last executing test programs: 3m20.054749946s ago: executing program 2 (id=4444): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb200400e100000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) unshare(0x6000400) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x40) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000540)="80fd02000001", 0x6}], 0x1, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x9, 0x0, 0x2, 0x6, 0x0, 0x0, 0x40000, [@sadb_sa={0x2, 0x1, 0x4d6, 0xf9, 0xff, 0x80, 0x2, 0x20000000}, @sadb_ident={0x2, 0x1, 0xfaba, 0x0, 0x6}]}, 0x30}, 0x1, 0x7}, 0x40030000000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085000000b300000095"], &(0x7f00000002c0)='GPL\x00', 0x1, 0xde, &(0x7f0000003e40)=""/222, 0x41100, 0x73}, 0x94) 3m17.00567543s ago: executing program 2 (id=4452): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000580)={{0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x10000, &(0x7f0000000040)={@_ha_fsid={[0x7, 0x3e5]}, {0x4, 0x4, 0x0, 0x400}}, 0x42b, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x1000}, 0x4, &(0x7f0000000500)=[{0x1, 0x8, &(0x7f0000000100)='[-/}-\xe6,!R@\x00', &(0x7f0000000140)="75b98234c0f5970c9b2c155ec1d9cd0e12173e3118fa2cd0c26b7e66b9b4bacb564c7f17a461d99d7f61536be42dd86583d73e2b393e481748c567b04017c0d3431f6ffd5e91f8394b776b70793c306ba04941f3b0702af6628afc50403d3a3bd648fc3205dfde16820fef7897dd0dac5d18b45ca1e67566fed8e81a5acf7a81afacec0fe334af178e13921a2994be1d9937943e64e8d2d80d3947dde4f42d011c79f78d8270f29752ea11c3500f5f0c210fcff04bcca48e02524ca56eb6cae57c28f228a946e5b1b7366820b91ce6e535bdc9572049b8a3e926a8c0359cbba6843156cac25d84521ad1a272d9a00e62696717e54e6e", 0xf6, 0x32}, {0x1, 0x6, &(0x7f0000000240)=',\x00', &(0x7f0000000280)="7a6cb2d6272fe26f20829d1dd1d39597f67b7235b955364bea304eda931d8d86a2f33a86b5072fc73f64ae7283cd5ef08d23d00442983c56b754de20d778893bcbc0f82fc8148b9cedeee11d65b5f411ab0d448ace5a6b746668c9acefa4d1aff04293d7f384e4e499a1256b4949f1b5921790e7f12cc4495b063db56c53d58f4a06b83a74ad5a64fad347412ed8fba8e0c09417cd3183b5e1e0bc2117535f1f78d535e38831eb31949bb54e616e", 0xae, 0x18}, {0x0, 0x81, &(0x7f0000000340)='-\x00', &(0x7f0000000380)="d9e4ac88c3b48b1b967b1c21c99da0057d38d3ca4fb2373ce682d3b05b3340582351ca28090b99c6647f0382befea36a911494f7e69b6b124df327dc577288f4518e35cc604270068caf1585690ea06f10e6c2da50edf985f798200a0050a56d36073e1945bdc5ccfc4b4e60794dedd64a1499cf0a460646a39619bfa488e31badc565d99ad74d7210d53f06480d420fb6dcc9a717af31b01e22e1b96d30b0fa31cc52ead306612a23db533f892dd8", 0xaf, 0x10}, {0xdb8c94b658a7b396, 0x9, &(0x7f0000000440)='\'{\x00', &(0x7f0000000480)="c9648995c0f73f3107cbf7fc858293fb3d8e8c170a01b426498898f50c572b2019d12dd6a1eb8491f37fe28d28a0d045bfaeee2ec1b87cadb42b699f882a33f185af99295a5cc51db6cd00e943b8aad2837c666320aa241ce945733402b947", 0x5f, 0x29}]}) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000600), 0x4) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000640)={@dev={0xac, 0x14, 0x14, 0x32}, @multicast1, 0xffffffffffffffff, "54fb41c0843d71d9271f8822574c601ca406157f27f798deb288439373cf6d0b", 0xf, 0x60000, 0x3, 0x8}, 0x3c) (async) r1 = accept$packet(r0, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000700)={0x2, 0x1}, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000840)={0xffffffffffffffff, &(0x7f0000000740)='\x00', 0x2000, &(0x7f0000000780)={@_ha_fsid={[0x3, 0xc]}, {0xa0ca, 0x4, 0x7, 0x2}}, 0x0, &(0x7f00000007c0), &(0x7f0000000800)=0x80}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000880)) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000008c0)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r4, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040804}, 0x0) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000a40)={0x0, 0x5}, &(0x7f0000000a80)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000ac0)={r5, @in={{0x2, 0x4e23, @multicast2}}}, &(0x7f0000000b80)=0x84) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000bc0)={0x3, {0x3a, 0x9, 0x0, 0xfffffffffffffffe, 0x7bed}}) (async) shutdown(r1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000c00)={{0x0, 0x9, 0x9, 0x2, 0x800, 0x3, 0x0, 0x4540000, 0x6, 0x80, 0x6, 0x10, 0x1, 0x9}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001c00)={0x0, r7, "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", "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"}) (async) r8 = socket$packet(0x11, 0x2, 0x300) (async) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000002c00)={r0}, 0x8) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002f80)={r0, 0x0, 0xb0, 0xc7, &(0x7f0000002c40)="67b031e41c1e3987fd76a17b28809954b52b601fb78e9426b74566249590d22113eb924edda316b4f61e0991ddf478afb8e38334732db29c6c7f4c48465fc7b6a15131c0c73db88614b99460b1b5ee07709053a6c96a0df6ad2c89cc1b45425fa03bc29d2817a74e6131d308d3ce2f974a9f288411431db5893a9afd0eee369d49e133c94cf18f3d63ebea21a0107a88b4444175c4dc1b84ad8f6719641b13bc196c174bcfaa187d801c2fd5a04d537c", &(0x7f0000002d00)=""/199, 0x1, 0x0, 0x78, 0xd4, &(0x7f0000002e00)="ce5e44e22dba1c9d6982fedf7f25bb6344db1858ba706b2c993e9b8ce522ca0af12ca35bf9706d7a1e392aec1a385412b58446e4c59f7dc6a1eb0088e7f51e1bf217b21ce412afbab16486b5c00db6cf8579c3b79f70b9b59344dab83dda2265d32ab608a89a26a8da5fea9fac329bc6db4ce27ae4fa6151", &(0x7f0000002e80)="525f4e90968e43e78eb89b37ee0b2f046041b8a68db72ec3246e1b9b2cdac6cd346df02dfa833fc7f2760314fc406d38d2759312c3ec13f6fd32a72a68ca3cb6c9840e03e5da3b84717d899b7f9368b65e3982da2e32919ec118592f07406334bd01118bffe1c28841a04542c8e09b228499d6faef0a8589329e367c279a6be219bb2e1bf75129605776547e88260204c6ccbfb00aa3b943d3c56493ba3ab79e57306b4adae6b8ee9b9771da4cabd1ba5fe89833d679ab8dd393555584a0fb70065e305f0b4fcabf33fc2fa892305692a1e26931", 0x7, 0x0, 0x6}, 0x50) readv(r8, &(0x7f0000003100)=[{&(0x7f0000003000)=""/101, 0x65}, {&(0x7f0000003080)=""/85, 0x55}], 0x2) (async) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000003200)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x80c1}, 0x800) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000003300)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003280)={0x1c, r4, 0x804, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44085}, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r10, 0x8010661b, &(0x7f0000003340)) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r11, 0x84, 0x19, &(0x7f0000003380)={r6, 0xfff8}, 0x8) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003400)=@generic={&(0x7f00000033c0)='./file0\x00', 0x0, 0x10}, 0x18) (async) bind$unix(r3, &(0x7f0000003440)=@abs={0x0, 0x0, 0x4e20}, 0x6e) accept4$vsock_stream(r9, &(0x7f00000034c0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x80400) (async) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r12, 0x40109441, &(0x7f0000003500)={0x4, 0x4, 0x80}) 3m16.114585676s ago: executing program 2 (id=4467): r0 = socket(0x400000000010, 0x3, 0x0) unshare(0x400) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x1) getsockopt$inet_int(r1, 0x0, 0x32, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x4, 0x1, 0xa, 0x9, 0x17, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback={0x0, 0xffff888101827518}, 0x1, 0x80, 0xffffffff, 0xffff78b6}}) 2m45.330953252s ago: executing program 2 (id=4469): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x1000) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 2m45.330702565s ago: executing program 2 (id=4470): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) r2 = socket(0xb, 0x80000, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x24002000}, 0x20000040) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x16, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@alu={0x4, 0x0, 0x6, 0x8, 0x6, 0xffffffffffffffff, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r6, 0x0, 0x2c, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40010) r7 = socket$alg(0x26, 0x5, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffdf8, 0x0, &(0x7f0000000fc0)="dd5e48aa95ac0000"}, 0x50) bind$alg(r7, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@ipv6_newrule={0x70, 0x1a, 0x1, 0x70bd2d, 0x25dfdbfc, {0x81, 0x0, 0x14, 0x1, 0x40, 0x0, 0x0, 0x8}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x1}, @FRA_SRC={0x14, 0x2, @private1}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'tunl0\x00'}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x10}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0xffff2835}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008004}, 0x24040004) accept4(r7, 0x0, 0x0, 0x800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x4008000) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @broadcast}, 0xc) socket$netlink(0x10, 0x3, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e23590000a2bc5603ca00000f7f89000000200000000101ff0000000309", 0x38}], 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r11, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x94489e87720a3ec, [{0xa00, 0xff03000000000000}, {0x0, 0x100000000000000}]}, 0xa50) 2m45.319436567s ago: executing program 1 (id=4478): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x1b, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000100000000000000090000001811ce14", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000d4000000bf090000000000005509010000000000950000000000000018440000030000000000000000000000850000000100000095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff8500000006000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xf, 0x101c, &(0x7f00000015c0)=""/4124, 0x40f00, 0x4d}, 0x94) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="59bb28bd7000fedbdf25010000000c0099000600010000000000a18ff7980941619241df527858b9a9e7dde6d36d1c5aadf87108f5ea5dbde9ca220af3a1938181f912d75b1f84c79ff44b1d18e629e7295d960eabd6867184928edf2e121800cb1ab8bf494dbf4bace3eb16b7cad1fecf75a5f1d707222f88b83246e75b00bf678d1704620b3b7c054fd55f32b92380d178b48f211c12b4ea1294b0f3f86ce8c796170205895f3f95600efdb137736b9c6bd36ea0c200da"], 0x20}, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4772000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r7, 0x6, 0x2b, &(0x7f0000003580)=""/4117, &(0x7f00000000c0)=0xff8f) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00042abd7000fddbdf256500000008000300", @ANYRES32=r9, @ANYBLOB="0ce0ff0000"], 0x30}, 0x1, 0x0, 0x0, 0x848}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r10, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030005ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r3, @ANYBLOB="00012dbd7000ffdbdf25670000000840120029000000080003008aa7a61a3c8f7dfd9dd04eb295dbbf65fe9faf89d2a915da2cc85116672d749e5dc2c60ea7ebf43d8edbf5d8ebe0d83b11ef0b2629f2db4f327bd9e1164c4d56170cbc038cb81df0e1f06bc48672397349bcd54004c6da7755aee67896f24663de838f709f6daab2", @ANYRES32=r10, @ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x4008010) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000206010100000000000000000400ffff0500010006000000050005000100000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x48}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000c40000000000000004000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000700)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, 0x0, 0x0) r13 = accept4(r12, 0x0, 0x0, 0x80800) sendmsg$AUDIT_USER_AVC(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x453, 0x10, 0x70bd2c, 0x25dfdbfc, "56df9dada94d808a22ccfe1b7fe7192a09a5e5d7c8c60c8d28339346fb49db764caca401ef9a2493f405cd920f"}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4084) 2m45.317250582s ago: executing program 2 (id=4479): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) 2m44.850670851s ago: executing program 1 (id=4485): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000011) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000002540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002500)={&(0x7f0000000180)={0x2340, r0, 0x2, 0x70bd2a, 0x4, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xca, 0x2a, [@prep={0x83, 0x1f, {{}, 0x67, 0x3, @broadcast, 0x8, @void, 0x24, 0x0, @broadcast, 0x9}}, @preq={0x82, 0x2b, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0xe, 0xb, 0x1ff, @broadcast, 0x4, @value, 0x3, 0x6f45, 0x1, [{{0x1, 0x0, 0x1}, @device_b, 0x4c}]}}, @mesh_chsw={0x76, 0x6, {0x7, 0x80, 0x15, 0x8}}, @random_vendor={0xdd, 0x66, "9671ec0ac44161c3e3f1066982a395d6ab2ef81df82cb138ad1e05f68c4c0764ca7a945c746629dce2a0bb5bee78b0441ff476d0dbec7d6f59b432db4ba58b5f9a4f4d347247953951bf5f9e3e8461da382554712b0a2a1672a90d08f166064df7861d587afc"}, @challenge={0x10, 0x1, 0x43}, @channel_switch={0x25, 0x3, {0x1, 0xd, 0x3b}}]}, @NL80211_ATTR_FTM_RESPONDER={0x2260, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x2b, 0x3, "fb7e822720eb988e855799efefa7fcce7a92243dd6e2966551d98aad02020941c912c8377c6728"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5e, 0x3, "22de15285dfae702204394977e326ac64a00a0dceeb16da5bc268874339e69711bd7b236f17c52d37134bbf4fff0e074eb4c28fe9d63608bc55501f782ea65eb05a8e093532d7e30c4893bba942af6e1da28fdd5ccefc1fd1bd0"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x23, 0x2, "b49a36bc60a2bf5a880f86329f317891801ce89d0564fa7ac5eff9f46f9a71"}, @NL80211_FTM_RESP_ATTR_LCI={0x9f, 0x2, "c54b36c4a40a6507f77fc5400dd47ec5e42542b726cbf12d16d3754ef3fa130474810c48002c24f46330df291e224f9c4d394eed920ae5bbcba4ebcee5dc71f66839fd5825ae43ffb84647e7de9e18295e98fda1290f2a7466be028fd77b29d1ef718ad9b4fab84c55a3ab0d07a7f816e3c8f9355cd3fd684b25e8f15ea3cdaefa518215454680d467123db2ea825a042179860c9413e7fa4371c4"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xf6, 0x3, "0a5f21290dc0eb7f79b50e688d67ad08dc16dcc19c5aad14b35e5b0738f9aa3c187868f067eff9f4f592a675cf2013897ca0ef9c683136cbef65c9f4d879ead08e6c3dc08dd6a392827371f8d21860441a8a4b89ff4defcbae50b75762d9fcfb3b3070f217f8197a8ce62bb64e2dbc71e63e6435780f68f50fb40d6018f5ba92bad633df4c94294e33dd8bbe64ad2843a7d5c6a3d50f67564fee696783fb3a6cf227432deb5ab27d6928acdebbf8849ab570693a35ea7b0de569f549e2e77fa9941148939ffa069272ae69de4d3e6afa231f1b0847f806682f96587142a7ad5e04988e090574cd8153137861463e9f76b204"}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "56fc66e97baa5683a3a0a7f82ca16c52dc61b46efd40a20c17483503c07311c40a27b81071ce31c0d0149343e97272d9768ef9df982e35829b739b47068f4df3dcf8b2e90a679f46f343eaef3c451fe8389522ef7c4cad883900871472c4c81fe455e5a5b3c71850248f7598b2feeb532c3a150c585a5be761273618d2ab4b47f8bcaab4f209c1e767c8188c324ddc57b70dd0deb0f0e1aa06187cd9eff3fde86de878c27bc550e79d30e54cd57541e0e7cf0a5205896035e6b8163d225af524dc05c1621e57becfd1791473a03de2fbd32676c9c7a8cba5eb4b381384cc10da08c1a163f252b3ec076c20472c3b5b364858b57ac0def4e7adf12b98efc140716c21f854d33ca6d9730a2973f6608c16db3eda0501a409ef8045cab622a1082a546c392f97cf2f1496f1fd2fbb0cc8b570172e600987b1faba0670674052be98c267ec9dac46288605b0b8e1c7dbf660308ee335440e8818cdffd8fed7368891adff959417f63fb7e75a2a94d45e4442d5f2bd720d61cff467015012f25f129eb287414e060396745fca179d08cca041d99f327ad406933e87576480bd6918ccbd8001a8579ac06f1744d80ab093857f5cdee14adadb096a72e9bae59ac541f0319f266c2b02849b6657aa2e353bd4810a07bc108fdbc8a40e35af8c830833f1afe1878fbf823a867b1f2b84a8ae1a44b7937f05111a955ac2cd0ff6579492ab24b1c03876fb4ae70ef11f16f3a23fa99a1800b44c58d75b49dd455e5e726e727fd087bdec814d9d00c8d869b029337bd9be4b866e02ca5334b2f94428c275f84bc9897007b6e6b692481076db0ed312ab3ac933db4cbddb8bca6418b5966e4d5c97785edf9a922cb874f8059f448965f2616e93d4b90256ff1d5deb07e6234f698e032e413f22a009fb443a856539882cac66d97d3b8531e7fa111e2d56c07c398c893ce1734c86827246a0c5dd525161e0707df40523f9709e594bce79b36ad541849512f22c2df9e8816ce385186d2a47ab7fc686e9e5c39c707dd98182cd3eb5bbae1a51c3306d27c2e2da6060eafe7fc0377fa02d419ff8f91b78a596872c2f55faca6102338aa71ae56c9974797a2f03c5c1d63131a0252e4270e8c71baf5c7b1f0b0a28a8d55d51e69c406d4198f59a4e65b82639e938dc5d35c0033b3c7a223dd821efd1bf55f9268084f8bd5100434a4ffc9e94a8bde100381c803f34a48e9c70822531e5b43e5b7941ac4a8b379c7902e9891271822a1aa6a86fddd12b91066204ce9948fc4d19f7d09b946798ee0cb6f339dca77a62858c43fdfbef19491220a6c28ae2a0dbd8f924b6f10b1cc1cd4b698b1a865b701ed74e6eff51f774877434bc0a539a332eaa13bb885d93b492f7e1e7932f49fa73cbf523cbf46b95b1825dfb48b0da3a79497ac25c6d703090b5ad904b87d1a7804bf32d1e6a002718d23f1044867802a9aefd25f3660e7a30d5d3cb741c448cb4aaae89a518a19b2ec7467197884a53647d4569d2226b6d0bfad4af36de84ead5eecf321d231f855ad1a03fa25915bd840b4f05bbcfbc8033576e7bb19fcf4b51ba122f1d6f1139b9469ae4ad85c8d3d5a378c51a583459dbf548dd6e0e2a139ccde7b32c1b12f588fb508789da4aecdb43d924489b1cb1ff092c57024b424075db6dc9e75df009f5c39da9cc25b7f13e936055a935b94c255edd814e5446b8916f68711388837ba168dd96448e7e60106260b36061c08b4841778abb28b1853b14ce62241660c2f5d11982f18e74847fd8057d50775b4513ed088fe343c1f967cf09f6fce8f6ad1103023413bdce716d5d9e448efedb7d1c1df53980e2dfc3d1226168fb34eba38d230101c55d9db06f3ac31bb3ecc42062b5b12c3433f9c82de50013a888de1a875cbd051c5da066c4354fba319ce35704fafee2de9a5230352aa2d731eb24b64b955aa10659b9b4b8eb2e8ca94c73d7fb8f77cc84d2b30a44bd6a937477d45465e61df0b3cc5f10b0dd3b294c22b5615b41228a70c2b7a7219c471561c2be598a20f9fe17574568c0f9d42b1ae8a13b58f26131518907b72a5a139f8a4ec456bda7840f660393a132d21cb2fd4b24fc7d8af2ef07c7b99906b8d13e848bf2c7ee4c1010d3b775ca7d0bb062c9bd046c78e80bf5296cf1f911c3d5016d69c16d65b9b09271831f99f28b86fa0119aac4f97b8f1cbb6e2dec49bccc9d96867262f250d9008c1b160d6ee4deeac58ee97d9a6e0b95310f57107c655d8e101f8276a3c0b1fadc0f6d7211a7a85c8118b86fcf35ed088cee0520b2b7636d2431c4fb29440a4268569cfbde3250953e4066558c1f61cfbd4be66e5e6674d4a54be8a29f41010e55cf2618888a273db6e0e4df4e3a9554ce37b634ff7f10584c6ca70f32fc80c4e3867f3cb271a102e41d43f2b1f89caa9de6a39722d228f29b2c225a82f3d60fb61a5ddc5aa2202ef8bea79f4b0585f21d91162f6f198648cd0f40adf8ce117cca52b394dde0dd19daa13df1d01aa4125c15f8eaa6ebd498bfbac6fa2f1692d71ae15d2f8d71197f3727b6e7cc433afee7b73cb0095afd9a8384944b2dd611d4aa3acf3d4fa96f2cfe5611bba469db95283ea151223c4703002551df4fb4f1fc24a593d7e982e3ae066b659563ab4f953d9d09d5421b9ea44478c6ca72d26a00c65b60737e50fcf16c00afe1181f7d8b25471a6e1e409a4bca29e4f3788e21262c5afc56a8228228c1696c4b58506e36424e9754fd889dcfc594fb6c3c0c3fb2b26f9e7b6a4f3941f530c3ac0a30de5e5e35b6b4665549d3ed09d48e870b99a304579b5b82515ed23e0e031deaf9bf5be26a24a29ac53595a6cd120d8569f538bf7da2c60daa42d26a83719cee1a58823e82f9d53124f63fdc98fac812c919bb6aa27db8e47b16ef8160f51eed9147e4612198888aa111a3cdfb7d748e5152a1017a596e83250dfae5a78111d61fc6199c63d3d5f620e8f4b8f11dff08b47aaf4d9d091e5dd29e10c00591cac85aa91b69169fa49abf835118c7d9ca4f143ec0195c37fb60c816a0bdef3cbf4502ee266ff348a92f4aee9278df63a132f21f0aa73b558852fd2a5fdab4a77e6284235235846b79bb06b1934844df0f0b0a4b4a46b0c0a8fba5e51ee87d03caa22a15cca0b8905133cdbc5e72b92cedf0157347b4fb3195e7b7eb8713535e60ade9da57eeeac6fac1f626031e27b1a35fec08142a0882ad2cc102eb768bad61471bbec47075b1a2461d028f3e1293a3986ede3c08bdbeac46d226da5d208aacc0af74b7a20e399f8b0d6db21ba3bb7711c4a1fefebffef32aabd00a62759bc97914436f3318aac888096eda0a26557ae0e89b916b4ff8b1b6d33ac295f6e2ee1aacc7d6c44588af0a326b5eca8600c1e05a32c4fcc7452c16b33eba78cfaea60e89132578550c41565d639925513b699657d798603e3097529f77ece98a9a070b0e874748488d77c599002b852b93f732538148f7c95b55fb9eb5b7feadda43bb5b9f88e84f8503c49a492a96af48769c0d2adb27002b0fa12fbf295e229b450c6ea1998ece6950d58202b5b1f746d7efcf0f07b1eb416f1c441fe76d8a7309f4cd234a62c15c8036ca91c78071f7ea6e87ce70340ff11bf1805ff7bf02be9dd477cd3d72bf7225018fa614e331ae11b75a52790f3e69bbf0eadfacc01ec0a671d11f8368236198b8604076d7758221326f4d02edd6dfb873cadcd95e7bc24494396bd913642529d5ac13175a90bff5b83368327841fe6c2b2121ecbfc0a4ed53273f94e5954fd0ce27570cb6f5433df7602b15a0d2c48f6763584841a66311895c7073fc341426b83b9330dd078aa3bc85bdd4e55167ea4a64aac03017f55b52dc6fea5e976ef6147fefcd7fd8782958f91bb8e5204be5ccda3a0719d36e8d798b339ace6faa5b598fc23708c2c3cd372b7848d5e457bb4d00e2dd695976a85b1221458b1d64fc75cdd7672c4d997f133f186afb236a58251be97a45843c9a1483536f29c56024e9aeded1b1ecf0afb348be8138a35559dcec17ba6742925cfa92b14064d5382bb216eefdd471c21f937ae54a8bead18e5abb4cb70185d6ca3cf034be789e7825d5765a1bebf11f5bb273757497d2106bfcfb877037e43c80a42cea0b40b2e1897998d33c8f7a38b6b2f4253d53e389797b9e31b98151bebc523bd05f2d4b9a4c99d53e626f962043fa24eedcc3f5e5cafaf3fd2927c0f5a450845b811a6d01711cb5c3754631d8d5b585a06cb1a4c384aa533a679c2d7f86b36b1f940ef261a1432f745f58543d04e4512493d8ff07fdfad17cacc2a2cacedcbf73c190625b1d554e2b6708fc50a9fcdc5b190fe772609b2a85d615069155dab3c800ba80262ef36f45802a8dfbd9a73f5f7a6f55d40254a8d73df44d31fc1d54e24c50a1f42bdcdea2c8b2ae19812b0a99632ba544556fd2fe5c88477bb6edb6c4470be86b0759ec83cd28f96f44510a6168cd69ba6aa6346e1a1daa8ff3d280b0e83409f712fba3106ba1e6f6f3daf6a6f949aa6dd2745944945b5021aa87d1788e61b57c42d9bc14092e0372f12b9f3ebd350d030e1775af9cde32dab57d66fd0241e91fba770d0a57b9e6b6aed8b9b6d4c318d92c933da28236eb1e2cfdf4198601007492ac0160f15de06b77e6df81c066d381c8059b78b506bc66c66155c521c8ec25bf388e025ab34c46865499945813f74da681000e5c7efe58a3866cc7bab07dde87df8bf804af8d2fe94ef66bad210566f2092d765f54981b7564dbd92eea1ab02d9216e0df00b71a6928959cb731a85d422bbebb0b22285775944d50258090a2ba2347392aa921c68ef50520bf6b764190224267c951649384c8a4798b2d2e8ea318850620060e59433c9002e98c8963d3fe125d77ad3343f1868c370acf82d620e9625719051d70b4246d1b03793243d6fd2673158e05ceafe15f5db65cae33d98572919a8efd8d8d29f3db95d452541cb6ff7d423cf5665adbc3c4f786a4a153c5667932fd6fa2d02123326c6a8b7af030ddbbe1431c9cbeb3b73eaf0b01201b9e43fee74c270061ea50328916adb720b235b7291ba9f1960bb01baec51469695c4476558d57d30e2826d8785e740288db1af395322f13e3556e8a7a9f82a7a9217d8dcfb3919d00c6886fb22df117abff0ec2a282ca86f7289b572d1a8cc5b3905625c40873d25452ef665f0df3f03ee5a81d4f313a76a141bd06da4091a4340068c391574d3d3bc4281fe9e00130e24cf0c2fa6d370a77971edd538b80b43fb1a0db0f26c7b46efc20f063af14d746f2e7bedf6081d35e6be9b427ece4399dc281f39c0ffd4a1fb943c82b201618d90ef38cae451df15f0edadb0f9fcb6450bfc66a1f2833e9415181bd0ea1f47616ac0afad5831e192aa299b19322e6cd54ad44e6e9e5b50dc85df17474bc0e0f38914de0dc1927dd7dc7e852737236672f2dbd8d7110d157ca4fc284dfc69f41fca6fec6ac41ab84d10241acda78d306ae8a3b0b50759ea6fac2d62ef14d214bac459a33948b1958ff568ca9379e53b04f39026976efc950db91bcf46a24673347b49eb2a4c2611658c019a917dceb7ad0c9ddadccdc6123c597ad6a27e0a684ae6177c7172a72c3a2179e560903912fc2f92dd0c2b288a0330c34d50efbe8c2dffe6dacfd387d3d48bc4c4670f352cefa8d2c126801270fc9638ca91f9d2d755ce0294a4500a28213c433cef659aeba315e141392bc9f612df010c36798039e62631c3e18536b2570ce888b8d9178155f79042300f2"}]}]}, 0x2340}, 0x1, 0x0, 0x0, 0x408c1}, 0x20000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000025c0), r2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002600)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000026c0)={'ip_vti0\x00', &(0x7f0000002640)={'erspan0\x00', 0x0, 0x40, 0x8, 0x6, 0x6, {{0xb, 0x4, 0x1, 0x24, 0x2c, 0x64, 0x0, 0xf9, 0x29, 0x0, @remote, @multicast1, {[@cipso={0x86, 0x10, 0x3, [{0x5, 0xa, "50b97cb34b235b00"}]}, @ra={0x94, 0x4}, @end]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000002940)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002900)={&(0x7f0000002700)={0x1d0, r4, 0x8, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x5, 0x2, 0x6, 0x3}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r6}, {0x88, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x78}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x91}, 0x40) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000002980)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000029c0)=0x8, 0x12) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000002a00)={0x7, {{0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}}, {{0xa, 0x4e21, 0x40, @loopback, 0x4}}}, 0x108) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000002b40)="f2e4c2086afa232c22dc5f37ab2c41be", 0x10) syz_emit_ethernet(0x56, &(0x7f0000002b80)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@canfd={0xd, {{0x0, 0x1}, 0x1f, 0x3, 0x0, 0x0, "87053fd8b4d31559f7a4345de8a8b673a5dddcd09036bafec193d5e81eb669680275f3f797322f9750f01f3efb425b9f79e5aac9c14e496bb34d20ddc9b382a9"}}}}, &(0x7f0000002c00)={0x0, 0x2, [0xc2e, 0x7bd, 0xb2f, 0x492]}) r9 = accept4$inet(r1, 0x0, &(0x7f0000002c40), 0x80000) getsockopt$inet_mptcp_buf(r9, 0x11c, 0x4, &(0x7f0000002c80)=""/158, &(0x7f0000002d40)=0x9e) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r10, &(0x7f0000002e40)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x20, r0, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) syz_genetlink_get_family_id$team(&(0x7f0000002e80), r3) syz_genetlink_get_family_id$batadv(&(0x7f0000002ec0), r2) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000002f40), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000003000)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f80)={0x2c, r11, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) sendmsg$TIPC_NL_NODE_GET(r10, &(0x7f0000003340)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003300)={&(0x7f0000003080)={0x280, 0x0, 0x700, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @empty, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xf1a, @loopback, 0xffff}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ID={0x50, 0x3, "c9021f44f3d500cc312cd39728802f94ab0ae2609fcbdfaec53391a5f0f08b3864fb44c50cd51d15ffcf6aabb3a935f6851dd9dfefa72f204aa04b50c51e560f6a2671c6977921e37262e58f"}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4000800}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x801}, 0x24006801) syz_genetlink_get_family_id$tipc2(&(0x7f0000003380), r10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000003400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000003500)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000034c0)={&(0x7f0000003440)={0x48, r0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0xf}, @val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg1\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000014}, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003540)='./cgroup.net/syz1\x00', 0x200002, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r8, 0x29, 0x37, &(0x7f0000003580)={0x5c, 0x0, '\x00', [@pad1]}, 0x10) 2m44.658271801s ago: executing program 1 (id=4488): r0 = socket$netlink(0x10, 0x3, 0x0) getpid() bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000015c0)={@cgroup, 0xffffffffffffffff, 0x10, 0x4}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)={0x14, r3, 0x400}, 0x14}}, 0x4000804) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af8ff0000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000015010200e9ffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee65}, 0xfffffffffffffdbb) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0xfc) pipe(&(0x7f00000045c0)) socket$inet(0x2, 0x3, 0x7f) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x18, 0x800, 0x0) socket(0x40000000015, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) 2m44.503359895s ago: executing program 1 (id=4490): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0xeffe, 0x3}, 0x6) (async) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r2 = socket$netlink(0x10, 0x3, 0xe) write(r2, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) 2m44.332334725s ago: executing program 1 (id=4491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000001400000000000000ffff020018150000", @ANYRES32, @ANYRES64=0xffffffffffffffff, @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x801, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRES8=r5, @ANYRES64=r2], 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRES8=r5, @ANYRES64=r2], 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000c40)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000c40)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wg0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000dc0)={'gre0\x00', &(0x7f0000000cc0)={'syztnl1\x00', 0x0, 0x60, 0x1, 0x10, 0x9, {{0x2e, 0x4, 0x0, 0x2b, 0xb8, 0x66, 0x0, 0x74, 0x4, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x4c, 0x7a, 0x3, 0x7, [{@broadcast}, {@broadcast, 0x6}, {@private=0xa010102}, {@private=0xa010101, 0x8}, {@local, 0x800}, {@loopback, 0x4}, {@broadcast, 0x3}, {@rand_addr=0x64010101, 0x401}, {@rand_addr=0x64010100, 0x8}]}, @ssrr={0x89, 0x7, 0x3e, [@loopback]}, @noop, @ssrr={0x89, 0xf, 0x83, [@rand_addr=0x64010101, @loopback, @remote]}, @rr={0x7, 0xb, 0x2b, [@rand_addr=0x64010100, @loopback]}, @timestamp={0x44, 0xc, 0xb3, 0x0, 0x5, [0x9, 0x0]}, @noop, @timestamp_prespec={0x44, 0x1c, 0x4a, 0x3, 0x0, [{@private=0xa010100, 0xa}, {@multicast1, 0x5}, {@multicast1, 0x86}]}, @timestamp_prespec={0x44, 0xc, 0x4c, 0x3, 0x5, [{@multicast2, 0x2}]}]}}}}}) socket$xdp(0x2c, 0x3, 0x0) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) (async) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) (async) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r6, &(0x7f00000003c0)={0x2c, 0x2, r8, 0x0, 0x0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000e80)={'ip6_vti0\x00', &(0x7f0000000e00)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0x1, 0xffff, 0x15ff44e69d398ee1, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x700, 0x8000, 0x3, 0xc}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001940)={0x9b0, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x49d}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x250, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe52f}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x52, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9774}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x0, 0xee, 0xc9, 0x3}, {0x3, 0x5, 0x33, 0x2}, {0x5, 0x3, 0xeb, 0x7}, {0x3, 0x9, 0x7, 0xfffff66c}, {0x2, 0x9, 0x6, 0xf994}, {0x3, 0x9, 0x3, 0x6}, {0x5, 0x1, 0x5, 0x200000a}, {0x400, 0x5, 0x2, 0x7}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5000000}}, {0x8}}}]}}, {{0x8}, {0x214, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xcf65}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @lb_port_stats={{{}, {}, {0x0, 0x4, 0x874}}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x23}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x174}}, {{0x8, 0x1, r8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x9b0}}, 0x20000004) (async) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001940)={0x9b0, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x49d}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x250, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe52f}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x52, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9774}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x0, 0xee, 0xc9, 0x3}, {0x3, 0x5, 0x33, 0x2}, {0x5, 0x3, 0xeb, 0x7}, {0x3, 0x9, 0x7, 0xfffff66c}, {0x2, 0x9, 0x6, 0xf994}, {0x3, 0x9, 0x3, 0x6}, {0x5, 0x1, 0x5, 0x200000a}, {0x400, 0x5, 0x2, 0x7}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5000000}}, {0x8}}}]}}, {{0x8}, {0x214, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xcf65}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @lb_port_stats={{{}, {}, {0x0, 0x4, 0x874}}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x23}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x174}}, {{0x8, 0x1, r8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x9b0}}, 0x20000004) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000701fefeffff00000000017c0000040042801400018006000600800a000008001400", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x2000c800) r11 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000080)=0x6d91, 0x4) sendmsg$sock(r11, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4ea3, 0x10081, @loopback, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x4c040) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x40}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x40}]}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) 2m43.419969104s ago: executing program 1 (id=4494): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b7040000020000008500000033000000850000000700000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="fc65cf09864c123db16e0184d964", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) 2m32.532512474s ago: executing program 3 (id=4556): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x20) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000000)={0xae96, 0x10, 0x31, 0x3, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x30, r2, 0x1, 0x73bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{}]}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000000660000000000000218010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000f33e93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000006649990f9959e643583695576a62171d233b29156bbd66350fe1fdfb237862ce5cbbcd2f77f84b5673cdda6dc1bd1d590857229c15ec0d4480d9ed595dab6ca5f5bd336dc56ac8a062bd7077899843d494ad94ed2325f450908d2d25102323230e9731759a9651ae1611cba81c3898009697baff2e30d4d27790db8dc3bcef3104cc330a93be2bd56e9fe165c607e91eb2a6d4f0d6e258fcedcdec138533bd6376c4fd328f86e9102f6666913ea2430b44a67829b6bcee3b45851b2e9f3847c0b4d5a4329008a10c9b3c20b0923d88963f006fbc2355a26b0c9e12d18d7c22", @ANYRES16=r6, @ANYBLOB="20002cbd7000fcdbdf25000000001400080076657468305f746f5f626f6e6400000005000d00000000000800110001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x24000040) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="58000000107f00ff27bd7000eedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c000000000000380012800b000100697036746e6c000028000280050004000900000014000300fe8000000000000000000000000000aa06000f0001000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 2m32.390222037s ago: executing program 3 (id=4558): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003ac0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711242000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x3, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000180)={@val={0x800e}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @val={@val={0x88a8, 0x7, 0x1, 0x1}, {0x8100, 0x5, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x24, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x44fe, 0x4e24, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0xfb, 0x0, @val=0x80}}}}}}}}, 0x3e) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000080)={0xbf, 0x99, 0x15, 0x5, 0xff, 0x5, 0xfb, 0x8, 0xec, 0x2, 0x81, 0x84, 0x8, 0x5}, 0xe) 2m32.106544681s ago: executing program 3 (id=4563): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x10, 0x0, &(0x7f0000000240)="b43bf54246dc3f0adf33c9f739f7972a", 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000140)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x100000, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000040)={'veth0_vlan\x00', 0x1000}) (async) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2m31.850345964s ago: executing program 3 (id=4564): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$rds(r0, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x13, &(0x7f0000000dc0)=[{&(0x7f0000000200)=""/41, 0xfd83}], 0x1, 0x0, 0x0, 0x20000000}, 0x48004) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x20, r3, 0x801, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008000}, 0x2400c000) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r3, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xaca}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xaf6}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000d0}, 0x1) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0xdbc6, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x70001}, @IFLA_GTP_ROLE={0x8, 0x4, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0x80) 2m31.847646256s ago: executing program 3 (id=4565): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl2\x00', r2, 0x29, 0x4, 0x3, 0x80000001, 0x2e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1, 0x20, 0x8, 0x100, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', r3, 0x29, 0x84, 0x84, 0x4038a0b, 0x11, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, 0xffffffffffffffff, 0x913e0000) (async) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, 0xffffffffffffffff, 0x913e0000) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000280), 0x12) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x2c, &(0x7f0000000000)=0x80000001, 0x4) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x2c, &(0x7f0000000000)=0x80000001, 0x4) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, &(0x7f00000001c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8"], 0x48}}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'veth0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r9], 0x28}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r9], 0x28}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="20000000130001000300"/20, @ANYBLOB="010000"], 0x20}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000120)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001400010604000000000000000a402000", @ANYRES32=r10, @ANYBLOB="14000200200100"/18], 0x34}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000160)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000001400010605000000000000000a402000", @ANYRES32=r9, @ANYBLOB="1400020020010000000000000000000000000002"], 0x34}}, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) (async) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'dvmrp0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r11) 2m31.707202767s ago: executing program 3 (id=4566): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) (fail_nth: 10) 2m30.209719144s ago: executing program 32 (id=4479): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) 2m28.318021984s ago: executing program 33 (id=4494): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b7040000020000008500000033000000850000000700000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="fc65cf09864c123db16e0184d964", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) 2m16.507723864s ago: executing program 34 (id=4566): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) (fail_nth: 10) 52.2447348s ago: executing program 6 (id=5273): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2a8, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x340, 0x378, 0x378, 0x340, 0x378, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xff000000, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xffffff00, 0xffffff00], 'batadv0\x00', 'pimreg1\x00', {}, {}, 0x2, 0x3, 0xa}, 0x0, 0xa8, 0x110, 0x52020000}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x3, 0xe621, 0x8, 'netbios-ns\x00', 'syz0\x00', {0xc3}}}}, {{@ipv6={@private1, @loopback, [0xffffff00, 0xffffffff, 0x0, 0x1ff000100], [0xffffff00, 0xff000000, 0xffffff00, 0xff000000], 'gre0\x00', 'tunl0\x00', {}, {0xff}, 0x5c, 0x5, 0x4, 0x4b}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=@bridge_getneigh={0x2c, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x480a}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x4}, {0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000000001010200000000000000000a0000001000164010000580090001007de220d5f14134207000005b00000f8010000d800c000380060001004e220000"], 0x4c}}, 0x44080) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1}, 0x6e) shutdown(r4, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/65, 0x41}, 0x4}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r5, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="84", 0x1}], 0x1, 0x0, 0x0, 0x20004800}, 0x4800) listen(r4, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000000)=@file={0x1}, 0x6e) r7 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfffe, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400000b00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) sendmsg$can_bcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="03000000280b00000010000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="010000800100000004000000160300000e0100d965824cab79dfbcd24a42a7c70138"], 0x48}, 0x1, 0x0, 0x0, 0x40841}, 0x14) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x14c, 0x30, 0xffff, 0xfffffffe, 0x25dfdbfd, {}, [{0x138, 0x1, [@m_skbmod={0x134, 0x18, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x400}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xff}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xd69}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0xc4, 0x6, "14b392487f9d1b88a26203c9ea6e6f88043215815b4359c1806ca98f5dc04d02a550f5e614665735233d041a04754bb48ffd738d508b648561a2ef37fc3f950d92db4a62f77432cdb95b5185f8735a12b43fb6a3b04d9a78f9176f1854e052b245915ce3bfc001c191b3d5fb6f4f59372b27431a32c32eeca646f94445c61c91534f683cf9fa9485ddbd8eb9287e907579627f703ed39e84dad1b21b0678d24c5c0475cc277de0d2eb5013d63dcd4707afd90a975bb09ee26827d0ce7b3034da"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x14c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r7, 0x29, 0x44, &(0x7f0000000340)={'icmp6\x00'}, &(0x7f0000000380)=0x1e) ioctl$XFS_IOC_GETBMAP(r9, 0xc0205826, &(0x7f0000000040)={0x6, 0x8, 0x8000000000000001, 0x8, 0xfa3}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 50.318859967s ago: executing program 6 (id=5277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x2, 0x3, 0x2, 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x3}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x2e, 0x2, 0x2}, 0x0, 0xf8, 0x220, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x2000, 0x2}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0xffffffffffffffff}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x4, 'system_u:object_r:systemd_logind_sessions_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)={0x3c, r1, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r3}]}, 0x3c}}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x2, 0x3, 0x2, 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x3}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x2e, 0x2, 0x2}, 0x0, 0xf8, 0x220, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x2000, 0x2}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0xffffffffffffffff}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x4, 'system_u:object_r:systemd_logind_sessions_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)={0x3c, r1, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r3}]}, 0x3c}}, 0x4000) (async) 49.395528156s ago: executing program 6 (id=5281): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x22020600) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000000)=0x6009, 0x4) sendto$inet(r1, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) recvfrom(r1, 0x0, 0x0, 0x2021, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x14, r6, 0x333, 0x0, 0x4}, 0x14}}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x4, [{0xa00}, {0x0, 0x100000000000000}]}, 0x68) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000e00)=ANY=[@ANYBLOB="68020000000501040000000000000000010000045402010003000000050000000c0300a00300140073797a30000000000000000000000000000000000000000000000000000000003f5a4b4b07bb6dc6429ecc6c43cd068b28d2d2e51689a1d99c2d42a59fdc62b8fcd24d468918b853e8e0df8098bd105f3f60dfbdad018ac95bd5c7f2c26cb5d702003300030000000400000002002800020000000700000078000002010000717e6ebb4b88e5b8b89f0000000000ff03760b030000001000000000200a0003000000000000000500e7080100000002000000040000800000000005000000faff0000030000000100008003000700000000002c7200000400ff039852d6ef400000000008050002000000a89034520700d90b03000000050000001833a4fe016f4b2a00e84a6b369352710700050003000000000000000400040001000000b8080000740f000800000000010000000500018003000000070000000100ff0f000000000600020001000000000000000700020000000000010000000900e500000000000500000004006b00030000000000000002000008010000005f040000f9ff0400000000000a0000000100ee5603000000a5f5ffff0200fbff03000000030000003300060801000000f4f80000f2ff0100020000006b0d000040007e7e01000000a000000009000b0001000000000800000800ffff0200000000000000fdff0300030000000200000002000500030000006a000000040000000300000003000000008002000300000001800000010106000100000000000100050000800200000036000000ff038100edffffffffff564febe6ffff04007f0001000000890000000100f5ff000000000900000007000000000001db8856a2d9b453d8f1524742a429d1dd7ece47bf2f91b026ead830c7fdc1e7f51cedc2c964e465002e769cbed9e20ab05c91b53d2d52c5a697ac5cfda5fc152787394a3aa821c6f8051871e1b5ab5d45635a15a6a4727a7e5d1a0dc450d54d12d6d6885d5b40686b55ec26613373bfcd1a40d33dcefce4b349ecc61efbbd34212149efda65a1e43906b417d77fb9e55922f9a87be2579a0dc24c65e9304fb79314637c763d3efec0f9eb735a61d8ee8575e0e152b7a1293c72ffd7c625759143ad5a608ade42fc23deb4cca288b50a865812af20d7a3679ac90730b4056ad5472debbdd3dc90fde2aaa9e0e44fcc388393e9793a5c32"], 0x268}, 0x1, 0x0, 0x0, 0x20001}, 0x44008) mmap(&(0x7f0000278000/0x2000)=nil, 0x2000, 0xb635773f04ebbee0, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$netlink(0x10, 0x3, 0xb) 48.090832028s ago: executing program 6 (id=5285): bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000500000018010000696c6c2500000000001477207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbf"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r1, &(0x7f0000000580)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0x10448) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0xa, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000084}, 0x44) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r4) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc8, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x6}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x810}, 0x40000) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f00000000c0)=""/141, &(0x7f0000000080)=0x8d) 47.367219476s ago: executing program 6 (id=5286): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x5, 0x1, 0x0, 0xc, 0x10, 0x11}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25ffdbfd, {0x0, 0x0, 0x0, r2, {0xffff, 0xffff}, {0x0, 0xfff3}, {0x2, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl(r0, 0x8b22, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000015}, 0x60) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x10270000}]}}]}, 0x48}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r10, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x30, r7, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20004884) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFC_CMD_GET_SE(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x60}, 0x20048844) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r8) sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x19000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r12, 0x300, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) 46.576078136s ago: executing program 6 (id=5288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x38, r1, 0x50dc85624ea6cf59, 0x70bd25, 0x1, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c001}, 0x400c088) unshare(0x4a040000) socket$rds(0x15, 0x5, 0x0) 30.94099654s ago: executing program 35 (id=5288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x38, r1, 0x50dc85624ea6cf59, 0x70bd25, 0x1, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c001}, 0x400c088) unshare(0x4a040000) socket$rds(0x15, 0x5, 0x0) 17.82445463s ago: executing program 4 (id=5365): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000540)='+\\/[\x00', 0x5) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x7c}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000020000000000030000000900030073797a30000000000900010073797a300000000014000480080002406375fd82080001400000000028000000000a01040000000000000000030000000900010073797a3000000000080002"], 0xb0}}, 0x0) recvmmsg(r2, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000240)=""/156, 0x9c}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/211, 0xd3}, {&(0x7f0000001700)=""/65, 0x41}, {&(0x7f0000001780)=""/75, 0x4b}], 0x5, &(0x7f0000001880)=""/176, 0xb0}, 0x9}, {{&(0x7f0000001940)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000001c40)=[{&(0x7f00000019c0)=""/130, 0x82}, {&(0x7f0000001a80)=""/252, 0xfc}, {&(0x7f0000001b80)=""/153, 0x99}], 0x3, &(0x7f0000001c80)=""/194, 0xc2}, 0xffffff00}, {{&(0x7f0000001d80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002400)=[{&(0x7f0000001e00)=""/145, 0x91}, {&(0x7f0000001ec0)=""/26, 0x1a}, {&(0x7f0000001f00)=""/124, 0x7c}, {&(0x7f0000001f80)=""/104, 0x68}, {&(0x7f0000002000)=""/228, 0xe4}, {&(0x7f0000002100)=""/227, 0xe3}, {&(0x7f0000002200)=""/38, 0x26}, {&(0x7f0000002240)=""/246, 0xf6}, {&(0x7f0000002340)=""/144, 0x90}], 0x9, &(0x7f00000024c0)=""/74, 0x4a}, 0xa09c}], 0x3, 0x10062, 0x0) 17.118086241s ago: executing program 0 (id=5367): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x3, 0x8e0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x4, 0x27, 0x4, 0x100, 0x7}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x9}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x8000}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000380012800b00010067656e65766500002800028005000d0001000000140007000000000000000000000000000000000108000f"], 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 16.77616243s ago: executing program 7 (id=5368): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x4, 0x7c}, [@nested={0x4, 0x147}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xda, 0x0, 0x0, @uid}]}]}, 0x24}}, 0xc000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$tun(r1, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 12.114472339s ago: executing program 8 (id=5335): r0 = socket$inet(0x2, 0x5, 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2004477d, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000150)=@setlink={0x3c, 0x13, 0x5, 0xfffbfffe, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, 0xc9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) mmap(&(0x7f00009f6000/0x1000)=nil, 0x1000, 0x4000003, 0x110, 0xffffffffffffffff, 0x762d1000) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="d6b53d69b7b54f3826645530e1207916b5a047a1e9d19daeb9862c573d8a4ae42d12734279fe3c0617a5871b1262a6e23d2560515b40a6a840d1d04c48c7aa52b9fb548e4314efe48d666307262a9ba3fb956058075b1e8bf9d6f7ad6357b329d1b4c18dbed0f9edb1fbce410a0a", 0x6e}], 0x1, 0x0, 0x0, 0x10}, 0xc1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x7, &(0x7f0000000000)="fcffffff", 0x4) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x48}}, 0x20000050) close(0x3) 11.712012371s ago: executing program 7 (id=5371): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnetconf={0x34, 0x52, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x6}, @NETCONFA_PROXY_NEIGH={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}, @NETCONFA_FORWARDING={0x8, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2009844}, 0x8000) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000100)={0x1, 0x9, 0xc3, 0x8, 0x2, 0x0, 0x3}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='gretap0\x00', 0x10) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000540)={{&(0x7f00000001c0)=[{0x93, 0x7, 0x8, {0x1, 0x7fff}, 0x9, 0x872, 0x8}, {0x5, 0xffffffff80000001, 0x1, {0xffffffffffffffff, 0xffffffffffffffff}, 0xffffffffffffffe4, 0x3, 0x53}, {0x6, 0x8, 0x48000, {0x6, 0x2541}, 0x7, 0x6, 0x3}, {0x0, 0x1000, 0x4, {0x5, 0x7}, 0x2, 0x80, 0x7}, {0xc23, 0x9, 0x5, {0x3, 0xa}, 0x8, 0x8, 0x80}, {0x0, 0x400, 0x8000000000000000, {0x1b, 0x4}, 0x5, 0xfffffffffffffff9, 0x9}, {0x3, 0x7fff, 0x52, {0x2a5, 0x5}, 0x6, 0x2e63, 0x8}], 0x7, 0x40, 0x18dc, 0x3}, {&(0x7f0000000380)=[{0x8, 0x10}], 0x1, 0x10, 0xff32, 0x8000000000000000}, {&(0x7f00000003c0)=[0xffffffff, 0x7fff, 0xe, 0x101], 0x4, 0x8, 0x3, 0xffffffffffffffff}, {&(0x7f0000000400)=[{0x6, 0x3, 0x100000001, 0x8000000000000001, 0xc7}, {0x4, 0x9, 0x401, 0x8, 0x7}, {0x8000000000000001, 0x0, 0x87f, 0x7, 0x2}, {0x6, 0x8, 0x1, 0x9, 0x50e418dc}, {0x7, 0x9, 0x0, 0x0, 0xfffffffa}, {0xc46, 0x4, 0x1131bba7, 0x6, 0x300000}], 0x6, 0x28, 0x7, 0xbc}, {&(0x7f0000000500)=[0xffffffff], 0x1, 0x8, 0xfff, 0xfc00000000000000}}) r1 = accept4$x25(0xffffffffffffffff, &(0x7f00000005c0)={0x9, @remote}, &(0x7f0000000600)=0x12, 0x80000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000640)={0x0, 0x7, 0x30}, &(0x7f0000000680)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000006c0)={r3, 0x5}, &(0x7f0000000700)=0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8690181}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x1b4, r6, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x34, 0x2a, [@mesh_chsw={0x76, 0x6, {0x5, 0x0, 0x1e, 0xfffb}}, @cf={0x4, 0x6, {0x40, 0x1, 0x4, 0x18}}, @ibss={0x6, 0x2, 0x3}, @ht={0x2d, 0x1a, {0x300, 0x3, 0x6, 0x0, {0xffffffffffffffff, 0x4, 0x0, 0x6, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x6, 0x8001, 0x4}}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0x7f, 0xfd, 0x7da4, 0x6}}]}, @NL80211_ATTR_IE={0x79, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x70, 0x57}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x33, 0x9, @device_a, 0xfffffffb, @value, 0x7, 0x395d, @broadcast, 0x6}}, @dsss={0x3, 0x1, 0xad}, @random_vendor={0xdd, 0x34, "f1c50d51c731283fbffea54fa2804a24603b4c99db2f2089382ff50ab3442ba6cce416eefb45e555853f192c31b837e5faf16cea"}, @gcr_ga={0xbd, 0x6, @device_b}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0xb6, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xae, 0x9}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x93936d0f7dc7f88c}}, @mesh_chsw={0x76, 0x6, {0x3, 0xff, 0xc, 0x2}}, @mic={0x8c, 0x18, {0x8c6, "079834bbf07e", @long="df432fb33a7842e67cc2fd5b1bcfa570"}}, @fast_bss_trans={0x37, 0x80, {0x0, 0x3, "6c2883af5fd5a522ca7570642f740255", "25c1a830dcf1a12380eab6e06c860d0a6fe1ca0eddccc06d79ffbb35d4af9fb2", "59a270866dd5456d72115db7372de1558ded834ae5eecfc8ff157aef7907d4f0", [{0x4, 0x1, 'O'}, {0x3, 0x1f, "5be25e57975c952f41a0f6b2269561df2f7223373875a04393350728d76cdb"}, {0x2, 0x8, "d5a8b228166fab79"}]}}]}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x59}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x24008001}, 0x4000) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f0000000a00)={0xc, 0x41, 0x4, 0x1, 0xfffffffb}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000a40)) r8 = socket$netlink(0x10, 0x3, 0x2) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000a80)={{r8}, 0x0, 0x10, @unused=[0x570, 0x1, 0x7f, 0x7fff], @name="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"}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000001c00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0xdc, r6, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x46}}}}, [@NL80211_ATTR_TID_CONFIG={0xbc, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x16}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xaa}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x45}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4f}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x513}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000001c40)="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") r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001d40), 0x1, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000001d80)={'ipvlan1\x00', @broadcast}) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000001e00)=0x0) sendmsg$nl_generic(r8, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x1c, 0x18, 0x100, 0x70bd2c, 0x25dfdbfe, {0x20}, [@typed={0x8, 0xd8, 0x0, 0x0, @pid=r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x84) setsockopt$inet6_opts(r9, 0x29, 0x39, &(0x7f0000001f00)=@routing={0x2f, 0x4, 0x1, 0x4, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, 0x28) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000001f40)={r3, 0x6}, &(0x7f0000001f80)=0x8) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001fc0)={'wlan1\x00'}) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000002000)={0x1, 0x0, 0x4, 0xa, 0x1}) 11.646430932s ago: executing program 4 (id=5373): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x20c000, &(0x7f0000000040)={@align=0x9, {0xc, 0x0, 0xffffffff, 0x1}}, 0x10001, &(0x7f0000000080), &(0x7f00000000c0)=0x80000000}) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x228, r1, 0x2, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xad1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x42609351}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe0000000}]}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x85}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80d}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}]}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdc5e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9e10}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4000000}, 0x8804) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000001840)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x3, 0x2, 0x3, {0xa, 0x4e20, 0x4, @empty, 0x8}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)="bab9fba4e998574c6b1eae466413957879f237ef040f25b39240a2e138a9c84197c90cef70ccb1a08aaee57a63dda6c5df0a4dffe77c87a9194bf30792dee60c142a0fcbc809b990aee43bfd44753d5e757c310f21127daa19103f266ad90afcda106cf900717c09def46b3eae28346c3d37cf5a6d99053c768f401dc7d43ef862dea814daa77d4a09d0d30daf39b33a6cc5ff71d6", 0x95}], 0x1, &(0x7f0000000600)=[{0x1010, 0x103, 0x80000001, "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"}], 0x1010}}, {{&(0x7f0000001640)=@l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x4}, 0x80, &(0x7f0000001780)=[{&(0x7f00000016c0)="39a8d2ca420c658fe6e497beafa07a29ed685b80", 0x14}, {&(0x7f0000001700)="1a1d840e5d3d8a12b7488d4b2e9bd2b94fa91df551ab705077003acd516f016d5f1227173f94494dc3e74861cd3f02aab46481bcb8ae190d81dbb9a24d21b0792eccc569309cd17c24f4624ed199b3f0099d9f4043246e193695ee8c630e2fea1862086d79155c", 0x67}], 0x2, &(0x7f00000017c0)=[{0x78, 0x6, 0x2, "aa2d3b21756d85ec9bcaa3efb7e6e3f88c8b95d117a4521bad7115f4c5c95dadeba893907b19654600729de6c31f7dffc84e483573ad9b5ac1b3c00c1d4489892038c57abb12279cc748a28ade09ef7ea0d45e319ba6a2cb33010ebaa838a272b74bdb3dac8a"}], 0x78}}], 0x2, 0x91) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001900), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000001ac0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001a80)={&(0x7f0000001940)={0x10c, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdf}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffff01}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xddd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb31a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9e7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5562}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4004805}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000001d00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x124, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x7f}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params, @NL80211_ATTR_MAC={0xa, 0x6, @random="6a5bf57632ed"}, @NL80211_ATTR_SSID={0x22, 0x34, @random="53b4ec14be0a9ffed69f44c72eaa8d7affc28a17b9736d0676c89ff2aa12"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "27e0779626"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8d1f56a48f"}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "401fa25708"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "014fea4c3a9c75bae20d71cea1"}], @key_params=[@NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7d66d0384a45f63775e704b25d"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]]}, 0x124}, 0x1, 0x0, 0x0, 0x24040014}, 0x10008080) (async) r6 = epoll_create1(0x80000) (async, rerun: 32) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000001d40)) (async, rerun: 32) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000001d80)=0x1) (async) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r7, 0x400c6615, &(0x7f0000001dc0)={0x0, @adiantum, 0x0, @desc2}) (async) sendto$packet(r0, &(0x7f0000001e00)="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", 0x1000, 0x4004804, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000002ec0)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x20, 0x1410, 0x8, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x80) (async, rerun: 32) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000002f00)) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002f80), r0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000003040)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)={0x40, r8, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x12}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3f}, @NL80211_ATTR_PMKID={0x14, 0x55, "f5280faffbf4522acccf8d9aa1e6d70a"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x1) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000003080)='dctcp-reno', 0xa) (async) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f00000030c0)={0x1f, 0x2, 0x1}, 0x6) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003100)={r0, 0xffffffffffffffff}, 0x4) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000032c0)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000033c0)={0x11, 0x28, &(0x7f0000003140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd81c, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0x8}, @jmp={0x5, 0x1, 0xb, 0xb, 0xa, 0x100, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8f7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003280)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x45, '\x00', r11, @fallback=0x24, r6, 0x8, &(0x7f0000003300)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000003340)=[r0, r0, r0, r0], &(0x7f0000003380)=[{0x0, 0x3, 0x7, 0x7}, {0x5, 0x1, 0x0, 0xb}], 0x10, 0x210}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r9, 0xc038586a, &(0x7f0000003580)={r9, &(0x7f0000003480)='syzkaller\x00', 0x101400, &(0x7f00000034c0)={@_ha_fsid={[0x6de, 0x6]}, {0x1, 0x3, 0x200, 0xfffffffffffffff9}}, 0x1, &(0x7f0000003500)={@_ha_fsid}, &(0x7f0000003540)=0xfffffff3}) ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x89e2, &(0x7f00000035c0)={r0}) 11.582008944s ago: executing program 0 (id=5374): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x3, 0x200}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, r2, 0xe051e910e55119b9, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x700, 0x80, 0x3ff, 0x5, {{0x12, 0x4, 0x0, 0x9, 0x48, 0x65, 0x0, 0x7f, 0x2f, 0x0, @broadcast, @multicast2, {[@end, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0xf1, 0x3, 0xb, [{@local, 0xd9}, {@empty, 0x5}, {@local}, {@broadcast, 0x7fff}]}, @noop, @timestamp={0x44, 0x8, 0x85, 0x0, 0x6, [0xa40]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @remote}, &(0x7f0000000280)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0x4, 0x4, 0x603e, 0x2, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x10, 0x53, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x40, 0x10, 0x5, 0x384a, {{0x41, 0x4, 0x1, 0x20, 0x104, 0x67, 0x0, 0x8, 0x4, 0x0, @empty, @broadcast, {[@cipso={0x86, 0x67, 0x2, [{0x1, 0xf, "63e52f134119d287c661c98ca9"}, {0x1, 0x11, "8eee21469af578544297620dc9364a"}, {0x2, 0x2}, {0x1, 0xa, "4e2b229bf4d16788"}, {0x0, 0x10, "3f5bf1944a4c9706c3c386975f35"}, {0x2, 0x4, "bd6e"}, {0x5, 0x12, "664f5ba952c2a9fefd89da7d6c4efc47"}, {0x5, 0xf, "a5bf8206966a7db5e8842a993e"}]}, @timestamp_prespec={0x44, 0x4c, 0x1c, 0x3, 0xe, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0xabf}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@private=0xa010100, 0x3}, {@private=0xa010101, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@rand_addr=0x64010101, 0x8bd94d}, {@dev={0xac, 0x14, 0x14, 0xd}, 0xa}, {@broadcast, 0x7fff}, {@broadcast, 0x3}]}, @timestamp_prespec={0x44, 0x3c, 0xbc, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010102}, {@remote, 0x6}, {@multicast2, 0x8}, {@local, 0x1}, {@multicast1, 0x4}, {@local, 0x4}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30010000", @ANYRES16=r2, @ANYBLOB="00082cbd7000fbdbdf25170000003c00018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000300000000000800030001000000080003000300000008000100", @ANYRES32=r6, @ANYBLOB="08000300000000005c000180140002007465616d30000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="1400020076657468315f766c616e00000000000014000200626f6e645f736c6176655f310000000014000200677265300000000000000000000000000c000180080003000200000038000180080003000000000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="140002007665746831000000000000000000000008000300010000004000018008000100", @ANYRES32=r10, @ANYBLOB="e6ff0000", @ANYRES32=r11, @ANYBLOB="0800030001000000080003000100000008000300030000001400020070696d72656730000000000000000000"], 0x130}, 0x1, 0x0, 0x0, 0x20008845}, 0x4080) r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl(r12, 0x8983, &(0x7f0000000040)="000000006574683000000000000000000000000000000000000300"/52) ioctl(r12, 0x8983, &(0x7f0000000080)="01000000657468302e3000"/20) 8.095469827s ago: executing program 7 (id=5378): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100010000000000c5ba956f18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014004000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xa, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x6, 0x1, 0x3, 0x9}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0xfffffffffffffdc5}}, {0x4}}]}]}, 0x70}}, 0x4000010) 8.095122967s ago: executing program 8 (id=5379): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000100001060000000000000000000000000000000000000000000000000d000300626172657564703000000000300012000c00010062617265756470002000020006000100b5120000060002008847000006000300e8030000040004"], 0x60}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x30}}, 0x40004) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x30}}, 0x40004) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) pipe(&(0x7f0000000380)={0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0xc) (async) r3 = socket$netlink(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007babf0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000001000000b7050000080000001c20000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007babf0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000001000000b7050000080000001c20000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c9a23fd6b5bfa9ca11bf40000000104010100000800000000000000000708000440ffff875608000340000000080500010001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x800) readv(r2, &(0x7f0000001b00)=[{&(0x7f0000000800)=""/134, 0x86}], 0x1) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000040)={0x8, 0x3}, 0x2) 8.006547513s ago: executing program 4 (id=5380): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}, 0xfffffffffffffd4a}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000980)={0x60, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {}, {0x8, 0x4, 0x4b2}}, {0x4e}}}]}}]}, 0x60}}, 0x0) 7.477307984s ago: executing program 7 (id=5382): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f00000006c0)="300000001c00010401000000000000002d000000010000008000000105000100280000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100270000000a0002000000000000000000300000001d00010401000000000000002d000000010000008000000105000100280000000a0002000000000000000000", 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000000000062000000000000009500"/40], &(0x7f0000000100)='GPL\x00', 0x1}, 0x94) 7.460687516s ago: executing program 4 (id=5383): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180200000020782500000000002020207b1bf8ff00000000bfa100000000000007010000f8fffdffb70200000800ff80b50af9ff000000008500000006000a0095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) 6.963726995s ago: executing program 4 (id=5385): r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000000)="ef682af0a9ae9ca19de5c45d693d46c0b5d1043c7e39cbab11d28881ce9b7bf3847ed7f76e9cd6aeaf0e") (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) (async) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000080)={0x1, 0x9, 0x8, 0x2, 0x6, 0xb, 0x3, "db6beb0dcdb43bcdb0931f93b5396ee709513818", "544b8efafd5bbd616dbba27fa64a442265e9f77c"}) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x40) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e24, @private=0xa010100}, @in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e23, 0x4, @mcast1, 0x6}, @in6={0xa, 0x4e20, 0xf, @private0, 0x7ff}, @in6={0xa, 0x4e21, 0x6, @loopback}, @in6={0xa, 0x4e21, 0xffff0000, @loopback, 0x3}], 0xc0) (async) ioctl$sock_netdev_private(r1, 0x89fc, &(0x7f0000000280)="2aa9b428bcdbadc5ee6bc08ea3627946144001d59b1fc782d914d21ccb7bb058cf4f371f47a22ddc4d0a0dc9e2487a74647656d63e6ef729803b1d10adc9008247b516871f16fbe263f6b57b300ca301ee4207a08dcc59eeaf7bd1903a5d01f6c1332a80baa22c705a06131f3a1631231a2ca6999884b95824065373324e278ae3cf2a3fb5e145930c19e7772e862c") socket$nl_sock_diag(0x10, 0x3, 0x4) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r0, 0x20, &(0x7f0000000580)={&(0x7f0000000440)=""/32, 0x20, 0x0, &(0x7f0000000480)=""/245, 0xf5}}, 0x10) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x1b, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x1}, @generic={0x4, 0x3, 0x1, 0x7, 0xc}, @alu={0x4, 0x1, 0x1, 0x0, 0x8, 0x54, 0xffffffffffffffff}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000700)='GPL\x00', 0xffffffc0, 0xe3, &(0x7f0000000740)=""/227, 0x41100, 0x14, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x0, 0x8, 0xffff68a0, 0xe}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000880)=[0x1, 0x1, 0x1], &(0x7f00000008c0)=[{0x2, 0x3, 0xf, 0xc}, {0x0, 0x5, 0x9, 0xf}, {0x4, 0x4, 0x6, 0x4}, {0x4, 0x3, 0x3}, {0x1, 0x2, 0x6, 0x16}, {0x2, 0x3, 0x10, 0xc}], 0x10, 0xc}, 0x94) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x6, 0x5, 0x54, 0x200, 0x1, 0x7, '\x00', r2, r3, 0x1, 0x4, 0x2, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x8, 0x7, 0x5, 0x1000, 0xffffffffffffffff, 0x7, '\x00', r2, r1, 0x2, 0x1, 0x0, 0x7}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x5, &(0x7f0000000340)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x2}, @exit], &(0x7f0000000380)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x40f00, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x8000, 0xe, 0x9, 0x1c00}, 0x10, r4, r5, 0x2, &(0x7f0000000b80)=[r6, r7, r8, 0xffffffffffffffff, r9], &(0x7f0000000bc0)=[{0x0, 0x5, 0x10, 0x4}, {0x5, 0x1, 0xb, 0x2}], 0x10, 0x4}, 0x94) (async) readv(r6, &(0x7f0000001e80)=[{&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/174, 0xae}, {0xfffffffffffffffc}, {&(0x7f0000001d80)=""/157, 0x9d}, {&(0x7f0000001e40)=""/19, 0x13}], 0x5) (async) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000001f00)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001f40)={"ab6a576a0edeee7e357d4678e504c3f0", r10, 0x0, {0x400, 0x7f}, {0x8, 0x9}, 0x3, [0x25, 0x4, 0x81, 0x7fff, 0xffffffffffffffff, 0x3, 0x2, 0x9, 0x40, 0x1, 0x3, 0x6, 0x10, 0x800, 0xfffffffffffffff9, 0x7]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002040)={r6, 0xffffffffffffffff}, 0x4) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002400)={&(0x7f0000002280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x95, 0x95, 0xa, [@datasec={0x6, 0x1, 0x0, 0xf, 0x3, [{0x4, 0x3, 0x401}], "236dfc"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x5}}, @func={0xc, 0x0, 0x0, 0xc, 0x4}, @datasec={0xb, 0x2, 0x0, 0xf, 0x2, [{0x3, 0x6, 0x70ed}, {0x4, 0x1, 0xffff0000}], "9c07"}, @ptr={0xf}, @typedef={0xf, 0x0, 0x0, 0x8, 0x4}, @typedef={0x5}, @const={0xb, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x30, 0x0, 0x2e, 0x30, 0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000002340)=""/183, 0xba, 0xb7, 0x1, 0x6, 0x10000, @value=r0}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002500)={{r9, 0xffffffffffffffff}, &(0x7f0000002480), &(0x7f00000024c0)='%pS \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002580)={0x6, 0x25, &(0x7f0000002080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}}, @map_val={0x18, 0x1, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x3}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f00000021c0)='syzkaller\x00', 0x1, 0x64, &(0x7f0000002200)=""/100, 0x40f00, 0x42, '\x00', r2, 0x25, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002440)={0x1, 0x0, 0x8, 0x16a7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002540)=[r7, r13, r6, r9, r6], 0x0, 0x10, 0xfffff7df}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000002740)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002700)={&(0x7f0000002680)={0x7c, 0x0, 0x8, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x3189}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x7fff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x10}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x4080) (async) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f00000027c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000002900)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002800)={0x9c, r14, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2b53}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x4c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa, 0x4}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000000) (async) r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r15, &(0x7f0000002dc0)={&(0x7f0000002a80)={0xa, 0x4e22, 0x8, @private1, 0xf7}, 0x1c, &(0x7f0000002c40)=[{&(0x7f0000002ac0)="c85196bbe27fcc3573518c7f212e4c5a883dac454bfd7dbd4cb00f3f9545bd901a531db627950f5f876d8b02d5780f1b65834b89a7e5be56365b05f1ffe17e98f9096f00e7e054732dfd682539cb78d4c4062dbd19b596ae19e323291f3a291b4811da7261cfaa69664439043e392162a487d340cb6de9dc60528eab938d59490915c4eb354875c635c77c9b4e591509978cf9043fce3c62068530b795bc0ae4e25d47c42066db1d19fbf70987347723affc4e19", 0xb4}, {&(0x7f0000002b80)="a44329c8bc1c19f6dd19d5e9d244a0187b9ddcaae19df7f3c7abd1c084d44e2cbb476c09708e85f4c716962ee871f807c1408e64ae3a4fa8cd7a3fc17a89c87b431e8770bd39ae79315ad4c64dfe10435a", 0x51}, {&(0x7f0000002c00)="a06f736604653ec10f4946eb9aa24daf148a55701fca66dd86bda26b63c45a63b345f87a", 0x24}], 0x3, &(0x7f0000002c80)=[@hopopts_2292={{0x90, 0x29, 0x36, {0x33, 0xe, '\x00', [@generic={0x7, 0x60, "d8230c6292d9e769a22d78591a53a53beabafda73f0d42361cac663d08ae6336f9ccd5b4601724a7e500f1a3e51004ffc9bc79d6c8831e259257edd51826c286195c69f48725ba81fbdd2b3ebeee5faee8d1d573187517da709fcba08b991db5"}, @hao={0xc9, 0x10, @mcast2}]}}}, @dstopts_2292={{0x78, 0x29, 0x4, {0x11, 0xb, '\x00', [@generic={0x99, 0x52, "a7b56235f0f7ff0b9328e5aac2269d7d9608c847a84f4f35f282435481f3c84c6acb8e580d0a20f9dc6a17888f3178fe79ffe8fd43fef8b98873a795e9547c5efab16ef433ede11b5e129cbfb1a7bc30a243"}, @jumbo={0xc2, 0x4, 0x1000}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffef7}}], 0x120}, 0x40010) 6.906991367s ago: executing program 8 (id=5386): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000200100000000000000000000000000006401010200000000000000000000000000000005000000030a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffff89ffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000000000000000000040a00000000000000000000008040000000000000000008000000000000000001000003000020004400050000000000000000000000000000000000000004d23c"], 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) sendmsg$inet6(r2, &(0x7f0000000440)={&(0x7f0000000040)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="14"], 0x18}, 0x48814) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0xffffffd7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) 6.523861019s ago: executing program 7 (id=5387): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000500)=0x6, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x37, 0x0, &(0x7f00000000c0)="259a53f271a76d2686dd4c6588a81626730d0f203454766aefcf8d304d6bb519c5c1cc2a652e00fe212124c0c4dd0770cfce979a0cb736", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.734228304s ago: executing program 5 (id=5388): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xd}], 0x28}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 5.540714381s ago: executing program 0 (id=5389): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x900, 0x5, 0x28, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001040000000000000300000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000020850000001b000000b700000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) pread64(r0, &(0x7f0000000080)=""/55, 0x37, 0x5) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="c5b9a8ded1b9a081d4c673be6e45c2681191a36a65ae67bd58d7fde798b3b5bd38b7df2f1208f00fe00147446d649a5fa3cdfe793571ff7639781760063eb20a6830dfe710e9fe7fa179559ded5a686bc1d045318d4dd1ef7a8b", 0x5a}], 0x1, 0x2, 0x10000) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000ffff25bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000240012800c0001006d6163766c616e001400028008000300020045a8ac7f192194520000080001"], 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000002) sendmmsg$inet(r5, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0xab}]}}}], 0x18}}], 0x2, 0x40) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 5.538904594s ago: executing program 8 (id=5390): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4b}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRESHEX=r3, @ANYRESDEC=r3], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r4}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x3}], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "9a"}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x44, 0x0, 0x1}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x3}], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "9a"}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x44, 0x0, 0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000100", @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) socket$inet6(0xa, 0x5, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x4412c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4040) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="40010000", @ANYRES16=r13, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r13, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) (async) sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r13, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) sendmsg$NL80211_CMD_SET_STATION(r10, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r11, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x37}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}]}, 0x67}, 0x1, 0x0, 0x0, 0x4000020}, 0x40040) (async) sendmsg$NL80211_CMD_SET_STATION(r10, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r11, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x37}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}]}, 0x67}, 0x1, 0x0, 0x0, 0x4000020}, 0x40040) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) getsockopt$IP_VS_SO_GET_INFO(r12, 0x0, 0x481, &(0x7f0000000600), &(0x7f0000000640)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x1}, &(0x7f0000000440)=0x8) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x1}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000480)={r14, 0x7, 0x3}, 0x8) (async) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000480)={r14, 0x7, 0x3}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/145, 0x91}, {&(0x7f0000003800)=""/4133, 0x1025}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f0000000a40)=""/4093, 0xffd}, {&(0x7f0000000280)=""/65, 0x41}, {&(0x7f0000000300)=""/22, 0x16}], 0x7}, 0xd}, {{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0x7}], 0x4, 0x40000102, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/145, 0x91}, {&(0x7f0000003800)=""/4133, 0x1025}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f0000000a40)=""/4093, 0xffd}, {&(0x7f0000000280)=""/65, 0x41}, {&(0x7f0000000300)=""/22, 0x16}], 0x7}, 0xd}, {{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0x7}], 0x4, 0x40000102, 0x0) 5.366024327s ago: executing program 5 (id=5391): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@bridge_newneigh={0x30, 0x1c, 0xc01, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0x2}, [@NDA_DST_IPV6={0x14, 0x1, @local}]}, 0x30}}, 0x0) 4.7712686s ago: executing program 0 (id=5392): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000e500010000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x2}) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000100)={0x1d, r2}, 0x10) (async) sendmmsg$sock(r1, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000003100)="0100000003000000640000000000000000000000000000000000000000000000000000000000000020a10700000000000200000001000000020000000100"/72, 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003200)="0100000003000000640000000000000000000000000000000000000000000000000000000000000000000000000000000200000001000000", 0x38}, {0x0}], 0x2}}], 0x2, 0x20004090) r3 = socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x1d, r4}, 0x10, &(0x7f0000000240)={&(0x7f0000000200)=@can={{0x1, 0x1, 0x1}, 0x4, 0x6, 0x0, 0x0, "ea64fa1a076a29db"}, 0x10}, 0x1, 0x0, 0x0, 0x20040010}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000020601080000000000000000030000000400078005350400030000005ed06c6f865b9404a8dcea844cf87dbe93e1b7bb0dbcccc753d93a58dfc0787f824ed857364790fc280b37721b51b96f5272d61530b64076dfeb169e0a38787d4fa99d5ce125a6e39f46c26f045f9e5d5f1a3695a3a1"], 0x20}, 0x1, 0x0, 0x0, 0x2004c040}, 0x80) 4.769585588s ago: executing program 7 (id=5393): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4, 0x12, r1, 0xfa947000) readv(r0, &(0x7f0000002c40)=[{&(0x7f00000003c0)=""/196, 0xc4}, {&(0x7f0000002d00)=""/4112, 0x1010}], 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac0000001800dd8d0310000000010000022000000000ff06002000200600150001000000880016808400010001000000000000003a000400075061000000000000000000000000000000000100000000000000000000000000000001fc0000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000001fc000000000000000000000000000000fe8000000000000000000000000000aa"], 0xac}}, 0x0) 2.808780263s ago: executing program 4 (id=5394): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7c0000001000030425bd70000000200000000300", @ANYRES32=0x0, @ANYBLOB="032e0000030000004c0012800e0001006970366772657461700000003800028014000700feffffc7b9000000000000000000000108000c0000000000060011004e24000008000c0007000000080015000e1f030008000d000008000008000a00", @ANYRES32=r0], 0x7c}}, 0x90) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}, {&(0x7f0000000780)="5b06c70461fab92b3d952a0a0b5eca7d6b21f62c4f56ea9109a00b742eab4a7fdac90ab7c51a813cc4d693127d10c4e7234944e9410ad19c43ca9751c1b97aca344e5bf77fde23184af0b7e160e7a9a681f6391270dedc2978f7d1b9a913801beaa52e1eedf0ae71021e0d40864fc63603f1d6d94f55d23fb15eebc780292ee4be48a9036dcb83345a4285e043439e95b3f23b6edf199cea092725d6f7fab0f975cc42bd279f5de21d08a38091edbb34b32c6cd53373651fd3343aa6b228a996d957c556694dc3a26b68b38093a92eb192aa973bda1b51c61b6cc2b49a54550085e8d8270d889cefe65f62c975815b1b1208ed"}], 0x3f}], 0x1, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x20, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x72}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x8004) accept4$llc(r2, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x20004095}, 0x400c0) r3 = socket$alg(0x26, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x800) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x200448d0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) 2.255978752s ago: executing program 5 (id=5395): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180200000020782500000000002020207b1bf8ff00000000bfa100000000000007010000f8fffdffb70200000800ff80b50af9ff000000008500000006000c0095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) 1.473376482s ago: executing program 0 (id=5396): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)=ANY=[@ANYBLOB="60000000020605000000001e00000000000000000900020073797a3200000000050004000000000005000100060000001400078008000640002000000800134000000000050005000a00000012000300686173683a6e6574"], 0x60}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r2, @ANYBLOB="8000260b0a0002000180c200000c00000c000e800500010003"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xfffffffa, @private0, 0x10004}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r6, 0x1e5}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000370427bd70000000000000000000", @ANYRES32=r4, @ANYBLOB="c30803000b2ebe2650001280080001006774700044000280080007000a010101080004000100000008000700ac1414330500", @ANYRES32=r0], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) socket$netlink(0x10, 0x3, 0x13) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000700000007", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000880), &(0x7f00000008c0)=0x4) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x18, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000080000000000400000018230000", @ANYRES32=r7, @ANYBLOB="000000000400000018120000", @ANYRES32=r8, @ANYBLOB="00000000000000000000000c000000b70000feff00000018130000000000000000000000e3a6c15ce4139888b097b7db57f97fb57b6c58d0a1be8f77daa6f275bfa93d49f8049cf8566ea5fc9045e9e81dbab16a6c359f312dfa9db09829d0ffa9e618fcb4248396b8fe6c5291d09ccdf392ff5952f44aee6b87e63f19a72209ac271bc92bc9b651c192961481ead281fbe9a392134cfcb5d429bac15989d531180cfc492359a8fba14c9808598e114ea34d658882b7a4ba1907c7d9736a424f34", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000001855000002000000000000000000000018200000", @ANYRES32=r9, @ANYBLOB="0000000006000000182a0000", @ANYRES32=r10, @ANYBLOB="00000000be01000085000000430000002b873000ffffffff9500000000000000"], &(0x7f0000000600)='GPL\x00', 0x6, 0x1e, &(0x7f0000000640)=""/30, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, r11, 0x8, &(0x7f00000006c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x2, 0xffffffff, 0xecba}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000740)=[{0x3, 0x5, 0x3, 0xa}, {0x0, 0x3, 0x1}, {0x2, 0x3, 0xe, 0xb}, {0x5, 0x4, 0x6, 0xc}, {0x5, 0x3, 0x7, 0x4}, {0x2, 0x2, 0x3, 0x7}, {0x0, 0x5, 0x1, 0xc}, {0x4, 0x5, 0x9, 0x9}], 0x10, 0x3ff}, 0x94) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000080)=0x4) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000000000000000000000af44faf946b76b4874d67bddaba2cb639be49e2d84f000317d5983aaa0e196423470c561312a62c85b20aea0f7e43b39e711fb3ac07ef5352fa47e9731198d2fa31"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$bt_l2cap_L2CAP_OPTIONS(r12, 0x6, 0x1, &(0x7f0000000040)={0x7, 0x5, 0x9, 0xfe, 0xe, 0x4, 0x400}, 0x6c) read(r0, &(0x7f0000000300)=""/255, 0xff) 1.392432443s ago: executing program 5 (id=5397): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='gretap0 8', @ANYRESOCT=r2], 0x6e) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c", 0xe}], 0x1}}], 0x1, 0x2881) sendmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002240)="321f349be984b668f593bf16c2f60e4b01783ed59dcd6a4105711458d2cf86696caad21a4387232f7ae8dbda478307058ab2ffec546f49907b7d4c54fe1fa76d99f5c80956c6769c810b895a00ab69f114794c1e3ee671204a47d3153305395d1e523e504927505590c078bc1a7d6e82b332bf141f662f26ad9ba4c11b87d5abbc3340ef989b3a8e666f8f82ca82aab6d33c953938b30b61c91cbc926b2a58d67d8198e458ed8f10ad8975356af9dab25f718147ae2a3e81187adaa46d247e3a8c437053bb01b855c6fb0ee0e7024fa61bd2af5aa1d918fcc93b3ffadf3a982efefa3b47727caafee6246ee147d676a5e2879e351f5ac51e6b62aaedb5cd03d16cb4f8bfaac498397b3dc22c063fbd87b2912647948430488fb45ca42096e08a6760c831b06d4582b7440f9123f3711a87b71a4a3a4614b2bf8dcdb84d985777893889120fb820ffe525acbf530869895f2caf84922e5a8aee6a0f887145b0d961bfa9c8f71788ccb8d2ee73676c2f68427b776f537afb9a8c97e055e35204ec09fd3f2c9a0b9f8b33ef0343ef22c99a7fe463550d074b626c1173f34fc49f1431460881ccd35b679f186dd10ac84e2f9aa370443a75938812c1b1888e57b0a79001965832e7cd8c85865081a16938fc81e72c26e686078692dad56ca4a2371a6b370268da843aa7ba9e498a7ae8a6317907b2d5114acf3d35522e4c8cb4e014c7d3f5f60c57b1293ec9956bed6abb25b5e2f90cf3eba7adc060b00dcb50480282b6", 0x222}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000005b00)=[{{&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f0000000b00)=[{&(0x7f00000002c0)=""/217, 0xd9}, {0x0}], 0x2}, 0x6}, {{&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000d00)=""/4096, 0x1000}], 0x1}, 0x101}], 0x2, 0x120, 0x0) 968.838699ms ago: executing program 0 (id=5398): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {0xd}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0xd, 0x1, 0x8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) (fail_nth: 1) 298.229393ms ago: executing program 5 (id=5399): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r3, 0x913df000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000000c0)={'ip6tnl0\x00', @multicast}) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000400030000000900020073797a32000000000500010007000000070005000a000000140007800800114000000000080012400000ffff15000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) sendmsg$tipc(r4, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x4, 0x0, 0x25dfdbfc, {0x0, 0x0, 0xe403, 0x0, 0x812, 0x610c3}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) 0s ago: executing program 5 (id=5400): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) (async) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000440)="92e92919335e1fdb1eef27dd5bf9c8f74408764651fe1eb74666b0f15d37b5b0074eef9a7a6b2134c33d778fa2147470f80549c0f7c77dab87e7a88a2eca362d46105221406d5a641e22aa7aad9c92b938244123941256e13dd0af994aca8c68aa773280c6644f0ed31c614961ea37fe2152f16c3ac32d98f541b1de0d222d926d388f3b7079bd8d507694da662413c899e1cf45e7b8fc500e0253c23d1edfad6060ad105cfb7e10d35523ab84143acc5c7c106023a766c6e93fa6dc9d80e371f9e0a392f7f1b442448c1ae7285ee622d37e3fdc5ef37579", 0x4a}], 0x1) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) (async) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) (async) splice(r0, 0x0, r4, 0x0, 0x80, 0x6) (async) write$bt_hci(r4, &(0x7f0000000080)={0x1, @le_set_default_phy={{0x2031, 0x3}, {0x2, 0x7}}}, 0x7) (async, rerun: 64) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x100000000000, 0x0, 0x0, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async, rerun: 64) write(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): 445'. [ 789.072418][T25036] netlink: 'syz.1.4448': attribute type 11 has an invalid length. [ 789.177743][T25040] netlink: 'syz.0.4449': attribute type 1 has an invalid length. [ 789.259500][T25047] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4448'. [ 789.866469][ T9406] net_ratelimit: 552 callbacks suppressed [ 789.866491][ T9406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.904289][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.319740][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.771069][T25038] A link change request failed with some changes committed already. Interface geneve4 may have been left with an inconsistent configuration, please check. [ 791.823529][T25040] 8021q: adding VLAN 0 to HW filter on device bond8 [ 791.861296][T25049] bond8 (unregistering): Released all slaves [ 791.969987][T17146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.043801][T25073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4453'. [ 792.119795][T17697] Bluetooth: hci3: link tx timeout [ 792.119815][T17697] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 792.166651][T25077] bond3 (unregistering): Released all slaves [ 792.218492][T25079] bond8: option min_links: invalid value (18446744073709551612) [ 792.218516][T25079] bond8: option min_links: allowed values 0 - 2147483647 [ 792.220141][T25079] bond8 (unregistering): Released all slaves [ 792.421717][T25094] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4459'. [ 792.477492][T25096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4460'. [ 792.519893][T25101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4461'. [ 792.708306][T25110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4464'. [ 792.871909][T25116] netlink: 'syz.4.4466': attribute type 1 has an invalid length. [ 792.871929][T25116] netlink: 756 bytes leftover after parsing attributes in process `syz.4.4466'. [ 792.872547][T25116] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4466'. [ 792.872570][T25116] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4466'. [ 792.925552][T25116] netlink: 280 bytes leftover after parsing attributes in process `syz.4.4466'. [ 792.937936][T25115] geneve3: left promiscuous mode [ 792.938330][T25115] bond1: left promiscuous mode [ 792.941530][T25115] A link change request failed with some changes committed already. Interface geneve4 may have been left with an inconsistent configuration, please check. [ 792.995990][ T9406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.099939][T25129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4471'. [ 793.250990][T25136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4472'. [ 794.024278][ T9406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.195274][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 794.507900][T10780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.067611][ T9406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.104714][ T9406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.144736][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.184376][T17148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.225101][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.264427][ T9406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.265318][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.905177][ T8560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.305529][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.344442][T17148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.385805][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.424667][ T9406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.464333][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.034550][T10780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.504338][T17148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.584448][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.545756][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.588164][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.589226][ T9406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.624558][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.506260][ T9267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.664285][T17148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.665560][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.667943][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.669060][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.704574][ T9406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.785387][T10780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.744617][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.784498][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.826097][T17148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.865549][T17148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.826153][T10759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.904727][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.945479][T17148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.827004][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.004129][ T9406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.024464][T17148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.075809][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.024898][T10759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.104612][ T9406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.144310][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.516447][T25262] FAULT_INJECTION: forcing a failure. [ 823.516447][T25262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 823.516480][T25262] CPU: 1 UID: 0 PID: 25262 Comm: syz.3.4480 Not tainted syzkaller #0 PREEMPT(full) [ 823.516501][T25262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 823.516513][T25262] Call Trace: [ 823.516521][T25262] [ 823.516531][T25262] dump_stack_lvl+0xe8/0x150 [ 823.516562][T25262] should_fail_ex+0x410/0x560 [ 823.516589][T25262] _copy_from_user+0x2d/0xb0 [ 823.516614][T25262] ___sys_sendmsg+0x1c6/0x360 [ 823.516645][T25262] ? __lock_acquire+0x747/0x2de0 [ 823.516668][T25262] ? __pfx____sys_sendmsg+0x10/0x10 [ 823.516725][T25262] ? __fget_files+0x2a/0x420 [ 823.516748][T25262] ? __fget_files+0x3a2/0x420 [ 823.516779][T25262] __x64_sys_sendmsg+0x1b1/0x290 [ 823.516806][T25262] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 823.516848][T25262] do_syscall_64+0x166/0x520 [ 823.516870][T25262] ? trace_irq_disable+0x3b/0x140 [ 823.516887][T25262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.516906][T25262] ? clear_bhb_loop+0x70/0xc0 [ 823.516929][T25262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.516947][T25262] RIP: 0033:0x7fe7a099e159 [ 823.516965][T25262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.516980][T25262] RSP: 002b:00007fe7a1919028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 823.516999][T25262] RAX: ffffffffffffffda RBX: 00007fe7a0c25fa0 RCX: 00007fe7a099e159 [ 823.517013][T25262] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 823.517025][T25262] RBP: 00007fe7a1919090 R08: 0000000000000000 R09: 0000000000000000 [ 823.517037][T25262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.517048][T25262] R13: 00007fe7a0c26038 R14: 00007fe7a0c25fa0 R15: 00007ffcb398f428 [ 823.517077][T25262] [ 823.668379][T25260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4477'. [ 823.925466][T25278] ip_tables: iptables: counters copy to user failed while replacing table [ 823.945018][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.070625][T25289] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4487'. [ 824.163167][T25296] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4487'. [ 824.187078][T17148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.468571][T25311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 824.530743][T25314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 824.587725][T25314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 825.030342][T10780] bond1 (unregistering): Released all slaves [ 825.048011][T10780] bond2 (unregistering): Released all slaves [ 825.071197][T10780] bond3 (unregistering): Released all slaves [ 825.092279][T10780] bond4 (unregistering): Released all slaves [ 825.243606][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.288184][T10780] tipc: Left network mode [ 825.418401][T25336] IPVS: set_ctl: invalid protocol: 12 224.0.0.2:20001 [ 825.421088][T25338] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4493'. [ 825.732369][T25352] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4496'. [ 825.760107][T25352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4496'. [ 826.025346][T17697] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 826.274562][ T9406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.713404][T25386] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 826.735053][T25379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4500'. [ 826.788190][T25379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.969288][T25390] syzkaller0: entered promiscuous mode [ 826.969312][T25390] syzkaller0: entered allmulticast mode [ 827.304382][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.509116][T25416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4505'. [ 827.785917][ T3390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.934781][T25427] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4508'. [ 828.335515][T25440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.336142][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.344249][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.424639][ T9267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.494235][T25447] FAULT_INJECTION: forcing a failure. [ 828.494235][T25447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 828.494267][T25447] CPU: 0 UID: 0 PID: 25447 Comm: syz.3.4511 Not tainted syzkaller #0 PREEMPT(full) [ 828.494287][T25447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 828.494299][T25447] Call Trace: [ 828.494307][T25447] [ 828.494316][T25447] dump_stack_lvl+0xe8/0x150 [ 828.494348][T25447] should_fail_ex+0x410/0x560 [ 828.494375][T25447] _copy_from_iter+0x1d3/0x1660 [ 828.494398][T25447] ? __alloc_skb+0x27a/0x7a0 [ 828.494420][T25447] ? __alloc_skb+0x27a/0x7a0 [ 828.494441][T25447] ? __alloc_skb+0x27a/0x7a0 [ 828.494461][T25447] ? __pfx__copy_from_iter+0x10/0x10 [ 828.494480][T25447] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 828.494507][T25447] ? __alloc_skb+0x27a/0x7a0 [ 828.494525][T25447] ? __alloc_skb+0x27a/0x7a0 [ 828.494552][T25447] ? netlink_sendmsg+0x650/0xb40 [ 828.494570][T25447] ? skb_put+0x112/0x210 [ 828.494595][T25447] netlink_sendmsg+0x6c0/0xb40 [ 828.494623][T25447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 828.494649][T25447] ? apparmor_socket_sendmsg+0x98/0x360 [ 828.494673][T25447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 828.494691][T25447] sock_sendmsg_nosec+0x13a/0x180 [ 828.494713][T25447] ____sys_sendmsg+0x54e/0x850 [ 828.494744][T25447] ? __pfx_____sys_sendmsg+0x10/0x10 [ 828.494778][T25447] ? import_iovec+0x73/0xa0 [ 828.494805][T25447] ___sys_sendmsg+0x2a5/0x360 [ 828.494828][T25447] ? __lock_acquire+0x747/0x2de0 [ 828.494853][T25447] ? __pfx____sys_sendmsg+0x10/0x10 [ 828.494912][T25447] ? __fget_files+0x2a/0x420 [ 828.494936][T25447] ? __fget_files+0x3a2/0x420 [ 828.494971][T25447] __x64_sys_sendmsg+0x1b1/0x290 [ 828.494999][T25447] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 828.495045][T25447] do_syscall_64+0x166/0x520 [ 828.495068][T25447] ? trace_irq_disable+0x3b/0x140 [ 828.495087][T25447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.495113][T25447] ? clear_bhb_loop+0x70/0xc0 [ 828.495139][T25447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.495158][T25447] RIP: 0033:0x7fe7a099e159 [ 828.495175][T25447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.495191][T25447] RSP: 002b:00007fe7a1919028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 828.495212][T25447] RAX: ffffffffffffffda RBX: 00007fe7a0c25fa0 RCX: 00007fe7a099e159 [ 828.495226][T25447] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 828.495239][T25447] RBP: 00007fe7a1919090 R08: 0000000000000000 R09: 0000000000000000 [ 828.495251][T25447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 828.495263][T25447] R13: 00007fe7a0c26038 R14: 00007fe7a0c25fa0 R15: 00007ffcb398f428 [ 828.495294][T25447] [ 829.048143][T25449] wlan0 speed is unknown, defaulting to 1000 [ 829.071221][ T9267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.071363][ T9267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.263337][T10759] smbdirect: ib_dev[syz2] removed [ 829.288889][T25451] netlink: 'syz.0.4512': attribute type 15 has an invalid length. [ 829.288979][T25451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4512'. [ 829.443822][T10780] veth1_vlan: left promiscuous mode [ 829.444006][T10780] veth0_vlan: left promiscuous mode [ 830.185729][T25481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4515'. [ 830.440587][T25500] pimreg: entered allmulticast mode [ 830.443417][T25500] pimreg: left allmulticast mode [ 830.569570][T25510] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4518'. [ 830.620823][T10780] IPVS: stop unused estimator thread 0... [ 830.706884][T25502] xt_MASQUERADE: bad MAP_IPS. [ 830.851300][T25520] netlink: 'syz.3.4520': attribute type 10 has an invalid length. [ 831.090612][T25520] 8021q: adding VLAN 0 to HW filter on device  [ 831.139897][T25520] team0: Port device  added [ 831.402583][T25534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4522'. [ 831.478319][ T9406] net_ratelimit: 6 callbacks suppressed [ 831.478337][ T9406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.683415][T25548] netlink: 'syz.4.4524': attribute type 1 has an invalid length. [ 831.880773][T25548] 8021q: adding VLAN 0 to HW filter on device bond12 [ 832.038289][T25563] bond12: (slave gretap2): making interface the new active one [ 832.043663][T25563] bond12: (slave gretap2): Enslaving as an active interface with an up link [ 832.301176][T25584] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4526'. [ 832.507046][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.593802][T15872] bond5: (slave ip6gretap1): link status up again after 0 ms [ 832.593832][T15872] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 832.622600][T17148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.694353][ T85] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 832.804948][ T3390] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 832.838462][T25603] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 832.847730][T25603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4529'. [ 832.858467][T17148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.914534][T10783] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 833.024440][ T85] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 834.300913][T25646] netlink: 280 bytes leftover after parsing attributes in process `syz.4.4537'. [ 834.998559][T25661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4541'. [ 834.999663][T25661] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 835.077024][T25663] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 835.197236][T25668] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 835.241731][T25660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4542'. [ 835.336758][T25673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4547'. [ 835.337081][T25674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4547'. [ 835.788772][T25698] tc action pedit offset must be on 32 bit boundaries [ 835.788791][T25698] tc action pedit offset must be on 32 bit boundaries [ 835.788801][T25698] tc action pedit offset must be on 32 bit boundaries [ 835.788810][T25698] tc action pedit offset must be on 32 bit boundaries [ 835.788819][T25698] tc action pedit offset must be on 32 bit boundaries [ 835.788835][T25698] tc action pedit offset must be on 32 bit boundaries [ 835.788845][T25698] tc action pedit offset must be on 32 bit boundaries [ 835.788854][T25698] tc action pedit offset must be on 32 bit boundaries [ 835.788863][T25698] tc action pedit offset must be on 32 bit boundaries [ 835.788872][T25698] tc action pedit offset must be on 32 bit boundaries [ 835.853218][T25700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4550'. [ 836.064971][T25700] vlan0 (unregistering): left allmulticast mode [ 836.064986][T25700] veth0_vlan (unregistering): left allmulticast mode [ 836.064998][T25700] vlan0 (unregistering): left promiscuous mode [ 836.337880][T25716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4557'. [ 836.484707][ T1167] net_ratelimit: 31 callbacks suppressed [ 836.484728][ T1167] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 836.508671][T25725] syzkaller0: entered promiscuous mode [ 836.508692][T25725] syzkaller0: entered allmulticast mode [ 836.644253][ T1167] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 836.664283][ T9406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.754157][ T3322] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 836.864413][ T1167] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 836.888645][T25731] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 836.905124][T25731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4562'. [ 836.993450][T25742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4565'. [ 836.994937][T25742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4565'. [ 837.005076][T10783] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 837.119847][T10778] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 837.225318][T10780] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 837.335363][ T3322] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 837.442863][T25761] bridge0: entered allmulticast mode [ 837.495062][T10780] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 838.447806][T25794] netlink: 'syz.0.4576': attribute type 1 has an invalid length. [ 838.463829][T25794] 8021q: adding VLAN 0 to HW filter on device bond10 [ 838.487780][T25794] bond10: (slave veth9): Enslaving as an active interface with a down link [ 838.627283][T25794] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 838.630087][T25794] bond10: (slave batadv1): making interface the new active one [ 838.631316][T25794] batadv1: entered promiscuous mode [ 838.631790][T25794] bond10: (slave batadv1): Enslaving as an active interface with an up link [ 838.794673][T25281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 838.802012][T25281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 838.811182][T25281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 838.828872][T25281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 838.831581][T25281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 840.104795][T25799] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.104972][T25799] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.105103][T25799] bridge_slave_0: entered allmulticast mode [ 840.106861][T25799] bridge_slave_0: entered promiscuous mode [ 840.136416][T25799] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.136584][T25799] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.136727][T25799] bridge_slave_1: entered allmulticast mode [ 840.138475][T25799] bridge_slave_1: entered promiscuous mode [ 840.161718][T25853] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4586'. [ 840.168021][T25854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4582'. [ 840.242659][T25799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.257652][T25799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.300041][T25799] team0: Port device team_slave_0 added [ 840.302834][T25799] team0: Port device team_slave_1 added [ 840.346327][T25799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.346344][T25799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.346366][T25799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.348387][T25799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.348401][T25799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.348423][T25799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.566803][T25799] hsr_slave_0: entered promiscuous mode [ 840.574862][T25799] hsr_slave_1: entered promiscuous mode [ 840.575913][T25799] debugfs: 'hsr0' already exists in 'hsr' [ 840.575933][T25799] Cannot create hsr debugfs directory [ 840.663128][T25281] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 840.686936][T25281] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 840.688199][T25281] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 840.690359][T25281] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 840.691071][T25281] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 840.905086][T25281] Bluetooth: hci1: command tx timeout [ 841.391354][T25799] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 841.407550][T25799] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 841.408350][T25799] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 841.411518][T25799] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 841.412318][T25799] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 841.445572][T25799] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 841.448211][T25799] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 841.465572][T25799] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 841.554059][T25881] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4592'. [ 841.574497][T25881] bridge0: entered allmulticast mode [ 841.666586][ T1039] net_ratelimit: 2092 callbacks suppressed [ 841.666607][ T1039] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 841.704459][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.704851][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.753789][T25896] IPv6: addrconf: prefix option has invalid lifetime [ 841.867269][T17148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.894101][T15872] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 841.933377][T25899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 841.980119][T25799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.003180][ T1167] nci: nci_rx_work: unknown MT 0x6 [ 842.013340][T25900] netlink: 'syz.0.4593': attribute type 4 has an invalid length. [ 842.013361][T25900] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4593'. [ 842.047841][T25900] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 842.066694][T25799] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.078359][ T1039] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.078456][ T1039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.090532][T10777] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.090628][T10777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.235477][T25865] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.235537][T25865] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.235610][T25865] bridge_slave_0: entered allmulticast mode [ 842.236719][T25865] bridge_slave_0: entered promiscuous mode [ 842.241971][T25865] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.242071][T25865] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.242195][T25865] bridge_slave_1: entered allmulticast mode [ 842.243879][T25865] bridge_slave_1: entered promiscuous mode [ 842.313774][T25865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 842.325163][ T1039] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 842.332369][T25865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 842.385644][T25865] team0: Port device team_slave_0 added [ 842.388815][T25865] team0: Port device team_slave_1 added [ 842.431621][T25865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 842.431639][T25865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.431662][T25865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 842.437585][T25865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 842.437601][T25865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.437623][T25865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.518272][ T8560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.550430][T25865] hsr_slave_0: entered promiscuous mode [ 842.551426][T25865] hsr_slave_1: entered promiscuous mode [ 842.552127][T25865] debugfs: 'hsr0' already exists in 'hsr' [ 842.552145][T25865] Cannot create hsr debugfs directory [ 842.554267][T10777] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 842.747948][T25281] Bluetooth: hci6: command tx timeout [ 842.810201][T25918] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4595'. [ 842.867495][T25920] x_tables: duplicate underflow at hook 1 [ 842.871745][ T31] audit: type=1804 audit(1790135191.020:15): pid=25920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4595" name="/newroot/341/cgroup.controllers" dev="tmpfs" ino=1761 res=1 errno=0 [ 842.871882][ T31] audit: type=1800 audit(1790135191.020:16): pid=25920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4595" name="cgroup.controllers" dev="tmpfs" ino=1761 res=0 errno=0 [ 842.984351][T25281] Bluetooth: hci1: command tx timeout [ 843.036562][T25799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.233281][T25799] veth0_vlan: entered promiscuous mode [ 843.242249][T25799] veth1_vlan: entered promiscuous mode [ 843.270484][T25799] veth0_macvtap: entered promiscuous mode [ 843.273536][T25799] veth1_macvtap: entered promiscuous mode [ 843.291130][T25799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 843.309230][T25799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 843.359032][T15873] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.359798][ T1039] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.359834][ T1039] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.359861][ T1039] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.752201][T25896] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 844.767325][T25865] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 844.832447][T25865] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 844.832931][T25281] Bluetooth: hci6: command tx timeout [ 844.866961][T25865] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 844.870297][T25865] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 844.882002][T25865] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 844.897547][T25865] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 844.898405][T25865] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 844.902249][T25865] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 844.949202][T15873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.949224][T15873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.982812][T25931] IPVS: Scheduler module ip_vs_sip not found [ 845.010895][T25931] netlink: 'syz.4.4596': attribute type 1 has an invalid length. [ 845.047205][T25931] 8021q: adding VLAN 0 to HW filter on device bond13 [ 845.065631][T25281] Bluetooth: hci1: command tx timeout [ 845.134800][ T3390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 845.134822][ T3390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 845.145490][T25931] netlink: 'syz.4.4596': attribute type 2 has an invalid length. [ 845.176304][T25931] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4596'. [ 845.320501][T25946] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4577'. [ 845.363128][T25865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.437515][T25865] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.456033][ T1039] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.456137][ T1039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.483300][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.483400][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.654907][T25941] xt_LOG: prefix is not null-terminated [ 846.579299][T25865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 846.714417][T10777] net_ratelimit: 40 callbacks suppressed [ 846.714439][T10777] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 846.864280][ T3390] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 846.905708][T25281] Bluetooth: hci6: command tx timeout [ 846.979619][T10779] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 847.065244][T17148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.144293][T25281] Bluetooth: hci1: command tx timeout [ 847.178732][T26007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.181003][T26007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.188768][T26007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.189052][T26007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.189322][T26007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.191983][T26007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.501153][T25865] veth0_vlan: entered promiscuous mode [ 847.699804][T25865] veth1_vlan: entered promiscuous mode [ 847.769732][T26029] syzkaller0: entered promiscuous mode [ 847.769757][T26029] syzkaller0: entered allmulticast mode [ 848.071472][T26041] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 848.268762][T26040] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4615'. [ 848.986597][T25281] Bluetooth: hci6: command tx timeout [ 850.551140][T25865] veth0_macvtap: entered promiscuous mode [ 850.557327][T25865] veth1_macvtap: entered promiscuous mode [ 850.573307][T25865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 850.593228][T25865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 850.666643][T10757] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.666853][T15873] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.666887][T15873] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.666918][T15873] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.667405][T26031] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 850.737404][ T1167] batadv1: left promiscuous mode [ 850.796092][T10757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.796113][T10757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.932349][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.932395][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.736421][T26092] netlink: 4912 bytes leftover after parsing attributes in process `syz.6.4627'. [ 851.825226][ T1167] net_ratelimit: 34 callbacks suppressed [ 851.825246][ T1167] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 851.934119][ T1167] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 852.046718][T10757] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 852.138983][T26101] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4629'. [ 852.139147][T26109] x_tables: duplicate underflow at hook 2 [ 852.159661][ T31] audit: type=1107 audit(1790135200.310:17): pid=26107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ÿ' [ 852.178257][T10779] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 852.265188][ T9406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.284345][T10777] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 852.354492][T26120] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4636'. [ 852.358613][T26120] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4636'. [ 852.398032][T15873] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 852.449615][T26124] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4637'. [ 852.516637][T10777] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 852.624492][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 852.734454][ T1167] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 852.958769][T17697] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 852.961950][T17697] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 852.967909][T17697] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 852.975430][T17697] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 852.978177][T17697] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 853.151474][T26153] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 853.360959][T26160] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4645'. [ 853.691145][T15873] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 853.910249][T26172] syzkaller0: entered promiscuous mode [ 853.910271][T26172] syzkaller0: entered allmulticast mode [ 853.942024][T26194] FAULT_INJECTION: forcing a failure. [ 853.942024][T26194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.942054][T26194] CPU: 0 UID: 0 PID: 26194 Comm: syz.5.4650 Not tainted syzkaller #0 PREEMPT(full) [ 853.942076][T26194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 853.942088][T26194] Call Trace: [ 853.942096][T26194] [ 853.942105][T26194] dump_stack_lvl+0xe8/0x150 [ 853.942137][T26194] should_fail_ex+0x410/0x560 [ 853.942165][T26194] _copy_from_user+0x2d/0xb0 [ 853.942192][T26194] kstrtouint_from_user+0xd6/0x180 [ 853.942216][T26194] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 853.942246][T26194] ? lock_acquire+0x115/0x350 [ 853.942272][T26194] proc_fail_nth_write+0x8e/0x210 [ 853.942292][T26194] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 853.942320][T26194] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 853.942339][T26194] vfs_write+0x296/0xba0 [ 853.942376][T26194] ? __pfx_vfs_write+0x10/0x10 [ 853.942405][T26194] ? __fget_files+0x2a/0x420 [ 853.942434][T26194] ? __fget_files+0x3a2/0x420 [ 853.942457][T26194] ? __fget_files+0x2a/0x420 [ 853.942490][T26194] ksys_write+0x150/0x270 [ 853.942520][T26194] ? __pfx_ksys_write+0x10/0x10 [ 853.942561][T26194] do_syscall_64+0x166/0x520 [ 853.942584][T26194] ? trace_irq_disable+0x3b/0x140 [ 853.942603][T26194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.942623][T26194] ? clear_bhb_loop+0x70/0xc0 [ 853.942643][T26194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.942661][T26194] RIP: 0033:0x7f6081d5e98e [ 853.942678][T26194] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 853.942694][T26194] RSP: 002b:00007f6082d12fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 853.942714][T26194] RAX: ffffffffffffffda RBX: 00007f6082d136c0 RCX: 00007f6081d5e98e [ 853.942727][T26194] RDX: 0000000000000001 RSI: 00007f6082d130a0 RDI: 0000000000000007 [ 853.942739][T26194] RBP: 00007f6082d13090 R08: 0000000000000000 R09: 0000000000000000 [ 853.942750][T26194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.942762][T26194] R13: 00007f6082026128 R14: 00007f6082026090 R15: 00007ffd7aa05998 [ 853.942794][T26194] [ 854.025158][T26195] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4651'. [ 854.257019][T26197] x_tables: ip_tables: ah match: only valid for protocol 51 [ 855.071827][T17697] Bluetooth: hci7: command tx timeout [ 856.524393][T26171] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 857.154486][T17697] Bluetooth: hci7: command tx timeout [ 857.474616][ T5717] net_ratelimit: 21 callbacks suppressed [ 857.474630][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.534449][T15872] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 857.743639][T26147] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.743767][T26147] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.743910][T26147] bridge_slave_0: entered allmulticast mode [ 857.747768][T26147] bridge_slave_0: entered promiscuous mode [ 857.751408][T26230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4656'. [ 857.772216][T26147] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.772388][T26147] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.772528][T26147] bridge_slave_1: entered allmulticast mode [ 857.780398][T26147] bridge_slave_1: entered promiscuous mode [ 857.908073][T10777] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 858.036350][T26147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.062154][T26147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.117270][T26147] team0: Port device team_slave_0 added [ 858.122834][T26147] team0: Port device team_slave_1 added [ 858.163475][T26147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.163508][T26147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.163530][T26147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.172591][T26147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.172606][T26147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.208160][T26249] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4660'. [ 858.263930][T26147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.329910][T26147] hsr_slave_0: entered promiscuous mode [ 858.330862][T26147] hsr_slave_1: entered promiscuous mode [ 858.331540][T26147] debugfs: 'hsr0' already exists in 'hsr' [ 858.331557][T26147] Cannot create hsr debugfs directory [ 858.399022][T26249] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4660'. [ 858.445846][ T3390] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 858.548698][T17146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.560283][T26263] geneve2: entered promiscuous mode [ 858.563378][T10777] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 858.609443][T26271] ip6tnl1: entered allmulticast mode [ 858.844576][T26284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4664'. [ 858.847163][ T3390] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 858.993613][T15872] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 858.993853][T15872] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 858.994406][T15872] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 858.994764][T26297] syzkaller1: entered promiscuous mode [ 858.994782][T26297] syzkaller1: entered allmulticast mode [ 859.014285][T26293] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 859.227598][T17697] Bluetooth: hci7: command tx timeout [ 859.227660][ T3390] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 859.357069][ T3390] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 859.523281][T26147] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 859.530776][T26147] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 859.532553][T26147] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 859.534263][T26292] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 859.584271][T26147] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 859.586565][T26147] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 859.610736][T26147] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 859.611594][T26147] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 859.633042][T26147] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 859.923641][T26147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 860.022801][T26147] 8021q: adding VLAN 0 to HW filter on device team0 [ 860.024885][T26291] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 860.081123][ T3390] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.081227][ T3390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 860.094774][T26345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4675'. [ 860.099521][ T3390] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.099618][ T3390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 860.476055][T26368] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4682'. [ 860.476237][T26368] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4682'. [ 860.476398][T26368] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4682'. [ 860.476550][T26368] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4682'. [ 860.476731][T26368] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4682'. [ 861.241042][T26147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 861.305711][T17697] Bluetooth: hci7: command tx timeout [ 861.568340][T26408] vlan2: entered promiscuous mode [ 861.568370][T26408] macvlan0: entered promiscuous mode [ 861.672691][T26147] veth0_vlan: entered promiscuous mode [ 861.703399][T26147] veth1_vlan: entered promiscuous mode [ 861.817667][T26147] veth0_macvtap: entered promiscuous mode [ 861.822860][T26147] veth1_macvtap: entered promiscuous mode [ 861.854225][T26147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 861.884478][T26147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 861.907233][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.988848][ T1167] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.988880][ T1167] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.988899][ T1167] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.356608][T15873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.356629][T15873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.518510][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.518530][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.524553][ T1167] net_ratelimit: 26 callbacks suppressed [ 862.524571][ T1167] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 862.621075][T26425] netlink: 'syz.4.4694': attribute type 2 has an invalid length. [ 862.635050][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 862.744881][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.746212][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 862.857237][T10779] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 862.965564][ T1039] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 862.984582][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 863.354186][ T1167] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 863.451132][T26462] __nla_validate_parse: 35 callbacks suppressed [ 863.451152][T26462] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4705'. [ 863.540527][ T1167] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 863.542277][T26465] tap0: tun_chr_ioctl cmd 1074025677 [ 863.542373][T26465] tap0: linktype set to 776 [ 863.543625][T26465] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4707'. [ 863.585752][T26467] nbd: must specify a size in bytes for the device [ 863.593237][T26465] tap0: tun_chr_ioctl cmd 2147767520 [ 863.642173][T26462] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4705'. [ 863.661451][T26470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.664285][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 864.003252][T26482] netlink: 'syz.7.4711': attribute type 1 has an invalid length. [ 864.017474][ T31] audit: type=1800 audit(1790135212.170:18): pid=26482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4711" name="memory.events" dev="tmpfs" ino=38 res=0 errno=0 [ 864.408926][T26495] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 864.629584][T26501] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4718'. [ 864.853257][T26523] netlink: 'syz.7.4721': attribute type 1 has an invalid length. [ 864.853277][T26523] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4721'. [ 864.952911][T26521] netlink: 'syz.7.4721': attribute type 1 has an invalid length. [ 864.952931][T26521] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4721'. [ 865.042257][T26513] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4720'. [ 865.047495][T26526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 865.261297][T26506] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 865.413860][T26536] tipc: Enabled bearer , priority 0 [ 865.423349][T26536] syzkaller0: entered promiscuous mode [ 865.423368][T26536] syzkaller0: entered allmulticast mode [ 865.598837][T26541] tipc: Resetting bearer [ 865.639323][T26535] tipc: Resetting bearer [ 865.707430][T26535] tipc: Disabling bearer [ 865.863034][T26558] netlink: 'syz.0.4730': attribute type 2 has an invalid length. [ 865.948099][T26560] s: renamed from veth0 (while UP) [ 866.033154][T26565] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4735'. [ 866.231262][T26574] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4733'. [ 866.245393][T26574] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4733'. [ 866.496547][T26591] syzkaller0: entered promiscuous mode [ 866.496568][T26591] syzkaller0: entered allmulticast mode [ 866.921719][T26614] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 867.035144][ T39] IPVS: starting estimator thread 0... [ 867.039651][ T31] audit: type=1804 audit(1790135215.190:19): pid=26617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4745" name="/newroot/28/cgroup.controllers" dev="tmpfs" ino=160 res=1 errno=0 [ 867.039691][ T31] audit: type=1800 audit(1790135215.190:20): pid=26617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4745" name="cgroup.controllers" dev="tmpfs" ino=160 res=0 errno=0 [ 867.134612][T26618] IPVS: using max 32 ests per chain, 76800 per kthread [ 867.317051][T26623] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 867.413340][T26622] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 867.534177][ T50] net_ratelimit: 36 callbacks suppressed [ 867.534197][ T50] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 867.706363][T10768] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 867.814143][ T39] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 867.925591][T10775] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 867.944885][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.109389][ T1039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.110650][ T3390] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 868.155925][T26652] bridge0: port 3(erspan0) entered blocking state [ 868.156080][T26652] bridge0: port 3(erspan0) entered disabled state [ 868.156233][T26652] erspan0: entered allmulticast mode [ 868.158112][T26652] erspan0: entered promiscuous mode [ 868.158713][T26652] bridge0: port 3(erspan0) entered blocking state [ 868.158803][T26652] bridge0: port 3(erspan0) entered forwarding state [ 868.216195][ T39] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 868.236700][T26657] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 868.236823][T26657] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 868.325622][ T1039] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 868.351306][T26660] netlink: 'syz.7.4756': attribute type 1 has an invalid length. [ 868.837427][T26687] __nla_validate_parse: 38 callbacks suppressed [ 868.837447][T26687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4760'. [ 869.023047][T26692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4762'. [ 869.023227][T26691] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4762'. [ 869.091066][T26689] tc_dump_action: action bad kind [ 869.106228][T26697] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4764'. [ 869.700959][T26724] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4769'. [ 869.700993][T26724] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4769'. [ 869.702730][T26715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4765'. [ 869.736780][T26724] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4769'. [ 869.736813][T26724] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4769'. [ 869.742768][T26724] batadv_slave_1: entered promiscuous mode [ 869.749633][T26723] batadv_slave_1: left promiscuous mode [ 869.777706][T26715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4765'. [ 870.003454][T26731] syzkaller1: entered promiscuous mode [ 870.003476][T26731] syzkaller1: entered allmulticast mode [ 870.034511][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.719210][T26753] bond14: option updelay: invalid value (18446744073709518847) [ 870.719226][T26753] bond14: option updelay: allowed values 0 - 2147483647 [ 870.720467][T26753] bond14 (unregistering): Released all slaves [ 871.304509][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 872.365330][T26823] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 872.600836][T26796] infiniband syz2: set active [ 872.600859][T26796] infiniband syz2: added team_slave_0 [ 872.764142][T10768] net_ratelimit: 37 callbacks suppressed [ 872.764163][T10768] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 872.769541][T26796] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 872.769577][T26796] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 872.769614][T26796] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 872.906077][T26796] RDS/IB: syz2: added [ 872.906801][T26796] smc: adding ib device syz2 with port count 1 [ 872.906939][T26796] smc: ib device syz2 port 1 has no pnetid [ 873.036580][T10775] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 873.146081][ T9406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.148039][T10775] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 873.375838][T15873] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 873.531632][T26862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 873.577469][T26862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 873.667508][ T50] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 873.774630][ T50] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 873.830695][T26876] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 873.831308][T26876] netlink: 'syz.6.4808': attribute type 1 has an invalid length. [ 873.867804][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.947228][ T50] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 873.989303][T26879] bond1: (slave veth3): Enslaving as an active interface with a down link [ 873.990887][T26877] __nla_validate_parse: 46 callbacks suppressed [ 873.990906][T26877] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4807'. [ 874.054788][T26876] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4808'. [ 874.090410][T26882] bond1: (slave veth5): Enslaving as an active interface with a down link [ 874.109479][T26876] 8021q: adding VLAN 0 to HW filter on device bond1 [ 874.283591][T26894] veth0: entered promiscuous mode [ 874.336341][T26893] veth0: left promiscuous mode [ 874.540948][T26900] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4815'. [ 874.821949][T26914] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4818'. [ 874.821976][T26914] netlink: 67 bytes leftover after parsing attributes in process `syz.7.4818'. [ 874.998013][T26918] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4820'. [ 875.391397][T26929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4823'. [ 875.430830][T26931] FAULT_INJECTION: forcing a failure. [ 875.430830][T26931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 875.430861][T26931] CPU: 0 UID: 0 PID: 26931 Comm: syz.4.4824 Not tainted syzkaller #0 PREEMPT(full) [ 875.430882][T26931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 875.430894][T26931] Call Trace: [ 875.430901][T26931] [ 875.430909][T26931] dump_stack_lvl+0xe8/0x150 [ 875.430941][T26931] should_fail_ex+0x410/0x560 [ 875.430968][T26931] _copy_from_user+0x2d/0xb0 [ 875.430991][T26931] __sys_bpf+0x2e7/0xd90 [ 875.431019][T26931] ? __pfx___sys_bpf+0x10/0x10 [ 875.431048][T26931] ? __fget_files+0x2a/0x420 [ 875.431087][T26931] ? ksys_write+0x242/0x270 [ 875.431115][T26931] ? __pfx_ksys_write+0x10/0x10 [ 875.431146][T26931] __x64_sys_bpf+0xba/0xd0 [ 875.431168][T26931] do_syscall_64+0x166/0x520 [ 875.431190][T26931] ? trace_irq_disable+0x3b/0x140 [ 875.431208][T26931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.431227][T26931] ? clear_bhb_loop+0x70/0xc0 [ 875.431249][T26931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.431265][T26931] RIP: 0033:0x7f8270d9e159 [ 875.431282][T26931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.431296][T26931] RSP: 002b:00007f8271cb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 875.431317][T26931] RAX: ffffffffffffffda RBX: 00007f8271025fa0 RCX: 00007f8270d9e159 [ 875.431331][T26931] RDX: 0000000000000038 RSI: 0000200000004500 RDI: 0000000000000019 [ 875.431344][T26931] RBP: 00007f8271cb2090 R08: 0000000000000000 R09: 0000000000000000 [ 875.431356][T26931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.431368][T26931] R13: 00007f8271026038 R14: 00007f8271025fa0 R15: 00007ffd0a708e08 [ 875.431406][T26931] [ 875.910522][T26952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4831'. [ 876.303176][T26968] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4835'. [ 876.321546][T26964] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 876.342276][T26964] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4833'. [ 877.672202][T27004] netlink: 'syz.6.4843': attribute type 1 has an invalid length. [ 877.737233][T27004] bond2: entered promiscuous mode [ 877.737644][T27004] 8021q: adding VLAN 0 to HW filter on device bond2 [ 877.855872][T10775] net_ratelimit: 35 callbacks suppressed [ 877.855893][T10775] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 877.965125][ T3390] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 878.079590][T10775] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 878.129483][T27021] xt_hashlimit: size too large, truncated to 1048576 [ 878.227023][T27030] batadv_slave_1: entered promiscuous mode [ 878.245563][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 878.306323][T27032] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 878.332278][T27032] IPv6: addrconf: prefix option has invalid lifetime [ 878.346305][T17146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.356982][T10768] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 878.464898][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 878.574124][T10768] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 878.685044][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 878.734568][T27040] tipc: Started in network mode [ 878.734598][T27040] tipc: Node identity 3a8ec63c5e7d, cluster identity 4711 [ 878.734762][T27040] tipc: Enabled bearer , priority 1 [ 878.740216][T27018] batadv_slave_1: left promiscuous mode [ 879.049430][T27054] netlink: 'syz.5.4854': attribute type 29 has an invalid length. [ 879.180871][T27037] tipc: Resetting bearer [ 879.239960][T27037] tipc: Disabling bearer [ 879.538292][T27071] FAULT_INJECTION: forcing a failure. [ 879.538292][T27071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 879.538332][T27071] CPU: 1 UID: 0 PID: 27071 Comm: syz.7.4859 Not tainted syzkaller #0 PREEMPT(full) [ 879.538353][T27071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 879.538364][T27071] Call Trace: [ 879.538371][T27071] [ 879.538379][T27071] dump_stack_lvl+0xe8/0x150 [ 879.538410][T27071] should_fail_ex+0x410/0x560 [ 879.538433][T27071] _copy_to_user+0x31/0xb0 [ 879.538457][T27071] __htab_map_lookup_and_delete_batch+0x1807/0x1a50 [ 879.538516][T27071] ? __pfx___htab_map_lookup_and_delete_batch+0x10/0x10 [ 879.538545][T27071] ? __pfx_htab_map_lookup_and_delete_batch+0x10/0x10 [ 879.538572][T27071] bpf_map_do_batch+0x445/0x630 [ 879.538601][T27071] __sys_bpf+0x906/0xd90 [ 879.538629][T27071] ? __pfx___sys_bpf+0x10/0x10 [ 879.538660][T27071] ? __fget_files+0x2a/0x420 [ 879.538699][T27071] ? ksys_write+0x242/0x270 [ 879.538727][T27071] ? __pfx_ksys_write+0x10/0x10 [ 879.538756][T27071] __x64_sys_bpf+0xba/0xd0 [ 879.538778][T27071] do_syscall_64+0x166/0x520 [ 879.538800][T27071] ? trace_irq_disable+0x3b/0x140 [ 879.538818][T27071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.538837][T27071] ? clear_bhb_loop+0x70/0xc0 [ 879.538859][T27071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.538878][T27071] RIP: 0033:0x7f740b39e159 [ 879.538896][T27071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.538910][T27071] RSP: 002b:00007f740c193028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 879.538931][T27071] RAX: ffffffffffffffda RBX: 00007f740b625fa0 RCX: 00007f740b39e159 [ 879.538945][T27071] RDX: 0000000000000038 RSI: 0000200000004500 RDI: 0000000000000019 [ 879.538957][T27071] RBP: 00007f740c193090 R08: 0000000000000000 R09: 0000000000000000 [ 879.538970][T27071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.538982][T27071] R13: 00007f740b626038 R14: 00007f740b625fa0 R15: 00007ffc1621a5a8 [ 879.539012][T27071] [ 879.541237][T27064] 8021q: adding VLAN 0 to HW filter on device bond1 [ 879.541943][T27064] geneve0: entered promiscuous mode [ 880.433040][T27091] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 880.497227][T27092] __nla_validate_parse: 2 callbacks suppressed [ 880.497246][T27092] netlink: 388 bytes leftover after parsing attributes in process `syz.7.4866'. [ 880.498960][T27085] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4865'. [ 880.692503][T27096] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.4868'. [ 881.322173][T27125] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4874'. [ 882.045163][T27142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4880'. [ 882.934362][T10755] net_ratelimit: 42 callbacks suppressed [ 882.934383][T10755] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 882.967546][T27155] netlink: 332 bytes leftover after parsing attributes in process `syz.7.4884'. [ 882.967601][T27155] netlink: 'syz.7.4884': attribute type 9 has an invalid length. [ 882.967613][T27155] netlink: 108 bytes leftover after parsing attributes in process `syz.7.4884'. [ 882.967626][T27155] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4884'. [ 882.969333][T27155] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4884'. [ 883.368548][T27155] netlink: 'syz.7.4884': attribute type 1 has an invalid length. [ 883.494213][T10757] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 883.545148][T17146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.572826][T27168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4889'. [ 883.646576][ T1039] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 883.776508][T10755] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 883.836458][T27184] netlink: 'syz.5.4891': attribute type 1 has an invalid length. [ 883.906733][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 884.007035][T27194] netlink: 'syz.6.4894': attribute type 1 has an invalid length. [ 884.092167][T27194] 8021q: adding VLAN 0 to HW filter on device bond3 [ 884.112775][T10757] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 884.255427][T10755] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 884.301833][T27202] macvlan2: entered promiscuous mode [ 884.301855][T27202] macvlan2: entered allmulticast mode [ 884.302390][T27202] bond3: entered allmulticast mode [ 884.302492][T27202] bond3: entered promiscuous mode [ 884.329371][T27202] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 884.343055][T27202] team0: Port device macvlan2 added [ 884.364244][T10757] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 884.466854][T27194] bond3: (slave ip6gretap1): making interface the new active one [ 884.466879][T27194] ip6gretap1: entered promiscuous mode [ 884.467027][T27194] ip6gretap1: entered allmulticast mode [ 884.482457][T27194] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 884.584672][T17146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.833126][T27208] x_tables: duplicate underflow at hook 1 [ 885.582066][T27248] __nla_validate_parse: 9 callbacks suppressed [ 885.582085][T27248] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4906'. [ 885.617291][T27251] syzkaller1: entered promiscuous mode [ 885.617312][T27251] syzkaller1: entered allmulticast mode [ 886.149370][T17697] Bluetooth: hci6: connection err: -111 [ 887.304387][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 887.974156][T10757] net_ratelimit: 33 callbacks suppressed [ 887.974177][T10757] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 888.084199][ T1039] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 888.194242][ T1039] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 888.304218][ T1039] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 888.414533][ T1039] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 888.524194][T10757] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 888.528942][T27244] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 888.638245][T10755] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 888.747411][T17146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.748936][T10757] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 888.806704][T27298] Bluetooth: MGMT ver 1.23 [ 888.865771][T27304] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4915'. [ 888.869183][T27304] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4915'. [ 888.924237][ T1039] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 888.942935][T27304] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 889.005647][T27296] syzkaller0: entered promiscuous mode [ 889.005691][T27296] syzkaller0: entered allmulticast mode [ 889.006780][T27304] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4915'. [ 889.122110][T27304] hsr_slave_1 (unregistering): left promiscuous mode [ 889.260554][T27323] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4920'. [ 889.410336][T27331] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4923'. [ 889.410360][T27331] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4923'. [ 889.491316][T27330] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4924'. [ 889.491870][T27330] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4924'. [ 889.493291][T27330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4924'. [ 889.722215][T27341] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 890.065511][T27360] macsec1: entered promiscuous mode [ 890.065538][T27360] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 890.065753][T27360] macsec1: entered allmulticast mode [ 890.065771][T27360] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 890.066282][T27360] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 890.112467][T27360] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 890.112494][T27360] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 890.219723][ T13] IPVS: starting estimator thread 0... [ 890.304589][T27365] IPVS: using max 31 ests per chain, 74400 per kthread [ 890.311027][T27368] ip6gre1: entered allmulticast mode [ 890.499639][T27383] Bluetooth: hci0: unsupported parameter 5161 [ 890.499660][T27383] Bluetooth: hci0: unsupported parameter 8192 [ 890.499707][T27383] Bluetooth: hci0: unsupported parameter 5161 [ 890.499720][T27383] Bluetooth: hci0: unsupported parameter 8192 [ 890.851190][T27383] mac80211_hwsim hwsim48 wlan0: entered promiscuous mode [ 890.853190][T27383] batman_adv: batadv0: Adding interface: macvlan0 [ 890.853204][T27383] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.853396][T27383] batman_adv: batadv0: Interface activated: macvlan0 [ 890.867314][T27388] tipc: Started in network mode [ 890.867341][T27388] tipc: Node identity 8ea61e62e605, cluster identity 4711 [ 890.867488][T27388] tipc: Enabled bearer , priority 1 [ 890.899402][T27380] tipc: Resetting bearer [ 891.172011][T27380] tipc: Disabling bearer [ 891.655298][T27426] netlink: 'syz.7.4943': attribute type 1 has an invalid length. [ 891.656575][T27422] __nla_validate_parse: 4 callbacks suppressed [ 891.656592][T27422] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4944'. [ 891.656939][T27422] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4944'. [ 891.798357][T27430] netlink: 'syz.6.4945': attribute type 9 has an invalid length. [ 891.798377][T27430] netlink: 'syz.6.4945': attribute type 5 has an invalid length. [ 891.843754][T27426] 8021q: adding VLAN 0 to HW filter on device bond2 [ 891.924552][T27425] veth5: entered allmulticast mode [ 891.976996][T27425] bond2: (slave veth5): Enslaving as an active interface with an up link [ 892.473947][T27447] xt_CT: No such helper "snmp" [ 892.537054][T27461] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4953'. [ 892.809714][T27477] IPv6: Can't replace route, no match found [ 893.219236][T27474] udevd[27474]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 893.229867][T25800] udevd[25800]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 893.245307][T27451] net_ratelimit: 37 callbacks suppressed [ 893.245325][T27451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.245502][T27451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.246321][T27485] x_tables: duplicate underflow at hook 4 [ 893.454600][T10757] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 893.577335][T10775] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 893.709040][ T50] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 893.726494][T27501] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4961'. [ 893.814976][T10755] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 893.933722][T27517] xt_hashlimit: size too large, truncated to 1048576 [ 893.954502][ T9406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.067793][T27520] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4966'. [ 894.099926][T10775] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 894.205733][T10775] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 894.300165][T27527] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4970'. [ 894.300199][T27527] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4970'. [ 894.333723][T27527] gretap0: entered promiscuous mode [ 894.342891][T27527] gretap0: left promiscuous mode [ 894.446572][ T3390] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 894.562844][T27544] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4973'. [ 894.569813][T27546] IPVS: set_ctl: invalid protocol: 111 172.30.1.1:20001 [ 894.672041][T27549] erspan0: left allmulticast mode [ 894.672065][T27549] erspan0: left promiscuous mode [ 894.672300][T27549] bridge0: port 3(erspan0) entered disabled state [ 894.776329][T27549] bridge_slave_0: left allmulticast mode [ 894.776354][T27549] bridge_slave_0: left promiscuous mode [ 894.776563][T27549] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.923186][T27549] bridge_slave_1: left allmulticast mode [ 894.923212][T27549] bridge_slave_1: left promiscuous mode [ 894.923564][T27549] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.083072][T27549] bond0: (slave bond_slave_0): Releasing backup interface [ 895.126804][T27549] bond0: (slave bond_slave_1): Releasing backup interface [ 895.160729][T27549] team0: Port device team_slave_0 removed [ 895.182357][T27549] team0: Port device team_slave_1 removed [ 895.192952][T27549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 895.192975][T27549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 895.218472][T27549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 895.218496][T27549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 895.502485][T27573] Bluetooth: ISO socket layer initialized [ 895.588935][T27582] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4985'. [ 895.671179][T27588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4987'. [ 895.888896][T27601] dvmrp8: entered allmulticast mode [ 898.264364][ T3390] net_ratelimit: 36 callbacks suppressed [ 898.264386][ T3390] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 898.374115][T15873] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 898.423362][T27573] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 898.484867][T15873] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 898.615627][ T3390] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 898.752500][T10757] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 898.874367][T27630] ip_tables: iptables: counters copy to user failed while replacing table [ 898.874464][T10757] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 898.875056][T27630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.875239][T27630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.875521][T27630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.937088][T27676] __nla_validate_parse: 1 callbacks suppressed [ 899.937107][T27676] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5007'. [ 900.149012][T27685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5010'. [ 900.151330][T27685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5010'. [ 900.253382][T27690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5010'. [ 900.277357][T27688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5010'. [ 900.297665][T27693] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5012'. [ 900.367533][T27693] bond4: option broadcast_neighbor: invalid value (3) [ 900.388591][T27693] bond4 (unregistering): Released all slaves [ 900.469805][T27715] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5014'. [ 900.484050][T27712] netlink: 'syz.5.5013': attribute type 16 has an invalid length. [ 900.484071][T27712] netlink: 'syz.5.5013': attribute type 17 has an invalid length. [ 900.983230][T26293] hid-generic 0005:16C0:0009.0005: item fetching failed at offset 0/1 [ 900.984419][T26293] hid-generic 0005:16C0:0009.0005: probe with driver hid-generic failed with error -22 [ 901.151233][T27736] netlink: 'syz.0.5018': attribute type 1 has an invalid length. [ 901.151253][T27736] netlink: 'syz.0.5018': attribute type 2 has an invalid length. [ 901.151264][T27736] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5018'. [ 902.623596][T27780] syzkaller0: entered promiscuous mode [ 902.623619][T27780] syzkaller0: entered allmulticast mode [ 902.660820][T27780] tipc: Enabled bearer , priority 0 [ 902.688852][T27780] tipc: Resetting bearer [ 902.770727][T27775] tipc: Resetting bearer [ 902.810764][T27775] tipc: Disabling bearer [ 902.938687][T27812] netlink: 'syz.7.5036': attribute type 2 has an invalid length. [ 903.281455][ T39] net_ratelimit: 42 callbacks suppressed [ 903.281477][ T39] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 903.305392][ T9406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.387481][ T39] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 903.489627][T27823] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 903.507426][T27823] bond2 (unregistering): Released all slaves [ 903.555689][T10775] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 903.567627][T27821] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 903.603873][T27821] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5038'. [ 903.975592][T26286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.014731][ T1039] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 904.130588][T27844] netlink: 'syz.6.5045': attribute type 1 has an invalid length. [ 904.147554][T27836] bond11: option fail_over_mac: invalid value (127) [ 904.149812][T27836] bond11 (unregistering): Released all slaves [ 904.213177][T27840] ip_tables: iptables: counters copy to user failed while replacing table [ 904.220424][T27844] 8021q: adding VLAN 0 to HW filter on device bond4 [ 904.233480][T27853] bond4: (slave ip6erspan0): making interface the new active one [ 904.244704][T27853] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 904.277275][T10775] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 904.296218][T27854] syzkaller0: entered promiscuous mode [ 904.296239][T27854] syzkaller0: entered allmulticast mode [ 904.318013][T27849] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 904.340462][T27849] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5047'. [ 904.381530][ T9406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.606704][ T50] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 904.632666][T27862] xt_hashlimit: size too large, truncated to 1048576 [ 905.013740][T27875] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5056'. [ 905.013766][T27875] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5056'. [ 905.036468][T27877] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 905.101742][T27882] C: renamed from veth1_to_team (while UP) [ 905.110046][T27877] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5056'. [ 905.509608][T27882] netlink: 'syz.4.5057': attribute type 1 has an invalid length. [ 905.509629][T27882] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5057'. [ 905.749354][T27877] ovs-system: entered promiscuous mode [ 906.991960][T27936] Bluetooth: hci1: too big key_count value 29096 [ 907.003596][T27937] Bluetooth: hci1: too big key_count value 29096 [ 907.589565][T27961] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 907.628188][T27961] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5068'. [ 908.189662][T27990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5073'. [ 908.215301][T27990] syzkaller0: entered promiscuous mode [ 908.215323][T27990] syzkaller0: entered allmulticast mode [ 908.507469][T17148] net_ratelimit: 30 callbacks suppressed [ 908.507489][T17148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.603086][ T39] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 908.707624][T15873] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 908.814991][ T39] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 908.925390][ T39] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 909.044269][ T39] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 909.177183][T10768] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 909.293110][T10768] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 909.539613][T28041] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5083'. [ 909.539636][T28041] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5083'. [ 909.539659][T28041] netlink: 'syz.5.5083': attribute type 13 has an invalid length. [ 909.539701][T28041] netlink: 'syz.5.5083': attribute type 12 has an invalid length. [ 909.554358][ T9406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.574229][T28043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5085'. [ 910.307648][T28048] ip6gretap0: renamed from dummy0 (while UP) [ 910.355275][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 910.592911][T28059] netlink: 'syz.7.5089': attribute type 1 has an invalid length. [ 910.650754][T28055] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 910.690362][T28055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5087'. [ 911.255050][T28093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5096'. [ 911.413052][T28093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5096'. [ 911.436702][T28093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5096'. [ 911.457120][T28093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5096'. [ 911.621127][T28093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5096'. [ 911.636589][T28107] netlink: 160 bytes leftover after parsing attributes in process `syz.6.5098'. [ 911.763393][T28093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5096'. [ 911.886141][T28117] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5100'. [ 911.888088][T28093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5096'. [ 911.983778][T28121] bridge0: port 3(vlan3) entered blocking state [ 911.985337][T28121] bridge0: port 3(vlan3) entered disabled state [ 911.985484][T28121] vlan3: entered allmulticast mode [ 911.985500][T28121] geneve0: entered allmulticast mode [ 912.004770][T28121] vlan3: entered promiscuous mode [ 912.004791][T28121] geneve0: entered promiscuous mode [ 912.578703][T28143] bridge_slave_0: left promiscuous mode [ 912.581126][T28143] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.705683][T28147] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 913.044759][T28173] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 913.044774][T28173] IPv6: NLM_F_CREATE should be set when creating new route [ 913.044810][T28173] IPv6: NLM_F_CREATE should be set when creating new route [ 913.044837][T28173] IPv6: NLM_F_CREATE should be set when creating new route [ 913.545210][T26293] net_ratelimit: 19 callbacks suppressed [ 913.545229][T26293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.575847][T10780] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 913.685610][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 913.708314][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.797068][T10755] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 913.989988][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 914.123314][ T1039] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 914.185373][T26293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.224245][T10755] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 914.340359][T10755] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 914.743324][T28240] bridge7: entered promiscuous mode [ 914.743346][T28240] bridge7: entered allmulticast mode [ 915.113647][T28259] gretap1: entered promiscuous mode [ 915.124939][T28264] netlink: 'syz.4.5134': attribute type 1 has an invalid length. [ 915.180097][T28259] gretap2: entered promiscuous mode [ 915.201411][T28271] netlink: 'syz.0.5133': attribute type 2 has an invalid length. [ 917.140529][T28336] xt_policy: output policy not valid in PREROUTING and INPUT [ 918.024201][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 918.507325][T28341] syzkaller1: entered promiscuous mode [ 918.507349][T28341] syzkaller1: entered allmulticast mode [ 918.552320][T28347] __nla_validate_parse: 10 callbacks suppressed [ 918.552340][T28347] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5147'. [ 918.571978][T28347] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5147'. [ 918.824649][T10757] net_ratelimit: 35 callbacks suppressed [ 918.824684][T10757] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 918.921550][T17148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.934137][T10755] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 919.015014][T28353] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 919.044172][T10775] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 919.113031][ T5717] hid-generic 0005:0008:0009.0006: unknown main item tag 0x0 [ 919.113232][ T5717] hid-generic 0005:0008:0009.0006: reserved main item tag 0xd [ 919.113261][ T5717] hid-generic 0005:0008:0009.0006: unknown main item tag 0x0 [ 919.113287][ T5717] hid-generic 0005:0008:0009.0006: unknown main item tag 0x0 [ 919.113321][ T5717] hid-generic 0005:0008:0009.0006: unknown main item tag 0x0 [ 919.113346][ T5717] hid-generic 0005:0008:0009.0006: unknown main item tag 0x0 [ 919.113371][ T5717] hid-generic 0005:0008:0009.0006: unknown main item tag 0x0 [ 919.113397][ T5717] hid-generic 0005:0008:0009.0006: unknown main item tag 0x0 [ 919.113422][ T5717] hid-generic 0005:0008:0009.0006: unknown main item tag 0x0 [ 919.113448][ T5717] hid-generic 0005:0008:0009.0006: unknown main item tag 0x0 [ 919.113487][ T5717] hid-generic 0005:0008:0009.0006: unknown main item tag 0x1 [ 919.113512][ T5717] hid-generic 0005:0008:0009.0006: item fetching failed at offset 25/39 [ 919.154372][T10757] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 919.157200][T28353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5149'. [ 919.229925][ T5717] hid-generic 0005:0008:0009.0006: probe with driver hid-generic failed with error -22 [ 919.264112][ T1039] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 919.280958][T28371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5153'. [ 919.344330][T10775] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.345693][T10757] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.345731][T10757] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.345762][T10757] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.381755][T10757] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 919.383144][T28371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5153'. [ 919.383926][T28371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5153'. [ 919.451538][T28378] netlink: 'syz.0.5154': attribute type 2 has an invalid length. [ 919.484360][T10755] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 919.594809][T10755] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 919.706344][T10757] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 919.910164][T28391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 919.912909][T28391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5157'. [ 919.960589][T28391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5157'. [ 920.083221][T28391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 920.151427][T28394] tipc: Failed to remove unknown binding: 66,1,1/0:2285797887/2285797889 [ 920.175331][T28397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 920.255728][T28402] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5160'. [ 920.255750][T28402] netlink: 7164 bytes leftover after parsing attributes in process `syz.5.5160'. [ 921.332218][T28450] veth0: entered promiscuous mode [ 921.332240][T28450] veth0: entered allmulticast mode [ 921.883497][T28449] syzkaller1: entered promiscuous mode [ 921.883518][T28449] syzkaller1: entered allmulticast mode [ 922.604374][T28499] tipc: Failed to remove unknown binding: 66,0,0/0:354620866/354620867 [ 922.639367][T28487] geneve1: entered promiscuous mode [ 923.256340][T28537] netlink: 'syz.7.5188': attribute type 2 has an invalid length. [ 923.432109][T28544] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 923.865862][T10775] net_ratelimit: 38 callbacks suppressed [ 923.865880][T10775] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 923.974483][T10775] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 924.029349][T28562] netlink: ct family unspecified [ 924.029388][T28562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 924.085871][T10775] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 924.104350][ T9406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.160186][T28567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.196225][T10768] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 924.404164][ T1039] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 924.482630][T28578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.626812][T28581] netlink: 'syz.6.5200': attribute type 11 has an invalid length. [ 925.145638][T26293] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 925.185702][T28582] bridge0: port 3(vlan3) entered blocking state [ 925.185824][T28582] bridge0: port 3(vlan3) entered forwarding state [ 925.394928][T26293] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 925.676943][ T3390] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 925.677286][ T3390] bond1: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 925.707327][ T3390] bond1: (slave veth3): making interface the new active one [ 925.709816][ T3390] bond1: active interface up! [ 925.907546][T28626] __nla_validate_parse: 7 callbacks suppressed [ 925.907566][T28626] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5204'. [ 926.016813][T28631] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5207'. [ 926.016835][T28631] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5207'. [ 926.328154][T25800] udevd[25800]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 926.533310][T28643] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5208'. [ 926.535785][T28643] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5208'. [ 926.662824][T28645] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5209'. [ 927.211617][T28675] netlink: 'syz.5.5214': attribute type 15 has an invalid length. [ 927.454601][T28681] syzkaller0: entered promiscuous mode [ 927.454624][T28681] syzkaller0: entered allmulticast mode [ 927.486927][T28684] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5216'. [ 927.493322][T28681] tipc: Enabled bearer , priority 0 [ 927.649768][T28690] ipvlan2: entered promiscuous mode [ 927.649810][T28690] ipvlan2: entered allmulticast mode [ 927.649828][T28690] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 927.657557][T28690] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 927.674735][T28696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5219'. [ 927.797844][T28700] ipvlan3: entered promiscuous mode [ 927.797866][T28700] ipvlan3: entered allmulticast mode [ 927.834204][T28700] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 928.355733][T28677] tipc: Resetting bearer [ 928.517931][T28727] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5222'. [ 928.517954][T28727] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5222'. [ 929.315056][T17148] net_ratelimit: 31 callbacks suppressed [ 929.315076][T17148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.242369][T28677] tipc: Disabling bearer [ 930.361524][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.387363][T26286] tipc: Node number set to 1755520610 [ 930.455172][T10755] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 930.565085][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 930.674406][ T50] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 930.787320][ T1039] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 930.914485][T10757] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 930.959903][T28790] syzkaller0: mtu less than device minimum [ 930.961505][T28778] tipc: Enabled bearer , priority 0 [ 931.025383][T10755] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 931.134426][ T3390] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 931.474899][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.822855][T28810] __nla_validate_parse: 2 callbacks suppressed [ 931.822875][T28810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5239'. [ 932.102425][T28823] x_tables: duplicate underflow at hook 2 [ 932.171548][ T9406] tipc: Node number set to 1693697596 [ 932.444231][T28832] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 933.583332][T28877] netlink: 260 bytes leftover after parsing attributes in process `syz.0.5252'. [ 933.661392][T28882] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5253'. [ 933.685181][T28882] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5253'. [ 933.803092][T28893] netlink: 'syz.7.5255': attribute type 11 has an invalid length. [ 933.904834][T28895] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5255'. [ 933.906521][T28893] 8021q: adding VLAN 0 to HW filter on device bond1 [ 933.937004][T28893] 8021q: adding VLAN 0 to HW filter on device bond3 [ 934.420186][ T13] net_ratelimit: 25 callbacks suppressed [ 934.420208][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 934.504317][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.529628][ T1039] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 934.535182][T28918] netlink: 'syz.0.5262': attribute type 7 has an invalid length. [ 934.740188][T28926] netlink: 100 bytes leftover after parsing attributes in process `syz.5.5259'. [ 934.778185][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 934.885555][ T50] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 934.994494][ T50] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 935.104984][ T1039] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 935.112046][T28952] netlink: 'syz.6.5268': attribute type 1 has an invalid length. [ 935.180318][T28952] bond5: option mode: invalid value (7) [ 935.191357][T28952] bond5 (unregistering): Released all slaves [ 935.215129][T28954] netlink: 'syz.6.5268': attribute type 10 has an invalid length. [ 935.215149][T28954] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5268'. [ 935.748005][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 935.925137][ T1039] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 936.041823][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 936.757245][T28999] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5273'. [ 937.823212][T29000] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5273'. [ 938.542492][ T31] audit: type=1800 audit(1790135286.690:21): pid=29013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5276" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A20 dev="tmpfs" ino=2539 res=0 errno=0 [ 938.778931][T29022] xt_l2tp: invalid flags combination: 0 [ 939.514199][ T1039] net_ratelimit: 20 callbacks suppressed [ 939.514222][ T1039] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 939.639729][ T1039] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 939.744161][ T3390] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 939.857325][ T1039] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 940.244714][T10755] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 940.432645][T29046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5279'. [ 940.465565][T10755] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 940.577264][T15873] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 942.134986][T10780] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 942.208299][T29086] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5287'. [ 942.480362][ T39] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 944.294248][T10755] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 944.600757][T29125] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5292'. [ 946.274247][T10775] net_ratelimit: 1 callbacks suppressed [ 946.274269][T10775] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 946.643611][T29156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5297'. [ 946.794214][ T50] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 946.907586][ T50] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 947.016057][T10775] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 947.124152][T10755] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 947.235556][T15873] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 947.344944][ T39] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 947.455166][ T39] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 947.564182][ T50] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 947.675046][T15873] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 948.221766][T29187] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5300'. [ 948.400250][T29191] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5300'. [ 948.414376][T29191] xt_IDLETIMER: label is empty or not nul-terminated [ 949.333542][T27474] udevd[27474]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 949.489694][T27474] udevd[27474]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 951.120805][T29235] syzkaller0: entered promiscuous mode [ 951.123723][T29235] syzkaller0: entered allmulticast mode [ 951.363348][T29246] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5312'. [ 951.363421][T29246] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5312'. [ 951.466117][ T39] net_ratelimit: 27 callbacks suppressed [ 951.466138][ T39] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 951.621486][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 951.724478][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 951.835023][T10780] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 951.952207][ T39] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 952.025610][T29256] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5315'. [ 952.033850][T29256] vlan0: entered promiscuous mode [ 952.034754][T29256] vlan0: entered allmulticast mode [ 952.034769][T29256] veth0_vlan: entered allmulticast mode [ 952.094666][ T39] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 952.168883][T29260] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5316'. [ 952.206137][ T39] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 952.314194][T10780] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 952.426828][ T39] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 952.498276][T29266] netlink: Unknown conntrack attr (type=4854, max=9) [ 952.632918][T29266] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5318'. [ 953.394972][T29280] syzkaller0: left promiscuous mode [ 953.394995][T29280] syzkaller0: left allmulticast mode [ 953.410172][T29281] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5322'. [ 953.466302][T29285] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5322'. [ 953.588897][T29278] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5320'. [ 953.588921][T29278] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5320'. [ 954.568655][T17697] Bluetooth: hci7: link tx timeout [ 954.568904][T17697] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 954.607497][T17697] Bluetooth: hci7: link tx timeout [ 954.607517][T17697] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 954.612583][T17697] Bluetooth: hci7: link tx timeout [ 954.612599][T17697] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 954.662436][T17697] Bluetooth: hci7: link tx timeout [ 954.662454][T17697] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 954.679486][T17697] Bluetooth: hci7: link tx timeout [ 954.679502][T17697] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 954.679624][T17697] Bluetooth: hci7: link tx timeout [ 954.679636][T17697] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 954.780761][T29325] netlink: 'syz.0.5326': attribute type 5 has an invalid length. [ 956.535426][ T13] net_ratelimit: 30 callbacks suppressed [ 956.535449][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 956.590273][T17697] Bluetooth: hci7: command 0x0406 tx timeout [ 956.644907][ T50] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 956.755451][T10780] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 956.794440][T29365] syzkaller1: entered promiscuous mode [ 956.794462][T29365] syzkaller1: entered allmulticast mode [ 957.000242][ T39] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 957.244123][T10780] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 957.354148][ T39] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 957.465980][ T39] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 957.575740][T10780] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 957.685532][T10780] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 957.794397][ T50] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 958.395121][T17697] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 958.463237][T17697] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 958.494630][T17697] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 958.495572][T17697] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 958.496283][T17697] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 960.504625][T25281] Bluetooth: hci8: command tx timeout [ 960.590481][T29415] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5340'. [ 960.590516][T29415] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5340'. [ 961.595419][ T39] net_ratelimit: 24 callbacks suppressed [ 961.595441][ T39] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 961.704399][ T39] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 961.762626][T29434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5344'. [ 961.762659][T29434] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 961.815054][T10777] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 961.929540][T10775] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 962.584345][T17697] Bluetooth: hci8: command tx timeout [ 962.924721][ T3390] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 962.927594][T29388] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.927718][T29388] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.927865][T29388] bridge_slave_0: entered allmulticast mode [ 962.974945][T29388] bridge_slave_0: entered promiscuous mode [ 962.998162][T29388] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.998328][T29388] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.998487][T29388] bridge_slave_1: entered allmulticast mode [ 963.278504][T29388] bridge_slave_1: entered promiscuous mode [ 963.591705][T29458] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5348'. [ 963.655016][T10775] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 963.737454][T29388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.759147][T29388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.108924][T29458] bond4 (unregistering): Released all slaves [ 964.268990][T17697] Bluetooth: hci1: command 0x0406 tx timeout [ 964.467654][ T50] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 964.487303][T29388] team0: Port device team_slave_0 added [ 964.662453][T10780] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.664846][T25281] Bluetooth: hci8: command tx timeout [ 964.714340][T29388] team0: Port device team_slave_1 added [ 964.737087][T29473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5350'. [ 964.848999][T29474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5350'. [ 964.874824][T29388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 964.874840][T29388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.874863][T29388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.877924][T29388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.877938][T29388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.877961][T29388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.140876][T29388] hsr_slave_0: entered promiscuous mode [ 965.143499][T29388] hsr_slave_1: entered promiscuous mode [ 965.158847][T29388] debugfs: 'hsr0' already exists in 'hsr' [ 965.158870][T29388] Cannot create hsr debugfs directory [ 965.176304][ T3390] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 965.516161][T29486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5352'. [ 965.523550][T29486] hsr_slave_0: left promiscuous mode [ 965.551612][T29486] hsr_slave_1: left promiscuous mode [ 965.754626][ T50] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 965.820452][T29488] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5352'. [ 965.820477][T29488] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5352'. [ 966.744689][T25281] Bluetooth: hci8: command tx timeout [ 966.764955][ T1039] net_ratelimit: 3 callbacks suppressed [ 966.764972][ T1039] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 966.914204][ T50] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 967.166616][T29508] xt_CT: No such helper "snmp" [ 967.216923][T15873] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 967.360025][T29388] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 967.588021][T29388] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 967.589135][T29508] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5353'. [ 967.592360][T29388] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 967.796996][T29388] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 967.822096][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 967.838629][T29388] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 967.907115][T29388] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 968.443234][T10780] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.580560][T29388] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 968.611459][T29388] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 968.786965][T10777] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 968.915190][ T50] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 969.108904][ T39] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 969.201819][T29539] netlink: 15672 bytes leftover after parsing attributes in process `syz.7.5356'. [ 969.201843][T29539] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5356'. [ 969.201859][T29539] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5356'. [ 969.201874][T29539] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5356'. [ 969.261863][T29388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 969.276244][T10777] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 969.427713][T29388] 8021q: adding VLAN 0 to HW filter on device team0 [ 969.445406][T10777] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 969.510024][T10775] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.510129][T10775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 969.667202][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.667309][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.698843][T10775] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 969.912801][T29549] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5358'. [ 969.925915][T29551] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5358'. [ 970.434799][T29567] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5361'. [ 970.442311][T29565] FAULT_INJECTION: forcing a failure. [ 970.442311][T29565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.442343][T29565] CPU: 0 UID: 0 PID: 29565 Comm: syz.0.5362 Not tainted syzkaller #0 PREEMPT(full) [ 970.442387][T29565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 970.442413][T29565] Call Trace: [ 970.442421][T29565] [ 970.442430][T29565] dump_stack_lvl+0xe8/0x150 [ 970.442462][T29565] should_fail_ex+0x410/0x560 [ 970.442500][T29565] _copy_to_user+0x31/0xb0 [ 970.442526][T29565] simple_read_from_buffer+0xe1/0x170 [ 970.442556][T29565] proc_fail_nth_read+0x1bb/0x230 [ 970.442581][T29565] ? common_file_perm+0x20e/0x2b0 [ 970.442606][T29565] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 970.442637][T29565] ? rw_verify_area+0x24a/0x4c0 [ 970.442666][T29565] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 970.442693][T29565] vfs_read+0x213/0xa80 [ 970.442722][T29565] ? mptcp_setsockopt+0x1529/0x3550 [ 970.442744][T29565] ? __pfx_vfs_read+0x10/0x10 [ 970.442772][T29565] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 970.442789][T29565] ? kmem_cache_free+0x182/0x650 [ 970.442823][T29565] ksys_read+0x150/0x270 [ 970.442853][T29565] ? __pfx_ksys_read+0x10/0x10 [ 970.442890][T29565] do_syscall_64+0x166/0x520 [ 970.442912][T29565] ? trace_irq_disable+0x3b/0x140 [ 970.442931][T29565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.442950][T29565] ? clear_bhb_loop+0x70/0xc0 [ 970.442973][T29565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.442992][T29565] RIP: 0033:0x7fe98df5e98e [ 970.443010][T29565] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 970.443026][T29565] RSP: 002b:00007fe98ef51fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 970.443046][T29565] RAX: ffffffffffffffda RBX: 00007fe98ef526c0 RCX: 00007fe98df5e98e [ 970.443061][T29565] RDX: 000000000000000f RSI: 00007fe98ef520a0 RDI: 0000000000000004 [ 970.443072][T29565] RBP: 00007fe98ef52090 R08: 0000000000000000 R09: 0000000000000000 [ 970.443084][T29565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 970.443095][T29565] R13: 00007fe98e226038 R14: 00007fe98e225fa0 R15: 00007ffc455fdb18 [ 970.443125][T29565] [ 970.829356][T29573] __nla_validate_parse: 1 callbacks suppressed [ 970.829377][T29573] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5361'. [ 970.829394][T29573] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5361'. [ 971.715962][T29594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5366'. [ 971.733945][T29586] geneve2: entered promiscuous mode [ 971.856666][T29600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5366'. [ 971.883453][T10777] net_ratelimit: 13 callbacks suppressed [ 971.883472][T10777] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 972.300481][T29607] netlink: 'syz.7.5368': attribute type 1 has an invalid length. [ 972.304479][T10780] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.242833][T29616] geneve4: entered promiscuous mode [ 973.250921][T29618] tipc: Enabled bearer , priority 0 [ 973.301619][T29601] tipc: Disabling bearer [ 973.505766][T10777] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 973.737499][T29633] : option downdelay: invalid value (18446744073709547007) [ 973.737524][T29633] : option downdelay: allowed values 0 - 2147483647 [ 973.776169][T29633]  (unregistering): Released all slaves [ 973.878113][T10757] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 973.985248][ T1039] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 974.095529][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 974.205125][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 974.315151][T10755] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 974.425426][T10755] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 974.541859][T29388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 974.563604][T10768] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 974.665564][ T39] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 975.040813][T10780] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.717868][T29388] veth0_vlan: entered promiscuous mode [ 975.761936][T29388] veth1_vlan: entered promiscuous mode [ 975.902291][T29388] veth0_macvtap: entered promiscuous mode [ 975.930814][T29388] veth1_macvtap: entered promiscuous mode [ 975.988454][T29388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 976.020305][T29388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 976.108220][ T39] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.109862][T10755] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.109904][T10755] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.109939][T10755] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.355112][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.355133][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 976.446472][T10755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.446492][T10755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 976.907701][T10768] net_ratelimit: 15 callbacks suppressed [ 976.907721][T10768] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 976.975721][T29672] veth1_macvtap: left promiscuous mode [ 980.654297][T10757] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 980.924569][T10755] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 981.030458][T29720] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5380'. [ 981.085055][ T1039] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 981.101920][T29720] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5380'. [ 981.237641][T10757] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 981.345186][T10755] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 981.955182][T10768] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 982.048873][T10757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.048895][T10757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.237630][T10757] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 982.485803][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 982.485854][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.485868][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.667862][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 982.776471][T15873] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 982.855257][T10780] vlan3: left allmulticast mode [ 982.855277][T10780] geneve0: left allmulticast mode [ 982.911111][T10780] vlan3: left promiscuous mode [ 982.911133][T10780] geneve0: left promiscuous mode [ 982.911544][T10780] bridge0: port 3(vlan3) entered disabled state [ 983.578622][T29761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5389'. [ 983.662656][T29757] netlink: 'syz.8.5390': attribute type 9 has an invalid length. [ 983.838802][T10780] bridge_slave_1: left allmulticast mode [ 983.838829][T10780] bridge_slave_1: left promiscuous mode [ 983.842603][T10780] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.915379][T10780] bridge_slave_0: left allmulticast mode [ 983.915406][T10780] bridge_slave_0: left promiscuous mode [ 983.915596][T10780] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.310264][T29768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5392'. [ 984.716329][T10780] bond4 (unregistering): (slave ip6erspan0): Releasing active interface [ 984.810481][T10780] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 984.810513][T10780] ip6gretap1 (unregistering): left allmulticast mode [ 985.517441][T10780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 985.550067][T10780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 985.589383][T10780] bond0 (unregistering): Released all slaves [ 985.615480][T10780] bond1 (unregistering): (slave veth3): Releasing active interface [ 985.660827][T10780] bond1 (unregistering): (slave veth5): Releasing active interface [ 985.677033][T10780] bond1 (unregistering): Released all slaves [ 985.705627][T10780] bond2 (unregistering): Released all slaves [ 985.750286][T10780] bond3 (unregistering): left allmulticast mode [ 985.750330][T10780] bond3 (unregistering): left promiscuous mode [ 985.806117][T10780] team0: Port device macvlan2 removed [ 985.848967][T10780] bond3 (unregistering): Released all slaves [ 985.887179][T10780] bond4 (unregistering): Released all slaves [ 986.348605][T15873] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 986.454989][ T3390] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 986.564173][ T1039] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 986.674196][T15873] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 986.784167][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 986.894134][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 987.004266][ T1039] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 987.114149][ T1039] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 987.224876][ T50] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 987.334697][ T1039] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 987.447063][T15873] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 987.540751][T29800] netlink: 'syz.0.5396': attribute type 3 has an invalid length. [ 987.558491][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 987.664332][T10755] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 987.774989][T10755] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 987.884227][ T50] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 987.994904][ T1039] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 988.018858][T29812] FAULT_INJECTION: forcing a failure. [ 988.018858][T29812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 988.018888][T29812] CPU: 0 UID: 0 PID: 29812 Comm: syz.0.5398 Not tainted syzkaller #0 PREEMPT(full) [ 988.018908][T29812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 988.018920][T29812] Call Trace: [ 988.018928][T29812] [ 988.018936][T29812] dump_stack_lvl+0xe8/0x150 [ 988.018967][T29812] should_fail_ex+0x410/0x560 [ 988.018993][T29812] _copy_from_user+0x2d/0xb0 [ 988.019018][T29812] ___sys_sendmsg+0x1c6/0x360 [ 988.019043][T29812] ? __lock_acquire+0x747/0x2de0 [ 988.019067][T29812] ? __pfx____sys_sendmsg+0x10/0x10 [ 988.019123][T29812] ? __fget_files+0x2a/0x420 [ 988.019148][T29812] ? __fget_files+0x3a2/0x420 [ 988.019190][T29812] __x64_sys_sendmsg+0x1b1/0x290 [ 988.019217][T29812] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 988.019261][T29812] do_syscall_64+0x166/0x520 [ 988.019284][T29812] ? trace_irq_disable+0x3b/0x140 [ 988.019306][T29812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.019325][T29812] ? clear_bhb_loop+0x70/0xc0 [ 988.019348][T29812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.019367][T29812] RIP: 0033:0x7fe98df9e159 [ 988.019384][T29812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.019400][T29812] RSP: 002b:00007fe98ef52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 988.019420][T29812] RAX: ffffffffffffffda RBX: 00007fe98e225fa0 RCX: 00007fe98df9e159 [ 988.019434][T29812] RDX: 0000000004000000 RSI: 0000200000001200 RDI: 0000000000000006 [ 988.019446][T29812] RBP: 00007fe98ef52090 R08: 0000000000000000 R09: 0000000000000000 [ 988.019458][T29812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 988.019469][T29812] R13: 00007fe98e226038 R14: 00007fe98e225fa0 R15: 00007ffc455fdb18 [ 988.019499][T29812] [ 988.713225][T29816] netlink: 'syz.5.5399': attribute type 5 has an invalid length. [ 989.064625][ T32] INFO: task syz.1.4494:25347 blocked for more than 143 seconds. [ 989.064650][ T32] Not tainted syzkaller #0 [ 989.064661][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 989.064695][ T32] task:syz.1.4494 state:D stack:26864 pid:25347 tgid:25341 ppid:19102 task_flags:0x400140 flags:0x00080002 [ 989.064745][ T32] Call Trace: [ 989.064752][ T32] [ 989.064766][ T32] __schedule+0x17db/0x58f0 [ 989.064822][ T32] ? __pfx___schedule+0x10/0x10 [ 989.064852][ T32] ? schedule+0x90/0x2b0 [ 989.064878][ T32] schedule+0x164/0x2b0 [ 989.064902][ T32] schedule_preempt_disabled+0x13/0x30 [ 989.064923][ T32] __mutex_lock+0x7c1/0x1550 [ 989.064952][ T32] ? __mutex_lock+0x5d4/0x1550 [ 989.064979][ T32] ? nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 989.065013][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 989.065034][ T32] ? __kasan_kmalloc+0x93/0xb0 [ 989.065064][ T32] ? __nla_validate_parse+0x2429/0x2d50 [ 989.065088][ T32] ? do_syscall_64+0x166/0x520 [ 989.065110][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.065139][ T32] nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 989.065170][ T32] ? __pfx___nla_validate_parse+0x10/0x10 [ 989.065210][ T32] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 989.065235][ T32] ? trace_kmalloc+0x2a/0xf0 [ 989.065257][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 989.065278][ T32] ? __nla_parse+0x40/0x60 [ 989.065305][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 989.065328][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 989.065360][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 989.065391][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 989.065427][ T32] ? bpf_lsm_capable+0x9/0x20 [ 989.065445][ T32] ? security_capable+0x7e/0x2c0 [ 989.065474][ T32] genl_rcv_msg+0x614/0x7a0 [ 989.065502][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 989.065525][ T32] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 989.065563][ T32] netlink_rcv_skb+0x226/0x4a0 [ 989.065592][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 989.065616][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 989.065660][ T32] ? down_read+0x2be/0x330 [ 989.065710][ T32] genl_rcv+0x28/0x40 [ 989.065732][ T32] netlink_unicast+0x7bd/0x940 [ 989.065769][ T32] netlink_sendmsg+0x813/0xb40 [ 989.065796][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 989.065823][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 989.065846][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 989.065864][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 989.065887][ T32] ____sys_sendmsg+0x54e/0x850 [ 989.065918][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 989.065952][ T32] ? import_iovec+0x73/0xa0 [ 989.065979][ T32] ___sys_sendmsg+0x2a5/0x360 [ 989.066009][ T32] ? __lock_acquire+0x747/0x2de0 [ 989.066034][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 989.066065][ T32] ? futex_wake+0x51b/0x5f0 [ 989.068385][ T32] ? __fget_files+0x2a/0x420 [ 989.068418][ T32] ? __fget_files+0x3a2/0x420 [ 989.068455][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 989.068485][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 989.068531][ T32] do_syscall_64+0x166/0x520 [ 989.068553][ T32] ? trace_irq_disable+0x3b/0x140 [ 989.068573][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.068593][ T32] ? clear_bhb_loop+0x70/0xc0 [ 989.068616][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.068637][ T32] RIP: 0033:0x7fec2c19e159 [ 989.068654][ T32] RSP: 002b:00007fec2d016028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 989.068698][ T32] RAX: ffffffffffffffda RBX: 00007fec2c426090 RCX: 00007fec2c19e159 [ 989.068713][ T32] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000005 [ 989.068725][ T32] RBP: 00007fec2c23506b R08: 0000000000000000 R09: 0000000000000000 [ 989.068738][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 989.068750][ T32] R13: 00007fec2c426128 R14: 00007fec2c426090 R15: 00007ffe367691a8 [ 989.068782][ T32] [ 989.068792][ T32] INFO: task syz.3.4566:25747 blocked for more than 143 seconds. [ 989.068807][ T32] Not tainted syzkaller #0 [ 989.068817][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 989.068826][ T32] task:syz.3.4566 state:D stack:26896 pid:25747 tgid:25746 ppid:19519 task_flags:0x400140 flags:0x00080002 [ 989.068873][ T32] Call Trace: [ 989.068880][ T32] [ 989.068892][ T32] __schedule+0x17db/0x58f0 [ 989.068942][ T32] ? __pfx___schedule+0x10/0x10 [ 989.068973][ T32] ? schedule+0x90/0x2b0 [ 989.068997][ T32] schedule+0x164/0x2b0 [ 989.069028][ T32] schedule_preempt_disabled+0x13/0x30 [ 989.069049][ T32] __mutex_lock+0x7c1/0x1550 [ 989.069078][ T32] ? __mutex_lock+0x5d4/0x1550 [ 989.069104][ T32] ? nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 989.069131][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 989.069153][ T32] ? __kasan_kmalloc+0x93/0xb0 [ 989.069181][ T32] ? __nla_validate_parse+0x2429/0x2d50 [ 989.069205][ T32] ? do_syscall_64+0x166/0x520 [ 989.069227][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.069254][ T32] nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 989.069284][ T32] ? __pfx___nla_validate_parse+0x10/0x10 [ 989.069325][ T32] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 989.069350][ T32] ? trace_kmalloc+0x2a/0xf0 [ 989.069372][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 989.069394][ T32] ? __nla_parse+0x40/0x60 [ 989.069421][ T32] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 989.069445][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 989.069477][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 989.069506][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 989.069542][ T32] ? bpf_lsm_capable+0x9/0x20 [ 989.069560][ T32] ? security_capable+0x7e/0x2c0 [ 989.069589][ T32] genl_rcv_msg+0x614/0x7a0 [ 989.069618][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 989.069640][ T32] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 989.069701][ T32] netlink_rcv_skb+0x226/0x4a0 [ 989.069730][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 989.069755][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 989.069798][ T32] ? down_read+0x2be/0x330 [ 989.069828][ T32] genl_rcv+0x28/0x40 [ 989.069848][ T32] netlink_unicast+0x7bd/0x940 [ 989.069886][ T32] netlink_sendmsg+0x813/0xb40 [ 989.069914][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 989.069942][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 989.147468][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 989.147497][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 989.147522][ T32] ____sys_sendmsg+0x54e/0x850 [ 989.147554][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 989.147588][ T32] ? import_iovec+0x73/0xa0 [ 989.147615][ T32] ___sys_sendmsg+0x2a5/0x360 [ 989.147639][ T32] ? __lock_acquire+0x747/0x2de0 [ 989.147689][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 989.147750][ T32] ? __fget_files+0x2a/0x420 [ 989.147775][ T32] ? __fget_files+0x3a2/0x420 [ 989.147811][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 989.147839][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 989.147884][ T32] do_syscall_64+0x166/0x520 [ 989.147907][ T32] ? trace_irq_disable+0x3b/0x140 [ 989.147925][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.147944][ T32] ? clear_bhb_loop+0x70/0xc0 [ 989.147968][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.147987][ T32] RIP: 0033:0x7fe7a099e159 [ 989.148005][ T32] RSP: 002b:00007fe7a1919028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 989.148026][ T32] RAX: ffffffffffffffda RBX: 00007fe7a0c25fa0 RCX: 00007fe7a099e159 [ 989.148040][ T32] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 989.148053][ T32] RBP: 00007fe7a1919090 R08: 0000000000000000 R09: 0000000000000000 [ 989.148065][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 989.148077][ T32] R13: 00007fe7a0c26038 R14: 00007fe7a0c25fa0 R15: 00007ffcb398f428 [ 989.148109][ T32] [ 989.148178][ T32] [ 989.148178][ T32] Showing all locks held in the system: [ 989.148188][ T32] locks held by pr/ttyS0/16: 1, last CPU#0: [ 989.148202][ T32] #0: ffffffff8ec364f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 989.148254][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 989.148267][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 989.148314][ T32] locks held by kworker/u8:3/50: 5, last CPU#0: [ 989.148327][ T32] #0: ffff8880121e9140 ((wq_completion)krds_cp_wq#2/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 989.148378][ T32] #1: ffffc90000bb7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 989.148428][ T32] #2: ffff88805693fc80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 989.148526][ T32] #3: ffff88804d0b45e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 989.148579][ T32] #4: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __inet6_bind+0x49b/0xf30 [ 989.148648][ T32] locks held by kworker/u8:12/3390: 3, last CPU#0: [ 989.148663][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 989.148735][ T32] #1: ffffc9000e59fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 989.148786][ T32] #2: ffff888056690258 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 989.148845][ T32] locks held by dhcpcd/5281: 1, on CPU#0: [ 989.148858][ T32] #0: ffffffff90253760 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 989.148908][ T32] locks held by getty/5372: 2, on CPU#1: [ 989.148920][ T32] #0: ffff888036e930a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 989.296911][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 989.296976][ T32] locks held by kworker/1:4/5717: 5, last CPU#1: [ 989.296991][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 989.297044][ T32] #1: ffffc90004907c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 989.297094][ T32] #2: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 989.297140][ T32] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 989.297188][ T32] #4: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 989.297237][ T32] locks held by kworker/u8:21/10768: 3, on CPU#0: [ 989.297252][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 989.297301][ T32] #1: ffffc900037b7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 989.297350][ T32] #2: ffffffff90253760 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 989.297404][ T32] locks held by kworker/u8:28/10777: 3, last CPU#0: [ 989.297417][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 989.297481][ T32] #1: ffffc900039d7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 989.297532][ T32] #2: ffff8880233b1258 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 989.297590][ T32] locks held by kworker/u8:31/10780: 3, on CPU#0: [ 989.297603][ T32] #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 989.297651][ T32] #1: ffffc90003a07c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 989.297725][ T32] #2: ffffffff90244f08 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 989.297787][ T32] locks held by syz.2.4479/25263: 2, on CPU#1: [ 989.297800][ T32] #0: ffffffff902c47a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 989.297846][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 989.297895][ T32] locks held by syz.1.4494/25347: 2, on CPU#0: [ 989.297908][ T32] #0: ffffffff902c47a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 989.297982][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 989.298031][ T32] locks held by syz.3.4566/25747: 2, on CPU#1: [ 989.298045][ T32] #0: ffffffff902c47a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 989.298089][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 989.298148][ T32] locks held by syz.8.5390/29757: 2, on CPU#0: [ 989.298162][ T32] #0: ffffffff907c0ea0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 989.298216][ T32] #1: ffffffff8ed62b78 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 989.298266][ T32] locks held by syz.7.5393/29775: 1, on CPU#0: [ 989.298279][ T32] #0: ffffffff8ed62b78 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 989.298328][ T32] locks held by syz.4.5394/29784: 2, on CPU#0: [ 989.298341][ T32] #0: ffffffff907bfb30 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 989.443034][ T32] #1: ffffffff8ed62b78 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 989.443089][ T32] locks held by syz.0.5398/29811: 2, on CPU#0: [ 989.443103][ T32] #0: ffffffff90253760 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 989.443148][ T32] #1: ffffffff8ebe9930 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0xcac/0x2140 [ 989.443219][ T32] [ 989.443225][ T32] ============================================= [ 989.443225][ T32] [ 989.443248][ T32] NMI backtrace for cpu 0 [ 989.443262][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 989.443282][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 989.443293][ T32] Call Trace: [ 989.443301][ T32] [ 989.443310][ T32] dump_stack_lvl+0xe8/0x150 [ 989.443338][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 989.443357][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 989.443388][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 989.443411][ T32] sys_info+0x135/0x170 [ 989.443436][ T32] watchdog+0xfd7/0x1030 [ 989.443470][ T32] ? watchdog+0x1c7/0x1030 [ 989.443495][ T32] kthread+0x38b/0x480 [ 989.443514][ T32] ? __pfx_watchdog+0x10/0x10 [ 989.443531][ T32] ? __pfx_kthread+0x10/0x10 [ 989.443550][ T32] ret_from_fork+0x514/0xb70 [ 989.443571][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 989.443590][ T32] ? __switch_to+0xc89/0x1420 [ 989.443616][ T32] ? __pfx_kthread+0x10/0x10 [ 989.443635][ T32] ret_from_fork_asm+0x1a/0x30 [ 989.443678][ T32] [ 989.443706][ T32] Sending NMI from CPU 0 to CPUs 1: [ 989.443791][ C1] NMI backtrace for cpu 1 [ 989.443805][ C1] CPU: 1 UID: 0 PID: 5717 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 989.443826][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 989.443838][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 989.443866][ C1] RIP: 0010:rcu_is_watching+0x4f/0xb0 [ 989.443890][ C1] Code: ff df 4c 8d 34 dd d0 77 6e 8e 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 6b 77 8b 00 48 c7 c3 18 9a 96 93 49 03 1e <48> 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 35 8b 03 65 48 ff 0d [ 989.443906][ C1] RSP: 0018:ffffc90000a18970 EFLAGS: 00000287 [ 989.443922][ C1] RAX: 1ffffffff1cdcefb RBX: ffff8880b8733a18 RCX: 8000000000000102 [ 989.443937][ C1] RDX: 0000000000000000 RSI: ffffffff8c6da060 RDI: ffffffff8c6da020 [ 989.443950][ C1] RBP: 1ffff9200014316c R08: 0000000000000000 R09: 0000000000000000 [ 989.443970][ C1] R10: ffffc90000a18b78 R11: fffff52000143171 R12: ffffffff8ed5c8e0 [ 989.443983][ C1] R13: 0000000000000002 R14: ffffffff8e6e77d8 R15: dffffc0000000000 [ 989.443996][ C1] FS: 0000000000000000(0000) GS:ffff888124dca000(0000) knlGS:0000000000000000 [ 989.444011][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 989.444023][ C1] CR2: 00007faf3d285286 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 989.444042][ C1] Call Trace: [ 989.444048][ C1] [ 989.444057][ C1] lock_acquire+0x58/0x350 [ 989.444080][ C1] ? unwind_next_frame+0x8f/0x2550 [ 989.444101][ C1] ? arch_stack_walk+0xe3/0x150 [ 989.444121][ C1] ? unwind_next_frame+0x8f/0x2550 [ 989.444142][ C1] unwind_next_frame+0xac/0x2550 [ 989.444162][ C1] ? unwind_next_frame+0x8f/0x2550 [ 989.444185][ C1] ? __unwind_start+0xed/0x660 [ 989.444205][ C1] ? unwind_next_frame+0x8f/0x2550 [ 989.444228][ C1] __unwind_start+0x514/0x660 [ 989.444250][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 989.444269][ C1] arch_stack_walk+0xe3/0x150 [ 989.444291][ C1] ? arch_stack_walk+0xe3/0x150 [ 989.444313][ C1] stack_trace_save+0xa9/0x100 [ 989.444329][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 989.444351][ C1] ref_tracker_free+0x11e/0x830 [ 989.444375][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 989.444395][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 989.444427][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 989.444451][ C1] ? __pfx_ipv4_dst_destroy+0x10/0x10 [ 989.444472][ C1] ? __pfx_ipv4_dst_destroy+0x10/0x10 [ 989.444490][ C1] dst_destroy+0x108/0x340 [ 989.444507][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 989.444524][ C1] ? rcu_core+0x8a8/0x1260 [ 989.444543][ C1] rcu_core+0x926/0x1260 [ 989.444569][ C1] ? __pfx_rcu_core+0x10/0x10 [ 989.444595][ C1] handle_softirqs+0x226/0x860 [ 989.444620][ C1] ? do_softirq+0x77/0xd0 [ 989.444645][ C1] ? neigh_periodic_work+0x906/0xb20 [ 989.444670][ C1] do_softirq+0x77/0xd0 [ 989.444693][ C1] [ 989.444699][ C1] [ 989.444706][ C1] __local_bh_enable_ip+0x100/0x140 [ 989.444730][ C1] neigh_periodic_work+0x906/0xb20 [ 989.444758][ C1] ? process_scheduled_works+0x97a/0x1630 [ 989.444782][ C1] process_scheduled_works+0xc3d/0x1630 [ 989.444821][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 989.444848][ C1] ? assign_work+0x3cf/0x5d0 [ 989.444873][ C1] worker_thread+0xa47/0xfb0 [ 989.444905][ C1] ? __kthread_parkme+0x71/0x1f0 [ 989.444935][ C1] kthread+0x38b/0x480 [ 989.444958][ C1] ? __pfx_worker_thread+0x10/0x10 [ 989.444981][ C1] ? __pfx_kthread+0x10/0x10 [ 989.444999][ C1] ret_from_fork+0x514/0xb70 [ 989.445017][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 989.445034][ C1] ? __switch_to+0xc89/0x1420 [ 989.445060][ C1] ? __pfx_kthread+0x10/0x10 [ 989.445078][ C1] ret_from_fork_asm+0x1a/0x30 [ 989.445113][ C1] [ 989.740261][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 990.953908][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 990.963020][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 990.973074][ T32] Call Trace: [ 990.976352][ T32] [ 990.979282][ T32] vpanic+0x56d/0xa60 [ 990.983279][ T32] ? __pfx___schedule+0x10/0x10 [ 990.988139][ T32] ? __pfx_vpanic+0x10/0x10 [ 990.992664][ T32] panic+0xc5/0xd0 [ 990.996398][ T32] ? __pfx_panic+0x10/0x10 [ 991.000823][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 991.006295][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 991.011678][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 991.017836][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 991.023992][ T32] watchdog+0x1030/0x1030 [ 991.028333][ T32] ? watchdog+0x1c7/0x1030 [ 991.032758][ T32] kthread+0x38b/0x480 [ 991.036831][ T32] ? __pfx_watchdog+0x10/0x10 [ 991.041509][ T32] ? __pfx_kthread+0x10/0x10 [ 991.046105][ T32] ret_from_fork+0x514/0xb70 [ 991.050702][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 991.055816][ T32] ? __switch_to+0xc89/0x1420 [ 991.060504][ T32] ? __pfx_kthread+0x10/0x10 [ 991.065101][ T32] ret_from_fork_asm+0x1a/0x30 [ 991.069896][ T32] [ 991.073204][ T32] Kernel Offset: disabled [ 991.077527][ T32] Rebooting in 86400 seconds..