0x340 [ 136.806893][ T7626] rtnl_newlink+0x141c/0x1d90 [ 136.806908][ T7626] ? stack_depot_save_flags+0x37/0x940 [ 136.806947][ T7626] ? __pfx_rtnl_newlink+0x10/0x10 [ 136.806961][ T7626] ? __netlink_deliver_tap+0x561/0x7f0 [ 136.806990][ T7626] ? __pfx_validate_chain+0x10/0x10 [ 136.807007][ T7626] ? __sock_sendmsg+0x221/0x270 [ 136.807031][ T7626] ? ____sys_sendmsg+0x53a/0x860 [ 136.807050][ T7626] ? __sys_sendmsg+0x269/0x350 [ 136.807068][ T7626] ? do_syscall_64+0xf3/0x230 [ 136.807092][ T7626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.807123][ T7626] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 136.807150][ T7626] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 136.807184][ T7626] ? mark_lock+0x9a/0x360 [ 136.807201][ T7626] ? __lock_acquire+0x1397/0x2100 [ 136.807239][ T7626] ? __pfx_lock_release+0x10/0x10 [ 136.807270][ T7626] ? __pfx_rtnl_newlink+0x10/0x10 [ 136.807286][ T7626] rtnetlink_rcv_msg+0x791/0xcf0 [ 136.807311][ T7626] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 136.807339][ T7626] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 136.807369][ T7626] ? ref_tracker_free+0x643/0x7e0 [ 136.807388][ T7626] netlink_rcv_skb+0x206/0x480 [ 136.807414][ T7626] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 136.807441][ T7626] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 136.807476][ T7626] ? netlink_deliver_tap+0x2e/0x1b0 [ 136.807503][ T7626] netlink_unicast+0x7f6/0x990 [ 136.807530][ T7626] ? __pfx_netlink_unicast+0x10/0x10 [ 136.807552][ T7626] ? __virt_addr_valid+0x45f/0x530 [ 136.807568][ T7626] ? __phys_addr_symbol+0x2f/0x70 [ 136.807583][ T7626] ? __check_object_size+0x47a/0x730 [ 136.807608][ T7626] netlink_sendmsg+0x8de/0xcb0 [ 136.807636][ T7626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.807654][ T7626] ? aa_sock_msg_perm+0x91/0x160 [ 136.807681][ T7626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.807696][ T7626] __sock_sendmsg+0x221/0x270 [ 136.807722][ T7626] ____sys_sendmsg+0x53a/0x860 [ 136.807746][ T7626] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.807765][ T7626] ? __fget_files+0x2a/0x410 [ 136.807791][ T7626] ? __fget_files+0x2a/0x410 [ 136.807818][ T7626] __sys_sendmsg+0x269/0x350 [ 136.807838][ T7626] ? __pfx_futex_wake+0x10/0x10 [ 136.807867][ T7626] ? __pfx___sys_sendmsg+0x10/0x10 [ 136.807905][ T7626] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 136.807933][ T7626] ? do_syscall_64+0x100/0x230 [ 136.807958][ T7626] ? do_syscall_64+0xb6/0x230 [ 136.807984][ T7626] do_syscall_64+0xf3/0x230 [ 136.808008][ T7626] ? clear_bhb_loop+0x35/0x90 [ 136.808033][ T7626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.808056][ T7626] RIP: 0033:0x7f078198d169 [ 136.808071][ T7626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.808089][ T7626] RSP: 002b:00007f0782868038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.808107][ T7626] RAX: ffffffffffffffda RBX: 00007f0781ba6080 RCX: 00007f078198d169 [ 136.808119][ T7626] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 136.808130][ T7626] RBP: 00007f0781a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 136.808140][ T7626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.808150][ T7626] R13: 0000000000000000 R14: 00007f0781ba6080 R15: 00007fff5cf59b08 [ 136.808168][ T7626] [ 136.808179][ T7626] [ 137.376579][ T7626] Allocated by task 7423: [ 137.380923][ T7626] kasan_save_track+0x3f/0x80 [ 137.385963][ T7626] __kasan_slab_alloc+0x66/0x80 [ 137.390842][ T7626] kmem_cache_alloc_noprof+0x1d9/0x380 [ 137.396336][ T7626] sk_prot_alloc+0x58/0x210 [ 137.400893][ T7626] sk_alloc+0x3e/0x370 [ 137.404991][ T7626] inet_create+0x648/0xea0 [ 137.409509][ T7626] __sock_create+0x4c0/0xa30 [ 137.414117][ T7626] __sys_socket+0x150/0x3c0 [ 137.418623][ T7626] __x64_sys_socket+0x7a/0x90 [ 137.423322][ T7626] do_syscall_64+0xf3/0x230 [ 137.427845][ T7626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.433750][ T7626] [ 137.436084][ T7626] Freed by task 5889: [ 137.440064][ T7626] kasan_save_track+0x3f/0x80 [ 137.444754][ T7626] kasan_save_free_info+0x40/0x50 [ 137.449791][ T7626] __kasan_slab_free+0x59/0x70 [ 137.454562][ T7626] kmem_cache_free+0x195/0x410 [ 137.459351][ T7626] __sk_destruct+0x4fd/0x690 [ 137.463952][ T7626] sk_psock_destroy+0x94e/0x9e0 [ 137.468805][ T7626] process_scheduled_works+0xabe/0x18e0 [ 137.474364][ T7626] worker_thread+0x870/0xd30 [ 137.478969][ T7626] kthread+0x7a9/0x920 [ 137.483049][ T7626] ret_from_fork+0x4b/0x80 [ 137.487479][ T7626] ret_from_fork_asm+0x1a/0x30 [ 137.492248][ T7626] [ 137.494576][ T7626] The buggy address belongs to the object at ffff88807a87b640 [ 137.494576][ T7626] which belongs to the cache UDP of size 1856 [ 137.508026][ T7626] The buggy address is located 1832 bytes inside of [ 137.508026][ T7626] freed 1856-byte region [ffff88807a87b640, ffff88807a87bd80) [ 137.522007][ T7626] [ 137.524332][ T7626] The buggy address belongs to the physical page: [ 137.530746][ T7626] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807a878f80 pfn:0x7a878 [ 137.540819][ T7626] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 137.549324][ T7626] memcg:ffff88802945bb01 [ 137.553561][ T7626] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 137.561106][ T7626] page_type: f5(slab) [ 137.565093][ T7626] raw: 00fff00000000040 ffff88801b1ed000 dead000000000122 0000000000000000 [ 137.573682][ T7626] raw: ffff88807a878f80 000000008010000c 00000000f5000000 ffff88802945bb01 [ 137.582271][ T7626] head: 00fff00000000040 ffff88801b1ed000 dead000000000122 0000000000000000 [ 137.590957][ T7626] head: ffff88807a878f80 000000008010000c 00000000f5000000 ffff88802945bb01 [ 137.599633][ T7626] head: 00fff00000000003 ffffea0001ea1e01 ffffffffffffffff 0000000000000000 [ 137.608304][ T7626] head: 0000000700000008 0000000000000000 00000000ffffffff 0000000000000000 [ 137.616968][ T7626] page dumped because: kasan: bad access detected [ 137.623386][ T7626] page_owner tracks the page as allocated [ 137.629102][ T7626] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5984, tgid 5978 (syz.4.16), ts 96910175926, free_ts 96796626878 [ 137.650132][ T7626] post_alloc_hook+0x1f4/0x240 [ 137.654920][ T7626] get_page_from_freelist+0x365c/0x37a0 [ 137.660476][ T7626] __alloc_frozen_pages_noprof+0x292/0x710 [ 137.666300][ T7626] alloc_pages_mpol+0x311/0x660 [ 137.671160][ T7626] allocate_slab+0x8f/0x3a0 [ 137.675665][ T7626] ___slab_alloc+0xc27/0x14a0 [ 137.680349][ T7626] __slab_alloc+0x58/0xa0 [ 137.684707][ T7626] kmem_cache_alloc_noprof+0x268/0x380 [ 137.690186][ T7626] sk_prot_alloc+0x58/0x210 [ 137.694698][ T7626] sk_alloc+0x3e/0x370 [ 137.698766][ T7626] inet_create+0x648/0xea0 [ 137.703202][ T7626] __sock_create+0x4c0/0xa30 [ 137.707801][ T7626] __sys_socket+0x150/0x3c0 [ 137.712306][ T7626] __x64_sys_socket+0x7a/0x90 [ 137.716981][ T7626] do_syscall_64+0xf3/0x230 [ 137.721495][ T7626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.727398][ T7626] page last free pid 5836 tgid 5836 stack trace: [ 137.733720][ T7626] free_frozen_pages+0xe0d/0x10e0 [ 137.738747][ T7626] __slab_free+0x2c2/0x380 [ 137.743167][ T7626] qlist_free_all+0x9a/0x140 [ 137.747763][ T7626] kasan_quarantine_reduce+0x14f/0x170 [ 137.753223][ T7626] __kasan_slab_alloc+0x23/0x80 [ 137.758076][ T7626] kmem_cache_alloc_noprof+0x1d9/0x380 [ 137.763540][ T7626] getname_flags+0xb7/0x540 [ 137.768053][ T7626] user_path_at+0x24/0x60 [ 137.772382][ T7626] __se_sys_inotify_add_watch+0x19c/0xf20 [ 137.778118][ T7626] do_syscall_64+0xf3/0x230 [ 137.782632][ T7626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.788536][ T7626] [ 137.790878][ T7626] Memory state around the buggy address: [ 137.796524][ T7626] ffff88807a87bc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.804595][ T7626] ffff88807a87bc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.812681][ T7626] >ffff88807a87bd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.820752][ T7626] ^ [ 137.828212][ T7626] ffff88807a87bd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 137.836277][ T7626] ffff88807a87be00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.844343][ T7626] ================================================================== [ 137.855250][ T7626] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 137.862489][ T7626] CPU: 0 UID: 0 PID: 7626 Comm: syz.2.476 Not tainted 6.14.0-rc7-syzkaller-01465-g98b2c048e2e2 #0 [ 137.873193][ T7626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 137.883523][ T7626] Call Trace: [ 137.886843][ T7626] [ 137.889779][ T7626] dump_stack_lvl+0x241/0x360 [ 137.894478][ T7626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.899686][ T7626] ? __pfx__printk+0x10/0x10 [ 137.904282][ T7626] ? vscnprintf+0x5d/0x90 [ 137.908617][ T7626] panic+0x349/0x880 [ 137.912521][ T7626] ? check_panic_on_warn+0x21/0xb0 [ 137.917649][ T7626] ? __pfx_panic+0x10/0x10 [ 137.922068][ T7626] ? mark_lock+0x9a/0x360 [ 137.926402][ T7626] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 137.932304][ T7626] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 137.938207][ T7626] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 137.944539][ T7626] ? print_report+0x519/0x5b0 [ 137.949230][ T7626] check_panic_on_warn+0x86/0xb0 [ 137.954177][ T7626] ? udp_tunnel_update_gro_lookup+0x23c/0x2c0 [ 137.960254][ T7626] end_report+0x77/0x160 [ 137.964508][ T7626] kasan_report+0x154/0x180 [ 137.969019][ T7626] ? udp_tunnel_update_gro_lookup+0x23c/0x2c0 [ 137.975107][ T7626] udp_tunnel_update_gro_lookup+0x23c/0x2c0 [ 137.981011][ T7626] ? udp_destroy_sock+0x2fa/0x340 [ 137.986066][ T7626] ? __pfx_udp_destroy_sock+0x10/0x10 [ 137.991459][ T7626] sk_common_release+0x71/0x2e0 [ 137.996318][ T7626] inet_release+0x17d/0x200 [ 138.000838][ T7626] sock_release+0x82/0x150 [ 138.005281][ T7626] wg_socket_reinit+0x215/0x380 [ 138.010161][ T7626] wg_stop+0x59f/0x600 [ 138.014235][ T7626] ? __pfx_wg_stop+0x10/0x10 [ 138.018825][ T7626] __dev_close_many+0x3a6/0x700 [ 138.023691][ T7626] ? __pfx___dev_close_many+0x10/0x10 [ 138.029078][ T7626] ? dev_set_rx_mode+0x23c/0x2e0 [ 138.034034][ T7626] __dev_change_flags+0x30e/0x6f0 [ 138.039108][ T7626] ? __pfx___dev_change_flags+0x10/0x10 [ 138.044656][ T7626] ? validate_linkmsg+0x828/0xa40 [ 138.049690][ T7626] ? netdev_state_change+0xa8/0x1a0 [ 138.054900][ T7626] ? __pfx_netdev_state_change+0x10/0x10 [ 138.060548][ T7626] ? __pfx_validate_linkmsg+0x10/0x10 [ 138.065944][ T7626] netif_change_flags+0x8b/0x1a0 [ 138.070902][ T7626] do_setlink+0xd94/0x41d0 [ 138.075336][ T7626] ? __pfx_do_setlink+0x10/0x10 [ 138.080195][ T7626] ? __pfx___might_resched+0x10/0x10 [ 138.085493][ T7626] ? __pfx___mutex_trylock_common+0x10/0x10 [ 138.091404][ T7626] ? rcu_is_watching+0x15/0xb0 [ 138.096181][ T7626] ? trace_contention_end+0x3c/0x120 [ 138.101476][ T7626] ? __mutex_lock+0x397/0x1010 [ 138.106254][ T7626] ? __pfx_aa_get_newest_label+0x10/0x10 [ 138.112017][ T7626] ? rtnl_newlink+0xc4c/0x1d90 [ 138.116814][ T7626] ? __pfx___mutex_lock+0x10/0x10 [ 138.121869][ T7626] ? ns_capable+0x8a/0xf0 [ 138.126222][ T7626] ? rtnl_link_get_net_capable+0x168/0x340 [ 138.132046][ T7626] rtnl_newlink+0x141c/0x1d90 [ 138.136731][ T7626] ? stack_depot_save_flags+0x37/0x940 [ 138.142221][ T7626] ? __pfx_rtnl_newlink+0x10/0x10 [ 138.147252][ T7626] ? __netlink_deliver_tap+0x561/0x7f0 [ 138.152725][ T7626] ? __pfx_validate_chain+0x10/0x10 [ 138.157936][ T7626] ? __sock_sendmsg+0x221/0x270 [ 138.162796][ T7626] ? ____sys_sendmsg+0x53a/0x860 [ 138.167741][ T7626] ? __sys_sendmsg+0x269/0x350 [ 138.172519][ T7626] ? do_syscall_64+0xf3/0x230 [ 138.177240][ T7626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.183363][ T7626] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 138.189370][ T7626] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 138.195723][ T7626] ? mark_lock+0x9a/0x360 [ 138.200077][ T7626] ? __lock_acquire+0x1397/0x2100 [ 138.205137][ T7626] ? __pfx_lock_release+0x10/0x10 [ 138.210190][ T7626] ? __pfx_rtnl_newlink+0x10/0x10 [ 138.215223][ T7626] rtnetlink_rcv_msg+0x791/0xcf0 [ 138.220180][ T7626] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 138.225311][ T7626] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 138.230787][ T7626] ? ref_tracker_free+0x643/0x7e0 [ 138.235848][ T7626] netlink_rcv_skb+0x206/0x480 [ 138.240635][ T7626] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 138.246110][ T7626] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 138.251417][ T7626] ? netlink_deliver_tap+0x2e/0x1b0 [ 138.256629][ T7626] netlink_unicast+0x7f6/0x990 [ 138.261409][ T7626] ? __pfx_netlink_unicast+0x10/0x10 [ 138.266703][ T7626] ? __virt_addr_valid+0x45f/0x530 [ 138.271909][ T7626] ? __phys_addr_symbol+0x2f/0x70 [ 138.276942][ T7626] ? __check_object_size+0x47a/0x730 [ 138.282242][ T7626] netlink_sendmsg+0x8de/0xcb0 [ 138.287024][ T7626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.292316][ T7626] ? aa_sock_msg_perm+0x91/0x160 [ 138.297275][ T7626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.302568][ T7626] __sock_sendmsg+0x221/0x270 [ 138.307355][ T7626] ____sys_sendmsg+0x53a/0x860 [ 138.312134][ T7626] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.317427][ T7626] ? __fget_files+0x2a/0x410 [ 138.322036][ T7626] ? __fget_files+0x2a/0x410 [ 138.326661][ T7626] __sys_sendmsg+0x269/0x350 [ 138.331263][ T7626] ? __pfx_futex_wake+0x10/0x10 [ 138.336133][ T7626] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.341273][ T7626] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 138.347617][ T7626] ? do_syscall_64+0x100/0x230 [ 138.352397][ T7626] ? do_syscall_64+0xb6/0x230 [ 138.357094][ T7626] do_syscall_64+0xf3/0x230 [ 138.361613][ T7626] ? clear_bhb_loop+0x35/0x90 [ 138.366307][ T7626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.372216][ T7626] RIP: 0033:0x7f078198d169 [ 138.376639][ T7626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.396346][ T7626] RSP: 002b:00007f0782868038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.404778][ T7626] RAX: ffffffffffffffda RBX: 00007f0781ba6080 RCX: 00007f078198d169 [ 138.412767][ T7626] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 138.420750][ T7626] RBP: 00007f0781a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 138.428730][ T7626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.436709][ T7626] R13: 0000000000000000 R14: 00007f0781ba6080 R15: 00007fff5cf59b08 [ 138.444700][ T7626] [ 138.447971][ T7626] Kernel Offset: disabled [ 138.452299][ T7626] Rebooting in 86400 seconds..