last executing test programs: 1m6.720631728s ago: executing program 0 (id=1487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611859000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet6_udplite(0xa, 0x2, 0x88) write$tun(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="0000080001050700030080000600"], 0x1e7) setsockopt$sock_linger(r1, 0x1, 0x3e, &(0x7f0000000000)={0xfffff000}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c000140fffffffffffff7ff080003"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611859000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) write$tun(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="0000080001050700030080000600"], 0x1e7) (async) setsockopt$sock_linger(r1, 0x1, 0x3e, &(0x7f0000000000)={0xfffff000}, 0x8) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c000140fffffffffffff7ff080003"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) (async) 1m6.578594337s ago: executing program 0 (id=1489): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbfb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 1m6.447863408s ago: executing program 1 (id=1490): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000d40)={&(0x7f0000000cc0)=""/73, 0x1000, 0x0, 0xffff}, 0x20) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x3ff, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d000000000000002020207b1af8ff00000000bfa100000000000007000000000000000000", @ANYRES16=r2, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2c020400) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000001850000007500000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a6fffff00000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmmsg$inet(r2, &(0x7f0000001840), 0x3, 0x200040d0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000340)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000380)=0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000", @ANYRES16=r6, @ANYBLOB="050027bd7000fedbdf250600000008000300", @ANYRES32=r7, @ANYBLOB="0800050006000000100017800400020004000600040002000c00178004000200040006001c001780040004000b0003"], 0x80}, 0x1, 0x0, 0x0, 0x40048}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000fa0c00000700000008000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00W\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000000), &(0x7f0000000040)='%pS \x00'}, 0x20) r9 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000300)={'tunl0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x700, 0x10, 0x1, 0x7ff, {{0xe, 0x4, 0x1, 0x0, 0x38, 0x66, 0x0, 0xb, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_prespec={0x44, 0x14, 0xad, 0x3, 0x3, [{@multicast1, 0x4314}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x15fb}]}, @timestamp_addr={0x44, 0xc, 0x64, 0x1, 0x3, [{@private=0xa010100, 0x4}]}, @noop]}}}}}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r10, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000e6ffffff0d0000000000000efeffffff020000000c000000000000070000000000615f0000"], &(0x7f0000000740)=""/76, 0x39, 0x4c, 0x0, 0x0, 0x10000}, 0x28) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r11, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000000c0)="b9ff0300600d698cff9e14f086dd347dc959", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{r4}, &(0x7f0000000940), &(0x7f0000000b00)='%-5lx \x00'}, 0x20) 1m6.437313182s ago: executing program 0 (id=1492): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x25dfdbfc, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x84}]}, 0x24}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xe, &(0x7f0000000240)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYBLOB="00000000000000008500000012000000180100002020642500000000001e20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000100)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0xe00, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r3, @ANYRES32, @ANYBLOB="001000008000000008000f002000"], 0xe8}}, 0x0) 1m6.329416988s ago: executing program 0 (id=1494): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002400), 0x1, 0x0) writev(r3, &(0x7f0000002800)=[{&(0x7f0000002440)='\n', 0x1}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000b04fcff", 0x58}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m6.267755733s ago: executing program 1 (id=1495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x19, 0x14, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001", @ANYRES32=r4, @ANYRESDEC=r3, @ANYRES16=r0, @ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000002380)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474df6a51671e412928f46546af1e1536816e100ed8a93b0a9053db57d60973369f58551c3091cb8d0e625f50843d76aa5fa8d3b87b4830c757fa49cde95849b1a836e4725ada53659ff67cb9649fe77723ba19dcc94825d54df", 0x7a}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f00000028c0)="df3b46a13300"/19, 0x13}, {&(0x7f00000005c0)="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", 0xe80}], 0x5}, 0x40004) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, 0x0, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x800}, 0x50) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x128, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xe, 0x8, [0x1a, 0xf, 0xf, 0x2f, 0x23, 0x3e, 0x30, 0x15, 0x3b, 0xe, 0x1e, 0x17, 0x1b, 0x3c, 0x36, 0x4], 0x2, 0x2, 0x8}}}, {{@uncond, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x6, 0x0, 'snmp\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 1m6.172390636s ago: executing program 2 (id=1496): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x5) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x39, 0x8, 0x1, 0xb, 0x2}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000480)={r2, 0x7}, &(0x7f00000004c0)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0xd2, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x21, 0x800, 0x7f) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x3c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x3, @private1, 0x4}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @empty}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=r6, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c0001800600060088480000200002"], 0x44}, 0x1, 0x0, 0x0, 0xc810}, 0x40008004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$l2tp(0x0, r8) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x40000c0) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0xfffffffc) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000002800128008000100736974001c00027c48000300ffff0001060008000300fcff2ab371dd5c631da09d06127fb3aee23356ff3d01a566f18db1c3b237d5ee4ac20f59e80394ee60fea61df554d78b2939f47e479b229f0ca78389396015032fe48b69f249654aad8b6ca53438bea959238d60b91c75afa2e95953f187fec57cdcc66490bf24f389891e6d909f99d22de241f14bf47f3f07dffddec7eb5d67e4e084e14861e478d63e353e5c2e6e395eb2000000"], 0x48}}, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000440)={r12, &(0x7f0000000380)="8ecd0d547c20f7bab5eb556c566467c32e5b469950952dfab40df41e84ccb17cca8cab62e66df19985472a3410d2b28b3df87bf03cd072ddb02b505fa0fe122ba23fd3591878fefc4dfbc39577c2ed7d8fb889aae36ace32082f391267c0aa2757e202e5073ee5a7bb2f0c6f8d39482ddb37bfb07b35e48f4dab867a3aa25f40c35ca63aa76c1c4d0fbb2918af9ee41167680aa303b23e46", &(0x7f00000006c0)=""/4096}, 0x20) 1m5.86396873s ago: executing program 3 (id=1498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async) 1m5.685542413s ago: executing program 3 (id=1499): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x61}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x63, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f88a8349f88a8d34258b7ce59c9f907afa16494c9529c474f408faf3b9f94bd27baf2da8080408833ba4d60cbac74d7"}}}}, 0x71) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x402, 0x0) ioctl$PPPIOCDISCONN(r4, 0x7439) r5 = accept4(r1, 0x0, &(0x7f0000000100), 0x80800) sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="f6", 0xfffffe42}], 0x1, 0x0, 0x0, 0x4000800}], 0x1, 0x24004041) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0x24e, &(0x7f0000000180)='veth0_vlan\x00', 0x3, 0x6, 0x2}) recvmmsg(r1, &(0x7f00000065c0)=[{{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000002f80)=""/4096, 0x1000}], 0x1}, 0xfffffff7}], 0x1, 0x40004023, 0x0) 1m5.657080026s ago: executing program 0 (id=1500): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="6b1690bb8dc095ebae95baccdce177a97389ae7df65487e3996df64c35efa6e159bd2f2180", 0xfdef}], 0x1, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}, @ip_retopts={{0x16, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x0, 0x2}]}}}], 0x38}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f00000001c0)={@mcast2, 0x0}, &(0x7f0000000200)=0x14) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x34, 0x15, 0x1, 0xfffffffd, 0x0, {0x2, 0x38, 0x0, 0x0, r10}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2}}]}, 0x34}}, 0x0) r12 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r12, &(0x7f0000000040)={0x1d, r13, 0x1}, 0x18) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x20, 0x10, 0x7f, 0x1, {{0x7, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x1, 0x4, 0x0, @loopback, @empty, {[@ra={0x94, 0x4}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x80, 0x1, 0x6, 0x7, {{0x19, 0x4, 0x0, 0x25, 0x64, 0x64, 0x0, 0xb, 0x2f, 0x0, @remote, @private=0xa010102, {[@timestamp_addr={0x44, 0x1c, 0xbe, 0x1, 0xb, [{@remote, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@multicast2, 0x2}]}, @generic={0x89, 0x10, "598d3024b4b0972ab12bd4e5b56c"}, @timestamp={0x44, 0x20, 0x14, 0x0, 0x7, [0x400, 0x3, 0xb31, 0x5, 0x8, 0x7e18, 0x5905]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x190, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf19dbcc0532d587b}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4044}, 0x8000) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) 1m5.451812597s ago: executing program 3 (id=1502): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) socket$nl_route(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000440)="ac", 0x1}], 0x1) (async) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000440)="ac", 0x1}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r3, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r2, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4040) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008058) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x6ec}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x6ec}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 1m5.212088795s ago: executing program 2 (id=1504): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) close(0x3) 1m5.211373225s ago: executing program 3 (id=1505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x2d, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000094c10000000a28000000000a030000000000000000000a00000708000900010073797a31000000002c000000030a0101000073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt(r0, 0x1ff, 0x0, &(0x7f0000000300)="0bef6735120b914e88193e1f6d8895d7d80eec7bee323e9f389ab992cc19ab7e9cae2af59cdf839671eaea5c52b1a8e8436ec99ebb3b202955ab759281e270279afaf4af1ccf684b68da120fe266a8cffd5d52f0375c5859b0fa81317c865c31d97823cc88a2da9e5f3c9e8f2aa1fe7bad6eff1eff542315b6a0f5a5b52ab81571beadaa7e3ef9ff38720558a109a90f8a758387b9d0a31582ba8d2982b22bbb36cec71e9ab8178b1e9bd408678b4634761e", 0xb2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa4}, 0x1, 0x0, 0x0, 0x40000104}, 0x4000841) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x54, 0xf, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000004}, 0x24008005) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a4000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a3100000000090002"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4008000) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000400)=0x1, 0x4) 1m5.209335433s ago: executing program 4 (id=1506): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000700)=0x8000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000540)="9743fffdf06029326affc8fd5d4ade3a3db66af318d85a7f24d7c41da72c004e510e4e092b46756f4581c318e9918f5c6321d162f3eb621002d4d21a28bca616b1bbe616c4db770329af", 0x4a) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002800)='2', 0x1}], 0x1}, 0x8400) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) accept4$nfc_llcp(r2, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80800) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000019c0)=""/4094, 0xffe}, {&(0x7f0000000000)=""/170, 0xaa}, {&(0x7f0000000900)=""/168, 0xa8}, {&(0x7f0000000380)=""/169, 0xa9}, {&(0x7f0000000440)=""/165, 0xa5}, {&(0x7f0000000280)=""/161, 0xa1}, {&(0x7f0000000140)=""/28, 0x1c}, {&(0x7f0000000640)=""/11, 0xb}], 0x8}, 0x100) sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) 1m5.105735443s ago: executing program 2 (id=1507): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x7fe2, 0x3, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000000004850000000c000000b707000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500002b00000075d83e3f0c9672d807c6056e10c890000002907800"], 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1m5.069234966s ago: executing program 1 (id=1508): setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e24, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd2}, {0xa, 0x4e21, 0x7, @local, 0x6}, 0x1, {[0x6, 0x5, 0xfffffff7, 0x8, 0x36f3406, 0x800, 0xca, 0xffffffff]}}, 0x5c) r0 = socket(0x5b, 0x2, 0x0) getpeername$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4200, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'veth0\x00', 0x10}) connect$tipc(r0, &(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x40, 0x3}, 0x1}}, 0x10) r3 = gettid() r4 = syz_open_procfs$namespace(r3, &(0x7f00000001c0)='ns/user\x00') sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_getnexthop={0x30, 0x6a, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NHA_ID={0x8}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x82ef0ca45cd218ec) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r5, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x37}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0x4f}}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008801}, 0x20040001) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r6, 0x500, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0xd}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x4004) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0)="1abda58a4f2fe48391db23cbcd4919e432eec0791e1143afeba1243ead7b44024225c6bbcf1c2d2606863505a85cce2a501cd161a06f50960f3ea11fdc8f55e5e00ef19238a193ff3230b904c76a899f8ef6ddfce2287159d9f6ce1a46d6b8d79b058a22ba145d713babc1644933bf5a0b8f1348933a0839552964349b0d434ba542d5b05657a74e44d6561691d7c652bb7d12e82c1bc095254f87fdfef632", 0x9f) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000680), &(0x7f00000006c0)=0x14) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r8, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x4, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0xa}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400}, 0x40) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x75}, @ETHTOOL_A_LINKMODES_OURS={0x30, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x24044) sendmsg$inet(r7, &(0x7f0000000d40)={&(0x7f0000000940)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000980)="cb865977272119cf561242c9be7aa5e56bdf3a1ef429ebf05436b306d7fe056b5edf32f02245e4c81655c58343fa4e61968933a7ed2d31e0cbbe0c519b87abaead9a820907b378255ee2c7badd43d5c8d91fef3839a0cba94258636f1f", 0x5d}, {&(0x7f0000000a00)="f277f8f1934e4522f5ae39f8dd74601b1dde916263b1ac2fe4dd4326f56ce0eda1e7a5a39b59414c519b2b56668eff18bf0d3673ef2e0c658192d67f21643b504d0e3e411a7fbba290c0878eb335f7338ee2e5d95b334df75cfb8ef95170e1eb8b104ddb00780787e45c449061e20498e45c2a32787265f21e68a56945a2899b197b5c65f22561fd7bee0d4531d75bc999307beaf4d6895cd4be5a84", 0x9c}, {&(0x7f0000000ac0)="58f3eb552a42b84315d1cdbb5b2ac83935a3a23f30132dab3b896a70b405693b092f9e9e942a843d33848e3eed5c016339076b227d96651a951f6dfc14c71a5065f26d5085636b401a0de77ea277ea0ea9aca4cc739e95ffca12a2c98e55fa4575230275554da4e9b164c499dec90296498204a23f1920d9ca2f563c35db109daeef89a8719c53ecbb149a34956c38a89adb7f519d09861015f005aefa438e2d1f9d2cda80ca4475836d93134ad246b2d7cae38cf14f4e42fcdada1f88cd2d7bbea9110b96acd33d1160962431fa4f30c193c68ee5a033243ebff7ef7bf1219f3f5d13a79a5fc72c46cb8c", 0xeb}, {&(0x7f0000000bc0)="7ccd40eb2c1ccb8f541a9dff6eb87af4722fc526d371f19261e455074b7def435e18b28ceab9df72507d8e16b242fd3b85ff1a1bd4d78ccf4b7cf7b3cda98c089bdb5a976a40a824c660bcf034b0d7a606bd045f0b7feb166002375da57826461b46d2317e2011eb7b5ae4640f39510d9248da2f061cf494b76556dd556c8708fae0b0555e206a7f38953de717ca71dccf6df429b5f5c484fde8f01ff4da802f297233372231959ece33b87920eccf1d17e756345e89595082ac6ef7b7c08c3d1956063e8c65142096edb8dcd1023312", 0xd0}], 0x4, &(0x7f0000000d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @rand_addr=0x64010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}], 0x38}, 0x400) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000dc0), 0xffffffffffffffff) r11 = ioctl$NS_GET_PARENT(r8, 0xb702, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x60, r10, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r11}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r3}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000f40)={r11, 0x8, 0x5, 0x8}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r13, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x20, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x80}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 1m4.984015774s ago: executing program 4 (id=1509): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async, rerun: 32) r4 = socket(0x2000000015, 0x80005, 0x0) (rerun: 32) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 64) getsockname$packet(r4, 0x0, &(0x7f0000000240)) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002f10000000000000020000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300004000000085000000ca0000009500000000000000d5860b2c28", @ANYRES32=0x0, @ANYRESOCT], &(0x7f0000000400)='GPL\x00', 0x1, 0xd8, &(0x7f0000000440)=""/216}, 0x94) 1m4.980793434s ago: executing program 3 (id=1510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd6a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0x2, 0xb}, {0x9, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008820}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m4.949441148s ago: executing program 2 (id=1511): r0 = socket(0x1f, 0x80000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) r2 = accept4$inet6(r0, &(0x7f0000000080), &(0x7f0000000100)=0x1c, 0x80000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) setsockopt(r2, 0x27, 0xfffffabf, &(0x7f00000002c0)="c34dd45ffb9170e170235f1d5e0cdf9fa91b40dc280b46275063fdad3d644f08858dd93def73ed6459c62048bc5e2dc76a723f608ae888c8c5fb0fc1209e50c9464eb2b156ddd6d3c54ef665ae9e305c994a523af45cd072db7e9dd214470eb3361ec3f01ad497cb3c25800add5041aba5c33d4446db5a13a3effbe126230a260cef45c5afe942d40abdd2ca17dded34b28564cf1379366f513103ba59baf1d0503a04d0909fafccbfbb3056bc6fa06023805f362cc08ce1823a10f84829004ea0d41936d33fe9e67ffcfc266f131deeed83aa16f8b08a7f8d", 0xd9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x8, 0x2) r4 = socket$key(0xf, 0x3, 0x2) accept4(r4, 0x0, 0x0, 0x800) sendto$inet6(r3, &(0x7f0000000140)="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", 0x154, 0x4004010, 0x0, 0x0) 1m4.867379353s ago: executing program 1 (id=1512): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x9, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0d000062e810710645fc00040000000400000000010000003e8bd5551e27850464218b6914730ad3c807e670d0c496d7d3ddb83d8c36fd04faca4d628875714d038d0e63cd791f029c759f1b11ee1df39355cd9e65882f34d8d6ef67d1e50524e2ccb985370d1aabf3050000000000000084493eea983c0061d3d2f304004958fd48474e94f2b21d47d887fd3203a5464d48113dfe26a5853b1efe96ddb7e09693ffa0101487e160961d02a55e154fb5a9d3977e89c3cff3540dd1e370fe36483e44", @ANYRESDEC, @ANYBLOB="00000000000000ed00"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="001b3fcc0700000000000400"/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\b'], 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x6, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) listen(r0, 0x11) socket$inet6(0xa, 0x5, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x9, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0d000062e810710645fc00040000000400000000010000003e8bd5551e27850464218b6914730ad3c807e670d0c496d7d3ddb83d8c36fd04faca4d628875714d038d0e63cd791f029c759f1b11ee1df39355cd9e65882f34d8d6ef67d1e50524e2ccb985370d1aabf3050000000000000084493eea983c0061d3d2f304004958fd48474e94f2b21d47d887fd3203a5464d48113dfe26a5853b1efe96ddb7e09693ffa0101487e160961d02a55e154fb5a9d3977e89c3cff3540dd1e370fe36483e44", @ANYRESDEC, @ANYBLOB="00000000000000ed00"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="001b3fcc0700000000000400"/28], 0x48) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\b'], 0x10) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x6, 0x4) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) (async) listen(r0, 0x11) (async) 1m4.79201145s ago: executing program 4 (id=1513): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r6 = socket$inet(0x10, 0x3, 0x0) getsockopt$sock_int(r6, 0x1, 0x1d, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ff5000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x96, &(0x7f00000004c0)=""/150}, 0x94) (async, rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0xfffffffffffffcfa, 0x2, "547d9ed0effe82c024750032ea49f09c72384049bcc87e42ca7e2c78d6a85178e447e32b5f4e4fabff6fb16a40901dc4221e42eb745b6332c476d0c3aefed8dc95af179570cf8cc43bc29eb93c6e78f5e1153d3d7c1542f77dc4b29877e2002685e850f2969cf2164fbf8db7e1713786899d2a8ab03ca5accb2e9b50e1fb7a4e3681b35f0f68461daa4f4e1583b9a02195dee35ae7c8bca085399157d5f30c2ec691c39267b2655c782b363a11645a0c78a39fab8c0ce69f11f2db45ee16e2975a80664f687d01bd7444244a25bdb9ec5b0fa8b1afc0254ddbca2e22ca1b189502b74d7ec4665c23804df713183d428f50a0d64e31e110c707eb3fe69f437992"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xffffffff, 0x401, 0xffff, 0x2, 0xc, 0xe, 0x24}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async, rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x39, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xfff9}, {0x0, 0xb}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x5}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0) 1m4.77590553s ago: executing program 2 (id=1514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000000900020073797a32000000000900010073797a30000000002400048020000180070001006374000014000280080001400000001708000240000000020900074014c52dc22ffc0000140000001100010000000000000000000000000a"], 0x84}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) getsockopt(r1, 0x28, 0x1, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000000900020073797a32000000000900010073797a30000000002400048020000180070001006374000014000280080001400000001708000240000000020900074014c52dc22ffc0000140000001100010000000000000000000000000a"], 0x84}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 1m4.701361407s ago: executing program 0 (id=1515): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x200000000000001) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) 1m4.639863923s ago: executing program 1 (id=1516): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket(0x28, 0x1, 0x0) connect$packet(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x2}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40088c4}, 0x4004080) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x40, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x76}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x45c}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x60b}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x7}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m4.619053655s ago: executing program 4 (id=1517): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) close(0x3) 1m4.580061748s ago: executing program 2 (id=1518): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x102c, r3, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x6b}}}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "02c651c71243233985321ce97c5c1f7dfda96f1cdb1e1fa2130b829c5a8debe10f165ae5a4a111efada1ecd3617b297a46d3bafe7e488fe4e8f9f798d61aeaae2ef1df016273d970c275a6d6c0250419b1cb2700d4f252b9ad332fa18e0cdf154265b9a88324ac57874b8e0aeb27f227ee5580903fe2958251fb5644796a7b7a3c7597ebbe77e1c71495ad740feadcaa58143fc930863f80dbc65aa7b353ac0034e01faafefe269159193f4c3bf636039b1df6017039bd09bcc84de901db0a98290b152d48eda6ccab190111c515907a1e99a9bb29cf03209f3cfac1c3f5d55f669e56d1c13e2619f405b3e50aa2dbb7391188d9bc7ba169980e301ec66af636b883fb97db55d25881f1f6946c2c45686d17ebf2ddb29da24a7a90e4eb876463723c4f164fc5cd15eac03bd155c739f75358365d6408f610c06a769322429f8d35f4b3702f80e0e5d2f717b95b55b1da90cffcf5a20cc0dc425df7fe0c3c150d1c1f3246429c8aa807b04d35b2a9fdadba2f911f35d9f28b9f225f909ca7fef9106b1cb64ec9bbb2ee2d376e5dae40e57b02da949b396e8bf3d84d0ea7f3283db07e6ccf860a15f9fd96a231ade98eadd23fc3cb6713e23f632c32f9f5affd2ad49ecf5039245a305432ec6e5ca4cb8539ac9d307f1d987b309ea0ea02beea14e8a834e6260c72af97e4bf1709a20e6f9f1b1abf7f19e090c235fe6fb9d6a0abf41a9d5e1705ec5d502589eb4eec8bd2f6d8e09f5a687364da6bd6a7b3399639afbdce29d0daee830f765c7a94efef0e413dbc4169c399915a57a5e450dd2db398ff2180098be9282ca3d2a119a74a1524b2189ccf9e8f213d1d45d686826ab4a0e1970f38c646460e5f46735a2bb912b78b3b0d65623e9eb4894ca8c29e8b0dc3141436c046c8a02c8bf6c10cc52244ccca6a9bffdeaea4ace6c50e89485d6ed75a043c0874aa31019aae0e33ac0dda09d77f40c1d8c4c32d2d37313d8cfed1128be746f0146a698bf1371d21e8d6eb7f542e0e33cfa6ac2caa7766d9d81e07fad1985ba761e4ac11dd13b0d5de6943282771646c658c4d75f28b726ab5a34350bfc518bea6ab39aa01823a65f0da3cc9ea1b0e97d40ea8259e0f8bc75885b4dd0c05288c00341e7ddb7c9cbd44b4b5d35878f7f8d4fa8ec009381f706a4f55ad970f7e808fdc8e960e3caf872b9566c421d8defcaaf481365dc2980b0fdd02982049f3f2a2f7101333b1b203cbead8cb8cd375c1d66890c09e4331fabe8f2c4e07a18bd33377295fef5ba16ffc95df65fa71783eb656890aa21f1803ab535738803b9a1cdfc3819bc3a021633b23ee3ed450a649c851ec8ef898bb4b48ba29f93b1ec2dc4c81cb747a62eadb3b3ab900a4ab1d20e3a00a8cea82d3c51fe2e6579c0b7dd8ee8195d96319d41519be9a0ad465339516edd8845febbaa3fd1c19c294f6f76f825f8ae31823395cf8627682138b2d2ba0e60e65dcfb77e9631aaedb983b5432f20463db120c6c2f92ddbe617a3c8546257c65bd1ec67f5aa8599c5d073e9f046a8492727f2141c27ed9ef70c7578f9760209fc3957df68627d78980627fefe3e80844a7c048108497e1d4db78c0a35c6506d17ce9db65ec990599959ab5a44fb05a78071c18d821e9cdd0690b490a4e6dc4d18004d4ab7f9daf2ede867b7a0327df832ddc4338bf4dc1770a501c0b38ac01009fe19a26a3cdefc3cfd5e3886d8f0f5f4bd56bf3e7055b71b4354983241bea3655c02225886748fecd14da6c63e983cc9582ab8e98e763afb1c2370b5b87932d7b9f72a31d738895f50e116da83f48ee73336d1f67b0d726f141d5b8d033468cb71b4a60c55bc975026a5a7b41960a71009cfa1c60bf4f99030aa76e24d89e300d5279e6444e9ad890fad6e4e62ad18d42d0ce9b5dc4eb81c4cf6cab0491b8fa84fef18bf766c129ae35e01635439acaa145cfe3e66064a0749c7017c3f2912ee2b64b1069094cbfe1e0a14da4918484adf98599aaa04fd8f20d92ae794a3f1a823f3c8842703f7a687989c99a2afb5ae0bdb35bd714047350b6647725f8a916e0f0754f489d50599853440fad30bc143450939df28ea5bb50a34aa55fd61fcffe8f0666b27631a97956c01cb79c454925b16292211e46adf93f8d1922ba738d6fb59aaf39eb3f9c2fec5c54ea1f092ef11cc0d6de4161c76945b55b36fa2cd6e60beeb96821dad1610f04b20452ffba071a06259c0014ca1aad877a5ee1a0975b826fc03b42a6a7360e87805da66e779427278e0003e9a4adf52d6bfbd40356ec2e8b72997adead16bac7db2d631b9c12a8374e845adc443d3a620bb71b51ffa79cbdb847000e3f38aff1a209c8556d40ef227ba347c8ad3a1e66e77220f641a37378e041033cacdf30ad9619fdddb299a381ff071c5faf42bf09212abac9bfef5db33983af9d84d6cfa648602d3d50d62900f9e729722cd258f7a074b40239fe10b67f37f7283b5606489a55b94e27ec1768284f7f479bb5c2610f8a7b6dc54efa5ce12fd14d253474ba9141023ea16ab3ed5afdfb6349ed4cf79500ec20a80f8b4263a4ce05319c4dce22ea455978ab52ffd5bec3938f06ab9328cdef88557b29408f8ce4fee1def519eb64e2ae3619071008a89ff157696d19e308f0d4ea1606ca45028898deb3bf62d6aa43c276895a4ef22370a0cfefeb73970e74f0d2b85c09fda94ed0deae97b6a4a2c18c519ca2b91d78969a1149e01e157ba7f963bfb9d567ca3e1f58a810034d1243ae3912710fd6a52d84007b4bdbb128d1f862b18b2e7965c9460ee522d53e64c4856a05bf419a99e74f122146e66a3af15b200722396a0333e9530c73a59b31f838af3284a9601f86d01a49e8b4c1e495d3d06729a0ab988efaaf153f8cfb3985d64e82015534f533459ddb99ecdf89ea181e91df0335f84e54fb9d315ba5c6bd0054f9a32834f24a8a55d4e7f22df90a145707b2b8b14cef6d0ce5c7c84ac51239ae06ddbc62aed392f8206b0e3ca6d76f1eebb4b74af4e73b2143c6c10402111fc506d6dda986634f0223691a98d0d61aa9827813b614fd4202def39d78e90e2ef7edbf82a5febd18ea8c361215864258e8d40b62f55f1e3dd020d1607bbbe91f8e8be748d66ab3e3cd4ed57bfe2115999a679ee4a85083db9abb42270915436e0b0ae9d9b3d3420d8348482e8c5ab6c42c07c278889ba82788c212e9f032905f9c10299edcb1cce12371735b17bc273adb23aa65eb635c32af4af67fcdbfc1476d73e828a7c7f83e3c6f1e61b6b60344c6ac363ad8e393b81b6d82e14d0dc73aee4791d9ea5f6a7a275394d2d059c8f6ff65b0225f2b1a85e05b1c8147e74731016f70da0831938b23cf46d652c533d887a863bfec33fbf8c76cdafc4f3ee478dad2d90fb4455731286d3b5bc2f022ba2f51483a81778b94ec4ff28b05de2a4ec5fb824dd27aa78c48ad711c6b677263aa212d4e0f8afd9ff6e0a52277f7357872f0e4140a945175a73e3ab4686c8fd33595552c4a5e0392968cb0ac2641e48c23f5b6910719f052cb862eda357d0616266713e68201a420bc1bfeedd04ee70860cec0e0f01f35ba7169e02765972cf31e56e691691ad125893474c06d5b6b614d4d32800a18e85daefb26a7a79fb823f8f9a2628e700d07245e445dc57b3b6e4985edd0d4c033a5d96254ec1c3e69e7411181fcdd1e49be879bf93003c8917728830e1042e5fc34cec910de66dcbb18982a0f1b73972b43a0625b4110d79c815b88fd97b4207898d46059ba863a56030ab9d50f07039a53ce5ac9e0217ff177b4d2797c2ccb02e169d3411f850ff3825678b43399c2e7b3721076bce27da0206987de8ffce21cf5bf62eee2c84e66546326a72f08f2d072b96d003eb67a8b55d90c72feb3aeae05b6ffa7497dfc5c8e0e9b096ca5055bf230bf24a7c443acfe03e5eab9e540198fadf32e137412a7d0dc6c31b6400e5d06da42c95be34eb7ba7e069fbcfb1cfd9e735faf73e283f505c8eb31dad18ef48318f12230bdeb0dc32ee1d25536d07e91506d8cd1b77c4067760cfd766b7ce8bb67eb4b441fac9d05f76baf5eadaa006d30fbf611ec2b036d9bd3e8f9749f18ab7fc449dd9e2724288b8153b7e26cd567b2bec312f8141c622d91c3d67a48d894055641a6c74d74454a9c93c06f727dc1a7622c9939ea75f0dc64f5d9a84750e23c85558907cc41f4f1c653bc652d4d0a82b8e7c882155627c8cc47cac2f7dbe3629a5f3e20adc740263c365c755f23f9e0f4c9c22fd934baa62247f3763f429a55a88bac28a74b228a90e9dbe74c92a4a0a2dc8f0e36a7571f3134f943e2df106f5215a50aa98a1ac0c1803b4b9184044514f632c87222ec4fd432e91afeaf942b240cd5b5c70f19fb7f7d39f4c1e0bf0947cc58aec301342b41c85556daf13aac4e5a5c209f84a13636ecee96a13759244813b0dc4ba0bc5cddfd18797ecf8aa1a5bc646d578c50bacd54f3115cfcc7a7a66cf17d564b1c212ee3e127f073fac5f71b898e338265e81b629897adeeb2f659435de53034b657cc9870dfb830055ca0923062cb619e74ea7538bfa47b1eac4d64bb66c2e4da1f00e2c6539170ed6cddfaf7a01e96b1b0c563fbea3b90af44bb54e57877b0d2fafc4b3d5f0fb2f254a9d5ea412150e98d209f73be7820ac6e97c810bb1b2aa29a3ec4839dceff04b4165ebe0daf5610dffdc031dc5fd79f725d34def471fdee4167f0882e1b043d724553adac53c7fcf9c1d3e698c9046594d26e89d211551eb404ec223f4fb4117e2dee909c5bc1051a15fbad9570699e2eda62ce6ec86f600e67ed2cfcf4a8119beea4f6ff93051ec2fb99f835771d43e950189ee7625d553ceca8258105df15b8cad629dc8b1a79fef48319b1a681c36752c9d305ce9af871e691ce157f69569e429e620a83362c22062a451be025610053b27f5c6538fd725de4ead7d850fbe2f62a03e28aeb705c72b7c43329f822ac30f0f20cbc81c343749cde44c3d0950686611c32edbdfb6e8dbdbab0ddd15a5580420fd5b7122d4e82f947ba0e5b5d31c420cfddfd101b69eefb2ab0ead882bc9bdfe0d363d71fdd26c88328b7433a39d29c558cbcb2242b77c365e85214e4323b078386e10e6d1e40b44a25db64590e1f7e96311d33dfaf9edfd36ed1f355b45abcfdc744b2e1364e0f3e907580d8f0437f6d78f9e22f218ea338be81f8ed2691206c69228054f3f5e5b4f7e50b4867f626ce65f77b59d5b9259ce762c5e95d842384edddbf45bbc64adaf4a3e02d12c1aee9738a6fd02f5dd4286f4cd88e9eb1f37aadaa3f920a1f1fa3c4ea6ac606bcb71fd7e9b6f2cac750f646d39ff8a24ee7a85a2ea70c9e3f54dfb5a723be1ac8ba7e258f226adea50c348c3275c7ef4ae4474c67a314c706fe9d73e1e22dfae8b1a4da37568618c3bbb9ec362d08aa967f8791c1d72f1c4bb54ebb21d84560b79380ff691488e54122b2bfb96788f58eb714cc3c8ead2177b422749b44688d072649a4d7ca9c8dbeb473c24587d3f1d6303ab15cbfce1d74217ca16ed6a86c1318c9ad1e5491dff680eb9e6814f336252273df76e823971217d153c2be6a327a3fccc0301e7916c6dc7d7efc4b9f1bd580f9dfbb16305dc1dc65eb9c7443164c15c0e0afe2da5bb674df4a5d410e0875901db2e2ea7d371d8ad11c175d747d42a8f30eb3c9028ea418551ae12d54171f5b9f81353ff2df73ecd2fc26e957c27878c33374a7a60121590685366a8a10e39cbf4cc0889350707321b3f6881409"}]}, 0x102c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4c0c4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f00000013c0)={0x5c, r3, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "f1a63afd"}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b117139ac5ce3d944b37dff128"}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000005c0)={0x18, r6, 0x1, 0x70bd2d, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async, rerun: 32) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="0205fe0d0c00000000000000feffffff05000600ff0000000a004e23000000030000000000000000000000000000000107000000000083000200010020000000e5b5d6f900000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x4000000) (rerun: 32) 1m4.497313605s ago: executing program 4 (id=1519): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002202000000000000020000008001c00ff01000006001d"], 0x2c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x10, 0x700, 0xe, 0x4, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x65, 0x0, 0x34, 0x4, 0x0, @local, @private=0xa010102}}}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, &(0x7f0000000080)) write$cgroup_pressure(r4, &(0x7f00000000c0)={'full', 0x20, 0x9, 0x20, 0x3}, 0x2f) sendmsg$xdp(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x2c, 0x2, r3, 0x28}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000180)="821d9d44fc4138d9e256ba77148b96fc3d816c63c8b16bfa1a331f90a3c34a3f585af59d2169af", 0x27}, {&(0x7f00000001c0)="8fdb80f6cfe5a75a0194aa506e15f48afdbca8ada5bf7a3765874bdd44941e145644fdeba74ec4e6c90e75cc76ddb5b91d8e66f255bf3938508729e6e7ab5f038db8e40cf66f933cd03af78fb58353248946156676ac87bf58558ba4966b91de005673cc2999a7863233e67d8dd2fd4bf1fa9dcc42", 0x75}, {&(0x7f0000000240)="829aa7d1f4a13a88606475602e325b635ad6a275b79eaee8c69b9a800eba5d4fbd7f87c0b4569ec8ca95b73992caafa0473dab25434ea0330c9f12d5843629ab207bb896b8ef6a40ac87e2640ca881fc32f10f7e6d0f780f242caf379864936513fbbad5d8e634a69f452c132e865c97392b8e365f616b9ac98ff90d23b48d936e58fe99b1985d7634a6094a272728d046e77c997a703d91cd0ba33ec43d08c4474a2835811d6cc1ba98f7c94f6144cedcadb0ccec4a1529a667c3feb481c37dbcf092", 0xc3}], 0x3, 0x0, 0x0, 0x20048c1}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e1f, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}, @in={0x2, 0x4e1d, @private=0xa010100}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @private=0xa010102}, @in={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x6c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, &(0x7f0000000000)='\x00', 0xc, 0x40000, &(0x7f000005ffe4)={0xa, 0x4e24, 0x0, @loopback, 0x5}, 0x1c) 1m4.417602511s ago: executing program 3 (id=1520): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x20, 0x4, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xffffffffffffffa3, 0x2, 0x1, 0x0, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008800}, 0x8000) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x28, 0x0, &(0x7f0000000440)="004a1821b95df8fe4284860186dd8df3db3cde3d37cfae09ccc64b67acf8d0e9d6b8ff0000000000", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) (rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r3, &(0x7f00000004c0), 0x0}, 0x20) (async) socket(0x26, 0x2, 0x5) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791030000000000071041a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) 1m4.311101035s ago: executing program 1 (id=1521): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000cfba000000fdff00911152000000000095a6f1755eb273f423ffeb0000000000000000000000000000000000cae014b1c86a54db471fac36576541f45dc38a7ff6f80a28b49309c3dc2230c3cb38bdb1ac8bc9b269514c57c3"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x1, 0x3, 0x2, 0x3c}, 0x20) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0xa, 0x4e21, 0x4080000, @dev={0xfe, 0x80, '\x00', 0x1a}}, 0x1c, 0x0}, 0x40c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r5, @ANYBLOB="b90e00d7a53eebdfc1c0fa1b35410a6f96d010007e00000080000000000000000000"], 0x2c}}, 0x0) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r7, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 2', 0x1b) 1m4.261375034s ago: executing program 4 (id=1522): r0 = epoll_create1(0x80000) epoll_pwait(r0, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x5, 0x2, &(0x7f0000000200)={[0x7]}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80800) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x1c, r7, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @void, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000815}, 0x400c010) getsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000002000)=ANY=[@ANYBLOB="18020000010000000000000000000000850000004f000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r8, &(0x7f0000000240)={0x10000001}) poll(&(0x7f00000000c0)=[{r8, 0x1009}], 0x1, 0x8000007) 48.508808634s ago: executing program 32 (id=1515): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x200000000000001) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) 48.44087629s ago: executing program 33 (id=1521): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000cfba000000fdff00911152000000000095a6f1755eb273f423ffeb0000000000000000000000000000000000cae014b1c86a54db471fac36576541f45dc38a7ff6f80a28b49309c3dc2230c3cb38bdb1ac8bc9b269514c57c3"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x1, 0x3, 0x2, 0x3c}, 0x20) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0xa, 0x4e21, 0x4080000, @dev={0xfe, 0x80, '\x00', 0x1a}}, 0x1c, 0x0}, 0x40c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r5, @ANYBLOB="b90e00d7a53eebdfc1c0fa1b35410a6f96d010007e00000080000000000000000000"], 0x2c}}, 0x0) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r7, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 2', 0x1b) 48.339047043s ago: executing program 34 (id=1518): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x102c, r3, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x6b}}}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}]}, 0x102c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4c0c4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f00000013c0)={0x5c, r3, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "f1a63afd"}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b117139ac5ce3d944b37dff128"}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000005c0)={0x18, r6, 0x1, 0x70bd2d, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async, rerun: 32) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="0205fe0d0c00000000000000feffffff05000600ff0000000a004e23000000030000000000000000000000000000000107000000000083000200010020000000e5b5d6f900000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x4000000) (rerun: 32) 48.271322606s ago: executing program 35 (id=1520): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x20, 0x4, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xffffffffffffffa3, 0x2, 0x1, 0x0, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008800}, 0x8000) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x28, 0x0, &(0x7f0000000440)="004a1821b95df8fe4284860186dd8df3db3cde3d37cfae09ccc64b67acf8d0e9d6b8ff0000000000", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) (rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r3, &(0x7f00000004c0), 0x0}, 0x20) (async) socket(0x26, 0x2, 0x5) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791030000000000071041a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) 48.155861535s ago: executing program 36 (id=1522): r0 = epoll_create1(0x80000) epoll_pwait(r0, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x5, 0x2, &(0x7f0000000200)={[0x7]}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80800) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x1c, r7, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @void, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000815}, 0x400c010) getsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000002000)=ANY=[@ANYBLOB="18020000010000000000000000000000850000004f000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r8, &(0x7f0000000240)={0x10000001}) poll(&(0x7f00000000c0)=[{r8, 0x1009}], 0x1, 0x8000007) 3.928666328s ago: executing program 9 (id=1789): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x3c, r2, 0x1, 0x0, 0x25dfdbfc, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000800c00028008000001000014bb0a0001"], 0x48}}, 0x0) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0xff01, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x100, r9, 0x1, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) bind$netlink(r11, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r11, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x400, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r12, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newlink={0xa0, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10809}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_VF_PORTS={0x54, 0x18, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x23}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "93ab620f4964558827d3aab3c3f24cd2"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "010d61a6d7996778cce7a057eea3ad75"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "5a0feff13f0ffa5ff7afad66789b41fd"}]}]}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0xa0}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r14, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x68, r9, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x890) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44800) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x224a1}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x20000080) 3.558057434s ago: executing program 5 (id=1793): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) (rerun: 64) writev(r0, &(0x7f0000000040)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb38c8557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a0e354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00b", 0x81}, {&(0x7f0000000000)="21777cdab5732e6a1086104e4c003a9183a6b7", 0x13}], 0x2) (async, rerun: 64) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (rerun: 64) 3.232016383s ago: executing program 5 (id=1797): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004208000040000000c0"], 0x50) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0x2c, 0x4) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000500)={@private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2, 0x1ff, 0x7, 0x80, 0xf5f, 0x80000}) r3 = socket(0x2, 0x3, 0x7) setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000040)=0x4, 0x4) 3.228683719s ago: executing program 8 (id=1798): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x18, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @typed={0x4, 0x1d}]}, 0x18}], 0x1}, 0x300) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) recvmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/3, 0xffffff5a}, 0x7}], 0x1, 0x40004062, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000080)=0x9, 0x4) 2.97490668s ago: executing program 9 (id=1800): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000069430001030019da000000000000000d00000000000007020000000c000c400000000000003be8a991fcff"], 0x28}}, 0x44004) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) 2.812023393s ago: executing program 9 (id=1801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x100, 0x70bd2b, 0x7, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x20040810) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRESDEC=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="3c005a80380000800c0001000202"], 0x58}}, 0x0) 2.299576005s ago: executing program 8 (id=1804): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r1, @ANYRES64=r1], 0x48) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) (async) shutdown(r3, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000cc0)=ANY=[@ANYRES8=r0], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f0000000840)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) shutdown(r3, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) (async) r5 = socket$kcm(0x2, 0xa, 0x2) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r6) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, 0x0, 0x2000c094) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r2, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000000000000000009500000000f4f00000000000000000"], &(0x7f00000003c0)='GPL\x00', 0x7, 0x5a, &(0x7f0000000540)=""/90, 0x40f00, 0x13, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x4, 0xa, 0x2, 0x60}, 0x10, 0x2722b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x121282, 0x0) close(r10) 2.296840305s ago: executing program 9 (id=1805): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x20000084) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0xa, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x9, 0x8}, {0xfff2, 0xf}}, [@TCA_RATE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.291380014s ago: executing program 5 (id=1806): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="44000000020601010000000000000000000000060500040002000000050005000000000009000200732b070339e457797a310000000005000100070000000c0003006861"], 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) listen(r0, 0xfffffffc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000380), &(0x7f0000000040)=@udp=r3}, 0x20) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x12021) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@private=0xa010100, @in=@private=0xa010101, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0xfffffffffffffffd, 0x40000402dd}, 0x4, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x2b}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x9}, {{@in6=@mcast2, 0x0, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@multicast2, 0x0, 0x2b}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, 0xa, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}]}]}, 0x23c}}, 0x8000000) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000020605000000000000000000000018000900020073040001020000"], 0x28}}, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) getsockopt$sock_timeval(r8, 0x1, 0x42, &(0x7f0000000180), &(0x7f00000001c0)=0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) r12 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r12, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 1.87507332s ago: executing program 6 (id=1807): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c00038028000080080003"], 0xec}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 1.728010046s ago: executing program 6 (id=1808): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) shutdown(r0, 0x1) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x9, 0x10, {{0x5, 0x4, 0x1, 0x12, 0x14, 0x67, 0x0, 0x9, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3b}}}}}) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), r0) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r4, 0x400, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010829bd7000567960a42f2fef00", @ANYRES32=0x0, @ANYBLOB="0001000004200400080004000005000008001b0000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) 1.513267601s ago: executing program 8 (id=1809): setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) 1.45630816s ago: executing program 8 (id=1810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="0100009f000000000000000088a8600081"], 0x3a) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'pimreg\x00', 0x1000}) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r7, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000100)=[@prinfo={0x18, 0x84, 0x5, {0x30}}, @sndrcv={0x30, 0x84, 0x1, {0xb9, 0x8001, 0x1, 0x5, 0x3, 0x8, 0x48, 0x4}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0xb, 0xfffffffe, 0xff}}], 0x68, 0x4054}, 0x4040041) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000ffffffffffff03000000000088a8400081"], 0x3e) 1.372003873s ago: executing program 7 (id=1811): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') ioctl$FICLONE(r2, 0x40049409, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000280)='2x', 0x2, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000380)='bic\x00', 0x4) shutdown(r3, 0x1) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000002740)='\x83,#}\x00', 0x5) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="4d742dbd7000fddbdf250a00000008000300", @ANYRES32=r5, @ANYBLOB="10005080aca6b9c99d80050002000200"], 0x2c}, 0x1, 0x0, 0x0, 0x42006895}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="171052a8fd12afb5bffe369cb4a0100000000000bc1e839500010000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180000008d020004000000000100000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x78, &(0x7f00000000c0)=""/120, 0x41000, 0x62}, 0x94) 1.323394071s ago: executing program 5 (id=1812): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x4}}, 0x10) close(0x3) 1.245376251s ago: executing program 5 (id=1813): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000340)=0xc3e, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@map=r3, r2, 0x2f}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000200)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000400)="2663bcb205c3aea03c7d37000b47a4e04f8ca678b886d8c8125886528e137ba4f8eb4a20dfd02f013f77c63b6b878013644d56d9ab5bf7b67af61e7578f710bc803b67268287deee6f7c82d8701e0e52968b7a60d311614d9ded530809688691a540dc7170350b3309fc4b347e734556bb8cace105923e8fbea03dd6471050e3edaedb7f0c7f20d0393a68c65cbe462a0c266c95b1d2a8fecabb27f158efdfcf04fe7da35e68d89b568f6fc0f678d8e21a572a6e1acf033e225bb20cbdf0b40e38709c4430db02f225b4f1206beaac60fb0978b4a9c59405ee80fbac31d7302b0e9bdb5cdadd75e108bfbcc16e90", 0xee}, {&(0x7f0000000280)="6da8e8d23020901e41f689a244902b0fc7cfa035da930fb7c5ed3e9dd89b34b1312212372999b1f8cfdfbdf5d08bb912c5303796a0460afbbf0efe50d4131588282e9d44c80930abd31d5d42cab237b29cc6a31c5879809b59f609a93a4dbe84008689f4f07d1fadbaa82d4951cb5f7396e694bf3116a735f61f", 0x7a}], 0x2, &(0x7f0000000500)=[{0xf0, 0x102, 0x3, "ddfc2b4d01192858bcb3e12b45c154bbedad9ba7ba09156f412273687b31f8f0835d21cff6f9688516e45c4d1ead1a9edba0933d972e7657c5af4316f20802a12265790cef3dd15724967428b4b986505405a38cabbc16f15027b01cd40178056f3bf8bb7015aa28dfad75f8a86e809b82d1d75a7a307e401da86f50a74cb22f066bc29b97fe94b5a23a62cedf78832ff6dca04b44ab5bdd66f7d61cd215c42e589478d7cc3579a41f0731b9e40488d9a3b56fad1e139aa70aad03bb910ca1c453c01ad8d43f535560fb3e8a66e070fde2ffafd0637f204986f51d72e8fc25"}, {0xc8, 0x110, 0x8, "8c4da391b99ce5bab375ee321beb1a0e9f1b97f92900bb49addef90bf4e61d343d693b909b04cf1a4883ab6166667e32680fd9e1bfb7723165a4ab633a447c95c4aa5256eaae7ac9f47b30228d85e2e6e9f5bd9abb9a6ea7e4091ace3c6f53c936e54e4afc054ed6a0d9bf62abca7d382a29b2b7725ac4269b16f370986bf1705da6d1ec0e3ce1cbccfa3ee57d3b16bd907f1df77329a88ddac0b6297f2ffce47b1147ecfddb21effde49a7eb255bf23bc0965"}, {0x108, 0x116, 0xe, "2296d2d80ef8c9b54fc47f2537c73ff258c8cdc6bed3858386d58c9fd92cae7503e58b789d99cb5e85c15173274eacfc3e332c5e1a85216787854340fc7347efe9bbd0b082a0c1132e51cac1fadba54453eab5e75489897ca2b08400a845e11c51a54061a2f5e80eb99982f20f931c15ba7806726b3c6e222c5d1236e213022d224ec089597c19ae7bdaa0f169e73acb068ab4287203a556a71246479096236b77a51b0c65cfb2b939264b0515a14fcdecd4c541db52dce24a01eedbd98b0387311a556e730b2e4771c242d0fd8507ad14e4c52102e4ffc03eed9bf1374d0352fa19dd9eca12120449201857e5a0d6f4ac28920450ee9f"}], 0x2c0}, 0x805) 1.107729587s ago: executing program 7 (id=1814): r0 = socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x11, 0x12, r4, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000009000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000bff9a3299648e7fdd7", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000180), &(0x7f0000000100)=r3}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRESDEC=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x1b}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) ioctl$TUNSETFILTEREBPF(r10, 0x800454e1, &(0x7f0000000380)=r9) 1.105764326s ago: executing program 9 (id=1815): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff00c}, {0x28, 0x7, 0x0, 0xa16e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmmsg$inet(r3, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0xc0109414, &(0x7f0000000780)={0x6d9, 0x9, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 840.134041ms ago: executing program 7 (id=1816): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xd}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0x20, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000840)={'syztnl1\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x2, 0x518, 0x4b, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x700, 0x4, 0xb5}}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0x80000025a5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r10}, &(0x7f00000003c0), &(0x7f0000000400)=r8}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_ext={0x1c, 0x21, &(0x7f0000000d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffa}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @generic={0xfa, 0x9, 0x2, 0xffff, 0x206}, @call={0x85, 0x0, 0x0, 0x19}, @call={0x85, 0x0, 0x0, 0xa7}, @jmp={0x5, 0x1, 0xa, 0x0, 0x7, 0x6, 0xfffffffffffffffc}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ldst={0x3, 0x1, 0x0, 0x1, 0x1, 0x20, 0xffffffffffffffe0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x2, 0x37, &(0x7f0000000780)=""/55, 0x40f00, 0x0, '\x00', r9, 0x0, r10, 0x8, &(0x7f00000008c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000900)={0x5, 0x4, 0x4, 0xfffffff9}, 0x10, 0xef3f, 0xffffffffffffffff, 0x6, &(0x7f0000000ac0)=[r7, r4], &(0x7f0000000b00)=[{0x0, 0x3, 0xd, 0x6}, {0x4, 0x2, 0xa, 0x66fba3ea4768aa91}, {0x4, 0x2, 0x4, 0x3}, {0x4, 0x5, 0xe, 0x5}, {0x5, 0x3, 0x7, 0xb}, {0x4, 0x5, 0x8, 0x4}], 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r1}, 0x18) r12 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r12, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) 753.737392ms ago: executing program 8 (id=1817): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000001200010300"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000008000000000000000080003"], 0x54}}, 0x0) recvfrom(r0, &(0x7f0000000040)=""/28, 0x1c, 0x40, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x8e, @private1, 0x9, 0x2}, 0x80) 611.562634ms ago: executing program 7 (id=1818): r0 = socket(0x10, 0x2, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cZrouz0'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071102800000000001f150000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x58) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="100000001af2ff012dbd7000fbdbdf257298c7caa33f37bac653f1e9f08975472268fc7fcff6659177e970dc2f7080455364e45757269bb6da135c5b1ccdf25cb07e131ea125268d9bddaed338f048e459734c7197d618c0eff8827a2c6a6a5e024751ede23dde2c9b01e9b978e8755fdd49506236b298e19aa4e9b31a58f9ec82c7060580fd267a369b98947acd58ad416a08acd11c38db2e3fd4aacb4203f610a232e06c78bd6c2a6d1c799ffd6f19c5ff6a3164bb5665db7dfb48ba07a301038a15770cddf1b3f9783b15f79630e13db14e17d280da6b45b02b16549893ec0ab6bb01e66a0aa28916"], 0x10}], 0x1}, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000003e0007010300000000000000017c0000040042800c00018006000600843b0000100002800c0008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r3, @private=0xb, @empty}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b00)=ANY=[@ANYBLOB="c05100003d0007012bbd700000000000027c0000ab513d8008002e", @ANYBLOB="10004c800400618008008600e000000239", @ANYRES32, @ANYRES32, @ANYBLOB="c41520808aed75ebcc6f5be82472449abab77d0248e20035da934093c2ff654ae59f602aa3880c1bd42dae83bdd58e23ec3c69515dd0c2cd08393269acfeaa213b88cb73cca3990942db0747c872592a65d4d5443d6c377e5c6a47e0ee2696a33694685c52cf9290c3ff00e889dc33263ade5a4c6f081877a680b43247932456aaa38a722a75337730e934da07ec9b908dc45b23ceffa3a1f9d5c16328fa2e220da58478fd6fd93082f98018f5690d11b7369cece001902233a6cf931741ec6702148018003c8014002400ff0100000000000000000000000000010c003c006e6c3830", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0800e300", @ANYRES32, @ANYBLOB="be0e3295e7e9a3a28b222472eed6a664b98fee0475ac3660e4367b690b4b04d9d9d8657c7f2229a8ddd98d1ff550d9730a688d831c499ccee2f9edd1801fd30e126fd14c69a12946d2af9b7640ebdc2dc53756aca27223565afa8df6bed13d178027466a0a8f664fcfa9c11d9c0dea84299bc72bf46b9bcf6f8506c9b88e31395e67246802d64292e0d108b68a2e6e0da394346fa327e70c32e383e209d7a8801f9219a2daf23f770bf662969088df94b1fe9c5050791675e922f0371dec97f97a90673727c5433837cc3d5d933be525a44e339dc4454fe2721c5014a679d6c3b6fe491cd4197aa5bbdacb1f505db9d1d9aaa115eb23857f201f03217bddccc5cd21f3bb544c5c75c70cd6391aa2b0aa86f19cab63ca03ce597312a1257bf30547e88de9d47730ff371032b724472866f858e383b2b58f5ea4203245403760d1e04d098976cb0aaa1badcc1f4a0c114ec64d36f0a58b5388fc789f3fd063cc7840b89d5b3f7e4d0d1d8de786d8bd56bab33791b1e8fa7305b8c6d745b4e97cde53c38d45de661c71be03d6f5b87c2331a00db3c87db355c6c91612f349b2a64d02250507eaa7a8a3377df5e2af5345520727443161fef3811279eef0b7de7030649d926ba93ef707bad0c8a58b4d964602c40fddd52f0cad2604910b17eb34627310e234b3be4937df5ca427bc0fcbd8d75c42c40f95bfd3716247c1d62d330dbc4ead5d116e19d406cd9c537f3031cb4ef4a88626199ff1b51cc838a5873e1f1f6c47ec7289de46b12148f7d190f611e20d10566d85535ed7049bca3a29a5bb7eb17f48e059108e6fcbdd9caa2159aa515cb5d736a995f22bc7060fe3dd1dcf5df9e31ed9482ddfaa21ea8e1676c885082ebc120775df324398f7f2d2dc962f9219b410d312a350de45e5cc968e5c8747e047a98e7b35fe6babd457148b8a36a0715a1d69a7f92776648d52df25e06c8459d1a77a0efe039ec574b4b4ed6ac6794d924fc0c74ec22ad3978bfda16399cb2bc986d7450d678dc0998033bc87f4ae262c12b318c1ec7f2fba1c3a86f9d8f7a87f855c9bcb7c1b623eaefe6490ea6bf0fe1cb74f0dcbcad4f8d84ab5c1e40c599efdd627e403f7f705ba40172aab5cb52ccf4b6a51d7bdf3795b738aade36e530a0b32c26c51620135ef70a854ac0f2b29e56fe82a0f38a223eb27f3fb7e661fc76a6b65d930ad73ed597976e727cc44170a23921f5cff020121b19388a3c1faa546e8dd178753bdc30f09097b0f6e9618908938751643764f1c3afb438f87759c67c563714771118b2604f65f3dd45169bd75982550ac38ca1e6426da5183d762ffa8bd2ff59f16a45db5ab9e202421b41126c81b1b90864c4c710aa71dfd0aff7b4a34cd068901184b747a80b65d5870a7edf3b7cb6a64b552fd57ee280261efaac509de8a03912203cfe1d3fcfefcb06a2d043f02fa1044ee0144b69812b021601babd01f45b9c4b0b6bae625829ec4483cce2f9ed4c09c9008d65d2d6f6c9301fe581778dc4ffe9047a8ed20f35087bdca7cfa4bad0629f1fe3b812b0852f0397b2fbc9c728064fa185a01b7cc137cd8d8853adffd4ac76d8aab42351b75cb3e23c384d479c73aa6a8f0b2a71009e617d0c623c8a89bb494a0001b5e1d7fed8615dd964d1ade408a45dfb6c24006be7cc0d6f1e0134ead35475ea1b0998a28a0670a8b5117b247adfb82f6374b66f53b48d69dd9168aa4bbd37e31a74fe034bc8605fa5fb388781e2908393936b21bd38ded85ac4c6fceafd9d101c897a402fe2322f222763fbccadd888d8f995c7f5951be3155ee91e40129af4d5855d0a42a782b08ddc76ec5f9db6b0a30e6a400e128696efbf3dc44c2511954b2514b259b8d4936bd5f6e41d04d8fcb0c549c7e4719bf4597a7966b39174080e4c973d6e35995f915aeebb428568f26ec1b076ea88888fb87716a58afb0da3f0d106b115300bc8832d703040784b5569feb484416a8759a41c7f223ae3055d321fb1a1419da3c1785cade8b243cf4ac2b8947655c6e40edcff03ec9687e405e1de107712ae29a069f5400a826ac2f856ef5b1954c3286668a5319d4f9418326b731f0addd185f5df097d99aaec44f8ea03d6771bdf4fb1c3ed503a4b3196d97c1afd319e136fe34f6bdd795d2a5390ed6190162779748729e5b415d20f0b8da1066fc5c271680b4d16b93ee99adc8d0727a0ae1caf39446986313ba36038289083be51f4a16f56ff7fd0c28b93cd2d0b10ac1f3128f4415a12215c03f273cb7cd6d43464350f8494929ca9a3b1aea3d7fe079de03e89897f325f3dab56c0d27399c3c678a5359a84140351b0f6a9600c2acd5b34d22305b5cf273940ddee2e2c60c7e49436ec0ee7691c6836a561d76c77182d8df95d488c58cf4d08960bd20b57d7981e08c2adc5f505439e2c380f82a305de04aaf1d7a04ea1b6e32d2ef64a1e3c0efb80fb65bdf518ebf7de9f42b36c118087ea43c28068c4b6e3aaee0aeab202aed879b8b48371c168de992d02fd7c86d50dab728df47456a0cdd3047eaa76142a1c981229a8a51a3ee58a3e6ef25775b37a4feb45aca5b0f4ec218de6f1f52aec667cfeef3fa20dc31e43e3dbcc0ba56b9ad379ba1bc66cbbb028a3e9b67550dc0163481678be0dedf9dc7b5cc5129ec9c9802824e38da0dccc4eb6743924f84a4572ef0755f61ebecb520773d0ddd9c1e8ff3c1559b1d85f86d29be48510dd171409758edbbca3344e29ca9ee37628ac56303b357960dfdff9aabd701403b486631748fe937b1411d261987aa3bbcec220a6988b14dcaa804e9bd028e099642b1e006384f5107ef22f2e8288e50e928d7972eaaf823d2753cf0d2bd152651d532e2bbbcc1f2e41770ab2f5a0b37f385875cc7885b3975e57e0c2af0ee10df39983275bdc83348ed91b90cb5b5df59f68ed450e8aceea3259c30dcc99e2115243950035ca5f2a4f5bd1212a67eac86c46cbb63ec2cc8fdc58f4b51d6fe6b93d438f0ac6c915e93fc9d613b9815b469b885575fa620c2cd3dfed056a1c5324d8514b319b653b9cbc8a7798cbbd9bd9c304f97eb7489d8721c22f038a97f79f3fde6348463b952a7463e353ff96f531301e40085acf90fd08a726c1e54765c7aa9ce165c4dfd8160a8381a85e956e2b91a4b4ec90c820e2a8bf68a3340c046782476756312c9f283e5b86e7fbdc53ade4990d311629541c59bfc00d4cbee9acf326b46571d2189ea56df920d498587a92ab5c8b643814ee7b4a1d1694f0f88b174661486a4e7ab8dafc8418c231b1e6ec083474fefc2b34eb62063a8715699a048af9e8aacc8fe7c62a2862407005f3a1ea3dd8d2c62323e13306bf2c0529ed7744b0747ac2348df8baf211c81adc7d9e3afef198bb3d6c8a0dacda8254076f70a82067af9317165bb96a2b645c63d8e852912687481afc9198bbf57fbda2c6b63981f86df6eaab5a401612df46939d0acab1ed02620201d6348c873da61c460d3181882ec38d9eeaf283a21eaa6a0481741d098aa85d78e2c6c2381c87ba5675e71793f3f6be4fa17401701714e9ee396b46a37b8aee7777c52e12cc70fd20c4f8a282bfe1d5f", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB], 0x51c0}, 0x1, 0x0, 0x0, 0x20004094}, 0xc000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008844) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x4, 0x2, 0x47, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x1, 0x8, 0x3, 0x66}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) pipe(&(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) 572.02385ms ago: executing program 8 (id=1819): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101040, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0xee3, @dev={0xfe, 0x80, '\x00', 0x23}, 0xc, 0xfffffffc}, 0x80, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000440)='\b', 0x1}], 0x2}, 0x0) socket$inet(0xa, 0x801, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES16=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x71, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000100)={r8, 0x4, 0x0, 0x80000001}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001"], 0x98}}, 0x0) 516.553923ms ago: executing program 7 (id=1820): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xbe}, 0x2}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)="17", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000045c0)={0x0, 0x7fff}, &(0x7f0000004600)=0x8) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000780)="5b34307b5d5ab4d0da618c917d17d72617b51de3b058db3741c1ad288ab3d41b", 0x20}], 0x1}, 0x40000000) recvmmsg$unix(r1, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001040)=""/31, 0x1f}], 0x1}}], 0x1, 0x200, 0x0) 400.145223ms ago: executing program 6 (id=1821): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f00000002c0)={{r0}, "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"}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r1], 0x20}}, 0x0) 381.168795ms ago: executing program 6 (id=1822): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00034e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)={0x0, 0x8000, 0x39, "49c85772dc2f00b5e03f15194d4274fff214a0eaafafc62158073b4cf7330614061bd38faf147aa9758c384a71ae9b1307cce80943220d6886"}, 0x41) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0xffffffffffffff60, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@DEVLINK_ATTR_RATE_NODE_NAME]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 295.54861ms ago: executing program 7 (id=1823): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000780)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @info_request={0xf, 0x0, 0x0, 0x8001, 0x2}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) (async) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) unshare(0x10000c00) 228.364197ms ago: executing program 5 (id=1824): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000000"], 0x50) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0xd3, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000884800000000000000000000000000000000487b00b5006500000911907800000000640101019404000007077d00000000004e214e2100959078420c0000000000006f1ca0d6d722c8ec45d6bcd0c8629eaa2fb6423a6a71a5fbc4fa8d2ed2d40df2a5d7b6cbdfd73beb55d891de94927ee47e780308cbff4fdcb97fd91cfa623ad5be97083a9fce3e760fa2899a9bccfbdd587761926701993942a59830dbb6b955c7f33ab69c81a0d97c6a4f654b87b6c3d211702575440c69bbdc30e2c5874a24786293c432"], 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x18, 0x5a, 0x1, 0x0, 0x2, {0x2}, [{0x4}]}, 0x18}}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x48, 0x1, 0xfffffffc, 0x0, {0xe, 0x0, 0x6e80}, [@typed={0x8, 0x100, 0x0, 0x0, @fd=r1}, @typed={0x4, 0x2f}, @generic="e828f424d23676f0d76da4b0c2ae039f80a431516f1f339adcb2c3aa6d368a780a3591e4aff813ad1a6bbd54d69c02162c2fd638181b5e8efdba39933d9462"]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20048800) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$phonet_pipe(r3, &(0x7f0000000380)={0x23, 0x2, 0x0, 0xfa}, 0x10) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x800448d7, &(0x7f0000000180)) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$kcm(0x29, 0x7, 0x0) sendmmsg$inet(r2, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x2000c000) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r8, &(0x7f00000042c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x6, @mcast2, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f0000001800)=[@tclass={{0x14, 0x29, 0x43, 0x789}}], 0x18}}], 0x1, 0x40040) 156.592454ms ago: executing program 6 (id=1825): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080), 0x0}, 0x20) 68.204245ms ago: executing program 9 (id=1826): socket$inet6(0xa, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000100)) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00\x00'], 0x48) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r2 = socket$inet6(0x2d, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x11d, 0x20, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x24000080) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_batadv\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}}, 0x24040880) sendmsg$nl_route(r3, 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="fd7f26cdde500b93fd45d55303300000001000004afa0adf0b46dbb55e939d1f495eb91a1cea679d54bf0280230200000040feb762dae368f675f48f225c010fa6450914b331fa2313765e", @ANYRES32=0x0, @ANYBLOB="000001000000000008000f00010100000800290082b40000"], 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffe0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe19}, 0x94) 0s ago: executing program 6 (id=1827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e900320400000000000000eaebfd2607eef2", 0x27}, {&(0x7f0000000100)="051ae2ff0d8c60c2730369b7", 0xc}, {&(0x7f0000000040)="37a8a6c41e64", 0x6}, {&(0x7f0000000640)='=', 0x1}], 0x4) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='('], 0x28}, 0x1, 0x6c00}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000140)={0x2c, @broadcast, 0x4e20, 0x2, 'fo\x00', 0x8, 0x6, 0x65}, 0x2c) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x1c000}, &(0x7f0000000100)=0x8) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000280)={0x2, 0x7d, 0x2, 0x3, 0x1, 0x0, [{0x2, 0x3, 0x6}]}) kernel console output (not intermixed with test programs): ffffffffffffffda RBX: 00007f2f551c6090 RCX: 00007f2f54f8ebe9 [ 170.157715][ T8937] RDX: 0000000000000040 RSI: 0000200000000d40 RDI: 0000000000000004 [ 170.157726][ T8937] RBP: 00007f2f55d3f090 R08: 0000000000000000 R09: 0000000000000000 [ 170.157737][ T8937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.157748][ T8937] R13: 00007f2f551c6128 R14: 00007f2f551c6090 R15: 00007ffcc7e2b9d8 [ 170.157775][ T8937] [ 170.697977][ T8928] tipc: Resetting bearer [ 170.774368][ T8928] tipc: Disabling bearer [ 170.808547][ T8948] netlink: 68 bytes leftover after parsing attributes in process `syz.2.702'. [ 170.830650][ T8948] netlink: 68 bytes leftover after parsing attributes in process `syz.2.702'. [ 171.014752][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.706'. [ 171.409832][ T8971] tipc: Enabled bearer , priority 0 [ 171.448212][ T8971] syzkaller0: entered promiscuous mode [ 171.494295][ T8971] syzkaller0: entered allmulticast mode [ 171.561328][ T8971] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 171.577007][ T8977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.709'. [ 171.614773][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'. [ 171.711818][ T8976] tipc: Resetting bearer [ 171.725974][ T8977] netlink: 16 bytes leftover after parsing attributes in process `syz.0.709'. [ 171.935359][ T8976] tipc: Resetting bearer [ 171.984766][ T8976] tipc: Disabling bearer [ 172.210867][ T9004] netlink: 'syz.2.715': attribute type 11 has an invalid length. [ 172.400303][ T8999] net_ratelimit: 3 callbacks suppressed [ 172.400318][ T8999] netlink: del zone limit has 4 unknown bytes [ 172.675697][ T9025] netlink: 'syz.3.722': attribute type 10 has an invalid length. [ 172.698140][ T9025] !: entered promiscuous mode [ 172.703131][ T9025] !: entered allmulticast mode [ 172.728280][ T9025] bridge0: port 3(0!) entered blocking state [ 172.744931][ T9025] bridge0: port 3(0!) entered disabled state [ 172.911394][ T9035] FAULT_INJECTION: forcing a failure. [ 172.911394][ T9035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.951718][ T9035] CPU: 0 UID: 0 PID: 9035 Comm: syz.0.724 Not tainted syzkaller #0 PREEMPT(full) [ 172.951743][ T9035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.951754][ T9035] Call Trace: [ 172.951761][ T9035] [ 172.951768][ T9035] dump_stack_lvl+0x189/0x250 [ 172.951792][ T9035] ? __pfx____ratelimit+0x10/0x10 [ 172.951810][ T9035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.951828][ T9035] ? __pfx__printk+0x10/0x10 [ 172.951849][ T9035] ? __might_fault+0xb0/0x130 [ 172.951882][ T9035] should_fail_ex+0x414/0x560 [ 172.951908][ T9035] _copy_from_iter+0x1de/0x1790 [ 172.951934][ T9035] ? rcu_is_watching+0x15/0xb0 [ 172.951953][ T9035] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 172.951976][ T9035] ? __pfx__copy_from_iter+0x10/0x10 [ 172.951995][ T9035] ? __build_skb_around+0x257/0x3e0 [ 172.952032][ T9035] ? netlink_sendmsg+0x642/0xb30 [ 172.952047][ T9035] ? skb_put+0x11b/0x210 [ 172.952068][ T9035] netlink_sendmsg+0x6b2/0xb30 [ 172.952100][ T9035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.952121][ T9035] ? aa_sock_msg_perm+0xf1/0x1d0 [ 172.952139][ T9035] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 172.952156][ T9035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.952174][ T9035] __sock_sendmsg+0x21c/0x270 [ 172.952200][ T9035] ____sys_sendmsg+0x505/0x830 [ 172.952224][ T9035] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.952253][ T9035] ? import_iovec+0x74/0xa0 [ 172.952275][ T9035] ___sys_sendmsg+0x21f/0x2a0 [ 172.952296][ T9035] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.952352][ T9035] ? __fget_files+0x2a/0x420 [ 172.952366][ T9035] ? __fget_files+0x3a0/0x420 [ 172.952392][ T9035] __x64_sys_sendmsg+0x19b/0x260 [ 172.952414][ T9035] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 172.952442][ T9035] ? __pfx_ksys_write+0x10/0x10 [ 172.952468][ T9035] ? do_syscall_64+0xbe/0x3b0 [ 172.952490][ T9035] do_syscall_64+0xfa/0x3b0 [ 172.952505][ T9035] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.952521][ T9035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.952538][ T9035] ? clear_bhb_loop+0x60/0xb0 [ 172.952558][ T9035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.952573][ T9035] RIP: 0033:0x7f1d1058ebe9 [ 172.952589][ T9035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.952602][ T9035] RSP: 002b:00007f1d11331038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.952620][ T9035] RAX: ffffffffffffffda RBX: 00007f1d107c6090 RCX: 00007f1d1058ebe9 [ 172.952633][ T9035] RDX: 0000000000000040 RSI: 0000200000000d40 RDI: 0000000000000004 [ 172.952643][ T9035] RBP: 00007f1d11331090 R08: 0000000000000000 R09: 0000000000000000 [ 172.952653][ T9035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.952663][ T9035] R13: 00007f1d107c6128 R14: 00007f1d107c6090 R15: 00007ffedbc1dcb8 [ 172.952692][ T9035] [ 173.455607][ T9046] netlink: 'syz.3.726': attribute type 16 has an invalid length. [ 173.490089][ T9046] netlink: 'syz.3.726': attribute type 17 has an invalid length. [ 174.095444][ T9064] bridge0: entered allmulticast mode [ 174.105174][ T9064] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 174.120916][ T9064] __nla_validate_parse: 4 callbacks suppressed [ 174.120931][ T9064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.733'. [ 174.148917][ T9066] netlink: 24 bytes leftover after parsing attributes in process `syz.1.734'. [ 174.230320][ T9058] netlink: 76 bytes leftover after parsing attributes in process `syz.0.728'. [ 174.369229][ T9066] netlink: 16 bytes leftover after parsing attributes in process `syz.1.734'. [ 174.380455][ T9074] syzkaller1: entered promiscuous mode [ 174.387729][ T9074] syzkaller1: entered allmulticast mode [ 174.398189][ T9082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.736'. [ 174.423561][ T9082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.736'. [ 174.540733][ T9082] netlink: 'syz.3.736': attribute type 1 has an invalid length. [ 174.576314][ T9084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.736'. [ 174.620764][ T9084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.736'. [ 174.631717][ T9095] FAULT_INJECTION: forcing a failure. [ 174.631717][ T9095] name failslab, interval 1, probability 0, space 0, times 0 [ 174.686508][ T9095] CPU: 1 UID: 0 PID: 9095 Comm: syz.4.738 Not tainted syzkaller #0 PREEMPT(full) [ 174.686532][ T9095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 174.686542][ T9095] Call Trace: [ 174.686549][ T9095] [ 174.686556][ T9095] dump_stack_lvl+0x189/0x250 [ 174.686581][ T9095] ? __pfx____ratelimit+0x10/0x10 [ 174.686598][ T9095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.686617][ T9095] ? __pfx__printk+0x10/0x10 [ 174.686641][ T9095] ? __pfx___might_resched+0x10/0x10 [ 174.686657][ T9095] ? fs_reclaim_acquire+0x7d/0x100 [ 174.686692][ T9095] should_fail_ex+0x414/0x560 [ 174.686720][ T9095] should_failslab+0xa8/0x100 [ 174.686744][ T9095] __kmalloc_noprof+0xcb/0x4f0 [ 174.686763][ T9095] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 174.686791][ T9095] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 174.686819][ T9095] genl_family_rcv_msg_doit+0xb8/0x300 [ 174.686846][ T9095] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 174.686879][ T9095] ? apparmor_capable+0x137/0x1b0 [ 174.686901][ T9095] ? bpf_lsm_capable+0x9/0x20 [ 174.686921][ T9095] ? security_capable+0x7e/0x2e0 [ 174.686949][ T9095] genl_rcv_msg+0x60e/0x790 [ 174.686976][ T9095] ? __pfx_genl_rcv_msg+0x10/0x10 [ 174.686994][ T9095] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 174.687013][ T9095] ? __pfx_nl802154_set_llsec_params+0x10/0x10 [ 174.687025][ T9095] ? __pfx_nl802154_post_doit+0x10/0x10 [ 174.687054][ T9095] netlink_rcv_skb+0x208/0x470 [ 174.687069][ T9095] ? __lock_acquire+0xab9/0xd20 [ 174.687091][ T9095] ? __pfx_genl_rcv_msg+0x10/0x10 [ 174.687111][ T9095] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 174.687149][ T9095] ? down_read+0x1ad/0x2e0 [ 174.687171][ T9095] genl_rcv+0x28/0x40 [ 174.687189][ T9095] netlink_unicast+0x82c/0x9e0 [ 174.687221][ T9095] ? __pfx_netlink_unicast+0x10/0x10 [ 174.687245][ T9095] ? netlink_sendmsg+0x642/0xb30 [ 174.687260][ T9095] ? skb_put+0x11b/0x210 [ 174.687282][ T9095] netlink_sendmsg+0x805/0xb30 [ 174.687310][ T9095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.687330][ T9095] ? aa_sock_msg_perm+0xf1/0x1d0 [ 174.687348][ T9095] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 174.687365][ T9095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.687383][ T9095] __sock_sendmsg+0x21c/0x270 [ 174.687409][ T9095] ____sys_sendmsg+0x505/0x830 [ 174.687434][ T9095] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.687462][ T9095] ? import_iovec+0x74/0xa0 [ 174.687484][ T9095] ___sys_sendmsg+0x21f/0x2a0 [ 174.687505][ T9095] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.687567][ T9095] ? __fget_files+0x2a/0x420 [ 174.687581][ T9095] ? __fget_files+0x3a0/0x420 [ 174.687608][ T9095] __x64_sys_sendmsg+0x19b/0x260 [ 174.687630][ T9095] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.687660][ T9095] ? __pfx_ksys_write+0x10/0x10 [ 174.687692][ T9095] ? do_syscall_64+0xbe/0x3b0 [ 174.687715][ T9095] do_syscall_64+0xfa/0x3b0 [ 174.687730][ T9095] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.687746][ T9095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.687762][ T9095] ? clear_bhb_loop+0x60/0xb0 [ 174.687782][ T9095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.687797][ T9095] RIP: 0033:0x7fe6df98ebe9 [ 174.687813][ T9095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.687824][ T9095] RSP: 002b:00007fe6e0745038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.687842][ T9095] RAX: ffffffffffffffda RBX: 00007fe6dfbc6090 RCX: 00007fe6df98ebe9 [ 174.687854][ T9095] RDX: 0000000000000040 RSI: 0000200000000d40 RDI: 0000000000000004 [ 174.687864][ T9095] RBP: 00007fe6e0745090 R08: 0000000000000000 R09: 0000000000000000 [ 174.687873][ T9095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.687883][ T9095] R13: 00007fe6dfbc6128 R14: 00007fe6dfbc6090 R15: 00007ffc3b541088 [ 174.687913][ T9095] [ 175.095373][ T9082] 8021q: adding VLAN 0 to HW filter on device bond2 [ 175.134482][ T9098] netlink: 'syz.0.739': attribute type 1 has an invalid length. [ 175.301824][ T9113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.739'. [ 175.554043][ T9115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.614430][ T9129] netlink: 324 bytes leftover after parsing attributes in process `syz.2.747'. [ 175.733480][ T9135] tipc: Enabling of bearer rejected, media not registered [ 175.782043][ T9140] netlink: 'syz.3.750': attribute type 1 has an invalid length. [ 175.794740][ T9140] NCSI netlink: No device for ifindex 0 [ 175.862859][ T9144] netlink: 'syz.2.749': attribute type 9 has an invalid length. [ 175.887067][ T9143] netlink: 'syz.4.752': attribute type 11 has an invalid length. [ 175.896926][ T9143] netlink: 'syz.4.752': attribute type 4 has an invalid length. [ 175.914265][ T9144] netlink: 'syz.2.749': attribute type 7 has an invalid length. [ 175.934957][ T9144] netlink: 'syz.2.749': attribute type 8 has an invalid length. [ 177.349956][ T9211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.360831][ T9211] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.384766][ T9211] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.416736][ T9221] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 177.595650][ T9211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.736960][ T9211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.182523][ T9269] tipc: Enabled bearer , priority 0 [ 178.190899][ T9269] syzkaller0: entered promiscuous mode [ 178.196641][ T9269] syzkaller0: entered allmulticast mode [ 178.334641][ T9269] tipc: Resetting bearer [ 178.354244][ T9268] tipc: Resetting bearer [ 178.409617][ T9268] tipc: Disabling bearer [ 179.015509][ T9299] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 179.324769][ T9316] __nla_validate_parse: 23 callbacks suppressed [ 179.324786][ T9316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 179.375760][ T9317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.794'. [ 179.561286][ T9331] FAULT_INJECTION: forcing a failure. [ 179.561286][ T9331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.605183][ T9331] CPU: 1 UID: 0 PID: 9331 Comm: syz.3.798 Not tainted syzkaller #0 PREEMPT(full) [ 179.605205][ T9331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.605215][ T9331] Call Trace: [ 179.605221][ T9331] [ 179.605229][ T9331] dump_stack_lvl+0x189/0x250 [ 179.605252][ T9331] ? __pfx____ratelimit+0x10/0x10 [ 179.605270][ T9331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.605289][ T9331] ? __pfx__printk+0x10/0x10 [ 179.605322][ T9331] should_fail_ex+0x414/0x560 [ 179.605348][ T9331] _copy_to_user+0x31/0xb0 [ 179.605368][ T9331] simple_read_from_buffer+0xe1/0x170 [ 179.605395][ T9331] proc_fail_nth_read+0x1b3/0x220 [ 179.605418][ T9331] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.605437][ T9331] ? rw_verify_area+0x2a6/0x4d0 [ 179.605456][ T9331] ? __lock_acquire+0xab9/0xd20 [ 179.605476][ T9331] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.605495][ T9331] vfs_read+0x1fd/0xa30 [ 179.605514][ T9331] ? fdget_pos+0x247/0x320 [ 179.605532][ T9331] ? __pfx___mutex_lock+0x10/0x10 [ 179.605551][ T9331] ? __pfx_vfs_read+0x10/0x10 [ 179.605572][ T9331] ? __fget_files+0x2a/0x420 [ 179.605591][ T9331] ? __fget_files+0x3a0/0x420 [ 179.605603][ T9331] ? __fget_files+0x2a/0x420 [ 179.605627][ T9331] ksys_read+0x145/0x250 [ 179.605650][ T9331] ? __pfx_ksys_read+0x10/0x10 [ 179.605674][ T9331] ? do_syscall_64+0xbe/0x3b0 [ 179.605696][ T9331] do_syscall_64+0xfa/0x3b0 [ 179.605711][ T9331] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.605728][ T9331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.605744][ T9331] ? clear_bhb_loop+0x60/0xb0 [ 179.605764][ T9331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.605779][ T9331] RIP: 0033:0x7f2f54f8d5fc [ 179.605796][ T9331] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 179.605808][ T9331] RSP: 002b:00007f2f55d3f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 179.605825][ T9331] RAX: ffffffffffffffda RBX: 00007f2f551c6090 RCX: 00007f2f54f8d5fc [ 179.605836][ T9331] RDX: 000000000000000f RSI: 00007f2f55d3f0a0 RDI: 0000000000000003 [ 179.605845][ T9331] RBP: 00007f2f55d3f090 R08: 0000000000000000 R09: 0000000000000000 [ 179.605853][ T9331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.605861][ T9331] R13: 00007f2f551c6128 R14: 00007f2f551c6090 R15: 00007ffcc7e2b9d8 [ 179.605890][ T9331] [ 179.948528][ T9339] validate_nla: 3 callbacks suppressed [ 179.948546][ T9339] netlink: 'syz.0.799': attribute type 10 has an invalid length. [ 180.393748][ T9369] netlink: 20 bytes leftover after parsing attributes in process `syz.1.806'. [ 180.435888][ T9369] netlink: 100 bytes leftover after parsing attributes in process `syz.1.806'. [ 180.467131][ T9369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.806'. [ 180.593398][ T9381] tipc: Enabled bearer , priority 0 [ 180.610987][ T9381] syzkaller0: entered promiscuous mode [ 180.626534][ T9381] syzkaller0: entered allmulticast mode [ 180.661694][ T9381] tipc: Resetting bearer [ 180.681490][ T9380] tipc: Resetting bearer [ 180.742653][ T9380] tipc: Disabling bearer [ 180.819415][ T9391] netlink: 20 bytes leftover after parsing attributes in process `syz.3.815'. [ 180.931502][ T9394] netlink: 'syz.2.816': attribute type 1 has an invalid length. [ 180.985205][ T9394] bond3: entered promiscuous mode [ 180.991088][ T9394] 8021q: adding VLAN 0 to HW filter on device bond3 [ 180.999034][ T9400] netlink: 3 bytes leftover after parsing attributes in process `syz.2.816'. [ 181.015229][ T9400] batadv3: entered promiscuous mode [ 181.020857][ T9400] batadv3: entered allmulticast mode [ 181.028060][ T9400] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 181.042558][ T9400] bond3: (slave batadv3): making interface the new active one [ 181.162298][ T9400] bond3: (slave batadv3): Enslaving as an active interface with an up link [ 181.168062][ T9409] netlink: 48 bytes leftover after parsing attributes in process `syz.2.816'. [ 181.375216][ T9403] netlink: 6 bytes leftover after parsing attributes in process `syz.3.817'. [ 181.412872][ T9403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.583985][ T9420] netlink: 'syz.4.820': attribute type 1 has an invalid length. [ 181.610110][ T9420] netlink: 'syz.4.820': attribute type 4 has an invalid length. [ 181.636008][ T9420] netlink: 204 bytes leftover after parsing attributes in process `syz.4.820'. [ 181.971808][ T9445] netlink: 'syz.0.827': attribute type 5 has an invalid length. [ 182.625462][ T9465] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 182.991360][ T9479] netlink: 'syz.4.836': attribute type 50 has an invalid length. [ 183.458643][ T9500] netlink: 'syz.4.839': attribute type 1 has an invalid length. [ 183.773269][ T9507] netlink: 'syz.4.840': attribute type 13 has an invalid length. [ 183.800536][ T9507] netlink: 'syz.4.840': attribute type 17 has an invalid length. [ 184.098537][ T9520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.165144][ T9507] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.956930][ T9532] __nla_validate_parse: 7 callbacks suppressed [ 184.956948][ T9532] netlink: 20 bytes leftover after parsing attributes in process `syz.1.844'. [ 184.983899][ T9532] netlink: 20 bytes leftover after parsing attributes in process `syz.1.844'. [ 185.048027][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.844'. [ 185.066369][ T9531] netlink: 20 bytes leftover after parsing attributes in process `syz.1.844'. [ 185.201145][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'. [ 185.217759][ T9538] gtp0: entered promiscuous mode [ 185.222756][ T9538] gtp0: entered allmulticast mode [ 185.665023][ T9548] netlink: 'syz.0.849': attribute type 5 has an invalid length. [ 185.693485][ T9548] netlink: 'syz.0.849': attribute type 7 has an invalid length. [ 185.720370][ T9548] : entered promiscuous mode [ 185.725548][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.850'. [ 185.817256][ T9550] netlink: 44 bytes leftover after parsing attributes in process `syz.1.851'. [ 186.005346][ T9557] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 186.433112][ T9573] block nbd0: not configured, cannot reconfigure [ 186.475706][ T9572] tipc: Enabled bearer , priority 0 [ 186.515232][ T9572] syzkaller0: entered promiscuous mode [ 186.544991][ T9572] syzkaller0: entered allmulticast mode [ 186.571956][ T9572] tipc: Resetting bearer [ 186.633207][ T9570] tipc: Resetting bearer [ 186.730780][ T9570] tipc: Disabling bearer [ 187.292638][ T9589] netlink: 'syz.3.861': attribute type 1 has an invalid length. [ 187.300451][ T9589] netlink: 232 bytes leftover after parsing attributes in process `syz.3.861'. [ 187.309787][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.861'. [ 187.388326][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.863'. [ 187.927359][ T9614] netlink: 'syz.1.868': attribute type 13 has an invalid length. [ 187.935128][ T9614] netlink: 'syz.1.868': attribute type 17 has an invalid length. [ 188.065287][ T9435] Set syz1 is full, maxelem 65536 reached [ 188.109872][ T9614] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.155222][ T9614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.195658][ T9619] tipc: Enabling of bearer rejected, failed to enable media [ 188.582115][ T9650] tipc: Enabled bearer , priority 0 [ 188.598515][ T9650] syzkaller0: entered promiscuous mode [ 188.606065][ T9650] syzkaller0: entered allmulticast mode [ 188.748619][ T9664] tipc: Resetting bearer [ 188.893633][ T9649] tipc: Resetting bearer [ 188.923193][ T9649] tipc: Disabling bearer [ 188.950346][ T9674] pimreg: entered allmulticast mode [ 188.961579][ T9674] syz_tun: left allmulticast mode [ 188.967860][ T9674] pimreg: left allmulticast mode [ 188.973061][ T9674] dvmrp8: left allmulticast mode [ 189.015671][ T9676] netlink: 'syz.4.887': attribute type 7 has an invalid length. [ 189.215692][ T9685] nbd: must specify a device to reconfigure [ 189.240110][ T9682] xfrm1: entered promiscuous mode [ 189.245317][ T9682] xfrm1: entered allmulticast mode [ 189.306615][ T9683] bond5: entered promiscuous mode [ 189.312936][ T9683] bond5: entered allmulticast mode [ 189.321362][ T9683] 8021q: adding VLAN 0 to HW filter on device bond5 [ 189.603048][ T9701] bond3: entered promiscuous mode [ 189.608746][ T9701] bond3: entered allmulticast mode [ 189.614213][ T9701] 8021q: adding VLAN 0 to HW filter on device bond3 [ 189.675212][ T9705] netlink: 'syz.1.897': attribute type 3 has an invalid length. [ 189.770385][ T9707] tipc: Enabled bearer , priority 0 [ 189.778856][ T9707] syzkaller0: entered promiscuous mode [ 189.784360][ T9707] syzkaller0: entered allmulticast mode [ 189.798212][ T9707] tipc: Resetting bearer [ 189.808961][ T9706] tipc: Resetting bearer [ 189.863701][ T9706] tipc: Disabling bearer [ 190.459157][ T5232] udevd[5232]: worker [5887] terminated by signal 33 (Unknown signal 33) [ 190.482104][ T5232] udevd[5232]: worker [5887] failed while handling '/devices/virtual/net/bpq5' [ 190.602738][ T9739] __nla_validate_parse: 9 callbacks suppressed [ 190.602755][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.905'. [ 191.070977][ T9754] netlink: del zone limit has 4 unknown bytes [ 191.223250][ T9774] netlink: 'syz.1.914': attribute type 1 has an invalid length. [ 191.231328][ T9774] netlink: 168 bytes leftover after parsing attributes in process `syz.1.914'. [ 191.286467][ T9780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.914'. [ 191.441111][ T9783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.915'. [ 191.480269][ T9783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.915'. [ 191.493690][ T9785] tipc: Enabled bearer , priority 0 [ 191.510568][ T9783] netlink: 'syz.2.915': attribute type 5 has an invalid length. [ 191.513588][ T9789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.918'. [ 191.527573][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.919'. [ 191.565488][ T9794] team1: entered promiscuous mode [ 191.575421][ T9794] team1: entered allmulticast mode [ 191.590766][ T9785] tipc: Resetting bearer [ 191.656362][ T9784] tipc: Disabling bearer [ 191.758105][ T9804] netlink: 40 bytes leftover after parsing attributes in process `syz.1.922'. [ 191.835771][ T9804] netlink: 40 bytes leftover after parsing attributes in process `syz.1.922'. [ 191.862447][ T9804] netlink: 40 bytes leftover after parsing attributes in process `syz.1.922'. [ 192.119234][ T9821] sctp: [Deprecated]: syz.2.924 (pid 9821) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.119234][ T9821] Use struct sctp_sack_info instead [ 192.295888][ T9816] "syz.2.924" (9816) uses obsolete ecb(arc4) skcipher [ 193.024664][ T9869] vti0: entered promiscuous mode [ 193.226357][ T9881] netlink: 'syz.4.940': attribute type 15 has an invalid length. [ 193.296356][ T9881] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 193.306603][ T9884] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 193.474371][ T9881] bond0: (slave bond_slave_0): Releasing backup interface [ 193.506150][ T9881] bond0: (slave bond_slave_1): Releasing backup interface [ 193.532178][ T9881] team0: Port device team_slave_0 removed [ 193.542087][ T9881] team0: Port device team_slave_1 removed [ 193.543319][ T9898] openvswitch: netlink: Missing valid actions attribute. [ 193.555258][ T9898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.561017][ T9881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.618587][ T9881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.661934][ T9881] bond3: (slave geneve2): Releasing active interface [ 193.712563][ T9894] macsec1: entered promiscuous mode [ 193.743457][ T9894] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 193.751393][ T9894] macsec1: entered allmulticast mode [ 193.757995][ T9894] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 193.796694][ T9899] syzkaller1: entered promiscuous mode [ 193.802339][ T9899] syzkaller1: entered allmulticast mode [ 194.651638][ T9957] netlink: 'syz.4.958': attribute type 9 has an invalid length. [ 194.664221][ T9954] netlink: 'syz.3.959': attribute type 8 has an invalid length. [ 194.735478][ T9956] syzkaller0: entered promiscuous mode [ 194.744788][ T9956] syzkaller0: entered allmulticast mode [ 194.952128][ T30] audit: type=1800 audit(1756642130.249:7): pid=9965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.962" name="memory.events" dev="tmpfs" ino=1007 res=0 errno=0 [ 195.181176][ T9985] netlink: 'syz.1.963': attribute type 2 has an invalid length. [ 195.256611][ T9985] : entered promiscuous mode [ 195.732840][T10016] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 195.845303][T10027] tipc: Enabled bearer , priority 0 [ 195.871617][T10027] syzkaller0: entered promiscuous mode [ 195.878306][T10027] syzkaller0: entered allmulticast mode [ 195.892779][T10027] tipc: Resetting bearer [ 195.926126][T10025] tipc: Resetting bearer [ 195.992484][T10025] tipc: Disabling bearer [ 196.151994][T10038] netlink: 'syz.4.980': attribute type 3 has an invalid length. [ 196.263045][T10045] __nla_validate_parse: 25 callbacks suppressed [ 196.263063][T10045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.983'. [ 196.355497][T10045] netlink: 24 bytes leftover after parsing attributes in process `syz.1.983'. [ 196.421735][T10064] netlink: 56 bytes leftover after parsing attributes in process `syz.4.984'. [ 196.530472][T10077] netlink: 56 bytes leftover after parsing attributes in process `syz.1.987'. [ 196.564308][T10077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.987'. [ 196.776980][T10088] netlink: 'syz.4.988': attribute type 11 has an invalid length. [ 196.791349][T10090] syzkaller1: entered promiscuous mode [ 196.802026][T10090] syzkaller1: entered allmulticast mode [ 196.813847][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.988'. [ 196.823274][T10088] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 196.833962][T10088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.968861][T10096] netlink: 'syz.2.992': attribute type 10 has an invalid length. [ 196.977024][T10096] netlink: 40 bytes leftover after parsing attributes in process `syz.2.992'. [ 196.996610][T10096] team0: Port device geneve0 added [ 197.010843][T10061] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.044934][T10061] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.069231][T10061] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.084183][T10061] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.177919][T10108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.997'. [ 197.268904][T10113] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.293448][T10113] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.309305][T10120] netlink: 124 bytes leftover after parsing attributes in process `syz.1.999'. [ 197.391561][T10121] netlink: 'syz.2.996': attribute type 10 has an invalid length. [ 197.404031][T10121] bond0: (slave wlan1): Opening slave failed [ 197.465341][T10113] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.476901][T10113] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.491368][T10132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1002'. [ 197.544906][T10113] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.555590][T10113] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.629421][T10137] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 197.663172][T10113] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.702556][T10113] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.746117][T10139] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 198.086228][ T7431] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.101735][ T7431] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.196537][T10168] netlink: 'syz.4.1011': attribute type 1 has an invalid length. [ 198.205042][ T7431] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.221557][ T7431] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.231532][ T7431] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.260413][ T7431] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.303336][ T7431] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.325488][ T7431] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.426916][T10175] netlink: zone id is out of range [ 198.437333][T10175] netlink: zone id is out of range [ 198.456076][T10175] netlink: zone id is out of range [ 198.461228][T10175] netlink: zone id is out of range [ 198.511372][T10175] netlink: zone id is out of range [ 198.547026][T10175] netlink: zone id is out of range [ 198.552539][T10175] netlink: zone id is out of range [ 198.570155][T10175] netlink: zone id is out of range [ 198.575435][T10175] netlink: zone id is out of range [ 198.582556][T10175] netlink: zone id is out of range [ 198.597820][T10175] netlink: zone id is out of range [ 198.603303][T10175] netlink: zone id is out of range [ 198.619259][T10175] netlink: zone id is out of range [ 198.635240][T10175] netlink: zone id is out of range [ 198.666462][T10175] netlink: zone id is out of range [ 200.534379][T10275] gretap0: entered promiscuous mode [ 200.558633][T10275] gretap0: left promiscuous mode [ 200.864101][T10295] netlink: 'syz.1.1034': attribute type 2 has an invalid length. [ 201.045167][T10295] : entered promiscuous mode [ 201.185254][T10305] tipc: Enabled bearer , priority 0 [ 201.268046][T10314] netlink: 'syz.4.1036': attribute type 13 has an invalid length. [ 201.309242][T10304] tipc: Disabling bearer [ 201.316476][T10314] netlink: 'syz.4.1036': attribute type 17 has an invalid length. [ 201.489581][T10314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.063602][T10310] __nla_validate_parse: 8 callbacks suppressed [ 202.063619][T10310] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1037'. [ 202.592529][T10342] netlink: 'syz.3.1044': attribute type 3 has an invalid length. [ 202.703300][T10342] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 202.791830][T10346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1045'. [ 202.840852][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1046'. [ 202.870222][T10346] netlink: 'syz.4.1045': attribute type 1 has an invalid length. [ 203.183703][T10361] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1049'. [ 203.375424][T10358] netlink: 'syz.0.1048': attribute type 21 has an invalid length. [ 203.454177][T10358] ipvlan2: entered promiscuous mode [ 203.473164][T10358] bridge0: port 1(ipvlan2) entered blocking state [ 203.522540][T10358] bridge0: port 1(ipvlan2) entered disabled state [ 203.538524][T10358] ipvlan2: entered allmulticast mode [ 203.575990][T10358] gretap0: entered allmulticast mode [ 203.615490][T10358] ipvlan2: left allmulticast mode [ 203.625227][T10358] gretap0: left allmulticast mode [ 203.644148][T10381] net_ratelimit: 328 callbacks suppressed [ 203.644164][T10381] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 203.760512][T10383] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1055'. [ 203.822678][T10387] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 203.839665][T10385] tipc: Enabled bearer , priority 0 [ 203.865152][T10385] syzkaller0: entered promiscuous mode [ 203.876219][T10385] syzkaller0: entered allmulticast mode [ 203.906002][T10385] tipc: Resetting bearer [ 203.936744][T10384] tipc: Resetting bearer [ 203.965105][T10384] tipc: Disabling bearer [ 204.076048][T10395] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1059'. [ 204.085041][T10395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1059'. [ 204.127116][T10395] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1059'. [ 204.281125][T10403] syz_tun: entered allmulticast mode [ 204.310892][T10402] dvmrp8: entered allmulticast mode [ 204.396272][T10403] netlink: 'syz.2.1060': attribute type 23 has an invalid length. [ 204.817787][T10401] syz_tun: left allmulticast mode [ 204.823431][T10401] dvmrp8: left allmulticast mode [ 205.149822][T10426] tipc: Started in network mode [ 205.154895][T10426] tipc: Node identity 5ad0b823aaea, cluster identity 4711 [ 205.163649][T10426] tipc: Enabled bearer , priority 0 [ 205.184111][T10429] syzkaller0: entered promiscuous mode [ 205.190253][T10429] syzkaller0: entered allmulticast mode [ 205.216462][T10440] netlink: 'syz.2.1068': attribute type 1 has an invalid length. [ 205.228857][T10440] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1068'. [ 205.345184][T10429] tipc: Resetting bearer [ 205.455063][T10447] tipc: Enabled bearer , priority 0 [ 205.501048][T10447] syzkaller0: entered promiscuous mode [ 205.510633][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1072'. [ 205.513819][T10447] syzkaller0: entered allmulticast mode [ 205.555351][T10451] netlink: 'syz.4.1072': attribute type 1 has an invalid length. [ 205.565191][T10451] netlink: 'syz.4.1072': attribute type 2 has an invalid length. [ 205.577574][T10455] syzkaller1: entered promiscuous mode [ 205.583054][T10455] syzkaller1: entered allmulticast mode [ 205.610946][T10447] tipc: Resetting bearer [ 205.637880][T10444] tipc: Resetting bearer [ 205.664313][T10444] tipc: Disabling bearer [ 205.970402][T10468] syzkaller0: entered promiscuous mode [ 205.976886][T10468] syzkaller0: entered allmulticast mode [ 206.226326][ T7601] tipc: Node number set to 4030380067 [ 206.483983][T10481] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 206.484876][ T7603] IPVS: starting estimator thread 0... [ 206.591081][T10483] IPVS: using max 31 ests per chain, 74400 per kthread [ 207.850509][T10510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1089'. [ 207.895964][T10510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1089'. [ 208.001635][T10516] tipc: Enabling of bearer rejected, already enabled [ 208.151127][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1094'. [ 208.212598][T10522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'. [ 208.265336][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'. [ 208.305595][T10527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1094'. [ 208.422661][T10535] netlink: 'syz.1.1098': attribute type 10 has an invalid length. [ 208.505481][T10534] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1098'. [ 208.547802][T10535] team0: Cannot enslave team device to itself [ 208.713051][T10545] netlink: 'syz.0.1100': attribute type 4 has an invalid length. [ 208.775366][T10557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1100'. [ 208.905395][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1100'. [ 209.065225][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1105'. [ 209.549272][T10595] veth5: entered allmulticast mode [ 209.557583][T10598] netlink: 'syz.1.1113': attribute type 27 has an invalid length. [ 209.617647][T10596] tipc: Enabled bearer , priority 0 [ 209.640536][T10596] syzkaller0: entered promiscuous mode [ 209.651775][T10596] syzkaller0: entered allmulticast mode [ 209.700030][T10596] tipc: Resetting bearer [ 209.719802][T10593] tipc: Resetting bearer [ 209.759153][T10593] tipc: Disabling bearer [ 209.974100][T10625] syzkaller1: entered allmulticast mode [ 210.421214][T10628] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 210.430800][T10628] bond0 (unregistering): Released all slaves [ 210.453438][T10635] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 210.463800][T10635] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 210.495238][T10640] dvmrp1: entered allmulticast mode [ 210.519246][T10641] dvmrp1: left allmulticast mode [ 210.617815][T10645] ip6gre1: entered allmulticast mode [ 210.638180][T10647] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) ! [ 211.100705][T10667] tipc: Enabled bearer , priority 0 [ 211.111482][T10667] syzkaller0: entered promiscuous mode [ 211.124423][T10667] syzkaller0: entered allmulticast mode [ 211.194700][T10667] tipc: Resetting bearer [ 211.280431][ T7603] IPVS: starting estimator thread 0... [ 211.304597][T10666] tipc: Resetting bearer [ 211.351868][T10666] tipc: Disabling bearer [ 211.376123][T10681] IPVS: using max 27 ests per chain, 64800 per kthread [ 211.592837][T10693] netlink: 'syz.3.1139': attribute type 10 has an invalid length. [ 211.635690][T10695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.346994][T10729] C: renamed from team_slave_0 [ 212.382563][T10729] netlink: 'syz.1.1148': attribute type 3 has an invalid length. [ 212.403554][T10729] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 212.447625][T10731] vlan2: entered promiscuous mode [ 212.452761][T10731] gretap0: entered promiscuous mode [ 213.004904][ T30] audit: type=1800 audit(1756642148.309:8): pid=10753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1155" name="memory.events" dev="tmpfs" ino=1148 res=0 errno=0 [ 213.102438][ T30] audit: type=1804 audit(1756642148.409:9): pid=10754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1155" name="/newroot/221/memory.events" dev="tmpfs" ino=1148 res=1 errno=0 [ 213.940181][T10778] __nla_validate_parse: 65 callbacks suppressed [ 213.940199][T10778] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1160'. [ 214.828171][T10809] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1171'. [ 215.478798][T10839] netlink: 'syz.3.1178': attribute type 1 has an invalid length. [ 215.523356][T10839] gtp1: entered promiscuous mode [ 215.786886][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1181'. [ 215.957968][T10856] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1182'. [ 216.028803][T10859] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 216.134298][T10862] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 216.426527][T10885] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1191'. [ 216.488820][T10892] netlink: 'syz.1.1191': attribute type 10 has an invalid length. [ 216.507140][T10892] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 216.667862][T10905] sctp: [Deprecated]: syz.3.1196 (pid 10905) Use of int in max_burst socket option deprecated. [ 216.667862][T10905] Use struct sctp_assoc_value instead [ 217.210924][T10927] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1200'. [ 217.716305][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1203'. [ 217.945585][T10957] netlink: 'syz.1.1207': attribute type 6 has an invalid length. [ 217.963016][T10957] netlink: 'syz.1.1207': attribute type 12 has an invalid length. [ 217.974571][T10957] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1207'. [ 218.222621][T10966] netlink: 'syz.4.1209': attribute type 3 has an invalid length. [ 218.232297][T10970] netlink: 'syz.2.1211': attribute type 3 has an invalid length. [ 218.256575][T10970] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1211'. [ 218.274855][T10973] netlink: 'syz.4.1209': attribute type 3 has an invalid length. [ 218.426152][T10984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.541860][T10983] tipc: Enabled bearer , priority 0 [ 218.623737][T10988] tipc: Disabling bearer [ 219.033462][T10993] netlink: 'syz.3.1217': attribute type 10 has an invalid length. [ 219.153301][T11011] netlink: 'syz.1.1221': attribute type 10 has an invalid length. [ 219.326029][T11017] netlink: 'syz.1.1224': attribute type 1 has an invalid length. [ 219.366156][T11017] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1224'. [ 219.375393][T11022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1226'. [ 219.396196][T11017] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1224'. [ 219.440330][T11017] tipc: Enabled bearer , priority 0 [ 219.483447][T11017] syzkaller0: entered promiscuous mode [ 219.505940][T11017] syzkaller0: entered allmulticast mode [ 219.571663][T11017] syzkaller0: mtu less than device minimum [ 219.601466][T11016] tipc: Resetting bearer [ 219.672351][T11016] tipc: Disabling bearer [ 219.766649][T11047] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1229'. [ 220.223835][T11074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1239'. [ 222.962206][T11077] tipc: Enabled bearer , priority 14 [ 223.233276][T11092] openvswitch: netlink: IPv6 tunnel dst address is zero [ 223.423795][T11100] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1243'. [ 223.427588][T11106] tipc: Enabled bearer , priority 14 [ 223.435055][T11100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1243'. [ 223.668791][T11114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.943727][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1253'. [ 223.958736][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1253'. [ 223.971136][T11122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.990827][T11125] lo speed is unknown, defaulting to 1000 [ 223.991424][T11123] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1253'. [ 224.004048][T11125] lo speed is unknown, defaulting to 1000 [ 224.013167][T11125] lo speed is unknown, defaulting to 1000 [ 224.026218][T11127] validate_nla: 2 callbacks suppressed [ 224.026232][T11127] netlink: 'syz.4.1254': attribute type 7 has an invalid length. [ 224.054364][T11125] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 224.086536][ T7601] tipc: Node number set to 2522701533 [ 224.094858][T11125] lo speed is unknown, defaulting to 1000 [ 224.109921][T11125] lo speed is unknown, defaulting to 1000 [ 224.119756][T11125] lo speed is unknown, defaulting to 1000 [ 224.125318][T11127] netlink: 'syz.4.1254': attribute type 4 has an invalid length. [ 224.129267][T11125] lo speed is unknown, defaulting to 1000 [ 224.142710][T11125] lo speed is unknown, defaulting to 1000 [ 224.351052][T11136] vlan1: entered allmulticast mode [ 224.383306][T11136] dummy0: entered allmulticast mode [ 224.392394][T11141] delete_channel: no stack [ 224.486614][T11141] __nla_validate_parse: 1 callbacks suppressed [ 224.486632][T11141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1258'. [ 224.820490][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1267'. [ 224.874067][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1266'. [ 224.910805][T11167] team1: entered promiscuous mode [ 224.922679][T11167] team1: entered allmulticast mode [ 224.930960][T11167] 8021q: adding VLAN 0 to HW filter on device team1 [ 225.228740][T11193] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1272'. [ 225.642770][T11219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1282'. [ 225.714427][T11219] vlan2: entered promiscuous mode [ 225.728328][T11219] macvtap0: entered promiscuous mode [ 225.759216][T11216] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 225.764829][T11227] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1284'. [ 225.772386][T11216] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 225.792860][T11227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1284'. [ 225.982153][T11229] lo speed is unknown, defaulting to 1000 [ 226.602265][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1290'. [ 226.615715][T11243] tipc: Enabling of bearer rejected, failed to enable media [ 226.677910][T11252] lo speed is unknown, defaulting to 1000 [ 226.744727][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1293'. [ 227.046153][T11274] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1298'. [ 227.114452][T11263] netlink: 'syz.3.1296': attribute type 12 has an invalid length. [ 228.262379][T11321] macvlan2: entered promiscuous mode [ 228.615430][T11340] tipc: Enabled bearer , priority 0 [ 228.641192][T11339] syzkaller0: entered promiscuous mode [ 228.655212][T11339] syzkaller0: entered allmulticast mode [ 228.682022][T11340] tipc: Resetting bearer [ 228.710661][T11338] tipc: Resetting bearer [ 228.749671][T11338] tipc: Disabling bearer [ 228.820773][T11347] lo speed is unknown, defaulting to 1000 [ 229.713301][T11380] __nla_validate_parse: 4 callbacks suppressed [ 229.713319][T11380] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1328'. [ 229.877188][T11404] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 229.888593][T11406] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1333'. [ 229.941707][T11380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1328'. [ 230.372375][T11423] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 230.379705][T11423] IPv6: NLM_F_CREATE should be set when creating new route [ 230.386993][T11423] IPv6: NLM_F_CREATE should be set when creating new route [ 230.398882][T11423] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 230.433069][T11412] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1336'. [ 230.504101][T11427] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1339'. [ 230.975259][T11441] lo speed is unknown, defaulting to 1000 [ 231.119668][T11449] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1347'. [ 231.163480][T11449] tipc: Enabled bearer , priority 10 [ 231.252710][T11454] netlink: 'syz.0.1349': attribute type 3 has an invalid length. [ 231.267158][T11454] syz_tun: entered allmulticast mode [ 231.274685][T11454] siw: device registration error -23 [ 231.338923][T11454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.633004][T11477] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1353'. [ 231.812762][T11471] pim6reg: entered allmulticast mode [ 231.835026][T11453] syz_tun: left allmulticast mode [ 232.107178][T11492] netlink: 'syz.0.1357': attribute type 13 has an invalid length. [ 232.115951][T11492] netlink: 'syz.0.1357': attribute type 17 has an invalid length. [ 232.148078][T11492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.263448][T11498] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072065443590) [ 232.280864][T11498] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 232.699425][T11523] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1367'. [ 232.735176][T11520] lo speed is unknown, defaulting to 1000 [ 232.838000][ T7432] nci: nci_rx_work: unknown MT 0x1 [ 233.201363][T11556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1375'. [ 233.246012][T11550] lo speed is unknown, defaulting to 1000 [ 233.374512][T11550] syzkaller0: entered promiscuous mode [ 233.380269][T11550] syzkaller0: entered allmulticast mode [ 233.513865][T11561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.107547][T11593] netlink: 'syz.1.1386': attribute type 8 has an invalid length. [ 234.284427][T11605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1390'. [ 234.962977][T11650] __nla_validate_parse: 3 callbacks suppressed [ 234.962996][T11650] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1404'. [ 235.002741][T11650] netlink: 'syz.4.1404': attribute type 7 has an invalid length. [ 235.015282][T11650] netlink: 'syz.4.1404': attribute type 8 has an invalid length. [ 235.032655][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1404'. [ 235.069236][T11650] syz_tun: entered promiscuous mode [ 235.083468][T11650] gretap0: entered promiscuous mode [ 235.102051][T11650] syz_tun: left promiscuous mode [ 235.111443][T11650] gretap0: left promiscuous mode [ 235.479726][T11675] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1411'. [ 235.591946][T11684] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 235.755274][T11690] netlink: 'syz.4.1409': attribute type 1 has an invalid length. [ 235.800828][T11690] netlink: 'syz.4.1409': attribute type 1 has an invalid length. [ 235.856420][T11690] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1409'. [ 235.894459][T11694] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1416'. [ 236.022610][T11698] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1418'. [ 236.060026][T11698] netem: unknown loss type 12 [ 236.076184][T11698] netem: change failed [ 236.152132][T11709] pim6reg: entered allmulticast mode [ 236.249595][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1424'. [ 236.317585][T11723] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1425'. [ 236.360481][T11722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1423'. [ 236.369686][T11727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1423'. [ 236.441086][T11735] FAULT_INJECTION: forcing a failure. [ 236.441086][T11735] name failslab, interval 1, probability 0, space 0, times 0 [ 236.454063][T11735] CPU: 0 UID: 0 PID: 11735 Comm: syz.3.1429 Not tainted syzkaller #0 PREEMPT(full) [ 236.454109][T11735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 236.454132][T11735] Call Trace: [ 236.454140][T11735] [ 236.454148][T11735] dump_stack_lvl+0x189/0x250 [ 236.454174][T11735] ? __pfx____ratelimit+0x10/0x10 [ 236.454191][T11735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.454211][T11735] ? __pfx__printk+0x10/0x10 [ 236.454235][T11735] ? __lock_acquire+0xab9/0xd20 [ 236.454267][T11735] should_fail_ex+0x414/0x560 [ 236.454294][T11735] should_failslab+0xa8/0x100 [ 236.454319][T11735] kmem_cache_alloc_noprof+0x73/0x3c0 [ 236.454340][T11735] ? sctp_get_port_local+0x6d3/0x1680 [ 236.454365][T11735] sctp_get_port_local+0x6d3/0x1680 [ 236.454398][T11735] ? __pfx_sctp_get_port_local+0x10/0x10 [ 236.454421][T11735] ? sctp_bind_addr_match+0x28b/0x2b0 [ 236.454443][T11735] sctp_do_bind+0x4ea/0x940 [ 236.454476][T11735] sctp_connect_new_asoc+0x25c/0x690 [ 236.454505][T11735] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 236.454522][T11735] ? __local_bh_enable_ip+0x12d/0x1c0 [ 236.454548][T11735] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 236.454565][T11735] ? security_sctp_bind_connect+0x7e/0x2e0 [ 236.454587][T11735] sctp_sendmsg+0x155c/0x2810 [ 236.454615][T11735] ? __pfx_sctp_sendmsg+0x10/0x10 [ 236.454634][T11735] ? aa_sk_perm+0x81e/0x950 [ 236.454658][T11735] ? __pfx_aa_sk_perm+0x10/0x10 [ 236.454682][T11735] ? sock_rps_record_flow+0x19/0x410 [ 236.454707][T11735] ? inet_sendmsg+0x2f4/0x370 [ 236.454729][T11735] __sock_sendmsg+0x19c/0x270 [ 236.454754][T11735] __sys_sendto+0x3bd/0x520 [ 236.454773][T11735] ? __pfx___sys_sendto+0x10/0x10 [ 236.454787][T11735] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 236.454816][T11735] ? __fget_files+0x3a0/0x420 [ 236.454843][T11735] ? ksys_write+0x22a/0x250 [ 236.454865][T11735] ? __pfx_ksys_write+0x10/0x10 [ 236.454881][T11735] ? rcu_is_watching+0x15/0xb0 [ 236.454901][T11735] __x64_sys_sendto+0xde/0x100 [ 236.454921][T11735] do_syscall_64+0xfa/0x3b0 [ 236.454935][T11735] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.454951][T11735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.454967][T11735] ? clear_bhb_loop+0x60/0xb0 [ 236.454986][T11735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.455002][T11735] RIP: 0033:0x7f2f54f8ebe9 [ 236.455018][T11735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.455031][T11735] RSP: 002b:00007f2f55d60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 236.455049][T11735] RAX: ffffffffffffffda RBX: 00007f2f551c5fa0 RCX: 00007f2f54f8ebe9 [ 236.455061][T11735] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 236.455072][T11735] RBP: 00007f2f55d60090 R08: 000020000005ffe4 R09: 000000000000001c [ 236.455083][T11735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.455092][T11735] R13: 00007f2f551c6038 R14: 00007f2f551c5fa0 R15: 00007ffcc7e2b9d8 [ 236.455122][T11735] [ 237.089941][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.113756][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.135239][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.196768][ T7428] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.404617][T11769] tipc: Enabling of bearer rejected, already enabled [ 237.627754][T11779] netlink: 'syz.3.1441': attribute type 2 has an invalid length. [ 237.636309][T11779] netlink: 'syz.3.1441': attribute type 8 has an invalid length. [ 238.144007][T11794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.500879][T11824] gtp0: entered promiscuous mode [ 238.686039][T11835] netlink: 'syz.1.1458': attribute type 7 has an invalid length. [ 238.944843][T11846] netlink: 'syz.2.1461': attribute type 8 has an invalid length. [ 239.155614][T11851] tipc: Enabling of bearer rejected, failed to enable media [ 239.402118][T11866] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.494741][T11866] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.580847][T11866] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.642584][T11870] lo speed is unknown, defaulting to 1000 [ 239.661029][T11866] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.972323][ T7428] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.995412][ T7428] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.005541][T11879] tipc: Enabled bearer , priority 0 [ 240.051499][ T7428] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.068441][ T7428] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.173637][T11892] __nla_validate_parse: 16 callbacks suppressed [ 240.173655][T11892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1473'. [ 240.192562][T11879] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1471'. [ 240.219182][T11891] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1473'. [ 240.279804][ T7603] IPVS: starting estimator thread 0... [ 240.369813][T11897] IPVS: using max 29 ests per chain, 69600 per kthread [ 240.390406][T11902] FAULT_INJECTION: forcing a failure. [ 240.390406][T11902] name failslab, interval 1, probability 0, space 0, times 0 [ 240.429510][T11902] CPU: 1 UID: 0 PID: 11902 Comm: syz.4.1476 Not tainted syzkaller #0 PREEMPT(full) [ 240.429534][T11902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 240.429545][T11902] Call Trace: [ 240.429552][T11902] [ 240.429560][T11902] dump_stack_lvl+0x189/0x250 [ 240.429584][T11902] ? __pfx____ratelimit+0x10/0x10 [ 240.429602][T11902] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.429620][T11902] ? __pfx__printk+0x10/0x10 [ 240.429647][T11902] ? __pfx___might_resched+0x10/0x10 [ 240.429661][T11902] ? fs_reclaim_acquire+0x7d/0x100 [ 240.429687][T11902] should_fail_ex+0x414/0x560 [ 240.429713][T11902] should_failslab+0xa8/0x100 [ 240.429736][T11902] __kmalloc_cache_noprof+0x70/0x3d0 [ 240.429756][T11902] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 240.429784][T11902] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 240.429816][T11902] sctp_association_new+0x15d3/0x25f0 [ 240.429852][T11902] sctp_connect_new_asoc+0x2c5/0x690 [ 240.429874][T11902] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 240.429894][T11902] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 240.429912][T11902] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 240.429927][T11902] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 240.429945][T11902] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 240.429964][T11902] ? security_sctp_bind_connect+0x7e/0x2e0 [ 240.429988][T11902] sctp_sendmsg+0x155c/0x2810 [ 240.430019][T11902] ? __pfx_sctp_sendmsg+0x10/0x10 [ 240.430041][T11902] ? aa_sk_perm+0x81e/0x950 [ 240.430073][T11902] ? __pfx_aa_sk_perm+0x10/0x10 [ 240.430094][T11902] ? sock_rps_record_flow+0x19/0x410 [ 240.430119][T11902] ? inet_sendmsg+0x2f4/0x370 [ 240.430138][T11902] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 240.430160][T11902] __sock_sendmsg+0x19c/0x270 [ 240.430186][T11902] __sys_sendto+0x3bd/0x520 [ 240.430206][T11902] ? __pfx___sys_sendto+0x10/0x10 [ 240.430221][T11902] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 240.430252][T11902] ? __fget_files+0x3a0/0x420 [ 240.430278][T11902] ? ksys_write+0x22a/0x250 [ 240.430301][T11902] ? __pfx_ksys_write+0x10/0x10 [ 240.430318][T11902] ? rcu_is_watching+0x15/0xb0 [ 240.430339][T11902] __x64_sys_sendto+0xde/0x100 [ 240.430360][T11902] do_syscall_64+0xfa/0x3b0 [ 240.430376][T11902] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.430391][T11902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.430407][T11902] ? clear_bhb_loop+0x60/0xb0 [ 240.430428][T11902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.430443][T11902] RIP: 0033:0x7fe6df98ebe9 [ 240.430459][T11902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.430474][T11902] RSP: 002b:00007fe6e0766038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 240.430493][T11902] RAX: ffffffffffffffda RBX: 00007fe6dfbc5fa0 RCX: 00007fe6df98ebe9 [ 240.430505][T11902] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 240.430516][T11902] RBP: 00007fe6e0766090 R08: 000020000005ffe4 R09: 000000000000001c [ 240.430528][T11902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.430538][T11902] R13: 00007fe6dfbc6038 R14: 00007fe6dfbc5fa0 R15: 00007ffc3b541088 [ 240.430566][T11902] [ 240.751651][T11879] tipc: Disabling bearer [ 240.836532][T11911] tipc: Enabled bearer , priority 0 [ 240.860050][T11912] netlink: 'syz.1.1478': attribute type 1 has an invalid length. [ 240.911068][T11906] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1477'. [ 240.964125][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1477'. [ 240.979301][T11911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1477'. [ 240.982233][T11905] tipc: Resetting bearer [ 240.989691][T11911] netlink: 'syz.0.1477': attribute type 6 has an invalid length. [ 241.553710][T11953] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1490'. [ 241.671256][T11959] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1493'. [ 241.885036][T11970] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 241.957689][ T30] audit: type=1800 audit(1756642177.269:10): pid=11964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1494" name="memory.events" dev="tmpfs" ino=1487 res=0 errno=0 [ 242.376683][T11982] syzkaller1: entered promiscuous mode [ 242.382193][T11982] syzkaller1: entered allmulticast mode [ 242.457797][T11985] macsec0: entered promiscuous mode [ 242.463162][T11985] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 242.471645][T11985] macsec0: entered allmulticast mode [ 242.477432][T11985] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 242.496422][T11987] tipc: Enabling of bearer rejected, already enabled [ 242.655688][T11997] netlink: 'syz.4.1503': attribute type 21 has an invalid length. [ 242.832303][T12007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1505'. [ 242.858869][T12007] netlink: 'syz.3.1505': attribute type 1 has an invalid length. [ 242.881580][T12007] netlink: 'syz.3.1505': attribute type 4 has an invalid length. [ 242.903359][T12007] netlink: 15538 bytes leftover after parsing attributes in process `syz.3.1505'. [ 242.920560][T12008] netlink: 'syz.3.1505': attribute type 3 has an invalid length. [ 243.077529][T12018] tipc: Enabled bearer , priority 0 [ 243.091186][T12018] syzkaller0: entered promiscuous mode [ 243.100360][T12018] syzkaller0: entered allmulticast mode [ 243.157232][T12018] tipc: Resetting bearer [ 243.189909][T12017] tipc: Resetting bearer [ 243.298711][T12017] tipc: Disabling bearer [ 243.452601][T12042] tipc: Enabling of bearer rejected, failed to enable media [ 243.493533][T12042] nbd: must specify a size in bytes for the device [ 243.508952][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.524777][T12042] nbd: must specify a size in bytes for the device [ 243.546084][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.569662][T12042] nbd: must specify a size in bytes for the device [ 243.592542][T12049] netlink: 'syz.4.1519': attribute type 28 has an invalid length. [ 243.607485][T12038] tun0: tun_chr_ioctl cmd 1074025675 [ 243.613485][T12042] nbd: must specify a size in bytes for the device [ 243.621606][T12038] tun0: persist enabled [ 243.640958][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.656060][T12042] nbd: must specify a size in bytes for the device [ 243.663071][T12042] nbd: must specify a size in bytes for the device [ 243.691523][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.718495][T12038] tun0: tun_chr_ioctl cmd 1074025675 [ 243.729837][T12042] nbd: must specify a size in bytes for the device [ 243.733402][T12038] tun0: persist disabled [ 243.750272][T12042] nbd: must specify a size in bytes for the device [ 243.776355][T12042] nbd: must specify a size in bytes for the device [ 243.783131][T12042] nbd: must specify a size in bytes for the device [ 243.845581][T12042] nbd: must specify a size in bytes for the device [ 244.195949][T12042] nbd: must specify a size in bytes for the device [ 260.754978][ T5182] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 260.768517][ T5182] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 260.781718][ T5182] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 260.816113][ T5182] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 260.827372][ T5182] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 260.862023][ T5874] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 260.917623][ T5874] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 260.931949][ T5874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 260.964308][ T5874] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 260.975859][ T5874] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 261.021265][ T5182] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 261.032090][ T5182] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 261.041183][ T5182] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 261.049447][ T5182] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 261.059342][ T5182] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 261.131569][ T5182] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 261.141477][ T5182] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 261.154153][ T5886] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 261.172949][ T5886] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 261.177899][ T5877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 261.180903][ T5886] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 261.189881][ T5877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 261.203282][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 261.212812][ T5877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 261.224107][ T5877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 261.299353][ T5182] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 261.317638][ T5182] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 261.325593][ T5182] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 261.338623][ T5182] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 261.351577][ T5182] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 261.403143][ T1112] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.476617][T12077] lo speed is unknown, defaulting to 1000 [ 261.534439][ T1112] netdevsim netdevsim3 netdevsim2 (unregistering): left allmulticast mode [ 261.543340][ T1112] netdevsim netdevsim3 netdevsim2 (unregistering): left promiscuous mode [ 261.553001][ T1112] bridge0: port 4(netdevsim2) entered disabled state [ 261.563090][ T1112] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.584286][T12071] lo speed is unknown, defaulting to 1000 [ 261.611148][T12076] lo speed is unknown, defaulting to 1000 [ 261.628067][ T1112] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.662450][T12068] lo speed is unknown, defaulting to 1000 [ 261.717283][T12080] lo speed is unknown, defaulting to 1000 [ 261.748187][ T1112] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.053345][T12077] chnl_net:caif_netlink_parms(): no params data found [ 262.283339][T12080] chnl_net:caif_netlink_parms(): no params data found [ 262.402294][ T1112] bridge0: port 3(0!) entered disabled state [ 262.412319][ T1112] bridge_slave_1: left allmulticast mode [ 262.421973][ T1112] bridge_slave_1: left promiscuous mode [ 262.427853][ T1112] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.437188][ T1112] bridge_slave_0: left allmulticast mode [ 262.442818][ T1112] bridge_slave_0: left promiscuous mode [ 262.449654][ T1112] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.992395][ T1112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.003473][ T1112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.013363][ T1112] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 263.022839][ T1112] bond0 (unregistering): (slave bond1): Releasing backup interface [ 263.032280][ T1112] bond0 (unregistering): Released all slaves [ 263.042616][ T5182] Bluetooth: hci3: command tx timeout [ 263.127135][ T5182] Bluetooth: hci0: command tx timeout [ 263.134174][ T1112] bond1 (unregistering): Released all slaves [ 263.198943][ T5182] Bluetooth: hci1: command tx timeout [ 263.238650][ T1112] bond2 (unregistering): Released all slaves [ 263.275469][T12077] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.276073][ T5182] Bluetooth: hci2: command tx timeout [ 263.283944][T12077] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.296626][T12077] bridge_slave_0: entered allmulticast mode [ 263.304323][T12077] bridge_slave_0: entered promiscuous mode [ 263.348438][T12071] chnl_net:caif_netlink_parms(): no params data found [ 263.405022][T12077] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.412343][T12077] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.422581][T12077] bridge_slave_1: entered allmulticast mode [ 263.429697][T12077] bridge_slave_1: entered promiscuous mode [ 263.436371][ T5182] Bluetooth: hci5: command tx timeout [ 263.445384][T12076] chnl_net:caif_netlink_parms(): no params data found [ 263.480180][ T1112] tipc: Disabling bearer [ 263.488873][ T1112] tipc: Disabling bearer [ 263.495086][ T1112] tipc: Left network mode [ 263.509285][ T1112] IPVS: stopping backup sync thread 10859 ... [ 263.592359][T12080] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.599824][T12080] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.607087][T12080] bridge_slave_0: entered allmulticast mode [ 263.614735][T12080] bridge_slave_0: entered promiscuous mode [ 263.639542][T12077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.704259][T12080] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.712106][T12080] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.722534][T12080] bridge_slave_1: entered allmulticast mode [ 263.731791][T12080] bridge_slave_1: entered promiscuous mode [ 263.753639][T12077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.832401][T12080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.901328][T12080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.911311][T12068] chnl_net:caif_netlink_parms(): no params data found [ 263.925173][T12077] team0: Port device team_slave_0 added [ 263.934505][T12077] team0: Port device team_slave_1 added [ 264.035515][T12071] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.043045][T12071] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.050408][T12071] bridge_slave_0: entered allmulticast mode [ 264.058236][T12071] bridge_slave_0: entered promiscuous mode [ 264.079698][T12080] team0: Port device team_slave_0 added [ 264.112354][T12077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.119655][T12077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.146345][T12077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.160859][T12077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.168097][T12077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.194366][T12077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.219142][T12071] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.231176][T12071] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.238587][T12071] bridge_slave_1: entered allmulticast mode [ 264.245609][T12071] bridge_slave_1: entered promiscuous mode [ 264.267506][T12080] team0: Port device team_slave_1 added [ 264.323124][T12076] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.330733][T12076] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.338211][T12076] bridge_slave_0: entered allmulticast mode [ 264.346297][T12076] bridge_slave_0: entered promiscuous mode [ 264.354677][T12076] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.362669][T12076] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.370209][T12076] bridge_slave_1: entered allmulticast mode [ 264.377992][T12076] bridge_slave_1: entered promiscuous mode [ 264.403599][T12071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.417078][T12071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.551558][ T1112] hsr_slave_0: left promiscuous mode [ 264.558027][ T1112] hsr_slave_1: left promiscuous mode [ 264.563841][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.604649][ T1112] pim6reg (unregistering): left allmulticast mode [ 265.126532][ T5182] Bluetooth: hci3: command tx timeout [ 265.179951][T12071] team0: Port device team_slave_0 added [ 265.199861][ T5182] Bluetooth: hci0: command tx timeout [ 265.234152][T12076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.244626][T12080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.252886][T12080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.279236][ T5182] Bluetooth: hci1: command tx timeout [ 265.285043][T12080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.321176][T12071] team0: Port device team_slave_1 added [ 265.356315][ T5182] Bluetooth: hci2: command tx timeout [ 265.358153][T12076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.372220][T12080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.380309][T12080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.408825][T12080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.483266][T12077] hsr_slave_0: entered promiscuous mode [ 265.490389][T12077] hsr_slave_1: entered promiscuous mode [ 265.516502][ T5182] Bluetooth: hci5: command tx timeout [ 265.535732][T12068] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.544101][T12068] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.552358][T12068] bridge_slave_0: entered allmulticast mode [ 265.560478][T12068] bridge_slave_0: entered promiscuous mode [ 265.569923][T12068] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.577396][T12068] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.584639][T12068] bridge_slave_1: entered allmulticast mode [ 265.591807][T12068] bridge_slave_1: entered promiscuous mode [ 265.600015][T12071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.607196][T12071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.633493][T12071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.661116][T12076] team0: Port device team_slave_0 added [ 265.689952][T12071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.697651][T12071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.724260][T12071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.750805][T12076] team0: Port device team_slave_1 added [ 265.820979][T12080] hsr_slave_0: entered promiscuous mode [ 265.827429][T12080] hsr_slave_1: entered promiscuous mode [ 265.833501][T12080] debugfs: 'hsr0' already exists in 'hsr' [ 265.839551][T12080] Cannot create hsr debugfs directory [ 265.864350][T12076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.871492][T12076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.898317][T12076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.912352][T12068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.927111][T12068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.970196][T12071] hsr_slave_0: entered promiscuous mode [ 265.976689][T12071] hsr_slave_1: entered promiscuous mode [ 265.982708][T12071] debugfs: 'hsr0' already exists in 'hsr' [ 265.989524][T12071] Cannot create hsr debugfs directory [ 266.002708][ T1112] IPVS: stop unused estimator thread 0... [ 266.006082][T12076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.015560][T12076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.042115][T12076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.184972][T12068] team0: Port device team_slave_0 added [ 266.241332][T12068] team0: Port device team_slave_1 added [ 266.362362][T12076] hsr_slave_0: entered promiscuous mode [ 266.370792][T12076] hsr_slave_1: entered promiscuous mode [ 266.378125][T12076] debugfs: 'hsr0' already exists in 'hsr' [ 266.383919][T12076] Cannot create hsr debugfs directory [ 266.395456][ T1112] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.465154][T12068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.479648][T12068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.506004][T12068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.561721][ T1112] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.579231][T12068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.586407][T12068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.612631][T12068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.662647][ T1112] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.754400][ T1112] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.892811][T12068] hsr_slave_0: entered promiscuous mode [ 266.900073][T12068] hsr_slave_1: entered promiscuous mode [ 266.906337][T12068] debugfs: 'hsr0' already exists in 'hsr' [ 266.912067][T12068] Cannot create hsr debugfs directory [ 267.142448][T12077] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 267.153830][T12077] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 267.196105][ T5182] Bluetooth: hci3: command tx timeout [ 267.201846][T12077] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 267.213556][T12077] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 267.235457][ T1112] tipc: Resetting bearer [ 267.280089][ T5182] Bluetooth: hci0: command tx timeout [ 267.361797][ T5182] Bluetooth: hci1: command tx timeout [ 267.436607][ T5182] Bluetooth: hci2: command tx timeout [ 267.531229][ T1112] tipc: Disabling bearer [ 267.610166][ T5182] Bluetooth: hci5: command tx timeout [ 267.668861][ T1112] bond0 (unregistering): Released all slaves [ 267.686386][ T1112] bond1 (unregistering): Released all slaves [ 267.701347][ T1112] bond2 (unregistering): Released all slaves [ 267.798947][ T1112] bond4 (unregistering): Released all slaves [ 267.895008][ T1112] bond3 (unregistering): Released all slaves [ 268.062944][ T1112] tipc: Left network mode [ 268.104924][T12071] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 268.117563][T12071] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 268.128360][T12071] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 268.170964][T12071] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 268.330199][T12080] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 268.350127][T12080] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 269.160980][T12080] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 269.181158][ T7602] lo speed is unknown, defaulting to 1000 [ 269.212374][ T7602] syz2: Port: 1 Link DOWN [ 269.244846][T12080] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 269.293574][ T5182] Bluetooth: hci3: command tx timeout [ 269.356642][ T5182] Bluetooth: hci0: command tx timeout [ 269.418808][T12076] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 269.441875][ T5182] Bluetooth: hci1: command tx timeout [ 269.464916][T12076] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 269.492606][T12077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.516206][ T5182] Bluetooth: hci2: command tx timeout [ 269.521689][T12077] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.530117][T12076] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 269.541788][T12076] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 269.588642][T12071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.618517][ T7431] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.625649][ T7431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.643101][ T1112] IPVS: stop unused estimator thread 0... [ 269.646253][T10047] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.655979][T10047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.676265][ T5182] Bluetooth: hci5: command tx timeout [ 269.715475][T12068] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 269.742717][T12068] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 269.754547][T12068] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 269.777176][T12071] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.791574][T12068] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 269.822347][ T7432] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.829470][ T7432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.849695][ T7432] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.856868][ T7432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.969266][T12080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.032470][T12080] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.077586][ T7432] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.084793][ T7432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.118569][ T7432] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.125725][ T7432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.283937][T12076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.363282][T12068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.429018][T12076] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.474952][T10047] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.482192][T10047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.497532][T12068] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.538551][T10047] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.545683][T10047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.630507][T12077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.654715][T10047] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.661929][T10047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.698344][T10047] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.705502][T10047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.861035][T12080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.929615][T12071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.489431][T12077] veth0_vlan: entered promiscuous mode [ 271.606725][T12076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.628908][T12077] veth1_vlan: entered promiscuous mode [ 271.718104][T12068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.872607][T12077] veth0_macvtap: entered promiscuous mode [ 271.919628][T12077] veth1_macvtap: entered promiscuous mode [ 271.933564][T12080] veth0_vlan: entered promiscuous mode [ 271.942212][T12071] veth0_vlan: entered promiscuous mode [ 271.992484][T12080] veth1_vlan: entered promiscuous mode [ 272.032121][T12077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.078437][T12077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.089946][T12071] veth1_vlan: entered promiscuous mode [ 272.141121][T12080] veth0_macvtap: entered promiscuous mode [ 272.163497][ T36] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.183317][ T36] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.222132][ T36] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.245865][ T36] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.257099][T12080] veth1_macvtap: entered promiscuous mode [ 272.364890][T12080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.397899][T12080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.461463][T12071] veth0_macvtap: entered promiscuous mode [ 272.471812][ T7431] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.503908][ T7431] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.513785][ T7431] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.534946][T12076] veth0_vlan: entered promiscuous mode [ 272.545138][ T7431] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.563803][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.573259][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.584028][T12071] veth1_macvtap: entered promiscuous mode [ 272.643460][T12076] veth1_vlan: entered promiscuous mode [ 272.657069][T12068] veth0_vlan: entered promiscuous mode [ 272.706383][T12068] veth1_vlan: entered promiscuous mode [ 272.740232][ T7431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.753595][ T7431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.769184][T12071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.806812][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.814659][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.865296][T12071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.877420][T12068] veth0_macvtap: entered promiscuous mode [ 272.924281][T12068] veth1_macvtap: entered promiscuous mode [ 272.959104][T12076] veth0_macvtap: entered promiscuous mode [ 272.969989][ T7432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.978454][ T7431] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.993089][ T7432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.013285][T12193] gretap1: entered promiscuous mode [ 273.018721][T12193] gretap1: entered allmulticast mode [ 273.028202][T12076] veth1_macvtap: entered promiscuous mode [ 273.054786][ T7431] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.086549][ T7431] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.174951][ T7431] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.261913][T12076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.281497][T12076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.310513][T12068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.379739][T12068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.468426][ T7421] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.495469][ T7421] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.534691][ T7431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.566102][ T7431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.624028][ T7421] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.634396][ T7421] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.680227][ T7421] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.694569][ T7421] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.743965][T12212] netlink: 'syz.9.1531': attribute type 6 has an invalid length. [ 273.758381][ T7421] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.772699][ T7431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.785034][ T7421] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.798093][ T7431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.844660][T12213] netlink: 'syz.9.1531': attribute type 6 has an invalid length. [ 274.008705][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.025208][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.223091][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.246281][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.320063][ T7432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.338393][ T7432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.550947][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.599182][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.729102][T12231] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 275.342976][T12249] Bluetooth: MGMT ver 1.23 [ 275.509907][T12252] __nla_validate_parse: 3 callbacks suppressed [ 275.509925][T12252] netlink: 324 bytes leftover after parsing attributes in process `syz.8.1539'. [ 276.244241][T12276] netlink: 'syz.9.1543': attribute type 13 has an invalid length. [ 276.252542][T12276] netlink: 'syz.9.1543': attribute type 17 has an invalid length. [ 276.487650][T12296] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1545'. [ 276.528973][T12276] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.600855][T12295] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode [ 276.620750][T12295] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1547'. [ 276.645609][T12295] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 276.814834][T12300] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1548'. [ 276.842178][T12302] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 276.860140][T12300] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1548'. [ 276.992721][T12304] sit1: entered promiscuous mode [ 277.068410][T12306] tipc: Started in network mode [ 277.079232][T12308] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1552'. [ 277.091767][T12306] tipc: Node identity 629b71a23bd2, cluster identity 4711 [ 277.105326][T12306] tipc: Enabled bearer , priority 0 [ 277.115419][T12310] syzkaller0: entered promiscuous mode [ 277.160438][T12310] syzkaller0: entered allmulticast mode [ 277.346345][T12318] gretap1: entered allmulticast mode [ 277.391501][T12310] tipc: Resetting bearer [ 277.523387][T12310] tipc: Disabling bearer [ 277.585287][T12335] netlink: 'syz.6.1558': attribute type 1 has an invalid length. [ 277.746283][T12338] syzkaller0: entered promiscuous mode [ 277.821993][T12338] syzkaller0: entered allmulticast mode [ 277.924370][T12347] netlink: 'syz.8.1564': attribute type 13 has an invalid length. [ 277.935981][T12347] netlink: 'syz.8.1564': attribute type 17 has an invalid length. [ 278.130226][T12347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.390776][T12357] tipc: Enabling of bearer rejected, failed to enable media [ 278.432583][T12359] tc_dump_action: action bad kind [ 278.596271][T12363] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 279.438961][T12388] Bluetooth: MGMT ver 1.23 [ 279.632184][T12390] raw_sendmsg: syz.6.1577 forgot to set AF_INET. Fix it! [ 279.639962][T12390] netlink: 248 bytes leftover after parsing attributes in process `syz.6.1577'. [ 280.231529][T12410] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1581'. [ 280.286970][T12410] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1581'. [ 280.309018][T12410] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 280.724751][T12429] gtp0: entered promiscuous mode [ 280.731551][T12429] gtp0: entered allmulticast mode [ 281.749627][T12459] netlink: 'syz.7.1593': attribute type 1 has an invalid length. [ 281.778596][T12459] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1593'. [ 281.836270][T12460] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1593'. [ 281.900189][T12466] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1595'. [ 282.192332][T12475] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 282.300525][T12479] team0: Device macvlan2 is already an upper device of the team interface [ 282.465028][T12484] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1601'. [ 282.467779][T12486] vlan2: entered promiscuous mode [ 282.482755][T12486] macvtap0: entered promiscuous mode [ 282.675945][T12506] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1607'. [ 282.936461][T12518] netlink: 'syz.5.1611': attribute type 142 has an invalid length. [ 283.310247][T12523] tipc: Started in network mode [ 283.315363][T12523] tipc: Node identity 52f4c5409285, cluster identity 4711 [ 283.345188][T12523] tipc: Enabled bearer , priority 0 [ 283.373722][T12530] syzkaller0: entered promiscuous mode [ 283.392056][T12530] syzkaller0: entered allmulticast mode [ 283.411942][T12535] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 283.451123][T12523] tipc: Resetting bearer [ 283.726916][T12532] tipc: Resetting bearer [ 283.817908][T12532] tipc: Disabling bearer [ 283.991571][T12554] netlink: 'syz.6.1619': attribute type 27 has an invalid length. [ 284.066115][T12554] netlink: 'syz.6.1619': attribute type 1 has an invalid length. [ 284.120955][T12554] bridge0: port 1(bridge_slave_0) entered learning state [ 284.194367][T12560] netlink: 'syz.8.1621': attribute type 29 has an invalid length. [ 284.212589][T12560] netlink: 'syz.8.1621': attribute type 29 has an invalid length. [ 284.374106][T12560] netlink: 500 bytes leftover after parsing attributes in process `syz.8.1621'. [ 284.404991][T12560] unsupported nla_type 58 [ 285.200286][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.042700][T12620] IPv6: NLM_F_REPLACE set, but no existing node found! [ 286.056916][T12620] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1635'. [ 286.383506][T12612] syzkaller0: entered promiscuous mode [ 286.396111][T12612] syzkaller0: entered allmulticast mode [ 286.417219][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1638'. [ 286.470230][T12628] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1637'. [ 288.357730][T12636] syz.8.1640: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 288.376094][T12636] CPU: 0 UID: 0 PID: 12636 Comm: syz.8.1640 Not tainted syzkaller #0 PREEMPT(full) [ 288.376116][T12636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.376135][T12636] Call Trace: [ 288.376143][T12636] [ 288.376150][T12636] dump_stack_lvl+0x189/0x250 [ 288.376179][T12636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.376198][T12636] ? __pfx__printk+0x10/0x10 [ 288.376220][T12636] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 288.376240][T12636] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 288.376261][T12636] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 288.376283][T12636] warn_alloc+0x214/0x310 [ 288.376312][T12636] ? __pfx_warn_alloc+0x10/0x10 [ 288.376344][T12636] ? __get_vm_area_node+0x28f/0x300 [ 288.376366][T12636] ? fq_pie_init+0x430/0x840 [ 288.376391][T12636] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 288.376444][T12636] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 288.376472][T12636] ? rcu_is_watching+0x15/0xb0 [ 288.376491][T12636] ? fq_pie_init+0x430/0x840 [ 288.376509][T12636] ? fq_pie_init+0x430/0x840 [ 288.376527][T12636] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 288.376550][T12636] ? fq_pie_init+0x430/0x840 [ 288.376570][T12636] ? tcf_block_get+0x67/0xa0 [ 288.376590][T12636] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 288.376617][T12636] fq_pie_init+0x430/0x840 [ 288.376641][T12636] ? __pfx_fq_pie_init+0x10/0x10 [ 288.376662][T12636] qdisc_create+0x7a9/0xea0 [ 288.376693][T12636] tc_modify_qdisc+0x1538/0x20e0 [ 288.376731][T12636] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 288.376784][T12636] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 288.376803][T12636] rtnetlink_rcv_msg+0x779/0xb70 [ 288.376825][T12636] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 288.376840][T12636] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 288.376854][T12636] ? ref_tracker_free+0x63a/0x7d0 [ 288.376884][T12636] ? __asan_memcpy+0x40/0x70 [ 288.376902][T12636] ? __pfx_ref_tracker_free+0x10/0x10 [ 288.376933][T12636] netlink_rcv_skb+0x208/0x470 [ 288.376952][T12636] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 288.376971][T12636] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 288.377001][T12636] ? netlink_deliver_tap+0x2e/0x1b0 [ 288.377027][T12636] netlink_unicast+0x82c/0x9e0 [ 288.377058][T12636] ? __pfx_netlink_unicast+0x10/0x10 [ 288.377083][T12636] ? netlink_sendmsg+0x642/0xb30 [ 288.377098][T12636] ? skb_put+0x11b/0x210 [ 288.377120][T12636] netlink_sendmsg+0x805/0xb30 [ 288.377146][T12636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.377168][T12636] ? aa_sock_msg_perm+0xf1/0x1d0 [ 288.377187][T12636] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 288.377204][T12636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.377223][T12636] __sock_sendmsg+0x21c/0x270 [ 288.377249][T12636] ____sys_sendmsg+0x505/0x830 [ 288.377274][T12636] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.377303][T12636] ? import_iovec+0x74/0xa0 [ 288.377327][T12636] ___sys_sendmsg+0x21f/0x2a0 [ 288.377348][T12636] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.377407][T12636] ? __fget_files+0x2a/0x420 [ 288.377421][T12636] ? __fget_files+0x3a0/0x420 [ 288.377448][T12636] __x64_sys_sendmsg+0x19b/0x260 [ 288.377470][T12636] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 288.377509][T12636] ? do_syscall_64+0xbe/0x3b0 [ 288.377531][T12636] do_syscall_64+0xfa/0x3b0 [ 288.377547][T12636] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.377563][T12636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.377580][T12636] ? clear_bhb_loop+0x60/0xb0 [ 288.377601][T12636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.377616][T12636] RIP: 0033:0x7f6911d8ebe9 [ 288.377632][T12636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.377647][T12636] RSP: 002b:00007f6912c0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.377666][T12636] RAX: ffffffffffffffda RBX: 00007f6911fc5fa0 RCX: 00007f6911d8ebe9 [ 288.377678][T12636] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000005 [ 288.377690][T12636] RBP: 00007f6911e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 288.377701][T12636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.377711][T12636] R13: 00007f6911fc6038 R14: 00007f6911fc5fa0 R15: 00007fffce753368 [ 288.377742][T12636] [ 288.377754][T12636] Mem-Info: [ 288.798449][T12636] active_anon:5028 inactive_anon:0 isolated_anon:0 [ 288.798449][T12636] active_file:3208 inactive_file:39941 isolated_file:0 [ 288.798449][T12636] unevictable:768 dirty:146 writeback:0 [ 288.798449][T12636] slab_reclaimable:12321 slab_unreclaimable:198430 [ 288.798449][T12636] mapped:30459 shmem:1366 pagetables:1145 [ 288.798449][T12636] sec_pagetables:0 bounce:0 [ 288.798449][T12636] kernel_misc_reclaimable:0 [ 288.798449][T12636] free:1220593 free_pcp:17626 free_cma:0 [ 288.847211][T12636] Node 0 active_anon:20112kB inactive_anon:0kB active_file:12832kB inactive_file:159556kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121836kB dirty:584kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14832kB pagetables:4472kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 288.879651][T12636] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 288.909766][T12636] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 288.947489][T12636] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 288.953305][T12636] Node 0 DMA32 free:984032kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20140kB inactive_anon:0kB active_file:12832kB inactive_file:157980kB unevictable:1536kB writepending:584kB present:3129332kB managed:2557424kB mlocked:0kB bounce:0kB free_pcp:49980kB local_pcp:20372kB free_cma:0kB [ 288.986014][T12636] lowmem_reserve[]: 0 0 1 1 1 [ 288.990895][T12636] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 289.022230][T12636] lowmem_reserve[]: 0 0 0 0 0 [ 289.027120][T12636] Node 1 Normal free:3882968kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20768kB local_pcp:9568kB free_cma:0kB [ 289.060565][T12636] lowmem_reserve[]: 0 0 0 0 0 [ 289.065363][T12636] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 289.081634][T12636] Node 0 DMA32: 3372*4kB (UM) 1609*8kB (UME) 506*16kB (UM) 219*32kB (UME) 50*64kB (UME) 13*128kB (UME) 6*256kB (ME) 15*512kB (M) 4*1024kB (UM) 7*2048kB (ME) 223*4096kB (UM) = 987384kB [ 289.102578][T12636] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 289.114995][T12636] Node 1 Normal: 172*4kB (UE) 53*8kB (UME) 46*16kB (UME) 97*32kB (UME) 34*64kB (UME) 4*128kB (UME) 4*256kB (UM) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 944*4096kB (M) = 3882968kB [ 289.134084][T12636] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 289.143750][T12636] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 289.153669][T12636] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 289.164115][T12636] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 289.173537][T12636] 44512 total pagecache pages [ 289.178295][T12636] 0 pages in swap cache [ 289.182460][T12636] Free swap = 124996kB [ 289.186896][T12636] Total swap = 124996kB [ 289.191054][T12636] 2097051 pages RAM [ 289.194861][T12636] 0 pages HighMem/MovableOnly [ 289.199941][T12636] 425669 pages reserved [ 289.204757][T12636] 0 pages cma reserved [ 289.671891][T12677] macsec0: entered promiscuous mode [ 289.690487][T12677] netlink: 'syz.5.1651': attribute type 1 has an invalid length. [ 289.727993][T12677] netlink: 'syz.5.1651': attribute type 2 has an invalid length. [ 289.796865][T12677] netlink: 'syz.5.1651': attribute type 1 has an invalid length. [ 289.913277][T12690] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1654'. [ 289.934428][T12691] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1653'. [ 289.985043][T12690] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1654'. [ 290.006445][T12688] tipc: Enabling of bearer rejected, failed to enable media [ 290.017427][T12696] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1653'. [ 290.029988][T12667] syzkaller0: entered promiscuous mode [ 290.035532][T12667] syzkaller0: entered allmulticast mode [ 290.051022][T12689] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 290.063742][T12689] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 290.081665][T12689] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 290.281127][T12700] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1656'. [ 290.310530][T12699] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.318379][T12700] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1656'. [ 290.322203][T12702] netlink: 'syz.5.1657': attribute type 23 has an invalid length. [ 290.521623][T12705] bridge_slave_0: left allmulticast mode [ 290.527673][T12705] bridge_slave_0: left promiscuous mode [ 290.533416][T12705] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.543902][T12705] bridge_slave_1: left allmulticast mode [ 290.552710][T12705] bridge_slave_1: left promiscuous mode [ 290.571613][T12705] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.606536][T12705] bond0: (slave bond_slave_0): Releasing backup interface [ 290.637951][T12710] netlink: 'syz.7.1659': attribute type 10 has an invalid length. [ 290.675107][T12705] bond0: (slave bond_slave_1): Releasing backup interface [ 290.774607][T12705] team0: Port device team_slave_0 removed [ 290.830043][T12705] team0: Port device team_slave_1 removed [ 290.844697][T12705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.863458][T12705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.896825][T12705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.913994][T12705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.074315][T12710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.150055][T12710] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 291.255944][T12732] netlink: 'syz.6.1667': attribute type 1 has an invalid length. [ 291.298096][T12732] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1667'. [ 291.379127][T12726] batman_adv: batadv0: Adding interface: ip6gretap1 [ 291.386061][T12726] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.411884][T12726] batman_adv: batadv0: Interface activated: ip6gretap1 [ 291.724220][T12751] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1671'. [ 291.759288][T12754] netlink: 7580 bytes leftover after parsing attributes in process `syz.9.1673'. [ 291.847240][T12755] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1672'. [ 291.878452][T12746] team0: entered promiscuous mode [ 291.885869][T12746] team_slave_0: entered promiscuous mode [ 291.909928][T12746] team_slave_1: entered promiscuous mode [ 292.374686][T12782] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 292.648952][T12751] team_slave_0: left promiscuous mode [ 292.689928][T12751] team0 (unregistering): Port device team_slave_0 removed [ 292.723938][T12751] team_slave_1: left promiscuous mode [ 292.751131][T12751] team0 (unregistering): Port device team_slave_1 removed [ 292.849628][T12778] tipc: Enabled bearer , priority 0 [ 292.862279][T12800] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 292.886834][T12790] syzkaller0: entered promiscuous mode [ 292.892339][T12790] syzkaller0: entered allmulticast mode [ 292.913785][T12796] tipc: Resetting bearer [ 292.960971][T12804] tipc: Enabled bearer , priority 0 [ 292.972307][T12803] syzkaller0: entered promiscuous mode [ 292.985829][T12803] syzkaller0: entered allmulticast mode [ 293.020743][T12796] tipc: Resetting bearer [ 293.058941][T12796] tipc: Disabling bearer [ 293.130251][T12802] tipc: Resetting bearer [ 293.142737][T12809] netlink: 'syz.6.1683': attribute type 1 has an invalid length. [ 293.200377][T12809] netlink: 'syz.6.1683': attribute type 3 has an invalid length. [ 293.210052][T12809] NCSI netlink: No device for ifindex 246 [ 293.218483][T12802] tipc: Disabling bearer [ 293.253849][T12806] veth1_macvtap: left promiscuous mode [ 293.371023][T12817] vlan2: entered allmulticast mode [ 293.405928][T12817] veth1: entered allmulticast mode [ 293.411472][T12817] bridge0: port 3(vlan2) entered blocking state [ 293.446209][T12817] bridge0: port 3(vlan2) entered disabled state [ 293.494760][T12817] vlan2: entered promiscuous mode [ 293.530549][T12817] veth1: entered promiscuous mode [ 294.360263][T12831] nbd: socks must be embedded in a SOCK_ITEM attr [ 294.522138][T12837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.663082][T12840] netlink: 'syz.7.1690': attribute type 1 has an invalid length. [ 294.917069][T12062] udevd[12062]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 295.212873][T12857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.626509][T12868] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 295.671998][T12868] Bluetooth: MGMT ver 1.23 [ 295.702050][T12871] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 296.030430][T12889] __nla_validate_parse: 5 callbacks suppressed [ 296.030448][T12889] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1707'. [ 296.040953][T12891] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1705'. [ 296.066911][T12891] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1705'. [ 296.416093][T12903] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1712'. [ 296.444060][T12903] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1712'. [ 296.764170][T12918] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1715'. [ 296.836189][T12925] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1718'. [ 297.007707][T12936] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1721'. [ 297.268072][T12947] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 297.331114][T12954] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1726'. [ 297.553208][T12961] syzkaller0: entered promiscuous mode [ 297.583603][T12961] syzkaller0: entered allmulticast mode [ 297.656060][T12969] netlink: 'syz.6.1731': attribute type 1 has an invalid length. [ 297.663859][T12969] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1731'. [ 297.756025][ T5182] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 297.764522][ T5182] Bluetooth: hci2: command 0x0401 tx timeout [ 298.287912][T12989] netlink: 'syz.9.1734': attribute type 1 has an invalid length. [ 299.736424][T12991] veth3: entered promiscuous mode [ 301.154539][T13053] netlink: 'syz.5.1754': attribute type 6 has an invalid length. [ 301.205351][T13059] netlink: 'syz.5.1754': attribute type 6 has an invalid length. [ 301.252783][T13058] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.397317][T13058] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.541380][T13058] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.667647][T13058] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.017669][T10061] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.108175][T10061] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.260829][T13085] ipvlan2: entered promiscuous mode [ 302.270142][T13085] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 302.314011][T10061] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.356487][T10061] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.725539][T13112] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 302.782206][T13118] __nla_validate_parse: 2 callbacks suppressed [ 302.782224][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1768'. [ 302.871613][T13110] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1768'. [ 302.933950][T13122] bond0: (slave wlan1): Releasing backup interface [ 303.276875][T13139] netlink: 211456 bytes leftover after parsing attributes in process `syz.8.1779'. [ 303.320490][T13141] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1777'. [ 303.533563][T13150] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.699803][T13158] netlink: 'syz.7.1784': attribute type 1 has an invalid length. [ 303.737155][T13158] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 303.941444][T13172] netlink: 'syz.6.1785': attribute type 10 has an invalid length. [ 304.101973][T13172] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 304.249737][T13181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.347496][T13188] netlink: 766 bytes leftover after parsing attributes in process `syz.8.1791'. [ 304.393185][T13188] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1791'. [ 304.540148][T13199] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1794'. [ 304.569803][T13199] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1794'. [ 305.881421][T13257] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 305.987933][T13256] tipc: Enabled bearer , priority 0 [ 306.094364][T13258] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.102163][T13258] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.130556][T13262] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1807'. [ 306.143720][T13262] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1807'. [ 306.309537][T13258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.329034][T13258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.448700][T13259] syzkaller0: entered promiscuous mode [ 306.476231][T13259] syzkaller0: entered allmulticast mode [ 306.576642][T13264] tipc: Resetting bearer [ 306.634841][ T36] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.673021][ T36] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.690864][T13244] tipc: Resetting bearer [ 306.722983][T13244] tipc: Disabling bearer [ 306.861608][ T36] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.875969][ T5182] Bluetooth: hci5: command 0x0405 tx timeout [ 306.878628][T13285] netlink: 'syz.5.1813': attribute type 4 has an invalid length. [ 306.918057][ T36] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.982037][T13292] netlink: 'syz.5.1813': attribute type 4 has an invalid length. [ 307.773498][T13322] netlink: 'syz.5.1824': attribute type 1 has an invalid length. [ 308.039832][T13334] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20000 [ 308.115008][T13321] warn_alloc: 1 callbacks suppressed [ 308.115027][T13321] syz.7.1823: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 308.167373][T13321] CPU: 0 UID: 0 PID: 13321 Comm: syz.7.1823 Not tainted syzkaller #0 PREEMPT(full) [ 308.167396][T13321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 308.167405][T13321] Call Trace: [ 308.167412][T13321] [ 308.167419][T13321] dump_stack_lvl+0x189/0x250 [ 308.167441][T13321] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 308.167463][T13321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.167479][T13321] ? __pfx__printk+0x10/0x10 [ 308.167498][T13321] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 308.167515][T13321] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 308.167539][T13321] warn_alloc+0x214/0x310 [ 308.167566][T13321] ? __pfx_warn_alloc+0x10/0x10 [ 308.167594][T13321] ? __get_vm_area_node+0x28f/0x300 [ 308.167619][T13321] ? xskq_create+0xbf/0x170 [ 308.167637][T13321] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 308.167686][T13321] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 308.167711][T13321] ? __kasan_kmalloc+0x93/0xb0 [ 308.167733][T13321] vmalloc_user_noprof+0xad/0xf0 [ 308.167752][T13321] ? xskq_create+0xbf/0x170 [ 308.167767][T13321] xskq_create+0xbf/0x170 [ 308.167784][T13321] xsk_init_queue+0xb0/0x110 [ 308.167807][T13321] xsk_setsockopt+0x57b/0x8d0 [ 308.167829][T13321] ? __pfx_xsk_setsockopt+0x10/0x10 [ 308.167848][T13321] ? __pfx_aa_sk_perm+0x10/0x10 [ 308.167872][T13321] ? __fget_files+0x2a/0x420 [ 308.167883][T13321] ? aa_sock_opt_perm+0xff/0x1b0 [ 308.167901][T13321] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 308.167916][T13321] ? __pfx_xsk_setsockopt+0x10/0x10 [ 308.167936][T13321] do_sock_setsockopt+0x179/0x1b0 [ 308.167967][T13321] __x64_sys_setsockopt+0x13f/0x1b0 [ 308.167988][T13321] do_syscall_64+0xfa/0x3b0 [ 308.168003][T13321] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.168017][T13321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.168032][T13321] ? clear_bhb_loop+0x60/0xb0 [ 308.168050][T13321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.168064][T13321] RIP: 0033:0x7f9c8118ebe9 [ 308.168079][T13321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.168091][T13321] RSP: 002b:00007f9c82065038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 308.168108][T13321] RAX: ffffffffffffffda RBX: 00007f9c813c6090 RCX: 00007f9c8118ebe9 [ 308.168119][T13321] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 308.168128][T13321] RBP: 00007f9c81211e19 R08: 0000000000000004 R09: 0000000000000000 [ 308.168137][T13321] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 308.168146][T13321] R13: 00007f9c813c6128 R14: 00007f9c813c6090 R15: 00007fffa0ca79a8 [ 308.168173][T13321] [ 308.168417][T13321] Mem-Info: [ 308.445249][T13321] active_anon:5057 inactive_anon:0 isolated_anon:0 [ 308.445249][T13321] active_file:3208 inactive_file:39949 isolated_file:0 [ 308.445249][T13321] unevictable:768 dirty:80 writeback:0 [ 308.445249][T13321] slab_reclaimable:12221 slab_unreclaimable:198970 [ 308.445249][T13321] mapped:30512 shmem:1366 pagetables:1150 [ 308.445249][T13321] sec_pagetables:0 bounce:0 [ 308.445249][T13321] kernel_misc_reclaimable:0 [ 308.445249][T13321] free:1206002 free_pcp:30669 free_cma:0 [ 308.493881][T13321] Node 0 active_anon:20228kB inactive_anon:0kB active_file:12832kB inactive_file:159588kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122048kB dirty:320kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14884kB pagetables:4492kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 308.527171][T13321] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 308.558450][T13321] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 308.588579][T13321] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 308.594488][T13321] Node 0 DMA32 free:925668kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20180kB inactive_anon:0kB active_file:12832kB inactive_file:158012kB unevictable:1536kB writepending:320kB present:3129332kB managed:2557424kB mlocked:0kB bounce:0kB free_pcp:103216kB local_pcp:81952kB free_cma:0kB [ 308.631870][T13321] lowmem_reserve[]: 0 0 1 1 1 [ 308.637081][T13321] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 308.666777][T13321] lowmem_reserve[]: 0 0 0 0 0 [ 308.671512][T13321] Node 1 Normal free:3882968kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20772kB local_pcp:11200kB free_cma:0kB [ 308.708672][T13328] ------------[ cut here ]------------ [ 308.714433][T13328] WARNING: CPU: 0 PID: 13328 at net/mptcp/subflow.c:1516 subflow_data_ready+0x4b8/0x7e0 [ 308.724284][T13328] Modules linked in: [ 308.725657][T13321] lowmem_reserve[]: [ 308.728407][T13328] CPU: 0 UID: 0 PID: 13328 Comm: syz.5.1824 Not tainted syzkaller #0 PREEMPT(full) [ 308.728443][T13328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 308.728456][T13328] RIP: 0010:subflow_data_ready+0x4b8/0x7e0 [ 308.728487][T13328] Code: 0f 0b 90 90 e9 bc fc ff ff e8 34 61 59 f6 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 6e 0e 00 00 e8 19 61 59 f6 90 <0f> 0b 90 e9 e5 fd ff ff 90 0f 0b 90 43 0f b6 04 2f 84 c0 0f 85 a1 [ 308.728504][T13328] RSP: 0018:ffffc9000c2c7440 EFLAGS: 00010287 [ 308.728524][T13328] RAX: ffffffff8b664a77 RBX: ffff88805547e600 RCX: 0000000000080000 [ 308.728539][T13328] RDX: ffffc9001e604000 RSI: 0000000000000bbc RDI: 0000000000000bbd [ 308.728553][T13328] RBP: 0000000000000000 R08: ffff88803b17dd2f R09: 1ffff1100762fba5 [ 308.728567][T13328] R10: dffffc0000000000 R11: ffffed100762fba6 R12: 0000000000000000 [ 308.728581][T13328] R13: dffffc0000000000 R14: ffff88803b17d400 R15: 0000000000000000 [ 308.728596][T13328] FS: 00007f64d2dd56c0(0000) GS:ffff888125c14000(0000) knlGS:0000000000000000 [ 308.728612][T13328] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 308.728626][T13328] CR2: 0000001b2eb24220 CR3: 0000000055d36000 CR4: 00000000003526f0 [ 308.728642][T13328] Call Trace: [ 308.728650][T13328] [ 308.728664][T13328] tcp_data_queue+0x54b/0x6380 [ 308.734701][T13321] 0 [ 308.741932][T13328] ? __pfx_tcp_data_queue+0x10/0x10 [ 308.741967][T13328] ? __pfx_tcp_urg+0x10/0x10 [ 308.742002][T13328] tcp_rcv_state_process+0x2767/0x4140 [ 308.742042][T13328] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 308.742073][T13328] ? __local_bh_enable_ip+0x12d/0x1c0 [ 308.742093][T13328] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.742115][T13328] ? __local_bh_enable_ip+0x12d/0x1c0 [ 308.742133][T13328] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 308.742157][T13328] tcp_v4_do_rcv+0x3f2/0xce0 [ 308.742184][T13328] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 308.742201][T13328] __release_sock+0x21c/0x350 [ 308.742232][T13328] ? __tcp_close+0x69e/0xde0 [ 308.742255][T13328] __tcp_close+0x6c5/0xde0 [ 308.742283][T13328] ? do_raw_spin_unlock+0x122/0x240 [ 308.742312][T13328] __mptcp_close_ssk+0x3d7/0xfd0 [ 308.742345][T13328] mptcp_destroy_common+0x152/0x320 [ 308.742368][T13328] ? __timer_delete+0x5d/0x390 [ 308.761049][T13321] 0 [ 308.778235][T13328] ? __local_bh_enable_ip+0x12d/0x1c0 [ 308.778271][T13328] mptcp_destroy+0x84/0x120 [ 308.778294][T13328] __mptcp_destroy_sock+0x153/0x350 [ 308.778323][T13328] __mptcp_close+0x76a/0xb00 [ 308.778350][T13328] ? mptcp_close+0x28/0x1a0 [ 308.778375][T13328] mptcp_close+0x28/0x1a0 [ 308.804577][T13321] 0 [ 308.812021][T13328] inet_release+0x141/0x190 [ 308.812059][T13328] sock_close+0xc3/0x240 [ 308.812084][T13328] ? __pfx_sock_close+0x10/0x10 [ 308.812107][T13328] __fput+0x449/0xa70 [ 308.812140][T13328] task_work_run+0x1d4/0x260 [ 308.812168][T13328] ? __pfx_task_work_run+0x10/0x10 [ 308.812189][T13328] ? __fput_deferred+0x215/0x390 [ 308.844459][T13321] 0 [ 308.851865][T13328] ? __pfx___fput_deferred+0x10/0x10 [ 308.851903][T13328] get_signal+0x11ed/0x1340 [ 308.873734][T13321] 0 [ 308.875204][T13328] ? do_futex+0x333/0x420 [ 308.905970][T13321] [ 308.909334][T13328] arch_do_signal_or_restart+0x9a/0x750 [ 308.927767][T13321] Node 0 [ 308.928241][T13328] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 308.932591][T13321] DMA: 0*4kB [ 308.937810][T13328] ? exit_to_user_mode_loop+0x40/0x110 [ 308.937843][T13328] exit_to_user_mode_loop+0x75/0x110 [ 308.937867][T13328] do_syscall_64+0x2bd/0x3b0 [ 308.937886][T13328] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.937906][T13328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.937926][T13328] ? clear_bhb_loop+0x60/0xb0 [ 308.937950][T13328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.937969][T13328] RIP: 0033:0x7f64d4b8ebe9 [ 308.937988][T13328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.938005][T13328] RSP: 002b:00007f64d2dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 308.938027][T13328] RAX: fffffffffffffe00 RBX: 00007f64d4dc6180 RCX: 00007f64d4b8ebe9 [ 308.938042][T13328] RDX: 0000000000000001 RSI: 0000200000002300 RDI: 0000000000000005 [ 308.938056][T13328] RBP: 00007f64d4c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 308.938069][T13328] R10: 000000002000c000 R11: 0000000000000246 R12: 0000000000000000 [ 308.938082][T13328] R13: 00007f64d4dc6218 R14: 00007f64d4dc6180 R15: 00007ffc82814b28 [ 308.938116][T13328] [ 308.938127][T13328] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 308.938140][T13328] CPU: 0 UID: 0 PID: 13328 Comm: syz.5.1824 Not tainted syzkaller #0 PREEMPT(full) [ 308.938159][T13328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 308.938169][T13328] Call Trace: [ 308.938177][T13328] [ 308.938184][T13328] dump_stack_lvl+0x99/0x250 [ 308.938206][T13328] ? __asan_memcpy+0x40/0x70 [ 308.938226][T13328] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.938247][T13328] ? __pfx__printk+0x10/0x10 [ 308.938285][T13328] vpanic+0x281/0x750 [ 308.938306][T13328] ? __pfx__printk+0x10/0x10 [ 308.938327][T13328] ? __pfx_vpanic+0x10/0x10 [ 308.938347][T13328] ? is_bpf_text_address+0x26/0x2b0 [ 308.938383][T13328] panic+0xb9/0xc0 [ 308.938403][T13328] ? __pfx_panic+0x10/0x10 [ 308.938438][T13328] __warn+0x31b/0x4b0 [ 308.938456][T13328] ? subflow_data_ready+0x4b8/0x7e0 [ 308.938481][T13328] ? subflow_data_ready+0x4b8/0x7e0 [ 308.938503][T13328] report_bug+0x2be/0x4f0 [ 308.938519][T13328] ? subflow_data_ready+0x4b8/0x7e0 [ 308.938541][T13328] ? subflow_data_ready+0x4b8/0x7e0 [ 308.938562][T13328] ? subflow_data_ready+0x4ba/0x7e0 [ 308.938584][T13328] handle_bug+0x84/0x160 [ 308.938606][T13328] exc_invalid_op+0x1a/0x50 [ 308.938626][T13328] asm_exc_invalid_op+0x1a/0x20 [ 308.938642][T13328] RIP: 0010:subflow_data_ready+0x4b8/0x7e0 [ 308.938665][T13328] Code: 0f 0b 90 90 e9 bc fc ff ff e8 34 61 59 f6 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 6e 0e 00 00 e8 19 61 59 f6 90 <0f> 0b 90 e9 e5 fd ff ff 90 0f 0b 90 43 0f b6 04 2f 84 c0 0f 85 a1 [ 308.938681][T13328] RSP: 0018:ffffc9000c2c7440 EFLAGS: 00010287 [ 308.938696][T13328] RAX: ffffffff8b664a77 RBX: ffff88805547e600 RCX: 0000000000080000 [ 308.938710][T13328] RDX: ffffc9001e604000 RSI: 0000000000000bbc RDI: 0000000000000bbd [ 308.938723][T13328] RBP: 0000000000000000 R08: ffff88803b17dd2f R09: 1ffff1100762fba5 [ 308.938736][T13328] R10: dffffc0000000000 R11: ffffed100762fba6 R12: 0000000000000000 [ 308.938749][T13328] R13: dffffc0000000000 R14: ffff88803b17d400 R15: 0000000000000000 [ 308.938777][T13328] ? subflow_data_ready+0x4b7/0x7e0 [ 308.938811][T13328] tcp_data_queue+0x54b/0x6380 [ 308.938859][T13328] ? __pfx_tcp_data_queue+0x10/0x10 [ 308.938883][T13328] ? __pfx_tcp_urg+0x10/0x10 [ 308.938915][T13328] tcp_rcv_state_process+0x2767/0x4140 [ 308.938953][T13328] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 308.938982][T13328] ? __local_bh_enable_ip+0x12d/0x1c0 [ 308.939001][T13328] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.939020][T13328] ? __local_bh_enable_ip+0x12d/0x1c0 [ 308.939037][T13328] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 308.939058][T13328] tcp_v4_do_rcv+0x3f2/0xce0 [ 308.939082][T13328] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 308.939098][T13328] __release_sock+0x21c/0x350 [ 308.939127][T13328] ? __tcp_close+0x69e/0xde0 [ 308.939150][T13328] __tcp_close+0x6c5/0xde0 [ 308.939177][T13328] ? do_raw_spin_unlock+0x122/0x240 [ 308.939204][T13328] __mptcp_close_ssk+0x3d7/0xfd0 [ 308.939236][T13328] mptcp_destroy_common+0x152/0x320 [ 308.939259][T13328] ? __timer_delete+0x5d/0x390 [ 308.939280][T13328] ? __local_bh_enable_ip+0x12d/0x1c0 [ 308.939301][T13328] mptcp_destroy+0x84/0x120 [ 308.939321][T13328] __mptcp_destroy_sock+0x153/0x350 [ 308.939347][T13328] __mptcp_close+0x76a/0xb00 [ 308.939373][T13328] ? mptcp_close+0x28/0x1a0 [ 308.939399][T13328] mptcp_close+0x28/0x1a0 [ 308.939417][T13328] inet_release+0x141/0x190 [ 308.939443][T13328] sock_close+0xc3/0x240 [ 308.939466][T13328] ? __pfx_sock_close+0x10/0x10 [ 308.939488][T13328] __fput+0x449/0xa70 [ 308.939519][T13328] task_work_run+0x1d4/0x260 [ 308.939546][T13328] ? __pfx_task_work_run+0x10/0x10 [ 308.939567][T13328] ? __fput_deferred+0x215/0x390 [ 308.939585][T13328] ? __pfx___fput_deferred+0x10/0x10 [ 308.939615][T13328] get_signal+0x11ed/0x1340 [ 308.939641][T13328] ? do_futex+0x333/0x420 [ 308.939672][T13328] arch_do_signal_or_restart+0x9a/0x750 [ 308.939705][T13328] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 308.939747][T13328] ? exit_to_user_mode_loop+0x40/0x110 [ 308.939781][T13328] exit_to_user_mode_loop+0x75/0x110 [ 308.939805][T13328] do_syscall_64+0x2bd/0x3b0 [ 308.939822][T13328] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.939840][T13328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.939857][T13328] ? clear_bhb_loop+0x60/0xb0 [ 308.939879][T13328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.939896][T13328] RIP: 0033:0x7f64d4b8ebe9 [ 308.939911][T13328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.939926][T13328] RSP: 002b:00007f64d2dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 308.939945][T13328] RAX: fffffffffffffe00 RBX: 00007f64d4dc6180 RCX: 00007f64d4b8ebe9 [ 308.939958][T13328] RDX: 0000000000000001 RSI: 0000200000002300 RDI: 0000000000000005 [ 308.939970][T13328] RBP: 00007f64d4c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 308.939982][T13328] R10: 000000002000c000 R11: 0000000000000246 R12: 0000000000000000 [ 308.939993][T13328] R13: 00007f64d4dc6218 R14: 00007f64d4dc6180 R15: 00007ffc82814b28 [ 308.940024][T13328] [ 308.943241][T13328] Kernel Offset: disabled