last executing test programs: 8m55.022087596s ago: executing program 32 (id=580): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x48}}, 0x0) 8m54.792134421s ago: executing program 33 (id=583): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000a00), 0x0, 0x2101, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 8m54.782069474s ago: executing program 34 (id=579): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="d4000000200000006910830000000000bfffffff000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9}, 0x94) 7m56.256662504s ago: executing program 6 (id=1033): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f00000000c0)=0x6, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) 7m56.003646002s ago: executing program 0 (id=1040): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x3e, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}]}, 0x48}}, 0x4000010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000300000000000000403fd03f180100002020782500000000002020207b1af8ff000000006d0afeff000000000701b092f8ffffffb70200000800fffeb70300000f20ffd0a500feff0600000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x101a, &(0x7f0000000840)=""/4122, 0x41100, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) 7m55.880370444s ago: executing program 0 (id=1041): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000006c0)=0x81, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000280)=""/176, &(0x7f0000000480)=0xb0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, 0x0, 0x0, 0x2}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r5, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="74010000", @ANYRES16=r6, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x9}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab04000180"], 0x20}], 0x1}, 0x4000041) 7m55.879937187s ago: executing program 5 (id=1042): write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c", 0x7a) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'caif0\x00', {0x2, 0x4e23, @multicast2}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xf51) readv(r2, 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x4000) sendmsg$inet(r2, 0x0, 0x24044014) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r1, 0x0, 0x0, 0x80800) socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r4) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20040801}, 0x48051) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x8}, 0x18) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0xa, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r7 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x6, 0x0, 0x5000007ffffffc, 0x0, 0x9, 0x0, 0x3ff7}, {0x7fffffff, 0x1000000000, 0x53e5, 0x1f}, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0xa, @in6=@loopback, 0x1502, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty, 0xfffffffc}, 0x1c) 7m55.763381741s ago: executing program 0 (id=1044): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22000000}, 0x0) 7m55.580599679s ago: executing program 0 (id=1045): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000003a00070100000000fcdbdf25027c00000400fc80100001800cc6"], 0x28}, 0x1, 0x0, 0x0, 0x4048000}, 0xc000) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r0) 7m55.424866808s ago: executing program 0 (id=1047): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r0], 0xb0}, 0x1, 0x0, 0x0, 0x4000851}, 0x20040040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x200048d0}, 0x48080) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r0], 0xb0}, 0x1, 0x0, 0x0, 0x4000851}, 0x20040040) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x200048d0}, 0x48080) (async) 7m54.946467947s ago: executing program 6 (id=1049): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x44040) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001800310800000000000000001d01000005000d0000000000"], 0x1c}}, 0x800) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) unshare(0x20000400) (async) unshare(0x20000400) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x11, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ASSERT(r5, 0x29, 0xcf, &(0x7f0000000040)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000cf08000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000400)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="5000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000280012800900010076657468000000001800028014000100000000001c81da08ff4f0486fdc39d40c2e2a9538ebbbcd0b166063dc5b04b8b56acf4bd43be7779793a7779267c20d73a8d4ea83ad5842030b0bd8e850e0e8bc846eaf4d38698f7c7de0cef3588cf425d88fd9f8cf826802bc6dc7fc18feb32cd9251f5c3e39d4d", @ANYRES32=0x0, @ANYBLOB="400401000000000008000a00", @ANYRES32=r10, @ANYBLOB], 0x50}}, 0x0) r11 = socket(0x10, 0x803, 0x2) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f00000001c0)=0x16bd22f3, 0x4) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f00000001c0)=0x16bd22f3, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01"], 0x3c}}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r13 = socket$alg(0x26, 0x5, 0x0) unshare(0x600) (async) unshare(0x600) bind$alg(r13, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x700, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) 7m54.944524851s ago: executing program 0 (id=1050): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000001000000000000000000000850000002900000018010000207834b000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a00ef00850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f00"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x100}, &(0x7f0000000200)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000e80)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d80)={&(0x7f0000000e00)={0x34, 0x3, 0x6, 0x101, 0x0, 0x0, {0xd, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0xc4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040), 0x8) listen(r6, 0x6d5) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r8, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r8, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r8, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r8, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/56, 0x38}}], 0x1, 0x12141, 0x0) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000340)={{0xa, 0x4e21, 0xe, @local, 0x4}, {0xa, 0x4e20, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1, {[0x80, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x56, 0x546fc290]}}, 0x5c) connect$vsock_stream(r7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="58000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="010102000000000008000500", @ANYRES32=r9, @ANYBLOB="3000128009000100766c616e0000000020000280060001002200000004000480100003800c6c01000500000008000000"], 0x58}, 0x1, 0xba01}, 0x810) 7m54.941040241s ago: executing program 6 (id=1051): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22, 0x0, @rand_addr, 0x400}, 0x1c) listen(r0, 0xffffff86) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) accept(r0, &(0x7f0000000180)=@sco={0x1f, @fixed}, &(0x7f0000000100)=0x80) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0xff0f000020000080) 7m54.63017736s ago: executing program 5 (id=1054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0xb) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x4, 0xdc, 0xa}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000540)="b42e38d9586806263d0fd6b7982b4bb376a19a4f8ba7a59445268da4b756fc00c1c8a938fa7c209bdd7ad02c5d99c5a598c564b096f8", 0x36}], 0x1}}], 0x1, 0x4000000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r9, 0x1, 0x8}, 0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000002c0)={r9}, 0x8) close(0xffffffffffffffff) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="2e000400010002", 0x7) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x70, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ipvlan1\x00'}, {0x14, 0x35, 'rose0\x00'}]}, @IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x70}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r10, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7m54.144254492s ago: executing program 1 (id=1057): r0 = socket(0x28, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$packet(0x11, 0x2, 0x300) r3 = socket(0x200000000000011, 0x2, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001780)={{0x0, 0x7, 0x1, 0x2, 0xfffffffffffff043, 0x3, 0x3, 0x4645c255, 0x4, 0x2, 0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x6, 0x100000000}}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000002780)={{r4, 0xc7, 0x7, 0x80000000, 0x2, 0x3, 0x3, 0xffff3ad4, 0xf, 0x10, 0x8, 0x8, 0x1000, 0xb79, 0x81}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r5, 0x0) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r5, 0x0) bind$packet(r3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) syz_emit_ethernet(0x52, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x1c, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x8, '\x00', @ipv4={'\x00', '\xff\xff', @empty}, [{0x2}, {0x2}]}}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmmsg$nfc_llcp(r8, &(0x7f0000002ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}], 0x1, 0x8895) bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000310001072abd70000000000003"], 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r11, &(0x7f0000000440)={@void, @val={0x0, 0x83, 0x8, 0xe057, 0x19, 0xc}, @ipv6=@icmpv6={0x6, 0x6, "a44cda", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x6a, '\x00', {0x4, 0x6, "41035e", 0x8, 0x0, 0x0, @local, @mcast2}}}}}, 0x62) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r10, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7m54.141571666s ago: executing program 6 (id=1058): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000d600000000000000000000008500000041000000850000000f00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000048c0)=[{{&(0x7f0000001ec0)={0xa, 0x4e21, 0x7, @loopback, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000002440)=ANY=[@ANYBLOB="180000096615000000000029ae0000390000003300020400c05a66ccff4a3ac6c4f545f8d11517110cf41fc664ed1afddf8df3e1af5650a2cecedd15131645a3cd7a808a01d29049c0039c10d4"], 0x18}}], 0x1, 0x8080) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0xfffffffffffffffe, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$inet6(0xa, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r7 = socket(0x10, 0x803, 0x4) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}}}, 0x24}}, 0x0) sendmmsg$sock(r0, &(0x7f0000002380)=[{{&(0x7f0000000180)=@ethernet={0x307, @remote}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000480)}}, {{&(0x7f0000000580)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000680)="c71e0b3d3066980606632eaa88485c3f5350a297", 0x14}, {&(0x7f00000006c0)="341aa11de120ecfb9bb2a5d743693f21e57d8c54d1b4ac6bab14710df5dc4b5db1322d86276145d352ed5f94c7237c23bd9f5b8920", 0x35}, {&(0x7f0000000700)="adf3e41a73056ad1168aa6e8cefeccb33509ff2c1ec9cd328d1d3a63385a74204c03a73d8e36bb1408e13adbfdd88ef23ba20ddb3a4940995085e5df", 0x3c}, {&(0x7f0000000800)="8056b70892fe9cce7695475e87e15899dbc8bccf1c200174610789a5f0f60b0ec1863c96fd318e0f20a9fc404d18695e8ea3e46f4b194f8f97fe96eb9ef32162dfa208742654898b580d3599d2c7eb771b1fa1e43ea0d4dc7a5b4463aee712510c7531a1be55a2eb70a515da0f5f086cec37975d1cec0713298f6c7646c331ef306017a7ed048588585864d6227a028e435237a1fb91f1640f1889b8243558d46a5119804dd8ecd083e521b41ca33ce28cc326331f8b4518b6d40a114e7b925d82e841531fcb3a0615d8156ad34223cf2b2a6b9eb6ce3fd90e98341142590fea6a09fa1a76b953cb", 0xe8}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="907f06f910ddb85b247b97d880ff739c06d6877f055eaee1120f46f7e45a619b36cb5a2ad9cfc0633967950fbba7e85664b23865276beec76beb643ac86212de68875fa0cdd3c0035979820d2cb6a88510f10f4b95347dab9383f88aa7c1f04683ac9ad30fafa31f1af33773a06caf3d5c69cfb8dbea8925a87466437f374aa869f95636e483533973c9b5905ee3ae621b600a6e3de1f1aef8f0a49cd7a721b0521f52a5a2ab9618cbdabb04e7562b9f45a4833ea5f13191d07cf8d1f7f9eb48669cf4297307a4a788628bbc187b0bacc828186014625385eaf252752066d5a599234647b5e12178462b", 0xea}, {&(0x7f0000001a00)="30d7e9ef6aefd6749633c8575f69b5385fbd9703746071f20bf6eff341bca357b6ccf114bd2ce3f4e1db1afb35b67f3a700f7948371b238268de009eda36b6caacc37addc8f489cc1365f9ada43414706d10928bf7927a9639181fb22854a59d237c1bf84188859340b9c5dbec8dfeef06619aad05356f1bbf71493d484f829cbdb6498aa03002763b37f1331e07857a296f5b48f79fff852348c29fba0932b4eaa94040cd852d3d70151cde7a2a5de827cd3ea8a589c3a61ede87d79ab941b9bb81e13081c8", 0xc6}, {&(0x7f0000000740)="da19570cca103f6186b7f4f22d6202d679d2e1cb23cf93cc366da303ae1fa52002b2c703ebbb31c6cced08bca28c065ad535cdf11290691cc6f3d7c7f024668c59dc1c077840d2250248bddd11f571a083ab1a5768069f1491f65478494dd5c389a58d4dc734f4508fdbdff4", 0x6c}], 0x8, &(0x7f0000001b80)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x10c5000000000000}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x7ce0}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0xd86}}], 0xf0}}, {{&(0x7f0000001c80)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x3, 0x3, 0x1, {0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x8}}}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000001d00)="70332fdde2ecdc1e288aa33c36b59fe949c1192e88e185c0bf9430228d907f79d630e1ff848e87f512167b5eaf8696f3a5d92c644ff61afd2f5d8bc53bf0eb76241093539586bd3ea3b46230771f22d32efcc4854176d311a3286e0cf3d0dd5bbf47aebe06ea0d1c5d5bf44c63bb6ebc7244f47319878a4c0a267e382c9b966dbe2cb4236762", 0x86}, {&(0x7f0000001dc0)="b8c199e9806e5969093e1ea9f0e0e83837e3f286126d5db43bfb29facb11f04700fe6909da214abd1bb629b69b3f0eaf12214e5e71bcf5e78460add19631da9ff26b32687e1951b56a5626affc88bf62c429a44cb61dee47896fe2f9fbc2beb94ba76d5a3813f10230a8484926df445c0ee5413e99085de6de18480d", 0x7c}, {&(0x7f0000001f00)="6798a1122c67ec6a6df7bec87b990e04247a8bf93405ef069ef60792fde192c591381d71395abe1f93d92029d3f4dbea0a16ac63a50199b7bb0996bd082f5b9f7378d93d3623476230bbe2c7764ae558c55935211005b39a5c0f1a5108261f3f2412230aa1286dd4ef44bd46be3515c6c2305846c73bc0ac5853db14128ea202fdc8950daa2a3424b74114b3b861f03078", 0x91}, {&(0x7f0000001e40)="247f19398c40664702dd5ffa2a2b5e43d8b6ce8b5442c79c3bf5e099f5e7ff8de2", 0x21}, {&(0x7f0000001e80)="ac2305b4489ff3c1a99981b65882749df6034d737706320b93476e0455ea32bce48db3a689bf", 0x26}, {&(0x7f0000001fc0)="3875db0c212df2706069a30761ca2bb6e8e82cf04616bfdb1045780888d7a420c5121b59e9e9cf", 0x27}, {&(0x7f0000002000)="677370c1806d9196e1f79dbf72d64d3a4874260a7b26a93528fff256eed939f402782612927cc3699e97feb49cfbe9ea0a4d6d734a3b6c2d2267ccb06d73cb0d0dedf7", 0x43}, {&(0x7f0000002080)="17747bc130a9b7965f99c5b353680de268956bd6b0ee", 0x16}, {&(0x7f00000020c0)="3ea2328ee6ded45434b19a21a14304d14441d5462b27dd3ea407cd5e2f658685002b0a2d8bd260888ed1fe96a159354a95a9393551c6a8bed6ef032298375213b5118dd30201ce8649113df5e93363495173be6ba0971e3bd2ebfee828d1ad51eff032caaa27b4d60aae", 0x6a}, {&(0x7f0000002140)="e15884c3439bc623ab5d9669a7e8fe0b2bfbee797fe12d6c89636f1951122bb452f1061290d4da9139fc14479786b74114718d16ded154ebaa14fea44a6073d8c4ff6010ee74dc2c74e945fce56d3f4f4e81df1d", 0x54}], 0xa, &(0x7f0000002280)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x20000009}}, @mark={{0x14, 0x1, 0x24, 0x400}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x10001}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x6b5}}], 0xf0}}], 0x3, 0x4040080) socket$netlink(0x10, 0x3, 0x0) 7m54.041416678s ago: executing program 5 (id=1059): socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000a80)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}], 0x1, 0x8000) epoll_create1(0x80000) (async) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x10000010}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x48}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000140)={@rand_addr=' \x01\x00', 0x17, r5}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@remote, @in=@loopback, 0x4e25, 0x0, 0x3, 0x2, 0x2}, {0x2, 0x53, 0xfff, 0x7, 0xffffdffffffffffc, 0x1e6, 0xfffffffffffffffe, 0x8001}, {0x7ffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x5}, 0x727, 0x0, 0x1, 0x0, 0x3, 0x2}, {{@in=@multicast1, 0x0, 0x2b}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x4, 0x2, 0x0, 0xffffffff, 0x3439, 0x400009}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x2}, 0x1c) 7m53.836236027s ago: executing program 7 (id=1061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x22a000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000001000000000000000063aaec9f0001000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x6}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x1}) 7m53.826878788s ago: executing program 5 (id=1062): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x1, 0x1, 0x3, 0xa5c, 0x802}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x16, @multicast1, 0x4e22, 0x2, 'ovf\x00', 0x3c, 0x4, 0x70}, 0x2c) ioctl(r0, 0x8b32, &(0x7f0000000040)) 7m53.739934447s ago: executing program 6 (id=1063): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000380)={r4, 0x9b, "c4e1a5a29bf8132998a7d175900fe262e86a243d1862fad3b88addc6aaa9f35bac318b3e19053555346f528dd40781f8fa70fb0aac90e50a0409e93cc68968e08c27205cda16885580cc1e56c38332230af124bcf98c7444a76fedd0ae4cdf12b087809c0d382a4f2fda3ab63dc2da30e522576e92337cfcde614a0fb442dbdbd5c3e0502d47b4173a98d96684bd674ddad82e8daf02aaca5f12af"}, &(0x7f0000000440)=0xa3) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r6, 0x0) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000480)={0x7e, 0x8001, 0x9, 0x9, 0x29}) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000700)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x4a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) setsockopt$llc_int(r7, 0x10c, 0x4, &(0x7f0000000580)=0xee9a, 0x4) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x7d, &(0x7f0000000040)={r5}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r5, 0x8}, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000480)={0x0, 0x4f33, 0x6}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@bridge_dellink={0x24, 0x11, 0x5, 0x2000, 0x300, {0x7, 0x0, 0x0, r13, 0x10400, 0x1952}, [@IFLA_AF_SPEC={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb}}, &(0x7f00000005c0)='GPL\x00', 0x6, 0x47, &(0x7f0000000600)=""/71, 0x40f00, 0x1f, '\x00', r13, @sk_lookup=0x24, r0, 0x8, &(0x7f0000000680)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0x8, 0x6, 0x9}, 0x10, r14, 0xffffffffffffffff, 0x4, &(0x7f00000007c0), &(0x7f0000000800)=[{0x3, 0x4, 0xe, 0x6}, {0x4, 0x3, 0xe, 0x7}, {0x2, 0x1, 0xa, 0xa}, {0x3, 0x3, 0xb, 0x6}], 0x10, 0x21}, 0x94) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0xfff0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r15 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r15, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r15, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x800c040}, 0x0) 7m53.644457994s ago: executing program 1 (id=1064): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000002}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000063114a00000000008510000002000000850020000500000095000000000000009500090000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000002}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000063114a00000000008510000002000000850020000500000095000000000000009500090000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) (async) 7m53.643555797s ago: executing program 7 (id=1065): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x18) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x170bd27, 0x0, {0xa, 0x0, 0x80, 0x1, 0x0, 0x0, 0xfd, 0xb, 0x2100}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x24}}, 0x200048d4) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0xfc, 0x3, 0x1, 0x0, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffff8}, @CTA_NAT_DST={0xac, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010100}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xfffffff7}]}, 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r7) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000280)=[{0x28, 0x2, 0x40, 0x5ae9}, {0x20, 0x9, 0x7, 0xfffff010}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'bridge_slave_0\x00', 0x0}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r9, 0x84, 0x83, &(0x7f00000002c0)="8a00000000000000", 0x8) sendmsg$nl_route(r6, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000007c1400020027bd7000ffdbdf2202088000", @ANYRES32=r8, @ANYBLOB="08000100e0000002"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x28, r12, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8854}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r12, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x11) 7m53.604893013s ago: executing program 5 (id=1066): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000001, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000280)='THAWED\x00', 0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000004fa000000000000825b440018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000a6000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r6, 0x0, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x4, 0x7, 0x200, 0x4, 0x4b, 0x8}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000980)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, r3, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x80}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x84) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc011}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000100851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000020100009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 7m53.522120315s ago: executing program 1 (id=1067): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24ff9cb723a0a185", @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080004000a01010108000500ac1e0101"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x20040040) mmap(&(0x7f00005c8000/0x1000)=nil, 0x1000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f00000001c0)="472b20dc3fb00ece94b8041c", 0xc}], 0x2) 7m53.308246207s ago: executing program 1 (id=1068): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}}, {{&(0x7f0000000640)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/156, 0x9c}], 0x1, &(0x7f00000005c0)=""/82, 0x52}}, {{&(0x7f0000000280)=@ieee802154, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000000c0)=""/60, 0x3c}, {&(0x7f0000000400)=""/32, 0x20}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000880)=""/63, 0x3f}], 0x6, &(0x7f0000000b80)=""/94, 0x5e}, 0x400}], 0x3, 0x42, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r3, &(0x7f0000000680), 0x4924924924925c6, 0x500) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100050000080500010004"], 0x4c}}, 0x0) 7m53.306048165s ago: executing program 5 (id=1069): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x36}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x6}}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x30, @in6=@private1, 0x3501, 0x2, 0x0, 0x0, 0x0, 0x9}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x12, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x64, &(0x7f0000000380)=""/100, 0x41000, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0xb, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x2}, 0x94) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x6, 0x8}, 0x10, 0x0, r1}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "fd"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000080)) r7 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x400261f2, &(0x7f0000000100)={'dvmrp0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x1f) 7m53.195313206s ago: executing program 7 (id=1070): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) close(0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r5, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x1f0c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xf, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7, 0x20}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r6, 0x1, 0x2e, 0x0, &(0x7f0000000080)) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000340)=0x1, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, 0xffffffffffffffff, 0x0, 0xa0028000}, 0x86) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r10 = openat$cgroup_procs(r8, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000000c0), 0x12) preadv(r10, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x21, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', r4, 0x29, 0x2, 0x80, 0xf314, 0x2, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x40, 0x9, 0x8}}) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@RTM_GETMDB={0x18, 0x56, 0x800, 0x70bd28, 0x25dfdbfb, {0x7, r11}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000890}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000305000000090000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800130001000000080014"], 0x44}}, 0x0) 7m52.913039784s ago: executing program 7 (id=1071): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7m52.808432794s ago: executing program 1 (id=1072): socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3569], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800200001"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800200001"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, 0x0) recvmmsg(r2, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=""/93, 0x5d}, {&(0x7f00000004c0)=""/139, 0x8b}, {&(0x7f0000001d00)=""/4101, 0x1005}, {&(0x7f0000000800)=""/218, 0xda}, {&(0x7f0000000680)=""/90, 0x5a}], 0x5}}, {{0x0, 0x0, 0x0}, 0x24c9ddb}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}], 0x4, 0x40010120, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r6, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 7m52.806262435s ago: executing program 6 (id=1073): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bb01002dbd7000ffdbdf3c3b0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="18000280140003800c000180080001000600000004000180"], 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x8080) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000240)={0xd, 0x8}, 0x2) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet(0x2b, 0x801, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x7}, 0x18) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000016000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) sendmmsg$sock(r8, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) socket(0x10, 0x803, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100053d7000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff0000000000000000000000000000007517b823e89ba7cea54823b1006c0000002001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0002000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000859c00000060da"], 0x138}}, 0x0) close(r11) 7m52.500550401s ago: executing program 7 (id=1074): r0 = socket$kcm(0x10, 0x2, 0x0) (async) unshare(0x22020600) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) unshare(0x2040400) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x5761, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, 0x0, 0x0) (async) vmsplice(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="2c4a149dd50c3580bbea61538262bb1099e8d606ef22101af3d12a8fa54bb7869b440ee41686a5309a1460b55bf17cef901190fb759419e8e698bc39a11b865b848a1d55a7a897bc5abdbf60357644e471afff0cd53bc674a7da02e7f7afacf0140a6eb82cb4e53b26f3", 0x6a}, {&(0x7f0000000100)="b9263040329e615072bc241e336e147a3e199ffcfead9971deed98b45fd882e160243a0f6957ce9ad3a89d2dbd4f7a6ca4d8d4963ea3d0d072bd00b0febee02f949ba3111fc33ef0d1184c5a526000468458aeb0d9c02a43b902c7d87f47734739c1f3c93ce24929", 0x68}, {&(0x7f0000000180)="fa62bc7a630823f42ecbcf9af7c78e45cf9fe5b1aefe7f70bb1b19d065db0b85a97f1c1a92d57c171a3f9ee8", 0x2c}, {&(0x7f0000000300)="150e8cad403b4928e0f30252d5727b3e8e05cf7e99ca81f6591ef9bcf5e44c4fa3046b05aba8cd10a217f5285380c178382380db19f5db644729b2f5aaab3d91f513421f3808254b86197062e61942dff3e15c9ecda4b3c308999b0db5e6052d7bd2ff4139bce2f0ba8cc21a3d99b600dd49c1c8498601cbe94388f2c1d2bad8e4a2acf1df1e7f06dec1116e9ed05bde91e08387117a18f86b040e0a9fec3f06716c2892040c0a06293c77ab446db3fccf100c3d8c14717837549e85cc9713d5f2f7eb299c630cfea6d4bf9a18f2ef848dd36aba2d56743da1571e0cacf276741ff92ca0e16c", 0xe6}], 0x4, 0x6) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a0016000900142603600e1208001e0000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x14) 7m52.447045007s ago: executing program 1 (id=1075): r0 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000003800010310bd7000ffdbdf250d"], 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@fallback, 0xffffffffffffffff, 0x2f, 0x202c, 0x4}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@cgroup, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) listen(r2, 0xfffffffc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 7m52.407021769s ago: executing program 7 (id=1076): r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0x7) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000080)) (async) ioctl$int_out(r0, 0x0, &(0x7f0000000180)) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f00000001c0)) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000200)=0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000240)={0x6, 0x10000, 0x5, 0x8, 0x2, 0x0, [{0x7, 0xfffffffffffffffe, 0x80, '\x00', 0x3201}, {0x1000, 0x6, 0x0, '\x00', 0x2002}]}) (async) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14, 0x800) recvmsg(r3, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000380)=""/59, 0x3b}, {&(0x7f00000003c0)=""/118, 0x76}, {&(0x7f0000000440)=""/157, 0x9d}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x5, &(0x7f0000002580)=""/171, 0xab}, 0x60) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000002680)=0x3) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002740)={'wlan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002780)={'wlan0\x00', 0x0}) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000002880)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x4c, r4, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x47}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8001, 0x7f}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x5}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}]}, 0x4c}}, 0x24000809) (async) r8 = accept4$phonet_pipe(r1, 0x0, &(0x7f00000028c0), 0x0) ioctl$sock_SIOCBRADDBR(r8, 0x89a0, &(0x7f0000002900)='batadv_slave_0\x00') (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000d4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r9, &(0x7f0000002cc0)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x46000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002ac0)={0x1b8, r10, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffd}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_macvtap\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x615}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x80, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3e}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x9}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}]}, 0x1b8}}, 0x4008000) (async) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000002d00)={0x5, 0x299a}) (async) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r11, 0x84, 0x2, &(0x7f0000002d40)={0x2, 0x2, 0x4, 0x2}, 0x8) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000002d80)) (async) r12 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r12, &(0x7f0000002e80)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x10, 0x3fb, 0x400, 0x70bd25, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x640040cd}, 0x40050) 7m34.270944476s ago: executing program 35 (id=1050): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000001000000000000000000000850000002900000018010000207834b000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a00ef00850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f00"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x100}, &(0x7f0000000200)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000e80)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d80)={&(0x7f0000000e00)={0x34, 0x3, 0x6, 0x101, 0x0, 0x0, {0xd, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0xc4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040), 0x8) listen(r6, 0x6d5) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r8, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r8, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r8, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r8, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/56, 0x38}}], 0x1, 0x12141, 0x0) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000340)={{0xa, 0x4e21, 0xe, @local, 0x4}, {0xa, 0x4e20, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1, {[0x80, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x56, 0x546fc290]}}, 0x5c) connect$vsock_stream(r7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="58000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="010102000000000008000500", @ANYRES32=r9, @ANYBLOB="3000128009000100766c616e0000000020000280060001002200000004000480100003800c6c01000500000008000000"], 0x58}, 0x1, 0xba01}, 0x810) 7m34.219375609s ago: executing program 36 (id=1075): r0 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000003800010310bd7000ffdbdf250d"], 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@fallback, 0xffffffffffffffff, 0x2f, 0x202c, 0x4}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@cgroup, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) listen(r2, 0xfffffffc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 7m34.146795097s ago: executing program 37 (id=1073): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bb01002dbd7000ffdbdf3c3b0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="18000280140003800c000180080001000600000004000180"], 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x8080) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000240)={0xd, 0x8}, 0x2) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet(0x2b, 0x801, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x7}, 0x18) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000016000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) sendmmsg$sock(r8, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) socket(0x10, 0x803, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100053d7000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff0000000000000000000000000000007517b823e89ba7cea54823b1006c0000002001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0002000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000859c00000060da"], 0x138}}, 0x0) close(r11) 7m34.035041434s ago: executing program 38 (id=1069): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x36}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x6}}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x32}, 0x30, @in6=@private1, 0x3501, 0x2, 0x0, 0x0, 0x0, 0x9}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x12, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x64, &(0x7f0000000380)=""/100, 0x41000, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0xb, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x2}, 0x94) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x6, 0x8}, 0x10, 0x0, r1}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "fd"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000080)) r7 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x400261f2, &(0x7f0000000100)={'dvmrp0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x1f) 7m33.937915775s ago: executing program 39 (id=1076): r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0x7) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000080)) (async) ioctl$int_out(r0, 0x0, &(0x7f0000000180)) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f00000001c0)) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000200)=0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000240)={0x6, 0x10000, 0x5, 0x8, 0x2, 0x0, [{0x7, 0xfffffffffffffffe, 0x80, '\x00', 0x3201}, {0x1000, 0x6, 0x0, '\x00', 0x2002}]}) (async) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14, 0x800) recvmsg(r3, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000380)=""/59, 0x3b}, {&(0x7f00000003c0)=""/118, 0x76}, {&(0x7f0000000440)=""/157, 0x9d}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x5, &(0x7f0000002580)=""/171, 0xab}, 0x60) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000002680)=0x3) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002740)={'wlan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002780)={'wlan0\x00', 0x0}) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000002880)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x4c, r4, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x47}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8001, 0x7f}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x5}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}]}, 0x4c}}, 0x24000809) (async) r8 = accept4$phonet_pipe(r1, 0x0, &(0x7f00000028c0), 0x0) ioctl$sock_SIOCBRADDBR(r8, 0x89a0, &(0x7f0000002900)='batadv_slave_0\x00') (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000d4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002a80), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r9, &(0x7f0000002cc0)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x46000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002ac0)={0x1b8, r10, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffd}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_macvtap\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x615}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x80, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3e}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x9}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}]}, 0x1b8}}, 0x4008000) (async) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000002d00)={0x5, 0x299a}) (async) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r11, 0x84, 0x2, &(0x7f0000002d40)={0x2, 0x2, 0x4, 0x2}, 0x8) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000002d80)) (async) r12 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r12, &(0x7f0000002e80)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x10, 0x3fb, 0x400, 0x70bd25, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x640040cd}, 0x40050) 12.990135789s ago: executing program 4 (id=3896): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000002c0)={0x14, 0x2d, 0xe01, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2000801d}, 0x20000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff7}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=ANY=[], 0xc}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=ANY=[], 0x3a8}}], 0x2, 0x4004804) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) openat$cgroup_ro(r4, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x0, 0x0) 12.760561149s ago: executing program 4 (id=3900): syz_emit_ethernet(0x34e, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/853], 0x0) 12.568617397s ago: executing program 4 (id=3904): mmap(&(0x7f000009f000/0x3000)=nil, 0x3000, 0x1, 0x30, 0xffffffffffffffff, 0x6f322000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r5, 0x1, {}, 0xff}, 0x18) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) sendmsg$can_j1939(r3, &(0x7f0000000380)={&(0x7f0000000440)={0x1d, r6, 0x7, {0x1, 0xf0}, 0xfe}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x4004045}, 0x1) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x150}, 0x1, 0x0, 0x0, 0x400c0}, 0x20040010) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="0868de07b081b641f1f384", 0xb}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 12.11014172s ago: executing program 4 (id=3913): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000880)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000880)={'wpan0\x00', 0x0}) openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$nci(r5, 0x0, 0xfffffeea) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf2515000000050029000100000008002a000500000004002b8008002c000900000008000300", @ANYRES32=r4, @ANYBLOB="20002b800800010001"], 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x401, 0x70bd28, 0x3, {0x0, 0x0, 0x0, r1, 0x0, 0x1c05}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x3}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_LINK={0x8, 0x1, r1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x12) bind$isdn_base(r0, &(0x7f0000000040)={0x22, 0x8, 0xd, 0x8, 0x2}, 0x6) 2.554353107s ago: executing program 2 (id=3991): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000200071b48013c030000000000009500000000000000bc26000000000000bf67000000000000150200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050800000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000008fb0000000300000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) unshare(0x64000600) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c0002801800038010000180080001000900000004000300"], 0x48}}, 0x0) getsockname(r3, &(0x7f00000002c0)=@rc, &(0x7f0000000000)=0x80) 2.243091527s ago: executing program 2 (id=3992): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) write$cgroup_int(r3, &(0x7f0000000140), 0xfffffdef) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000001340)=@ethtool_link_settings={0x4c, 0xa, 0x81, 0xfe, 0x9, 0x1, 0x5, 0x80, 0xff, 0x4, [0x3, 0x4, 0x4000e18, 0x400, 0x3, 0x2, 0x2, 0x3]}}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYBLOB="0000000000000000b7040000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x2341, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='rcu_utilization\x00', r5}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYRES64=0x0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000d9dc9a9be558012f0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="1b0000008266e35a000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000001280)=""/98, &(0x7f0000001300)=0x62) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newsa={0x280, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x8a}, 0x0, 0x6c}, @in6=@remote, {}, {0x0, 0x0, 0x0, 0x800000000000}, {0x0, 0x5}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xa}, @mark={0xc, 0x15, {0x350759, 0x5}}, @migrate={0x134, 0x11, [{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xecf9a1536112951, 0x0, 0x0, 0x3505, 0xa, 0xa}, {@in=@broadcast, @in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0xe, 0x3, 0x0, 0x3505, 0xa, 0xa}, {@in6=@remote, @in=@empty, @in=@multicast2, @in=@rand_addr=0x64010102, 0x6c, 0x216010e2ac18bcd9, 0x0, 0x3506, 0x2}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast2, @in=@empty, @in=@loopback, 0x3c, 0x2, 0x0, 0x3500, 0x2, 0x2}]}]}, 0x280}}, 0x40000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000001180)=ANY=[@ANYBLOB="600000fdffffffffffffffe1ffffffff02000102050005000100000005008400010000000900020073797a310000000012000302687773683a6e65742c706f7274000000050004000000000005000400010000000900020073797a3000000000"], 0x60}, 0x1, 0x0, 0x0, 0x13}, 0x20040004) socket$l2tp(0x2, 0x2, 0x73) 2.242037391s ago: executing program 8 (id=3993): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000008000000000000095000000002b190017163b5b1300cb87f183b310d21d6d7a7e55e7cc990f6e712f452668775bd83a2063eebfb28acac360ea56557e98c00f1a5cce782a9cc01d125fa55bba77510e8833df6f927842bdc08f777856e4de2a67d8f0e70bdd3ed1ce8f00001c2345c71c04c492c7090001fba66194c4799d2e1dd08df818cd03956564bf2252bc4e1d4606f194b8d52f998f2668f0ac13accec93fac1bce87cda3c9d3934141ab49e3634c630ae5c7d518858f527f5f1d229c219560e022a423815200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffe, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r6, @ANYBLOB="040027bd7000fddbdf2502000000040001805000068014000400fc02000000000000000000000000000114000400fe8000000000000000000000000000aa050002000100000014000400fc02000000000000000000000000000108000700", @ANYRES32=r7, @ANYBLOB="2800068014000400ff0200000000000000000000000000010600010002000000060005004e2100000c00068008000700", @ANYRES32=0x0, @ANYBLOB="080e03000200000008000400ff000000b0476c461be7211d3751037b8e6651a3c778152abfb225d2cdd8ccefbe1d55ba654203d359c35b4242f43248c4e8d257e9d0094fae7afb52"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) clock_gettime(0x0, &(0x7f0000000200)) socket$inet_sctp(0x2, 0x5, 0x84) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 2.196375375s ago: executing program 9 (id=3994): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000004580)={'ip6_vti0\x00', &(0x7f0000004500)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x6, 0x7, 0x8, @empty, @empty, 0x8, 0x40, 0x5, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYBLOB="17200000212000002c0012800c0001006d6163766c616e001c00028008000300030000000800010010000000080007000600000008000500", @ANYRES32=r3, @ANYRESHEX=r2], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x2a000802) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000000206010100000000000000075ec2ab13bba5da000a0000000900020073797a300000000005000100"], 0x30}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000006, 0x4ca31, 0xffffffffffffffff, 0xd1d1d000) setsockopt$inet_tcp_int(r5, 0x6, 0x1e, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f0000000380)=0x9) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000001a80)="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"/606, 0x96, 0x2004c004, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001a40)={0xffffffffffffffff, r2, 0x25, 0x11, @void}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendto$inet6(r0, &(0x7f0000000980)="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"/4096, 0x1000, 0x4000, 0x0, 0x0) sendto$inet(r5, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r8 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x44) 1.523207466s ago: executing program 3 (id=3996): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)={0x18, 0x3b, 0x107, 0xffffffff, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000180), 0x4) (async, rerun: 64) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40021103) (async, rerun: 64) connect$unix(r1, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) 1.401202783s ago: executing program 3 (id=3997): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4040001}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x20010, r4, 0x2d8f4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0x8004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000005000000", 0xfe60) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000000008500000036000000c50000002a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r5, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r7, r5}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) readv(r8, &(0x7f00000033c0)=[{0x0}, {&(0x7f00000022c0)=""/4096, 0x1000}, {0x0}], 0x3) syz_emit_ethernet(0xfdef, &(0x7f00000006c0)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x0, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e1960f02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d076feafa22f0610a70f2bdf4000200000000b0c2c1254f0963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b5887437a172ebc02a740694298b79dc194e533583412dff048fc21f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be033c9d2f972cc93c1c13caec04a367c24a9fb6a6991ddb737d527d6acb15426415b6e8b14f822e86067a5e991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54f45b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb7830a246c3b2f60000fc4deb8eda1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7033be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc3a4763948a1cbc10348ef2ac3781b847611fcb0a26acafdd6d9ab05865fcf7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb81c53f16d80f51006cbce09dc6b6cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d28484e15dc4320e4f85c16a8fbffadf8214d6d24cabe17ad4135d8872935ce0e6a468fd20fa4461d1d67b234feac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c1044ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f4815237c3aa3562232016460a8242a96371870be017738898a16ba603439f6eaad8e70b4c3bea44f1ecbde032ca064668991511e3fcc9e2379c93c651517d30d3cbddd94b743cff8a007d141de6f5d05639ff131c302ece1d91bd373e14171ab5ac2d0e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="090000000400000006000000ff00000042"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r9}, 0x38) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r7], 0x50}, 0x1, 0x0, 0x0, 0x10000092}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 1.212358647s ago: executing program 2 (id=3998): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0xf, @loopback, 0x7fffffff}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000002c0)="cbd4738c9312f4337e3f0660ae922bf1964c11499c5d613077b5f0c6f51133e95e8dd4f52f4aa4dd8ff2c582b4132a3250a944818b38601ca3fcac20596a14f71487576017a8bce822cc4716306347dd5719531957c725a4087525ed54d89337be40234b6e675c32e70ec8cae60a801b819787e69f105152816dee15657fd9415d0a18da326211b943a778217b9e04d09a636a143957a7fab7f9f2ca539ea9478b4ddb3d6904695f590fb47eb2f54f8c19db", 0xb2}, {&(0x7f0000000200)="696944dcdac036aabe554e64", 0xc}, {&(0x7f0000000380)="b4c6191af9012a785e359b37e5a10294b581cdda326df85ff67945f38582ec38520d9b9502451d8ae762e10447906b5b65a944756ca99a55afb478ec8ccc1281989337c3c34f0613bba97f24c0128dccd0be5dbc6d359ff6d170ba7c4cbe919e65d877045ea1621bda8e0e84221854b6ab10e6ad64a5f62512807ec7b1c9a0f451c7a1a1f2d9dbcfd83cdcce114e23aab6ed4b4c5d45ad3ac2f7490e1b5f83edc90393f13b29ca0194c816c8eabd6768aecbdfc542c39340a5f9c9", 0xbb}], 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x250}}, {{&(0x7f0000000780)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x2}, 0x1c, &(0x7f0000000940)=[{&(0x7f00000007c0)="22a243c2f0d035f3b94bcdc232c53eee4cd6bf854b337d6d134d72bd0f836a1010f6dbd7cbc800f70522c23d447338fabaa380e3eab40f72ede55bf27ef6cb0a66ce4e92d4d8bb8ebe3e581ccea36e264ad17f8cbb1367422ea51d63692d4556e6bf558aa802bdf3a19a28f3bc23f251f76a4a5ee03757cd433f41ae9f4caf226e4d59e25094006f05acc7b869eca93c44d5e22b1e1fef1b5122a332b80bea2b472a1783b40c8f5ddcb7e44d60c8f2163e400149556917f2b29c", 0xba}, {&(0x7f0000000a00)="c02ea7ceaeb92f51ab751a678d002b5b77cc8869359feccb0df7c12f93ac0948ca4e214bd58daa755fa698000d14af2d58c8d298dde45f2f1740bde7763ee487e37de82784dcbd122bdb6ab2ce0dafb812c245c83d01c7afbad4c9e4f47597c3c78e55b6369426edfaff5c32551105fdb57d3426073ac8bbb12fc104120da9df88efb20ccbb85659933cb5a7231ef58af13b1635d4a6", 0x96}, {&(0x7f0000000ac0)="ecfee55b82c98329b886a5acd144a3cbf4cea622eabbc2f922ba9b36a47e7a4eb65f47f0c937acdd9c38c7c17acc0c416bf981bc9cbcdca6e2e20d960df747375787ce2fb11788e5eeef6ef5538c8ef7ed3b29000d1d83bf648fa616390dd63e684eab0e3d5d815c70f8a5936583da09915d3235c403a51df7965faf6998aff3d6ef752698f55b52c81de8a81b6bce4ac9172044c1cf91920d32a8632e34908fc5", 0xa1}], 0x3, &(0x7f0000000d40)=[@tclass={{0x14, 0x29, 0x43, 0x8}}, @hoplimit={{0x14, 0x29, 0x34, 0xe4}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x1, 0x1, 0x0, [@local, @private2]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @dstopts={{0x68, 0x29, 0x37, {0x3b, 0x9, '\x00', [@enc_lim={0x4, 0x1, 0x10}, @enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x8, {0x1, 0x0, 0x5, 0x7fff}}, @generic={0x9, 0x1e, "b58fc218045d65311d782039071b18e0fa3f2d0a33b0770d70477a46bb81"}, @pad1, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0x3}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}]}}}, @hopopts_2292={{0x170, 0x29, 0x36, {0x67, 0x2b, '\x00', [@generic={0xf8, 0xf7, "0c39c1ed820e9ff63a1be14764764ac9154b4efba0e110943109e9d402fa8174ad6762eff246bb32d7d49c73e46450543f66e4b891ba2cb063db9c3cdf01e2058f0cf2cad4398abd661a3ac37779da7bbe545dbfe6e2401feca2a8b80179f5dfe1e9bd0819061ffadcb8b699388e0398585c1a49f95a62eaeb3e89356a8e2bd90e69e0c50f34b7debc149b8095692ea6f8da1557b66ca663394eb6e0998aaf15241d86334471188295df2a64f153fc68d308e61c6446591fe2ab7b8a59598082cb749aba4046516dff799abf4ae27c1d17ce3bf18b1f18787d6b5d2c1eddafbc61313aeb3fc922773b4ace8fb30d979a97e321949efdf9"}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x0, 0xc, 0x8, 0x9, [0x6, 0xffff, 0x3, 0x7d, 0x2, 0x1d96]}}, @enc_lim, @calipso={0x7, 0x10, {0x2, 0x2, 0x10, 0xb, [0x9]}}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0xf, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x2e}}}, @hopopts={{0x48, 0x29, 0x36, {0x11, 0x5, '\x00', [@ra, @ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0x6}, @enc_lim={0x4, 0x1, 0x7f}, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0x81}]}}}], 0x2e0}}, {{&(0x7f0000000980)={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe00000}, 0x1c, &(0x7f0000001580)=[{&(0x7f0000000b80)="ec6113709d3e0e59b114759d44230dcb70ffe9c1e535bc9ce69a30a0d0d62ba2ba9035612527cb66e80efec605480266374350", 0x33}, {&(0x7f0000000bc0)="082238d752b325b2aaf35be6eeaccb4a37c3016ea54c533c693eede90eb8a8391b04fc4a11549b255347b1e67438929edfacf9b5d829f04533815253ece4", 0x3e}, {&(0x7f0000000c00)="0337f855", 0x4}, {&(0x7f0000001140)="a507cc80e2f4ee9b1b02589de3d75d78ec148b2ee6319efa402a5d92fd0ca7727a9da891b1cba237c924c37ef90c17fb75ffb5acdb1f67588639d0c15104363458502b93951d5acb3cf8eb96fe07097a62d226a19841ce4e573dde620c4449267781dda6ef491fa92e8a1e4bd2a6daa62d9947ff0b4eda26a8a544cbad097862b7b5a4f7f618336df26e5241172eb392ea216b395e052176309290e31fc3f1ad0addc06e012f184867349575b57781cb0e6bae1efbcb2fe24875d480bfe4dc881d683ebfc074c0fa4eb97b47c5cd51045ea52213f2738e7498709c61d3c777191c5c34e4fb09ea86b99cfad8", 0xec}, {&(0x7f0000000c40)="c3218f205325b8c3d8994c0106b8a736769b8e147e4024cd8349239f52e5786da3f02fdb2f52d2c9c7b14c1e6f879115c2586d427ec6eb96c53a76a03198b931492b86fb896ce304ebf72f460cd4b490832aaa6566c3580be9fa9f633219eaadd52dd04c031deadf3c412f61399b1d729c3a1b1f9d004c308cac6fa02bbf9c42c9b73af8b7bd06facaef4125fe45f06c1cfaa83a7b279ab29cbc1f27b94ed4ca2ff76629", 0xa4}, {&(0x7f0000001240)="5b70872eef5d78588397faa59c54e383d9a252e72d8c3c7691000cfee7765b85830ea1d2c8704d3534ad8e5df5087e07430d349a282aed73c47480a03678372fdf0821373f70ca97ac3f374a0636848fb19dcd4a8512fe18eb84e48c5c1da5e13fa6229f362a787344cf66db2055b44adf8f3f815affcdbdef39ddd3d265b24663d6a581faf1050a2b17974c16cadc1d1c008ab3bac3bcdacd7f01465650366e24b2c937c0b18534df8591dd6d70c1fe81e398f0e51e35c4f9c4057cfd524a1e4610ed32", 0xc4}, {&(0x7f0000001340)="62d752dcf9512ff80c86fb3f99cd4511f9965eb1c64905cf9f4670b60a029e38670ebc675fcbaa83603dc3eeb2c01e0a5cece11cb055159b8ff338d68de178be8509237f22f9bf4b0d8f986873c5ed6482d3e56a21473495b1d131df314939d1869c0981e9a4d7bf7a2eb198bf1e9a1728db6247d55c0156592eecb27866d53465d57b2a24982c916a9cd1767378579f7e2a9660a284653ca606e2305d2ea5d6efc5f562a5fb5d4cbd29a6dbb815eca1fa3e523b14f91b21e42c270413021ae3a9460da21b9392da7340b18f20c9c0bf560e8abdba60083e6b92b57127148e8b33f4eadb352a525a20f4dd4ec410641f29f70115b1309228", 0xf8}, {&(0x7f0000001440)}, {0xfffffffffffffffd}, {&(0x7f0000001480)="6c3b955219fb3d7718a190338d847e326606c881b829a301c1d338475d0854d727bceeccf34410f1666481e6573b9a586ab1394263e9378d874c35f335bf94d29be0168b8117186da678eed83abffb636b5a37f4cc2617aa2a4ad0c8caac610bd61e0d0189bf4781c63d7ea0805d09d5134f53437aa162deb9451ef2bdbe638b8344d60b8151839c08f6ea0cda32b5aaff94cce253524bf0edda240065d0f1b02216253cfdf767e8164858c95dea6b1b68f0d1f44a1b56e3cfcbcb79a4286222d6a8cdb0301c", 0xc6}], 0xa, &(0x7f0000001640)=[@hopopts_2292={{0xf0, 0x29, 0x36, {0xc, 0x1a, '\x00', [@generic={0x4, 0xca, "c1b97b61e9cf9193586b9646d4c3f0e598f0085ffff63913a676b8d9773853d0339ac7177d85ee89d863f95ddc3506e5dc0815169d8a99c45bb5a61969247fad84daee47112e7f8a895d7e9e14988305c11dc15eeb0221c52fa5a6bd3422447b7f15182eb8a708c0ce37ef4216b0d3aa360f6be426d853f459cc5fe59389d46236b3b7662171f3b85d3bbe363045fc1e2330268a6a9510be5aa135cfd44b8f8fe6c736f488a31e9571e3d0b7b30e2424c21c7d33d1b2dcc8c0776560866096ec129041cc77ee53f03ab4"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x3b, 0x0, '\x00', [@ra={0x5, 0x2, 0x3}]}}}, @dstopts_2292={{0x58, 0x29, 0x4, {0x3b, 0x7, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0xe7, 0x1ff, [0xa, 0x8, 0x6, 0xffffffff, 0x6]}}, @ra={0x5, 0x2, 0xffbf}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x3c, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}]}}}, @dstopts={{0x30, 0x29, 0x37, {0x2f, 0x3, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x22, 0x800, [0xb6]}}, @pad1, @enc_lim={0x4, 0x1, 0x8}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x30a}}], 0x1f8}}], 0x3, 0x400c000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000003080)) socket$alg(0x26, 0x5, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000001040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x9, [@struct={0xe, 0x1, 0x0, 0x4, 0x1, 0x4, [{0xe, 0x3}]}, @enum={0xc, 0xa, 0x0, 0x6, 0x4, [{0x4, 0x6e5}, {0x5, 0xb}, {0x2, 0x1}, {0x6, 0xa375}, {0x4, 0x6f}, {0x8, 0x3}, {0x6, 0x2c}, {0x2, 0x1}, {0xc, 0xf1ed}, {0x4, 0x1}]}, @restrict={0xfffffffa, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x51, 0x61, 0x61, 0x0, 0x0, 0x5f, 0x5f]}}, &(0x7f0000001900)=""/243, 0xa1, 0xf3, 0x0, 0xa}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r1}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001440)={r3, 0x20, &(0x7f0000001100)={&(0x7f00000000c0)=""/189, 0xbd, 0x0, &(0x7f0000001ac0)=""/180, 0xb4}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x57, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x21, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="7c724399cbc766e72ef6140abd19ce99a6f851176998b67e3390b207c0639f73737bbe38bbfbcbf2d65abbfc039cc090007edf", @ANYRESDEC=r5, @ANYRESDEC=r5, @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b80)={0x24, r9, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffc}]}, 0x24}}, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x7) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) close(0x3) 1.204170755s ago: executing program 9 (id=3999): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) close(r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0xe2a) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x20000000, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r11, r12}, 0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f0000000640)=""/168, 0xa8, 0x0, &(0x7f0000000500)=""/12, 0xc}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x11, &(0x7f0000000a80)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x75, 0xb9, &(0x7f0000000840)=""/185, 0x100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x2, 0x9, 0xc, 0x80000000}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000940), &(0x7f0000000980)=[{0x4, 0x4, 0x10, 0x9}], 0x10, 0x7}, 0x94) 1.190474253s ago: executing program 8 (id=4000): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x6, @random="0c942c97669b"}, 0x4, {0x2, 0x4e1c, @rand_addr=0x64010101}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r4, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2160, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x1406, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x7, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TTL={0x5, 0x8, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) close(r1) (async) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000b00)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000b00)={'batadv0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="012aafcfcb00fedbdf2502000000060028000300000008000300", @ANYRES32=r7], 0x24}}, 0x20008840) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r2) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000009c0)={0x1d8, r10, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xc3, 0x3, "b75b40ac2d1b4ed03b1b65f3c1bde22df3e5fa37b18aced1f73d334294f755cda9b24c5a1f0b71b4a1a51e2f66181c7af33d45c888757934baff8b13fdb2ee7d32c03d8d1d8ff811d8d1d486981bb383d63c7fccf47283bd2d4e5562725118fc79b7e3bfd61e4afce70e65923c0ed9a116585e082e7794ffdd1c13e8d243914c0ae2913b64b34bfbc1d13184bc08859786566e6eea2c715932fd9450403ed5b90359a2c8b15b1b21a862ce30cabab4a02ca47fdbd85cd9b7b1ac1a4b5622e5"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xde95b14f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1600000}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x1}, 0x8050) (async) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000009c0)={0x1d8, r10, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xc3, 0x3, "b75b40ac2d1b4ed03b1b65f3c1bde22df3e5fa37b18aced1f73d334294f755cda9b24c5a1f0b71b4a1a51e2f66181c7af33d45c888757934baff8b13fdb2ee7d32c03d8d1d8ff811d8d1d486981bb383d63c7fccf47283bd2d4e5562725118fc79b7e3bfd61e4afce70e65923c0ed9a116585e082e7794ffdd1c13e8d243914c0ae2913b64b34bfbc1d13184bc08859786566e6eea2c715932fd9450403ed5b90359a2c8b15b1b21a862ce30cabab4a02ca47fdbd85cd9b7b1ac1a4b5622e5"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xde95b14f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1600000}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x1}, 0x8050) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94) 980.524494ms ago: executing program 2 (id=4001): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2040400) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x118) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r6, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r8, 0x104, 0x0, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r10, 0x0, 0xf36, 0x0) write(r3, &(0x7f0000000240)="94", 0x1) tee(r2, r10, 0x8f5, 0x100000000000000) write$cgroup_type(r10, &(0x7f0000000180), 0x9) write(r4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000004700)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r12 = socket$netlink(0x10, 0x3, 0x10) ioctl$INCFS_IOC_PERMIT_FILL(r5, 0x40046721, &(0x7f00000000c0)={r9}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r12, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r12, 0x10e, 0x4, 0x0, 0x0) 849.023222ms ago: executing program 9 (id=4002): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x6, 0x5004, 0x7, 0x1}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000bc0)={0x1d8, 0x0, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_EXPECT_MASK={0xa0, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x15}, @CTA_EXPECT_MASTER={0xb8, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1c}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private2}}}]}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010101}}}]}]}, 0x1d8}}, 0x40881) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301}], {0x14}}, 0x5c}}, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000500)={r3}) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r4) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="635fb97ba8c14188f8ef787eba0b", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000009000b0073797a31000000000900010073797a300000000008000a400000000414000000020a05"], 0x90}}, 0x0) (async) socket(0x10, 0x2, 0xfffffffc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="59cf0000000001000000080000000c0001800600010002000000"], 0x20}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000010000100000000000017b3800f48a95ee30000000c0a000400000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c0000800800034000000002140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 789.177356ms ago: executing program 8 (id=4003): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000000000ae3ff62791c38e3d14ec66e16bf69f66"], 0x28}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000020000103000000000000000180"], 0x28}}, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000640)="000393a08e01f1be5841e773da5303a4bf9fb901aad587309c3991ce4c03ea09508e41574161ebe2d3ac6c96e3ef3d9d8c2a89b8cc97a4c3921e4f475571127df89abde5c7b7fb78c06014ca3df5985edea50f3c53704b7120d2f9651ddcd1fc7dc8a2378114466a4647114e6101bf67212a28529e519cba4813a458d054cc9ab6", 0x81}], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x80, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100ff00142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) (async) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1}}], 0x1, 0x12282, 0x0) (async, rerun: 64) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = accept$netrom(r5, &(0x7f0000000280)={{0x3, @rose}, [@bcast, @netrom, @bcast, @rose, @netrom, @rose, @rose, @null]}, &(0x7f0000000240)=0x72) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000180)={0x2}) (async) accept$netrom(r7, &(0x7f0000000500)={{0x3, @bcast}, [@default, @netrom, @remote, @netrom, @bcast, @netrom, @rose, @bcast]}, &(0x7f0000000100)=0x48) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x5452, &(0x7f0000000a00)={'geneve1\x00', @remote}) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0xfffffc56, 0x0}, 0x2) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xc7, '\x00', 0x86dc, 0x3, 0x100, 0xc}}}}]}, 0x48}}, 0x4000010) (async) close(r8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x50, r1, 0x0) (async) ioctl(r0, 0x10001, &(0x7f0000000340)="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") 692.489625ms ago: executing program 9 (id=4004): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000019c0)=""/4094, 0xffe}, {&(0x7f0000000000)=""/170, 0xaa}, {&(0x7f0000000900)=""/168, 0xa8}, {&(0x7f0000002a40)=""/165, 0xa5}, {&(0x7f0000002b00)=""/159, 0x9f}, {&(0x7f0000000840)=""/124, 0x7c}, {&(0x7f0000000140)=""/28, 0x1c}, {&(0x7f0000000640)=""/11, 0xb}], 0x8}, 0x100) socketpair$unix(0x1, 0x5, 0x0, 0x0) unshare(0x20000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000300)={0x1d, r2}, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r3, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46054) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) close(r3) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="050000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x60}}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r10 = accept(r3, &(0x7f00000003c0)=@generic, &(0x7f0000000280)=0x80) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000540)={r1, r10, 0x23, 0xdb, &(0x7f0000000440)="5eed3d2fb7871e884c518ba0818b18cd2140cf3139052cf16b6e901b938657d8c103437398cb9a6a8f096dca75f95e0abbcafd9a4f9565bdd3f1a7c6e2e8ed838cfb756966c8346b8ba8ae35176a2879c339cf03cc4b69e6a83f3ca869c1636ce175d772daf52bff03661a8ef0bb75c7c285e463efb9b112db93e1031eebf32bbfc87a8755dcc312eb083eb22ac1a0c7db79e38b5c7037efeab91ad1208f325e8d1805549feeef2be29fb5c5d085b67f57dfd867aa8b565902ca3b93c23157343c20a50292d2b44ef4b556710d66ded860f7498e329f6c991c3091", 0xd, 0x10, 0x5, 0xda, 0x9, 0x2, 0x1ff, 'syz0\x00'}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) 563.426712ms ago: executing program 8 (id=4005): mmap(&(0x7f0000569000/0x2000)=nil, 0x2000, 0x100000d, 0x110, 0xffffffffffffffff, 0x853e4000) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r4, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$sock(r6, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x20000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_DELOBJ={0x58, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4802d4bc684fb4e3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "6fd5b6a9cc16ed632cb31fa4ef23a376"}]}, 0x30}, 0x1, 0x0, 0x0, 0x24010014}, 0x40000) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@int=0x5, 0x4) socket$igmp(0x2, 0x3, 0x2) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f00000006c0)=0x90) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r11, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r11, 0x84, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000700)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780), 0x0, 0x44, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xec, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) setsockopt$inet6_IPV6_PKTINFO(r11, 0x29, 0x32, &(0x7f0000000a40)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r12}, 0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0xef5f528767c00701, 0x3, 0x0, 0x3}]}, &(0x7f0000000140)='syzkaller\x00', 0x82, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x3, 0x2, 0x6, 0x5}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000c80), 0x0, 0x10, 0x8}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000005c0)={0xffffffffffffffff, 0x9}) socket$nl_route(0x10, 0x3, 0x0) 516.486376ms ago: executing program 2 (id=4006): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000001c0)=0xd4, 0x4) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000200)={0x21, "2b26967d6a9198b7f2bd7c56178786b1f8020ad0f1a305d785f12685418394dc4c4a142b9321b1ad752a8dce289663f4a1b94c2d5cf77974182df285cf961d45e06ec1b7a10f962df723d2de1b52da87052baec63839afcb496b66525beb1e1f355959012095db9b0c9b87332d79f29f9a8629beabceea460a02a9fbefe280b3"}) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r4, &(0x7f00000002c0)="c837cebb8d7f4022bfee2325bb4a53e4f066557465729c07839d687aae7fb9ca46683d19ac33396b7d388da611b7c231c0282efc3899e7f107740e80fc31a9f00849658b59e5f508e1c801166b623647bfe195bacb5ad5380b463d41b59c02ac5d26ac0bf441fecde82166230748278170d14e63b741715fb24051566a034b726e12826e53ff5bd0db50a56351f89f093aa62f0f1893c7d19050462ead5d0ad7cad91357b81effb8bb1a1ad70ec50d46fb3c790a038b71b9aadc84ad5e86afb6355432698c2cbd20df7373375d7e9d32be07459a07f54c9b57f8f8d6236836b75a", 0xe1, 0x10004, &(0x7f00000003c0)={0xa, 0x0, 0xb0f, @rand_addr=' \x01\x00', 0x31, 0x1}, 0x20) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r5, &(0x7f0000000400)={0x2, 0x0, @local, 0x3}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000480)=0xe, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r8, 0xc0096616, &(0x7f00000004c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000500)={0x0, @empty, @multicast1}, &(0x7f0000000540)=0xc) setsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000580)={r10, @dev={0xac, 0x14, 0x14, 0x43}, @private=0xa010101}, 0xc) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$BTRFS_IOC_SYNC(r9, 0x9408, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000840)={0x0}, &(0x7f0000000880)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000008c0)=0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) r15 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000980)=0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000009c0)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000ac0)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000b00)={0x0, 0x0, 0x0}, &(0x7f0000000b40)=0xc) r19 = epoll_create(0x9) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000640)="72d2aa1ccba1d7679987a4a976dcbccc70fb9c7d2519a7ee095f8b3c8c7f58ff0a974eb9966631b3b49524b970ff47a4d8e7efa12f7ee9fca8aab94c366a980768ec2018a6f073a6f56b78f40dfdd3ebb02634b4a609c561c274f4d76576", 0x5e}, {&(0x7f00000006c0)="86187e57fbfd04c51e46429575fb9611efb666a10ebf732c111de55369de80c69ee3d2cefe98dfbdba9b49e53bd87a091a67b877a56a4426fdfbdc5533e5b2831a9b668ac78f40", 0x47}, {&(0x7f0000000740)="692f6d22d80645fc30dc57822cca8b239dfcd9bbf02b94cabb148b62dc414bf001f8cf1b1fd5efa91367bbbee5b8690f57f56413211712478b34fedd36f89c3ee8b6488ccf9b8f825af4802330894a4744c51541f890ce5ec3ae43546ee5aead62aa6b68505c3fbacc82efa8208e1bf775f8da94fd3ecfaeddce7b84ab3a7bce9dbffbd2585adb729f5ffab82953bdcfcbe88018db6ca9773fe75e2b4707807493608e23b606", 0xa6}], 0x3, &(0x7f0000000dc0)=[@cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @rights={{0x28, 0x1, 0x1, [r15, r11, r9, r4, r4, r4]}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @rights={{0x20, 0x1, 0x1, [r11, r7, r7, r19]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @cred={{0x1c}}], 0xc0, 0x40010}, 0x8004) 436.448806ms ago: executing program 3 (id=4007): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000240)="ce010000009a697f65360c5e86dd", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x58, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) 396.816551ms ago: executing program 8 (id=4008): unshare(0xc020400) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r3, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40006) socket$inet(0x2, 0xa, 0x3) unshare(0x26000200) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r5, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r5, 0x400454cd, 0x10e) socket$pppl2tp(0x18, 0x1, 0x1) 346.580832ms ago: executing program 9 (id=4009): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='Y', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r0, 0x1) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000380)={0x0, 0x3, 0x5, 0x8, 0x8001, 0x1}, &(0x7f00000003c0)=0x14) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r4, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) writev(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)="1e2a9bd6b95a1d4c34795c563a02c88f66d4c633b4f8aae9f51b4192ce414fd5fb686174fc07a0341a9878268cdd00be59aa522ab7fe2a5028f2887ab4fe0173c004d9df513a33cd17aacc110ca486d8f76067165bc4065bcbf535ffed3b3658959d7e2c36e64140fe6e32092c8ce8b892e92e90c0ae4e114b812bee5d5c831aed036af871e0eb009b8d2d1375f627463ee0a97ae8a911624a81d56c6eab5fb16bcf09327a12232ae69f38da0f779afad0d47d4204f68a39f3415d337eb8ffbe525fc41cd62f8fedc38d1562075dbc", 0xcf}, {&(0x7f0000000240)="04940da17d1ba85728b016da2fc16e93086968e517f01fb37f436d5535fc232ac2d80ad0a62ac8e7525a94cba29c6b15793c6d4374fb501bcef53cf2f3c886039613e52009df041f47ccba8e3aef12ae5b261694b430f4e7b007ff42c57b87c41414fcf1b30a9445ba8b1a010493ae5094a98aad54cb38164e4c93ebf37d5a50befcd81664547ef5b652", 0x8a}, {&(0x7f0000000400)="dcd7d910c3c048fbcf94a1af1b194b956871f2834111c24cdf4dfb60d91c36a1d0ee7a44942a8a0d012a99a29e0771467ba1f931bdfea475e785928555b18c092ebf49b3076745e58cd3ff62f54f5e2de1207872b3357d18fdc6658be4a3b9dee7f4186d9fcbbb643149634dd58edc19b6704103963410608f2c827b6e3c884b1a8e8fe76ac2a7b83654514b0dc5e06431b6897626f181808471366e11cf88211dcc747ac479df722aec61ab9add3ebbab22", 0xb2}, {&(0x7f00000004c0)="36691877fd596a9bad368c03b9aab8d5b96b3c0b13d7fb011a25e7b13e3dfe3c956b1f8c6e4f52dd1d8812f31e7a759e13a62754e26172e1e1548d32f870bb6dbe84a562059cdc6b552dbb12a7f5277857f66398cedb4cf054dbe818b19d0dc4bc6b31f0ead5347e5d692190d1d3677f49b1f76677c621ecb71cf4fb7b41a5fc9254db35f3b313579c08e4077f7bd883f732728d9252a491fa3864008f26600fcc6da0b18209ff503186b6c37e9ea5a99a77be176bf86fb7708b7170d023a92e4d1acdafb37551ab3111f706b9da3a74761f10fc1c5995f16563ce8afb380acf13d40a03b7", 0xe5}, {&(0x7f00000005c0)="b82492cf00bfbcf13815ac6623aa117d886a83f1f24ab67fba0319666c49942953ddfd0e0be75cb614c656db0412bc72f86a0a998dbe3ec5773687e4623b8712db4ae7554446a66621ad5c3e40ed93bf325285351ee052806ebad0f03c35bb06ad83f1f94771ad28b13280f67dd491195e49f542153e090c9960d668b815a7067e8fcafac60dc32359709b26d89bdc33c023e4a955e6e76471fdbc8bac31513beebbb0a34b0feb2faae720134b42ffa74290863f573e78b0995c", 0xba}], 0x5) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000900)=0x3, 0x4) (async) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, 0x1403, 0x8, 0x70bd26, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, 0x0) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x6}, 0xc) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r7, 0x8002f515, &(0x7f00000006c0)) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x30, 0x60, 0x54, 0xfffff018}, {0x6, 0x8, 0x8, 0x6}]}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x33c86039957813b9}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0xfd3}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x8}]}}]}, 0x40}}, 0x48180) 292.686382ms ago: executing program 2 (id=4010): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e00010000000000000000000003000008000100", @ANYRESDEC=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 292.499006ms ago: executing program 3 (id=4011): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000020600bef1fdeb00"/20, @ANYRES32=0x0, @ANYBLOB="0101020000000000140012800b0001006970766c616e00000400028008000400ffffffff"], 0x3c}, 0x1, 0xba01, 0x0, 0x80}, 0x810) 292.137484ms ago: executing program 4 (id=3916): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x8, 0x10000, 0x4, 0x2, 0x10000, r0, 0x6, '\x00', r1, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x0, @void, @value, @value=r3}, 0x50) (async) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000000d]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x28, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7fff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80004}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x4000800) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) 199.577091ms ago: executing program 4 (id=4012): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg(r1, &(0x7f0000004440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[{0x10, 0x1, 0x1}, {0x10, 0x110, 0x1}], 0x20}}], 0x1, 0x20000040) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x7}, @in6={0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb}], 0x64) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x43, 0x3}, 0x2}}, 0x10) 190.1207ms ago: executing program 3 (id=4013): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x25, 0x1, 0x70bd2a, 0x25dfdbff, {0x8}, [@typed={0x6, 0x1, 0x0, 0x0, @str='&\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000880) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="182844000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={r4, 0x8ab, 0x20}, 0xc) write(r2, &(0x7f00000002c0)="23000000010006", 0x7) (async) write(r2, &(0x7f00000002c0)="23000000010006", 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x3}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x3}}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c0002800600020020"], 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00'}) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r9, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r9, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r10}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20) setsockopt$inet_mreq(r7, 0x0, 0x24, &(0x7f0000000240)={@broadcast, @rand_addr=0x64010101}, 0x8) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) (async) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$AUDIT_TRIM(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f6, 0x8, 0x5, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) setsockopt$inet6_udp_int(r6, 0x11, 0xb, &(0x7f0000000100)=0xfffffffa, 0x4) (async) setsockopt$inet6_udp_int(r6, 0x11, 0xb, &(0x7f0000000100)=0xfffffffa, 0x4) 114.924909ms ago: executing program 9 (id=4015): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000290427bd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0c340000f27806002000000000000100626f6e645f736c61766500000c0005800600050000000000"], 0x40}, 0x1, 0x0, 0x0, 0x8044}, 0x52) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r3) 60.924913ms ago: executing program 8 (id=4016): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3e8}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x4, 0x4, 0xfffffffd, 0x1}, 0x10) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe0000000002000008", 0x1d) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x30) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 0s ago: executing program 3 (id=4017): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x1000d}, 0x1c) listen(r1, 0x6) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc000000190001002dbd7000000000000000f5ff000000000000000000000004f4ffffffffffff00000000000000000000000000000a00000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r4, 0x0, 0x2c, 0x4004800, &(0x7f0000000180)={0xa, 0x4e22, 0x10003, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) kernel console output (not intermixed with test programs): _file:159648kB unevictable:1536kB writepending:384kB present:3129332kB managed:2566256kB mlocked:0kB bounce:0kB free_pcp:34088kB local_pcp:25436kB free_cma:0kB [ 410.418598][T15459] lowmem_reserve[]: 0 0 0 0 0 [ 410.423373][T15459] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 410.493424][T15459] lowmem_reserve[]: 0 0 0 0 0 [ 410.507059][T15486] netlink: 'syz.9.2307': attribute type 10 has an invalid length. [ 410.515563][T15459] Node 1 Normal free:3894464kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15392kB local_pcp:6464kB free_cma:0kB [ 410.548260][T15459] lowmem_reserve[]: 0 0 0 0 0 [ 410.553017][T15459] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 410.567236][T15459] Node 0 DMA32: 2415*4kB (UME) 2169*8kB (UME) 1393*16kB (UME) 912*32kB (UME) 174*64kB (UME) 41*128kB (UME) 22*256kB (UME) 54*512kB (UME) 35*1024kB (UME) 10*2048kB (UME) 228*4096kB (UME) = 1118356kB [ 410.587190][T15459] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 410.603940][T15459] Node 1 Normal: 206*4kB (UM) 55*8kB (UME) 49*16kB (UME) 182*32kB (UME) 48*64kB (UME) 10*128kB (UME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3894464kB [ 410.627568][T15459] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 410.638621][T15459] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 410.648991][T15459] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 410.661202][T15459] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 410.670736][T15459] 44783 total pagecache pages [ 410.675587][T15459] 0 pages in swap cache [ 410.686996][T15459] Free swap = 124996kB [ 410.693653][T15459] Total swap = 124996kB [ 410.698171][T15459] 2097051 pages RAM [ 410.702136][T15459] 0 pages HighMem/MovableOnly [ 410.715174][T15459] 423781 pages reserved [ 410.721097][T15459] 0 pages cma reserved [ 410.921091][T15502] netlink: 'syz.9.2310': attribute type 30 has an invalid length. [ 411.421425][T15524] 8021q: VLANs not supported on caif0 [ 411.446439][T15529] tipc: Enabled bearer , priority 0 [ 411.455470][T15529] syzkaller0: entered promiscuous mode [ 411.475746][T15526] siw: device registration error -23 [ 411.489356][T15529] syzkaller0: entered allmulticast mode [ 411.529186][T15529] tipc: Resetting bearer [ 411.549877][T15528] tipc: Resetting bearer [ 411.703542][T15528] tipc: Disabling bearer [ 411.729678][T15542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 411.855647][T15549] 8021q: adding VLAN 0 to HW filter on device bond4 [ 412.065800][T15558] sctp: [Deprecated]: syz.9.2325 (pid 15558) Use of int in max_burst socket option deprecated. [ 412.065800][T15558] Use struct sctp_assoc_value instead [ 412.320804][T15590] __nla_validate_parse: 7 callbacks suppressed [ 412.320826][T15590] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2335'. [ 412.344819][T15590] 0ªX¹¦À: left allmulticast mode [ 412.371834][T15590] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2335'. [ 412.432200][T15590] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 412.498468][T15598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2337'. [ 412.506535][T15592] wg1 speed is unknown, defaulting to 1000 [ 412.516553][T15592] virt_wifi0 speed is unknown, defaulting to 1000 [ 412.523426][T15598] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2337'. [ 412.536242][T15598] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2337'. [ 412.552866][T15598] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2337'. [ 412.553425][T15600] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20004 [ 412.584313][T15598] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2337'. [ 412.591084][T15596] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2335'. [ 412.602152][T15598] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2337'. [ 412.625007][T15598] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2337'. [ 413.002872][T15598] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.011245][T15598] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.344371][T15598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.678083][T15592] lo speed is unknown, defaulting to 1000 [ 413.689391][T10429] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.731026][T10429] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 413.770693][T10429] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.790922][T10429] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 413.825605][T15610] wg1 speed is unknown, defaulting to 1000 [ 413.831838][T10429] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.850435][T10429] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 413.884970][T15610] virt_wifi0 speed is unknown, defaulting to 1000 [ 413.887683][T10429] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.911423][T10429] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 413.934087][T15610] lo speed is unknown, defaulting to 1000 [ 414.344164][T15652] wg1 speed is unknown, defaulting to 1000 [ 414.399703][T15652] virt_wifi0 speed is unknown, defaulting to 1000 [ 414.425403][T15655] wg1 speed is unknown, defaulting to 1000 [ 414.427121][T15652] lo speed is unknown, defaulting to 1000 [ 414.447990][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 414.490333][T15655] virt_wifi0 speed is unknown, defaulting to 1000 [ 414.547613][T15655] lo speed is unknown, defaulting to 1000 [ 415.440968][T15722] netlink: 'syz.8.2370': attribute type 6 has an invalid length. [ 415.468670][T15722] netlink: 'syz.8.2370': attribute type 7 has an invalid length. [ 415.495359][T15722] netlink: 'syz.8.2370': attribute type 8 has an invalid length. [ 415.551919][T15728] wg1 speed is unknown, defaulting to 1000 [ 415.577619][T15728] virt_wifi0 speed is unknown, defaulting to 1000 [ 415.590998][T15733] veth0_to_bridge: left allmulticast mode [ 415.597335][T15733] veth1_to_bridge: left allmulticast mode [ 415.611765][T15733] bridge1: left allmulticast mode [ 415.617284][T15733] bridge2: left promiscuous mode [ 415.623834][T15733] bridge2: left allmulticast mode [ 415.642510][T15733] vlan2: left allmulticast mode [ 415.654003][T15735] vxcan2: entered promiscuous mode [ 415.665463][T15728] lo speed is unknown, defaulting to 1000 [ 415.898988][T15744] wg1 speed is unknown, defaulting to 1000 [ 415.906071][T15744] virt_wifi0 speed is unknown, defaulting to 1000 [ 415.914836][T15744] lo speed is unknown, defaulting to 1000 [ 417.050042][T15816] netlink: 'syz.2.2394': attribute type 12 has an invalid length. [ 417.058578][T15816] netlink: 'syz.2.2394': attribute type 29 has an invalid length. [ 417.087532][T15816] netlink: 'syz.2.2394': attribute type 7 has an invalid length. [ 417.095630][T15816] netlink: 'syz.2.2394': attribute type 8 has an invalid length. [ 417.344956][T15833] wg1 speed is unknown, defaulting to 1000 [ 417.366883][T15833] virt_wifi0 speed is unknown, defaulting to 1000 [ 417.385364][T15838] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 417.416342][T15840] __nla_validate_parse: 179 callbacks suppressed [ 417.416361][T15840] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2402'. [ 417.427009][T15837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2401'. [ 417.438887][T15840] netlink: 'syz.8.2402': attribute type 8 has an invalid length. [ 417.452476][T15840] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2402'. [ 417.562104][T15833] lo speed is unknown, defaulting to 1000 [ 417.572792][T15840] geneve2: entered promiscuous mode [ 417.579442][T15840] geneve2: entered allmulticast mode [ 417.590269][T15837] bridge_slave_1: left allmulticast mode [ 417.596449][T15837] bridge_slave_1: left promiscuous mode [ 417.658617][T15837] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.675909][T15837] bridge_slave_0: left allmulticast mode [ 417.683998][T15837] bridge_slave_0: left promiscuous mode [ 417.696275][T15837] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.895126][ T8402] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.920661][ T8402] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.932836][ T8402] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.959382][ T8402] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.136180][T15863] netlink: 'syz.4.2406': attribute type 13 has an invalid length. [ 418.144621][T15863] netlink: 'syz.4.2406': attribute type 17 has an invalid length. [ 418.169164][T15866] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2408'. [ 418.406775][T15882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2411'. [ 418.420618][T15863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.468952][T15863] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.510491][T15863] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 418.548802][T15878] netlink: 428 bytes leftover after parsing attributes in process `syz.8.2410'. [ 418.619464][ T5962] lo speed is unknown, defaulting to 1000 [ 418.625731][ T5962] syz2: Port: 1 Link ACTIVE [ 418.803354][T15878] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2410'. [ 418.857702][T15897] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2414'. [ 418.873238][T13778] udevd[13778]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 418.938334][T15899] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2414'. [ 419.144535][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2420'. [ 419.192107][T15910] bond0: entered promiscuous mode [ 419.197193][T15910] bond0: entered allmulticast mode [ 419.203686][T15910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.233601][T15907] wg1 speed is unknown, defaulting to 1000 [ 419.241610][T15907] virt_wifi0 speed is unknown, defaulting to 1000 [ 419.251003][T15907] lo speed is unknown, defaulting to 1000 [ 419.345037][T15910] wg1 speed is unknown, defaulting to 1000 [ 419.355400][T15910] virt_wifi0 speed is unknown, defaulting to 1000 [ 419.364457][T15910] lo speed is unknown, defaulting to 1000 [ 419.622502][T15926] team0: Mode changed to "activebackup" [ 420.784083][T15997] syzkaller0: entered promiscuous mode [ 420.790697][T15997] syzkaller0: entered allmulticast mode [ 421.492015][T16029] wg1 speed is unknown, defaulting to 1000 [ 421.547722][T16029] virt_wifi0 speed is unknown, defaulting to 1000 [ 421.620246][T16029] lo speed is unknown, defaulting to 1000 [ 421.778636][T16051] validate_nla: 5 callbacks suppressed [ 421.778655][T16051] netlink: 'syz.4.2459': attribute type 3 has an invalid length. [ 421.847724][T16051] netlink: 'syz.4.2459': attribute type 16 has an invalid length. [ 421.919923][T16054] netlink: zone id is out of range [ 421.933064][T16054] netlink: zone id is out of range [ 421.939122][T16054] netlink: zone id is out of range [ 421.944389][T16054] netlink: zone id is out of range [ 421.950333][T16054] netlink: zone id is out of range [ 421.955630][T16054] netlink: get zone limit has 8 unknown bytes [ 422.547006][T16089] netlink: 'syz.2.2470': attribute type 13 has an invalid length. [ 422.555025][T16089] __nla_validate_parse: 13 callbacks suppressed [ 422.555043][T16089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2470'. [ 422.979081][T16119] netlink: 'syz.9.2479': attribute type 1 has an invalid length. [ 423.000305][T16119] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2479'. [ 423.043666][T16116] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2479'. [ 423.127270][T16123] wg1 speed is unknown, defaulting to 1000 [ 423.134201][T16125] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2481'. [ 423.181036][T16123] virt_wifi0 speed is unknown, defaulting to 1000 [ 423.227478][T16123] lo speed is unknown, defaulting to 1000 [ 423.558811][T16152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2490'. [ 423.624546][T16156] netlink: 'syz.4.2491': attribute type 10 has an invalid length. [ 423.640573][T16156] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2491'. [ 423.703288][T16156] team0: Port device geneve0 added [ 423.711091][ T8402] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.720301][ T8402] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.746838][ T8402] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.778533][ T8402] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.892670][T16174] netlink: 'syz.9.2495': attribute type 5 has an invalid length. [ 423.977010][T16176] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2496'. [ 424.080080][T16183] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2498'. [ 424.115728][T16190] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2500'. [ 424.203702][T16193] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.260706][T16185] wg1 speed is unknown, defaulting to 1000 [ 424.280363][T16185] virt_wifi0 speed is unknown, defaulting to 1000 [ 424.313595][T16185] lo speed is unknown, defaulting to 1000 [ 424.335716][T16200] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2503'. [ 424.350549][T16193] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.464819][T16193] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.536835][T16193] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.051474][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.079691][T16232] wg1 speed is unknown, defaulting to 1000 [ 425.098734][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.124644][T16232] virt_wifi0 speed is unknown, defaulting to 1000 [ 425.173892][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.203743][T16232] lo speed is unknown, defaulting to 1000 [ 425.214621][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.506369][T16254] netlink: 'syz.3.2511': attribute type 1 has an invalid length. [ 425.570057][ T5852] Bluetooth: hci7: command 0x0405 tx timeout [ 426.864700][T16321] netlink: 'syz.4.2532': attribute type 7 has an invalid length. [ 426.872764][T16321] netlink: 'syz.4.2532': attribute type 8 has an invalid length. [ 427.235038][T16346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.454366][ T5906] IPVS: starting estimator thread 0... [ 427.578342][T16363] IPVS: using max 24 ests per chain, 57600 per kthread [ 427.587033][T16366] : entered promiscuous mode [ 427.651223][T16378] wg1 speed is unknown, defaulting to 1000 [ 427.662605][T16378] virt_wifi0 speed is unknown, defaulting to 1000 [ 427.675997][T16378] lo speed is unknown, defaulting to 1000 [ 427.960285][T16389] __nla_validate_parse: 8 callbacks suppressed [ 427.960304][T16389] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2552'. [ 427.989070][T16401] netlink: 'syz.4.2555': attribute type 1 has an invalid length. [ 427.990040][T16389] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2552'. [ 428.100787][T16401] bond5: entered promiscuous mode [ 428.107490][T16401] 8021q: adding VLAN 0 to HW filter on device bond5 [ 428.141735][T16389] vlan4: entered promiscuous mode [ 428.213938][T16413] netlink: 'syz.2.2557': attribute type 13 has an invalid length. [ 428.306344][T16413] wg1 speed is unknown, defaulting to 1000 [ 428.363908][T16413] virt_wifi0 speed is unknown, defaulting to 1000 [ 428.442613][T16413] lo speed is unknown, defaulting to 1000 [ 428.511492][T16426] sctp: [Deprecated]: syz.3.2561 (pid 16426) Use of int in maxseg socket option. [ 428.511492][T16426] Use struct sctp_assoc_value instead [ 428.531610][T16430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2561'. [ 428.811025][T16446] netlink: 'syz.8.2567': attribute type 2 has an invalid length. [ 428.820155][T16447] netlink: 'syz.8.2567': attribute type 2 has an invalid length. [ 428.828420][T16447] netlink: 'syz.8.2567': attribute type 8 has an invalid length. [ 428.829871][T16446] netlink: 'syz.8.2567': attribute type 8 has an invalid length. [ 428.836524][T16447] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2567'. [ 428.863915][T16446] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2567'. [ 429.070866][T16449] syzkaller1: entered promiscuous mode [ 429.085367][T16449] syzkaller1: entered allmulticast mode [ 429.316070][T16458] syzkaller0: entered promiscuous mode [ 429.323599][T16458] syzkaller0: entered allmulticast mode [ 429.441404][T16463] netlink: 'syz.4.2575': attribute type 1 has an invalid length. [ 429.476923][T16470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2576'. [ 431.544835][T16468] gretap1: entered allmulticast mode [ 431.612596][T16468] bond1: (slave gretap1): making interface the new active one [ 431.622332][T16468] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 431.684263][T16477] netlink: 220 bytes leftover after parsing attributes in process `syz.9.2577'. [ 431.711576][T16460] wg1 speed is unknown, defaulting to 1000 [ 431.725172][T16460] virt_wifi0 speed is unknown, defaulting to 1000 [ 431.728771][T16465] wg1 speed is unknown, defaulting to 1000 [ 431.762465][T16460] lo speed is unknown, defaulting to 1000 [ 431.762483][T16465] virt_wifi0 speed is unknown, defaulting to 1000 [ 431.824806][T16465] lo speed is unknown, defaulting to 1000 [ 431.872903][T16522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2580'. [ 432.676626][T16550] tipc: Enabled bearer , priority 0 [ 432.784830][T10426] tipc: Resetting bearer [ 432.794270][T16553] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2589'. [ 432.906751][T16562] netlink: 'syz.2.2591': attribute type 13 has an invalid length. [ 432.915112][T16562] netlink: 'syz.2.2591': attribute type 17 has an invalid length. [ 432.995509][T16564] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2593'. [ 433.083395][T16562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.103400][T16570] netlink: 'syz.8.2596': attribute type 1 has an invalid length. [ 433.105951][T16562] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.141851][T16562] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 433.195991][T16570] bond5: entered promiscuous mode [ 433.201821][T16570] bond5: entered allmulticast mode [ 433.207576][T16570] 8021q: adding VLAN 0 to HW filter on device bond5 [ 433.253463][T16570] 8021q: adding VLAN 0 to HW filter on device bond6 [ 433.268942][T16570] bond6: entered promiscuous mode [ 433.283195][T16570] bond6: entered allmulticast mode [ 433.322668][T16570] bond5: (slave bond6): Enslaving as a backup interface with a down link [ 433.344353][T16582] netlink: 'syz.3.2598': attribute type 1 has an invalid length. [ 433.371603][T16582] netlink: 'syz.3.2598': attribute type 1 has an invalid length. [ 433.481231][T16585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2600'. [ 433.561822][T16587] wg1 speed is unknown, defaulting to 1000 [ 433.611836][T16587] virt_wifi0 speed is unknown, defaulting to 1000 [ 433.641805][T16587] lo speed is unknown, defaulting to 1000 [ 433.661914][T16594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2604'. [ 433.863057][T16603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2605'. [ 433.950663][T16608] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2606'. [ 433.982039][T16601] syzkaller1: entered promiscuous mode [ 433.987559][T16601] syzkaller1: entered allmulticast mode [ 434.062699][T16608] netlink: 'syz.4.2606': attribute type 3 has an invalid length. [ 434.139922][T16609] syz_tun: entered allmulticast mode [ 434.147636][T16609] siw: device registration error -23 [ 434.154102][T16608] siw: device registration error -23 [ 434.223029][T16608] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 434.324325][T16609] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 434.367003][T16619] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2608'. [ 434.443266][T16619] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2608'. [ 434.467605][T16609] syz_tun: left allmulticast mode [ 434.678772][T16630] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2613'. [ 434.992572][T16651] wg1 speed is unknown, defaulting to 1000 [ 435.015559][T16651] virt_wifi0 speed is unknown, defaulting to 1000 [ 435.025041][T16651] lo speed is unknown, defaulting to 1000 [ 435.039371][T16650] nbd4: detected capacity change from 0 to 63 [ 435.054026][T16652] block nbd4: NBD_DISCONNECT [ 435.083453][T16652] block nbd4: Disconnected due to user request. [ 435.108412][T16652] block nbd4: shutting down sockets [ 435.130502][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 435.139928][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 435.150714][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 435.159861][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 435.167707][ C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 435.176790][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 435.184737][ C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 435.193826][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 435.204168][T16657] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2620'. [ 435.215117][T16221] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 435.255873][T16221] Buffer I/O error on dev nbd4, logical block 0, async page read [ 435.265817][T16661] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 435.291324][T16221] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 435.308458][T16221] Buffer I/O error on dev nbd4, logical block 1, async page read [ 435.316466][T16221] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 435.388352][T16221] Buffer I/O error on dev nbd4, logical block 2, async page read [ 435.399456][T16221] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 435.435144][T16221] Buffer I/O error on dev nbd4, logical block 3, async page read [ 435.454388][T16221] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 435.464134][T16674] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2622'. [ 435.475682][T16221] Buffer I/O error on dev nbd4, logical block 0, async page read [ 435.490361][T16221] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 435.544702][T16221] Buffer I/O error on dev nbd4, logical block 1, async page read [ 435.595227][T16221] ldm_validate_partition_table(): Disk read failed. [ 435.640087][T16221] Dev nbd4: unable to read RDB block 0 [ 435.674521][T16221] nbd4: unable to read partition table [ 435.749730][T16221] ldm_validate_partition_table(): Disk read failed. [ 435.779291][T16221] Dev nbd4: unable to read RDB block 0 [ 435.836605][T16221] nbd4: unable to read partition table [ 436.270510][T16727] netlink: 'syz.9.2638': attribute type 1 has an invalid length. [ 436.304260][T16730] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 436.313231][T16727] bond3: entered promiscuous mode [ 436.320279][T16727] bond3: entered allmulticast mode [ 436.325920][T16727] 8021q: adding VLAN 0 to HW filter on device bond3 [ 436.433076][T16739] netlink: 'syz.2.2640': attribute type 1 has an invalid length. [ 437.045887][T16775] tipc: Enabled bearer , priority 0 [ 437.075337][T16775] syzkaller0: entered promiscuous mode [ 437.081563][T16775] syzkaller0: entered allmulticast mode [ 437.136155][T16773] tipc: Resetting bearer [ 437.182488][T16773] tipc: Disabling bearer [ 437.677654][T16824] erspan0: entered promiscuous mode [ 437.692984][T16824] erspan0: entered allmulticast mode [ 437.806261][T16829] tun0: tun_chr_ioctl cmd 1074025675 [ 437.808852][T16830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.819163][T16829] tun0: persist enabled [ 437.833869][T16829] tun0: tun_chr_ioctl cmd 1074025675 [ 437.840272][T16829] tun0: persist enabled [ 438.047187][T16845] vlan0: entered promiscuous mode [ 438.062118][T16845] vlan0: entered allmulticast mode [ 438.070805][T16845] veth0_vlan: entered allmulticast mode [ 438.220760][T16855] netlink: 'syz.3.2670': attribute type 3 has an invalid length. [ 438.232718][T16855] __nla_validate_parse: 6 callbacks suppressed [ 438.232735][T16855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2670'. [ 438.237160][T16853] wg1 speed is unknown, defaulting to 1000 [ 438.257509][T16853] virt_wifi0 speed is unknown, defaulting to 1000 [ 438.264788][T16855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2670'. [ 438.269112][T16853] lo speed is unknown, defaulting to 1000 [ 438.282572][T16857] netlink: 'syz.2.2669': attribute type 12 has an invalid length. [ 438.285242][T16855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2670'. [ 438.853702][T16886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2677'. [ 438.878786][T16888] pim6reg1: entered allmulticast mode [ 439.353575][ T3545] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.364160][ T3545] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.406550][ T3545] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.493686][ T3545] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.533952][T16920] bridge0: port 4(vlan4) entered blocking state [ 439.544169][T16920] bridge0: port 4(vlan4) entered disabled state [ 439.552190][T16920] vlan4: entered allmulticast mode [ 439.559466][T16920] bridge0: entered allmulticast mode [ 439.590341][T16920] vlan4: left allmulticast mode [ 439.595269][T16920] bridge0: left allmulticast mode [ 439.707056][T16936] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.063191][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.074481][T16952] netlink: 'syz.3.2690': attribute type 10 has an invalid length. [ 440.081925][ T5962] IPVS: starting estimator thread 0... [ 440.191278][T16955] IPVS: using max 27 ests per chain, 64800 per kthread [ 440.549749][T16971] netlink: 96 bytes leftover after parsing attributes in process `syz.9.2695'. [ 440.620660][T16976] sctp: [Deprecated]: syz.3.2702 (pid 16976) Use of struct sctp_assoc_value in delayed_ack socket option. [ 440.620660][T16976] Use struct sctp_sack_info instead [ 440.655759][T16976] netlink: 'syz.3.2702': attribute type 4 has an invalid length. [ 441.306123][T16996] geneve3: entered promiscuous mode [ 441.333550][T16996] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2708'. [ 441.344880][T16998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2709'. [ 441.390978][T16996] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2708'. [ 442.202752][T17024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2714'. [ 442.416042][T17051] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 442.613546][T17061] netlink: 'syz.2.2726': attribute type 21 has an invalid length. [ 442.657933][T17061] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2726'. [ 443.124418][T17089] 8021q: adding VLAN 0 to HW filter on device bond7 [ 443.303531][T17100] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.404205][T17100] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.488932][T17100] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.571040][T17100] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.624315][T17113] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 443.642764][T17113] bond8 (unregistering): Released all slaves [ 443.686004][T17117] __nla_validate_parse: 1 callbacks suppressed [ 443.686019][T17117] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2742'. [ 443.762957][T17120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2743'. [ 443.825463][T10429] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.850042][T17125] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2744'. [ 443.864111][T10426] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.906522][ T3481] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.942903][T17120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2743'. [ 443.943059][ T752] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.025878][T17125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2744'. [ 444.275670][T17141] 8021q: adding VLAN 0 to HW filter on device bond8 [ 444.310141][T17141] bridge0: port 1(bond8) entered blocking state [ 444.327408][T17141] bridge0: port 1(bond8) entered disabled state [ 444.334239][T17141] bond8: entered allmulticast mode [ 444.342408][T17141] bond8: entered promiscuous mode [ 444.417253][T17151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2750'. [ 444.567240][T17148] bridge3: entered allmulticast mode [ 444.610242][T17148] af_packet: tpacket_rcv: packet too big, clamped from 84 to 4294967272. macoff=96 [ 444.630230][T17156] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2752'. [ 444.659776][T17157] bond0: (slave rose0): Error: Device can not be enslaved while up [ 444.866358][T17170] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2753'. [ 444.942502][T17177] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2757'. [ 444.964005][T17177] 8021q: VLANs not supported on ipvlan1 [ 445.005025][T17177] macsec1: entered promiscuous mode [ 445.012310][T17177] macsec1: entered allmulticast mode [ 445.793962][T17206] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2765'. [ 446.113933][T17230] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 447.381218][T17288] netlink: 'syz.2.2785': attribute type 21 has an invalid length. [ 447.390996][T17288] netlink: 'syz.2.2785': attribute type 4 has an invalid length. [ 447.402478][T17286] openvswitch: netlink: Flow actions attr not present in new flow. [ 447.541160][T17299] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 448.818461][T17364] __nla_validate_parse: 5 callbacks suppressed [ 448.818479][T17364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2808'. [ 448.972812][T17374] netlink: 'syz.4.2811': attribute type 6 has an invalid length. [ 449.108348][T17379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2813'. [ 449.117304][T17379] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2813'. [ 449.129339][T17381] netlink: 'syz.8.2817': attribute type 32 has an invalid length. [ 450.107604][T17439] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2825'. [ 450.285448][T17449] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2829'. [ 450.322609][T17450] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2829'. [ 450.978979][T17476] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 450.987067][T17476] CPU: 1 UID: 0 PID: 17476 Comm: syz.2.2835 Not tainted syzkaller #0 PREEMPT(full) [ 450.987096][T17476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 450.987108][T17476] Call Trace: [ 450.987116][T17476] [ 450.987125][T17476] dump_stack_lvl+0x189/0x250 [ 450.987158][T17476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.987184][T17476] ? __pfx__printk+0x10/0x10 [ 450.987226][T17476] ? kernfs_path_from_node+0x2f/0x290 [ 450.987247][T17476] ? kernfs_path_from_node+0x250/0x290 [ 450.987265][T17476] ? kernfs_path_from_node+0x2f/0x290 [ 450.987291][T17476] sysfs_warn_dup+0x8e/0xa0 [ 450.987325][T17476] sysfs_do_create_link_sd+0xc0/0x110 [ 450.987348][T17476] device_add_class_symlinks+0x1cf/0x240 [ 450.987381][T17476] device_add+0x475/0xb50 [ 450.987423][T17476] wiphy_register+0x1c81/0x2aa0 [ 450.987470][T17476] ? __pfx_wiphy_register+0x10/0x10 [ 450.987493][T17476] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 450.987531][T17476] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 450.987565][T17476] ieee80211_register_hw+0x3473/0x40d0 [ 450.987614][T17476] ? ieee80211_register_hw+0x14b1/0x40d0 [ 450.987651][T17476] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 450.987677][T17476] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 450.987712][T17476] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 450.987740][T17476] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 450.987775][T17476] ? __hrtimer_setup+0x187/0x210 [ 450.987793][T17476] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 450.987819][T17476] mac80211_hwsim_new_radio+0x2f7a/0x5210 [ 450.987882][T17476] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 450.987903][T17476] ? trace_kmalloc+0x1f/0xd0 [ 450.987924][T17476] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 450.987950][T17476] ? kstrndup+0xbf/0x160 [ 450.987996][T17476] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 450.988026][T17476] ? __pfx___nla_validate_parse+0x10/0x10 [ 450.988059][T17476] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 450.988099][T17476] ? __nla_parse+0x40/0x60 [ 450.988120][T17476] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 450.988153][T17476] genl_family_rcv_msg_doit+0x212/0x300 [ 450.988187][T17476] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 450.988227][T17476] ? bpf_lsm_capable+0x9/0x20 [ 450.988249][T17476] ? security_capable+0x7e/0x2e0 [ 450.988284][T17476] genl_rcv_msg+0x60e/0x790 [ 450.988319][T17476] ? __pfx_genl_rcv_msg+0x10/0x10 [ 450.988344][T17476] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 450.988385][T17476] netlink_rcv_skb+0x208/0x470 [ 450.988413][T17476] ? __lock_acquire+0xab9/0xd20 [ 450.988434][T17476] ? __pfx_genl_rcv_msg+0x10/0x10 [ 450.988462][T17476] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 450.988507][T17476] ? down_read+0x1ad/0x2e0 [ 450.988533][T17476] genl_rcv+0x28/0x40 [ 450.988557][T17476] netlink_unicast+0x82c/0x9e0 [ 450.988599][T17476] ? __pfx_netlink_unicast+0x10/0x10 [ 450.988632][T17476] ? netlink_sendmsg+0x642/0xb30 [ 450.988660][T17476] ? skb_put+0x11b/0x210 [ 450.988691][T17476] netlink_sendmsg+0x805/0xb30 [ 450.988724][T17476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.988752][T17476] ? aa_sock_msg_perm+0xf1/0x1d0 [ 450.988783][T17476] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 450.988813][T17476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.988835][T17476] __sock_sendmsg+0x21c/0x270 [ 450.988873][T17476] ____sys_sendmsg+0x505/0x830 [ 450.988907][T17476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 450.988944][T17476] ? import_iovec+0x74/0xa0 [ 450.988972][T17476] ___sys_sendmsg+0x21f/0x2a0 [ 450.989000][T17476] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.989033][T17476] ? futex_wait+0x285/0x360 [ 450.989068][T17476] ? __might_fault+0xb0/0x130 [ 450.989129][T17476] __x64_sys_sendmsg+0x19b/0x260 [ 450.989157][T17476] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 450.989194][T17476] ? rcu_is_watching+0x15/0xb0 [ 450.989223][T17476] ? do_syscall_64+0xbe/0x3b0 [ 450.989249][T17476] do_syscall_64+0xfa/0x3b0 [ 450.989268][T17476] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.989298][T17476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.989318][T17476] ? clear_bhb_loop+0x60/0xb0 [ 450.989344][T17476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.989363][T17476] RIP: 0033:0x7fdd74b8eec9 [ 450.989383][T17476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.989408][T17476] RSP: 002b:00007fdd75a6d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.989431][T17476] RAX: ffffffffffffffda RBX: 00007fdd74de5fa0 RCX: 00007fdd74b8eec9 [ 450.989446][T17476] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 450.989459][T17476] RBP: 00007fdd74c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 450.989472][T17476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.989485][T17476] R13: 00007fdd74de6038 R14: 00007fdd74de5fa0 R15: 00007ffc2fb2bf98 [ 450.989522][T17476] [ 451.600628][T17480] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2837'. [ 451.639786][T17480] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2837'. [ 451.659216][T17480] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2837'. [ 451.669637][T17480] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2837'. [ 451.791901][T17488] netlink: 'syz.4.2840': attribute type 1 has an invalid length. [ 501.494548][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.745458][ T8402] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.829937][ T8402] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.887256][ T8402] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.964946][ T8402] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.100822][ T8402] bridge_slave_0: left allmulticast mode [ 512.106545][ T8402] bridge_slave_0: left promiscuous mode [ 512.114473][ T8402] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.511600][ T8402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.523093][ T8402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.533577][ T8402] bond0 (unregistering): Released all slaves [ 512.602274][ T8402] tipc: Disabling bearer [ 512.607523][ T8402] tipc: Left network mode [ 512.802449][ T8402] hsr_slave_0: left promiscuous mode [ 512.809713][ T8402] hsr_slave_1: left promiscuous mode [ 512.815575][ T8402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.825057][ T8402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.833264][ T8402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.840904][ T8402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.854570][ T8402] veth0_macvtap: left allmulticast mode [ 512.860450][ T8402] veth0_macvtap: left promiscuous mode [ 512.866154][ T8402] veth1_vlan: left promiscuous mode [ 512.871553][ T8402] veth0_vlan: left promiscuous mode [ 513.346851][ T8402] team0 (unregistering): Port device team_slave_1 removed [ 513.391051][ T8402] team0 (unregistering): Port device team_slave_0 removed [ 514.017296][ T8402] IPVS: stop unused estimator thread 0... [ 532.208026][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 562.932085][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 570.128677][ T5845] Bluetooth: hci7: command 0x0405 tx timeout [ 578.775947][T17511] netlink: 'syz.4.2845': attribute type 3 has an invalid length. [ 578.808722][T17511] netlink: 'syz.4.2845': attribute type 1 has an invalid length. [ 578.824688][T17511] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2845'. [ 578.875060][T17514] netlink: 'syz.4.2845': attribute type 83 has an invalid length. [ 578.965285][T17520] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2847'. [ 579.084650][T17520] netlink: 100 bytes leftover after parsing attributes in process `syz.9.2847'. [ 579.205695][T17535] !: renamed from dummy0 (while UP) [ 579.251453][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.280400][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.465701][T17549] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2851'. [ 579.477266][T17535] wg1 speed is unknown, defaulting to 1000 [ 579.529893][T17535] virt_wifi0 speed is unknown, defaulting to 1000 [ 579.565335][T17535] lo speed is unknown, defaulting to 1000 [ 579.650926][T17554] wg1 speed is unknown, defaulting to 1000 [ 579.688717][T17554] virt_wifi0 speed is unknown, defaulting to 1000 [ 579.704889][T17554] lo speed is unknown, defaulting to 1000 [ 580.276612][T17583] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2864'. [ 580.287487][T17583] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2864'. [ 580.372527][T17585] tipc: Enabled bearer , priority 0 [ 580.523896][T17603] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2867'. [ 580.568158][T17603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2867'. [ 580.588828][T17603] netlink: 'syz.4.2867': attribute type 2 has an invalid length. [ 580.593569][T17585] syzkaller0: entered promiscuous mode [ 580.639290][T17585] syzkaller0: entered allmulticast mode [ 580.684506][T17608] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2869'. [ 580.701935][T17594] wg1 speed is unknown, defaulting to 1000 [ 580.725472][T17604] tipc: Resetting bearer [ 581.034368][T17594] virt_wifi0 speed is unknown, defaulting to 1000 [ 581.068039][T17584] tipc: Resetting bearer [ 581.498668][ T6164] tipc: Node number set to 1925548118 [ 582.734477][T17645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2877'. [ 583.425618][T17584] tipc: Disabling bearer [ 583.435575][T17594] lo speed is unknown, defaulting to 1000 [ 583.505721][T17630] wg1 speed is unknown, defaulting to 1000 [ 583.559070][T17630] virt_wifi0 speed is unknown, defaulting to 1000 [ 583.567596][T17630] lo speed is unknown, defaulting to 1000 [ 583.696645][T17661] !: renamed from dummy0 [ 583.968629][T17676] sock: sock_timestamping_bind_phc: sock not bind to device [ 586.011927][T17683] netlink: 'syz.3.2885': attribute type 12 has an invalid length. [ 586.655876][T17724] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 586.680828][T17722] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 586.755403][T17727] wg1 speed is unknown, defaulting to 1000 [ 586.797081][T17727] virt_wifi0 speed is unknown, defaulting to 1000 [ 586.807389][T17727] lo speed is unknown, defaulting to 1000 [ 587.079041][T17750] tipc: Enabling of bearer rejected, already enabled [ 587.099546][T17737] syzkaller1: entered allmulticast mode [ 587.420797][T17770] dvmrp8: entered allmulticast mode [ 587.474403][T17770] wg1 speed is unknown, defaulting to 1000 [ 587.482963][T17770] virt_wifi0 speed is unknown, defaulting to 1000 [ 587.492794][T17770] lo speed is unknown, defaulting to 1000 [ 587.663530][T17788] __nla_validate_parse: 1 callbacks suppressed [ 587.663551][T17788] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2908'. [ 587.787865][T17769] dvmrp8: left allmulticast mode [ 588.020600][T17801] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2911'. [ 588.332369][T17814] vlan4: entered promiscuous mode [ 588.490106][T17819] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2919'. [ 588.744002][T17823] 8021q: adding VLAN 0 to HW filter on device bond6 [ 588.872579][T17843] wg1 speed is unknown, defaulting to 1000 [ 588.974933][T17843] virt_wifi0 speed is unknown, defaulting to 1000 [ 588.993027][T17846] netlink: 'syz.3.2925': attribute type 5 has an invalid length. [ 589.014065][T17843] lo speed is unknown, defaulting to 1000 [ 589.016476][T17846] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2925'. [ 589.096686][T17851] macsec0: entered allmulticast mode [ 589.164391][T17851] veth1_macvtap: entered allmulticast mode [ 589.176855][T17851] macsec0: left allmulticast mode [ 589.181993][T17851] veth1_macvtap: left allmulticast mode [ 589.224995][T17859] netlink: 248 bytes leftover after parsing attributes in process `syz.9.2929'. [ 589.458519][T17872] IPVS: set_ctl: invalid protocol: 98 172.30.1.10:20003 [ 589.540054][T17876] netlink: 'syz.3.2934': attribute type 1 has an invalid length. [ 589.585068][T17876] 8021q: adding VLAN 0 to HW filter on device bond9 [ 589.634662][T17881] openvswitch: netlink: Message has 79 unknown bytes. [ 589.784833][T17885] tipc: Enabling of bearer rejected, already enabled [ 589.806866][T17885] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 589.844512][T17885] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 589.853829][T17885] tipc: Resetting bearer [ 589.877093][T17885] tipc: Resetting bearer [ 590.185419][T17910] bond7: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 590.196744][T17910] bond7: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 590.212458][T17911] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2942'. [ 590.256735][T17916] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2944'. [ 590.397309][T17924] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2945'. [ 590.441014][T17920] wg1 speed is unknown, defaulting to 1000 [ 590.456353][T17920] virt_wifi0 speed is unknown, defaulting to 1000 [ 590.471227][T17920] lo speed is unknown, defaulting to 1000 [ 590.515807][T17927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2947'. [ 590.545339][T17927] batadv0: left allmulticast mode [ 590.554087][T17927] batadv0: left promiscuous mode [ 590.563920][T17927] bridge0: port 3(batadv0) entered disabled state [ 590.590386][T17927] bridge_slave_1: left allmulticast mode [ 590.604957][T17927] bridge_slave_1: left promiscuous mode [ 590.618615][T17927] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.635403][T17927] bridge_slave_0: left allmulticast mode [ 590.641751][T17927] bridge_slave_0: left promiscuous mode [ 590.648118][T17927] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.684095][T17939] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2949'. [ 590.921051][T17946] wg1 speed is unknown, defaulting to 1000 [ 590.931499][T17946] virt_wifi0 speed is unknown, defaulting to 1000 [ 590.949329][T17946] lo speed is unknown, defaulting to 1000 [ 591.128390][T17951] wg1 speed is unknown, defaulting to 1000 [ 591.286961][T17951] virt_wifi0 speed is unknown, defaulting to 1000 [ 591.329640][T17951] lo speed is unknown, defaulting to 1000 [ 591.604324][T17964] wg1 speed is unknown, defaulting to 1000 [ 591.643555][T17964] virt_wifi0 speed is unknown, defaulting to 1000 [ 591.673483][T17964] lo speed is unknown, defaulting to 1000 [ 592.761718][T17991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2963'. [ 593.636420][T18016] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2968'. [ 593.733202][T18013] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2968'. [ 594.082438][T18040] tipc: Resetting bearer [ 594.477447][T18048] sctp: [Deprecated]: syz.4.2974 (pid 18048) Use of int in maxseg socket option. [ 594.477447][T18048] Use struct sctp_assoc_value instead [ 594.604322][T18054] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2974'. [ 594.687304][T18057] IPVS: set_ctl: invalid protocol: 113 224.0.0.1:20000 [ 594.821072][T18061] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2979'. [ 594.833981][T18065] netlink: 'syz.2.2980': attribute type 13 has an invalid length. [ 594.843799][T18065] netlink: 'syz.2.2980': attribute type 17 has an invalid length. [ 594.856741][T18065] erspan0: left promiscuous mode [ 594.865298][T18065] erspan0: left allmulticast mode [ 594.892303][T18065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 595.199546][T18081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2983'. [ 595.209510][T18082] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2984'. [ 595.228974][T18082] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2984'. [ 595.453816][T18093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.518193][T18095] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2988'. [ 595.527183][T18095] netlink: 'syz.2.2988': attribute type 1 has an invalid length. [ 595.663170][T18102] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2991'. [ 596.047440][T18122] netlink: 'syz.9.2997': attribute type 13 has an invalid length. [ 596.743409][T18145] netlink: 'syz.2.3002': attribute type 4 has an invalid length. [ 596.801245][ T8402] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.811392][ T8402] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.885147][ T752] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.903736][ T752] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.061708][T18172] wg1 speed is unknown, defaulting to 1000 [ 597.079742][T18172] virt_wifi0 speed is unknown, defaulting to 1000 [ 597.090180][T18172] lo speed is unknown, defaulting to 1000 [ 597.201828][T18178] Bluetooth: MGMT ver 1.23 [ 597.260096][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.267324][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.299791][T18196] bridge8: entered allmulticast mode [ 597.323939][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.418984][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.426312][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.459105][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.500281][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.516574][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.544968][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.569235][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.583914][T18204] sctp: [Deprecated]: syz.8.3013 (pid 18204) Use of int in max_burst socket option deprecated. [ 597.583914][T18204] Use struct sctp_assoc_value instead [ 597.600207][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.607408][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.635841][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.656067][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.674336][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.725155][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.770206][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.777424][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.824171][T18208] bond7: Removing last ns target with arp_interval on [ 597.838403][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.855882][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.893019][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.919519][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.926916][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.935489][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.944079][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.953265][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.962557][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.971101][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.979731][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.987229][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 597.995899][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 598.003969][T18188] IPv6: NLM_F_REPLACE set, but no existing node found! [ 598.119632][T18215] wg1 speed is unknown, defaulting to 1000 [ 598.135144][T18215] virt_wifi0 speed is unknown, defaulting to 1000 [ 598.140235][T18220] __nla_validate_parse: 1 callbacks suppressed [ 598.140254][T18220] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3017'. [ 598.155607][T18222] wg1 speed is unknown, defaulting to 1000 [ 598.194462][T18215] lo speed is unknown, defaulting to 1000 [ 598.200429][T18222] virt_wifi0 speed is unknown, defaulting to 1000 [ 598.254944][T18222] lo speed is unknown, defaulting to 1000 [ 598.843563][T18252] tipc: Enabled bearer , priority 0 [ 598.856031][T18252] syzkaller0: entered promiscuous mode [ 598.889035][T18252] syzkaller0: entered allmulticast mode [ 599.074786][T18261] tipc: Resetting bearer [ 599.134113][T18251] tipc: Resetting bearer [ 599.196878][T18251] tipc: Disabling bearer [ 599.229831][T18275] batadv2: entered promiscuous mode [ 599.235114][T18275] batadv2: entered allmulticast mode [ 599.257942][ T5852] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 599.265697][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 599.381747][T18265] wg1 speed is unknown, defaulting to 1000 [ 599.442619][T18265] virt_wifi0 speed is unknown, defaulting to 1000 [ 599.475259][T18289] vlan4: entered promiscuous mode [ 599.484902][T18289] gretap2: entered promiscuous mode [ 599.540862][T18265] lo speed is unknown, defaulting to 1000 [ 599.590986][T18295] tipc: Enabling of bearer rejected, failed to enable media [ 599.645329][T18297] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3034'. [ 599.657811][T18297] netlink: 'syz.4.3034': attribute type 32 has an invalid length. [ 599.999054][T18297] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 600.341616][ T30] audit: type=1800 audit(1759641210.350:5): pid=18314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3038" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2103 res=0 errno=0 [ 600.343027][T18314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3038'. [ 600.586766][T18321] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3039'. [ 600.618871][T18321] netlink: 232 bytes leftover after parsing attributes in process `syz.9.3039'. [ 600.696093][T18324] 8021q: adding VLAN 0 to HW filter on device bond11 [ 600.801385][T18332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3042'. [ 601.099044][T18345] netlink: 'syz.4.3046': attribute type 1 has an invalid length. [ 601.164564][T18348] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3046'. [ 601.228678][T18350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3046'. [ 601.241033][T18345] 8021q: adding VLAN 0 to HW filter on device bond8 [ 601.261699][T18348] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode [ 601.433778][T18359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3048'. [ 601.574897][T18371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.771327][T18389] netlink: 336 bytes leftover after parsing attributes in process `syz.8.3058'. [ 601.869596][T18393] netlink: 'syz.3.3059': attribute type 1 has an invalid length. [ 601.926354][T18398] block nbd0: reconnected socket [ 601.936733][T18398] nbd: socks must be embedded in a SOCK_ITEM attr [ 601.946532][ T5852] block nbd0: Receive control failed (result -32) [ 601.966938][T18394] netlink: 'syz.2.3060': attribute type 13 has an invalid length. [ 602.272031][T18420] netlink: 'syz.8.3069': attribute type 3 has an invalid length. [ 602.282823][T18421] netlink: 'syz.8.3069': attribute type 3 has an invalid length. [ 603.547260][T18484] can: request_module (can-proto-0) failed. [ 603.716332][T18493] vlan4: entered promiscuous mode [ 603.738923][T18493] bond0: entered promiscuous mode [ 603.755376][T18493] bond_slave_0: entered promiscuous mode [ 603.786035][T18493] bond_slave_1: entered promiscuous mode [ 603.862831][T18500] __nla_validate_parse: 7 callbacks suppressed [ 603.862850][T18500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3087'. [ 604.063488][T18512] netlink: 'syz.4.3090': attribute type 21 has an invalid length. [ 604.077038][T18514] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3091'. [ 604.091503][T18514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3091'. [ 604.129571][ T5845] Bluetooth: hci7: command 0x0405 tx timeout [ 604.254915][T18523] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 604.472239][T18539] wg1 speed is unknown, defaulting to 1000 [ 604.486218][T18543] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3100'. [ 604.537912][T18539] virt_wifi0 speed is unknown, defaulting to 1000 [ 604.579714][T18539] lo speed is unknown, defaulting to 1000 [ 604.779932][T18559] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 605.054451][T18577] tipc: New replicast peer: 255.255.255.255 [ 605.121906][T18577] tipc: Enabled bearer , priority 10 [ 605.139166][T18579] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3110'. [ 605.514174][T18591] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3112'. [ 605.544672][T18600] openvswitch: netlink: Key type 31 is not supported [ 605.671142][T18605] netlink: 'syz.8.3115': attribute type 7 has an invalid length. [ 605.671344][T18590] wg1 speed is unknown, defaulting to 1000 [ 605.714563][T18605] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3115'. [ 605.744313][T18590] virt_wifi0 speed is unknown, defaulting to 1000 [ 605.804605][T18590] lo speed is unknown, defaulting to 1000 [ 605.912084][T18618] nftables ruleset with unbound chain [ 606.183058][T18640] pim6reg1: entered promiscuous mode [ 606.193560][T18640] pim6reg1: entered allmulticast mode [ 606.238797][T15623] tipc: Node number set to 3616551247 [ 606.250221][T18646] netlink: 'syz.9.3124': attribute type 1 has an invalid length. [ 606.283302][T18650] netlink: 'syz.4.3125': attribute type 7 has an invalid length. [ 607.320150][T18687] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3134'. [ 607.585150][T18705] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3139'. [ 607.610700][T18718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3142'. [ 607.694293][T18716] wg1 speed is unknown, defaulting to 1000 [ 607.706289][T18716] virt_wifi0 speed is unknown, defaulting to 1000 [ 607.721328][T18716] lo speed is unknown, defaulting to 1000 [ 608.070685][T18730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.092294][T18734] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 608.357304][T18752] bond8: option mode: invalid value (254) [ 608.375957][T18752] bond8 (unregistering): Released all slaves [ 608.905900][T18791] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 608.942445][T18794] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20003 [ 608.967313][T18794] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20003 [ 609.075885][T18794] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20003 [ 609.224313][T18794] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20003 [ 610.086038][T18812] __nla_validate_parse: 4 callbacks suppressed [ 610.086058][T18812] netlink: 172 bytes leftover after parsing attributes in process `syz.9.3170'. [ 610.104765][T18812] netlink: 172 bytes leftover after parsing attributes in process `syz.9.3170'. [ 610.809874][T18847] bridge0: entered promiscuous mode [ 610.820338][T18847] bridge0: entered allmulticast mode [ 610.845270][T18849] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3186'. [ 611.027171][T18859] netlink: 'syz.8.3191': attribute type 4 has an invalid length. [ 611.956880][T18886] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3206'. [ 612.092602][T18896] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3209'. [ 612.113065][T18896] IPVS: Unknown mcast interface: [ 612.354621][T18914] macvtap0: entered promiscuous mode [ 612.512309][T18924] netlink: 'syz.8.3223': attribute type 9 has an invalid length. [ 612.535964][T18924] netlink: 'syz.8.3223': attribute type 9 has an invalid length. [ 612.786055][T18943] netlink: 5452 bytes leftover after parsing attributes in process `syz.2.3233'. [ 612.882478][T18949] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3235'. [ 613.126775][T18962] lo: Caught tx_queue_len zero misconfig [ 613.472370][T18989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3249'. [ 613.607524][T18996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3253'. [ 614.177482][T19024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.223282][T19023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.539123][T19048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3278'. [ 614.966035][T19077] C: entered allmulticast mode [ 615.500626][T19112] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3307'. [ 615.611595][T19121] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3311'. [ 615.641455][T19121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3311'. [ 615.885680][T19131] macvtap0: entered promiscuous mode [ 616.081660][T19145] siw: device registration error -23 [ 616.099242][T19148] netlink: 'syz.4.3324': attribute type 1 has an invalid length. [ 616.137337][T19148] bond9: entered promiscuous mode [ 616.143168][T19148] 8021q: adding VLAN 0 to HW filter on device bond9 [ 616.173720][T19148] 8021q: adding VLAN 0 to HW filter on device bond9 [ 616.181137][T19148] bond9: (slave gre1): The slave device specified does not support setting the MAC address [ 616.191366][T19148] bond9: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 616.204062][T19148] bond9: (slave gre1): making interface the new active one [ 616.214222][T19148] gre1: entered promiscuous mode [ 616.221180][T19148] bond9: (slave gre1): Enslaving as an active interface with an up link [ 616.303433][T19157] netlink: 'syz.2.3328': attribute type 12 has an invalid length. [ 616.550335][T19170] bond8: left promiscuous mode [ 616.558826][T19170] bond8: entered promiscuous mode [ 616.564892][T19170] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 616.635278][T19174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3335'. [ 616.646005][T19174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.687427][T19174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.773083][T19178] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3337'. [ 617.123612][T19196] tipc: Enabled bearer , priority 0 [ 617.132649][T19196] syzkaller0: entered promiscuous mode [ 617.139279][T19196] syzkaller0: entered allmulticast mode [ 617.175537][T19196] tipc: Resetting bearer [ 617.190837][T19194] tipc: Resetting bearer [ 617.226645][T19194] tipc: Disabling bearer [ 618.210682][T19260] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 618.230368][T19252] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3366'. [ 618.252242][T19260] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3373'. [ 618.263672][T19260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3373'. [ 618.346035][T19265] kthread_run failed with err -4 [ 618.449116][T19274] wg1 speed is unknown, defaulting to 1000 [ 618.500568][T19274] virt_wifi0 speed is unknown, defaulting to 1000 [ 618.540328][T19274] lo speed is unknown, defaulting to 1000 [ 618.685029][T19279] netlink: 'syz.3.3378': attribute type 12 has an invalid length. [ 618.867162][T19296] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3382'. [ 618.895494][T19297] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3382'. [ 618.940891][T19299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 619.492684][T19323] netlink: 'syz.9.3391': attribute type 2 has an invalid length. [ 619.531886][T19328] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 619.631754][T15623] lo speed is unknown, defaulting to 1000 [ 619.632143][ T3545] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.649311][T15623] syz2: Port: 1 Link DOWN [ 619.667860][ T3545] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.686724][ T3545] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.698624][ T3545] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.792480][T19348] bridge0: port 1(erspan0) entered blocking state [ 619.801009][T19348] bridge0: port 1(erspan0) entered disabled state [ 619.810283][T19348] erspan0: entered allmulticast mode [ 619.820269][T19348] erspan0: entered promiscuous mode [ 619.902304][T19346] netlink: 'syz.8.3397': attribute type 10 has an invalid length. [ 619.912801][T19346] dummy0: left promiscuous mode [ 619.926673][T19346] team0: Device dummy0 failed to register rx_handler [ 620.096636][T19369] netlink: 'syz.4.3401': attribute type 1 has an invalid length. [ 620.487353][T19396] netlink: 'syz.2.3409': attribute type 1 has an invalid length. [ 621.461468][T19421] __nla_validate_parse: 10 callbacks suppressed [ 621.461489][T19421] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3416'. [ 621.933184][T19450] wg1 speed is unknown, defaulting to 1000 [ 621.990571][T19450] virt_wifi0 speed is unknown, defaulting to 1000 [ 622.003378][T19450] lo speed is unknown, defaulting to 1000 [ 622.047618][T19451] syzkaller0: entered promiscuous mode [ 622.158978][T19451] syzkaller0: entered allmulticast mode [ 624.225815][T19475] vxcan1: entered allmulticast mode [ 624.231944][T19476] vxcan1: left allmulticast mode [ 624.375673][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.621155][T19509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3441'. [ 624.643472][T19509] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3441'. [ 624.770671][T19520] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3446'. [ 624.788450][T19520] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3446'. [ 624.809244][T19520] netlink: 'syz.4.3446': attribute type 6 has an invalid length. [ 624.828589][T19521] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3446'. [ 624.837591][T19521] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3446'. [ 624.868809][T19521] netlink: 'syz.4.3446': attribute type 6 has an invalid length. [ 624.894551][T19529] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3448'. [ 625.352998][T19556] wg1 speed is unknown, defaulting to 1000 [ 625.361515][T19556] virt_wifi0 speed is unknown, defaulting to 1000 [ 625.402930][T19556] lo speed is unknown, defaulting to 1000 [ 625.472813][T19568] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3457'. [ 625.515737][T19568] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3457'. [ 626.246971][T19626] netlink: 'syz.3.3474': attribute type 8 has an invalid length. [ 626.463968][T19637] netlink: 'syz.8.3476': attribute type 1 has an invalid length. [ 626.497118][T19637] netlink: 'syz.8.3476': attribute type 3 has an invalid length. [ 626.548910][T19637] __nla_validate_parse: 2 callbacks suppressed [ 626.548931][T19637] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3476'. [ 626.581568][T19637] NCSI netlink: No device for ifindex 246 [ 626.949801][T19652] wg1 speed is unknown, defaulting to 1000 [ 626.957433][T19652] virt_wifi0 speed is unknown, defaulting to 1000 [ 626.965774][T19652] lo speed is unknown, defaulting to 1000 [ 627.108995][T19648] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3479'. [ 627.406142][T19666] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3483'. [ 627.594578][T19678] netlink: 220 bytes leftover after parsing attributes in process `syz.8.3487'. [ 627.831144][T19662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.892416][T19695] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3490'. [ 627.920401][T19662] vlan0: left promiscuous mode [ 628.009273][T19662] mac80211_hwsim hwsim30 syzkaller0: left promiscuous mode [ 628.104534][T15624] wg1 speed is unknown, defaulting to 1000 [ 628.115962][ T3481] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.134812][T15624] syz0: Port: 1 Link DOWN [ 628.140267][ T3481] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.153954][ T3481] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.205195][ T3481] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.236080][T19698] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3493'. [ 628.240192][ T3481] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.265852][ T3481] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.293427][T19706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3494'. [ 628.303418][ T3481] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.329041][ T3481] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.397604][T19711] netlink: 'syz.9.3497': attribute type 2 has an invalid length. [ 628.608705][T19721] netlink: 'syz.9.3500': attribute type 1 has an invalid length. [ 628.639159][T19721] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3500'. [ 628.750031][T19732] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3503'. [ 628.793635][T19738] tipc: Enabling of bearer rejected, failed to enable media [ 629.036125][T19761] netlink: 'syz.2.3511': attribute type 1 has an invalid length. [ 629.638565][T19798] tipc: Enabling of bearer rejected, already enabled [ 629.655909][T19799] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 629.671805][T19806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3523'. [ 630.195353][T19831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 630.497338][T19837] netlink: 'syz.2.3530': attribute type 4 has an invalid length. [ 630.555626][T19840] netlink: 'syz.4.3531': attribute type 32 has an invalid length. [ 630.768263][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 630.774210][ T5852] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 631.393440][T19873] wg1 speed is unknown, defaulting to 1000 [ 631.416762][T19857] macvtap1: entered allmulticast mode [ 631.438678][T19857] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 631.458571][T19857] mac80211_hwsim hwsim28 wlan0: left allmulticast mode [ 631.510851][T19873] virt_wifi0 speed is unknown, defaulting to 1000 [ 631.552560][T19879] wg1 speed is unknown, defaulting to 1000 [ 631.559275][T19873] lo speed is unknown, defaulting to 1000 [ 631.567577][T19882] syzkaller0: entered promiscuous mode [ 631.574530][T19882] syzkaller0: entered allmulticast mode [ 631.735543][T19879] virt_wifi0 speed is unknown, defaulting to 1000 [ 631.749811][T19879] lo speed is unknown, defaulting to 1000 [ 631.850068][T19893] __nla_validate_parse: 5 callbacks suppressed [ 631.850086][T19893] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3544'. [ 631.876380][T19896] ipvlan3: entered promiscuous mode [ 632.182632][T19909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3548'. [ 632.415630][T19917] netlink: 'syz.2.3550': attribute type 39 has an invalid length. [ 632.452155][T19913] bridge10: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 632.493429][T19914] bridge11: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 632.671467][T19923] syzkaller1: entered promiscuous mode [ 632.677579][T19923] syzkaller1: entered allmulticast mode [ 632.965470][T19931] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.104158][T19931] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.222284][T19931] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.287626][T19948] wg1 speed is unknown, defaulting to 1000 [ 633.326368][T19931] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.347187][T19948] virt_wifi0 speed is unknown, defaulting to 1000 [ 633.357137][T19948] lo speed is unknown, defaulting to 1000 [ 633.363807][T19954] wg1 speed is unknown, defaulting to 1000 [ 633.416598][T19954] virt_wifi0 speed is unknown, defaulting to 1000 [ 633.455292][T19954] lo speed is unknown, defaulting to 1000 [ 633.599526][ T3481] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.609301][ T3481] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.794202][ T8399] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.846167][ T8397] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.047080][T19968] netlink: 'syz.8.3564': attribute type 1 has an invalid length. [ 634.195217][T19975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3565'. [ 634.268630][T19974] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 634.279990][T19974] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 634.553804][T19992] openvswitch: netlink: IP tunnel dst address not specified [ 634.557595][T19995] bridge8: entered promiscuous mode [ 634.575278][T19995] bridge8: entered allmulticast mode [ 634.701940][T20007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3575'. [ 634.975791][T20026] wg1 speed is unknown, defaulting to 1000 [ 635.006774][T20026] virt_wifi0 speed is unknown, defaulting to 1000 [ 635.060566][T20026] lo speed is unknown, defaulting to 1000 [ 635.209459][T20040] wg1 speed is unknown, defaulting to 1000 [ 635.292062][T20040] virt_wifi0 speed is unknown, defaulting to 1000 [ 635.302011][T20040] lo speed is unknown, defaulting to 1000 [ 635.895064][T20057] netlink: 'syz.2.3588': attribute type 1 has an invalid length. [ 636.022181][T20057] 8021q: adding VLAN 0 to HW filter on device bond1 [ 636.057498][T20063] bond1: (slave ip6gretap1): making interface the new active one [ 636.084009][T20063] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 636.162264][T20057] veth9: entered promiscuous mode [ 636.182902][T20057] bond1: (slave veth9): Enslaving as an active interface with a down link [ 636.232176][T20063] bond1: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 636.647378][T20095] netlink: 'syz.2.3598': attribute type 10 has an invalid length. [ 637.009709][T20108] bond9: option tlb_dynamic_lb: invalid value (88) [ 637.040385][T20108] bond9 (unregistering): Released all slaves [ 637.181005][T20128] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3606'. [ 637.322909][T20133] netlink: 'syz.2.3608': attribute type 13 has an invalid length. [ 637.341161][T20133] netlink: 'syz.2.3608': attribute type 17 has an invalid length. [ 637.439121][T20133] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 637.501594][T20139] vxcan1: entered allmulticast mode [ 637.565696][T20148] netlink: 4308 bytes leftover after parsing attributes in process `syz.4.3611'. [ 637.646440][T20150] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3611'. [ 637.855372][T20145] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3609'. [ 637.864955][T20145] Unsupported xt match [ 637.864972][T20145] unable to load match [ 637.875326][T20148] bond0: (slave rose0): Error: Device can not be enslaved while up [ 637.961117][T20153] syzkaller1: entered promiscuous mode [ 637.966915][T20153] syzkaller1: entered allmulticast mode [ 638.254553][T20163] sctp: [Deprecated]: syz.9.3616 (pid 20163) Use of struct sctp_assoc_value in delayed_ack socket option. [ 638.254553][T20163] Use struct sctp_sack_info instead [ 638.272884][T20164] sctp: [Deprecated]: syz.9.3616 (pid 20164) Use of struct sctp_assoc_value in delayed_ack socket option. [ 638.272884][T20164] Use struct sctp_sack_info instead [ 638.389858][T20172] netlink: 'syz.2.3618': attribute type 4 has an invalid length. [ 638.480399][T20176] team_slave_1: Caught tx_queue_len zero misconfig [ 638.560434][T20176] netlink: 'syz.2.3620': attribute type 30 has an invalid length. [ 639.073590][T20199] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3623'. [ 639.104303][T20196] wg1 speed is unknown, defaulting to 1000 [ 639.113862][T20196] virt_wifi0 speed is unknown, defaulting to 1000 [ 639.135997][T20200] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3622'. [ 639.148529][T20196] lo speed is unknown, defaulting to 1000 [ 639.386623][T20220] tipc: Enabling of bearer rejected, failed to enable media [ 640.013095][T20244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3634'. [ 640.060346][T20247] wg1 speed is unknown, defaulting to 1000 [ 640.086031][T20247] virt_wifi0 speed is unknown, defaulting to 1000 [ 640.145808][T20247] lo speed is unknown, defaulting to 1000 [ 640.149185][T20242] netlink: 'syz.2.3635': attribute type 2 has an invalid length. [ 640.288930][T20259] netlink: 'syz.3.3639': attribute type 1 has an invalid length. [ 640.347476][T20261] bond9: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 640.362647][T20264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3641'. [ 640.374329][T20261] bond9 (unregistering): Released all slaves [ 640.376085][T20264] netlink: 'syz.4.3641': attribute type 5 has an invalid length. [ 640.388752][T20264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3641'. [ 640.461229][T20259] bond13: entered promiscuous mode [ 640.466880][T20259] 8021q: adding VLAN 0 to HW filter on device bond13 [ 640.795453][T20280] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3644'. [ 640.853776][T20276] syzkaller1: entered promiscuous mode [ 640.868473][T20276] syzkaller1: entered allmulticast mode [ 642.092212][T20368] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 642.117174][T20367] wg1 speed is unknown, defaulting to 1000 [ 642.126421][T20367] virt_wifi0 speed is unknown, defaulting to 1000 [ 642.141965][T20367] lo speed is unknown, defaulting to 1000 [ 642.207580][T20371] wg1 speed is unknown, defaulting to 1000 [ 642.254853][T20371] virt_wifi0 speed is unknown, defaulting to 1000 [ 642.264675][T20371] lo speed is unknown, defaulting to 1000 [ 642.624780][T20383] netlink: 'syz.3.3668': attribute type 1 has an invalid length. [ 642.715771][T20383] bond14: (slave bridge12): making interface the new active one [ 642.725077][T20383] bond14: (slave bridge12): Enslaving as an active interface with an up link [ 643.481934][T20421] __nla_validate_parse: 5 callbacks suppressed [ 643.481953][T20421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3677'. [ 643.609321][T20421] wg1 speed is unknown, defaulting to 1000 [ 643.635850][T20421] virt_wifi0 speed is unknown, defaulting to 1000 [ 643.717504][T20421] lo speed is unknown, defaulting to 1000 [ 643.822627][T20443] netlink: 'syz.2.3681': attribute type 1 has an invalid length. [ 643.850979][T20443] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3681'. [ 643.863843][T20445] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3682'. [ 644.386330][T20466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3687'. [ 644.435899][T20468] geneve2: entered promiscuous mode [ 644.512356][T20466] 8021q: adding VLAN 0 to HW filter on device bond10 [ 644.521380][ T752] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.584561][ T752] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.605890][ T752] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.619822][ T752] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.644051][T20486] FAULT_INJECTION: forcing a failure. [ 644.644051][T20486] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 644.659320][T20486] CPU: 1 UID: 0 PID: 20486 Comm: syz.9.3693 Not tainted syzkaller #0 PREEMPT(full) [ 644.659345][T20486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 644.659356][T20486] Call Trace: [ 644.659363][T20486] [ 644.659372][T20486] dump_stack_lvl+0x189/0x250 [ 644.659399][T20486] ? __pfx____ratelimit+0x10/0x10 [ 644.659429][T20486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 644.659453][T20486] ? __pfx__printk+0x10/0x10 [ 644.659493][T20486] ? __might_fault+0xb0/0x130 [ 644.659530][T20486] should_fail_ex+0x414/0x560 [ 644.659561][T20486] _copy_from_user+0x2d/0xb0 [ 644.659585][T20486] sock_do_ioctl+0x182/0x300 [ 644.659615][T20486] ? __pfx_sock_do_ioctl+0x10/0x10 [ 644.659639][T20486] ? __lock_acquire+0xab9/0xd20 [ 644.659682][T20486] sock_ioctl+0x576/0x790 [ 644.659710][T20486] ? __pfx_sock_ioctl+0x10/0x10 [ 644.659737][T20486] ? __fget_files+0x2a/0x420 [ 644.659761][T20486] ? __fget_files+0x3a0/0x420 [ 644.659785][T20486] ? __fget_files+0x2a/0x420 [ 644.659814][T20486] ? bpf_lsm_file_ioctl+0x9/0x20 [ 644.659835][T20486] ? __pfx_sock_ioctl+0x10/0x10 [ 644.659861][T20486] __se_sys_ioctl+0xfc/0x170 [ 644.659884][T20486] do_syscall_64+0xfa/0x3b0 [ 644.659903][T20486] ? lockdep_hardirqs_on+0x9c/0x150 [ 644.659932][T20486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.659950][T20486] ? clear_bhb_loop+0x60/0xb0 [ 644.659973][T20486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.659992][T20486] RIP: 0033:0x7f24d478eec9 [ 644.660011][T20486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.660028][T20486] RSP: 002b:00007f24d5566038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 644.660050][T20486] RAX: ffffffffffffffda RBX: 00007f24d49e5fa0 RCX: 00007f24d478eec9 [ 644.660065][T20486] RDX: 0000200000000040 RSI: 0000000000008933 RDI: 0000000000000004 [ 644.660077][T20486] RBP: 00007f24d5566090 R08: 0000000000000000 R09: 0000000000000000 [ 644.660090][T20486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.660101][T20486] R13: 00007f24d49e6038 R14: 00007f24d49e5fa0 R15: 00007ffca3ef7778 [ 644.660134][T20486] [ 644.693592][T20489] netlink: 'syz.4.3694': attribute type 1 has an invalid length. [ 644.945349][T20483] bond9: option all_slaves_active: invalid value (13) [ 644.971630][T20483] bond9 (unregistering): Released all slaves [ 645.019977][T20481] pim6reg1: entered promiscuous mode [ 645.025327][T20481] pim6reg1: entered allmulticast mode [ 645.032381][T20482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3692'. [ 645.117134][T20494] veth7: entered promiscuous mode [ 645.144157][T20489] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 645.227926][T20498] bond6: option mode: invalid value (254) [ 645.301220][T20498] bond6 (unregistering): Released all slaves [ 645.424300][T20509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3698'. [ 645.526654][T20512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 645.545671][T20517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 645.571227][T20519] netlink: 'syz.4.3702': attribute type 1 has an invalid length. [ 645.590288][T20517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 645.597781][T20519] netlink: 'syz.4.3702': attribute type 4 has an invalid length. [ 645.642433][T20519] netlink: 'syz.4.3702': attribute type 32 has an invalid length. [ 645.658062][T20519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3702'. [ 645.720317][T20519] bond11: option coupled_control: invalid value (12) [ 645.752773][T20519] bond11 (unregistering): Released all slaves [ 645.762176][T20530] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3703'. [ 645.869294][T20530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3703'. [ 645.918944][T20530] netlink: 200 bytes leftover after parsing attributes in process `syz.3.3703'. [ 645.974132][T20538] FAULT_INJECTION: forcing a failure. [ 645.974132][T20538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.983642][T20536] netlink: 'syz.4.3706': attribute type 7 has an invalid length. [ 645.992365][T20538] CPU: 0 UID: 0 PID: 20538 Comm: syz.9.3705 Not tainted syzkaller #0 PREEMPT(full) [ 645.992394][T20538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 645.992406][T20538] Call Trace: [ 645.992413][T20538] [ 645.992421][T20538] dump_stack_lvl+0x189/0x250 [ 645.992456][T20538] ? __pfx____ratelimit+0x10/0x10 [ 645.992487][T20538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 645.992510][T20538] ? __pfx__printk+0x10/0x10 [ 645.992551][T20538] should_fail_ex+0x414/0x560 [ 645.992583][T20538] _copy_to_user+0x31/0xb0 [ 645.992607][T20538] put_user_ifreq+0x6b/0xd0 [ 645.992633][T20538] sock_do_ioctl+0x25b/0x300 [ 645.992662][T20538] ? __pfx_sock_do_ioctl+0x10/0x10 [ 645.992686][T20538] ? __lock_acquire+0xab9/0xd20 [ 645.992721][T20538] sock_ioctl+0x576/0x790 [ 645.992749][T20538] ? __pfx_sock_ioctl+0x10/0x10 [ 645.992775][T20538] ? __fget_files+0x2a/0x420 [ 645.992800][T20538] ? __fget_files+0x3a0/0x420 [ 645.992822][T20538] ? __fget_files+0x2a/0x420 [ 645.992850][T20538] ? bpf_lsm_file_ioctl+0x9/0x20 [ 645.992871][T20538] ? __pfx_sock_ioctl+0x10/0x10 [ 645.992895][T20538] __se_sys_ioctl+0xfc/0x170 [ 645.992918][T20538] do_syscall_64+0xfa/0x3b0 [ 645.992936][T20538] ? lockdep_hardirqs_on+0x9c/0x150 [ 645.992965][T20538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.992984][T20538] ? clear_bhb_loop+0x60/0xb0 [ 645.993011][T20538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.993030][T20538] RIP: 0033:0x7f24d478eec9 [ 645.993046][T20538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.993063][T20538] RSP: 002b:00007f24d5566038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 645.993083][T20538] RAX: ffffffffffffffda RBX: 00007f24d49e5fa0 RCX: 00007f24d478eec9 [ 645.993097][T20538] RDX: 0000200000000040 RSI: 0000000000008933 RDI: 0000000000000004 [ 645.993109][T20538] RBP: 00007f24d5566090 R08: 0000000000000000 R09: 0000000000000000 [ 645.993121][T20538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.993132][T20538] R13: 00007f24d49e6038 R14: 00007f24d49e5fa0 R15: 00007ffca3ef7778 [ 645.993165][T20538] [ 646.531231][T20564] netlink: 'syz.9.3713': attribute type 10 has an invalid length. [ 646.550988][T20564] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 646.583726][T20568] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 646.715575][T20575] FAULT_INJECTION: forcing a failure. [ 646.715575][T20575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.732154][T20574] dvmrp8: entered allmulticast mode [ 646.762276][T20574] wg1 speed is unknown, defaulting to 1000 [ 646.769129][T20575] CPU: 1 UID: 0 PID: 20575 Comm: syz.3.3717 Not tainted syzkaller #0 PREEMPT(full) [ 646.769156][T20575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 646.769167][T20575] Call Trace: [ 646.769174][T20575] [ 646.769181][T20575] dump_stack_lvl+0x189/0x250 [ 646.769209][T20575] ? __pfx____ratelimit+0x10/0x10 [ 646.769239][T20575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 646.769263][T20575] ? __pfx__printk+0x10/0x10 [ 646.769307][T20575] should_fail_ex+0x414/0x560 [ 646.769340][T20575] _copy_to_user+0x31/0xb0 [ 646.769375][T20575] simple_read_from_buffer+0xe1/0x170 [ 646.769405][T20575] proc_fail_nth_read+0x1b3/0x220 [ 646.769430][T20575] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 646.769454][T20575] ? rw_verify_area+0x2a6/0x4d0 [ 646.769474][T20575] ? __lock_acquire+0xab9/0xd20 [ 646.769489][T20575] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 646.769510][T20575] vfs_read+0x1fd/0xa30 [ 646.769550][T20575] ? fdget_pos+0x247/0x320 [ 646.769581][T20575] ? __pfx___mutex_lock+0x10/0x10 [ 646.769602][T20575] ? __pfx_vfs_read+0x10/0x10 [ 646.769625][T20575] ? __fget_files+0x2a/0x420 [ 646.769653][T20575] ? __fget_files+0x3a0/0x420 [ 646.769675][T20575] ? __fget_files+0x2a/0x420 [ 646.769708][T20575] ksys_read+0x145/0x250 [ 646.769728][T20575] ? __fget_files+0x3a0/0x420 [ 646.769753][T20575] ? __pfx_ksys_read+0x10/0x10 [ 646.769779][T20575] ? do_syscall_64+0xbe/0x3b0 [ 646.769800][T20575] do_syscall_64+0xfa/0x3b0 [ 646.769816][T20575] ? lockdep_hardirqs_on+0x9c/0x150 [ 646.769844][T20575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.769861][T20575] ? clear_bhb_loop+0x60/0xb0 [ 646.769883][T20575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.769899][T20575] RIP: 0033:0x7f8c14b8d8dc [ 646.769914][T20575] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 646.769930][T20575] RSP: 002b:00007f8c15b0a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 646.769950][T20575] RAX: ffffffffffffffda RBX: 00007f8c14de5fa0 RCX: 00007f8c14b8d8dc [ 646.769964][T20575] RDX: 000000000000000f RSI: 00007f8c15b0a0a0 RDI: 0000000000000003 [ 646.769976][T20575] RBP: 00007f8c15b0a090 R08: 0000000000000000 R09: 0000000000000000 [ 646.769988][T20575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.769999][T20575] R13: 00007f8c14de6038 R14: 00007f8c14de5fa0 R15: 00007ffc715f2ba8 [ 646.770031][T20575] [ 647.019912][T20574] virt_wifi0 speed is unknown, defaulting to 1000 [ 647.028459][T20574] lo speed is unknown, defaulting to 1000 [ 647.142670][T20579] netlink: 'syz.4.3718': attribute type 4 has an invalid length. [ 647.182858][T20581] netlink: 'syz.3.3719': attribute type 1 has an invalid length. [ 647.464421][T20581] 8021q: adding VLAN 0 to HW filter on device bond15 [ 647.553958][T20583] bond15: (slave geneve2): making interface the new active one [ 647.566347][T20583] bond15: (slave geneve2): Enslaving as an active interface with an up link [ 647.602634][T20584] bond15: entered promiscuous mode [ 647.609371][T20584] geneve2: entered promiscuous mode [ 647.706870][ T3481] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.752109][T15624] IPVS: starting estimator thread 0... [ 647.816919][ T3481] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.840051][ T3545] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.850548][T20596] IPVS: using max 36 ests per chain, 86400 per kthread [ 647.870927][ T3545] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.965885][T20610] netlink: 'syz.2.3728': attribute type 18 has an invalid length. [ 647.976145][T20610] netlink: 'syz.2.3728': attribute type 20 has an invalid length. [ 648.455904][T20632] wg1 speed is unknown, defaulting to 1000 [ 648.464251][T20632] virt_wifi0 speed is unknown, defaulting to 1000 [ 648.475422][T20632] lo speed is unknown, defaulting to 1000 [ 648.502996][T20639] netlink: 'syz.4.3734': attribute type 1 has an invalid length. [ 648.566095][T20639] 8021q: adding VLAN 0 to HW filter on device bond11 [ 648.678287][ T30] audit: type=1800 audit(1759641258.670:6): pid=20643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3736" name="memory.events" dev="tmpfs" ino=2723 res=0 errno=0 [ 648.737223][ T30] audit: type=1804 audit(1759641258.670:7): pid=20643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.3736" name="/newroot/529/memory.events" dev="tmpfs" ino=2723 res=1 errno=0 [ 648.927196][T20657] __nla_validate_parse: 11 callbacks suppressed [ 648.927215][T20657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3740'. [ 648.949229][T20662] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3742'. [ 648.958665][T20657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3740'. [ 649.035477][T20666] syzkaller1: entered promiscuous mode [ 649.045593][T20666] syzkaller1: entered allmulticast mode [ 649.163750][T20675] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3744'. [ 649.197622][T20675] IPv6: sit1: Disabled Multicast RS [ 649.210562][T20675] sit1: entered allmulticast mode [ 649.448995][T20685] ip6gre3: entered allmulticast mode [ 649.839973][T20705] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3751'. [ 649.849832][T20705] netlink: 43 bytes leftover after parsing attributes in process `syz.9.3751'. [ 649.873370][T20705] netlink: 'syz.9.3751': attribute type 5 has an invalid length. [ 649.908224][T20705] netlink: 43 bytes leftover after parsing attributes in process `syz.9.3751'. [ 649.913038][T20716] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3751'. [ 650.282076][T20741] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3760'. [ 650.290977][T20738] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 650.291312][T20738] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 650.362565][T20741] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3760'. [ 650.562233][T20755] netlink: 'syz.4.3763': attribute type 13 has an invalid length. [ 650.769079][T20768] vlan0: entered promiscuous mode [ 650.785300][T20768] vlan0: left allmulticast mode [ 650.803261][T20768] veth0_vlan: left allmulticast mode [ 650.891335][T20776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 651.065192][T20784] wg1 speed is unknown, defaulting to 1000 [ 651.099511][T20784] virt_wifi0 speed is unknown, defaulting to 1000 [ 651.130584][T20784] lo speed is unknown, defaulting to 1000 [ 651.526635][T20809] IPVS: ip_vs_edit_dest(): server weight less than zero [ 652.323864][T20846] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 652.460698][T20858] netlink: 'syz.2.3791': attribute type 1 has an invalid length. [ 652.471387][T20858] netlink: 'syz.2.3791': attribute type 1 has an invalid length. [ 652.485922][ T30] audit: type=1800 audit(1759641262.490:8): pid=20844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3788" name="memory.events" dev="tmpfs" ino=2790 res=0 errno=0 [ 652.520717][T20858] netlink: 'syz.2.3791': attribute type 1 has an invalid length. [ 652.728014][T20862] macsec1: entered allmulticast mode [ 652.771662][T20862] ip6gretap0: entered allmulticast mode [ 652.822428][T20862] ip6gretap0: left allmulticast mode [ 652.900488][T20874] vlan4: entered promiscuous mode [ 653.345022][T20921] netlink: 'syz.9.3808': attribute type 10 has an invalid length. [ 653.689349][T20925] netlink: 'syz.2.3809': attribute type 1 has an invalid length. [ 653.827608][T20939] netlink: 'syz.2.3809': attribute type 13 has an invalid length. [ 653.848299][T20925] 8021q: adding VLAN 0 to HW filter on device bond2 [ 653.931317][T20925] bond2: (slave batadv1): Opening slave failed [ 654.156219][T20944] __nla_validate_parse: 79 callbacks suppressed [ 654.156239][T20944] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3812'. [ 654.266746][T20949] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3815'. [ 654.545804][T20963] sctp: [Deprecated]: syz.3.3817 (pid 20963) Use of int in maxseg socket option. [ 654.545804][T20963] Use struct sctp_assoc_value instead [ 654.605375][T20963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3817'. [ 654.686812][T20954] C: renamed from team_slave_0 [ 654.714301][T20954] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3814'. [ 654.864557][T20942] wg1 speed is unknown, defaulting to 1000 [ 654.893140][T20942] virt_wifi0 speed is unknown, defaulting to 1000 [ 654.924658][T20942] lo speed is unknown, defaulting to 1000 [ 654.927569][T20976] tipc: Enabling of bearer rejected, already enabled [ 655.202104][T20992] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3825'. [ 655.621228][T21005] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3828'. [ 655.631973][T21005] netlink: 'syz.3.3828': attribute type 29 has an invalid length. [ 655.871457][T21017] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3832'. [ 655.884481][T21017] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 656.048886][T21018] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3831'. [ 656.077821][T21018] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3831'. [ 656.086752][T21018] netlink: 'syz.8.3831': attribute type 18 has an invalid length. [ 656.434263][T21047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3840'. [ 656.550703][T21047] wg1 speed is unknown, defaulting to 1000 [ 656.606818][T21056] tipc: Enabled bearer , priority 0 [ 656.619669][T21056] syzkaller0: entered promiscuous mode [ 656.625186][T21056] syzkaller0: entered allmulticast mode [ 656.639390][T21047] virt_wifi0 speed is unknown, defaulting to 1000 [ 656.679739][T21059] tipc: Resetting bearer [ 656.729871][T21047] lo speed is unknown, defaulting to 1000 [ 656.821470][T21055] tipc: Resetting bearer [ 656.893381][T21055] tipc: Disabling bearer [ 657.006534][T21082] netlink: 'syz.3.3849': attribute type 1 has an invalid length. [ 657.346771][T21093] bridge4: entered promiscuous mode [ 657.359067][T21093] bridge4: entered allmulticast mode [ 657.382690][T21093] team0: Port device bridge4 added [ 657.665023][T21105] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 657.765565][T21101] wg1 speed is unknown, defaulting to 1000 [ 657.805784][T21106] wg1 speed is unknown, defaulting to 1000 [ 657.864866][T21101] virt_wifi0 speed is unknown, defaulting to 1000 [ 657.883468][T21128] netlink: 'syz.2.3859': attribute type 21 has an invalid length. [ 657.940957][T21101] lo speed is unknown, defaulting to 1000 [ 657.958873][T21106] virt_wifi0 speed is unknown, defaulting to 1000 [ 658.047467][T21106] lo speed is unknown, defaulting to 1000 [ 658.423039][T21112] warn_alloc: 1 callbacks suppressed [ 658.423057][T21112] syz.8.3857: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 658.496254][T21112] CPU: 0 UID: 0 PID: 21112 Comm: syz.8.3857 Not tainted syzkaller #0 PREEMPT(full) [ 658.496282][T21112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 658.496294][T21112] Call Trace: [ 658.496302][T21112] [ 658.496310][T21112] dump_stack_lvl+0x189/0x250 [ 658.496343][T21112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 658.496368][T21112] ? __pfx__printk+0x10/0x10 [ 658.496398][T21112] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 658.496424][T21112] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 658.496452][T21112] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 658.496481][T21112] warn_alloc+0x214/0x310 [ 658.496517][T21112] ? __pfx_warn_alloc+0x10/0x10 [ 658.496554][T21112] ? __get_vm_area_node+0x28f/0x300 [ 658.496580][T21112] ? hash_netport4_resize+0x235/0x1b60 [ 658.496608][T21112] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 658.496670][T21112] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 658.496703][T21112] ? rcu_is_watching+0x15/0xb0 [ 658.496728][T21112] ? hash_netport4_resize+0x235/0x1b60 [ 658.496751][T21112] ? hash_netport4_resize+0x235/0x1b60 [ 658.496773][T21112] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 658.496799][T21112] ? hash_netport4_resize+0x235/0x1b60 [ 658.496837][T21112] hash_netport4_resize+0x235/0x1b60 [ 658.496861][T21112] ? hash_netport4_uadt+0xc97/0xf30 [ 658.496891][T21112] ? __pfx_hash_netport4_add+0x10/0x10 [ 658.496915][T21112] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 658.496951][T21112] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 658.496986][T21112] call_ad+0x44b/0xb00 [ 658.497025][T21112] ? __pfx_call_ad+0x10/0x10 [ 658.497071][T21112] ? __nla_parse+0x40/0x60 [ 658.497102][T21112] ip_set_ad+0x791/0x930 [ 658.497142][T21112] ? __pfx_ip_set_ad+0x10/0x10 [ 658.497217][T21112] nfnetlink_rcv_msg+0xb4d/0x1130 [ 658.497249][T21112] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 658.497300][T21112] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 658.497366][T21112] ? __lock_acquire+0xab9/0xd20 [ 658.497404][T21112] netlink_rcv_skb+0x208/0x470 [ 658.497427][T21112] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 658.497459][T21112] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 658.497493][T21112] ? bpf_lsm_capable+0x9/0x20 [ 658.497515][T21112] ? security_capable+0x7e/0x2e0 [ 658.497554][T21112] nfnetlink_rcv+0x282/0x2590 [ 658.497587][T21112] ? is_bpf_text_address+0x26/0x2b0 [ 658.497615][T21112] ? __kernel_text_address+0xd/0x40 [ 658.497639][T21112] ? unwind_get_return_address+0x4d/0x90 [ 658.497660][T21112] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 658.497684][T21112] ? arch_stack_walk+0xfc/0x150 [ 658.497723][T21112] ? stack_trace_save+0x9c/0xe0 [ 658.497747][T21112] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 658.497777][T21112] ? stack_depot_save_flags+0x40/0x860 [ 658.497810][T21112] ? __lock_acquire+0xab9/0xd20 [ 658.497859][T21112] ? __lock_acquire+0xab9/0xd20 [ 658.497891][T21112] ? netlink_deliver_tap+0x2e/0x1b0 [ 658.497920][T21112] ? netlink_deliver_tap+0x2e/0x1b0 [ 658.497950][T21112] netlink_unicast+0x82c/0x9e0 [ 658.497990][T21112] ? __pfx_netlink_unicast+0x10/0x10 [ 658.498022][T21112] ? netlink_sendmsg+0x642/0xb30 [ 658.498041][T21112] ? skb_put+0x11b/0x210 [ 658.498067][T21112] netlink_sendmsg+0x805/0xb30 [ 658.498105][T21112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 658.498129][T21112] ? aa_sock_msg_perm+0xf1/0x1d0 [ 658.498155][T21112] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 658.498182][T21112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 658.498203][T21112] __sock_sendmsg+0x21c/0x270 [ 658.498237][T21112] ____sys_sendmsg+0x505/0x830 [ 658.498268][T21112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 658.498302][T21112] ? import_iovec+0x74/0xa0 [ 658.498330][T21112] ___sys_sendmsg+0x21f/0x2a0 [ 658.498356][T21112] ? __pfx____sys_sendmsg+0x10/0x10 [ 658.498424][T21112] ? __fget_files+0x2a/0x420 [ 658.498448][T21112] ? __fget_files+0x3a0/0x420 [ 658.498488][T21112] __x64_sys_sendmsg+0x19b/0x260 [ 658.498515][T21112] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 658.498552][T21112] ? do_user_addr_fault+0xc85/0x1380 [ 658.498578][T21112] ? do_syscall_64+0xbe/0x3b0 [ 658.498604][T21112] do_syscall_64+0xfa/0x3b0 [ 658.498623][T21112] ? lockdep_hardirqs_on+0x9c/0x150 [ 658.498652][T21112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.498672][T21112] ? clear_bhb_loop+0x60/0xb0 [ 658.498696][T21112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.498715][T21112] RIP: 0033:0x7fe23758eec9 [ 658.498734][T21112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.498751][T21112] RSP: 002b:00007fe2357f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 658.498771][T21112] RAX: ffffffffffffffda RBX: 00007fe2377e6090 RCX: 00007fe23758eec9 [ 658.498786][T21112] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000004 [ 658.498799][T21112] RBP: 00007fe237611f91 R08: 0000000000000000 R09: 0000000000000000 [ 658.498811][T21112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.498823][T21112] R13: 00007fe2377e6128 R14: 00007fe2377e6090 R15: 00007ffe75299d88 [ 658.498857][T21112] [ 658.996530][T21112] Mem-Info: [ 659.000480][T21112] active_anon:7141 inactive_anon:0 isolated_anon:0 [ 659.000480][T21112] active_file:3339 inactive_file:40111 isolated_file:0 [ 659.000480][T21112] unevictable:768 dirty:116 writeback:0 [ 659.000480][T21112] slab_reclaimable:13283 slab_unreclaimable:195672 [ 659.000480][T21112] mapped:34105 shmem:4258 pagetables:1009 [ 659.000480][T21112] sec_pagetables:0 bounce:0 [ 659.000480][T21112] kernel_misc_reclaimable:0 [ 659.000480][T21112] free:1218423 free_pcp:17623 free_cma:0 [ 659.047551][T21112] Node 0 active_anon:28564kB inactive_anon:0kB active_file:13356kB inactive_file:160248kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136420kB dirty:464kB writeback:0kB shmem:15496kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13680kB pagetables:3888kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 659.080606][T21112] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 659.112202][T21112] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 659.142638][T21112] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 659.148982][T21112] Node 0 DMA32 free:961932kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28524kB inactive_anon:0kB active_file:13356kB inactive_file:159924kB unevictable:1536kB writepending:464kB present:3129332kB managed:2566256kB mlocked:0kB bounce:0kB free_pcp:57056kB local_pcp:31460kB free_cma:0kB [ 659.184189][T21112] lowmem_reserve[]: 0 0 0 0 0 [ 659.189478][T21112] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 659.219765][T21112] lowmem_reserve[]: 0 0 0 0 0 [ 659.224546][T21112] Node 1 Normal free:3896000kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13920kB local_pcp:7680kB free_cma:0kB [ 659.257411][T21112] lowmem_reserve[]: 0 0 0 0 0 [ 659.262715][T21112] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 659.275905][T21112] Node 0 DMA32: 2900*4kB (UME) 940*8kB (UME) 957*16kB (UME) 703*32kB (UME) 429*64kB (UME) 117*128kB (UME) 39*256kB (UM) 34*512kB (UME) 31*1024kB (UM) 9*2048kB (UME) 195*4096kB (UM) = 975648kB [ 659.306348][T21112] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 659.340159][T21112] Node 1 Normal: 206*4kB (UM) 55*8kB (UME) 49*16kB (UME) 204*32kB (UME) 57*64kB (UME) 12*128kB (UME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3896000kB [ 659.358997][T21112] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 659.408201][T21112] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 659.417545][T21112] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 659.427622][T21112] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 659.437116][T21112] 44855 total pagecache pages [ 659.443938][T21112] 0 pages in swap cache [ 659.452787][T21156] __nla_validate_parse: 5 callbacks suppressed [ 659.452804][T21156] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3863'. [ 659.499455][T21112] Free swap = 124996kB [ 659.503791][T21112] Total swap = 124996kB [ 659.524991][T21112] 2097051 pages RAM [ 659.578341][T21112] 0 pages HighMem/MovableOnly [ 659.588568][T21112] 423781 pages reserved [ 659.593348][T21112] 0 pages cma reserved [ 659.620103][T21159] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 659.695989][T21170] netlink: 176 bytes leftover after parsing attributes in process `syz.8.3869'. [ 659.834111][T21173] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3868'. [ 659.861505][T21188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3871'. [ 659.908681][T21188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3871'. [ 660.336307][T21207] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3876'. [ 660.408068][T21207] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3876'. [ 660.445418][T21207] netlink: 'syz.3.3876': attribute type 4 has an invalid length. [ 661.142824][T21224] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3881'. [ 661.404962][T21223] netlink: 1041 bytes leftover after parsing attributes in process `syz.9.3879'. [ 661.432901][T21223] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3879'. [ 661.453255][T21230] wg1 speed is unknown, defaulting to 1000 [ 661.486162][T21230] virt_wifi0 speed is unknown, defaulting to 1000 [ 661.501295][T21230] lo speed is unknown, defaulting to 1000 [ 661.620551][T21246] wg1 speed is unknown, defaulting to 1000 [ 661.630913][T21246] virt_wifi0 speed is unknown, defaulting to 1000 [ 661.643364][T21246] lo speed is unknown, defaulting to 1000 [ 661.886605][T21260] tipc: Enabled bearer , priority 0 [ 661.908265][T21259] tipc: Enabling of bearer rejected, already enabled [ 661.928075][T21260] syzkaller0: entered promiscuous mode [ 661.933994][T21260] syzkaller0: entered allmulticast mode [ 662.016639][T21259] netlink: 'syz.2.3890': attribute type 33 has an invalid length. [ 662.033176][T21260] tipc: Resetting bearer [ 662.052602][T21258] tipc: Resetting bearer [ 662.095811][T21258] tipc: Disabling bearer [ 662.353233][T21283] erspan1: entered allmulticast mode [ 662.380349][T21284] openvswitch: netlink: Missing key (keys=40, expected=80) [ 662.416113][T21290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.248434][ T5852] Bluetooth: hci7: command 0x0405 tx timeout [ 663.831169][T21359] 8021q: adding VLAN 0 to HW filter on device bond9 [ 664.003149][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 664.015307][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 664.024138][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 664.035140][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 664.046126][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 664.158271][T21380] delete_channel: no stack [ 664.257331][T21386] netlink: 'syz.9.3928': attribute type 49 has an invalid length. [ 664.267230][T21378] wg1 speed is unknown, defaulting to 1000 [ 664.276000][T21387] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 664.290997][T21386] netlink: 'syz.9.3928': attribute type 49 has an invalid length. [ 664.303976][T21371] wg1 speed is unknown, defaulting to 1000 [ 664.310253][T21378] virt_wifi0 speed is unknown, defaulting to 1000 [ 664.392974][T21371] virt_wifi0 speed is unknown, defaulting to 1000 [ 664.392989][T21378] lo speed is unknown, defaulting to 1000 [ 664.447802][T21371] lo speed is unknown, defaulting to 1000 [ 664.645898][T21403] __nla_validate_parse: 14 callbacks suppressed [ 664.645917][T21403] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3931'. [ 664.762953][ T8397] erspan0: left allmulticast mode [ 664.770503][ T8397] erspan0: left promiscuous mode [ 664.777664][ T8397] bridge0: port 1(erspan0) entered disabled state [ 665.231474][ T8397] bond9 (unregistering): (slave gre1): Releasing backup interface [ 665.248093][ T8397] gre1 (unregistering): left promiscuous mode [ 665.314781][T21416] netlink: 'syz.2.3933': attribute type 21 has an invalid length. [ 665.394133][ T8397] team0: Port device geneve0 removed [ 665.727567][ T8397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.738770][ T8397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.748670][ T8397] bond0 (unregistering): Released all slaves [ 665.874928][ T8397] bond1 (unregistering): Released all slaves [ 666.018791][ T8397] bond2 (unregistering): Released all slaves [ 666.133252][ T8397] bond3 (unregistering): Released all slaves [ 666.138177][ T5845] Bluetooth: hci0: command tx timeout [ 666.246938][ T8397] bond4 (unregistering): Released all slaves [ 666.368885][ T8397] bond5 (unregistering): Released all slaves [ 666.486167][ T8397] bond6 (unregistering): Released all slaves [ 666.498830][ T8397] bond7 (unregistering): Released all slaves [ 666.617099][ T8397] bond8 (unregistering): Released all slaves [ 666.728791][ T8397] bond9 (unregistering): Released all slaves [ 666.837937][ T8397] bond10 (unregistering): Released all slaves [ 666.948563][ T8397] bond11 (unregistering): Released all slaves [ 666.968263][T21411] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3933'. [ 666.977245][T21411] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 666.996489][T21418] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.035775][T21416] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3933'. [ 667.076594][T21433] geneve4: entered promiscuous mode [ 667.154625][T21418] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.270022][T21418] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.366286][T21418] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.453207][T10426] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.495498][T10426] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.547180][T21371] chnl_net:caif_netlink_parms(): no params data found [ 667.610596][T10426] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.734599][T10426] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.827134][T21470] bond0: option lp_interval: invalid value (0) [ 667.836027][T21470] bond0: option lp_interval: allowed values 1 - 2147483647 [ 667.977572][T21470] bond10: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 667.994084][T21470] bond10 (unregistering): Released all slaves [ 668.043784][T21494] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20001 [ 668.070422][T21371] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.080295][T21371] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.087722][T21371] bridge_slave_0: entered allmulticast mode [ 668.110336][T21371] bridge_slave_0: entered promiscuous mode [ 668.130264][T21371] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.137442][T21371] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.145567][T21371] bridge_slave_1: entered allmulticast mode [ 668.157538][T21371] bridge_slave_1: entered promiscuous mode [ 668.208732][ T5845] Bluetooth: hci0: command tx timeout [ 668.284526][T21499] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 668.320162][T21371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.341784][T21499] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 668.353754][T21371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.387831][T21499] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 668.550566][T21371] team0: Port device team_slave_0 added [ 668.598636][T21371] team0: Port device team_slave_1 added [ 668.720636][ T8397] tipc: Left network mode [ 668.734519][T21530] sit2: entered promiscuous mode [ 668.755235][T21371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.763847][T21371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.837802][T21371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.866954][T21371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.884283][T21371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.886102][T21544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3963'. [ 668.920141][T21371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.943976][T21531] wg1 speed is unknown, defaulting to 1000 [ 668.952103][T21531] virt_wifi0 speed is unknown, defaulting to 1000 [ 668.978804][T21531] lo speed is unknown, defaulting to 1000 [ 669.287063][T21560] netlink: 'syz.3.3966': attribute type 2 has an invalid length. [ 669.390295][T21371] hsr_slave_0: entered promiscuous mode [ 669.398255][T21371] hsr_slave_1: entered promiscuous mode [ 669.405184][T21371] debugfs: 'hsr0' already exists in 'hsr' [ 669.421474][T21371] Cannot create hsr debugfs directory [ 669.735508][T21575] syzkaller0: entered promiscuous mode [ 669.742091][T21575] syzkaller0: entered allmulticast mode [ 669.772839][T21573] syzkaller0: left allmulticast mode [ 669.804020][ T8397] hsr_slave_0: left promiscuous mode [ 669.811219][ T8397] hsr_slave_1: left promiscuous mode [ 669.817058][ T8397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.141833][ T8397] team0 (unregistering): Port device team_slave_1 removed [ 670.189139][ T8397] team0 (unregistering): Port device team_slave_0 removed [ 670.288401][ T5845] Bluetooth: hci0: command tx timeout [ 670.531063][T21584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3972'. [ 670.642328][T21578] syzkaller1: entered promiscuous mode [ 670.648435][T21578] syzkaller1: entered allmulticast mode [ 670.894611][T21584] bond8: left allmulticast mode [ 670.902206][T21584] bond8: left promiscuous mode [ 670.907322][T21584] bridge0: port 1(bond8) entered disabled state [ 671.225546][T21598] syzkaller1: entered promiscuous mode [ 671.231947][T21598] syzkaller1: entered allmulticast mode [ 671.254124][T21596] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode [ 671.262532][T21596] mac80211_hwsim hwsim28 syzkaller0: entered allmulticast mode [ 671.513186][ T8397] IPVS: stop unused estimator thread 0... [ 671.672623][T21624] wg1 speed is unknown, defaulting to 1000 [ 671.681181][T21624] virt_wifi0 speed is unknown, defaulting to 1000 [ 672.112714][T21371] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 672.157526][T21371] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 672.185132][T21371] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 672.276279][T21371] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 672.369271][ T5845] Bluetooth: hci0: command tx timeout [ 672.491372][T21371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.515817][T21652] nbd: couldn't find device at index 536870912 [ 672.559469][T21371] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.626577][ T8397] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.633873][ T8397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.648475][ T8397] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.655643][ T8397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.716233][T21656] wg1 speed is unknown, defaulting to 1000 [ 672.741732][T21656] virt_wifi0 speed is unknown, defaulting to 1000 [ 673.101585][T21371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.655554][T21371] veth0_vlan: entered promiscuous mode [ 673.689104][T21371] veth1_vlan: entered promiscuous mode [ 673.783444][T21371] veth0_macvtap: entered promiscuous mode [ 673.820704][T21371] veth1_macvtap: entered promiscuous mode [ 673.904824][T21371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.920935][T21371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.940696][ T8402] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.991217][ T8402] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.036279][ T8402] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.065421][ T8402] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.084535][T21702] netlink: 'syz.8.4000': attribute type 1 has an invalid length. [ 674.139266][T21704] netlink: 'syz.8.4000': attribute type 1 has an invalid length. [ 674.148953][T21702] bond10: entered promiscuous mode [ 674.154601][T21702] 8021q: adding VLAN 0 to HW filter on device bond10 [ 674.189768][T21704] 8021q: adding VLAN 0 to HW filter on device bond10 [ 674.197019][T21704] bond10: (slave gre1): The slave device specified does not support setting the MAC address [ 674.207523][T21704] bond10: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 674.219146][T21704] bond10: (slave gre1): Opening slave failed [ 674.361006][T21709] syzkaller1: entered promiscuous mode [ 674.370486][T21709] syzkaller1: entered allmulticast mode [ 674.399973][T21713] bond0: (slave bond_slave_0): Releasing backup interface [ 674.410349][T21713] bond_slave_0: left promiscuous mode [ 674.415676][T21719] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4003'. [ 674.430087][T21713] bond0: (slave bond_slave_1): Releasing backup interface [ 674.439371][T21720] netlink: 'syz.8.4003': attribute type 3 has an invalid length. [ 674.453691][T21713] bond_slave_1: left promiscuous mode [ 674.460962][T21720] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4003'. [ 674.472170][T21713] team0: Port device C removed [ 674.480835][T21713] team0: Port device team_slave_1 removed [ 674.486960][T21713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.494897][T21713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.502879][T21713] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 674.527042][ T8397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.541797][ T8397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.574253][T21723] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4004'. [ 674.695781][T21730] sctp: [Deprecated]: syz.8.4005 (pid 21730) Use of int in max_burst socket option deprecated. [ 674.695781][T21730] Use struct sctp_assoc_value instead [ 674.714549][T10424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.741943][T10424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.934202][T21734] tap0: tun_chr_ioctl cmd 1074025677 [ 674.945939][T21734] tap0: linktype set to 270 [ 675.093236][T21750] Bluetooth: MGMT ver 1.23 [ 675.136311][T10527] ------------[ cut here ]------------ [ 675.141900][T10527] ida_free called for id=2733 which is not allocated. [ 675.192535][T10527] WARNING: CPU: 0 PID: 10527 at lib/idr.c:592 ida_free+0x280/0x310 [ 675.200925][T10527] Modules linked in: [ 675.204843][T10527] CPU: 0 UID: 0 PID: 10527 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 675.214981][T10527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 675.225688][T10527] RIP: 0010:ida_free+0x280/0x310 [ 675.230734][T10527] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 81 2c 0c 00 90 48 c7 c7 20 27 74 8c 44 89 fe e8 91 1c 59 f6 90 <0f> 0b 90 90 eb 34 e8 75 ae 95 f6 49 bd 00 00 00 00 00 fc ff df eb [ 675.250757][T10527] RSP: 0018:ffffc90002fc7880 EFLAGS: 00010246 [ 675.256851][T10527] RAX: f96f9605b6c02300 RBX: 0000000000000a06 RCX: ffff888030980000 [ 675.265157][T10527] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 675.271189][ T30] audit: type=1107 audit(1759641285.200:9): pid=21759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 675.273280][T10527] RBP: ffffc90002fc7968 R08: 0000000000000003 R09: 0000000000000004 [ 675.293666][T10527] R10: dffffc0000000000 R11: fffffbfff1b7a118 R12: 1ffff920005f8f14 [ 675.301749][T10527] R13: dffffc0000000000 R14: ffff888075cb5200 R15: 0000000000000aad [ 675.310228][T10527] FS: 0000000000000000(0000) GS:ffff88812639b000(0000) knlGS:0000000000000000 [ 675.319427][T10527] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 675.326121][T10527] CR2: 00007feb7854a000 CR3: 0000000075162000 CR4: 00000000003526f0 [ 675.334574][T10527] Call Trace: [ 675.338189][T10527] [ 675.341139][T10527] ? __pfx_ida_free+0x10/0x10 [ 675.345843][T10527] ? namespace_unlock+0x486/0x760 [ 675.350994][T10527] free_mnt_ns+0x52/0xe0 [ 675.355252][T10527] namespace_unlock+0x529/0x760 [ 675.360194][T10527] ? __pfx_namespace_unlock+0x10/0x10 [ 675.365587][T10527] ? free_nsproxy+0x3e/0x350 [ 675.370604][T10527] free_nsproxy+0x3e/0x350 [ 675.375040][T10527] do_exit+0x6b0/0x2300 [ 675.379278][T10527] ? do_raw_spin_lock+0x121/0x290 [ 675.384316][T10527] ? __pfx_do_exit+0x10/0x10 [ 675.389039][T10527] do_group_exit+0x21c/0x2d0 [ 675.393657][T10527] ? lockdep_hardirqs_on+0x9c/0x150 [ 675.399210][T10527] get_signal+0x1285/0x1340 [ 675.403754][T10527] arch_do_signal_or_restart+0xa0/0x790 [ 675.409520][T10527] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 675.415721][T10527] ? exit_to_user_mode_loop+0x40/0x110 [ 675.421356][T10527] exit_to_user_mode_loop+0x72/0x110 [ 675.426672][T10527] do_syscall_64+0x2bd/0x3b0 [ 675.431599][T10527] ? lockdep_hardirqs_on+0x9c/0x150 [ 675.436833][T10527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.443934][T10527] ? clear_bhb_loop+0x60/0xb0 [ 675.448721][T10527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.454638][T10527] RIP: 0033:0x7fdd74b8d8dc [ 675.459367][T10527] Code: Unable to access opcode bytes at 0x7fdd74b8d8b2. [ 675.466393][T10527] RSP: 002b:00007ffc2fb2c2f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 675.474917][T10527] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007fdd74b8d8dc [ 675.482966][T10527] RDX: 0000000000000030 RSI: 00007ffc2fb2c3b0 RDI: 00000000000000f9 [ 675.491359][T10527] RBP: 00007ffc2fb2c35c R08: 0000000000000000 R09: 00007ffc2fb2c067 [ 675.499476][T10527] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000025e [ 675.507563][T10527] R13: 00000000000927c0 R14: 00000000000a4c2e R15: 00007ffc2fb2c3b0 [ 675.515645][T10527] [ 675.519009][T10527] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 675.526297][T10527] CPU: 0 UID: 0 PID: 10527 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 675.535850][T10527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 675.545906][T10527] Call Trace: [ 675.549180][T10527] [ 675.552112][T10527] dump_stack_lvl+0x99/0x250 [ 675.556705][T10527] ? __asan_memcpy+0x40/0x70 [ 675.561289][T10527] ? __pfx_dump_stack_lvl+0x10/0x10 [ 675.566482][T10527] ? __pfx__printk+0x10/0x10 [ 675.571080][T10527] vpanic+0x281/0x750 [ 675.575052][T10527] ? __pfx__printk+0x10/0x10 [ 675.579638][T10527] ? __pfx_vpanic+0x10/0x10 [ 675.584138][T10527] ? is_bpf_text_address+0x26/0x2b0 [ 675.589338][T10527] panic+0xb9/0xc0 [ 675.593048][T10527] ? __pfx_panic+0x10/0x10 [ 675.597468][T10527] __warn+0x31b/0x4b0 [ 675.601440][T10527] ? ida_free+0x280/0x310 [ 675.605757][T10527] ? ida_free+0x280/0x310 [ 675.610070][T10527] report_bug+0x2be/0x4f0 [ 675.614385][T10527] ? ida_free+0x280/0x310 [ 675.618703][T10527] ? ida_free+0x280/0x310 [ 675.623038][T10527] ? ida_free+0x282/0x310 [ 675.627353][T10527] handle_bug+0x84/0x160 [ 675.631593][T10527] exc_invalid_op+0x1a/0x50 [ 675.636090][T10527] asm_exc_invalid_op+0x1a/0x20 [ 675.640927][T10527] RIP: 0010:ida_free+0x280/0x310 [ 675.645853][T10527] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 81 2c 0c 00 90 48 c7 c7 20 27 74 8c 44 89 fe e8 91 1c 59 f6 90 <0f> 0b 90 90 eb 34 e8 75 ae 95 f6 49 bd 00 00 00 00 00 fc ff df eb [ 675.665444][T10527] RSP: 0018:ffffc90002fc7880 EFLAGS: 00010246 [ 675.671504][T10527] RAX: f96f9605b6c02300 RBX: 0000000000000a06 RCX: ffff888030980000 [ 675.679464][T10527] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 675.687423][T10527] RBP: ffffc90002fc7968 R08: 0000000000000003 R09: 0000000000000004 [ 675.695381][T10527] R10: dffffc0000000000 R11: fffffbfff1b7a118 R12: 1ffff920005f8f14 [ 675.703339][T10527] R13: dffffc0000000000 R14: ffff888075cb5200 R15: 0000000000000aad [ 675.711404][T10527] ? __pfx_ida_free+0x10/0x10 [ 675.716078][T10527] ? namespace_unlock+0x486/0x760 [ 675.721102][T10527] free_mnt_ns+0x52/0xe0 [ 675.725334][T10527] namespace_unlock+0x529/0x760 [ 675.730185][T10527] ? __pfx_namespace_unlock+0x10/0x10 [ 675.735567][T10527] ? free_nsproxy+0x3e/0x350 [ 675.740146][T10527] free_nsproxy+0x3e/0x350 [ 675.744552][T10527] do_exit+0x6b0/0x2300 [ 675.748706][T10527] ? do_raw_spin_lock+0x121/0x290 [ 675.753728][T10527] ? __pfx_do_exit+0x10/0x10 [ 675.758336][T10527] do_group_exit+0x21c/0x2d0 [ 675.762920][T10527] ? lockdep_hardirqs_on+0x9c/0x150 [ 675.768123][T10527] get_signal+0x1285/0x1340 [ 675.772721][T10527] arch_do_signal_or_restart+0xa0/0x790 [ 675.778299][T10527] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 675.784472][T10527] ? exit_to_user_mode_loop+0x40/0x110 [ 675.789946][T10527] exit_to_user_mode_loop+0x72/0x110 [ 675.795235][T10527] do_syscall_64+0x2bd/0x3b0 [ 675.799812][T10527] ? lockdep_hardirqs_on+0x9c/0x150 [ 675.805023][T10527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.811167][T10527] ? clear_bhb_loop+0x60/0xb0 [ 675.815841][T10527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.821720][T10527] RIP: 0033:0x7fdd74b8d8dc [ 675.826127][T10527] Code: Unable to access opcode bytes at 0x7fdd74b8d8b2. [ 675.833132][T10527] RSP: 002b:00007ffc2fb2c2f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 675.841541][T10527] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007fdd74b8d8dc [ 675.849512][T10527] RDX: 0000000000000030 RSI: 00007ffc2fb2c3b0 RDI: 00000000000000f9 [ 675.857480][T10527] RBP: 00007ffc2fb2c35c R08: 0000000000000000 R09: 00007ffc2fb2c067 [ 675.865442][T10527] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000025e [ 675.873402][T10527] R13: 00000000000927c0 R14: 00000000000a4c2e R15: 00007ffc2fb2c3b0 [ 675.881392][T10527] [ 675.884548][T10527] Kernel Offset: disabled [ 675.888860][T10527] Rebooting in 86400 seconds..