last executing test programs: 3.169933962s ago: executing program 0 (id=263): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) accept4(r0, 0x0, 0x0, 0x80000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f0000001680)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @mcast1, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x18}, 0xc895) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x558, 0x0, 0x0, 0x1a8, 0x3d8, 0x1a8, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz1\x00'}}]}, @TTL={0x28}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={{0x40}}, @common=@ah={{0x30}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'pim6reg0\x00', 'erspan0\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES32=r1, @ANYRES8=r4], &(0x7f0000000680)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000000000000000000000000000071122a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r7 = socket(0x10, 0x3, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r9 = accept4(r8, 0x0, 0x0, 0x80800) sendmmsg$alg(r9, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40084}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESHEX, @ANYBLOB="16000000005356d694a1e01a6b00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r6], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) bind$alg(r2, &(0x7f0000000840)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-generic\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xe, 0x13, &(0x7f0000000a00)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="0000070000000000b700bfa200000000000007020000000008000000b704000002000000850000008200000094410001040000000000000000000000000000000000a5c0f699e5ffe7ccae0bc2acc2ae3c9daba36a1969d7f1f42ce2dc86d926ac0def63bfab355d844ca452824a9aea4066f883e788b638c4972494d3b9c6aa2fc076bf90bdb0bcbdaea2f2ee58a4188950aabfb28df1d2bc23ca3ddc23993ddf9e53fbd12d5fe8ce014814fa63131e47f9"], &(0x7f0000000700)='GPL\x00', 0x9, 0x100, &(0x7f0000000dc0)=""/256, 0x40f00, 0xb, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x8, 0x6, 0x46}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[0xffffffffffffffff], &(0x7f0000000b40), 0x10, 0x2}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="180000003a00010000000000e10000001c000000040004801472454a438789"], 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000feffffff00000000000000208500000053000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r10, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r10, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r11) 2.736049505s ago: executing program 0 (id=265): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000030425bd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000800000140012800b00010062726964676500000400028008000a00", @ANYRES32=r6, @ANYBLOB="adb61b5285064328e0d6792bd619529cc1cb1247d4175790cd46d4eae13f9c586ac83b1940b1a9b3940772023e4585cc83fc0fbc396ceb96fc8394df1fe58cf8401cd82cbeed3b8a7258e85e88bd4abecb86bedb1aab06c81c6192f0209e3a8e885fc5b38ea3938f02e0ec314d9f0817b2ce1fe7e9d5b3f0e267405c85c24789d978677b2a2e334b3dfa4df3330251602cdee6b1629a9fca671fcf5f0464082f0ef62eb609f4bb09fb98cd6897618f8c1d25277cfb018d568d098dc91bf4602bde1c19026875ff"], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000030425bd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000800000140012800b00010062726964676500000400028008000a00", @ANYRES32=r6, @ANYBLOB="adb61b5285064328e0d6792bd619529cc1cb1247d4175790cd46d4eae13f9c586ac83b1940b1a9b3940772023e4585cc83fc0fbc396ceb96fc8394df1fe58cf8401cd82cbeed3b8a7258e85e88bd4abecb86bedb1aab06c81c6192f0209e3a8e885fc5b38ea3938f02e0ec314d9f0817b2ce1fe7e9d5b3f0e267405c85c24789d978677b2a2e334b3dfa4df3330251602cdee6b1629a9fca671fcf5f0464082f0ef62eb609f4bb09fb98cd6897618f8c1d25277cfb018d568d098dc91bf4602bde1c19026875ff"], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) 2.502931905s ago: executing program 2 (id=270): ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x800) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000080)={{0x8, 0x3}, 0x100, './file0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'vlan0\x00', &(0x7f0000000280)=@ethtool_sset_info={0x37, 0x401, 0x8, [0x3bd3]}}) r3 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000380)=0x60) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000003c0)) r4 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r4, &(0x7f0000000400)=""/172, 0xac, 0x20, &(0x7f00000004c0), 0x20) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000000500)={0x6, {0x5, 0xfffffffffffffff3, 0x4, 0x80000001, 0x81}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000580)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e21, 0x74, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000005c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000600)={r5, @in6={{0xa, 0x4e24, 0x7ff, @mcast1, 0x200}}, 0x4, 0x4}, 0x90) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000006c0), &(0x7f0000000700)=0xc) r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x0, @dev}, &(0x7f0000000780)=0x10, 0x80000) getsockopt$inet_buf(r6, 0x0, 0x23, &(0x7f00000007c0)=""/95, &(0x7f0000000840)=0x5f) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000880)=0x2) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, &(0x7f00000008c0)={'mangle\x00', 0xb6, "71c05be1465259c5f03deb3d15bf46080a30742288d0161efa919cc6da84cec6f73408684a6e3424419284f34eaf216297f94808aadecffa171d1f7a3bf5778ff4b617d02fdf0f9ffd1ecf83a39a8c26bb1459545218be70ed0b8d6438499df6458ab89fb461c3e4bad444634652499794a5fe189552eb4ad5d783fbb0a4a015e217efafa14b5f9f25a1c1d9c7f0a8d93e74dd4c550b043fff111ba294a088952d2e007f0a66040d90ec9ee6fbc0cc509b7eaecddea3"}, &(0x7f00000009c0)=0xda) recvmsg(r1, &(0x7f0000000b80)={&(0x7f0000000a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a80)=""/114, 0x72}], 0x1, &(0x7f0000000b40)}, 0x1) ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, &(0x7f0000000bc0)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0xffff, 'syz0\x00', @default, 0x7c09a6ad, 0x0, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) sendmmsg$alg(r8, &(0x7f0000001780)=[{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c40)="a1e69bfec1b67dc6874299325b0dc0e03272a3de5a244edaf409f82197a0af63467c9f338e0dd89540206592a28500cb819deaaf96c7526fd200e126ff9b98496c5580f6db1193e3885e4ce5e4e95031b701730eb7055984fcf5a32e0f9a8710c9d4095a86b51e5ddf78c03cc4d49c21f80fb2e98006dd5c49d5236a2f3fe84e9c4c79f3", 0x84}], 0x1, &(0x7f0000000d40)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8000}, @iv={0xe8, 0x117, 0x2, 0xd2, "1240c79740be99c366464e4addaa78a60a03467ac7a3348213cb9502735647fc84382d2d97b281af687481170ead6d91d6c9077a578e914b16a9a271f005ecae35c8eb256d8ff27a3339a2cb100a87aa71df65abf7360243c0086ef052cafe4f874a757d6df2c79aaf52b25161dcb38c8948793fd1bbdc93154ede4e3c42c6122ab967845eca341cee8f51805eab5caad7e37c62c175fe280f15a3e258f7c02663e33c085cb88f5a0f15a06c08a5c9bd8ede510cf90b25804e39d0b4abe184391f4ce143dc47ec09f043524f72328158d17f"}, @iv={0x98, 0x117, 0x2, 0x81, "cc3c7c5ab4b5b353c85339c83e91f81f03fb2bcd79bdf656fbfca7f19e92b23f91de9ee97e2924f6d877d90d0d63c86fe290e5c0e81283ba3a7687eaa892b3e215961dbf17eaef60bfc16855ab4fa61aed45f65bdabb3edbb2ca2448da44326d96c49d51fd1509ac3bdc6d10e1300b88e77b2f31116a6fc18c849a7b136be5a126"}, @iv={0xa0, 0x117, 0x2, 0x8c, "9b76751b170da5e8d6b099d0699a42fbb57e20ebf25d8481653510d9c01f4247ff962efbda8b014c2e58a5466c18e6956dd7dc23f1606331ef3fd8c48e03f35e307c60607e5502c70ed18ea9d9f71e2f49418bb6b0075af5999dadbf4fa06d59302be2eb8c47b0598d9f078ac09368198195dd758c13f7dcfea60692b73cf50111dbf3ffd579fdf8050df501"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xf0, 0x117, 0x2, 0xd6, "fc0cf379598f9f675128e779a34622193ceacf631374278f784c1cc46922f4df8688eef7ad0aca034b90452e47d140f50fdefbdbbe8b82b7d01a3e2c558376361b1ac50afb26294e179e3ca8e8057e1c0a7dd9fda9f6cea9356f166c58c829441dee6b3410404a5e96db43ababa33bead2bbdae6532093be17a92f50783d05ebae0d91b8f17632eee2bdae93cdc25b6f88b7c816a5dc686b62cb53a9af33d8b82e9038dfc8e110a0952c1c15ad68b709362d00fb8c6ae829c7e22dbac8c5ac1db7279e399455b5008fa46a170a9f86e94fc00c828dbf"}, @op={0x18}], 0x3a0, 0x20004000}, {0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001100)="b1438205d1c6d32a855391399e5b8051e17567ce6b003e1d7285d0af337444add45f803011dae9e612ad6081ff585cf63079f473af6ba26776ba840ff4", 0x3d}, {&(0x7f0000001140)="c52e60a1b00efdcfcadb3e69df8c22d5ca796eb0140dbc4fc394af2e87debb800fac374b597fa10494d8bc60f623d13fb530eee879e31c0588a7fdf3816da7b742d3dedc3b580e050600eeee4bb7d1493f6df68ec13a58a9e9a6c94613e1fb13c3f9d66b6582fc4788c9cf93a3415737bd02e1006487f9c085cdd2c3e0b8d57c44fc5f3197af07ea40fba8a15565ab1ca99701b6d4d42c95d2a37617a4778e129d93c68a315fee186da5be2586b3", 0xae}, {&(0x7f0000001200)="da7af0cbbfc8314e563a7d674ba065ff517714dddb4de9168ed4f3c3809fd02df01c4693d4ba325b01b3f2b8f35e485fb20310a7631e6e66b311865f3bcf3946710d3f80b14743163d904b0e4608b684cf807e3442d3bce80b98fa9b08f03dac6b34f258ed04ffe1a5ce3d3f588a1bdad76f70c6216a9f3c1acf634cd1cfdef7e30582db307baef80d324bff5e74f9272fd3340a932007d5ecba721a10e6f4d4073d00d01bdf97f4fdaef9b94f02628e6eb4c7ceb74937a5c46455c8cbb21652ef4f59e19c9d160c92c4f6bdf258f57365ebe77f8091769a8276c8918aee4592b055275adccdf655750be9ecb4fc865f5543a5f2be", 0xf5}, {&(0x7f0000001300)="b8f796ab628f3741ee0b03901d0dfca9259735587596f73089a73d4c3a4780f965fb16e5d3ad6bb9a800abec950ade22f657b5046416cbed429e84fd9d0be733568e1edae1ba4175197bc8bcc41a460ca047673b60ca73a45d7cadc56a00074f99cb4fe927180189514044e588eb89", 0x6f}, {&(0x7f0000001380)="b8363a46a1812f7106b92c18895272de6d99bfa96b9042a5da70053fdc250cc903d7917fa33e7814175dc5168d5b588e31a35c55a5721ba3829fadfa96c259fbaf6c7bbfab2234a9ed0fceeba97232678d85dc24ccdbfd1ec8d58b060ccb55f3ec34844bc1c28a3ba9d983a032eec9f3bb198f320d25614d64ca9c851a1e9875f73638423019718c918069e1d3f7436457a0befe3cf355e305df4b68908e39ff0a78a7765231185971868c6496c579b93b76afac53fa118a0bc545fbcc4dcb28dccfbb4ff26819da985bf37f4bd9ca97ac1baf80c063eef972582a32dd", 0xdd}, {&(0x7f0000001480)="329568f358d43ba4ac28abdd88eccbc5ce1a76e1c04e1e4e476c8e9b4f5e8916339a898c175200651d1f3371011888ada139d50b73929d7505da735e738b06659660f707091e94534d3d8f73a6903693293ea7cbc6144cb795c9a4082ccbeba49c78ac13d974f39ad7c57369e3a1", 0x6e}, {&(0x7f0000001500)="b85db96c17572701db14cecc4e4070a7e60ff7ffa44a6ee5ea3f2a43269bb83fbd036343a5c80d16d95431983f2014f31a8e88593df99558f8eaa35b06d80b90081d2d173856725dac6000d5d1a53d1da6a3208daaa81db1bc29820e55f38fc7d62abdc94280713b0d24a371298a6f772ecea51fb9e5f9098b56bc954ec494b966bd01e2a2bd41347428ead4c0e5b384611836df15a7", 0x96}, {&(0x7f00000015c0)="ff12a2968240199525a03546e03f34ca36a787ad83001d43b16d1149f55c9a82b30f95b459a0fc0648f546c053ac52b22a", 0x31}], 0x8, &(0x7f0000001680)=[@iv={0xc8, 0x117, 0x2, 0xb1, "054fa1f8b6312173a2e65b92ca1a2440781b387d22995d0f1258d68046d79dcf89091b6f2391fa7dffcaac57c5963b8dc390ae9c2ab4387f5fb0fd1d9d7f138ad1feff3a9b895de02ef39d203f2dad0a67907b88414a25deea291b4f4ff09e90d13da7a2bbbadf6adcefe28df0cd52b8506f33fb75e07b3505f38066b50188770bc8c94f4ce144812c980972083833c2f9ca70fc8ac970f23dc2354d6348dfc34c22ec80537e2a4bbead56923a1c468806"}], 0xc8, 0x3b866ddca1e14263}], 0x2, 0x9c0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r6, 0x941c, 0x0) shutdown(r2, 0x1) socket$netlink(0x10, 0x3, 0x15) setsockopt$X25_QBITINCL(r8, 0x106, 0x1, &(0x7f0000001800)=0x1, 0x4) sendmsg$AUDIT_GET_FEATURE(r8, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x10, 0x3fb, 0x702, 0x70bd2c, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x200440c0}, 0x4000) write(0xffffffffffffffff, &(0x7f0000001980)="97636e5ecfab86e21adc379c03bbee734fa80ee41cad79956acb656348a7ef0fb740a86fd622c0099840d4c434e1a773e31f95fa6458b279e01ad2f0c91447f8ae5b3267055ce81b889dc7af6592486095039fef4695b34f1060168fb919c4165f42ae496c77b33854c5e81fc02670c58dfb229e2ccc875542e2f763ecffd152aa689db8a8e5946b5d63e37dd4ba53bfdb5fea64", 0x94) 2.22506291s ago: executing program 4 (id=273): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = gettid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) preadv(r2, &(0x7f0000001500)=[{0x0}, {0xfffffffffffffffe}], 0x2, 0x1, 0x2) (async) r3 = getuid() ioctl$TUNSETOWNER(r2, 0x400454cc, r3) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x140, 0x36, 0x20, 0x70bd25, 0x25dfdbfe, {0x1d}, [@generic="a657d08aa700fb9c8bed50945cecf105f9ae41ab77de49c628820239a75cabef6f612dd199264fb9e59416222217ab075b8d1829cf3d42cbd06a755357ee564fd1475766", @nested={0xe7, 0x12e, 0x0, 0x1, [@typed={0x8, 0xde, 0x0, 0x0, @pid=r1}, @typed={0x14, 0x99, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0xd}, @typed={0x8, 0x8c, 0x0, 0x0, @uid=r3}, @generic="4b03ec552293c2e2a6610afe83aa9e711ae2acb5e14d893b10bb7e46038c6e1b512598237cfd9c18e251279d35f2ff61405aa6474f223f9553d172ecc89c458f3220acd5ed65fb9efd3e1ee9597706866ea46fe8fd73fa12c625f771b0844f9ba4211905a9a332b7abc54f17d51f3a17a8fad781b5a8612ed6a3bd19f065177cbd88106ddba9895bc23469293f657bcb358082193af9b59cd1566df7d2e85ce8fbaa80519fd17d183ebadfdee49895c1b09b71dff3e3d7fadf5c40"]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20040090}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000101000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a010400000000000000000100000009"], 0x114}, 0x1, 0x0, 0x0, 0x4008085}, 0x0) (async, rerun: 32) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000140)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000600)={0x1f, 0x2, @none, 0x7f, 0x2}, 0xe) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r6, @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b00011f46f02f73656300001400028005000b0000000000060002404e22000008000500", @ANYRES64=r7], 0x4c}}, 0x20000004) 2.131923491s ago: executing program 0 (id=274): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4050) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000010000a80000000060a0904000000000000000002000000540004802c0001800e000100696d6d656469617465000000180002800c00028005000100c4000000080001400000000924000180090001006d6574610000000014000280080002400000000808000140000000100900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0xc8}}, 0x0) 2.095073351s ago: executing program 1 (id=276): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x22020400) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) (async, rerun: 64) bind$rose(r1, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x3ff, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) (rerun: 64) setsockopt$inet6_int(r0, 0x29, 0x21, 0x0, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x10) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000000202010100000000000000000a0000093c0002800c000280050001003a0000002c00018014000300fe80000000000000000000000000000d14000400ff010000000000000001000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) (async) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8=r5, @ANYRES32=r9, @ANYRES32=0x0, @ANYRES8=r8], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r13 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r13, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) setsockopt$inet_msfilter(r13, 0x0, 0x29, &(0x7f0000000300)={@multicast1, @local, 0x1}, 0x10) (async, rerun: 32) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4) (rerun: 32) sendmsg$inet(r12, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010200200000000000d9bfa6400008000300", @ANYRES32=r7, @ANYBLOB="140004006e696376663000000000000000000000080005000a000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x240048d0) 1.995280963s ago: executing program 4 (id=277): r0 = socket$kcm(0x2, 0x922000000001, 0x106) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f60e"]) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000002300)=ANY=[@ANYBLOB="dccdd8706b7c29240dd5638785173e0f67930a3df41d07f764bad85e753a874e69b8b2c4dcd047fb1102873979b8752541de1b7c5fe069cdad5261"]) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2d, 'net'}]}, 0x5) (async) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) recvmsg$unix(r2, &(0x7f0000000480)={&(0x7f0000000000), 0x6e, &(0x7f0000000340)=[{&(0x7f0000000080)=""/100, 0x64}, {&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000140)=""/98, 0x62}, {&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f00000004c0)=""/202, 0xca}], 0x5, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x0) 1.944831574s ago: executing program 3 (id=278): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xf}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit={0x95, 0x0, 0x0, 0x4000}, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x4}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) 1.924604271s ago: executing program 1 (id=279): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000850000000010002020207b1af80501200000dda10000000000de1b480f258e7f77677e47dc28b15ac803dd8967f79e026db6cf8b2c0e156e2c6f1f34bc3d2f944b6bfc3dc2d5ebdc34", @ANYRESDEC=r0], 0x0, 0x34cb, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) 1.875929578s ago: executing program 0 (id=280): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="31204000000000000c002b8008000100", @ANYRES32=r3, @ANYBLOB="08091b000000003aae7a64"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="780000001000030400000000fcdbdf2500000400", @ANYRES32=0x0, @ANYBLOB="00030000000000005000128009000100766c616e00000000400002800600010002000000340004800c0039004ef1f011ffffffff0c0001000300000000feffff0c00010005000000f7ffffff0c004100080000000000000008000500", @ANYRES32=r6], 0x78}}, 0x0) 1.803490795s ago: executing program 3 (id=281): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xf000000) socket$kcm(0x10, 0x5, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000bc30102008000000950000000000000015668de70db46a4d95e2"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x9, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000080), 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b40000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r5, @ANYBLOB="00000000000000006100ed0000000000180000000000145119c9a418b8d0c5f06214e235d7000000000000000000009500000000000000b50a00000000000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x1, '\x00', 0x0, 0x900, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket(0x28, 0x5, 0x0) 1.757986581s ago: executing program 4 (id=282): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ca, &(0x7f0000000380), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], 0x0, 0x97, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000005c0), &(0x7f0000000640), 0x8, 0x53, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x1, &(0x7f0000000700)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb, 0x6, 0x20}], &(0x7f0000000740)='GPL\x00', 0xa, 0xb3, &(0x7f00000007c0)=""/179, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000a80)={0x2, 0x0, 0x7, 0x75b9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000ac0)=[r1], &(0x7f0000000b00)=[{0x2, 0x2, 0xb, 0xd}, {0x2, 0x3, 0x7, 0x6}], 0x10, 0xfffff65e}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x4, 0xd, &(0x7f0000000cc0)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r1, @ANYRES64=r2, @ANYRESOCT=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000400)="e8", &(0x7f0000000480)=@tcp6=r0, 0x1}, 0x20) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, &(0x7f0000001e40), 0x4) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40808000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, ["", "", "", "", ""]}, 0x14}}, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r10, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @empty}, 0x1c) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r11, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) close(0x4) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r12, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNATTACHFILTER(r12, 0x401054d5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000600), 0x4) socket$netlink(0x10, 0x3, 0xc) 1.705110999s ago: executing program 1 (id=283): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000900)={{{@in=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000580)=0x108) r4 = gettid() getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@private0, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000300)=0xe8) r6 = socket$kcm(0x2, 0x5, 0x84) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="0000000018009595bd39a4000000000000010000", @ANYRES32, @ANYRES32], 0x58, 0x400}, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@private1, @in6=@rand_addr=' \x01\x00', 0x4e21, 0x0, 0x4e23, 0x9d, 0xa, 0xa0, 0x40, 0x0, 0x0, r5}, {0x1, 0x2, 0x4, 0x0, 0x7a685e05, 0x0, 0x7, 0xfffffffffffffffe}, {0x32, 0x80000000}, 0x6, 0x6e6bb3, 0x0, 0x0, 0x2, 0x3}, {{@in6=@empty, 0x4d5, 0x32}, 0xa, @in=@empty, 0x3501, 0x3, 0x2, 0xb, 0x3, 0x6a, 0x2}}, 0xe8) socket$phonet_pipe(0x23, 0x5, 0x2) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @private1, 0xe}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r1, 0x1000, 0xe0, 0x3}) r9 = gettid() r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="3e000000ecf816249a1f2cb8b4e7be578e8881545eb3b78913d48b352ae5768b941bdea5dbacbb907d4e7445bfad", @ANYRES16=r11, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r12, @ANYBLOB="2000308014000400403a050c5baee2004ef2b6d713459a7a0500020000000000"], 0x3c}}, 0x0) sendmsg$AUDIT_SET(r8, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x3e9, 0x1, 0x78bd2a, 0x25dfdbfe, {0x4, 0x1, 0x2, r9, 0x2000, 0xc234, 0x71eb140b, 0x6, 0x0, 0x2, 0x1}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) getsockopt$packet_int(r8, 0x107, 0x33, &(0x7f0000000080), &(0x7f0000000140)=0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @private1, 0xe}, 0x1c) unshare(0x400) r13 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') readv(r13, 0x0, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000900020073797a31000000000c0007800800120000000000050005ef090000000500008000000000000003000000050001000700"/88], 0x58}}, 0x0) 1.569261378s ago: executing program 0 (id=284): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071115e00000000008510000002000000850000004800000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) unshare(0x8040480) (async) unshare(0x2a020480) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000050110c00000000008510000002000000850000000500000095000000000000009500a505000000003ae8633ddd8dcee12a8af778a01aad5559906c9a79d4f8ad11b18855a006a80dbbe6c19d37b07f7674b96e32b4a6b1d122c5f1d6db76ba024285600fa5119b0310a47d3daa8a38490886d1f3c3ad8ffe096b7b07fa89197e7a379b869144e12174b639e716e721df57e9960a8816fdd7"], &(0x7f0000000080)='GPL\x00', 0xa, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 1.499465362s ago: executing program 2 (id=285): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @private}}, &(0x7f0000000080)=0x80) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000140)={0x8, 0x0, 0x1}, 0x10) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x408}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44801}, 0x2000c800) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000009, 0x13, r2, 0x12531000) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x1402, 0x100, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x24000080) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x6}]}, 0x1c}}, 0x4004001) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000500), 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r2) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000640)={'gretap0\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x8000, 0x8, 0x9a5b, 0xd, {{0xb, 0x4, 0x2, 0x1, 0x2c, 0x65, 0x0, 0x8f, 0x27, 0x0, @loopback, @private=0xa010101, {[@lsrr={0x83, 0x17, 0xff, [@empty, @loopback, @loopback, @multicast2, @broadcast]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r5, 0x20, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x693c78bfd6c4fa5e}, 0x14810) (async) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x110, 0x453, 0x400, 0x70bd27, 0x25dfdbfb, "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", ["", "", "", "", "", "", "", ""]}, 0x110}, 0x1, 0x0, 0x0, 0x41}, 0x58040) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r7, 0x200, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) getsockopt$inet6_tcp_int(r4, 0x6, 0x17, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) (async) r8 = socket$kcm(0x29, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)="c5c0e57901cadd909d85470d80df5e19bd0c8a5161629ee061a45a5e3f2db7e0da2d8e7617f0f0bbbff1f8baf96447ecb504d204b8b4bcc70e88534cde5ff52542237e3556777c62c886ccdda64e7d87a8b3c59779be228df1035c71f98571c0db834cf99d86d4488272fe5a7758f94b1e02ecade1993e303bba4beaf46ecfdede4604a34dcc9f408b0188b54496cc48ee5b200be4fc54cba13c39606ad43d16821d8e79a670010291", 0xa9}, {&(0x7f0000000c00)="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", 0x1000}], 0x2, &(0x7f0000001c40)=[{0xa8, 0x10f, 0x1, "43ae560309f6a20976833206ed1fa7cdc56a75cd7c912a5068458fcf8f951bea516edf2c709b46ae02ba111cdf3e1bfc292457df9fda7b202e4471a7134d659f50341e68b6c56b6704464fea020e9935f4632de992dfa20f8ace6c988a1c92cae29d2a907c3cad206d4ccab37a87230c92973d8a974ddd36ef3d862815516f949a70fbe82e05631cf901c5a0ec3e58d03dd8ae8556"}, {0x58, 0x111, 0x5, "dc11309c1af2bea1a521b0c719542d805ae2b2757ec583857f294fa0c530b129789b3bc5c06e3ece5047a60bd43fe4efb98efd2157827e564a6732a3128257d9630c2e3c34"}, {0x48, 0x11, 0x6, "fc7c07017105763aadbbe9c73b29991cc8302ea7ce1da8388328c5d17496b0d41b0e44d077801450f6fd07d67a26c3994ff8955c54"}, {0x48, 0x116, 0x6, "aae1559efccc46dd7702c9558a5f693c07c4342c7b3c05df7e3e0bbeea8dd5b75e4c2d04dcdd86fe0c523ef2f371afd5bbaa966ef599bd"}, {0xe0, 0x118, 0x7, "9d6932495b164eec97c78cc8337e0d5c5b41c38e47074c20292f141662a38433c307a49492a1c674d59ec6eddd6aac1c75fcbfbec4408eb337075dac015fc888b59e7ed49326935efb7306e11d2568a81a512c88bafe3652aeda03366e67e9938f96017d9e908e336b36416d7d6ce11054086d0a68763d39b5ac83fcfe01db5d69a62d87a289b70df4904882420c88706d4cc97d56b84bb1a4e7679a5cd99dd80cc170fea54065709fcbf43de6172b0f61d6b3f0ee11a99b8e876ab728a13e307e49cdfb36f0c38e39d9e53e"}, {0xc0, 0x1, 0x4, "b6b8cccada87ebdfb368bee91f98fe0284b01ade86e3caa969d8f390dc5be0e77da116c9c125fa5ecf7d897001e4c2154e1152a25390d8d777dcb6eed81175cbb1959a9a829ee512bc285985651b6de6e2c741577386bd76f0e9d2143cc3fd486732dbdae515d7e0784551695feda7572031c2c2d6ca458c7b5b53973ba9651062407e69bfd19597ad8bb4ace86912524b14889e178a5f84b858272906fd65cd96f1506538070d69aa39e191e11b90bf"}, {0x90, 0x115, 0x40, "d6c9a2944759b315410f9c973908ca50ff3ffc1c3bd031ce36075f8d8ac650a7fc36bf137f33c1e771001226fc1bc8efd4d447708fffe5f6b90dcaabf817948a78093088fc4c9dbda02dd246e1d718fb34dde304eb6373b59116b085fc7b99ed90eeb5a73a08d8dfaffb797a7d84e6386053dcf437749e1e9f3b"}], 0x3c0}, 0x40004) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000020c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x558, 0x398, 0x398, 0x1a0, 0x2a0, 0xd0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, &(0x7f0000002040), {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x7}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xff000000, 0xff000000, 0xffffff00, 0x33a04543bbf93d20], 'veth0_to_team\x00', 'syzkaller1\x00', {}, {0xff}, 0x5e, 0xd, 0x1, 0x40}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x33, 0x1, 0x1, 0x10, 0x7337, 0x8a, 0x140}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff, 0xff000000, 0xff000000], [0x0, 0xff, 0xffffff00, 0xff], 'virt_wifi0\x00', 'vlan1\x00', {0xff}, {}, 0x0, 0x5, 0x2, 0x1}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@local, @local, [0xff000000, 0xff000000, 0xff, 0xffffffff], [0x0, 0xffffffff, 0xff], 'vcan0\x00', 'batadv_slave_0\x00', {}, {}, 0x5c, 0xbf, 0x6, 0xa}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@local, @ipv6=@mcast1, 0x38, 0x16, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002680)={r4, 0xffffffffffffffff}, 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000002740)={'syztnl2\x00', &(0x7f00000026c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x8, 0xf, 0x2, @mcast1, @local, 0x7, 0x7800, 0xfff, 0xe82}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002780)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x7, '\x00', r10, r4, 0x1, 0x0, 0x1}, 0x50) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000002800)={0x3, 'veth1_to_bond\x00', {0xa5}, 0x3}) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002880), r4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002b80)={r4, 0xe0, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000028c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000002900)=[0x0], &(0x7f0000002940)=[0x0, 0x0, 0x0], 0x0, 0xb8, &(0x7f0000002980)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000029c0), &(0x7f0000002a00), 0x8, 0x7b, 0x8, 0x8, &(0x7f0000002a40)}}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000002c80)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x6c, r11, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002e00)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d40)=@dellink={0x5c, 0x11, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, 0x400, 0x488}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x8000}, @IFLA_PHYS_PORT_ID={0x9, 0x22, "29d99452b7"}, @IFLA_PHYS_SWITCH_ID={0x13, 0x24, "818503b5a2bb3c099d332702d5224f"}, @IFLA_BROADCAST={0xa}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004810}, 0x4008000) 1.361673847s ago: executing program 0 (id=286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1e2febc4, 0x0, 0x8}, 0x10, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3, 0x0, 0x5}, 0x18) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0) write$rfkill(r4, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000000001050500000000000000000a0000003c0002802c65103c18f50e10579e1900018014000300ff0100000000000000000000000114000400ff0200000000000000007c6337f5a37a05000000000001ff03000000000000000000"], 0x54}}, 0x0) 1.345219418s ago: executing program 2 (id=287): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r3 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7daa00000000000071101b000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x10, 0x7, 0xb63, 0x12, r4, 0x3, '\x00', 0x0, r4, 0x5, 0x3, 0x3}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280)='e', &(0x7f0000000000)=""/6, 0x2}, 0x20) (async, rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000100)='syzkaller0\x00'}, 0x30) (rerun: 32) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) (async, rerun: 32) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) (rerun: 32) 1.29189162s ago: executing program 1 (id=288): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b"], 0x23c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0x80000001, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000000c0)) 1.173811211s ago: executing program 1 (id=289): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(0x4) unshare(0x6a040000) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x4000041) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0xfff1, 0xc}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={0xffffffffffffffff, 0x18000000000002a0, 0x8, 0x0, &(0x7f0000000000)="b9ff03076844268c", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) r4 = accept$inet6(r0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000006, 0x8010, r4, 0xc48c2000) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) 846.327144ms ago: executing program 2 (id=290): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000000)) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@allocspi={0x1150, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x11}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x6c}, @in=@broadcast, {0x0, 0xfffffffffffffffd}, {0x0, 0x4}}, 0x0, 0x7fff}, [@algo_aead={0x104c, 0x12, {{'authenc(blake2s-224-generic,pcbc(fcrypt-generic))\x00'}, 0x8000, 0x200, "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"}}, @policy_type={0xa, 0x10, {0x1}}]}, 0x1150}}, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0xe) ioctl$FIOCLEX(r0, 0x5451) 703.727045ms ago: executing program 3 (id=291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x26, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x12d}}}}]}, 0x58}}, 0x0) r5 = socket(0x0, 0x6, 0x3) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x14, r7, 0x303, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x604ab000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r9, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r11, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc000008000900050000000800070098010000200001"], 0x234}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r9, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x9c, r7, 0x400, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x843) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x0, 0x8, 0x101, 0x0, 0x0, {0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc010}, 0x840) 649.816251ms ago: executing program 2 (id=292): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r4, @ANYBLOB="003000000000000014001a80100004800c"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000002c0000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x40041}, 0x0) 566.846328ms ago: executing program 3 (id=293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) close(0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) 507.968434ms ago: executing program 1 (id=294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x7f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x21, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @broadcast}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) 488.334221ms ago: executing program 2 (id=295): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) poll(&(0x7f0000000140)=[{r0, 0x4490}, {r0, 0xc2}, {r0, 0x634a}, {r1, 0x132a}, {r1, 0x5250}, {r0, 0x220d}, {r0, 0x539a}, {r0, 0x80e0}], 0x8, 0x1001) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a3000000000090002"], 0xfc}}, 0x0) r3 = socket(0x10, 0x7, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRESOCT], 0x20}}, 0x40000d5) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001640)={'ip6_vti0\x00', &(0x7f00000015c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x3, 0x2, 0x53, @empty, @empty, 0x40, 0x80, 0xb, 0x872a}}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x7}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x7, 0x4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x19, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='scalable\x00', 0x9) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000150a010484fb91cb5b41ae3149dbb29700000000000000000a00070900020073797a3000"/52], 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) shutdown(r0, 0x1) r7 = accept4$rose(r3, &(0x7f0000000340)=@full={0xb, @remote, @rose, 0x0, [@remote, @rose, @netrom, @rose, @rose, @null]}, &(0x7f0000000100)=0x40, 0x81800) ioctl$SIOCRSACCEPT(r7, 0x89e3) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r9, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x3) 457.101765ms ago: executing program 4 (id=296): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x2b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) (async) shutdown(r1, 0x1) (async) getsockopt$bt_hci(r1, 0x84, 0x9, &(0x7f0000003280)=""/4104, &(0x7f0000001080)=0x1008) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000480)={{{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x9}, 0x0, 0x4020, 0xffff, 0x8574, 0xa, 0x10, 0x20}, {0x2, 0x4, 0x4, 0x8, 0x9, 0xfffffffffffffffa, 0x0, 0x3}, {0x7fffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2}, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@loopback, 0x0, 0x32}, 0xa, @in=@rand_addr=0x64010102, 0x0, 0x4, 0x0, 0x0, 0x5, 0xfbfffffd}}, 0xe8) (async) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x12, 0x0, @empty}, 0x1c) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f00000000001400", @ANYRES64=r2], 0x38}}, 0x0) (async) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) 243.699236ms ago: executing program 3 (id=297): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="180000000c1401030000000000000000040001"], 0x18}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x16747c6d2baaace}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x7, 0x7f, 0x0, 0x2}, 0x609d, 0x1, 0x8, 0xfffffffa, 0x2, 0x2, 0x18, 0x1, 0x6, 0xe, {0x3, 0xffbffeff, 0x5, 0x0, 0x9, 0x2}}}}]}, 0x78}}, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x711, 0x70bd29, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}}, 0x0) accept4$phonet_pipe(r1, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x800) r4 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) close(0x4) 185.139175ms ago: executing program 4 (id=298): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000001080)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) (async) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000e80)={@in={{0x2, 0x0, @private=0xa010100}}, 0x0, 0x0, 0x22, 0x0, "70a59b8ef73b52114bf0854b6d184de8fb2add2d2bb9149a8c9b8ad1ff7568565a98f80146847b0c6c4698efb8d42bed462e33eef5219090f01c40a3103cf5a30f2c0cdc339b7665ca4fe3c1d75e3fda"}, 0xd8) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) splice(r0, 0x0, r4, 0x0, 0x7, 0x0) (async) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) (async) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) write(r3, 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) (async) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="19000000040000000400", @ANYRES8, @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r7 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) (async) syz_open_procfs$namespace(0x0, &(0x7f0000001040)='ns/time\x00') (async) r8 = socket(0x10, 0x2, 0x0) write(r8, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async) recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r10, 0xffffffffffffffff, 0x6, 0x0, @void}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) 84.704062ms ago: executing program 3 (id=299): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) (async, rerun: 32) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000300)=0x0) (rerun: 32) r5 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x1, 0x0, 0x0, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async, rerun: 64) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x6}, @val={0x8}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3a}}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_PID={0x8, 0x52, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4044011}, 0x8001) (rerun: 64) r6 = socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x0) (async) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000400)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2, 0x4, 0x0, 0x3, 0x4, 0x0, 0x70bd27, 0x0, [@sadb_x_nat_t_type={0x1, 0x14, 0x5}, @sadb_x_nat_t_type={0x1}]}, 0x20}, 0x1, 0x7}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r10, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x20000034) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB="38000000180001bd000000000000000002000000fc00bd0900000000060015000200000014001680100008800c00028008"], 0x38}, 0x1, 0x0, 0x0, 0x22004044}, 0x4048080) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r10, 0x1, 0x70bd2d, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008090}, 0x30) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='syzkaller\x00', 0xd, 0x3d, 0x0, 0xc1000, 0x5c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x8}, 0x94) (async) sendmsg$L2TP_CMD_SESSION_GET(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r14, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 0s ago: executing program 4 (id=300): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="b2c5c79f07ab3d9614d5c058db4a274ad23734c22ae51ea860b7ba11a89526f3e0c83d84e43f97065e049df95ed807146bf75b9a01f43f46c3f9f2c9da76cbcf89ccb2ad441328f9b1fda9a445d98b4e5d74c3d3ef", 0x55}], 0x1}}], 0x2, 0x8008801) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x80000006, 0x1, 0x0, 0x80}]}, 0x10) (async) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) (async, rerun: 64) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xffffe000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.21' (ED25519) to the list of known hosts. [ 71.215326][ T5851] cgroup: Unknown subsys name 'net' [ 71.351593][ T5851] cgroup: Unknown subsys name 'cpuset' [ 71.361659][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 72.848387][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.311374][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.318474][ T5874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.320427][ T5868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.327165][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.335642][ T5868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.342843][ T5874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.349106][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.356145][ T5874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.368827][ T5868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.369515][ T5868] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.377724][ T5874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.392347][ T5874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.400303][ T5874] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.411919][ T5874] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.436085][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.443670][ T5874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.452618][ T5874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.460041][ T5870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.467706][ T5875] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.475612][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.475721][ T5874] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.484039][ T5875] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.499495][ T5868] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.508613][ T5868] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.538329][ T5868] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.102689][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 76.157273][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 76.312192][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 76.448912][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.456584][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.464537][ T5866] bridge_slave_0: entered allmulticast mode [ 76.472835][ T5866] bridge_slave_0: entered promiscuous mode [ 76.481099][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.488520][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.495705][ T5863] bridge_slave_0: entered allmulticast mode [ 76.503251][ T5863] bridge_slave_0: entered promiscuous mode [ 76.516232][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.523547][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.530908][ T5863] bridge_slave_1: entered allmulticast mode [ 76.538367][ T5863] bridge_slave_1: entered promiscuous mode [ 76.545992][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 76.567217][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.574691][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.582873][ T5866] bridge_slave_1: entered allmulticast mode [ 76.590214][ T5866] bridge_slave_1: entered promiscuous mode [ 76.597063][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 76.664313][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.677563][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.720168][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.773246][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.780748][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.789669][ T5873] bridge_slave_0: entered allmulticast mode [ 76.796917][ T5873] bridge_slave_0: entered promiscuous mode [ 76.806295][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.845942][ T5863] team0: Port device team_slave_0 added [ 76.863021][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.870573][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.877748][ T5873] bridge_slave_1: entered allmulticast mode [ 76.885315][ T5873] bridge_slave_1: entered promiscuous mode [ 76.921604][ T5863] team0: Port device team_slave_1 added [ 76.950455][ T5866] team0: Port device team_slave_0 added [ 77.002349][ T5866] team0: Port device team_slave_1 added [ 77.068713][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.092323][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.100228][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.126255][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.140241][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.147301][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.173789][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.197223][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.204621][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.212327][ T5861] bridge_slave_0: entered allmulticast mode [ 77.219425][ T5861] bridge_slave_0: entered promiscuous mode [ 77.230560][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.240536][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.247485][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.274408][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.286136][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.293343][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.319641][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.331168][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.339281][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.346534][ T5864] bridge_slave_0: entered allmulticast mode [ 77.354396][ T5864] bridge_slave_0: entered promiscuous mode [ 77.361868][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.369149][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.376325][ T5861] bridge_slave_1: entered allmulticast mode [ 77.383598][ T5861] bridge_slave_1: entered promiscuous mode [ 77.422182][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.429898][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.437206][ T5864] bridge_slave_1: entered allmulticast mode [ 77.445225][ T5864] bridge_slave_1: entered promiscuous mode [ 77.468843][ T5868] Bluetooth: hci1: command tx timeout [ 77.468843][ T5183] Bluetooth: hci2: command tx timeout [ 77.485374][ T5873] team0: Port device team_slave_0 added [ 77.533363][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.544052][ T5873] team0: Port device team_slave_1 added [ 77.550381][ T5183] Bluetooth: hci3: command tx timeout [ 77.550426][ T5868] Bluetooth: hci0: command tx timeout [ 77.617299][ T5863] hsr_slave_0: entered promiscuous mode [ 77.624758][ T5863] hsr_slave_1: entered promiscuous mode [ 77.630875][ T5868] Bluetooth: hci4: command tx timeout [ 77.646190][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.673243][ T5866] hsr_slave_0: entered promiscuous mode [ 77.680087][ T5866] hsr_slave_1: entered promiscuous mode [ 77.686186][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 77.692325][ T5866] Cannot create hsr debugfs directory [ 77.714809][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.738559][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.745536][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.772062][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.784701][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.792055][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.820413][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.855362][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.921508][ T5861] team0: Port device team_slave_0 added [ 77.929376][ T5864] team0: Port device team_slave_0 added [ 77.966655][ T5864] team0: Port device team_slave_1 added [ 77.976058][ T5861] team0: Port device team_slave_1 added [ 78.007677][ T5873] hsr_slave_0: entered promiscuous mode [ 78.014423][ T5873] hsr_slave_1: entered promiscuous mode [ 78.020957][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 78.027048][ T5873] Cannot create hsr debugfs directory [ 78.118325][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.125315][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.151309][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.181851][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.188934][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.215580][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.248892][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.255866][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.282713][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.311934][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.319090][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.345823][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.526887][ T5864] hsr_slave_0: entered promiscuous mode [ 78.533451][ T5864] hsr_slave_1: entered promiscuous mode [ 78.540085][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 78.545808][ T5864] Cannot create hsr debugfs directory [ 78.613033][ T5861] hsr_slave_0: entered promiscuous mode [ 78.619589][ T5861] hsr_slave_1: entered promiscuous mode [ 78.625623][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 78.631408][ T5861] Cannot create hsr debugfs directory [ 78.819984][ T5863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.849596][ T5863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.892800][ T5863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.933970][ T5863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.037691][ T5866] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.055618][ T5866] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.067193][ T5866] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.094678][ T5866] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.166464][ T5873] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.202636][ T5873] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.215232][ T5873] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.244715][ T5873] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.309431][ T5864] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.334020][ T5864] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.344936][ T5864] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.357614][ T5864] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.457053][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.472296][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.506649][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.533104][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.549407][ T5868] Bluetooth: hci1: command tx timeout [ 79.554940][ T5868] Bluetooth: hci2: command tx timeout [ 79.556226][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.628981][ T5183] Bluetooth: hci0: command tx timeout [ 79.635435][ T5868] Bluetooth: hci3: command tx timeout [ 79.642659][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.675279][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.687895][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.695191][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.708334][ T5868] Bluetooth: hci4: command tx timeout [ 79.722597][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.729778][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.757379][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.796995][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.804355][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.825080][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.832309][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.890827][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.924469][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.970069][ T5866] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.982116][ T5866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.026378][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.051946][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.093296][ T5863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.116539][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.123732][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.151719][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.185756][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.193026][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.210131][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.217299][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.257292][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.264538][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.303575][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.370345][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.377503][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.405237][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.412894][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.516711][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.642698][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.706936][ T5866] veth0_vlan: entered promiscuous mode [ 80.756201][ T5866] veth1_vlan: entered promiscuous mode [ 80.921496][ T5866] veth0_macvtap: entered promiscuous mode [ 80.952935][ T5866] veth1_macvtap: entered promiscuous mode [ 81.024414][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.045357][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.073382][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.117494][ T1160] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.158807][ T1160] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.212747][ T1160] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.259517][ T1160] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.286104][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.375332][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.403032][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.446965][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.462083][ T5873] veth0_vlan: entered promiscuous mode [ 81.499535][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.507391][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.534159][ T5873] veth1_vlan: entered promiscuous mode [ 81.565266][ T5864] veth0_vlan: entered promiscuous mode [ 81.590846][ T5863] veth0_vlan: entered promiscuous mode [ 81.592248][ T5866] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.616228][ T5863] veth1_vlan: entered promiscuous mode [ 81.630816][ T5868] Bluetooth: hci2: command tx timeout [ 81.636259][ T5868] Bluetooth: hci1: command tx timeout [ 81.655824][ T5864] veth1_vlan: entered promiscuous mode [ 81.708791][ T5868] Bluetooth: hci3: command tx timeout [ 81.714570][ T5183] Bluetooth: hci0: command tx timeout [ 81.788781][ T5868] Bluetooth: hci4: command tx timeout [ 81.856302][ T5861] veth0_vlan: entered promiscuous mode [ 81.873952][ T5864] veth0_macvtap: entered promiscuous mode [ 81.969810][ T5864] veth1_macvtap: entered promiscuous mode [ 81.990103][ T5873] veth0_macvtap: entered promiscuous mode [ 82.045808][ T5863] veth0_macvtap: entered promiscuous mode [ 82.063325][ T5873] veth1_macvtap: entered promiscuous mode [ 82.075287][ T5861] veth1_vlan: entered promiscuous mode [ 82.114161][ T5863] veth1_macvtap: entered promiscuous mode [ 82.170981][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.202395][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.304260][ T5984] syz.3.6 uses obsolete (PF_INET,SOCK_PACKET) [ 82.315341][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.335417][ T44] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.362286][ T5861] veth0_macvtap: entered promiscuous mode [ 82.375263][ T5861] veth1_macvtap: entered promiscuous mode [ 82.412946][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.425359][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.439123][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.462069][ T44] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.471758][ T44] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.498585][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.522282][ T44] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.654373][ T44] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.671786][ T44] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.705975][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.766851][ T44] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.776445][ T44] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.817761][ T44] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.831515][ T44] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.862785][ T44] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.872142][ T44] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.903411][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.903765][ T44] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.914177][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.920996][ T44] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.983197][ T44] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.002354][ T44] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.107489][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.118253][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.172210][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.197133][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.283469][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.310805][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.346559][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.365517][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.423968][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.444734][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.522552][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.546152][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.709654][ T5868] Bluetooth: hci1: command tx timeout [ 83.715165][ T5183] Bluetooth: hci2: command tx timeout [ 83.723967][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.787798][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.798057][ T5183] Bluetooth: hci3: command tx timeout [ 83.803506][ T5183] Bluetooth: hci0: command tx timeout [ 83.870000][ T5183] Bluetooth: hci4: command tx timeout [ 84.061143][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 84.236013][ T6014] netlink: 'syz.3.11': attribute type 21 has an invalid length. [ 84.309650][ T6013] tipc: Started in network mode [ 84.314682][ T6013] tipc: Node identity 4, cluster identity 4711 [ 84.347103][ T6013] tipc: Node number set to 4 [ 84.411782][ T6020] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.425484][ T6020] warning: `syz.0.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.737772][ T6026] netlink: 92 bytes leftover after parsing attributes in process `syz.3.13'. [ 85.271632][ T6043] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5'. [ 85.288729][ T6039] sctp: [Deprecated]: syz.3.16 (pid 6039) Use of int in max_burst socket option deprecated. [ 85.288729][ T6039] Use struct sctp_assoc_value instead [ 85.326100][ T6041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17'. [ 85.441151][ T6048] netlink: 'syz.1.17': attribute type 10 has an invalid length. [ 85.651229][ T6059] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.721534][ T6048] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 86.257044][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22'. [ 86.580638][ T6089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.644057][ T6089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.767191][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 86.767425][ T10] cfg80211: failed to load regulatory.db [ 86.903170][ T6099] macvtap1: entered promiscuous mode [ 86.960825][ T6099] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 87.059182][ T6092] netlink: 68 bytes leftover after parsing attributes in process `syz.3.26'. [ 87.620684][ T6129] veth0_vlan: entered allmulticast mode [ 87.744355][ T6138] sctp: [Deprecated]: syz.1.37 (pid 6138) Use of int in max_burst socket option deprecated. [ 87.744355][ T6138] Use struct sctp_assoc_value instead [ 88.531891][ T6154] netlink: 132 bytes leftover after parsing attributes in process `syz.1.41'. [ 88.886987][ T6178] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 88.896760][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.47'. [ 88.927580][ T6185] netlink: 24 bytes leftover after parsing attributes in process `syz.4.47'. [ 88.963670][ T6178] bond0: (slave netdevsim0): Releasing backup interface [ 88.999494][ T6178] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 89.024628][ T6179] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 89.250007][ T6200] netlink: 'syz.4.50': attribute type 1 has an invalid length. [ 89.333336][ T6200] batman_adv: batadv0: Adding interface: gretap1 [ 89.366773][ T6200] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 89.479304][ T6204] batman_adv: batadv0: Adding interface: gretap2 [ 89.512549][ T6204] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 89.534439][ T6207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.51'. [ 90.051190][ T6227] netlink: 'syz.4.56': attribute type 32 has an invalid length. [ 90.069628][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.56'. [ 90.112545][ T6227] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 90.243459][ T6231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.56'. [ 90.415517][ T6245] netlink: 20 bytes leftover after parsing attributes in process `syz.4.59'. [ 90.603729][ T6251] netlink: 68 bytes leftover after parsing attributes in process `syz.1.61'. [ 90.647181][ T6245] nbd: socks must be embedded in a SOCK_ITEM attr [ 90.683332][ T5867] block nbd64: NBD_DISCONNECT [ 90.846944][ T5867] udevd[5867]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 91.146433][ T6258] tipc: Started in network mode [ 91.169516][ T6258] tipc: Node identity 626c3e98f47, cluster identity 4711 [ 91.344362][ T6258] tipc: Enabled bearer , priority 0 [ 91.466978][ T6262] syzkaller0: entered promiscuous mode [ 91.478363][ T6262] syzkaller0: entered allmulticast mode [ 91.531983][ T6252] tipc: Resetting bearer [ 91.605840][ T6249] tipc: Resetting bearer [ 91.680959][ T6249] tipc: Disabling bearer [ 91.742881][ T6281] pim6reg1: entered promiscuous mode [ 91.780034][ T6281] pim6reg1: entered allmulticast mode [ 91.906758][ T6281] netlink: 40 bytes leftover after parsing attributes in process `syz.4.63'. [ 91.958187][ T6293] netlink: 'syz.0.68': attribute type 1 has an invalid length. [ 91.975140][ T6293] netlink: 'syz.0.68': attribute type 1 has an invalid length. [ 91.993194][ T6295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.63'. [ 92.202971][ T6303] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 92.286094][ T6304] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 92.339723][ T43] IPVS: starting estimator thread 0... [ 92.458181][ T6307] IPVS: using max 32 ests per chain, 76800 per kthread [ 92.485997][ T6312] netlink: 'syz.1.72': attribute type 21 has an invalid length. [ 92.573430][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.73'. [ 92.618192][ T6315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.632082][ T6315] tipc: Enabled bearer , priority 0 [ 92.640827][ T6315] syzkaller0: entered promiscuous mode [ 92.654434][ T6315] syzkaller0: entered allmulticast mode [ 92.720673][ T6321] tipc: Started in network mode [ 92.727250][ T6321] tipc: Node identity 0a8b8eca7229, cluster identity 4711 [ 92.734997][ T6321] tipc: Enabled bearer , priority 0 [ 92.749273][ T6318] netlink: 96 bytes leftover after parsing attributes in process `syz.4.75'. [ 92.853222][ T6321] syzkaller0: entered promiscuous mode [ 92.860612][ T6321] syzkaller0: entered allmulticast mode [ 92.916967][ T6330] macsec1: entered promiscuous mode [ 92.935630][ T6330] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 92.952317][ T6330] macsec1: entered allmulticast mode [ 92.964781][ T6330] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 92.976248][ T6315] tipc: Resetting bearer [ 93.007804][ T6315] tipc: Disabling bearer [ 93.088428][ T6317] tipc: Resetting bearer [ 93.201611][ T6317] tipc: Disabling bearer [ 93.428596][ T36] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 93.844035][ T6342] netlink: 'syz.3.79': attribute type 6 has an invalid length. [ 93.958917][ T6373] netlink: 40 bytes leftover after parsing attributes in process `syz.0.85'. [ 94.609188][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.91'. [ 94.639217][ T6394] netlink: 16 bytes leftover after parsing attributes in process `syz.3.94'. [ 94.862997][ T6401] Zero length message leads to an empty skb [ 95.103068][ T6409] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.111672][ T6409] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.419067][ T6409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.481020][ T6409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.730287][ T6409] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 95.741505][ T6409] macvtap1: left promiscuous mode [ 95.822071][ T6409] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 95.829270][ T6409] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 95.836258][ T6409] macsec1: left promiscuous mode [ 95.844772][ T6409] macsec1: left allmulticast mode [ 95.851475][ T6437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.98'. [ 95.886005][ T3505] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.961247][ T3505] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.980721][ T3505] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.062854][ T6451] geneve2: entered promiscuous mode [ 96.084815][ T6456] netlink: 24 bytes leftover after parsing attributes in process `syz.2.103'. [ 96.110197][ T6451] geneve2: entered allmulticast mode [ 96.147767][ T3505] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.190127][ T3505] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 96.230025][ T6447] syzkaller1: entered promiscuous mode [ 96.235721][ T6447] syzkaller1: entered allmulticast mode [ 96.253216][ T6456] netlink: 84 bytes leftover after parsing attributes in process `syz.2.103'. [ 96.270343][ T6456] netem: invalid attributes len -16 [ 96.291376][ T6456] netem: change failed [ 96.331495][ T3505] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 96.370472][ T6470] netlink: 52 bytes leftover after parsing attributes in process `syz.3.107'. [ 96.384012][ T6470] netlink: 'syz.3.107': attribute type 1 has an invalid length. [ 96.486080][ T3505] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 96.497983][ T6474] pim6reg1: entered promiscuous mode [ 96.503393][ T6474] pim6reg1: entered allmulticast mode [ 96.586479][ T3505] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 96.616471][ T6481] netlink: 'syz.1.108': attribute type 1 has an invalid length. [ 96.638227][ T6481] netlink: 140 bytes leftover after parsing attributes in process `syz.1.108'. [ 96.647403][ T6481] netlink: 96 bytes leftover after parsing attributes in process `syz.1.108'. [ 97.484004][ T6529] lo speed is unknown, defaulting to 1000 [ 97.524607][ T6529] lo speed is unknown, defaulting to 1000 [ 97.532885][ T6529] lo speed is unknown, defaulting to 1000 [ 97.547381][ T6529] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 97.559459][ T6530] lo speed is unknown, defaulting to 1000 [ 97.603343][ T6539] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.119'. [ 97.623117][ T6529] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 97.659716][ T6539] trusted_key: syz.2.119 sent an empty control message without MSG_MORE. [ 97.749826][ T6529] lo speed is unknown, defaulting to 1000 [ 97.765013][ T6529] lo speed is unknown, defaulting to 1000 [ 97.949297][ T6561] netlink: 20 bytes leftover after parsing attributes in process `syz.4.124'. [ 98.004554][ T6529] lo speed is unknown, defaulting to 1000 [ 98.019879][ T6529] lo speed is unknown, defaulting to 1000 [ 98.038048][ T6529] lo speed is unknown, defaulting to 1000 [ 98.568986][ T6586] tipc: Enabling of bearer rejected, failed to enable media [ 99.074046][ T6610] Driver unsupported XDP return value 0 on prog (id 58) dev N/A, expect packet loss! [ 99.986033][ T6649] __nla_validate_parse: 4 callbacks suppressed [ 99.986051][ T6649] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.151'. [ 100.007026][ T6646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'. [ 100.142074][ T6654] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.152'. [ 100.465835][ T6671] netlink: 44 bytes leftover after parsing attributes in process `syz.1.158'. [ 100.494855][ T6673] netlink: 'syz.2.159': attribute type 1 has an invalid length. [ 100.552901][ T6665] can: request_module (can-proto-0) failed. [ 100.575415][ T6673] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.699868][ T6682] bond1: (slave veth3): Enslaving as an active interface with a down link [ 100.791247][ T6673] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 100.805147][ T6673] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 100.808903][ T6688] netlink: 'syz.3.163': attribute type 4 has an invalid length. [ 100.857192][ T6695] netlink: 'syz.4.165': attribute type 13 has an invalid length. [ 100.872026][ T6695] netlink: 'syz.4.165': attribute type 17 has an invalid length. [ 100.986721][ T6695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.095174][ T6706] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 101.189913][ T6706] bridge_slave_0: left allmulticast mode [ 101.212199][ T6706] bridge_slave_0: left promiscuous mode [ 101.224366][ T6706] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.250860][ T6706] bridge_slave_1: left allmulticast mode [ 101.258906][ T6718] netlink: 'syz.0.166': attribute type 10 has an invalid length. [ 101.266875][ T6706] bridge_slave_1: left promiscuous mode [ 101.284439][ T6706] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.304178][ T6706] bond0: (slave bond_slave_0): Releasing backup interface [ 101.324830][ T6706] bond0: (slave bond_slave_1): Releasing backup interface [ 101.351416][ T6706] team0: Port device team_slave_0 removed [ 101.369957][ T6706] team0: Port device team_slave_1 removed [ 101.382593][ T6706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.394260][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.404599][ T6706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.413986][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.466619][ T6718] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 101.480974][ T6718] bond0: (slave wlan1): Opening slave failed [ 101.534255][ T6709] lo speed is unknown, defaulting to 1000 [ 101.737835][ T6731] netlink: 132 bytes leftover after parsing attributes in process `syz.4.174'. [ 101.774840][ T6721] syz.0.166 (6721) used greatest stack depth: 17864 bytes left [ 101.850095][ T6734] tipc: Enabled bearer , priority 0 [ 101.871119][ T6735] syzkaller0: entered promiscuous mode [ 101.876774][ T6735] syzkaller0: entered allmulticast mode [ 101.931407][ T6734] tipc: Resetting bearer [ 101.960361][ T6738] lo speed is unknown, defaulting to 1000 [ 102.003449][ T6729] tipc: Resetting bearer [ 102.030218][ T6729] tipc: Disabling bearer [ 102.074455][ T6743] tipc: Enabled bearer , priority 0 [ 102.306480][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'. [ 102.332247][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 102.592445][ T6756] tap0: tun_chr_ioctl cmd 1074025677 [ 102.611894][ T6756] tap0: linktype set to 5966 [ 102.642288][ T6756] tap0: tun_chr_ioctl cmd 1074025681 [ 102.657593][ T6755] lo speed is unknown, defaulting to 1000 [ 102.794498][ T6766] netlink: 'syz.1.184': attribute type 1 has an invalid length. [ 102.901524][ T6766] bond1: entered promiscuous mode [ 102.935114][ T6766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.970554][ T6742] tipc: Disabling bearer [ 103.026666][ T6779] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.045969][ T6779] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 103.073249][ T6779] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 103.163283][ T6779] bond1: (slave vxcan3): making interface the new active one [ 103.186852][ T6779] vxcan3: entered promiscuous mode [ 103.202253][ T6779] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 103.226680][ T6784] IPv6: sit2: Disabled Multicast RS [ 103.276308][ T6790] syz_tun: entered promiscuous mode [ 103.297794][ T6790] team0: Device macvtap1 failed to register rx_handler [ 103.310094][ T6794] netlink: 60 bytes leftover after parsing attributes in process `syz.4.190'. [ 103.327980][ T6790] syz_tun: left promiscuous mode [ 103.493191][ T6807] sctp: [Deprecated]: syz.3.192 (pid 6807) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.493191][ T6807] Use struct sctp_sack_info instead [ 103.605870][ T6811] netdevsim netdevsim0: Direct firmware load for /. failed with error -2 [ 103.621919][ T6811] netdevsim netdevsim0: Falling back to sysfs fallback for: /. [ 103.734093][ T6816] tipc: Enabled bearer , priority 10 [ 103.767037][ T6816] netlink: 'syz.3.195': attribute type 1 has an invalid length. [ 103.775349][ T6816] netlink: 'syz.3.195': attribute type 3 has an invalid length. [ 103.784438][ T6816] netlink: 132 bytes leftover after parsing attributes in process `syz.3.195'. [ 103.881025][ T6821] lo speed is unknown, defaulting to 1000 [ 103.934192][ T6823] netlink: 'syz.3.198': attribute type 1 has an invalid length. [ 104.171540][ T6832] netlink: 'syz.3.200': attribute type 10 has an invalid length. [ 104.185363][ T6832] bridge0: port 3(macsec0) entered blocking state [ 104.214301][ T6832] bridge0: port 3(macsec0) entered disabled state [ 104.221065][ T6832] macsec0: entered allmulticast mode [ 104.246646][ T6832] veth1_macvtap: entered allmulticast mode [ 104.254659][ T6832] macsec0: entered promiscuous mode [ 104.377752][ T6824] tipc: Enabling of bearer rejected, failed to enable media [ 104.551965][ T6842] netlink: 24 bytes leftover after parsing attributes in process `syz.3.203'. [ 105.224209][ T6875] netlink: 'syz.4.212': attribute type 1 has an invalid length. [ 105.409360][ T6875] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.484911][ T6873] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.497040][ T6873] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 105.509341][ T6873] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 105.557200][ T6880] veth5: entered promiscuous mode [ 105.567059][ T6880] bond2: (slave veth5): Enslaving as an active interface with a down link [ 105.744609][ T6890] lo speed is unknown, defaulting to 1000 [ 105.803298][ T6892] lo speed is unknown, defaulting to 1000 [ 105.870382][ T6898] bridge0: entered promiscuous mode [ 105.875927][ T6898] vlan2: entered promiscuous mode [ 105.897560][ T6898] bridge0: port 1(vlan2) entered blocking state [ 105.904417][ T6898] bridge0: port 1(vlan2) entered disabled state [ 105.911632][ T6898] vlan2: entered allmulticast mode [ 105.926247][ T6898] bridge0: entered allmulticast mode [ 105.945925][ T6898] vlan2: left allmulticast mode [ 105.953064][ T6898] bridge0: left allmulticast mode [ 106.271104][ T6908] syzkaller0: entered promiscuous mode [ 106.293688][ T6908] syzkaller0: entered allmulticast mode [ 106.812891][ T6949] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 106.819360][ T6949] syzkaller1: linktype set to 804 [ 107.325663][ T6950] syzkaller0: entered promiscuous mode [ 107.332159][ T6950] syzkaller0: entered allmulticast mode [ 107.425614][ T6971] __nla_validate_parse: 6 callbacks suppressed [ 107.425630][ T6971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.233'. [ 107.741478][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.235'. [ 108.674929][ T6986] netlink: 'syz.4.236': attribute type 1 has an invalid length. [ 108.931562][ T6994] netlink: 'syz.0.238': attribute type 1 has an invalid length. [ 108.935380][ T6987] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 108.960056][ T6987] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 108.970603][ T6987] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 109.045026][ T7006] bridge_slave_0: left allmulticast mode [ 109.054362][ T7006] bridge_slave_0: left promiscuous mode [ 109.061110][ T7006] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.076135][ T7006] bridge_slave_1: left allmulticast mode [ 109.086266][ T7006] bridge_slave_1: left promiscuous mode [ 109.094348][ T7006] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.111700][ T7006] bond0: (slave bond_slave_0): Releasing backup interface [ 109.163028][ T7006] bond0: (slave bond_slave_1): Releasing backup interface [ 109.164865][ T7008] netlink: 224 bytes leftover after parsing attributes in process `syz.4.241'. [ 109.231895][ T7006] team0: Port device team_slave_0 removed [ 109.257058][ T7006] team0: Port device team_slave_1 removed [ 109.276354][ T7006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.323042][ T7006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.362637][ T7006] macsec0: left allmulticast mode [ 109.367818][ T7006] veth1_macvtap: left allmulticast mode [ 109.373929][ T7006] macsec0: left promiscuous mode [ 109.380101][ T7006] bridge0: port 3(macsec0) entered disabled state [ 109.465044][ T7009] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 109.538426][ T7025] netlink: 40 bytes leftover after parsing attributes in process `syz.4.244'. [ 109.563672][ T7009] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 109.594895][ T7028] syzkaller1: entered promiscuous mode [ 109.600678][ T7028] syzkaller1: entered allmulticast mode [ 109.607791][ T7026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.242'. [ 109.687472][ T7009] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 109.831887][ T7009] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 109.849740][ T7031] lo speed is unknown, defaulting to 1000 [ 109.927753][ T7038] lo speed is unknown, defaulting to 1000 [ 109.997675][ T44] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 110.107359][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 110.138731][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 110.171169][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 110.310639][ T7041] netlink: 48 bytes leftover after parsing attributes in process `syz.4.248'. [ 110.717452][ T7058] Bluetooth: MGMT ver 1.23 [ 110.874688][ T7072] netlink: 'syz.4.256': attribute type 4 has an invalid length. [ 111.186043][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 111.343123][ T7085] netlink: 64 bytes leftover after parsing attributes in process `syz.2.260'. [ 111.372625][ T7085] netlink: 64 bytes leftover after parsing attributes in process `syz.2.260'. [ 111.417552][ T7101] netlink: 92 bytes leftover after parsing attributes in process `syz.2.260'. [ 111.426797][ T7086] bridge_slave_1: left allmulticast mode [ 111.434318][ T7086] bridge_slave_1: left promiscuous mode [ 111.448577][ T7086] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.486103][ T7086] bridge_slave_0: left allmulticast mode [ 111.492784][ T7086] bridge_slave_0: left promiscuous mode [ 111.501633][ T7086] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.780771][ T7112] netlink: 'syz.0.265': attribute type 1 has an invalid length. [ 111.874514][ T7112] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.938119][ T7112] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.954611][ T7112] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 111.974670][ T7112] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 112.046548][ T7117] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 112.581058][ T7161] netlink: 'syz.1.279': attribute type 1 has an invalid length. [ 112.585504][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.280'. [ 112.588889][ T7161] netlink: 'syz.1.279': attribute type 4 has an invalid length. [ 112.609803][ T7161] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.279'. [ 112.711214][ T7159] vlan2: entered promiscuous mode [ 112.727013][ T7159] bond0: entered promiscuous mode [ 112.743684][ T7159] vlan2: entered allmulticast mode [ 112.756421][ T7159] bond0: entered allmulticast mode [ 112.809814][ T7171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.283'. [ 112.892628][ T7172] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 113.222791][ T7188] netlink: 'syz.2.287': attribute type 39 has an invalid length. [ 113.272383][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.286'. [ 113.297640][ T7189] netlink: 56 bytes leftover after parsing attributes in process `syz.0.286'. [ 113.359881][ T7192] netlink: 'syz.1.289': attribute type 13 has an invalid length. [ 113.364452][ T7191] lo speed is unknown, defaulting to 1000 [ 113.383522][ T7192] netlink: 'syz.1.289': attribute type 17 has an invalid length. [ 113.390100][ T7188] netlink: 'syz.2.287': attribute type 39 has an invalid length. [ 113.505956][ T7192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.979515][ T7183] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 113.985763][ T7183] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 114.054034][ T7183] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 114.082218][ T7183] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 114.101082][ T7219] netlink: 20 bytes leftover after parsing attributes in process `syz.2.295'. [ 114.221321][ T7183] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.227080][ T7224] validate_nla: 31 callbacks suppressed [ 114.227098][ T7224] netlink: 'syz.3.297': attribute type 1 has an invalid length. [ 114.227251][ T7183] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 114.331559][ T7183] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.337606][ T7183] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 114.408591][ T7183] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 114.416604][ T7183] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 114.459189][ T7183] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 114.471114][ T7183] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 114.479555][ T7183] CPU: 1 UID: 0 PID: 7183 Comm: syz.0.286 Not tainted syzkaller #0 PREEMPT(full) [ 114.488772][ T7183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.498832][ T7183] RIP: 0010:klist_remove+0x14a/0x340 [ 114.504125][ T7183] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 c3 b2 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a c3 b2 f6 49 8b 44 24 58 48 89 44 24 08 [ 114.523725][ T7183] RSP: 0018:ffffc9001b70f800 EFLAGS: 00010202 [ 114.529799][ T7183] RAX: 000000000000000b RBX: ffff88802a333c00 RCX: 0000000000000000 [ 114.537754][ T7183] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 114.545721][ T7183] RBP: ffffc9001b70f900 R08: ffffffff8f8a0d43 R09: 1ffffffff1f141a8 [ 114.553773][ T7183] R10: dffffc0000000000 R11: fffffbfff1f141a9 R12: 0000000000000000 [ 114.561737][ T7183] R13: 1ffff1100591bd8c R14: ffff88802c8dec60 R15: dffffc0000000000 [ 114.569699][ T7183] FS: 00007f04f9fc56c0(0000) GS:ffff888125d14000(0000) knlGS:0000000000000000 [ 114.578708][ T7183] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.585278][ T7183] CR2: 00007f51af3ccf98 CR3: 00000000787a4000 CR4: 00000000003526f0 [ 114.593247][ T7183] Call Trace: [ 114.596601][ T7183] [ 114.599520][ T7183] ? __pfx_klist_remove+0x10/0x10 [ 114.604539][ T7183] ? __pfx_kobject_move+0x10/0x10 [ 114.609547][ T7183] ? do_raw_spin_unlock+0x122/0x240 [ 114.614738][ T7183] ? get_device_parent+0x366/0x3a0 [ 114.619846][ T7183] device_move+0x193/0x700 [ 114.624268][ T7183] hci_conn_del_sysfs+0xb8/0x170 [ 114.629195][ T7183] hci_conn_del+0xc33/0x11b0 [ 114.633858][ T7183] hci_conn_hash_flush+0x191/0x230 [ 114.638999][ T7183] hci_dev_close_sync+0xaef/0x1330 [ 114.644102][ T7183] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 114.649633][ T7183] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 114.655525][ T7183] hci_dev_do_close+0x2f/0x90 [ 114.660188][ T7183] hci_rfkill_set_block+0x21d/0x2e0 [ 114.665458][ T7183] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 114.671170][ T7183] rfkill_set_block+0x1d2/0x440 [ 114.676016][ T7183] rfkill_fop_write+0x44b/0x570 [ 114.680854][ T7183] ? __pfx_rfkill_fop_write+0x10/0x10 [ 114.686213][ T7183] ? security_kernfs_init_security+0x250/0x290 [ 114.692354][ T7183] ? rw_verify_area+0x255/0x4d0 [ 114.697280][ T7183] ? __lock_acquire+0xab9/0xd20 [ 114.702125][ T7183] ? __pfx_rfkill_fop_write+0x10/0x10 [ 114.707570][ T7183] vfs_write+0x27e/0xb30 [ 114.711822][ T7183] ? __pfx_vfs_write+0x10/0x10 [ 114.716577][ T7183] ? __fget_files+0x2a/0x420 [ 114.721152][ T7183] ? __fget_files+0x2a/0x420 [ 114.725723][ T7183] ? __fget_files+0x3a0/0x420 [ 114.730380][ T7183] ? __fget_files+0x2a/0x420 [ 114.735055][ T7183] ksys_write+0x145/0x250 [ 114.739370][ T7183] ? __pfx_ksys_write+0x10/0x10 [ 114.744227][ T7183] ? rcu_is_watching+0x15/0xb0 [ 114.749010][ T7183] ? do_syscall_64+0xbe/0x3b0 [ 114.753680][ T7183] do_syscall_64+0xfa/0x3b0 [ 114.758170][ T7183] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.763352][ T7183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.769400][ T7183] ? clear_bhb_loop+0x60/0xb0 [ 114.774167][ T7183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.780052][ T7183] RIP: 0033:0x7f04f918ebe9 [ 114.784462][ T7183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.804065][ T7183] RSP: 002b:00007f04f9fc5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 114.812471][ T7183] RAX: ffffffffffffffda RBX: 00007f04f93c5fa0 RCX: 00007f04f918ebe9 [ 114.820447][ T7183] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000008 [ 114.828406][ T7183] RBP: 00007f04f9211e19 R08: 0000000000000000 R09: 0000000000000000 [ 114.836400][ T7183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.844457][ T7183] R13: 00007f04f93c6038 R14: 00007f04f93c5fa0 R15: 00007ffe34c8bc58 [ 114.852964][ T7183] [ 114.855978][ T7183] Modules linked in: [ 114.861035][ T7183] ---[ end trace 0000000000000000 ]--- [ 114.883687][ T7183] RIP: 0010:klist_remove+0x14a/0x340 [ 114.891117][ T7183] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 99 c3 b2 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 7a c3 b2 f6 49 8b 44 24 58 48 89 44 24 08 [ 114.912338][ T7183] RSP: 0018:ffffc9001b70f800 EFLAGS: 00010202 [ 114.920376][ T7183] RAX: 000000000000000b RBX: ffff88802a333c00 RCX: 0000000000000000 [ 114.929496][ T7183] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 114.937595][ T7183] RBP: ffffc9001b70f900 R08: ffffffff8f8a0d43 R09: 1ffffffff1f141a8 [ 114.947404][ T7183] R10: dffffc0000000000 R11: fffffbfff1f141a9 R12: 0000000000000000 [ 114.956672][ T7183] R13: 1ffff1100591bd8c R14: ffff88802c8dec60 R15: dffffc0000000000 [ 114.964692][ T7183] FS: 00007f04f9fc56c0(0000) GS:ffff888125d14000(0000) knlGS:0000000000000000 [ 114.973691][ T7183] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.980519][ T7183] CR2: 00005555595105c8 CR3: 00000000787a4000 CR4: 00000000003526f0 [ 114.988552][ T7183] Kernel panic - not syncing: Fatal exception [ 114.994891][ T7183] Kernel Offset: disabled [ 114.999200][ T7183] Rebooting in 86400 seconds..