last executing test programs: 2m45.874667973s ago: executing program 3 (id=2500): unshare(0x6a040000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095", @ANYRESDEC=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x2, 0xa, 0xe8, 0x5, 0x2, 0x0, 0x70bd25, 0x25dfdbfd}, 0x10}}, 0x810) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r6, &(0x7f00000002c0)=ANY=[], 0xfdef) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0x424f, 0x3}}) 2m43.098062136s ago: executing program 3 (id=2510): syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000200)=0x5b4e, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{0x0}], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], 0xbe) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) socket$netlink(0x10, 0x3, 0xe) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_netdev_private(r4, 0x8991, &(0x7f0000001340)='X.M:S') r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f0000000880)=ANY=[@ANYRES64=r3, @ANYRES32=r5, @ANYRESHEX=0x0, @ANYRES32=r5, @ANYRES8=r5], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x400) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x7, 0x3}, 0xe) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000340)={0x1, &(0x7f00000002c0)=[{0x8, 0x7, 0x4, 0x5}, {0x6, 0x3, 0xfa, 0x5}, {0xfffc, 0xf, 0x7, 0x6}, {0x32fa, 0x9, 0x5, 0x9}]}, 0xfffffffffffffdd9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000006800010003001000fdffff7f00000000000000000c00020001000000150021f679900c8006000180d43f000008004e7aa703ec5f0300050000000600030001"], 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES16], 0xec}, 0x1, 0x0, 0x0, 0x844}, 0x2f081da81104244b) accept4(0xffffffffffffffff, &(0x7f0000000100)=@qipcrtr, &(0x7f00000001c0)=0x80, 0x800) 2m42.253413219s ago: executing program 32 (id=2513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4003, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r5, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 2m42.096349802s ago: executing program 33 (id=2517): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d6163767461700014000280", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0x5}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 2m42.077941521s ago: executing program 3 (id=2518): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x208101, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0xa, 0x9, 0x7, 0xc, 0x2, 0x10, 0x2, 0xf, 0x4, 0x0, 0x5, 0x2, 0x6, 0x1, 0x6], 0x0, [0x8b, 0x101, 0xfffe, 0x2002, 0x1, 0x4, 0x2, 0xd04, 0xff05, 0x2, 0x20b, 0x3, 0x5, 0x6, 0xfffb, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m41.922024232s ago: executing program 34 (id=2518): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x208101, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0xa, 0x9, 0x7, 0xc, 0x2, 0x10, 0x2, 0xf, 0x4, 0x0, 0x5, 0x2, 0x6, 0x1, 0x6], 0x0, [0x8b, 0x101, 0xfffe, 0x2002, 0x1, 0x4, 0x2, 0xd04, 0xff05, 0x2, 0x20b, 0x3, 0x5, 0x6, 0xfffb, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m3.943821209s ago: executing program 5 (id=2667): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, 0x0, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b00400000000000000300000000000000080001001c000000"], 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac1414"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f00000000c0)={'mangle\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x9]}, &(0x7f0000000200)=0x54) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) 2m2.428071944s ago: executing program 7 (id=2675): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xfd}, 0x3503, 0x0, 0x0, 0x7, 0x0, 0x6}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r4, 0x0, 0x0, 0x80000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 2m2.248500824s ago: executing program 5 (id=2676): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'gre0\x00'}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3400000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x80, 0x4, 0x100}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x65d}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1800000, 0x22051, 0xffffffffffffffff, 0x10000000) 2m1.366332678s ago: executing program 7 (id=2681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)={0x24, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x4100) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) close(0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r4) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'wg1\x00', &(0x7f0000000040)=@ethtool_cmd={0x28, 0x6, 0xff, 0x0, 0xfa, 0xfa, 0x1, 0x8, 0x3, 0x0, 0x7fffffff, 0xefc2, 0x24, 0x4, 0x8, 0x0, [0x6e, 0x7]}}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r6) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x0, 0xa, 0x148, 0x0, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x20, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc4612bdb50a7bb5a0758ff"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0xff3b) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x8000, 0x3c48}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r9, 0x3}, 0x8) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008001}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m0.859236432s ago: executing program 5 (id=2683): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 2m0.596037764s ago: executing program 7 (id=2684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket(0x11, 0x4, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$xdp(0x2c, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x3229000, 0x1000, 0xfffffff7}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000200)="1479c369caf28b0c600d5d976b000089bdbf4075277f938a9d8616c6bf", 0x1d}], 0x2}, 0x4048081) bind$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x2, {0x2, 0x0, 0x4}, 0x2}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0xa, 0xc}, {0xc, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x400c012}, 0x8850) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x56, 0x0, 0x1}, 0x28) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-aesni)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 2m0.27627069s ago: executing program 5 (id=2686): r0 = socket(0x1d, 0x2, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r1) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xfd}, 0x3503, 0x0, 0x0, 0x7, 0x0, 0x6}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x98, r6, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x61}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7724}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000bc0)={0x1d4, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "5e3bd042f57380f93263e4ce1aa288e50c35390e7ba2e50b24f8bb8112842a3d62af"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "aa05b0bdfe4944963a59c763d9cab444b877817f0d6aadf30a6b99"}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x82}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xabb4}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7c3c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}]}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1040132a}]}]}, 0x1d4}}, 0x4000) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r7, 0x0, 0x0, 0x80000) socket$inet_sctp(0x2, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x6a, 0x4, 0x1, 0x4) 1m59.448864398s ago: executing program 7 (id=2691): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xfd}, 0x3503, 0x0, 0x0, 0x7, 0x0, 0x6}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r4, 0x0, 0x0, 0x80000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 1m59.290859818s ago: executing program 7 (id=2693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0xe4}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x18, &(0x7f0000000600)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x70000000}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @jmp={0x5, 0x0, 0xc, 0x5, 0x8, 0x6, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x2, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r6) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000140)=0x2, 0x4) r7 = socket(0x11, 0xa, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004"], 0x17) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r8, &(0x7f0000000140), &(0x7f0000000080)=@tcp=r7}, 0x20) sendmsg$802154_dgram(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x14, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1000}, 0x140) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r8, 0x40049366, &(0x7f00000002c0)=0x1) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x13, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) 1m59.100428031s ago: executing program 5 (id=2694): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x208101, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0xa, 0x9, 0x7, 0xc, 0x2, 0x10, 0x2, 0xf, 0x4, 0x0, 0x5, 0x2, 0x6, 0x1, 0x6], 0x0, [0x8b, 0x101, 0xfffe, 0x2002, 0x1, 0x4, 0x2, 0xd04, 0xff05, 0x2, 0x20b, 0x3, 0x5, 0x6, 0xfffb, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m58.739084747s ago: executing program 35 (id=2695): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ac0)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000099}, 0x81) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x40, r9, 0x1, 0x70bd27, 0x25dfd3fb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) ppoll(&(0x7f0000000740)=[{r7, 0x1}, {r7, 0x2000}, {}, {r10, 0x200}], 0x4, &(0x7f00000007c0), &(0x7f0000000800)={[0x1]}, 0x8) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00300000000000005400128009000100766c616e000000004400028006000100000000000600050081000000280003803900010006000000090000000c00010000040000000000008dff010040000000060000000600050088a8000008000a00", @ANYRES32, @ANYBLOB="080005"], 0x84}, 0x1, 0xba01}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbd6f}}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000280)='skb_copy_datagram_iovec\x00', r11}, 0x18) r12 = socket(0x10, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) write(r12, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r12, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 1m58.694570546s ago: executing program 5 (id=2697): socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff024}, {0x6}]}, 0x10) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) close(r1) socket$inet6(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000001540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x9df}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xf0}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) socket(0x2, 0x80805, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080000002d1501000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1m58.324067247s ago: executing program 36 (id=2697): socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff024}, {0x6}]}, 0x10) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) close(r1) socket$inet6(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000001540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x9df}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xf0}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) socket(0x2, 0x80805, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1m58.318387651s ago: executing program 7 (id=2698): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) 1m58.317965427s ago: executing program 37 (id=2698): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) 1m34.895971241s ago: executing program 8 (id=2774): r0 = socket$inet(0xa, 0x806, 0x84) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x9, 0x0, 0x48b0, 0x3, 0x945b, 0x7]}, &(0x7f0000000400)=0x78) sendmsg$can_bcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) listen(r0, 0x8) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x3261e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x3, 0x1}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x7}, 0xc) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, 0x0, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 1m28.94583488s ago: executing program 8 (id=2798): socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d61637674617000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0x5}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 1m28.108334301s ago: executing program 8 (id=2805): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000b40)=[{&(0x7f00000003c0)="670200c214197ef87c1eb4a35b82095571", 0x11}, {&(0x7f00000007c0)="4922194ff954c072967ea44aa505fdc84871d609268b2ff63c940f4fb65ff492", 0x20}, {&(0x7f0000000a80)="a0fd916c08ffa1d42ef847b4bcd9661f7c684015bcfeb837c4eee6ceb3bfb7268b068c7445375e789af0217f2be4e41a261067ab1b6ec4b0155fb1911f1d607183bbc239c88ba7098041edcffc36757ce49c1ed696432d8ee3dc5fd930f9facd45e914087d137597a229efcb5e0e97183eeda2c6ed571d0908da594be63c540153ca1195", 0x84}], 0x3}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000500)}}], 0x2, 0x880) shutdown(r4, 0x1) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000001540)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r6}, 0x20) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000300)={0x0, 0xffffff29, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01020000000000000000020000040c00034000000000000000050900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a8fc3d0d1a9122a360ad20bad8cd43d890de0d26ad2278222cfd49c9093ce27db88a89858e1dbf76766ff2f76f308a48c6abcd62650f5f4ec650931f329faff3c6f42f07bd3467edd598d775993d9c8d955becda69d9bd8cefd58942848a0a6"], 0x60}}, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000100)={r9, 0x9}, &(0x7f0000000180)=0x8) r11 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r11, 0x84, 0xe, &(0x7f0000000180)={r12, 0xda0, 0x3, 0x3, 0x0, 0x2f33, 0x1, 0x1ff, {0x0, @in={{0x2, 0x4e20, @empty}}, 0x101, 0x4005, 0x7fc, 0xf, 0xfffffffd}}, &(0x7f0000000280)=0xb0) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000240), 0x4) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYRES64=r12, @ANYRESHEX=r2, @ANYRES64=r13, @ANYRES32=r3, @ANYBLOB="0926a7d67661a4e989be56c71b031bd05f523b75e1facacdf2f2bf914ac13c70cef8995a56e8f111085905b647292c39fef0d72c31cbad80a3703b1c"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x2, @local, 'dummy0\x00'}}, 0x1e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 1m27.14826915s ago: executing program 8 (id=2808): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x11, 0x200000000000003, 0x300) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000020688279000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffd}, 0x94) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000003c0), 0x4) r8 = socket(0x25, 0x2, 0x6) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, 0x0, 0x400000000000002, {0x1}, 0xff}, 0x18) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r13, @ANYRES32=r12, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r13}, &(0x7f0000000000), &(0x7f0000000080)=r9}, 0x20) recvmsg$unix(r10, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xa000}], 0x3}, 0x0) sendmsg$inet(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 1m25.623505266s ago: executing program 8 (id=2813): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)=ANY=[@ANYBLOB="619ad30f", @ANYBLOB="00012bbd7000fbdbdf25210000000800", @ANYRES32=0x0, @ANYBLOB="0600980013ff00000600f700010900000400ff00"], 0x30}, 0x1, 0x0, 0x0, 0x40000000}, 0x4c000) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000340)='percpu_alloc_percpu\x00'}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000001700000600000008000300", @ANYRES32=r4, @ANYBLOB="0800050008000000"], 0x24}, 0x1, 0x0, 0x0, 0x30000095}, 0x800) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv', 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r8], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) write(r0, &(0x7f0000002480)='XC(', 0x3) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001980)={'erspan0\x00', &(0x7f0000001900)={'sit0\x00', 0x0, 0x8000, 0x700, 0x9, 0x67, {{0x7, 0x4, 0x2, 0x5, 0x1c, 0x67, 0x0, 0x4, 0x2f, 0x0, @loopback, @empty, {[@cipso={0x86, 0x8, 0x3, [{0x1, 0x2}]}]}}}}}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002200)=@bpf_lsm={0x1d, 0x11, &(0x7f0000001cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc}, {}, {}, [@map_fd={0x18, 0xb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001e80)='GPL\x00', 0x1000, 0x0, 0x0, 0x41100, 0x4, '\x00', r12, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001ec0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000001f00)={0x1, 0xd, 0xff, 0xef}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001f40)=[0xffffffffffffffff, r1, r7], &(0x7f0000001f80)=[{0x3, 0x3, 0x4, 0xc}, {0x2, 0x1, 0xe}, {0x3, 0x2, 0xa, 0x1}, {0x5, 0x2, 0x5, 0xb}, {0x2, 0x1, 0x7, 0x6}, {0x2, 0x5, 0x8, 0x5}], 0x10, 0x5}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a40)={'ip6_vti0\x00', &(0x7f00000019c0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x2e, 0x9, 0x26, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x40, 0x40, 0xe, 0xa6}}) sendmmsg$inet(r0, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f00000002c0)="a028a5af023ba092ae45cff08a070c6ecd1c1df98cbfaf3bf819242a7239f7a95bcd132ea1301dafb35d0c0053ceb2efdfbcb24c58d1f00f9359590f81a602fa8ee341d40f008de9ea085d0ae4e67500effd8d7369f7cd8a0bd88de6c6f55b7a8bdd67491128a4181aa3cf8d1d9f2a78c6da18fff6a8226c69aa6b3835006349a05a49806771456d254bcdda80510b66c49245259bbeb3615e2518caba331ec2b38a03b6137b26ec69a7c008bd38a5dff6ef11a158c2510f821d1a", 0xbb}], 0x1}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000140)="b7e06a3f548f0be6f0c6c6b12f2ec0d7ea7e6ba5dbf5cf60f461708f8db3c1e63e2367bd63d6fac05b710c831e412283d3eb468090eaa95db75c5f4bd15611a8d7a7e1e1198af48c5f31133938f3419c85eb45e013c95a3966c21850dd2c5d397c29cc1cbe55a5629a39ce6f6881ef79004a9e25826e902b714d2883ecc38b347e9e249d9446a61277cabb311944bcd26d41a8aee37f8e90d5b08814a98e01bfaa5c2c3bafb7b69c31bb09e99f03c1e37d392c2d2d5841ae6138b66a1fdccc8e3a081dc18f140027ad2190676ea20416c353ff12078ee08786e40f4c19cb86797814ee52046520f0907811", 0xeb}, {&(0x7f0000000380)="d03a335e24b259b9fbf7f92572ecec93d07d4ef1dcc60d13e827e8ca0bbc4a47e3a0969767e6209919ef43befc35e0fcaa5797caa27dbe0d0d4a5b6118d68d3ada1aa1431f11c5a2c3331aa30731e17ca60fcbf7d91e50820b29972ad1373a55de9a479861c2025715a5ec20d57cdc31947e97b8db9ea42ec5650756c0f8f5ea50da3873abe015", 0x87}, {}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="b446b70841835c2ca8e62d0f48625d0f13493c48713b341123b0f7f8b79a96c4ea4819cf3c99318c443a2096bf98e9a78e99421c41818805dfd20e71373e7bf40fa14fe10cc151640410b6097c3aae274bd38d2bb721a850aa89c21dc64bb9519c9d40cff61aa2890691b19579f417e025e44ff8798a826fea504ff3290bcec059e0940ae11d39668fed0607d319574efbf8a2e20e9a8ed4b01251a2a549a8b31378b05f76c7", 0xa6}, {&(0x7f00000015c0)="2b5d39e904d8a27cbd4d61209645844e2d109a909793a40dd02e4aad6cc7839eee130737880f8779ad17569e5f2a2668940e58e4994cafdfa1897a11c78b14bc44cfeb5e63a653ccc7a08cfdbb374ce0d6b28e0f1cd7638cd6309ed79a4afb4498a6b8f8963c986f98ef2c7228b0013dd21bb9fadce921593ed8bad5efc9257914a9dd7b256e73dc4dd8eb076e729bd4e6d510eed9319f4eb4b58768b0306d2317b0af9831b88a1823020f704420c109b4273d9c2b0d222ff2e23232dc59c567db9b1e0c014c0310492d22f6", 0xcc}, {&(0x7f00000016c0)="e2a9142b071b17fd39a55ec0863807bf8b8879753648d239bcc694c4f85a93520974598b7b078fa154af1114cdefa45ec762d4509f1c207e03eb3d33994155992441bcea7b354a6f054faa1b8766e25b45939173cb314c6cff723dcc306fa6dbeca9daf5f3b82dffc928ba99f9bf8b9231260d8354c5254b2720e78d067082e32599fe021924ceb755a7be39e90cb187649c8561c9e1f12c6928878db399f85a1a1edeeec35dbe7edfd568705bf06f197408dde89325d37d250c14784aac0e", 0xbf}, {&(0x7f00000024c0)="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", 0x1000}, {&(0x7f0000000240)="dc9395c6777c378735486928e74983061979e5e8b32dde08d7605633e52a23597a02484e5f0ff10269077634624fd43e8a9ac10244206a0cd1979cdb85d8d1c3caafac", 0x43}, {&(0x7f0000000440)="7d624d0219f066f90c6cd91e446be0baa55ac7df9d7efab3b857fa15b9c75a234a77be621ab1d1ef47412eb04d24d16a4ad784e3c0bfc0532b054e58b7ecbc5b30bb2ebdfbfb8ee2186f252c8c9dcaa588a27bbbddccfad82a61ca9d80c88f33", 0x60}], 0xa, &(0x7f0000001840)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}], 0x18}}, {{&(0x7f0000001880)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f00000018c0), 0x0, &(0x7f0000002040)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @multicast1, @loopback}}}, @ip_retopts={{0x70, 0x0, 0x7, {[@generic={0x43, 0x9, "1d539784279204"}, @timestamp_addr={0x44, 0x2c, 0x5f, 0x1, 0x7, [{@multicast1, 0xbe99}, {@broadcast}, {@broadcast, 0x1}, {@empty, 0x2}, {@empty, 0x7}]}, @timestamp_prespec={0x44, 0x1c, 0x21, 0x3, 0x2, [{@multicast1, 0x90}, {@multicast2, 0x6}, {@loopback}]}, @timestamp={0x44, 0xc, 0x4f, 0x0, 0x9, [0xd, 0x7fffffff]}]}}}, @ip_retopts={{0x10}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0x75, [@remote, @broadcast, @multicast1, @private=0xa010100, @multicast2, @remote]}, @timestamp_prespec={0x44, 0x1c, 0xe1, 0x3, 0x8, [{@rand_addr=0x64010101, 0x9}, {@private=0xa010100, 0x6}, {@empty, 0x4b6}]}, @timestamp_addr={0x44, 0x14, 0x4a, 0x1, 0x7, [{@multicast2, 0x4000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff}]}, @ssrr={0x89, 0xb, 0x72, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @timestamp={0x44, 0x10, 0x89, 0x0, 0x0, [0x9a3, 0x1, 0x6]}, @ssrr={0x89, 0x3, 0xfb}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @private=0xa010100, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @loopback, @private=0xa010101}}}], 0x1a8}}, {{0x0, 0x0, &(0x7f0000001b40), 0x0, &(0x7f0000001b80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x18}}], 0x4, 0xa040) 1m21.394997914s ago: executing program 8 (id=2832): unshare(0x40000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x6) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) write(r2, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0xffffffffffffffb0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x1e, 0x4, 0x0) connect$tipc(r8, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r8, &(0x7f0000004400), 0x400000000000203, 0x0) 1m20.960598206s ago: executing program 38 (id=2832): unshare(0x40000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x6) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) write(r2, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0xffffffffffffffb0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@call={0x85, 0x0, 0x0, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x1e, 0x4, 0x0) connect$tipc(r8, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r8, &(0x7f0000004400), 0x400000000000203, 0x0) 55.406074379s ago: executing program 9 (id=2912): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000140)={0xcb15, {{0x2, 0x4, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='gre0\x00'}) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000140)=@x25, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000380)=""/136, 0x88}, {&(0x7f00000001c0)=""/80, 0x50}, {&(0x7f0000000440)=""/29, 0x1d}, {&(0x7f0000000900)=""/216, 0xd8}, {&(0x7f0000000a00)=""/147, 0x93}, {&(0x7f0000000480)=""/22, 0x16}, {&(0x7f0000000ac0)=""/67, 0x43}, {&(0x7f0000000c00)=""/144, 0x90}], 0x8, &(0x7f0000000d80)=""/99, 0x63}, 0x3}], 0x1, 0x40000140, &(0x7f0000000e00)={0x77359400}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201e5ff9e584eb1aa3d10e3dff9f8e583de3a48e95f3b1ef28da212fb3a0d2e2bba5a83d454726fe5a16e3c020146d24c8d98140213c50401c64c9d2e58c8e5858e", 0x6e}], 0x1}, 0x48000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r2, 0x4) recvmsg$kcm(r3, &(0x7f00000012c0)={&(0x7f0000000e40)=@hci, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000ec0)=""/70, 0x46}, {&(0x7f0000000f40)=""/186, 0xba}, {&(0x7f0000001000)=""/13, 0x3a}, {&(0x7f0000001040)=""/144, 0x90}, {&(0x7f0000001100)=""/27, 0x1b}, {&(0x7f0000001140)=""/73, 0x49}], 0x6, &(0x7f0000001240)=""/94, 0x5e}, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff004) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x18) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff, 0x4, 0x18}, 0xc) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000004c0)='%pB \x00'}, 0x20) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3161fd51, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@ldst={0x1, 0x3, 0x2, 0xc, 0xe, 0xc, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x80, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0xb, 0x7fffffff, 0xff}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[r6, r7, r8, r9, r10, 0xffffffffffffffff], &(0x7f0000000600)=[{0x0, 0x1, 0x1, 0x3}, {0x2, 0x1, 0xe}, {0x3, 0x4, 0xb, 0x1}, {0x0, 0x5, 0x6, 0x2}, {0x4, 0x4, 0x4, 0xb}], 0x10, 0x9}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 54.694453677s ago: executing program 9 (id=2914): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000480)={0x7, 'pimreg1\x00', {0x7}, 0x8}) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x10000000) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @loopback, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@dstopts={{0x18}}], 0x18}, 0xc4) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x1b, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @alu={0x0, 0x0, 0x5, 0x7, 0x4, 0x10, 0x10}, @generic={0x0, 0x7, 0x7, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x3, 0x1, 0x2, 0x9, 0xb, 0x100, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{0x1, 0x2, 0x2, 0x9}], 0x10, 0x1}, 0x94) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x10000003, 0x0, 0x81, 0x1ff, 0x1}, 0x1c) recvmmsg(r8, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x10}], 0x1, 0x2100, 0x0) recvmmsg$unix(r8, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$kcm(r7, &(0x7f0000000680)={&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x3, 0x0, 0x2, 0x2, {0xa, 0x4e22, 0xc, @mcast1, 0xbe4}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="956a3456", 0x4}], 0x1, &(0x7f00000006c0)=[{0xd8, 0x10f, 0x47, "989757ac1b87091f22d6da63611423cb97737e8214a0eea85eda5eb87c161847e35004a35f4a0451c512ae9f19db439b4eff0f2462314d6ce1a94a6ab1854301b3e151aa4cd40fc514bb121dac596d45bdad4beb223477f66d6450ca695e8c9e97368d051965ab5585f659a9520b971e5d47c6898b0aeb0b03b4b8adc82e4eed07c387024db0131165e25326fd8bbfa9cfd65054c7daa6d793d58fc010391ba1c1e6b993a455d6bf7f1f76edef3c325c6a32d3937d81e62e551e7d1d5934629a532d"}, {0x48, 0x114, 0x3, "f71683e7b16f08dc3d4f68e78375f8466ef1c527ec568d2206cd08278cf688e55104081ba271792842a7f001419cd8ffbd7f354f2a6c"}, {0xf, 0x111, 0xf, "8ba75eef003ea8bbca331b8c9c7d4075375ed4be7daff79007c2ee938def1fedd53ed6f18e49ea9959e77cff43c9436aa1a4c824d7a0eaccd3779c18c049a61e48e982a1d4e17251de4bc0d74d9082e17925650c76436180613143982b595c2519a65b80c35076608f71857d06cf876f8509e860f9fc258449ac8c1a0ea1202a142d19e3141c1f52fd62f64799d21ad28fbf31b970d74bcacbf2c8756456"}, {0x10, 0x102, 0x5, "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"/281}], 0x1e0}, 0x8080) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 53.646825648s ago: executing program 9 (id=2917): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="7400000010000305000900"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800c0001006d6163766c616e003c00028008000100100000001c0005800a000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa000008000300030000000a000400aaaaaaaaaabb0000080005", @ANYRES32=r6], 0x74}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd25, 0x25dfdbfc, {0x80, 0x80, 0x20, 0x4, 0xff, 0x3, 0xfd, 0x2, 0x1b00}, ["", ""]}, 0x1c}}, 0x440088c0) r8 = socket$inet(0xa, 0x801, 0x84) listen(r8, 0x8) socket$inet(0xa, 0x801, 0x84) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) ppoll(&(0x7f0000000500)=[{r9}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @local}}, 0x0, 0x2, 0x400, 0xffffffff, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) write$bt_hci(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="e8030802c900"], 0x6) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 52.642344215s ago: executing program 9 (id=2920): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000480)={0x7, 'pimreg1\x00', {0x7}, 0x8}) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x10000000) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @loopback, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@dstopts={{0x18}}], 0x18}, 0xc4) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x1b, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000030000000000000009000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500182a000200000555000000000000000000", @ANYRES32=0x1, @ANYBLOB="00000000080000005047100010000000007701000000000085200000010000004bb90001fcffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000008520000001000000950000000000"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{0x1, 0x2, 0x2, 0x9}], 0x10, 0x1}, 0x94) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x10000003, 0x0, 0x81, 0x1ff, 0x1}, 0x1c) recvmmsg(r8, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x10}], 0x1, 0x2100, 0x0) recvmmsg$unix(r8, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$kcm(r7, &(0x7f0000000680)={&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x3, 0x0, 0x2, 0x2, {0xa, 0x4e22, 0xc, @mcast1, 0xbe4}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="956a3456", 0x4}], 0x1, &(0x7f00000006c0)=[{0xd8, 0x10f, 0x47, "989757ac1b87091f22d6da63611423cb97737e8214a0eea85eda5eb87c161847e35004a35f4a0451c512ae9f19db439b4eff0f2462314d6ce1a94a6ab1854301b3e151aa4cd40fc514bb121dac596d45bdad4beb223477f66d6450ca695e8c9e97368d051965ab5585f659a9520b971e5d47c6898b0aeb0b03b4b8adc82e4eed07c387024db0131165e25326fd8bbfa9cfd65054c7daa6d793d58fc010391ba1c1e6b993a455d6bf7f1f76edef3c325c6a32d3937d81e62e551e7d1d5934629a532d"}, {0x48, 0x114, 0x3, "f71683e7b16f08dc3d4f68e78375f8466ef1c527ec568d2206cd08278cf688e55104081ba271792842a7f001419cd8ffbd7f354f2a6c"}, {0xf, 0x111, 0xf, "8ba75eef003ea8bbca331b8c9c7d4075375ed4be7daff79007c2ee938def1fedd53ed6f18e49ea9959e77cff43c9436aa1a4c824d7a0eaccd3779c18c049a61e48e982a1d4e17251de4bc0d74d9082e17925650c76436180613143982b595c2519a65b80c35076608f71857d06cf876f8509e860f9fc258449ac8c1a0ea1202a142d19e3141c1f52fd62f64799d21ad28fbf31b970d74bcacbf2c8756456"}, {0x10, 0x102, 0x5, "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"/281}], 0x1e0}, 0x8080) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 51.645128833s ago: executing program 9 (id=2923): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="090000000800000004000000094000000a000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000d4ec2cd6984f2912"], 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r5) r6 = socket$netlink(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000340)="9f227e2c", &(0x7f0000000000)=""/10, 0x2}, 0x20) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100ac1014aa08000200e00000020800074000000005"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 51.306970519s ago: executing program 9 (id=2925): unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getpid() sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)={0x44, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r8, &(0x7f00000002c0)=ANY=[], 0x33) sendfile(r8, r7, 0x0, 0x10000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) write$cgroup_pid(r7, &(0x7f00000001c0)=r9, 0x12) 51.029159596s ago: executing program 39 (id=2925): unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getpid() sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)={0x44, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r8, &(0x7f00000002c0)=ANY=[], 0x33) sendfile(r8, r7, 0x0, 0x10000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) write$cgroup_pid(r7, &(0x7f00000001c0)=r9, 0x12) 43.80789633s ago: executing program 3 (id=2926): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0xfffffffffffffde6, &(0x7f0000000100)={&(0x7f0000001000)={0x18, 0x3e, 0x229, 0x0, 0x25dfdbfc, {0xa}, [@nested={0x0, 0x11b, 0x0, 0x1, [@generic="996fb09acf86159c154946ba15a088a5fc9bb98c18210624cbe69c8497bf17b949568e66ac8e800e60619038deee299e7c29f86534815f7fadcf9d44da4a850e65d5525f2a73386421a4b39a36549ec1db6b4197680d38f1edf45ad4ed2cda10df08ff7a5567", @typed={0x0, 0x56, 0x0, 0x0, @u64=0x180000000000000}, @typed={0x0, 0x24, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x0, 0x14, 0x0, 0x1, [@nested={0x0, 0xfa}, @nested={0x0, 0xb8}, @generic="ca02c2beac57e4d4ee66cd7c60757de9d9261b70425a8bbde2a6f00bfdc9bf614b61d7712e7d5e4503e7e93e5f3e9b0722ea96ff78"]}, @nested={0x0, 0x13f, 0x0, 0x1, [@generic="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", @generic="e5cf1f12233b45c11a85d63dd06a039b4f12924760ae82f022e6cd4d72a080537624e1c263272f6ab3c623a975a56aff123b0eec22198f877fc8dd39b4a4c55ee5aff7a5a353a1ec2eeb02a86cc72b8c0ac1fd06f7959ad491bbaf24efa1d47a180c378ed2a3494f6dee21ff0dc26396b156d21dce05a2f4cfd73d9567538747c4c6acca61d5c25c02a9d5f69ad8d1de1aba258721786687043a273bf9717d3ef003e6b6409d63c8725f85a9b3bfefa195600955091834837ac9f22ac754971cf9a4e675f932129e", @nested={0x0, 0x73}]}, @typed={0x0, 0xad, 0x0, 0x0, @pid}, @typed={0x0, 0x39, 0x0, 0x0, @fd}]}]}, 0x18}}, 0x8804) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000380000000000019078ac1e0001ac1414aa030490780300fffe45000000808259600cd9f714560000ffff002f0000ac14140ae00000"], 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005b40)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x38}}], 0x1, 0xc080) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01600000000000000100077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000001ac0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a80)={&(0x7f00000019c0)={0xb4, r5, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4c, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c4b74d5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38d834c8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x653c6aec}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x698f15cb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56d75df}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x495ef80}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x810}, 0x20000040) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x34, r8, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x6, 0x13}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x20, r8, 0x220, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x2000c044) r10 = socket$rds(0x15, 0x5, 0x0) r11 = socket(0x22, 0x4, 0x7) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r12) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000180)={0x24, r13, 0x1, 0xfffffffc, 0x0, {{0x2}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r11, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x70, r13, 0x1200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7, 0x57}}}}, [@NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}]}, 0x70}}, 0x4000001) sendmsg$rds(r10, &(0x7f0000001800)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000080)=""/85, 0x55}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/38, 0x26}, {&(0x7f0000001140)=""/108, 0x6c}], 0x4, &(0x7f0000001580)=[@mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x89}, &(0x7f0000001200)=0x6, &(0x7f0000001240)=0x7ffffffe, 0x5, 0x9, 0x740, 0xfffffffffffffff9, 0x32, 0x1}}, @rdma_dest={0x18, 0x114, 0x2, {0x1, 0x1a}}, @mask_cswp={0x58, 0x114, 0x9, {{0x6, 0xffffffff}, &(0x7f0000001280)=0x80, &(0x7f00000012c0)=0x7ff, 0x4, 0x8000, 0x40, 0x6, 0x28, 0xfffffffffffffffd}}, @mask_cswp={0x58, 0x114, 0x9, {{0x6, 0x5}, &(0x7f0000001300)=0x400, &(0x7f0000001340)=0x7fffffffffffffff, 0x8, 0xfc25, 0x1, 0x0, 0x0, 0x7}}, @cswp={0x58, 0x114, 0x7, {{0x2, 0xfffffffe}, &(0x7f0000001380)=0x7fff, &(0x7f00000013c0)=0x4, 0x0, 0x0, 0x6d5b50fd, 0x1fc, 0x40, 0x43e}}, @fadd={0x58, 0x114, 0x6, {{0x80000000, 0xffff0000}, &(0x7f0000001400)=0x7, &(0x7f0000001440), 0x1, 0x105, 0x1ff, 0xffffffffffffff97, 0x8, 0x100}}, @mask_fadd={0x58, 0x114, 0x8, {{0x7, 0x8001}, &(0x7f0000001480)=0x99d, &(0x7f00000014c0)=0xb5f, 0xce, 0x0, 0x1000, 0x5, 0x2, 0x1}}, @mask_fadd={0x58, 0x114, 0x8, {{0x6, 0x4}, &(0x7f0000001500)=0x6, &(0x7f0000001540)=0x3, 0x8000000000000000, 0xfffffffffffffff7, 0x9, 0x0, 0x2, 0x8000000000000000}}], 0x280, 0x1}, 0x40) 43.532157293s ago: executing program 3 (id=2960): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000340)='I', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) 42.830984451s ago: executing program 3 (id=2964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x3, 0x4, 0x7}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0xd, 0xc, &(0x7f0000002b80)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000002b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}, 0x90) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100), 0x4) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x20, 0x10, 0x437, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40c89}}, 0x20}, 0x1, 0x0, 0x0, 0x44801}, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x303}, "6ef6aaaeab409e59", "b6b8e7e85887dfc2e4ffb9968b22583f", "4d800012", "5257a0fefe42c4e4"}, 0x28) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = accept$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f00000000c0)=0x6e) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000300)={0x6, 0x7ff, 0x6, 0x0, 0x0, [{{r5}, 0x1}, {{r1}, 0x1}, {{r1}, 0x23}, {{r0}, 0x200}, {{r1}}, {{r6}, 0x6}]}) syz_emit_ethernet(0x46, &(0x7f0000000ac0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x73, 0x1, '\x00', [@ra, @ra]}]}}}}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r7 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r7, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x181601, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r10, 0x2, &(0x7f0000000240)=0x5) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0xfd5e, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 42.386843901s ago: executing program 40 (id=2964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x3, 0x4, 0x7}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0xd, 0xc, &(0x7f0000002b80)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000002b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}, 0x90) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100), 0x4) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x20, 0x10, 0x437, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40c89}}, 0x20}, 0x1, 0x0, 0x0, 0x44801}, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x303}, "6ef6aaaeab409e59", "b6b8e7e85887dfc2e4ffb9968b22583f", "4d800012", "5257a0fefe42c4e4"}, 0x28) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = accept$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f00000000c0)=0x6e) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000300)={0x6, 0x7ff, 0x6, 0x0, 0x0, [{{r5}, 0x1}, {{r1}, 0x1}, {{r1}, 0x23}, {{r0}, 0x200}, {{r1}}, {{r6}, 0x6}]}) syz_emit_ethernet(0x46, &(0x7f0000000ac0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x73, 0x1, '\x00', [@ra, @ra]}]}}}}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r7 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r7, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x181601, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r10, 0x2, &(0x7f0000000240)=0x5) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0xfd5e, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 23.881494442s ago: executing program 1 (id=3032): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) socket$inet(0xa, 0x801, 0x84) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r2, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x5c, &(0x7f00000002c0)=ANY=[@ANYBLOB="a9000000000800000100004000000000310dee6710b7c30030246f4b87595042b4a02d5bb1db718b3eb14c03c22cb435f0e179cb5ad476155f63ac7da8227fe43adc65377c811dbdd197dbd62f9afaa172ade411e9c0ade4225cc3ab21869bdc"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x4c, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xe, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5317}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8e5af3a2eb153b3b}, 0x48010) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 22.666384078s ago: executing program 1 (id=3036): accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) socket(0x1e, 0x4, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4008000) 22.391046772s ago: executing program 1 (id=3038): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) r9 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) 12.731350964s ago: executing program 1 (id=3067): ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000300)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYBLOB="0000000000000000b7040000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x2341, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='rcu_utilization\x00', r1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRESDEC=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000340)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) close(r3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.693293599s ago: executing program 1 (id=3073): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x80000) recvmmsg(r7, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 9.329774286s ago: executing program 6 (id=3080): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20040880}, 0x4008840) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, 0x0, 0x0) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, &(0x7f00000002c0), 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r5) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) shutdown(r4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 7.143080636s ago: executing program 2 (id=3085): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000002c0)={{0x6, 0xaac}, 0x1a}, 0x10) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000300)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x2341, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='rcu_utilization\x00', r2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRESDEC=r1], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0xfffffffc, {0x2, 0x0, 0x0, 0x0, 0x20, 0x66, 0x8}, [@NDA_DST_MAC={0xa}, @NDA_PROTOCOL={0x5, 0xc, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x1804}, 0x4) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000000340)) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) close(r4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.463043188s ago: executing program 2 (id=3088): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r3, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x10}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x2, 0x0, 0x0, 0xfffe}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000000280)={0x0, @qipcrtr={0x2a, 0x1, 0x7ffe}, @phonet={0x23, 0x1, 0xa, 0xe4}, @phonet={0x23, 0x7, 0x1, 0xaa}, 0xfff, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)='lo\x00', 0x401, 0x4, 0x4}) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 5.448731936s ago: executing program 6 (id=3090): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x2000018c) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000280)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000a30cfffe2c0004802800018007000100637400001c0002800800024000000011080004400000000c05000300b50000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a"], 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f00000000c0)=0x2) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000240)={@private0, 0x58, r6}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="3400000010000108fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="19a904007e82f9932dd5f44508000800ecc5", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r9, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x1, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r9, 0x101, 0x19, &(0x7f0000000180)=@netrom={'nr', 0x0}, 0x10) 5.430111569s ago: executing program 2 (id=3091): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'virt_wifi0\x00'}]}, 0x28}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2, 0x4}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000004700000000f11338831b9f703047c1beef5b5f78cf56aae98af3d4dc3ee56064d24f172efb20d4598ca850fc7739111f3ff36e1e294527e511671c531bc0aac8491b8bd1dbd0aa90e7c6c9b6579a7037ca027fea59d13f4d59c9173b888959fe1b5b550ff14983bdc4a01eb19695ac2401775693016f00000100b2b6dfc47f7c2252048e1659c3d68f56e90926fdcbb9bd1d0e48b140f26c9cded9bdf2773409608245fa38485393b5b8c83a3f40fb7c58d3f21c897ac55f82939247690115", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff01000e0000000000000000000000010c00068005000100000000004700028005000100010000000600034000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x8d38}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000340)={0x2, 0x1, 0x8008, 0x5, 0x1ff, 0x9995, 0x4, 0x9, r6}, 0x20) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x3c, r10, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004001}, 0x4040081) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r11) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r11, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r12, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x54}, 0x2, 0x34005}, 0x0) 4.970281522s ago: executing program 6 (id=3092): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x8, 0x4, 0x4009, 0xa, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value=0x3f000000}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r5) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c10000000000000000000", 0x58}], 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x18, 0x24, 0x301, 0x0, 0x80, {0x11}, [@nested={0x4, 0x12f}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000040)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="a739dfe54ad99ffa18c27526b51001fb4f778791377c"], 0x1c}}, 0x4000054) 4.94655788s ago: executing program 2 (id=3093): socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) unshare(0x6a040000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003680)={0x24, 0x16, 0xa01, 0x0, 0x1, {0x2}, [@nested={0x10, 0x122, 0x0, 0x1, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xe3, 0x0, 0x0, @pid}]}]}]}, 0x24}}, 0x0) unshare(0x44000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x1d0, 0x1d0, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x3b, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5c, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x652}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7f}, 0x1c) r6 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r6, 0x852ac000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x4c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000020000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24044011}, 0x20000890) socket$netlink(0x10, 0x3, 0x0) 4.446630038s ago: executing program 6 (id=3094): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x24060400) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c0003800c0000800800034000000002100000800c000180060001"], 0xbc}}, 0x40) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4011}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x9101a0}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) pwrite64(r2, 0x0, 0xffffffffffffff4d, 0x7fffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073797a32000000000900010073797a300000000008000a40000f"], 0x7c}, 0x1, 0x0, 0x0, 0xf3021be2a65b013}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004780)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000005c0)="c1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f00000001c0)="a1", 0x1}], 0x1}}], 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="100600001d00010029bd7000f65e1f4857eca46c", @ANYRES32, @ANYBLOB="80007e0a0a000200ffffffffffff00000600050003000000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r9, &(0x7f0000000700)={&(0x7f0000000000)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@tclass={{0x14, 0x29, 0x43, 0xd8a}}], 0x18}, 0x24004800) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0xfff3, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x4}, @TCA_BPF_FLAGS={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 4.119334831s ago: executing program 6 (id=3095): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) r6 = socket(0x8000000010, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write(r6, &(0x7f00000002c0)="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", 0xfc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, 0x0, 0xff00) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) pwritev(r3, 0x0, 0x0, 0x8001, 0x80) 3.755027781s ago: executing program 1 (id=3097): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001100)={0x1, 0x58, &(0x7f0000001080)}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001240)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x811}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x1, 0x0, &(0x7f0000001000)) r3 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x884) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x190, r3, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffff8}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xf23}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x9}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7f}, {0x6, 0x16, 0x5}, {0x5}}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x80) r4 = socket$inet(0xa, 0x801, 0x84) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300, {[@end]}}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) close(0x4) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, 0x0, 0x0) unshare(0x6a040000) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) listen(r4, 0x8) accept4(r4, 0x0, 0x0, 0x80000) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0xf, 0x88, 0x77}, {@broadcast, 0x4e1f, 0x2, 0xce, 0x5}}, 0x44) 3.580609674s ago: executing program 4 (id=3099): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001002bbd7000fcdbdf2507000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x24044015}, 0x800) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) accept(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote, 0x7}, 0x1c) sendto$inet6(r6, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_udp_int(r6, 0x88, 0x1, &(0x7f0000000080), 0x4) connect$inet(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20044881}, 0x2000c094) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x9, &(0x7f0000000280)={0xfffffffe}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) epoll_create1(0x80000) 3.390111449s ago: executing program 4 (id=3100): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) connect$llc(r0, &(0x7f0000000600)={0x1a, 0x204, 0x7, 0x5, 0x7, 0x8, @local}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r3, &(0x7f0000000a80), 0x12) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4"], 0x0, 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = socket(0x40000000015, 0x5, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x23, &(0x7f0000000040)="020c0000098011e8", 0x8) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x1}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r8, 0x40047459, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r5, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r9, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xffff}}, 0x8) sendmmsg$inet6(r5, &(0x7f0000000fc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0x3}, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYRES8=r4], 0x590}}], 0x1, 0x8044885) 3.198767089s ago: executing program 6 (id=3101): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @empty, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) sendmsg$inet(r1, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[], 0xf0}, 0x81) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xfdd3) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) unshare(0x42000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) writev(r5, &(0x7f0000001300), 0x0) socket(0x200000000000011, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$netlink(0x10, 0x3, 0x0) 2.137274345s ago: executing program 0 (id=3104): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4000000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe00, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000180)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02eb60ca2c0be3c0a19d344d64a9d2cf8a00000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0xc000}, 0x18) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'macsec0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x5, 0x6, 0x2ea0d8b, "2fd7e496e3c8"}}) socket(0xa, 0x5, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000bc0)=@ethtool_per_queue_op={0x4b, 0x0, [0xf, 0x9, 0x7, 0x9, 0x7, 0x0, 0x8, 0xa, 0x7, 0x3380, 0x3, 0x7c, 0x4, 0x0, 0xa00000, 0x5, 0x3f3, 0xd, 0x9, 0x30, 0x1efe, 0x3, 0x80000000, 0x3, 0x5, 0x9, 0x1, 0x8, 0x2, 0x8, 0xffffffff, 0xa17e, 0x8, 0xd, 0xc, 0x3, 0x3, 0x0, 0xa1cc, 0xc, 0x1, 0xc, 0x9, 0x800, 0x9528, 0x1000, 0x4, 0x9, 0x7, 0x0, 0x7, 0x0, 0x8, 0x3, 0x0, 0x9, 0x20ff, 0x5, 0x88, 0x83, 0x3, 0x5, 0x2, 0xdd6f, 0x80000001, 0x401, 0x3, 0x6, 0x8d44, 0x8, 0x8000, 0xd, 0x7fffffff, 0x200, 0x1, 0x9, 0x4, 0x6, 0x6, 0x10, 0x20000, 0x6, 0x8, 0x6, 0x9, 0x0, 0x6, 0x5cb, 0x80000001, 0xa8, 0x579, 0xc51b, 0x10, 0x0, 0x3, 0x5, 0x4, 0x30000000, 0x9, 0x7, 0x9, 0x1, 0xb, 0x0, 0x0, 0x0, 0x600, 0x80000000, 0x9, 0x6, 0x7, 0x100, 0x1, 0x1, 0x6, 0x80000000, 0x6, 0xe5d0, 0x4, 0x54, 0x3, 0x200, 0x6, 0x6, 0x8, 0x40, 0xad, 0x50]}}) r6 = syz_init_net_socket$llc(0x1a, 0x5, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x3, 0xc, 0x2, 0x0, @multicast}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0xb7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) socket$inet6(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xd, 0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) 1.876008613s ago: executing program 0 (id=3105): syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x1, 0xc, 0x9, 0x86}, 0x50) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\a\x00\x00\x00\t\x00'], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x28, 0x10}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0xa, [@struct={0x0, 0x5, 0x0, 0x4, 0x1, 0x9, [{0x2, 0x1, 0x1}, {0xf, 0x4, 0x26}, {0xc, 0x5, 0x8}, {0xe, 0x101, 0x8ff}, {0xe, 0x2, 0xfff}]}, @fwd={0x10}]}, {0x0, [0x61, 0x61, 0x2e, 0x2e, 0x61, 0x2e, 0x5f, 0x61]}}, &(0x7f00000002c0)=""/4, 0x76, 0x4, 0x1, 0xfffffff8}, 0x28) r4 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x2, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x54) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c0002"], 0x80}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x5}, 0xd0, 0x0}, 0x24004059) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="58000000020605200700000000000000000000000c00078008001200000000000500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8404) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r7, &(0x7f00000005c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xfffffff8, @dev={0xfe, 0x80, '\x00', 0x3c}, 0xa31c}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0xc}, 0x0) socket(0x10, 0x803, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) r9 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0xa, r10, 0x1}, 0x10) 1.236625717s ago: executing program 0 (id=3106): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r3 = socket(0x14, 0x2, 0x4) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) listen(r3, 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window={0x3, 0x7, 0x400}, @mss={0x2, 0xc9a}, @mss={0x2, 0x7}, @timestamp, @timestamp], 0x6) socket$inet(0x2, 0x3, 0x6) r6 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x2b4815de34c00aa9, 0x8, 0x8000, 0x4, 0xaa94691b663c22f0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@bloom_filter={0x1e, 0x2, 0xd720, 0x7, 0x3c0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1, 0x1d, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x0, 0xd, 0x8, 0x8, 0x10, 0x4}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, 0x0, 0xffff8000, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x1, 0xd, 0x0, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000c00)=[0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, r7, r8], &(0x7f0000000c40)=[{0x0, 0x2, 0x6, 0x8}, {0x5, 0x1, 0xd, 0xa}, {0x0, 0x3, 0x3, 0x3}, {0x5, 0x5, 0x0, 0x6}, {0x1, 0x2, 0x2, 0x1}]}, 0x94) epoll_create1(0x80000) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYBLOB="02180000180000000000000000000000030005000000000002000000e000000200000000000000000800120000000000000000000000000006000000000000000000000000000000ff0100"/87], 0xc0}}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) close(0x4) 751.445194ms ago: executing program 4 (id=3107): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) 595.79273ms ago: executing program 2 (id=3108): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc000041) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000e80)=@gcm_256={{0x303, 0x36}, "437e509e2d2800", "8b3de2aabceef2a0640000d5a66fd32f419e59f3000000000400", "7d939a3c"}, 0x38) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000180)) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000040)={0x6, 'wlan0\x00', {0x2}, 0x3}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'batadv0\x00', {0x3}, 0x1}) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001080), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) r5 = accept4(r3, 0x0, 0x0, 0x0) close(r5) sendmmsg$inet6(r2, &(0x7f00000126c0)=[{{&(0x7f000000a200)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd0de}, 0x1c, 0x0, 0x0, &(0x7f000000a2c0)=ANY=[@ANYBLOB="24000000000000002900000002000000ff0200"/29, @ANYRES32], 0x28}}], 0x1, 0x8000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYRES32], 0x28}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) socket(0x2, 0x805, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) 567.690606ms ago: executing program 0 (id=3109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a0b0400000000000000000200000088000480240001800b000100736f636b6574000014000280080002400000000308000140000000024c0001800b00010065787468647200003c000280080002400000007508000340000000590800064000000002080006400000000108000440000000b905000200070000000500020007000000140001800a00010071756f7461000000040002800900010073797a30000000000900020073797a32"], 0x17c}}, 0x40880) 499.948371ms ago: executing program 0 (id=3110): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x1, 0x406, 0x0, 0xffffffff, 0x9}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7f, 0x0, 0x9, 0x3ff, 0x2}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket$inet6(0xa, 0x800000000000002, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x30}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x1f00) sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) 480.508536ms ago: executing program 4 (id=3111): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000380)={0x8, {{0xa, 0x4e21, 0x41, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}, {{0xa, 0x4e23, 0x1, @mcast2, 0x5d}}}, 0x108) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "5a4e5ea9ced0f223", "b944d3f6c68b84afc8f1e335a5fd9066", "1e92ba86", "8dd9f333bf4c0c0a"}, 0x28) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x81}, 0x4000) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r4, 0x0, 0x0, 0x20004002, 0x0, 0x0) r5 = accept4$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x0, @loopback}, &(0x7f00000002c0)=0x10, 0x400) bind$inet(r5, &(0x7f00000004c0)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x14) close(0x3) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000200)={r7, 0x4}, 0x8) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x5, &(0x7f0000000600)=0x2f, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}], 0x18}, 0x881) 351.18263ms ago: executing program 4 (id=3112): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000340)='I', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e20, @loopback}}) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001000030400000000fcdbdf2500000400", @ANYRES32=0x0, @ANYBLOB="0e0d00000000000012d07f42f3345d00f1d6c092243767ebe44d20d88678de311757a864627a560a42ad"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x7fff, 0x0, 0xfffffffd, 0x1}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x50, 0xb, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x400022}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_USERDATA={0x17, 0xd, 0x1, 0x0, "65edcabf88281af125cb7a4856e667870b92d7"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xc0}}, 0x20050800) socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) 314.368357ms ago: executing program 2 (id=3113): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a7000000080000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000440)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x2a, 0x0, 0x1}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 33.199683ms ago: executing program 0 (id=3114): accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) socket(0x1e, 0x4, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) 0s ago: executing program 4 (id=3115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x40008c0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x4090) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, 0x0) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000040)={0x0, @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24}, 0x2400c090) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4c0000006c0001002abd7000fefbdf", @ANYRES32=0x0, @ANYBLOB="9000010002000000140003006d6163766c616e300000000000000000180034"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a00000000000000000000020000000000000000010000840800000006000000010000000400000f0000000000002e"], 0x0, 0x46, 0x0, 0x1}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r6, 0x11}, 0x14) bind$bt_hci(r5, &(0x7f0000000400)={0x1f, 0x1}, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f0000001f00), &(0x7f0000000540), 0x8, 0x15, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r7, 0x4d, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r8, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x47}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4044014) write$bt_hci(r5, &(0x7f0000000580)={0x1, @write_class_of_dev={{0xc24, 0x3}, {"9a4a0b"}}}, 0x7) kernel console output (not intermixed with test programs): ng state [ 435.067925][ T4117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.131486][ T4117] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.138722][ T4117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.346416][T14645] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 435.406279][T14643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.451358][T14643] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.467783][ T6009] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.475018][ T6009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.593443][T14751] syzkaller1: entered promiscuous mode [ 435.599000][T14751] syzkaller1: entered allmulticast mode [ 435.694695][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.702061][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.764845][T14643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 435.796875][T14645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.823601][T14633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.902585][ T5145] Bluetooth: hci0: command tx timeout [ 436.132690][T14643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.307886][ T5145] Bluetooth: hci1: command tx timeout [ 436.381299][T14645] veth0_vlan: entered promiscuous mode [ 436.388568][ T5145] Bluetooth: hci4: command tx timeout [ 436.440437][T14645] veth1_vlan: entered promiscuous mode [ 436.450504][T14633] veth0_vlan: entered promiscuous mode [ 436.501454][T14633] veth1_vlan: entered promiscuous mode [ 436.540786][T14645] veth0_macvtap: entered promiscuous mode [ 436.567228][T14645] veth1_macvtap: entered promiscuous mode [ 436.634112][T14798] tipc: Failed to remove unknown binding: 66,1,1/2717648449:2827338007/2827338009 [ 436.645772][T14645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.661051][T14633] veth0_macvtap: entered promiscuous mode [ 436.675756][T14633] veth1_macvtap: entered promiscuous mode [ 436.685664][T14645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.697627][T14800] tipc: Failed to remove unknown binding: 66,1,1/2717648449:2827338007/2827338009 [ 436.720575][ T2998] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.729631][T14800] tipc: Failed to remove unknown binding: 66,1,1/2717648449:2827338007/2827338009 [ 436.764536][T14633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.772521][ T2998] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.781409][ T2998] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.796086][ T2998] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.818797][T14633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.902467][ T4117] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.911298][ T4117] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.928464][T14643] veth0_vlan: entered promiscuous mode [ 436.935677][ T4117] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.949070][ T4117] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.978580][T14643] veth1_vlan: entered promiscuous mode [ 437.074551][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.085828][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.134332][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.144765][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.163018][ T6009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.179670][ T6009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.215606][T14643] veth0_macvtap: entered promiscuous mode [ 437.245107][T14643] veth1_macvtap: entered promiscuous mode [ 437.254804][ T6009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.263236][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.263297][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.263318][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.263362][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.263517][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.311870][ T6009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.387595][T14643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.419917][T14643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.454217][ T2998] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.472418][ T2998] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.501696][ T2998] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.511128][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.541844][ T2998] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.662377][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.671797][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.718598][ T4117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.747386][ T4117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.793268][T14805] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2519'. [ 437.817481][T14809] lo: entered allmulticast mode [ 437.830545][T14808] lo: left allmulticast mode [ 437.996122][T14817] syzkaller0: entered promiscuous mode [ 438.001743][T14817] syzkaller0: entered allmulticast mode [ 438.044215][T14823] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2547'. [ 438.092654][ T9] IPVS: starting estimator thread 0... [ 438.182199][T14827] IPVS: using max 28 ests per chain, 67200 per kthread [ 438.247799][T14823] team0: entered promiscuous mode [ 438.266254][T14823] team_slave_0: entered promiscuous mode [ 438.282159][T14823] team_slave_1: entered promiscuous mode [ 438.290854][T14823] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 438.373271][T14823] team0: left promiscuous mode [ 438.388871][T14823] team_slave_0: left promiscuous mode [ 438.399894][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.452988][T14823] team_slave_1: left promiscuous mode [ 438.637235][T14836] tipc: Enabling of bearer rejected, failed to enable media [ 439.415123][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.582547][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.590764][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.664407][T14854] wg1 speed is unknown, defaulting to 1000 [ 439.696446][T14854] lo speed is unknown, defaulting to 1000 [ 440.343841][T14849] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2552'. [ 440.995453][T14870] tipc: Started in network mode [ 441.016163][T14870] tipc: Node identity 4a5ee6606f74, cluster identity 4711 [ 441.052562][T14870] tipc: Enabled bearer , priority 0 [ 441.059617][T14871] syzkaller0: entered promiscuous mode [ 441.086586][T14871] syzkaller0: entered allmulticast mode [ 441.137264][T14870] tipc: Resetting bearer [ 441.172467][T14869] tipc: Resetting bearer [ 441.261879][T14869] tipc: Disabling bearer [ 441.365776][T14887] netlink: 'syz.5.2559': attribute type 13 has an invalid length. [ 441.918873][T14898] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2562'. [ 441.942746][T14898] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2562'. [ 442.216735][T14910] syzkaller0: entered promiscuous mode [ 442.224964][T14910] syzkaller0: entered allmulticast mode [ 442.540110][ C0] net_ratelimit: 1 callbacks suppressed [ 442.540134][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.554293][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.567034][T14921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 442.615987][T14923] tipc: Started in network mode [ 442.630010][T14923] tipc: Node identity 8622f796b06f, cluster identity 4711 [ 442.658332][T14923] tipc: Enabled bearer , priority 0 [ 442.677162][T14928] syzkaller0: entered promiscuous mode [ 442.690900][T14928] syzkaller0: entered allmulticast mode [ 442.698167][T14927] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2572'. [ 442.702115][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.715446][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.717453][T14923] tipc: Resetting bearer [ 442.994864][T14936] netlink: 'syz.6.2572': attribute type 3 has an invalid length. [ 443.032193][T14936] netlink: 'syz.6.2572': attribute type 1 has an invalid length. [ 443.040076][T14936] netlink: 60387 bytes leftover after parsing attributes in process `syz.6.2572'. [ 443.321228][T14922] tipc: Resetting bearer [ 443.558719][T14922] tipc: Disabling bearer [ 443.568098][T14948] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2574'. [ 443.579778][T14948] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2574'. [ 443.595095][T14930] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 443.606975][ T2998] bond0: (slave bond_slave_0): interface is now down [ 443.615114][T14942] bond0: Caught tx_queue_len zero misconfig [ 443.615165][ T2998] bond0: (slave bond_slave_1): interface is now down [ 443.643530][ T2998] bond0: (slave bond_slave_0): interface is now down [ 443.663132][ T2998] bond0: (slave bond_slave_1): interface is now down [ 443.682267][ T2998] bond0: (slave bond_slave_0): interface is now down [ 443.697602][ T2998] bond0: (slave bond_slave_1): interface is now down [ 443.732199][ T2998] bond0: (slave bond_slave_0): interface is now down [ 443.742425][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.751319][ T2998] bond0: (slave bond_slave_1): interface is now down [ 443.782081][ T2998] bond0: (slave bond_slave_0): interface is now down [ 443.789890][ T2998] bond0: (slave bond_slave_1): interface is now down [ 443.855746][ T2998] bond0: (slave bond_slave_0): interface is now down [ 443.862673][ T2998] bond0: (slave bond_slave_1): interface is now down [ 443.890447][ T4117] bond0: (slave bond_slave_0): interface is now down [ 443.897879][ T4117] bond0: (slave bond_slave_1): interface is now down [ 443.929469][T14948] team0: entered promiscuous mode [ 443.930457][ T4117] bond0: (slave bond_slave_0): interface is now down [ 443.953502][ T4117] bond0: (slave bond_slave_1): interface is now down [ 443.966342][T14948] bridge5: entered promiscuous mode [ 443.977287][T14948] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 443.988236][T14948] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 443.999087][ T4117] bond0: (slave bond_slave_0): interface is now down [ 444.004681][T14948] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 444.006156][ T4117] bond0: (slave bond_slave_1): interface is now down [ 444.032285][ T4117] bond0: (slave bond_slave_0): interface is now down [ 444.039120][ T4117] bond0: (slave bond_slave_1): interface is now down [ 444.062089][ T4117] bond0: (slave bond_slave_0): interface is now down [ 444.070000][ T4117] bond0: (slave bond_slave_1): interface is now down [ 444.080733][ T4117] bond0: now running without any active interface! [ 444.089864][T14939] wg1 speed is unknown, defaulting to 1000 [ 444.115770][T14939] lo speed is unknown, defaulting to 1000 [ 444.133012][T14945] wg1 speed is unknown, defaulting to 1000 [ 444.377838][T14965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2581'. [ 444.391517][T14965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2581'. [ 444.401240][T14965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2581'. [ 444.411852][T14965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2581'. [ 444.575953][T14945] lo speed is unknown, defaulting to 1000 [ 444.987970][T14983] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2585'. [ 445.127453][T14976] wg1 speed is unknown, defaulting to 1000 [ 445.260015][T14976] lo speed is unknown, defaulting to 1000 [ 445.353921][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.362166][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.591778][T14996] tipc: Started in network mode [ 445.607901][T14996] tipc: Node identity 8269e6adb835, cluster identity 4711 [ 445.636484][T14996] tipc: Enabled bearer , priority 0 [ 445.649350][T14988] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2580'. [ 445.822511][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.844468][T15009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2591'. [ 446.009982][T14996] syzkaller0: entered promiscuous mode [ 446.017356][T14996] syzkaller0: entered allmulticast mode [ 446.048336][T15002] tipc: Resetting bearer [ 446.117519][T14995] tipc: Resetting bearer [ 446.146285][T14995] tipc: Disabling bearer [ 446.339542][T15019] tipc: Enabled bearer , priority 0 [ 446.347896][T15019] syzkaller0: entered promiscuous mode [ 446.356624][T15019] syzkaller0: entered allmulticast mode [ 446.646450][T15033] tipc: Resetting bearer [ 446.701097][T15018] tipc: Resetting bearer [ 446.800744][T15018] tipc: Disabling bearer [ 447.044974][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.518302][T15052] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.689209][T15052] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.910988][T15052] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.038307][T15052] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.164016][T15060] wg1 speed is unknown, defaulting to 1000 [ 448.195235][T15066] wg1 speed is unknown, defaulting to 1000 [ 448.195705][T15060] lo speed is unknown, defaulting to 1000 [ 448.211781][T15063] wg1 speed is unknown, defaulting to 1000 [ 448.226033][T15075] wg1 speed is unknown, defaulting to 1000 [ 448.270857][ T2998] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.304883][ T4117] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.332201][ T4117] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.357815][ T36] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.450642][T15057] mpoa:mpoad_close: () going down [ 448.542065][ C0] net_ratelimit: 1 callbacks suppressed [ 448.542086][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.544063][T15080] IPVS: Scheduler module ip_vs_sip not found [ 448.547783][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.643941][T15066] lo speed is unknown, defaulting to 1000 [ 448.793206][T15083] wg1 speed is unknown, defaulting to 1000 [ 448.942148][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.003577][T15085] syzkaller0: entered promiscuous mode [ 449.009125][T15085] syzkaller0: entered allmulticast mode [ 449.137081][T15075] lo speed is unknown, defaulting to 1000 [ 449.393947][T15063] lo speed is unknown, defaulting to 1000 [ 451.484329][T15083] lo speed is unknown, defaulting to 1000 [ 451.852274][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.860531][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.868676][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.876842][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.971551][T15099] netlink: 'syz.1.2607': attribute type 12 has an invalid length. [ 452.010852][T15099] netlink: 'syz.1.2607': attribute type 4 has an invalid length. [ 452.944600][T15108] __nla_validate_parse: 3 callbacks suppressed [ 452.944621][T15108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2610'. [ 452.972727][T15108] netlink: 'syz.4.2610': attribute type 30 has an invalid length. [ 453.025322][ T4117] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.038253][ T4117] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.067643][T15114] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 453.092869][ T4117] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.109336][ T4117] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.143426][T15121] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2612'. [ 453.209321][T15121] team0: entered promiscuous mode [ 453.215405][T15121] team_slave_0: entered promiscuous mode [ 453.224483][T15121] team_slave_1: entered promiscuous mode [ 453.233860][T15121] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 453.243425][T15121] team0: left promiscuous mode [ 453.248530][T15121] team_slave_0: left promiscuous mode [ 453.254469][T15121] team_slave_1: left promiscuous mode [ 453.360574][T15124] batadv_slave_0: entered promiscuous mode [ 453.374346][T15124] batman_adv: batadv0: Adding interface: macsec1 [ 453.380933][T15124] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.407604][T15124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.418469][T15124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.421627][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.429445][T15124] batman_adv: batadv0: Interface activated: macsec1 [ 453.436716][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.576775][T15127] 8021q: adding VLAN 0 to HW filter on device bond7 [ 453.678136][T15130] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2616'. [ 453.941031][T15134] IPVS: length: 141 != 8 [ 454.004716][T15146] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2619'. [ 454.031677][T15144] wg1 speed is unknown, defaulting to 1000 [ 454.041863][T15144] lo speed is unknown, defaulting to 1000 [ 454.049356][T15143] wg1 speed is unknown, defaulting to 1000 [ 454.086729][T15142] wg1 speed is unknown, defaulting to 1000 [ 454.138102][T15150] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2621'. [ 454.147810][T15150] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2621'. [ 454.152659][ C0] net_ratelimit: 1 callbacks suppressed [ 454.152683][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.372283][T15143] lo speed is unknown, defaulting to 1000 [ 454.695381][T15159] wg1 speed is unknown, defaulting to 1000 [ 454.961772][T15142] lo speed is unknown, defaulting to 1000 [ 455.402760][ T30] audit: type=1800 audit(1763182313.379:10): pid=15170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2626" name="memory.events" dev="tmpfs" ino=99 res=0 errno=0 [ 455.737841][T15179] netlink: 'syz.7.2628': attribute type 1 has an invalid length. [ 455.800456][T15159] lo speed is unknown, defaulting to 1000 [ 456.148028][ T5145] Bluetooth: hci4: command tx timeout [ 456.185387][T15186] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 456.204268][T15186] Cannot find set identified by id 65534 to match [ 456.506597][T15185] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.514445][T15185] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.664138][T15185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.691143][T15185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.094994][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.103328][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.111526][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.119720][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.237655][ T4117] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.247780][ T4117] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.262510][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.286830][ T4117] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.301448][ T4117] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.319681][T15192] wg1 speed is unknown, defaulting to 1000 [ 457.339310][T15192] lo speed is unknown, defaulting to 1000 [ 457.749023][T15202] geneve2: entered promiscuous mode [ 457.756957][ T4117] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 60684 - 0 [ 457.765515][ T4117] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 60684 - 0 [ 457.803177][ T4117] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 60684 - 0 [ 457.819965][ T4117] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 60684 - 0 [ 458.563208][T15207] wg1 speed is unknown, defaulting to 1000 [ 458.577143][T15210] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2636'. [ 458.586615][T15207] lo speed is unknown, defaulting to 1000 [ 458.634659][T15212] xt_CT: You must specify a L4 protocol and not use inversions on it [ 459.228794][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.237058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.317898][T15224] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.346201][T15224] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 60684 - 0 [ 459.352066][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.540874][T15224] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.551687][T15224] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 60684 - 0 [ 459.620327][T15224] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.630499][T15224] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 60684 - 0 [ 459.776982][T15224] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.793049][T15224] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 60684 - 0 [ 459.926258][T15230] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 459.949603][T15230] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2641'. [ 460.081534][ T13] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 60684 - 0 [ 460.100707][ T13] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 460.193113][ T13] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 60684 - 0 [ 460.212305][ T13] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 460.238234][ T13] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 60684 - 0 [ 460.255428][ T13] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 460.275620][ T13] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 60684 - 0 [ 460.292298][ T13] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 460.309505][T15232] wg1 speed is unknown, defaulting to 1000 [ 460.350310][T15232] lo speed is unknown, defaulting to 1000 [ 460.427673][T15236] tipc: Enabled bearer , priority 0 [ 460.439038][T15236] syzkaller0: entered promiscuous mode [ 460.454283][T15236] syzkaller0: entered allmulticast mode [ 460.630363][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.638949][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.849194][T15246] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.857155][T15246] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.033827][T15246] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 461.053160][T15246] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 461.073395][T15246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.091547][T15246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.264820][T15245] tipc: Resetting bearer [ 461.303969][T15235] tipc: Resetting bearer [ 461.334224][T15235] tipc: Disabling bearer [ 461.350045][ T50] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 60684 - 0 [ 461.358949][ T50] netdevsim netdevsim6 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 461.390466][ T50] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 60684 - 0 [ 461.405014][ T50] netdevsim netdevsim6 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 461.413527][ T50] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 60684 - 0 [ 461.422108][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.430979][ T50] netdevsim netdevsim6 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 461.464085][ T50] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 60684 - 0 [ 461.474163][T15256] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2647'. [ 461.489975][ T50] netdevsim netdevsim6 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 461.506142][T15256] 8021q: adding VLAN 0 to HW filter on device bond1 [ 461.506829][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.967135][T15270] wg1 speed is unknown, defaulting to 1000 [ 462.008019][T15277] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2653'. [ 462.023536][T15273] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2653'. [ 462.024589][T15270] lo speed is unknown, defaulting to 1000 [ 462.175743][T15280] syzkaller0: entered promiscuous mode [ 462.181723][T15280] syzkaller0: entered allmulticast mode [ 462.379270][T15284] wg1 speed is unknown, defaulting to 1000 [ 462.504612][T15284] lo speed is unknown, defaulting to 1000 [ 463.333393][T15303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2660'. [ 463.394537][T15303] Bluetooth: MGMT ver 1.23 [ 463.470912][T15303] wg1 speed is unknown, defaulting to 1000 [ 463.481565][T15303] lo speed is unknown, defaulting to 1000 [ 463.584391][T15307] wg1 speed is unknown, defaulting to 1000 [ 463.906739][T15307] lo speed is unknown, defaulting to 1000 [ 464.017802][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.026008][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.525653][T15320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.534171][T15320] net_ratelimit: 1 callbacks suppressed [ 464.534194][T15320] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 464.819850][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.968059][T15325] xt_limit: Overflow, try lower: 271964/0 [ 464.978177][T15325] netlink: 25 bytes leftover after parsing attributes in process `syz.7.2665'. [ 465.084144][T15325] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2665'. [ 465.321371][T15332] wg1 speed is unknown, defaulting to 1000 [ 465.336711][T15332] lo speed is unknown, defaulting to 1000 [ 465.364785][T15334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2664'. [ 465.402659][T15334] netlink: 'syz.1.2664': attribute type 5 has an invalid length. [ 465.422375][T15335] netlink: 'syz.7.2668': attribute type 3 has an invalid length. [ 465.435701][T15335] syz_tun: entered allmulticast mode [ 465.449438][T15334] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2664'. [ 465.629516][T15334] geneve2: entered promiscuous mode [ 465.637344][T15334] geneve2: entered allmulticast mode [ 465.672229][T15339] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 465.690906][ T50] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 465.709935][ T50] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 465.728622][ T50] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 465.743793][ T50] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 465.774782][T15344] netlink: 'syz.4.2669': attribute type 12 has an invalid length. [ 465.787940][T15344] netlink: 'syz.4.2669': attribute type 4 has an invalid length. [ 465.908330][T15335] siw: device registration error -23 [ 465.917705][T15333] syz_tun: left allmulticast mode [ 466.881595][T15362] wg1 speed is unknown, defaulting to 1000 [ 466.891662][T15362] lo speed is unknown, defaulting to 1000 [ 466.919274][T15364] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2674'. [ 467.192239][T13725] page_pool_release_retry() stalled pool shutdown: id 36, 49 inflight 301 sec [ 467.446314][T15373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2677'. [ 467.455764][T15373] openvswitch: netlink: Missing key (keys=40, expected=80) [ 467.559766][T15375] rdma_rxe: rxe_newlink: failed to add lo [ 467.629936][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.638274][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.646475][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.654661][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.664805][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.808174][T15380] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2680'. [ 467.912701][T15377] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2679'. [ 467.923796][T15377] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2679'. [ 468.002291][T15380] bridge_slave_1: left allmulticast mode [ 468.024830][T15380] bridge_slave_1: left promiscuous mode [ 468.033230][T15380] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.131174][T15380] bridge_slave_0: left allmulticast mode [ 468.151090][T15380] bridge_slave_0: left promiscuous mode [ 468.165706][T15382] sctp: [Deprecated]: syz.7.2681 (pid 15382) Use of struct sctp_assoc_value in delayed_ack socket option. [ 468.165706][T15382] Use struct sctp_sack_info instead [ 468.216661][T15380] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.237044][T15392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2682'. [ 468.664491][T15400] syzkaller0: entered promiscuous mode [ 468.671350][T15400] syzkaller0: entered allmulticast mode [ 468.712589][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.184063][T15420] netlink: 'syz.4.2688': attribute type 3 has an invalid length. [ 469.752089][ C0] net_ratelimit: 1 callbacks suppressed [ 469.752109][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.962947][ T30] audit: type=1800 audit(1763182327.949:11): pid=15428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2690" name="memory.events" dev="tmpfs" ino=3028 res=0 errno=0 [ 470.400729][ T57] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.553980][ T57] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.725196][ T57] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.856980][ T57] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.884738][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 470.895206][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 470.903588][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 470.911759][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 470.919816][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 471.028369][T15443] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 471.112058][T15438] wg1 speed is unknown, defaulting to 1000 [ 471.157978][T15438] lo speed is unknown, defaulting to 1000 [ 471.303405][ T57] bridge_slave_1: left allmulticast mode [ 471.309115][ T57] bridge_slave_1: left promiscuous mode [ 471.320829][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.334584][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 471.345137][ T5145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 471.354132][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 471.365134][ T57] bridge_slave_0: left allmulticast mode [ 471.370918][ T57] bridge_slave_0: left promiscuous mode [ 471.382547][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 471.390841][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.399116][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 471.684895][ T5145] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 471.696763][ T5145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 471.705537][ T5145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 471.715309][ T5145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 471.724145][ T5145] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 471.810300][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.818575][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.826981][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.835174][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.149335][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.161183][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.175351][ T57] bond0 (unregistering): Released all slaves [ 472.274773][T15450] wg1 speed is unknown, defaulting to 1000 [ 472.308868][T15450] lo speed is unknown, defaulting to 1000 [ 472.314883][T15445] wg1 speed is unknown, defaulting to 1000 [ 472.473123][ T57] tipc: Left network mode [ 472.679584][T15438] chnl_net:caif_netlink_parms(): no params data found [ 472.858974][T15445] lo speed is unknown, defaulting to 1000 [ 472.865379][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.942306][ T5145] Bluetooth: hci0: command tx timeout [ 472.995897][T15438] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.004400][T15438] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.012102][T15438] bridge_slave_0: entered allmulticast mode [ 473.020526][T15438] bridge_slave_0: entered promiscuous mode [ 473.038964][T15438] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.047233][T15438] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.056971][T15438] bridge_slave_1: entered allmulticast mode [ 473.065931][T15438] bridge_slave_1: entered promiscuous mode [ 473.199359][T15438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.261329][T15438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.423572][ T5145] Bluetooth: hci1: command tx timeout [ 473.457410][T15438] team0: Port device team_slave_0 added [ 473.478476][T15438] team0: Port device team_slave_1 added [ 473.516561][ T57] hsr_slave_0: left promiscuous mode [ 473.523045][ T57] hsr_slave_1: left promiscuous mode [ 473.529315][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.536926][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.545208][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.553054][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.560942][ T57] batman_adv: batadv0: Interface deactivated: macsec1 [ 473.567852][ T57] batman_adv: batadv0: Removing interface: macsec1 [ 473.599536][ T57] batadv_slave_0: left promiscuous mode [ 473.605630][ T57] veth1_macvtap: left promiscuous mode [ 473.611155][ T57] veth0_macvtap: left promiscuous mode [ 473.617149][ T57] veth1_vlan: left promiscuous mode [ 473.622615][ T57] veth0_vlan: left promiscuous mode [ 473.823141][ T5145] Bluetooth: hci4: command tx timeout [ 473.913953][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.922179][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.026323][T15477] nbd3: detected capacity change from 0 to 127 [ 474.202108][ T57] team0 (unregistering): Port device team_slave_1 removed [ 474.247365][ T57] team0 (unregistering): Port device team_slave_0 removed [ 474.567786][ T5145] block nbd3: Receive control failed (result -32) [ 474.705237][T15470] syzkaller0: entered promiscuous mode [ 474.711085][T15470] syzkaller0: entered allmulticast mode [ 474.776234][T15438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.784591][T15438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.810976][T15438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.854308][T15438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.870162][T15438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.920634][T15438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.023911][ T5145] Bluetooth: hci0: command tx timeout [ 475.144211][T15438] hsr_slave_0: entered promiscuous mode [ 475.164938][T15438] hsr_slave_1: entered promiscuous mode [ 475.176938][T15438] debugfs: 'hsr0' already exists in 'hsr' [ 475.182970][T15438] Cannot create hsr debugfs directory [ 475.197651][T15450] chnl_net:caif_netlink_parms(): no params data found [ 475.502500][ T5145] Bluetooth: hci1: command tx timeout [ 475.517910][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.549819][T15450] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.558048][T15450] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.565567][T15450] bridge_slave_0: entered allmulticast mode [ 475.574499][T15450] bridge_slave_0: entered promiscuous mode [ 475.608070][T15445] chnl_net:caif_netlink_parms(): no params data found [ 475.620888][T15450] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.629163][T15450] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.636925][T15450] bridge_slave_1: entered allmulticast mode [ 475.645502][T15450] bridge_slave_1: entered promiscuous mode [ 475.692754][T15487] wg1 speed is unknown, defaulting to 1000 [ 475.755111][T15487] lo speed is unknown, defaulting to 1000 [ 475.758783][T15450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.777958][T15481] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 475.823834][T15450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.902137][ T5145] Bluetooth: hci4: command tx timeout [ 475.992934][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.001155][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.043956][T15450] team0: Port device team_slave_0 added [ 476.069300][T15450] team0: Port device team_slave_1 added [ 476.077498][T15445] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.086703][T15445] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.094181][T15445] bridge_slave_0: entered allmulticast mode [ 476.101582][T15445] bridge_slave_0: entered promiscuous mode [ 476.109282][T15496] wg1 speed is unknown, defaulting to 1000 [ 476.110369][T15445] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.122514][T15445] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.130007][T15445] bridge_slave_1: entered allmulticast mode [ 476.138105][T15445] bridge_slave_1: entered promiscuous mode [ 476.210425][T15498] wg1 speed is unknown, defaulting to 1000 [ 476.215744][T15445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.238668][T15496] lo speed is unknown, defaulting to 1000 [ 476.240465][T15450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.252201][T15450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.278751][T15450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.324568][T15445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.355988][T15450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.363326][T15450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.390156][T15450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.442989][T15445] team0: Port device team_slave_0 added [ 476.490724][T15445] team0: Port device team_slave_1 added [ 476.516305][T15438] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 476.530580][T15438] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 476.541871][T15438] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 476.568034][T15498] lo speed is unknown, defaulting to 1000 [ 476.594049][T15445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.601321][T15445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.627803][T15445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.662444][T15438] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 476.715237][T15445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.728063][T15445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.754478][T15445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.829785][T15450] hsr_slave_0: entered promiscuous mode [ 476.836727][T15450] hsr_slave_1: entered promiscuous mode [ 476.850704][T15450] debugfs: 'hsr0' already exists in 'hsr' [ 476.856716][T15450] Cannot create hsr debugfs directory [ 477.102356][ T5145] Bluetooth: hci0: command 0x040f tx timeout [ 477.165764][T15445] hsr_slave_0: entered promiscuous mode [ 477.172878][T15445] hsr_slave_1: entered promiscuous mode [ 477.179202][T15445] debugfs: 'hsr0' already exists in 'hsr' [ 477.185109][T15445] Cannot create hsr debugfs directory [ 477.582446][ T5145] Bluetooth: hci1: command tx timeout [ 477.824974][T15438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.861383][T15438] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.885856][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.893079][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.938620][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.945903][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.958439][T15510] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 477.988181][ T5145] Bluetooth: hci4: command tx timeout [ 478.140820][T15450] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 478.158177][T15450] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 478.177678][T15450] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 478.190900][T15450] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 478.233920][T15511] wg1 speed is unknown, defaulting to 1000 [ 478.244604][T15511] lo speed is unknown, defaulting to 1000 [ 478.339145][T15438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.598826][T15445] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 478.622599][T15445] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 478.643638][T15445] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 478.664677][T15445] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 478.957551][T15438] veth0_vlan: entered promiscuous mode [ 478.992396][T15438] veth1_vlan: entered promiscuous mode [ 479.069614][T15450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.096210][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.104435][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.112574][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.186230][ T5145] Bluetooth: hci0: command 0x040f tx timeout [ 479.224094][T15445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.259760][T15450] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.290093][T15438] veth0_macvtap: entered promiscuous mode [ 479.335565][T15445] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.354502][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.361725][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.380971][T15438] veth1_macvtap: entered promiscuous mode [ 479.416511][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.424298][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.437055][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.444327][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.457309][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.464562][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.547145][T15438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.560330][T15438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.628145][ T4117] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.641353][ T4117] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.664204][ T5145] Bluetooth: hci1: command tx timeout [ 479.683200][ T4117] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.698058][ T4117] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.896420][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.927724][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.011610][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.030834][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.062649][ T5145] Bluetooth: hci4: command tx timeout [ 480.206375][T15445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.268041][T15450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.303860][T15562] syzkaller0: entered promiscuous mode [ 480.309390][T15562] syzkaller0: entered allmulticast mode [ 480.428082][T15566] batadv1: entered promiscuous mode [ 480.541365][T15450] veth0_vlan: entered promiscuous mode [ 480.553395][T15570] __nla_validate_parse: 5 callbacks suppressed [ 480.553417][T15570] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2718'. [ 480.580480][T15450] veth1_vlan: entered promiscuous mode [ 480.615588][T15570] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 480.700833][T15566] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2717'. [ 480.745588][T15574] smc: adding net device geneve0 with user defined pnetid SYZ0 [ 480.757105][T15574] geneve0: entered promiscuous mode [ 480.826336][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.852601][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.886340][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.977132][T15579] wg1 speed is unknown, defaulting to 1000 [ 480.990409][ T36] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.999092][ T36] netdevsim netdevsim7 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.017189][T15579] lo speed is unknown, defaulting to 1000 [ 481.023452][T15584] wg1 speed is unknown, defaulting to 1000 [ 481.025582][ T36] netdevsim netdevsim7 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.038412][ T36] netdevsim netdevsim7 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.063364][ T36] netdevsim netdevsim7 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.136452][T15450] veth0_macvtap: entered promiscuous mode [ 481.164141][T15566] wg1 speed is unknown, defaulting to 1000 [ 481.178462][T15445] veth0_vlan: entered promiscuous mode [ 481.197566][T15450] veth1_macvtap: entered promiscuous mode [ 481.239433][T15445] veth1_vlan: entered promiscuous mode [ 481.253810][T15450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.273503][ T5145] Bluetooth: hci0: command 0x040f tx timeout [ 481.276712][T15450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.314107][T15445] veth0_macvtap: entered promiscuous mode [ 481.344796][T15584] lo speed is unknown, defaulting to 1000 [ 481.353895][ T4117] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.364556][ T4117] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.408370][T15445] veth1_macvtap: entered promiscuous mode [ 481.416459][ T4117] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.427272][ T4117] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.457925][T15573] lec:lec_atm_close: lec0: Shut down! [ 481.509785][T15445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.601194][T15445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.679107][ T4117] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.693232][ T4117] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.705786][ T4117] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.731843][ T4117] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.751844][T15566] lo speed is unknown, defaulting to 1000 [ 481.762407][ T4117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.770272][ T4117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.939668][ T4117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.948073][ T4117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.969329][ T4117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.978154][ T4117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.037494][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.046770][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.065270][T15591] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2700'. [ 483.163898][T15605] pim6reg1: entered promiscuous mode [ 483.169864][T15605] pim6reg1: entered allmulticast mode [ 483.228681][T15611] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2724'. [ 483.516593][T15616] netlink: 'syz.0.2724': attribute type 1 has an invalid length. [ 483.538466][T15616] netlink: 'syz.0.2724': attribute type 4 has an invalid length. [ 483.568459][T15617] netlink: 'syz.0.2724': attribute type 1 has an invalid length. [ 483.569921][T15616] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2724'. [ 483.632779][T15617] netlink: 'syz.0.2724': attribute type 4 has an invalid length. [ 483.653859][T15626] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 483.682467][T15617] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2724'. [ 483.712502][T15626] netlink: 'syz.4.2726': attribute type 10 has an invalid length. [ 484.116798][T15631] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2729'. [ 484.268089][T15643] wg1 speed is unknown, defaulting to 1000 [ 484.278278][T15643] lo speed is unknown, defaulting to 1000 [ 484.394195][T15638] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2730'. [ 484.514942][T15638] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2730'. [ 484.547099][T15638] hsr_slave_0: left promiscuous mode [ 484.603212][T15638] hsr_slave_1: left promiscuous mode [ 484.749545][T15631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2729'. [ 485.808332][T15668] syz.9.2736 (15668) used obsolete PPPIOCDETACH ioctl [ 485.853237][T15663] __nla_validate_parse: 1 callbacks suppressed [ 485.853256][T15663] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2734'. [ 485.932610][T15669] wg1 speed is unknown, defaulting to 1000 [ 485.994214][T15669] lo speed is unknown, defaulting to 1000 [ 487.188914][T15692] syzkaller0: entered promiscuous mode [ 487.195777][T15692] syzkaller0: entered allmulticast mode [ 487.655898][T15695] wg1 speed is unknown, defaulting to 1000 [ 487.718512][T15695] lo speed is unknown, defaulting to 1000 [ 487.869775][T15706] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2745'. [ 487.903233][T15706] vlan2: entered promiscuous mode [ 487.908335][T15706] bond0: entered promiscuous mode [ 487.913894][T15706] bond_slave_0: entered promiscuous mode [ 487.919785][T15706] bond_slave_1: entered promiscuous mode [ 487.937761][T15706] netlink: 'syz.8.2745': attribute type 14 has an invalid length. [ 488.267040][T14752] IPVS: starting estimator thread 0... [ 488.362161][T15716] IPVS: using max 25 ests per chain, 60000 per kthread [ 488.406985][T15720] Bluetooth: MGMT ver 1.23 [ 488.975930][T15726] wg1 speed is unknown, defaulting to 1000 [ 489.006421][T15732] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2751'. [ 489.024591][T15732] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2751'. [ 489.406085][T15739] wg1 speed is unknown, defaulting to 1000 [ 489.454070][T15742] netlink: 'syz.0.2753': attribute type 10 has an invalid length. [ 489.482446][T15742] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.493269][T15742] bond0: (slave team0): Enslaving as an active interface with an up link [ 489.792908][T15726] lo speed is unknown, defaulting to 1000 [ 489.797862][T15749] tipc: Resetting bearer [ 490.139154][ T36] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.153275][ T36] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.163092][ T36] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.206689][ T13] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.227207][T15756] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2759'. [ 490.232112][T15739] lo speed is unknown, defaulting to 1000 [ 490.237920][T15756] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2759'. [ 490.282372][T15758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2760'. [ 490.301686][T15758] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 490.552619][T15756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.566321][T15756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.578943][T15756] bond0 (unregistering): Released all slaves [ 491.019104][T15774] wg1 speed is unknown, defaulting to 1000 [ 491.123272][T15774] lo speed is unknown, defaulting to 1000 [ 491.199118][T15769] wg1 speed is unknown, defaulting to 1000 [ 491.457412][T15777] wg1 speed is unknown, defaulting to 1000 [ 491.668304][T15780] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 491.682740][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 491.835731][T15769] lo speed is unknown, defaulting to 1000 [ 491.910040][T15784] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 491.939072][T15784] ip6t_rpfilter: unknown options [ 492.283466][T15795] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2766'. [ 492.374141][T15777] lo speed is unknown, defaulting to 1000 [ 492.421660][T15792] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.553579][T15792] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.638224][T15792] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.689603][T15803] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.2767'. [ 492.697786][T15798] wg1 speed is unknown, defaulting to 1000 [ 492.709989][T15798] lo speed is unknown, defaulting to 1000 [ 492.786039][T15804] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2767'. [ 492.990763][T15792] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.215755][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.305816][ T50] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.426079][ T50] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.551050][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.589205][T15814] bond0: (slave rose0): Error: Device can not be enslaved while up [ 494.099536][T15820] netlink: 'syz.0.2772': attribute type 8 has an invalid length. [ 494.123732][T15820] Bluetooth: MGMT ver 1.23 [ 494.133419][T15820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2772'. [ 494.142878][T15820] netlink: 'syz.0.2772': attribute type 29 has an invalid length. [ 494.150963][T15820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2772'. [ 494.167533][T15820] tipc: Enabling of bearer rejected, failed to enable media [ 494.446269][T15836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2773'. [ 494.646503][ T13] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 495.435770][T15852] wg1 speed is unknown, defaulting to 1000 [ 495.445762][T15852] lo speed is unknown, defaulting to 1000 [ 496.947424][T15866] netlink: 'syz.4.2780': attribute type 12 has an invalid length. [ 496.958602][T15866] netlink: 'syz.4.2780': attribute type 4 has an invalid length. [ 497.606747][T15869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2782'. [ 497.763572][T15869] 8021q: adding VLAN 0 to HW filter on device bond1 [ 497.788160][T15875] bond_slave_0: entered promiscuous mode [ 497.794318][T15875] bond_slave_1: entered promiscuous mode [ 497.800371][T15875] team_slave_0: entered promiscuous mode [ 497.806598][T15875] team_slave_1: entered promiscuous mode [ 497.869265][T15875] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 497.899358][T15875] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 498.625325][T15901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2789'. [ 498.674244][T15901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2789'. [ 498.706993][T15902] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2790'. [ 498.776358][T15902] bridge_slave_1: left allmulticast mode [ 498.782139][T15902] bridge_slave_1: left promiscuous mode [ 498.788059][T15902] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.807123][T15902] bridge_slave_0: left allmulticast mode [ 498.813317][T15902] bridge_slave_0: left promiscuous mode [ 498.819859][T15902] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.332775][T15911] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2793'. [ 499.417996][T15914] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2793'. [ 499.587149][T15920] wg1 speed is unknown, defaulting to 1000 [ 499.623421][T15920] lo speed is unknown, defaulting to 1000 [ 499.705871][T15916] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2794'. [ 499.831632][T15925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2796'. [ 500.267119][T15913] netlink: 'syz.1.2792': attribute type 13 has an invalid length. [ 500.276594][T15913] netlink: 'syz.1.2792': attribute type 17 has an invalid length. [ 500.298143][T15933] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2798'. [ 500.308698][T15933] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2798'. [ 500.741663][ T30] audit: type=1800 audit(1763182358.719:12): pid=15939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2800" name="memory.events" dev="tmpfs" ino=116 res=0 errno=0 [ 500.847097][T15913] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.878978][T15913] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 500.960766][T15933] veth0_to_hsr: entered promiscuous mode [ 500.970516][T15933] veth0_to_hsr: entered allmulticast mode [ 500.979875][T15934] veth0_to_hsr: left promiscuous mode [ 500.988732][T15934] veth0_to_hsr: left allmulticast mode [ 501.153926][T15956] netlink: 'syz.0.2804': attribute type 8 has an invalid length. [ 501.256141][T15956] wg1 speed is unknown, defaulting to 1000 [ 501.317703][T15957] sctp: [Deprecated]: syz.8.2805 (pid 15957) Use of int in maxseg socket option. [ 501.317703][T15957] Use struct sctp_assoc_value instead [ 501.445808][T15959] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.544715][T15956] lo speed is unknown, defaulting to 1000 [ 501.546676][T15951] wg1 speed is unknown, defaulting to 1000 [ 501.696341][T15959] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.810436][T15966] pim6reg1: entered promiscuous mode [ 501.828271][T15966] pim6reg1: entered allmulticast mode [ 501.896662][T15959] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.150550][T15959] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.247009][T15972] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.266363][T15951] lo speed is unknown, defaulting to 1000 [ 502.327254][T15976] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 502.412872][T15972] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.537785][T15976] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 502.584198][T15972] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.605286][ T4117] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.642526][T15982] netlink: 'syz.4.2810': attribute type 11 has an invalid length. [ 502.659364][T15977] netlink: 'syz.1.2809': attribute type 10 has an invalid length. [ 502.720594][T15972] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.750511][ T6009] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.759217][T15977] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 502.813287][ T36] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.004539][ T57] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.151661][ T57] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.219954][ T57] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.369872][ T57] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.393855][ T57] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.522380][ T30] audit: type=1800 audit(1763182361.509:13): pid=15992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2812" name="memory.events" dev="tmpfs" ino=127 res=0 errno=0 [ 503.899787][T16004] __nla_validate_parse: 1 callbacks suppressed [ 503.899810][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2815'. [ 503.925556][T16004] team0: entered promiscuous mode [ 503.931397][T16004] team_slave_0: entered promiscuous mode [ 503.937532][T16004] team_slave_1: entered promiscuous mode [ 503.945312][T16004] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 503.955221][T16004] team0: left promiscuous mode [ 503.960189][T16004] team_slave_0: left promiscuous mode [ 503.966030][T16004] team_slave_1: left promiscuous mode [ 504.134542][T16006] netlink: 'syz.0.2817': attribute type 2 has an invalid length. [ 504.443971][T16015] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2819'. [ 504.457018][T16015] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2819'. [ 504.468641][T16015] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2819'. [ 504.491501][T16017] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 504.518532][T16014] wg1 speed is unknown, defaulting to 1000 [ 504.586720][T16014] lo speed is unknown, defaulting to 1000 [ 504.915765][T16030] siw: device registration error -23 [ 505.278619][T16039] wg1 speed is unknown, defaulting to 1000 [ 505.289931][T16039] lo speed is unknown, defaulting to 1000 [ 505.390666][T16042] veth0: entered promiscuous mode [ 505.510381][T16038] netlink: 'syz.4.2823': attribute type 1 has an invalid length. [ 505.602182][T16050] netlink: 'syz.0.2824': attribute type 16 has an invalid length. [ 505.612552][T16050] netlink: 'syz.0.2824': attribute type 17 has an invalid length. [ 505.625079][T16033] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2823'. [ 505.738393][T16041] gretap3: entered allmulticast mode [ 505.751873][T16041] bond9: (slave gretap3): making interface the new active one [ 505.760936][T16041] bond9: (slave gretap3): Enslaving as an active interface with an up link [ 505.836761][T16050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 506.241538][T16042] veth0: left promiscuous mode [ 506.980717][T16074] wg1 speed is unknown, defaulting to 1000 [ 507.047657][T16074] lo speed is unknown, defaulting to 1000 [ 507.795849][ T57] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.868533][T16097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2831'. [ 508.029159][ T57] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.613077][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 508.627781][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 508.636908][ T57] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.648579][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 508.657564][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 508.665861][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 508.800623][T16099] wg1 speed is unknown, defaulting to 1000 [ 508.864198][T16099] lo speed is unknown, defaulting to 1000 [ 509.025894][ T57] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.420866][ T36] netdevsim netdevsim8 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.487250][ T13] netdevsim netdevsim8 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.524732][ T57] bridge_slave_1: left allmulticast mode [ 509.530539][ T57] bridge_slave_1: left promiscuous mode [ 509.557697][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.586407][ T57] bridge_slave_0: left allmulticast mode [ 509.607997][ T57] bridge_slave_0: left promiscuous mode [ 509.614563][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.708580][T16104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2843'. [ 510.334990][T16117] netlink: 'syz.4.2835': attribute type 3 has an invalid length. [ 510.457852][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.473600][ T57] bond_slave_0: left promiscuous mode [ 510.484341][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.497135][ T57] bond_slave_1: left promiscuous mode [ 510.505207][ T57] bond0 (unregistering): Released all slaves [ 510.527907][ T36] netdevsim netdevsim8 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.559039][T16109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 510.576628][ T6009] netdevsim netdevsim8 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.752569][T16107] wg1 speed is unknown, defaulting to 1000 [ 510.788170][ T5834] Bluetooth: hci0: command tx timeout [ 510.831332][T16107] lo speed is unknown, defaulting to 1000 [ 511.485308][T16122] netlink: 'syz.4.2836': attribute type 6 has an invalid length. [ 511.486352][T16120] wg1 speed is unknown, defaulting to 1000 [ 511.649781][T16120] lo speed is unknown, defaulting to 1000 [ 511.953078][ T57] hsr_slave_0: left promiscuous mode [ 511.959459][ T57] hsr_slave_1: left promiscuous mode [ 511.969771][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.992046][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.010493][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.019582][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.092600][ T57] veth1_macvtap: left promiscuous mode [ 512.098210][ T57] veth0_macvtap: left promiscuous mode [ 512.104107][ T57] veth1_vlan: left promiscuous mode [ 512.109456][ T57] veth0_vlan: left promiscuous mode [ 512.863162][ T5834] Bluetooth: hci0: command tx timeout [ 512.959377][ T57] team0 (unregistering): Port device team_slave_1 removed [ 513.003270][ T57] team0 (unregistering): Port device team_slave_0 removed [ 513.018978][T16143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2840'. [ 513.085117][T16144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2840'. [ 513.722435][T16099] chnl_net:caif_netlink_parms(): no params data found [ 514.339553][T16099] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.353142][T16099] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.360529][T16099] bridge_slave_0: entered allmulticast mode [ 514.368819][T16099] bridge_slave_0: entered promiscuous mode [ 514.378306][T16099] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.390718][T16099] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.398469][T16099] bridge_slave_1: entered allmulticast mode [ 514.407569][T16099] bridge_slave_1: entered promiscuous mode [ 514.485750][T16099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.504566][T16099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.543835][T16160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2844'. [ 514.591156][T16164] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2845'. [ 514.603435][T16099] team0: Port device team_slave_0 added [ 514.613625][T16099] team0: Port device team_slave_1 added [ 514.674433][T16164] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 514.687512][T16164] bond0 (unregistering): Released all slaves [ 514.726880][T16099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.734419][T16099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.760976][T16099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.782426][T16099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.791083][T16099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.817651][T16099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.829267][T16166] wg1 speed is unknown, defaulting to 1000 [ 514.919319][T16166] lo speed is unknown, defaulting to 1000 [ 514.943186][ T5834] Bluetooth: hci0: command tx timeout [ 514.992394][T16099] hsr_slave_0: entered promiscuous mode [ 515.010663][T16099] hsr_slave_1: entered promiscuous mode [ 515.049414][T16099] debugfs: 'hsr0' already exists in 'hsr' [ 515.066816][T16099] Cannot create hsr debugfs directory [ 515.183621][T16175] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2847'. [ 515.556437][T16184] netlink: 'syz.9.2849': attribute type 16 has an invalid length. [ 515.564577][T16184] netlink: 'syz.9.2849': attribute type 17 has an invalid length. [ 515.574538][T16182] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2848'. [ 515.577829][T16099] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.613351][T16186] IPv6: NLM_F_REPLACE set, but no existing node found! [ 516.510667][T16184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.541699][T16184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.022147][ T5834] Bluetooth: hci0: command tx timeout [ 517.031445][T16099] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.155297][ T6009] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.169327][T16099] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.191461][T16210] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2853'. [ 517.226746][ T6009] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.285537][T16099] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.463117][ T6009] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.482133][ T6009] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.661606][T16215] netlink: 'syz.4.2854': attribute type 11 has an invalid length. [ 517.685563][T16215] netlink: 'syz.4.2854': attribute type 11 has an invalid length. [ 517.707674][T16215] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2854'. [ 517.871461][T16099] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 517.882673][T16213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.039528][T16099] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 518.219001][T16099] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 518.243534][T16099] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 518.667787][T16099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.715098][T16234] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2858'. [ 518.717934][T16099] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.749422][ T4117] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.756795][ T4117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.847954][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.855292][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.054249][T16249] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2861'. [ 519.075608][T16250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2862'. [ 519.459935][T16264] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2864'. [ 519.460712][T16099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.670778][T16099] veth0_vlan: entered promiscuous mode [ 519.705319][T16099] veth1_vlan: entered promiscuous mode [ 519.726944][T16269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2867'. [ 519.797787][T16099] veth0_macvtap: entered promiscuous mode [ 519.816337][T16099] veth1_macvtap: entered promiscuous mode [ 519.861182][T16099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.895840][T16099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.954191][ T2998] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.979331][ T2998] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.008099][ T2998] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.024500][ T2998] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.210749][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.232235][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.334273][ T6009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.359305][ T6009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.747940][T16283] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2833'. [ 520.774674][T16283] netlink: 'syz.2.2833': attribute type 13 has an invalid length. [ 520.791646][T16283] netlink: 'syz.2.2833': attribute type 17 has an invalid length. [ 520.955958][T16288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2870'. [ 521.062546][T16290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 521.095238][T16292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2871'. [ 521.220470][T16283] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 521.375887][T16284] wg1 speed is unknown, defaulting to 1000 [ 521.386322][T16284] lo speed is unknown, defaulting to 1000 [ 521.731567][T16301] wg1 speed is unknown, defaulting to 1000 [ 521.841381][T16307] wg1 speed is unknown, defaulting to 1000 [ 521.863140][T16301] lo speed is unknown, defaulting to 1000 [ 521.876993][T16310] wg1 speed is unknown, defaulting to 1000 [ 522.058875][T16316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2877'. [ 522.305874][T16307] lo speed is unknown, defaulting to 1000 [ 522.469004][T16324] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.501773][T16326] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input14 [ 522.719645][T16324] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.745025][T16310] lo speed is unknown, defaulting to 1000 [ 522.800904][T16324] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.936692][ T50] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.970930][T16324] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.009322][T16335] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 523.027101][ T4117] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.086756][ T4117] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.215534][ T4117] netdevsim netdevsim5 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.458081][ T4117] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.649324][ T6009] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.669079][ T6009] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.769258][ T2998] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.026922][ T50] netdevsim netdevsim6 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.090744][ T2998] netdevsim netdevsim6 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.208575][ T6009] netdevsim netdevsim6 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.238245][ T6009] netdevsim netdevsim6 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.325437][ T13] bridge_slave_1: left allmulticast mode [ 524.343404][ T13] bridge_slave_1: left promiscuous mode [ 524.359886][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.439331][ T13] bridge_slave_0: left allmulticast mode [ 524.451267][ T13] bridge_slave_0: left promiscuous mode [ 524.582140][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.491298][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.502325][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.513016][ T13] bond0 (unregistering): Released all slaves [ 525.926283][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.937123][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.947054][ T13] bond0 (unregistering): Released all slaves [ 526.075628][ T13] bond1 (unregistering): Released all slaves [ 526.118043][T16355] team0: Port device team_slave_0 removed [ 526.190554][T16351] wg1 speed is unknown, defaulting to 1000 [ 526.227496][T16367] wg1 speed is unknown, defaulting to 1000 [ 526.266093][ T13] tipc: Left network mode [ 526.270575][T16359] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2887'. [ 526.281650][T16351] lo speed is unknown, defaulting to 1000 [ 526.337979][ T13] tipc: Left network mode [ 526.369888][T16374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2891'. [ 526.386698][T16372] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2890'. [ 526.698803][T16384] wg1 speed is unknown, defaulting to 1000 [ 526.742830][T16367] lo speed is unknown, defaulting to 1000 [ 526.755630][T16381] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 527.031510][T16384] lo speed is unknown, defaulting to 1000 [ 527.680299][T16394] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.694487][T16394] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 527.743046][T16207] page_pool_release_retry() stalled pool shutdown: id 36, 49 inflight 362 sec [ 527.890208][T16399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2897'. [ 528.054291][T16404] netlink: 'syz.4.2898': attribute type 2 has an invalid length. [ 528.223459][T16410] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2901'. [ 528.259295][T16410] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2901'. [ 528.320174][ T13] hsr_slave_0: left promiscuous mode [ 528.326735][ T13] hsr_slave_1: left promiscuous mode [ 528.340766][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.349581][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.372394][ T13] hsr_slave_0: left promiscuous mode [ 528.379062][ T13] hsr_slave_1: left promiscuous mode [ 528.385393][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.394216][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.978088][ T13] team0 (unregistering): Port device team_slave_1 removed [ 529.033928][ T13] team0 (unregistering): Port device team_slave_0 removed [ 529.940945][ T13] team0 (unregistering): Port device team_slave_1 removed [ 529.996409][ T13] team0 (unregistering): Port device team_slave_0 removed [ 530.485215][T16410] bond_slave_0: left promiscuous mode [ 530.491025][T16410] bond_slave_1: left promiscuous mode [ 530.498547][T16410] team_slave_0: left promiscuous mode [ 530.504663][T16410] team_slave_1: left promiscuous mode [ 530.654365][T16410] bond1: (slave macvlan2): Releasing backup interface [ 530.670321][T16410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.682130][T16410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.694566][T16410] bond0 (unregistering): (slave team0): Releasing backup interface [ 530.707119][T16410] bond0 (unregistering): Released all slaves [ 530.975877][T16429] syzkaller0: entered promiscuous mode [ 530.993006][T16429] syzkaller0: entered allmulticast mode [ 531.010113][T16429] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 531.036648][T16430] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2902'. [ 531.072614][T16430] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2902'. [ 531.098565][T16430] netlink: 'syz.9.2902': attribute type 4 has an invalid length. [ 531.843277][T16442] wg1 speed is unknown, defaulting to 1000 [ 531.853769][T16442] lo speed is unknown, defaulting to 1000 [ 531.882772][T16451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2908'. [ 531.972818][T16453] block nbd4: Unsupported socket: should be TCP or UNIX. [ 532.130132][T16451] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 532.175213][T16451] bond0 (unregistering): Released all slaves [ 532.429394][T16443] wg1 speed is unknown, defaulting to 1000 [ 532.478402][T16443] lo speed is unknown, defaulting to 1000 [ 532.552527][ T13] IPVS: stop unused estimator thread 0... [ 532.610730][T16472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2910'. [ 532.642976][T16472] Bluetooth: MGMT ver 1.23 [ 533.343213][T16472] wg1 speed is unknown, defaulting to 1000 [ 533.377476][T16476] wg1 speed is unknown, defaulting to 1000 [ 533.442212][T16472] lo speed is unknown, defaulting to 1000 [ 533.851848][T16489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.861835][T16492] netlink: 'syz.2.2913': attribute type 2 has an invalid length. [ 533.878525][T16489] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 533.915283][T16493] netlink: 'syz.9.2912': attribute type 39 has an invalid length. [ 533.924785][T16489] bond0: (slave gre0): Error -95 calling set_mac_address [ 534.005279][T16476] lo speed is unknown, defaulting to 1000 [ 534.386918][ T5834] Bluetooth: hci3: command 0x0405 tx timeout [ 534.715783][ T5145] Bluetooth: hci0: command tx timeout [ 534.946409][T16514] bond0: (slave rose0): Error: Device can not be enslaved while up [ 535.082872][T16515] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 535.542817][T16539] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2916'. [ 535.573565][T16539] Cannot find add_set index 0 as target [ 535.597037][T16541] netlink: 'syz.9.2917': attribute type 1 has an invalid length. [ 535.646068][T16541] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2917'. [ 535.742423][T16535] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2916'. [ 536.280959][T16551] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.528843][T16551] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.690592][T16551] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.760893][T16562] bond0: (slave rose0): Error: Device can not be enslaved while up [ 536.839745][T16551] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.859107][T16570] wg1 speed is unknown, defaulting to 1000 [ 536.873203][T16570] lo speed is unknown, defaulting to 1000 [ 537.152478][ T4117] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.160817][T16580] mac80211_hwsim hwsim44 wlan1: entered allmulticast mode [ 537.223048][ T50] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.260045][T16580] bridge_slave_0: left allmulticast mode [ 537.277938][T16580] bridge_slave_0: left promiscuous mode [ 537.296069][T16580] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.331322][T16580] bridge_slave_1: left allmulticast mode [ 537.358505][T16580] bridge_slave_1: left promiscuous mode [ 537.370608][T16586] netlink: 'syz.0.2922': attribute type 10 has an invalid length. [ 537.378971][T16580] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.419135][T16580] team0: Port device team_slave_0 removed [ 537.474877][T16580] team0: Port device team_slave_1 removed [ 537.496147][T16580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.529430][T16580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.579523][T16580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.599482][T16580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.611231][T16580] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 537.715820][T16586] mac80211_hwsim hwsim44 wlan1: left allmulticast mode [ 537.776233][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.785689][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.288132][T16603] wg1 speed is unknown, defaulting to 1000 [ 538.390678][T16610] xt_TCPMSS: Only works on TCP SYN packets [ 538.400379][T16603] lo speed is unknown, defaulting to 1000 [ 538.453706][T16608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.461488][T16608] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 538.734806][T16614] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2924'. [ 538.841054][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 538.854124][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 538.864491][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 538.876083][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 538.884577][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 539.088315][T16606] wg1 speed is unknown, defaulting to 1000 [ 539.111859][T16615] wg1 speed is unknown, defaulting to 1000 [ 539.114371][T16606] wg1 speed is unknown, defaulting to 1000 [ 539.145935][T16615] lo speed is unknown, defaulting to 1000 [ 539.150139][T16606] wg1 speed is unknown, defaulting to 1000 [ 539.305885][T16620] tun0: tun_chr_ioctl cmd 1074025675 [ 539.311704][T16620] tun0: persist enabled [ 539.317427][T16620] tun0: tun_chr_ioctl cmd 1074025675 [ 539.323128][T16620] tun0: persist disabled [ 539.426368][T16605] wg1 speed is unknown, defaulting to 1000 [ 539.455258][T16605] lo speed is unknown, defaulting to 1000 [ 539.499045][T16606] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 539.507267][T16624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2931'. [ 539.542492][T16606] wg1 speed is unknown, defaulting to 1000 [ 539.551546][T16606] wg1 speed is unknown, defaulting to 1000 [ 539.590691][T16606] wg1 speed is unknown, defaulting to 1000 [ 539.616248][T16606] wg1 speed is unknown, defaulting to 1000 [ 539.667937][T16606] wg1 speed is unknown, defaulting to 1000 [ 539.693684][ T50] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 539.798569][T16606] wg1 speed is unknown, defaulting to 1000 [ 539.833999][T16606] wg1 speed is unknown, defaulting to 1000 [ 539.834467][T16615] chnl_net:caif_netlink_parms(): no params data found [ 539.866865][T16630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2931'. [ 539.877335][T16630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2931'. [ 539.889367][T16606] wg1 speed is unknown, defaulting to 1000 [ 539.918255][T16630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2931'. [ 539.927840][T16606] wg1 speed is unknown, defaulting to 1000 [ 539.949235][T16606] wg1 speed is unknown, defaulting to 1000 [ 539.974323][T16630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2931'. [ 540.260845][T16641] netlink: 'syz.1.2933': attribute type 1 has an invalid length. [ 540.340166][T16641] bond5: entered promiscuous mode [ 540.342699][T16639] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2934'. [ 540.346800][T16641] 8021q: adding VLAN 0 to HW filter on device bond5 [ 540.616702][T16641] 8021q: adding VLAN 0 to HW filter on device bond5 [ 540.630980][ T30] audit: type=1800 audit(1763182398.609:14): pid=16646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2935" name="memory.events" dev="tmpfs" ino=3382 res=0 errno=0 [ 540.631660][T16641] bond5: (slave gre4): The slave device specified does not support setting the MAC address [ 540.675949][T16641] bond5: (slave gre4): Setting fail_over_mac to active for active-backup mode [ 540.694534][T16641] bond5: (slave gre4): making interface the new active one [ 540.704108][T16641] gre4: entered promiscuous mode [ 540.711424][T16641] bond5: (slave gre4): Enslaving as an active interface with an up link [ 540.729926][T16615] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.738829][T16615] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.772459][T16615] bridge_slave_0: entered allmulticast mode [ 540.780508][T16615] bridge_slave_0: entered promiscuous mode [ 540.827703][T16615] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.837042][T16656] netlink: 'syz.4.2936': attribute type 2 has an invalid length. [ 540.846457][T16615] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.854312][T16615] bridge_slave_1: entered allmulticast mode [ 540.865008][T16615] bridge_slave_1: entered promiscuous mode [ 540.944143][ T5145] Bluetooth: hci1: command tx timeout [ 540.985238][T16615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.025997][T16615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.057114][T15603] IPVS: starting estimator thread 0... [ 541.067398][T16663] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2938'. [ 541.115893][T16615] team0: Port device team_slave_0 added [ 541.135301][T16615] team0: Port device team_slave_1 added [ 541.152228][T16661] IPVS: using max 25 ests per chain, 60000 per kthread [ 541.213708][T16615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.220809][T16615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.248380][T16615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.266297][T16615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.273953][T16615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.302559][T16615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.405356][T16615] hsr_slave_0: entered promiscuous mode [ 541.412934][T16615] hsr_slave_1: entered promiscuous mode [ 541.454200][T16669] veth0_to_team: entered promiscuous mode [ 541.796018][T16675] netlink: 'syz.2.2942': attribute type 2 has an invalid length. [ 541.949355][T16677] tipc: Failed to remove unknown binding: 66,1,1/0:1076629572/1076629574 [ 541.996692][T16677] tipc: Failed to remove unknown binding: 66,1,1/0:1076629572/1076629574 [ 542.032302][T16677] tipc: Failed to remove unknown binding: 66,1,1/0:1076629572/1076629574 [ 542.059186][T16615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 542.116229][T16615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 542.153537][T16615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 542.165187][T16615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 542.195697][T16688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2947'. [ 542.363019][T16615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.389075][T16700] wg1 speed is unknown, defaulting to 1000 [ 542.418740][T16615] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.437576][T16703] bond0: Device is already in use. [ 542.443318][T16700] lo speed is unknown, defaulting to 1000 [ 542.461626][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.468897][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.506257][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.513547][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.840094][T16700] wg1 speed is unknown, defaulting to 1000 [ 543.032936][ T5145] Bluetooth: hci1: command tx timeout [ 543.189641][T16615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.324528][T16711] netlink: 'syz.0.2950': attribute type 30 has an invalid length. [ 543.439607][T16711] bond0: option arp_missed_max: invalid value (0) [ 543.446582][T16711] bond0: option arp_missed_max: allowed values 1 - 255 [ 543.524228][T16711] bond0 (unregistering): Released all slaves [ 543.581774][T16716] wg1 speed is unknown, defaulting to 1000 [ 543.666878][T16716] lo speed is unknown, defaulting to 1000 [ 543.686094][T16615] veth0_vlan: entered promiscuous mode [ 543.746767][T16615] veth1_vlan: entered promiscuous mode [ 543.799440][T16615] veth0_macvtap: entered promiscuous mode [ 543.868767][T16615] veth1_macvtap: entered promiscuous mode [ 543.937683][T16615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.006387][T16615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.056734][ T6009] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.083499][ T6009] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.166339][ T6009] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.213731][ T6009] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.282762][T16716] wg1 speed is unknown, defaulting to 1000 [ 544.522939][T16740] netlink: 'syz.0.2956': attribute type 4 has an invalid length. [ 544.825259][T16747] siw: device registration error -23 [ 544.950986][T16746] wg1 speed is unknown, defaulting to 1000 [ 545.040469][T16746] lo speed is unknown, defaulting to 1000 [ 545.050463][ T4117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.070028][ T4117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.115940][ T5145] Bluetooth: hci1: command tx timeout [ 545.210115][ T2998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.227094][ T2998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.439023][T16755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2926'. [ 545.572022][ T30] audit: type=1800 audit(1763182403.539:15): pid=16752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2959" name="memory.events" dev="tmpfs" ino=263 res=0 errno=0 [ 545.899342][T16746] wg1 speed is unknown, defaulting to 1000 [ 545.901620][T16759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2961'. [ 545.925143][T16759] macvtap1: entered promiscuous mode [ 545.932500][T16759] mac80211_hwsim hwsim48 wlan1: entered promiscuous mode [ 546.004431][T16762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2961'. [ 546.121556][T16766] netlink: 'syz.0.2962': attribute type 54 has an invalid length. [ 546.466846][T16772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2963'. [ 546.588050][ T4117] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.763577][ T4117] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.818267][T16777] netlink: 'syz.0.2966': attribute type 1 has an invalid length. [ 546.827034][T16777] netlink: 'syz.0.2966': attribute type 1 has an invalid length. [ 546.834993][T16777] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2966'. [ 546.846679][T16777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2966'. [ 546.906360][ T4117] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.020918][T16782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2970'. [ 547.096905][ T4117] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.136472][T16785] batadv_slave_1: entered promiscuous mode [ 547.230063][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 547.255069][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 547.263572][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 547.273827][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 547.287824][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 547.380279][ T2998] netdevsim netdevsim3 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.393753][ T4117] bridge_slave_1: left allmulticast mode [ 547.399778][ T4117] bridge_slave_1: left promiscuous mode [ 547.412987][ T4117] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.440490][ T4117] bridge_slave_0: left allmulticast mode [ 547.452907][ T4117] bridge_slave_0: left promiscuous mode [ 547.461039][ T4117] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.578256][T16791] x_tables: duplicate underflow at hook 1 [ 547.687122][T16793] "syz.0.2971" (16793) uses obsolete ecb(arc4) skcipher [ 547.834125][T16803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2973'. [ 547.940420][T16807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2973'. [ 548.167615][ T4117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.184479][ T4117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.195197][T16810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2973'. [ 548.197041][ T4117] bond0 (unregistering): Released all slaves [ 548.240501][ T2998] netdevsim netdevsim3 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.256825][ T2998] netdevsim netdevsim3 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.271285][T16784] batadv_slave_1: left promiscuous mode [ 548.463985][T16810] hsr_slave_1 (unregistering): left promiscuous mode [ 548.516255][ T2998] netdevsim netdevsim3 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.595599][T16787] wg1 speed is unknown, defaulting to 1000 [ 548.611061][T16804] wg1 speed is unknown, defaulting to 1000 [ 548.623421][T16804] lo speed is unknown, defaulting to 1000 [ 548.638294][T16811] wg1 speed is unknown, defaulting to 1000 [ 548.807006][T16818] bond1: option mode: unable to set because the bond device is up [ 549.028876][T16811] lo speed is unknown, defaulting to 1000 [ 549.260658][T16787] lo speed is unknown, defaulting to 1000 [ 549.345520][ T5834] Bluetooth: hci1: command tx timeout [ 549.591419][T16787] wg1 speed is unknown, defaulting to 1000 [ 549.606515][T16804] wg1 speed is unknown, defaulting to 1000 [ 549.622484][T16826] wg1 speed is unknown, defaulting to 1000 [ 549.629684][T16811] wg1 speed is unknown, defaulting to 1000 [ 549.945975][ T4117] hsr_slave_0: left promiscuous mode [ 549.952669][ T4117] hsr_slave_1: left promiscuous mode [ 549.959076][ T4117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.967286][ T4117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.982934][ T4117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.990581][ T4117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.042301][ T4117] veth1_macvtap: left promiscuous mode [ 550.049925][ T4117] veth0_macvtap: left promiscuous mode [ 550.056931][ T4117] veth1_vlan: left promiscuous mode [ 550.066802][ T4117] veth0_vlan: left promiscuous mode [ 551.105557][ T4117] team0 (unregistering): Port device team_slave_1 removed [ 551.174360][ T4117] team0 (unregistering): Port device team_slave_0 removed [ 551.422401][ T5834] Bluetooth: hci1: command tx timeout [ 551.664322][T16826] lo speed is unknown, defaulting to 1000 [ 551.913357][T16787] chnl_net:caif_netlink_parms(): no params data found [ 552.006878][T16826] wg1 speed is unknown, defaulting to 1000 [ 552.036361][T16835] wg1 speed is unknown, defaulting to 1000 [ 552.074499][T16787] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.081799][T16787] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.089767][T16787] bridge_slave_0: entered allmulticast mode [ 552.098039][T16787] bridge_slave_0: entered promiscuous mode [ 552.176966][T16787] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.185674][T16787] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.195788][T16787] bridge_slave_1: entered allmulticast mode [ 552.208061][T16787] bridge_slave_1: entered promiscuous mode [ 552.279912][T16835] lo speed is unknown, defaulting to 1000 [ 552.344708][T16787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.385356][T16787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.459661][T16787] team0: Port device team_slave_0 added [ 552.470432][T16787] team0: Port device team_slave_1 added [ 552.551124][T16787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.568745][T16787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.596034][T16787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.617916][T16787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.625377][T16787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.652539][T16787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.667293][T16835] wg1 speed is unknown, defaulting to 1000 [ 552.959577][T16787] hsr_slave_0: entered promiscuous mode [ 552.969453][T16787] hsr_slave_1: entered promiscuous mode [ 553.510592][T16787] netdevsim netdevsim6 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.522434][ T5834] Bluetooth: hci1: command tx timeout [ 553.559507][T16857] wg1 speed is unknown, defaulting to 1000 [ 553.614475][T16857] lo speed is unknown, defaulting to 1000 [ 553.714235][T16787] netdevsim netdevsim6 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.887375][T16866] netlink: 'syz.0.2987': attribute type 2 has an invalid length. [ 553.944945][T16787] netdevsim netdevsim6 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.095741][T16860] wg1 speed is unknown, defaulting to 1000 [ 554.182867][T16787] netdevsim netdevsim6 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.382814][T16874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2984'. [ 554.625839][T16787] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 554.639398][T16787] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 554.655461][T16787] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 554.665850][T16877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2989'. [ 554.679959][T16787] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 554.705971][T16877] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 554.956320][T16889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2991'. [ 555.121455][T16889] bridge_slave_1: left allmulticast mode [ 555.128347][T16889] bridge_slave_1: left promiscuous mode [ 555.138688][T16889] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.206373][T16889] bridge_slave_0: left allmulticast mode [ 555.217844][T16889] bridge_slave_0: left promiscuous mode [ 555.226228][T16889] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.592162][ T5834] Bluetooth: hci1: command tx timeout [ 555.983830][T16902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2994'. [ 556.249225][ T30] audit: type=1800 audit(1763182414.229:16): pid=16907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2995" name="memory.events" dev="tmpfs" ino=175 res=0 errno=0 [ 556.439432][T16787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.505970][T16787] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.534906][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.542406][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.576401][ T4117] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.583645][ T4117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.603396][T16860] lo speed is unknown, defaulting to 1000 [ 556.674932][T16787] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 556.686218][T16787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 556.778891][T16857] wg1 speed is unknown, defaulting to 1000 [ 557.002351][ T30] audit: type=1800 audit(1763182414.979:17): pid=16913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2996" name="memory.events" dev="tmpfs" ino=181 res=0 errno=0 [ 557.035102][T16919] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 557.127250][T16921] netlink: 'syz.0.2999': attribute type 39 has an invalid length. [ 557.312776][T16919] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2998'. [ 557.365630][T16919] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2998'. [ 557.548076][T16787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.743779][T16934] wg1 speed is unknown, defaulting to 1000 [ 557.788845][T16941] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3001'. [ 558.248193][T16953] wg1 speed is unknown, defaulting to 1000 [ 558.257095][T16787] veth0_vlan: entered promiscuous mode [ 558.331071][T16787] veth1_vlan: entered promiscuous mode [ 558.417681][T16787] veth0_macvtap: entered promiscuous mode [ 558.432227][T16787] veth1_macvtap: entered promiscuous mode [ 558.488455][T16787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.509488][T16787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.538878][ T1145] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.551817][ T1145] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.587703][ T1145] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.629369][ T1145] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.686839][T16934] lo speed is unknown, defaulting to 1000 [ 558.818122][T16960] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 558.904328][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.932059][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.000346][ T2998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.010438][ T2998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.198633][T16964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3006'. [ 559.240875][T16964] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 559.253679][T16964] bond0 (unregistering): Released all slaves [ 559.276346][T16953] lo speed is unknown, defaulting to 1000 [ 559.516833][T16970] syzkaller0: entered promiscuous mode [ 559.523092][T16970] syzkaller0: entered allmulticast mode [ 559.530134][T16953] wg1 speed is unknown, defaulting to 1000 [ 559.567211][T16934] wg1 speed is unknown, defaulting to 1000 [ 559.567244][T16965] wg1 speed is unknown, defaulting to 1000 [ 559.649123][T16860] wg1 speed is unknown, defaulting to 1000 [ 559.718019][T16965] lo speed is unknown, defaulting to 1000 [ 560.057934][ T30] audit: type=1800 audit(1763182418.029:18): pid=16974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3008" name="memory.events" dev="tmpfs" ino=351 res=0 errno=0 [ 560.099566][T16965] wg1 speed is unknown, defaulting to 1000 [ 560.269919][T16978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3009'. [ 560.405801][T16978] nbd: socks must be embedded in a SOCK_ITEM attr [ 561.317759][T16990] wg1 speed is unknown, defaulting to 1000 [ 561.333602][T16990] lo speed is unknown, defaulting to 1000 [ 561.423280][T16989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3012'. [ 561.695149][T16990] wg1 speed is unknown, defaulting to 1000 [ 561.938060][T17002] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3014'. [ 562.036749][T17003] netlink: 'syz.4.3015': attribute type 16 has an invalid length. [ 562.045043][T17003] netlink: 'syz.4.3015': attribute type 17 has an invalid length. [ 562.140696][T17013] IPv6: NLM_F_REPLACE set, but no existing node found! [ 562.206334][T17003] tipc: Resetting bearer [ 562.271990][T17009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3015'. [ 562.495651][T17005] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.536488][T17024] netlink: 'syz.4.3019': attribute type 10 has an invalid length. [ 562.867719][T17005] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.128627][T17024] team0 (unregistering): left promiscuous mode [ 563.146563][T17024] bridge5: left promiscuous mode [ 563.154569][T17024] team0 (unregistering): Port device bridge5 removed [ 563.259160][T17005] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.336231][T17028] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3020'. [ 563.411822][T17005] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.587408][T17039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3022'. [ 563.690554][ T50] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.752655][ T50] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.810870][ T50] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.856504][ T13] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.000378][T17057] syzkaller0: entered promiscuous mode [ 564.006455][T17057] syzkaller0: entered allmulticast mode [ 564.072797][T17060] bridge14: the hash_elasticity option has been deprecated and is always 16 [ 564.090009][T17060] bridge14: entered allmulticast mode [ 564.647869][T17072] wg1 speed is unknown, defaulting to 1000 [ 564.657941][T17072] lo speed is unknown, defaulting to 1000 [ 564.975564][T17072] wg1 speed is unknown, defaulting to 1000 [ 566.828695][T17114] wg1 speed is unknown, defaulting to 1000 [ 566.838966][T17114] lo speed is unknown, defaulting to 1000 [ 568.198620][T17136] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 568.209328][T17136] bridge1: entered allmulticast mode [ 568.827510][T17141] netlink: 'syz.0.3045': attribute type 3 has an invalid length. [ 570.180345][T17167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3050'. [ 570.202494][T17150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.414705][T17170] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3051'. [ 570.725916][T17114] wg1 speed is unknown, defaulting to 1000 [ 573.901495][T17210] wg1 speed is unknown, defaulting to 1000 [ 573.928620][T17210] lo speed is unknown, defaulting to 1000 [ 574.319308][T17216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3062'. [ 574.582696][T17216] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 574.606916][T17216] bond0 (unregistering): Released all slaves [ 574.703613][T17216] netlink: 'syz.0.3062': attribute type 3 has an invalid length. [ 574.717084][T17210] wg1 speed is unknown, defaulting to 1000 [ 574.721758][T17216] netlink: 'syz.0.3062': attribute type 1 has an invalid length. [ 574.739692][T17216] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.3062'. [ 574.905531][T17229] tipc: Started in network mode [ 574.910468][T17229] tipc: Node identity 42388d9ae6a3, cluster identity 4711 [ 574.918131][T17229] tipc: Enabled bearer , priority 0 [ 574.956416][T17229] syzkaller0: entered promiscuous mode [ 574.962360][T17229] syzkaller0: entered allmulticast mode [ 575.004242][T17224] wg1 speed is unknown, defaulting to 1000 [ 575.014410][T17224] lo speed is unknown, defaulting to 1000 [ 575.037515][T17229] tipc: Resetting bearer [ 575.122626][T17228] tipc: Resetting bearer [ 575.142544][T17228] tipc: Disabling bearer [ 575.353962][T17224] wg1 speed is unknown, defaulting to 1000 [ 575.769669][T17234] wg1 speed is unknown, defaulting to 1000 [ 575.779834][T17234] lo speed is unknown, defaulting to 1000 [ 576.111756][T17234] wg1 speed is unknown, defaulting to 1000 [ 576.803236][T17243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3068'. [ 576.883419][T17243] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 576.894516][ T50] bond0: (slave bond_slave_0): interface is now down [ 576.901647][ T50] bond0: (slave bond_slave_1): interface is now down [ 576.934454][ T50] bond0: (slave bond_slave_0): interface is now down [ 576.951601][ T50] bond0: (slave bond_slave_1): interface is now down [ 576.988764][ T50] bond0: now running without any active interface! [ 577.114455][T17248] netlink: 'syz.2.3068': attribute type 3 has an invalid length. [ 577.152310][T17248] netlink: 'syz.2.3068': attribute type 1 has an invalid length. [ 577.201091][T17248] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3068'. [ 577.443358][T17249] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3069'. [ 578.186744][T17187] Set syz1 is full, maxelem 65536 reached [ 578.429264][T17266] siw: device registration error -23 [ 578.547601][T17265] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3072'. [ 578.563453][T17266] wg1 speed is unknown, defaulting to 1000 [ 578.766251][T17271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3074'. [ 578.833504][T17271] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 578.964029][T17278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3076'. [ 579.082815][T17286] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 579.103881][T17285] wg1 speed is unknown, defaulting to 1000 [ 579.119417][T17285] lo speed is unknown, defaulting to 1000 [ 579.232431][T17278] netlink: 'syz.4.3076': attribute type 3 has an invalid length. [ 579.272532][T17278] netlink: 'syz.4.3076': attribute type 1 has an invalid length. [ 579.280372][T17278] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.3076'. [ 580.073433][T17285] wg1 speed is unknown, defaulting to 1000 [ 580.159593][T17309] wg1 speed is unknown, defaulting to 1000 [ 580.193654][T17309] lo speed is unknown, defaulting to 1000 [ 580.363712][T17316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3081'. [ 580.593918][T17323] netlink: 'syz.2.3081': attribute type 3 has an invalid length. [ 580.602307][T17323] netlink: 'syz.2.3081': attribute type 1 has an invalid length. [ 580.612881][T17323] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3081'. [ 580.723264][T17317] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 581.437644][T17309] wg1 speed is unknown, defaulting to 1000 [ 581.929745][T17320] wg1 speed is unknown, defaulting to 1000 [ 582.027134][T17320] lo speed is unknown, defaulting to 1000 [ 582.307394][T17338] netlink: 'syz.0.3086': attribute type 2 has an invalid length. [ 582.728321][T17345] bond0: (slave rose0): Error: Device can not be enslaved while up [ 582.792058][T17320] wg1 speed is unknown, defaulting to 1000 [ 583.400837][T17352] wg1 speed is unknown, defaulting to 1000 [ 583.449243][T17355] wg1 speed is unknown, defaulting to 1000 [ 583.460748][T17352] lo speed is unknown, defaulting to 1000 [ 583.790489][T17363] tipc: Can't bind to reserved service type 1 [ 583.802232][T17363] netlink: 'syz.2.3091': attribute type 39 has an invalid length. [ 583.826887][T17356] batadv0: entered promiscuous mode [ 583.833564][T17356] macvtap1: entered promiscuous mode [ 583.840263][T17356] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 583.849542][T17356] batadv0: left promiscuous mode [ 583.856414][T17366] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3091'. [ 583.865998][T17366] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3091'. [ 583.875169][T17366] netlink: 'syz.2.3091': attribute type 5 has an invalid length. [ 583.883345][T17366] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3091'. [ 583.902606][T17355] lo speed is unknown, defaulting to 1000 [ 583.947509][T17366] vlan2: entered allmulticast mode [ 583.955665][T17366] bridge_slave_0: entered allmulticast mode [ 583.997565][T17367] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3090'. [ 584.181616][T17355] wg1 speed is unknown, defaulting to 1000 [ 584.232387][T17352] wg1 speed is unknown, defaulting to 1000 [ 584.363809][T17374] netlink: 'syz.2.3093': attribute type 8 has an invalid length. [ 584.493305][T17377] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3092'. [ 584.531366][T17372] wg1 speed is unknown, defaulting to 1000 [ 584.579704][T17374] wg1 speed is unknown, defaulting to 1000 [ 584.699819][T17372] lo speed is unknown, defaulting to 1000 [ 585.219361][T17385] netlink: 'syz.6.3095': attribute type 12 has an invalid length. [ 585.245939][T17385] netlink: 'syz.6.3095': attribute type 4 has an invalid length. [ 585.340560][T17372] wg1 speed is unknown, defaulting to 1000 [ 585.361393][T17374] lo speed is unknown, defaulting to 1000 [ 586.023802][T17404] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3101'. [ 586.036920][T17374] wg1 speed is unknown, defaulting to 1000 [ 586.193633][T17404] wg1 speed is unknown, defaulting to 1000 [ 586.323476][T17404] lo speed is unknown, defaulting to 1000 [ 587.247567][T17404] wg1 speed is unknown, defaulting to 1000 [ 587.315335][T17392] wg1 speed is unknown, defaulting to 1000 [ 587.511332][T17430] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3105'. [ 587.535727][T17428] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 587.559579][T17430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3105'. [ 587.603600][T17428] bond0 (unregistering): Released all slaves [ 587.799000][T17407] wg1 speed is unknown, defaulting to 1000 [ 587.801117][T17392] lo speed is unknown, defaulting to 1000 [ 588.462207][ T5901] page_pool_release_retry() stalled pool shutdown: id 36, 49 inflight 423 sec [ 588.780040][T17445] tipc: Enabled bearer , priority 0 [ 588.795818][T17445] syzkaller0: entered promiscuous mode [ 588.801363][T17445] syzkaller0: entered allmulticast mode [ 588.855670][T17445] tipc: Resetting bearer [ 588.868725][T17444] tipc: Resetting bearer [ 588.916263][T17444] tipc: Disabling bearer [ 589.274386][T15450] ------------[ cut here ]------------ [ 589.280590][T15450] refcount_t: underflow; use-after-free. [ 589.287602][T15450] WARNING: CPU: 0 PID: 15450 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 589.299008][T15450] Modules linked in: [ 589.304616][T15450] CPU: 0 UID: 0 PID: 15450 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 589.314886][T15450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 589.315193][ T30] audit: type=1800 audit(1763182447.299:19): pid=17460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3113" name="memory.events" dev="tmpfs" ino=306 res=0 errno=0 [ 589.325900][T15450] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 589.354170][T15450] Code: 40 58 be 8b e8 37 a4 f9 fc 90 0f 0b 90 90 eb d7 e8 4b 88 36 fd c6 05 e9 99 dd 0a 01 90 48 c7 c7 a0 58 be 8b e8 17 a4 f9 fc 90 <0f> 0b 90 90 eb b7 e8 2b 88 36 fd c6 05 c6 99 dd 0a 01 90 48 c7 c7 [ 589.374729][T15450] RSP: 0018:ffffc900047af7b8 EFLAGS: 00010246 [ 589.380847][T15450] RAX: 30244b074a356a00 RBX: 0000000000000003 RCX: ffff888024c98000 [ 589.389643][T15450] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 589.398216][T15450] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 589.408245][T15450] R10: dffffc0000000000 R11: fffffbfff1bba684 R12: ffff888026d1d800 [ 589.416841][T15450] R13: ffff88804f848460 R14: ffff88804f848478 R15: dffffc0000000000 [ 589.425311][T15450] FS: 0000000000000000(0000) GS:ffff888126138000(0000) knlGS:0000000000000000 [ 589.435095][T15450] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 589.441720][T15450] CR2: 00002000005fa000 CR3: 000000003338a000 CR4: 00000000003526f0 [ 589.450197][T15450] Call Trace: [ 589.454239][T15450] [ 589.457205][T15450] klist_dec_and_del+0x3c7/0x3d0 [ 589.463094][T15450] klist_remove+0x1bd/0x340 [ 589.467643][T15450] ? __pfx_klist_children_put+0x10/0x10 [ 589.473718][T15450] ? __pfx_klist_remove+0x10/0x10 [ 589.478788][T15450] ? __pfx_kobject_move+0x10/0x10 [ 589.484323][T15450] ? do_raw_spin_unlock+0x122/0x240 [ 589.489584][T15450] ? get_device_parent+0x366/0x3a0 [ 589.495512][T15450] device_move+0x193/0x700 [ 589.499991][T15450] hci_conn_del_sysfs+0xb8/0x170 [ 589.505608][T15450] hci_conn_del+0xc33/0x11b0 [ 589.510256][T15450] hci_conn_hash_flush+0x191/0x230 [ 589.516304][T15450] hci_dev_close_sync+0xaef/0x1330 [ 589.521479][T15450] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 589.527831][T15450] ? up_write+0x1c4/0x420 [ 589.532511][T15450] hci_unregister_dev+0x21a/0x510 [ 589.537582][T15450] vhci_release+0x152/0x1a0 [ 589.542298][T15450] ? __pfx_vhci_release+0x10/0x10 [ 589.547357][T15450] __fput+0x44c/0xa70 [ 589.551392][T15450] task_work_run+0x1d4/0x260 [ 589.556437][T15450] ? __pfx_task_work_run+0x10/0x10 [ 589.561597][T15450] ? do_exit+0x6b0/0x2300 [ 589.566098][T15450] ? kmem_cache_free+0x19b/0x690 [ 589.571092][T15450] do_exit+0x6b5/0x2300 [ 589.575425][T15450] ? __pfx_do_exit+0x10/0x10 [ 589.580073][T15450] ? _raw_spin_unlock_irq+0x23/0x50 [ 589.585788][T15450] ? lockdep_hardirqs_on+0x9c/0x150 [ 589.591021][T15450] do_group_exit+0x21c/0x2d0 [ 589.595738][T15450] __x64_sys_exit_group+0x3f/0x40 [ 589.600797][T15450] x64_sys_call+0x21f7/0x2200 [ 589.605587][T15450] do_syscall_64+0xfa/0xfa0 [ 589.610160][T15450] ? lockdep_hardirqs_on+0x9c/0x150 [ 589.615784][T15450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.621979][T15450] ? clear_bhb_loop+0x60/0xb0 [ 589.626789][T15450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.632885][T15450] RIP: 0033:0x7ff8a1d8f6c9 [ 589.637421][T15450] Code: Unable to access opcode bytes at 0x7ff8a1d8f69f. [ 589.644863][T15450] RSP: 002b:00007ffc4757b838 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 589.653511][T15450] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007ff8a1d8f6c9 [ 589.661523][T15450] RDX: 00007ff8a1d915ba RSI: 0000000000000000 RDI: 0000000000000007 [ 589.670701][T15450] RBP: 0000000000000003 R08: 0079746972756365 R09: 0000000000000007 [ 589.679131][T15450] R10: 00000000000003b8 R11: 0000000000000246 R12: 00007ff8a1fb2ca0 [ 589.687528][T15450] R13: 00007ffc4757be4c R14: 0000000000000000 R15: 00007ff8a1fb4e60 [ 589.695679][T15450] [ 589.698740][T15450] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 589.706044][T15450] CPU: 0 UID: 0 PID: 15450 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 589.715628][T15450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 589.725717][T15450] Call Trace: [ 589.729030][T15450] [ 589.732018][T15450] dump_stack_lvl+0x99/0x250 [ 589.736653][T15450] ? __asan_memcpy+0x40/0x70 [ 589.741281][T15450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 589.746514][T15450] ? __pfx__printk+0x10/0x10 [ 589.751141][T15450] vpanic+0x237/0x6d0 [ 589.755151][T15450] ? __pfx_vpanic+0x10/0x10 [ 589.759679][T15450] panic+0xb9/0xc0 [ 589.763592][T15450] ? __pfx_panic+0x10/0x10 [ 589.768044][T15450] __warn+0x31b/0x4b0 [ 589.772046][T15450] ? refcount_warn_saturate+0x11a/0x1d0 [ 589.777612][T15450] ? refcount_warn_saturate+0x11a/0x1d0 [ 589.783173][T15450] report_bug+0x2be/0x4f0 [ 589.787515][T15450] ? refcount_warn_saturate+0x11a/0x1d0 [ 589.793079][T15450] ? refcount_warn_saturate+0x11a/0x1d0 [ 589.798636][T15450] ? refcount_warn_saturate+0x11c/0x1d0 [ 589.804193][T15450] handle_bug+0x84/0x160 [ 589.808450][T15450] exc_invalid_op+0x1a/0x50 [ 589.812977][T15450] asm_exc_invalid_op+0x1a/0x20 [ 589.817833][T15450] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 589.824011][T15450] Code: 40 58 be 8b e8 37 a4 f9 fc 90 0f 0b 90 90 eb d7 e8 4b 88 36 fd c6 05 e9 99 dd 0a 01 90 48 c7 c7 a0 58 be 8b e8 17 a4 f9 fc 90 <0f> 0b 90 90 eb b7 e8 2b 88 36 fd c6 05 c6 99 dd 0a 01 90 48 c7 c7 [ 589.843631][T15450] RSP: 0018:ffffc900047af7b8 EFLAGS: 00010246 [ 589.849710][T15450] RAX: 30244b074a356a00 RBX: 0000000000000003 RCX: ffff888024c98000 [ 589.857689][T15450] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 589.865664][T15450] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 589.873642][T15450] R10: dffffc0000000000 R11: fffffbfff1bba684 R12: ffff888026d1d800 [ 589.881619][T15450] R13: ffff88804f848460 R14: ffff88804f848478 R15: dffffc0000000000 [ 589.889624][T15450] ? refcount_warn_saturate+0x119/0x1d0 [ 589.895191][T15450] klist_dec_and_del+0x3c7/0x3d0 [ 589.900142][T15450] klist_remove+0x1bd/0x340 [ 589.904658][T15450] ? __pfx_klist_children_put+0x10/0x10 [ 589.910231][T15450] ? __pfx_klist_remove+0x10/0x10 [ 589.915265][T15450] ? __pfx_kobject_move+0x10/0x10 [ 589.920302][T15450] ? do_raw_spin_unlock+0x122/0x240 [ 589.925520][T15450] ? get_device_parent+0x366/0x3a0 [ 589.930644][T15450] device_move+0x193/0x700 [ 589.935092][T15450] hci_conn_del_sysfs+0xb8/0x170 [ 589.940050][T15450] hci_conn_del+0xc33/0x11b0 [ 589.944657][T15450] hci_conn_hash_flush+0x191/0x230 [ 589.949783][T15450] hci_dev_close_sync+0xaef/0x1330 [ 589.954913][T15450] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 589.960484][T15450] ? up_write+0x1c4/0x420 [ 589.964844][T15450] hci_unregister_dev+0x21a/0x510 [ 589.969888][T15450] vhci_release+0x152/0x1a0 [ 589.974420][T15450] ? __pfx_vhci_release+0x10/0x10 [ 589.979454][T15450] __fput+0x44c/0xa70 [ 589.983457][T15450] task_work_run+0x1d4/0x260 [ 589.988066][T15450] ? __pfx_task_work_run+0x10/0x10 [ 589.993195][T15450] ? do_exit+0x6b0/0x2300 [ 589.997548][T15450] ? kmem_cache_free+0x19b/0x690 [ 590.002528][T15450] do_exit+0x6b5/0x2300 [ 590.006717][T15450] ? __pfx_do_exit+0x10/0x10 [ 590.011333][T15450] ? _raw_spin_unlock_irq+0x23/0x50 [ 590.016586][T15450] ? lockdep_hardirqs_on+0x9c/0x150 [ 590.021820][T15450] do_group_exit+0x21c/0x2d0 [ 590.026443][T15450] __x64_sys_exit_group+0x3f/0x40 [ 590.031486][T15450] x64_sys_call+0x21f7/0x2200 [ 590.036172][T15450] do_syscall_64+0xfa/0xfa0 [ 590.040682][T15450] ? lockdep_hardirqs_on+0x9c/0x150 [ 590.045897][T15450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.051981][T15450] ? clear_bhb_loop+0x60/0xb0 [ 590.056673][T15450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.062581][T15450] RIP: 0033:0x7ff8a1d8f6c9 [ 590.067006][T15450] Code: Unable to access opcode bytes at 0x7ff8a1d8f69f. [ 590.074031][T15450] RSP: 002b:00007ffc4757b838 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 590.082457][T15450] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007ff8a1d8f6c9 [ 590.090455][T15450] RDX: 00007ff8a1d915ba RSI: 0000000000000000 RDI: 0000000000000007 [ 590.098437][T15450] RBP: 0000000000000003 R08: 0079746972756365 R09: 0000000000000007 [ 590.106418][T15450] R10: 00000000000003b8 R11: 0000000000000246 R12: 00007ff8a1fb2ca0 [ 590.114414][T15450] R13: 00007ffc4757be4c R14: 0000000000000000 R15: 00007ff8a1fb4e60 [ 590.122427][T15450] [ 590.125961][T15450] Kernel Offset: disabled [ 590.130494][T15450] Rebooting in 86400 seconds..