last executing test programs: 3m51.286072053s ago: executing program 4 (id=1866): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x2404c050) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000f6620170000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x14, 0x30, 0x871a15abc695f91d, 0x0, 0x80000}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000180), 0x2ae, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="61de04005ea3f52f080000006c1faa87c3be08a88f687c9edec3051a710125f4584996675029f5890e85a4a466978e517fad4742ae403e05d2236777ee7c403315f274a3bf2985ed4cf84509b40fcf2b2c2079a62d130fc1cfb3", @ANYRES32=r7, @ANYBLOB="140012800b000100627269646765000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x240440d1}, 0x40000) 3m50.724379493s ago: executing program 4 (id=1870): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) 3m50.532806991s ago: executing program 4 (id=1871): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="7a0af8ff000000007a0af0ff000000007a0ae8ff000000007a0ae0ff000000007a0ad8ff000000007a0ad0ff000000007a0ac8ff000000007a0ac0ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000c0ffffff85000000cf000000b70000000200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r0, 0x0, 0x0}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x3, {{@in6=@empty, @in6=@local, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x73}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001}, {}, 0x0, 0x200}, [@tmpl={0xc4, 0x5, [{{@in=@multicast1, 0x4d5, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x2}, {{@in6=@rand_addr=' \x01\x00', 0x4d3, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3501, 0x2, 0x0, 0x73, 0x8000, 0x4, 0x7}, {{@in=@multicast2, 0x80000001, 0x3c}, 0xa, @in=@remote, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x18, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000001040)=""/2, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001080)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000010c0)={0x4, 0x10, 0x7, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001100), 0x10, 0x2}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8041}, 0x48880) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x16, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @flow_dissector, r1, 0x8, &(0x7f0000000b80)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000bc0)={0x0, 0x6, 0x9, 0xec}, 0x10, 0x0, r3, 0x1, 0x0, &(0x7f0000001200)=[{0x4, 0x3, 0xc, 0xa}], 0x10, 0x2}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000080)=0x200, 0x12) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000180)=0x19, 0x4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x30, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000580)="b9e20300600d0600fb9e34f086f8", 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) 3m47.319614449s ago: executing program 4 (id=1876): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xffff, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000340)="08001efbb07d5a6a", 0x8}], 0x1}, 0x24048890) (async) r1 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x39b3) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r9, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r7}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x1e, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}}, @generic={0x9d, 0xc, 0x7, 0xcd, 0x8}, @ldst={0x1, 0x7ccdd9b7b55dcb99, 0x1, 0x9, 0x1, 0x16, 0x8}, @alu={0x4, 0x1, 0x3, 0x4, 0x5, 0x20}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0x2, 0x8, 0xfffffffffffffff0, 0x4}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000002c0)=r10, 0x4) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r11, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x14, 0xf, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r12, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, "4a9e6c", 0x44, 0x2f, 0xe78c6d029ffc7582, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x608, 0x88be, 0x4, {{0x5, 0x1, 0x3, 0x3, 0x1, 0x0, 0x0, 0x35}, 0x1, {0xc289}}}, {0x8, 0x22eb, 0x0, {{0xe, 0x2, 0x0, 0x1, 0x0, 0x3, 0x2, 0x4}, 0x2, {0x4, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r13, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x18, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x5c901f599467beab}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x44080) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r13, {}, {0x2, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x48bf, 0x10, 0x7}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0x40810) 3m46.723741468s ago: executing program 4 (id=1884): unshare(0x2020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB="180700000000000000000000000400001858000001000000000000000000000095"], &(0x7f0000000bc0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect(r0, &(0x7f0000000000)=@caif=@rfm={0x25, 0x5, "3f54f4cbf322840607d000ca31883243"}, 0x80) 3m46.463720158s ago: executing program 4 (id=1888): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYRESDEC=r1, @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb72612fae02d58b1614adc1505655003000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async, rerun: 64) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r0) (rerun: 64) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000005c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x22, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000070000000000000013d380009111bb000000000095"], &(0x7f0000000c40)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async, rerun: 32) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x74, r2, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) (rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e21, @remote}, 0x10) (async) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={0x14, 0x27, 0x1, 0x70bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c04d}, 0x10) 3m31.365560175s ago: executing program 32 (id=1888): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYRESDEC=r1, @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb72612fae02d58b1614adc1505655003000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async, rerun: 64) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r0) (rerun: 64) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000005c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x22, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000070000000000000013d380009111bb000000000095"], &(0x7f0000000c40)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async, rerun: 32) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x74, r2, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) (rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e21, @remote}, 0x10) (async) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={0x14, 0x27, 0x1, 0x70bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c04d}, 0x10) 2m43.913427567s ago: executing program 0 (id=2191): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@local, 0xee200000, 0x0, 0xff, 0x1, 0xa, 0xffff}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a0001002bad700000200000022020009200fe000020000008000400", @ANYRES32], 0x24}}, 0x20002000) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@local, 0xee200000, 0x0, 0xff, 0x1, 0xa, 0xffff}, 0x20) (async) sendmsg$nl_route(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a0001002bad700000200000022020009200fe000020000008000400", @ANYRES32], 0x24}}, 0x20002000) (async) 2m43.645800837s ago: executing program 0 (id=2194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x194, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x4d, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_TYPE, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffff78}, @NFTA_SET_EXPRESSIONS={0x10c, 0x12, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x4c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x0, 0x2, 0x1, 0x0, 0x3}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x16}]}}}, {0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x87}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_DESC={0x3c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x0, 0x2, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x71ce}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x2}]}, {0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x1800}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xb4e}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x104}]}]}, @NFTA_SET_DESC_CONCAT={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1bc}}, 0x4060000) 2m43.427172305s ago: executing program 0 (id=2195): r0 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r0, &(0x7f0000003a40), 0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000}, 0x20000004) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0xc, 0x4, 0x3}, 0x50) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, &(0x7f0000000380)) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0106000000000000000019"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB='\t\x00\x00[', @ANYRES16=r6, @ANYBLOB="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"], 0x19c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r7, &(0x7f0000004ac0)={0x0, 0x0, 0x0}, 0x4002) recvmsg(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002a00)=""/4114, 0x1012}, {&(0x7f0000001440)=""/4096, 0x707}, {&(0x7f0000000000)=""/135, 0x87}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, 0x0, 0x24}, 0x100) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) 2m37.747249463s ago: executing program 0 (id=2204): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2e, 0x1}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x6, 0x18, {0x732, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) 2m37.475691791s ago: executing program 0 (id=2208): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0xc, [@type_tag={0x7, 0x0, 0x0, 0x12, 0x1}, @union={0x4, 0x1, 0x0, 0x5, 0x0, 0xf, [{0x10, 0x0, 0x7}]}, @volatile={0x9, 0x0, 0x0, 0x9, 0x2}, @fwd={0x8}, @const={0xe, 0x0, 0x0, 0xa, 0x1}, @float={0xd, 0x0, 0x0, 0x10, 0xc}, @typedef={0x9, 0x0, 0x0, 0x8, 0x5}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x3, 0xa}]}, {0x0, [0x2e, 0x0, 0x5f, 0x30, 0x0, 0x0, 0x30, 0x30, 0x30, 0x0]}}, &(0x7f0000000500)=""/229, 0x94, 0xe5, 0x0, 0x1, 0x10000}, 0x28) (async) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000800)={r0, &(0x7f0000000640)='^*.\x00', 0x80002, &(0x7f0000000740)={@align=0x2, {0x8000, 0x5, 0xffff, 0xd39a}}, 0x1, &(0x7f0000000780), &(0x7f00000007c0)}) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000f40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f00)={&(0x7f00000003c0)={0x24, 0x0, 0xb, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_COMPAT_NAME={0x8, 0x1, '^*.\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x2, 0x8, 0x1000, 0x8095, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5, 0x1, @value=r1}, 0x50) (async) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) (async, rerun: 64) r6 = accept4(r5, 0x0, 0x0, 0x800) (rerun: 64) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080) (async) write(r4, &(0x7f0000000000), 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x1}, 0x10) (async) write(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) (async) writev(r4, &(0x7f0000000140), 0x0) syz_genetlink_get_family_id$nl80211(0x0, r4) (async) r7 = socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) sendmsg$NL80211_CMD_ASSOCIATE(r4, 0x0, 0x18054) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000004640)={0x0}, 0x1, 0x0, 0x0, 0x24040080}, 0x80) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, 0x0, 0x0) (async) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x8929, &(0x7f0000000600)={'ip6tnl0\x00', 0x0}) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400", @ANYRES16], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e000000000000000000000000000000611800000000000018110000", @ANYRES32=r3, @ANYBLOB="00000000000000001d0802000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m36.889778687s ago: executing program 0 (id=2210): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002700010308000000ffffffff0d"], 0x14}}, 0x40088c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94) 2m21.549679345s ago: executing program 33 (id=2210): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002700010308000000ffffffff0d"], 0x14}}, 0x40088c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94) 1m24.665100917s ago: executing program 3 (id=2647): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x45, &(0x7f0000000200), 0x4) 1m24.430819255s ago: executing program 3 (id=2648): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x3, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0x0}, 0x50) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x11, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x2}, @jmp={0x5, 0x1, 0x5, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x27}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000400)={@val={0x800e}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @val={@val={0x88a8, 0x7, 0x1, 0x1}, {0x8100, 0x5, 0x1}}, {@ipv4={0x800, @udp={{0x41, 0x4, 0x0, 0x4, 0x11a, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x82, 0xd, "dc4c3dcd6c0af13a61dbba"}, @cipso={0x86, 0x71, 0x3, [{0x7, 0xe, "7f921ec7162542990eb6a07c"}, {0x6, 0x4, "fae8"}, {0x7, 0x8, "22a4e7a26010"}, {0x0, 0x12, "04104f876404000000000000006e4e13"}, {0x2, 0x4, "05f3"}, {0x6, 0xd, "534355c2fa87a9566ce291"}, {0x5, 0xe, "cb8838ff48190966904b056c"}, {0x5, 0x12, "2657c35d6fa01c005a26b92389d7130b"}, {0x7, 0xa, "58f46488aab76798"}, {0x0, 0x4, "86f2"}]}, @ssrr={0x89, 0x17, 0x1d, [@dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @rand_addr=0x64010100, @remote, @rand_addr=0x64010101]}, @lsrr={0x83, 0xf, 0x3e, [@loopback, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x24}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0xfc, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x15}, @empty, @multicast1]}, @generic={0x89, 0x12, "493de14e9569b372af3fcb0c3fe5b68e"}, @ssrr={0x89, 0x1f, 0xe7, [@multicast2, @local, @private=0xa010100, @broadcast, @loopback, @multicast1, @remote]}]}}, {0x44fe, 0x4e24, 0x16, 0x0, @opaque="8229f897edaacdb24c5ff074a3f7"}}}}}}, 0x134) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r8, 0xeb923771a6a8c729, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x200840c4) r9 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r9, &(0x7f0000000100)={0x2, 0x5e23, @local}, 0x10) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) ppoll(&(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x51, &(0x7f0000000040), &(0x7f0000000080)={[0xfffffffffffffffb]}, 0x8) setsockopt$inet6_int(r10, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r10, &(0x7f00000001c0)={0xa, 0x5e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x5}, 0x1c) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r11, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r11, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x5}, 0x1c) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010200000000000000000000850000005300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r13 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000337e9fe7f52a293212a6d8825be7d8ad0f7468aa0a17b2c57dc9e24f9d36ca1882707783b2bf5ef8a549ff53413ef62397f37caee2d6b08e02c75493ac9ab6b9a8913e213a131ac651e6aff4f52a4f4a27d181aa0f12ef40cbfbae91f81f79a5446960569e0b49be78dbdbd5", @ANYRES16=r8, @ANYBLOB="00082bbd7000fcdbdf251400000008001d00", @ANYRES32=r13, @ANYBLOB], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="414601", @ANYRES32=r0], 0x4) 1m20.893005406s ago: executing program 3 (id=2659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000000)=@ethtool_eee={0x45, 0x7, 0x8, 0xa07b, 0x7, 0x7b24, 0x80000001, 0x0, [0x7, 0x4]}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008004500002400000000002f90"], 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000240)=0xffff, &(0x7f0000000280)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) shutdown(r4, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x38, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008080}, 0x20004000) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x54, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9e}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80000001}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x0, @local}, 0x2}}, 0x26) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x34, r10, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x20}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}}, 0x20) sendmmsg$inet6(r7, &(0x7f0000006b80), 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x20000002}) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x6c01, 0x0, 0x0) epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x1, 0xffffffff, 0x0, 0xfffffffffffffc6f) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)={0x800001f}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) 1m19.714622735s ago: executing program 3 (id=2666): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, 0x0, 0x0) (async) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async, rerun: 32) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (rerun: 32) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async, rerun: 32) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) (async, rerun: 32) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 1m19.101057897s ago: executing program 2 (id=2671): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x45, &(0x7f0000000200), 0x4) 1m18.704895262s ago: executing program 2 (id=2674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000240)) (async) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0x2711, @local}, 0x10, 0x0) connect$vsock_stream(r3, &(0x7f0000000340)={0x28, 0x0, 0x2710, @local}, 0x10) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=r6, @ANYBLOB="00000000000000002000120002800c002e00100000001000"/40], 0x40}}, 0x0) (async) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1a, 0x1, 0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xff], @ipv6=@remote, [0x0, 0xff000000, 0xff000000, 0xffffff00], 0x4d3, 0x34ff, 0x1, 0x1, 0x15, 0x10}, {@ipv4=@multicast1, [0x0, 0xffffffff, 0xffffffff, 0xff], @ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff], 0x4d6, 0x3503, 0x87, 0x0, 0x2, 0x10}, {@ipv4=@empty, [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x11}, [0xff000000, 0x0, 0xff, 0xff000000], 0x4d6, 0x3500, 0x3a, 0x0, 0x0, 0x4}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0x0, 0xffffff00], @ipv6=@mcast1, [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], 0x4d3, 0x0, 0x2f, 0x0, 0x4, 0x1a}], 0x1, 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x458) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) (async) getsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) (async) connect$vsock_stream(r3, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16], 0x28}}, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000040)={@any, 0x9}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(r8, &(0x7f0000000980)=0x8, r0, &(0x7f0000000440)=0x1, 0x4, 0x2) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a36000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000000d1400000010000101000000b5887fc4da773f357f4e96499fc03e7c00000000000084000a", @ANYRESOCT], 0x5c}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x5, &(0x7f0000000900)=""/21, &(0x7f0000000940)=0x15) 1m17.890633337s ago: executing program 2 (id=2678): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) (async) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf85, 0x3}, 0x1c) (async) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf85, 0x3}, 0x1c) syz_emit_ethernet(0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd61bc4a0600522f00fe80000000000000000000000000009bfe8000000000000000000000000000aa0c2088be"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 1m17.389252425s ago: executing program 2 (id=2681): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x1a0000010}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000000c0)="63eced8e66a0e76e70a3b646dc3f", 0x0, 0x7ffe, 0xf00, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r6 = accept$unix(r0, &(0x7f0000000140)=@abs, &(0x7f0000000200)=0x6e) sendmsg$unix(r6, &(0x7f0000000c40)={&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000400)="9ee9e6463169d425d8e7473e84a074e55168244a5a0eaf9cc74e18bf5a72775b4e9a2f8f948386b44e119d84fb7b9529afe118c20e0d73dd290738a82ad5e3a5eca4cde0984c4634ab3d155727bb16c71eff", 0x52}, {&(0x7f0000000480)="6c0e0f9382964033d2fa8682048f449f70ca1ba7a1a54ef0fb7e0a6ca84bf0925758a2fabff8d7d14b", 0x29}, {&(0x7f00000004c0)="659eb95f71e3434ffa04ebcecb059946efa3edeeec1ba22e5cc55ae203c66bf7535591827474f576394dc5931ff5d75539b6c0c6c2a904e52705b6eaa1734225b1bdbb2d02a2a861d509a6cd171e8ddea6", 0x51}, {&(0x7f0000000540)="428302578df3f906aff980dfb3704967c15ecaec4c2cafb087d4e77c3dcda9", 0x1f}, {&(0x7f0000000580)="f0651fd7982519777db439918ef4f25fcbeaeac4e80646920ce50f3df6147b2de0a62e0e4b75d97ce195a2c42ad08e2ccfb47dddf579052f0e0e39e04a8a666b40c4eb75286f271436110aa87d83054e15a38e2867e8f4e61c4e701151d994f60c221060c9b6ad1d994f85a1b561e2f64d05c51c3ba609069e599f820be66c37a3d291396ac4029e1f8c7394551530d31e80a26781e02bb642ee906752666160e8a5d0288a33bb78448ce6a6ab030eb8f83a964795d9f3e93e0fd39a624fb37bfe551349f3e0aeb619b1ca3727eb2bf7ed9e4878b329", 0xd6}, {&(0x7f0000000780)="e4cfcc627ac1bf4c803d748ed5559044283edc131e76bdf8f9338c9343ee80e8c19a2448aff46e6cb021e603074697c336c01dfce333470c6b4651a1a8f40ff76838f47f3308ecfaef37ebd5aaf105091f2c39e249c4d11c0a0aa9c7a76668e5c14a80a1aaa19aa9e1155b82d665970dabf0557893165f168c270306a8a048b5e736584fed3a5bec9c089f916a7147840634b742baadb9cef46a4fe46a2b926f0273d0fbc4117fbd9c1e8476ae1e645438892f168f6d2085b46f1634e55a2c4e00a435a263880dfd26b84a9157c4d0a3e6bb70ff9ead960c25bb28504549839744070fcf17111e4c7bd0d77b68", 0xed}], 0x6, &(0x7f0000000c00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000018000000000000fd0000000001000000", @ANYRES32=r0, @ANYRES32=r1], 0x30, 0x40008081}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r7) 1m17.003211309s ago: executing program 2 (id=2683): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x11dc0, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x1}, {r0, 0x1044}, {r3, 0x404e}, {r3, 0x8000}, {r1, 0x40}, {r0, 0x9}, {r3, 0x305}, {r1, 0x100}], 0x8, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000300)={[0x2d]}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0500000004000000040000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000525d000000000000000000000000000000000000000000000000f8665cdfeb52acadaaa7263a94855daa846adeda813dc42701e8ae7c3b819b04896d47dd6835940fb467cbd7c5b29c33e87d59296639742148da3461"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000700)=ANY=[@ANYRES64=r4, @ANYRES32=r4, @ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x7, 0x8000, 0x10, 0xf11c, 0x4cb0, 0xfa, 0x3, {0x0, @in6={{0xa, 0x4e24, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x1, 0x104, 0x8001, 0x2, 0x5}}, &(0x7f0000000140)=0xb0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000000)="4c00000011001200001100020000140002000000200000", 0x17) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xe, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xe, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r7, &(0x7f00000018c0)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec970000382c00fe8000000000000000000000849311b7a1000000aaff0200000000000000000000000000013a0000000000000002009078"], 0x6e) (async) write$tun(r7, &(0x7f00000018c0)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec970000382c00fe8000000000000000000000849311b7a1000000aaff0200000000000000000000000000013a0000000000000002009078"], 0x6e) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c000000520000022dbd7000fedbdf25060800080006000001002274f87b0f6ebc55a800080006000200000008000600ff000000081dc29e09f7000600c809000008000600030000000800060005"], 0x5c}}, 0x4000) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000180)={r6, 0x6, 0x1000}, 0x8) 1m16.95735627s ago: executing program 3 (id=2684): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r1 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) (async) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x80000) (async) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r2}) (async) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={r2}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'bond_slave_1\x00', @random="eb3411ac30d9"}) 1m16.582287852s ago: executing program 3 (id=2686): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6", @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x133, &(0x7f0000000580)={@broadcast, @local, @val={@void, {0x8100, 0x3, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x3, 0x6, "bb7a4e", 0xf9, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, {[], {0x4e22, 0x4e22, 0xf9, 0x0, @opaque="24ebe114f6ff9df4140f23e2ad086a28ace6c099bec259e8e5f080d1c010f41f47c8d635763c513854126120383901cb1a944721cd27bd55e1025c025ae142fb077377a065d1fba82cd9d817eae33cb59002610b1e239a86aa11d1531f2a2e66315b2a7d5987debcf1f67c44db62356268c247f167e36beec9129f5147a87086c04f880c8ffe13a7743fe00200a3b493d5a7227fb45c46ecc3bb9e792868d39377ef2bed0779a281f3393c8ccc6f8c522542014cb75e344dd0d8b672e09b08ceb4b9f7be493bdbe2000000000000000000000021fe805a4c5783b7e0b68b05627399a05f704cc1456872217224fb874f8d"}}}}}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002700010029bd70edff00000006010000"], 0x14}}, 0xc000) r2 = socket(0x18, 0x80000, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xfff1, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000042c0df7c0000000800001000000000006abd56a7179396d5"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r12, &(0x7f0000006e40)={&(0x7f0000005980)=@generic={0x1, "7f2a5c186b32b4c3e37e9db0cc4d174988d2a7485e8abf2e0d364ef46996432a3c1f52de9d37bbd65c4381f1e88065069a4c67aeb01cefdda4f74f30b0d0cc3280305951c1a9f9bd942b1080f8fe1f9709a4e70d778a658977ef70f8aa3d710a5f78e96bb6f5530f87548ac4914e4cb5a19987d62bb82525306ab2479ead"}, 0x80, 0x0}, 0x4004010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="0400000000800000000000000a00400018200000", @ANYRES32=r11, @ANYBLOB="000000000000000091000100000000009500000000000000"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000003, 0x12, r10, 0x4569e000) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, r13, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004004}, 0x8d0) socket$packet(0x11, 0x3, 0x300) 1m16.378682882s ago: executing program 2 (id=2688): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="2c00000027000100010000000000000004010000180001800800010003000000080002000200000004000300", 0x2c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000080000200000000008000000911178000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000101000000000000030000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa900000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000680)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xa}, 0x94) unshare(0x26000400) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000007cc38af8ffe1000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000b00000095"], &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70ad2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2, 0x4}, {0x0, 0xfff3}, {0xf, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc040}, 0x20040054) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40024000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x168, r6, 0x300, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6ab}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3413}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff69c9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3ff}}]}, 0x168}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB="20010000", @ANYRES16=r6, @ANYBLOB="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"], 0x120}}, 0x20000000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080), &(0x7f0000000140)=0x4) 1m1.478122739s ago: executing program 34 (id=2686): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6", @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x133, &(0x7f0000000580)={@broadcast, @local, @val={@void, {0x8100, 0x3, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x3, 0x6, "bb7a4e", 0xf9, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, {[], {0x4e22, 0x4e22, 0xf9, 0x0, @opaque="24ebe114f6ff9df4140f23e2ad086a28ace6c099bec259e8e5f080d1c010f41f47c8d635763c513854126120383901cb1a944721cd27bd55e1025c025ae142fb077377a065d1fba82cd9d817eae33cb59002610b1e239a86aa11d1531f2a2e66315b2a7d5987debcf1f67c44db62356268c247f167e36beec9129f5147a87086c04f880c8ffe13a7743fe00200a3b493d5a7227fb45c46ecc3bb9e792868d39377ef2bed0779a281f3393c8ccc6f8c522542014cb75e344dd0d8b672e09b08ceb4b9f7be493bdbe2000000000000000000000021fe805a4c5783b7e0b68b05627399a05f704cc1456872217224fb874f8d"}}}}}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002700010029bd70edff00000006010000"], 0x14}}, 0xc000) r2 = socket(0x18, 0x80000, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xfff1, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000042c0df7c0000000800001000000000006abd56a7179396d5"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005940)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r12, &(0x7f0000006e40)={&(0x7f0000005980)=@generic={0x1, "7f2a5c186b32b4c3e37e9db0cc4d174988d2a7485e8abf2e0d364ef46996432a3c1f52de9d37bbd65c4381f1e88065069a4c67aeb01cefdda4f74f30b0d0cc3280305951c1a9f9bd942b1080f8fe1f9709a4e70d778a658977ef70f8aa3d710a5f78e96bb6f5530f87548ac4914e4cb5a19987d62bb82525306ab2479ead"}, 0x80, 0x0}, 0x4004010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="0400000000800000000000000a00400018200000", @ANYRES32=r11, @ANYBLOB="000000000000000091000100000000009500000000000000"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000003, 0x12, r10, 0x4569e000) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, r13, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004004}, 0x8d0) socket$packet(0x11, 0x3, 0x300) 1m1.058606821s ago: executing program 35 (id=2688): r0 = socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="2c00000027000100010000000000000004010000180001800800010003000000080002000200000004000300", 0x2c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000080000200000000008000000911178000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000101000000000000030000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa900000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000680)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xa}, 0x94) unshare(0x26000400) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000007cc38af8ffe1000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000b00000095"], &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70ad2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2, 0x4}, {0x0, 0xfff3}, {0xf, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xc040}, 0x20040054) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40024000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x168, r6, 0x300, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6ab}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3413}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff69c9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3ff}}]}, 0x168}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB="20010000", @ANYRES16=r6, @ANYBLOB="200025bd7000fddbdf250500000008000100706369001100b5af6d59eb54010b303a31302e30000000000800030002000000080001007063690011000200303030303a30303a31302e300000000008000300010000000e0001006e657464657673696d0000000f0057de2a3a2f979302006e657464657673696d3000000800030002000000080001007063690011000200303030303a30303a31302e300000000008000300030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000000e0001006e657464657673696d0000006e657464657673696d30000008000300010000000e0001006e65746465f6616cbba6faf6ef53d9912e208b7673696d0000000f0002006e657464e0c7655f92f302c90800030000000000000000007252acb5f1c0c66a66dcf548b4b4a1347c346e3f2aa72624ccd824424a33492caad991ccaedbd4a6f19f24a0bc2d94067a629138ef813619bddcfee953"], 0x120}}, 0x20000000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080), &(0x7f0000000140)=0x4) 6.403031139s ago: executing program 6 (id=3082): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a31000000000c000780080008400000007005000500020300000500010006"], 0x54}}, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1001001}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x28}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0xc}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, 0x0, 0x44081) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, 0x0, 0x20008000) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000240), &(0x7f0000000280)=r7}, 0x20) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r8, &(0x7f0000000180)={0xa, 0x4e21, 0x200000e, @loopback={0xe0}, 0x40000004}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000340)="b9ff0a03076804268c989e14f088", 0x0, 0x10500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff52540012345688ca5bf0003c00000000000000000100100100001267000012670102030405060708090a0b0c0d0e0f1000"/74], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) 5.779513187s ago: executing program 6 (id=3084): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='#\x00\x00\x00#\x00\x00\x00'], 0x48) unshare(0x20400) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250400000007000b0005de"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) recvmsg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2000) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x120, 0x0, 0x0, 0xee01}, {0x0, 0x200, 0x0, 0x0, 0x0, 0x2, 0x10000000000, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in=@broadcast, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000680)={r0, &(0x7f0000000300), &(0x7f0000000600)=""/86}, 0x20) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r5, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)=@mpls_delroute={0x1f0, 0x19, 0x100, 0x70bd2a, 0x25dfdbfe, {0x1c, 0x14, 0x20, 0xf5, 0xfc, 0x0, 0xfd, 0x2, 0x2800}, [@RTA_VIA={0x14, 0x12, {0x28, "c0bcb13b2a156141ea98f2d7c373"}}, @RTA_NEWDST={0x84, 0x13, [{0x6}, {0x40}, {0x9}, {0x8}, {0x6}, {0x4, 0x0, 0x1}, {0x1ff}, {0xb78f, 0x0, 0x1}, {0x5}, {0x30f}, {0x5, 0x0, 0x1}, {0xffffe}, {0x8e}, {0xe}, {0x8, 0x0, 0x1}, {0x5}, {0x40, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x2}, {0xa3, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xeee, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xb, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x400, 0x0, 0x1}, {0x2}, {}, {0x4, 0x0, 0x1}, {0x3}, {0x0, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x97}, @RTA_NEWDST={0x84, 0x13, [{0x2}, {0x3}, {0x9, 0x0, 0x1}, {0xbfa}, {0x8, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xc0}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x36, 0x0, 0x1}, {0x7, 0x0, 0x1}, {}, {0x8, 0x0, 0x1}, {0x1ff, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0xf5f77}, {0x1, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xa}, {0x3, 0x0, 0x1}, {0xffffb, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x6}, {0xb2, 0x0, 0x1}, {0x9}, {0x655, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x600, 0x0, 0x1}, {0x9}]}, @RTA_NEWDST={0x84, 0x13, [{0xa0000, 0x0, 0x1}, {0x8001}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x9}, {0x3ff}, {0x4, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x8001}, {0x4}, {0x3, 0x0, 0x1}, {0x1915}, {0x6}, {0x91}, {0x7}, {0x4, 0x0, 0x1}, {}, {0x5}, {0x7}, {0xfff}, {0x4}, {0x5, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x6b}, {0x9, 0x0, 0x1}, {0x3}, {0x9}, {0x4, 0x0, 0x1}, {0xffff7}, {0x2, 0x0, 0x1}, {0x7}, {0x44d, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0xbd}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xf9}, @RTA_VIA={0x14, 0x12, {0x11, "5b6fd4bad3c0b0383c6f38485aae"}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x7}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x8004}, 0x40) setsockopt$sock_int(r4, 0x1, 0x45, &(0x7f0000000200), 0x4) 5.350418905s ago: executing program 8 (id=3089): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000005200)={0x15e8, 0x2d, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x8, 0x124, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x15cc, 0x2, 0x0, 0x1, [@nested={0x15c6, 0x2, 0x0, 0x1, [@generic="d3b56af56c3bad985c878c42ecd6cb0b8b20849e2b06d1e0e0efb72cf6536a9374913dbc7b8a7b160fbb81d89585d141f0845310d8365dd4e4d4cd700323a9f4ed575fd4d7b4519537af6012ebadfdd854a6507a00ea52f19cce519abaa60e62d4057c4cb5cc", @typed={0x5, 0x157, 0x0, 0x0, @str='\x00'}, @typed={0x4, 0x141}, @nested={0xa4, 0x99, 0x0, 0x1, [@generic="50da4d55f1e18910cfbda27b47412c4a96f49012ef58fee4235070df4c6cea415c5a687c320713f5a64a69b0ecc9ada5640050902d324234362797c8bf251924949c4102ddcc805496f0e9109488666412903e42d8b2b033cfb4b6ca176ddeb4f975093934c7af7316c202c0b564b1608d7a53641e9d71e45befd10d2bc8395d49292c54cbdfd4538d993a43cf6a71b1f89aff2750f0fe9421d526150f4622ff"]}, @generic="795cfcbc8ed139d0eb819b8e3428bb1b76095d1a1a8f230b4e81e6c4a600fe4ec07c27d30b84a7f44e98260da623c085535f2c3d655233b4c3bd0dfa5b07ec6fcc3e2f46952fdd70ebcfcde80efef677109e5d6a941d885f965d7011e0355463794673619f059c989fac45bcf1cb9248435d88732993dbc6f56a479d91bb3ad3afda7af427c78e8cd0cdc1257f16b2780b31f21611330e75797dfb5ff5b0ed0fce6ca44d87266b66cc4dfa2f8d992bf6", @nested={0xc, 0xca, 0x0, 0x1, [@generic, @typed={0x8, 0x23, 0x0, 0x0, @u32=0xa792}]}, @nested={0x1210, 0x1154, 0x0, 0x1, [@generic="36c36be291449062cdf6d22519f3ac8f9d1fbb41f784671c265f70d7b3afa6a10d34ad8def4fe1907063afd033d4b8744f5ea7379721626aa40b948267d34e0ac3feb5549c2e9b6c39fb59d8ae5f4d707ec059244792454fc65734401cf49148871f57319e38178277eae24deac86ec462412dc0523b1ed72dd5e48331380521ab088a4bc870b50c08b40f7e23c2b2f149967801eb0d6bcc7c9a35fa56c4c44e", @nested={0x10e9, 0x129, 0x0, 0x1, [@generic="41882b48ad7904c2e9492cc1bda0fa44d913393da35342e7cbe0b4b5945764fc1821bae2e1f55b71e5fb0b94b76c653b873ff8173c955b80dbdd6770c2aaa826ac5d3c956c787e5b7e43ed9bf8044b1a45df99a16437d4158f629684497f11f35b94c6bd4cab912bb9c3596de1841837c860ce7bd45ef10fc3c6925e5e93b9d7799ff6dfe19eb154db7bb6cc8e02bc46ff0c7f15ef99194d5ea06e1a7a3df849f37c7c739d219e51bd97b6b99b601622c5", @nested={0x4, 0x13f}, @nested={0x4, 0x8e}, @typed={0x20, 0x13b, 0x0, 0x0, @binary="2848847f7bb4068f2b843e7f5901668b99704eb31afe5b2743496e2d"}, @nested={0x4, 0x30}, @nested={0x4, 0xfd}, @generic="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", @nested={0x4, 0x70}]}, @nested={0x73, 0x1a, 0x0, 0x1, [@typed={0x14, 0x10b, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x4, 0x106}, @typed={0x14, 0x13e, 0x0, 0x0, @ipv6=@loopback}, @generic="b98c6e8c314b4f58d60f449711b8d24840354301cda6312c783f1c19d3b2323a64bcd4b2aeefefc9fe17c40febe0f8a4f0c7ba439d23c689726514", @nested={0x4, 0xa4}, @nested={0x4, 0x58}]}, @typed={0xc, 0x116, 0x0, 0x0, @u64=0xb}]}, @typed={0xa7, 0x14f, 0x0, 0x0, @binary="c424cc03a633aae02583764262cac43a5ec1e3ce3d8557b114865eb382cc3b6a4961d979e11803cf24c11bef5a39c28eb1c435486ae29037d0d16e1f7fbb1ef80df1db740fb5a1aa90258bf46bd6780d1db03a88379a1145b699624968910929705a048e6ea1fec0e33648867e46822966e97d17c72dd0cd46a94a85a14dff21f8b7474781597bdcbb615502eada7e2b988bfe150b75bb15cea63a1969b607e1d5b6e0"}, @nested={0x138, 0x6f, 0x0, 0x1, [@generic="2c95903c9580a13d0059d240eee284997f76548a6d39768a5497f4cb836c65e48cdc9cd926338ed5f2aed765daa27dfcc1ddd949d5b084ae3369941285c8480e2ed9c6d287848d570e0eb10a7bdafb742db7734a", @nested={0x5e, 0x9, 0x0, 0x1, [@nested={0x4, 0x15b}, @nested={0x4, 0x112}, @generic="91ab1495117b1b4312f1944a07ff0bbf69e5e828b9efad745162e548b9d40c4be48205e0845a45efb5601cdd26271ae957f9953282c334698adb76cabfd7935c41fa56f31532df5e9787f20fbddd96648141"]}, @typed={0x14, 0x106, 0x0, 0x0, @ipv6=@mcast1}, @generic="4b1dd5e3c7dbc80dfb135c52c03eac7eafdb998e9af1d68b7050aa147e3d9a4ce62f811689ce45c3bbbc43e42f0729ba88cc87d4d1bb8e66164b0f707ebd8d9a31441961de6d765ff208b2ab934882fdedbe3c47ccff1bf0b05f1c62ec1a437fe022b432798c4159ee921c1e"]}]}]}]}, 0x15e8}, 0x1, 0x0, 0x0, 0x4c80c}, 0xc010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010002ba99979f4474eec0000000e0000c045775f6fdbc5ee6f3f14a6a40a7fc5803974b5263829356b93225c9665d067ec4c0df36f4f8c139966810fa9404439efa536c3a3c84800"/87, @ANYRES32, @ANYBLOB="1100030000000000180012800b00010069703667726500000800028004"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB="08002700020001000800a0"], 0x34}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e080500000a"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000400000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x0, 0x35, 0x0, 0x1, 0x40000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYRESOCT], &(0x7f0000000080)='GPL\x00', 0x4, 0x1000, &(0x7f0000002cc0)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x0, r5, 0x19c00, 0x0, 0xfffffffffffffddc, 0x10, &(0x7f0000000180)={0x0, 0x2, 0x5b, 0x9}, 0x10}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r4, &(0x7f0000000000)='G', 0x0, 0x4}, 0x20) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'veth1_to_hsr\x00'}}, 0x1e) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, r7, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x8, 0x3, 0x5, 0x7, 0x4d2, 0x3, 0x7fff]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x4, 0x44b, 0x7, 0x8, 0x8, 0xf]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x32}]}]}, 0x7c}}, 0x41) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000cf000000000000000500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000001355090100000000009500000000000000c500fefffcffffff2d90000000000000bf91000000000000b702000403000000850000002a000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2c}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r2, 0x0, 0xffffffffffffffff}, 0x10) r9 = socket$l2tp(0x2, 0x2, 0x73) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockopt$inet_mreqn(r9, 0x0, 0x20, &(0x7f0000000100)={@dev, @private, 0x0}, &(0x7f0000000140)=0xc) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x18002000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="14000400fc00"/20], 0xb4}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) setsockopt$inet_int(r9, 0x0, 0x12, &(0x7f0000000000)=0x9, 0x4) 5.100125353s ago: executing program 6 (id=3092): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYRESDEC=r0], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000007fff0001050004000100000008000a00", @ANYRES32=r3], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x2, 0x6, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 4.733516892s ago: executing program 7 (id=3095): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x44, 0x1, 0x70bd29, 0x25dfdbff, {0x1}, [@nested={0x4, 0x48}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r4, 0x0, 0x29, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB], 0x10b8}, 0xfffe) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r5) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r8, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x20000811) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r7, {0x5, 0x1}, {0x1, 0xfff2}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc4, 0x0, 0x1, 0x70bd2d, 0x25dfdbf8, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@pci={{0x8}, {0xffffffffffffff2d}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) close(r3) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000200)={r7, @rand_addr=0x64010102, @broadcast}, 0xc) 4.629278558s ago: executing program 8 (id=3096): socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x20020000) 4.537051772s ago: executing program 6 (id=3097): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r0, 0x84, 0x84, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x3, @private0, 0x3}}, 0x4e22}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x2, 0x3, 0x8000, 0x0, 0x200, 0x7f, 0x8, 0x0, r1}, &(0x7f0000000240)=0x20) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c0005800800010066747000"], 0x90}}, 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) socket$netlink(0x10, 0x3, 0xf) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) accept4$inet6(r3, 0x0, 0x0, 0x80000) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 4.477185682s ago: executing program 1 (id=3098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001180)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0xa4}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x71, 0x1, 0x1, 0x40}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.472326401s ago: executing program 5 (id=3099): r0 = socket(0x10, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2f, 0x9, 0x70bd24, 0x25dfdbfb, {0x4}, [@typed={0x7, 0xb, 0x0, 0x0, @str='\x05\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1a0008", 0x18, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, @loopback, {[], @mld={0x83, 0x0, 0x0, 0xb, 0xc033, @remote}}}}}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8000) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) socket(0xa, 0x3, 0x3a) socket(0x10, 0x803, 0x4) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="2690bae85300"}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$sock(r6, &(0x7f00000009c0)={&(0x7f00000000c0)=@llc={0x1a, 0x304, 0x17, 0x7, 0xf8, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000200)="032ea226786d633051dfc4cf5373abdd4db093fd4a4eb17a52044a7134e1aab731675b7be1f4d97840a4dbc364911e1adf8859d26f7bf1c895f383", 0x3b}, {&(0x7f0000000400)="ef7fa55781ce64d274eacba11fe6fe874088c6ab3697ae69025b2bd80758bc1b8e867fc97ced6c87f08bef9c9d27f3a3964ecb5efb68fde7b716292800a3e6b386dfea0f828335031f83a1a84c6ecd75bed1cc029c48762ac301f7bbe9174731f3ccff6dddd75ad28715fd08", 0x6c}, {&(0x7f00000006c0)="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", 0xfc}, {&(0x7f00000007c0)="244daf484522b79b09ac11550da375815a2fefb2585c343475d73cb24cd20bc91edb5243d1a0b82f39724e9c452ad7280f2355016330b632e2a1baedd8f397884fb5e3877184afa0892483c74e999ed9a8a745ae2c92a02aae15c15a02e6e6ce8301bb1139d75bf50e25a4268ebef2a3dae80850111871f9814c0ce16f8defa51363f1a116b4f13775d9741ab0510eb119f367bc61353c97adf3f7876c575b527992799b25c552adc7db85e0d283de55503b0d1bff46c1", 0xb7}, {&(0x7f0000000880)="1415c3e2c367d659b8fc7a9cda61428384d7f79987e1fc6d5916f9c530848660a54431573bc9a484c156f8dc51bcf930708c33ceb6660008b8ad85b71b488bd8b34224002a9a856268c8ae5ff4704548d0850f2a2baed2b2d32e11c20f2422f93700f2abca6925f07dbb1054c5311b2dee66db4c76f27ca4bb3c535324ed3358f5f0459198a49dcdf42204ff792c5da5a2b1a9c10adfb94281e3f54e5c0973113980d0ede09a3e1592181d6df0811c26d82922e5b8a9b7434627", 0xba}], 0x5}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448dd, &(0x7f0000000700)) sendmsg$IPSET_CMD_PROTOCOL(r5, 0x0, 0x4080) 4.46713296s ago: executing program 8 (id=3100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff01c}, {0x6, 0x5}]}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) socket$inet(0x2, 0xa, 0xd) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x1, 0x803, 0x0) getpeername$packet(r3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ECN_SUPPORTED(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000140)={r4, 0x9}, &(0x7f0000000180)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket(0x400000000010, 0x6, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r5) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r8, 0x4, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) 4.440652085s ago: executing program 1 (id=3101): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300697036746e6c30000000000000000000240012800b000100697036746e6c00001400028005000400e400000008000800000004"], 0x58}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r2, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x19, &(0x7f0000000280)=ANY=[@ANYBLOB="180000008b000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008501000000000000bf0900000000000055090100000000009500000000000000ad0a060000000000b500ffff000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b7000000000000009500000000000000de098c09a4707bbc3405e24b5262350f6b12e1f202e8032da0bd2ddc70d26f520b4748493c1ad3f16c37a9b43d2edf05f7b4365da041ef081731de774bf637512d9586f75621"], &(0x7f0000000080)='GPL\x00', 0x6, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24}, 0x94) 4.284796605s ago: executing program 7 (id=3102): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000086000001"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r1, 0x0, 0x20000000}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="750a00000000000061111400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @remote, @multicast2}, &(0x7f0000000040)=0xc) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1, 0x5, r2, 0x2dd}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0xe, 0x0, &(0x7f0000000a80)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000030400000000fdffff0000000300", @ANYRES32=0x0, @ANYBLOB="0000000040000000140012800900010076657468000000000400028008004040", @ANYBLOB="9f68f33976"], 0x48}}, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000300)="ab", 0x1, 0x4000000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='\b', 0x1}, {0x0}], 0x2, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0xff, 0x4d, 0x1, 0xff}}], 0x20, 0x4048000}, 0x20000050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x5, 0x0, 0xdad1124f55525050, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x5c}, 0x94) 4.283452058s ago: executing program 1 (id=3103): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) (async) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="680200000005030000000000000000000500000254020100010000000000008001050900ff00120073797a310000000000000000000000000000000000000000000000000000000083536fbebb759c421376cc71fc07dd45365540742570280cc97680299f52a2d35d606f739128a0826de95fedb865085504ce24b5735bcc31c9eff26500080700000000000800000001000d0000000000020000007400040002000000010001002000008000000000040000004a"], 0x268}, 0x1, 0x0, 0x0, 0x40001}, 0x800) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000940)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0xc001) (async) recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0xa1ff, 0x0}, 0xffff}], 0x1, 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind(r1, &(0x7f0000000000)=@hci={0x1f, 0xffff, 0x3}, 0x6) write(0xca, &(0x7f0000000040)="040e0c01031000ffffffffff40ffff", 0xf) (async) write(0xca, &(0x7f0000000060)="040e0c01032000ffffffffffffffff", 0xf) write(0xca, &(0x7f0000000080)="040e0a01602000fb000a00020a", 0xd) (async) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) (async) write(r1, &(0x7f0000000010)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) (async) write(r1, &(0x7f00000005c0)="0df82ff9d0f2ab", 0x7) (async) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x3e8}, 0x10) connect(r2, &(0x7f0000000200)=@un=@file={0x1f, '\x00\x00\x00\x00\x00\x00\x01\x00'}, 0xa) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) (async) syz_emit_ethernet(0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaad3dbaaaaa0008004500002400000000001190780000000000000000000017c1001090780200000000000001f14d76f6ccc4950d224ca630f4f6f6f14bc15fc6a87d3da12eac3fd91eff2be2b9c93c3a7d6ebc004e3cfd35b187e9b64faa25cb9d76bcf784f6e8067080c7b892dd5b1e9087cea7b0d1c685709d76bdab7ef4e039eeb0fb8712d9eff7e09e74d6a356268eec3012b7b4caf2deaf7298a77857dc794fbd2272f69815bb57729cf5ebbe9dc82189de4b3451b80a7e32451bbf8e0ef88a7860f86335b759c8f17d62b5b562db234558"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x1c}}, 0x81) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000001340)=@ieee802154={0x24, @long={0x3, 0x3, {0x100}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000000)='G', 0x1}, {&(0x7f00000004c0)="1cf85a7c3309e5fde102956bf154ee1c0837f67601d691e315ae2c6c33d71c514df54408d27e2dadb47081fe631974eae27adc4fc6451913b9ddd08335532b10b2f3d8a17c50621ee4f630054bb65e96fa05b70f415f312f029d71200a6e74e0f4641f7615d80522b5e51296c8faee9bcaf51f5049110f2990a68ba2185053152490b5d15979009fe8defdaf713c", 0x8e}], 0x2}, 0x200480c0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) syz_emit_ethernet(0xa2, &(0x7f0000000600)=ANY=[@ANYRESOCT=r4], 0x0) (async) socket$inet6_sctp(0xa, 0x7, 0x84) socket$kcm(0xa, 0x3, 0x87) 3.718911244s ago: executing program 5 (id=3104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000001000000018000180140002007866726d3000"/38], 0x2c}}, 0x24008080) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0x6, 0x578d2b3c232dfacf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x5}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x8c, r2, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8050840}, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_DIR={0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000001000000018000180140002007866726d3000"/38], 0x2c}}, 0x24008080) (async) socket(0x10, 0x3, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0x6, 0x578d2b3c232dfacf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x5}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x8c, r2, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8050840}, 0x5) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_DIR={0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) (async) 3.6825209s ago: executing program 8 (id=3105): r0 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{&(0x7f0000000040)=@xdp, 0x80, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/11, 0xb}, {&(0x7f0000000600)=""/198, 0xc6}], 0x2, &(0x7f0000000740)=""/82, 0x52}, 0xffffffff}, {{&(0x7f00000007c0)=@llc, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000840)=""/6, 0x6}, {&(0x7f0000000880)=""/85, 0x55}, {&(0x7f0000000900)=""/232, 0xe8}, {&(0x7f0000000a00)=""/111, 0x6f}, {&(0x7f0000000a80)=""/210, 0xd2}, {&(0x7f0000000b80)=""/88, 0x58}, {&(0x7f0000000c00)=""/163, 0xa3}], 0x7}, 0x3}, {{&(0x7f0000000d40)=@can, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000dc0)=""/10, 0xa}, {&(0x7f0000000e00)=""/68, 0x44}], 0x2, &(0x7f0000000ec0)=""/73, 0x49}, 0x3}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000fc0)=""/138, 0x8a}, {&(0x7f0000001080)=""/124, 0x7c}, {&(0x7f0000001100)=""/48, 0x30}, {&(0x7f0000001140)=""/4096, 0x1000}], 0x4, &(0x7f0000002180)=""/235, 0xeb}, 0x7}, {{&(0x7f0000002280)=@qipcrtr, 0x80, &(0x7f00000029c0)=[{&(0x7f0000002300)=""/88, 0x58}, {&(0x7f0000002380)=""/185, 0xb9}, {&(0x7f0000002440)=""/231, 0xe7}, {&(0x7f0000002540)=""/243, 0xf3}, {&(0x7f0000002700)=""/29, 0x1d}, {&(0x7f0000002740)=""/184, 0xb8}, {&(0x7f0000002800)=""/177, 0xb1}, {&(0x7f00000028c0)=""/236, 0xec}], 0x8, &(0x7f0000002a80)=""/201, 0xc9}, 0x99df}], 0x5, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000}, 0x20000004) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0xc, 0x4, 0x3}, 0x50) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, &(0x7f0000000380)) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0106000000000000000019"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB='\t\x00\x00[', @ANYRES16=r6, @ANYBLOB="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"], 0x19c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r7, &(0x7f0000004ac0)={0x0, 0x0, 0x0}, 0x4002) recvmsg(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002a00)=""/4114, 0x1012}, {&(0x7f0000001440)=""/4096, 0x707}, {&(0x7f0000000000)=""/135, 0x87}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, 0x0, 0x24}, 0x100) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) 3.644807499s ago: executing program 7 (id=3106): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x15c, r1, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x145, 0x2a, [@chsw_timing={0x68, 0x4, {0x0, 0x1}}, @random_vendor={0xdd, 0xa5, "a6df64fd8ba9ee5c4f4382ab646c6542fc8b9a557c83842f001f8b5272ea56ce16ea59b4872453e5d6adc4c8c8be6b9738aad9f2d4f523012acbe2ccfccf2cc0a8f0d11c008ab06700d85795fb26e78744d0efd5c551a588f135696ccd52bed8176c561928af761bc7a5b382f9e6b4a7c1b01585c10ec5ba9e81c308fd10a7f8d24c86f903f5f959a434a823bcf765cf233131046c51a0e2e3b7c95a6cbba07b7742fda75d"}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x1, 0x20}}, @random_vendor={0xdd, 0x89, "593e657e1a49b162d2fc9113cfd0ea385ed84b7c5d73d49458e99c0b51d15303f0651f074c4d24288d39f5757864c5285207a0a0dd05d6cf9a415ee7c2105c0743d7e3fce3ad4948d4e91b61160a40741a88a9c88a7c3337f9279e309ed93d7d8a32f97e6ba4ef018a418d401bed657b255f56212ff54d7a28dc03427cf166f37a9adbf4e7e84b0b23"}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x884}, 0x800) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000280)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x7d, 0x6, 0x0, 0x8]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x5, 0xfffffffe, 0x5]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040094}, 0x18c0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$smc(&(0x7f0000000400), r5) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e23, @local}, {0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000480)='wg1\x00', 0x8001, 0x7, 0x7}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, r7, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x40040) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$MRT6_TABLE(r5, 0x29, 0xcf, &(0x7f0000000740)=0x1, 0x4) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000840)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f00000009c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xf0, r10, 0x111, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_DEVICE={0x30, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x2}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x8}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x88}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x2c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x40, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xfffd}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4044000}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a80)={r5, 0x58, &(0x7f0000000a00)}, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r6) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, r13, 0x10, 0x0, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000034c0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003480)={&(0x7f0000000c80)=@newtaction={0x27c4, 0x30, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{0x380, 0x1, [@m_ct={0x9c, 0x7, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x35}}]}, {0x5f, 0x6, "0a5c10d4de3a40ace25c80ac2dedc1628ce6f22d603aa44e7850752304132c9827b040f343c0d6ea4c35e82ca4a180c55ea80948ba66ecb6c7ef3a8d8ec3c57e794a36a5b7c4ffb8212cd71d07fa60026ed0ab685ed99cbc55565e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0xc8, 0x4, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x401, 0x4, 0x6, 0xbd0}, 0x1}}]}, {0x7a, 0x6, "03f465a96ff35c574c021e9d6d600a389c8a530f52906f145ed9ae5ebd32a688027f24b9b07a9e00b4a030d4bf1551aa4bf856a57587e6aeb4dcd05d61bab5c4657f388e8ff2789abb7cd430a6edb7e2648bc1edacacccbc2af2aceb3bde437b14f1ceddeade88057bc2737c08b1abcff53009c1996e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x90bce0e38caf6411}}}}, @m_xt={0x218, 0xe, 0x0, 0x0, {{0x7}, {0xf8, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0xc0, 0x6, {0xa, 'raw\x00', 0x2, 0x9, "c87ae219ed2270b7a28890d62658a877d0e4113f28111807e6dee2dbb029e6622b20f7e461861f95db366c2b51837bc231d8c2aab4635c1924afb4f8512b94ef433023c3d99179b8ab919d3e9baadf4470219a58d75e1d6df36694993ab5b54b8552d16ea260e5c0072c4b0e353efda684e4aa2ebf36f64e8e819af740c01fa80da068f3b1eff11acdb675b0cf7c0fe9ab2857516275"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffe}]}, {0xfc, 0x6, "996cca40ba2c7144f568a684bd6bbe8fa276e409af5d50af17111b5f7579da04f1c4bc0e689ab01f41e64b0fadb0edbbfedcc771fdc1e7ede202c1084c322d359478553c94b21ec8fd8467b685bf9ba63a41d5f97cfaa804763082f2a632e119e28fab4f25c2e48b7c5eb8b470a7b0e8ef31ecbf358eeb586198fdbb2e4623721a76b78a4b3989c6a2b7817e691aa35acfebaace3261043e21a1364601b570908058f21bc92028a3271795c6119c496039697f98887c71d93c743d8866c3ff71f47361a73c9939f514365ec0f53d14236375670481cff69e65fa6ea3f24f34f093d0ff60a0166acab5dce2218fc4fc3fa397ea67228ad70c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x128, 0x1, [@m_tunnel_key={0x124, 0x12, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xc2, 0x6, "ee22412521f9bfa4cbb43963ab329ab16a83251f5efef7bc1c817fe22dc29c62eadb7bfd9334e9f23fc83f48caf0014a8252505ad06be2c30cbee93802fba2780ee164dd096f6fe896dce41a3c06e3bcbd7f887360b660ede88a2b1ac3869ad2a193c634fa9868e6be6ca2f9afb3340d0002c2f955bfe125e8aa20857cb077dc0757d3563c57657f9c20342e42227c5daaff9ae29356044ab8d03dbd185856ac4d144285f7b1ccaa590ee5ffa6fb203db5ea34352902cd691c7d20c02ebf"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x2308, 0x1, [@m_vlan={0x78, 0xf, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x2ee}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x361}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x33, 0x6, "cfbb4fa7d42d9cde58a69da054af988a652ee5083326134ff57adebc485f1ac2579152cfa60e7ff1843528d70d8736"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_police={0x10c, 0x9, 0x0, 0x0, {{0xb}, {0x4}, {0xe0, 0x6, "b4c3d3e9f77d0f5da176e12b2254a2b2975dc6d62d95a96814f45a426b5a0684becec8e72da5065d4f18d96fd270a3ac11424581771e69cdbea674a6a691baa827f2be9d6738314bb421038a34127d3a91d8dcf6520d7b38b9da66317ba7132b501a4034490a702a8eff2d9439837146cede1b385523e9c7fe874a452c86028cc749bb26e288100bf4595e216766b46036669caeb1445728d6f9558ba64ccfa7cae101d372a6d2ea3934b9cf2cab5309e81918ce4abbfc3b4782a56685d6c7142408aa0406d52e5ace10d00eed2efef8dc34f316fa4ead589a316159"}, {0xc}, {0xc, 0x8, {0xe55fdbe83be1e927}}}}, @m_ctinfo={0x130, 0x2, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}]}, {0xfc, 0x6, "70b9aad7563be2cb5c5a19cc105f7708066edfb97b198356b5080a1f75e243cd9774ca0a59a16a7af4da00f6b7ff98db746a5360465046843918bf8da0cb5d50c71637599ecec5f53a8f6ea31aa09faa6840bf5c0d3686f5ecef0e8ebe251f01b9652c83a6c68d488c8f68dc5aa986a21f831742ef1bd0228a5912cacbf166c34c47314bf4bc80f5860099d488793940e1034f28095433c2e57c6298690f02302ea99ab30e983b443d94bbad02b8605e50eb6d27e1cba4cdaa97f9ae81af05932bd1bb786eae4e2682ea1c2856516c9626f15bbe7fde4b71e8d08ca70535fb8d46dd9f05bd6401ee764cee6fcf90eca883c154e17dfead02"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x118, 0x1a, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1bc7, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x7, 0x8, 0xfffffffa, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1741, 0x4}}]}, {0xb9, 0x6, "c97cf746cb945a877193ee8c5817b83e7297f77ef56e230a9124b926d2b5bad712ad4bbe1b942805ffa7403d1d353dff9a8baa445afab4f342e246b56822bada97f1e4d097ba4b421a21c7b7729680f8c7db8b95b79904349591d6378dde758678b9d34b8627c25a2d8f8fc910a685fc91dc475ceda7810791d7a8c0618522289fbc98fc8ca96df94c4868fe640316a597d2b9aae41663132a2fbf75e4def3224fce7cc4703d72d3162897175a98fe37b33464103b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0x1db0, 0x15, 0x0, 0x0, {{0xa}, {0x1d1c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x1, 0x2, 0x2, 0x7f7, 0x4}, 0xf9, 0x4, [{0x2, 0x3, 0x1, 0x5, 0x3b9cb981, 0xe}, {0x3, 0x5, 0x0, 0x0, 0x9, 0x3}, {0x2, 0x7, 0x0, 0x8000, 0x0, 0x1ff}]}, [{0x400, 0x7ff, 0xbd4, 0x3, 0x6e}, {0x6, 0x8, 0xa5, 0x354c, 0x7, 0xffffffff}, {0x2, 0x87, 0xc, 0x4, 0x42}, {0x100, 0x4, 0x3, 0x9, 0x800, 0x40}, {0xffffffff, 0x7fffffff, 0x1000, 0x1, 0xffffffff, 0x800}, {0x401, 0x1, 0x10, 0xf, 0x9, 0x5fc}, {0x8, 0x3, 0x7, 0x1, 0x5, 0xffff0001}, {0x200, 0x2, 0x3ff, 0xdacf, 0x9, 0x8}, {0xfffff001, 0x300, 0x10001, 0xa, 0xffff, 0x7}, {0x2, 0x4, 0xb, 0x400000, 0x4}, {0x6, 0x73e1, 0x7, 0x2, 0x100}, {0x3, 0x4, 0x1, 0x9f2, 0x5}, {0x0, 0x2, 0x2, 0x3, 0x401, 0x9}, {0x7, 0x8, 0xa1, 0x2, 0x2baff0e1, 0x3}, {0xf, 0x300, 0x10001, 0x2, 0x5}, {0x8, 0x10000, 0x50, 0x1, 0x9c40, 0x8}, {0x7, 0x9, 0x481d, 0xe775, 0x7, 0x1}, {0x5, 0x7, 0x2, 0xc0, 0x3, 0x4}, {0xffffffff, 0x80, 0x37f56729, 0x4, 0x9, 0x5}, {0x6, 0x77, 0x76, 0x866, 0x2, 0x7}, {0x4, 0x4a, 0x4d2, 0x7fff, 0xff, 0x40}, {0x2, 0x5, 0x5, 0x0, 0x3, 0x8}, {0x8, 0xffffffff, 0x101, 0x6, 0xf, 0x6}, {0x4, 0x3, 0x6c, 0x9, 0x688d}, {0x2, 0x5, 0x4, 0x5e6a3be5, 0x4, 0x3ff}, {0x1000, 0x401, 0xc65, 0xd8, 0x2, 0x8}, {0x2, 0xeb, 0xdc, 0x8, 0x2, 0x4}, {0xffff, 0x9db6, 0x6, 0x372, 0x400, 0x31}, {0x8000, 0x8c, 0x6, 0x1000, 0x3, 0x6}, {0x3ff, 0x3, 0x5, 0xfffffff9, 0xa, 0x3}, {0xfffffffe, 0x1, 0x9, 0x8, 0x71c, 0x4000000}, {0x4, 0x7, 0x0, 0x90, 0x4, 0x5}, {0x8, 0x2, 0x8, 0x7d8, 0x8000}, {0x4, 0x8000, 0x6, 0x3, 0xe37e, 0xfffffffb}, {0x1, 0x200, 0x7, 0x2, 0xffffffff, 0x10}, {0x3352, 0x7, 0x81, 0x862, 0x7, 0x7581}, {0x10000, 0x9, 0x5, 0x0, 0x4, 0xffffff01}, {0x4, 0x6, 0x400, 0x1, 0xdf6e, 0x7f}, {0x45, 0x7, 0x0, 0x1, 0x40, 0xff}, {0x119, 0x6, 0x3, 0x8, 0x8, 0x9}, {0x3, 0x4, 0xa6fd, 0x2, 0xfffffffe, 0x80}, {0x5, 0x7, 0x2, 0x3, 0xd, 0x9}, {0x7, 0x9b6, 0x5, 0xa, 0x4, 0x6}, {0x5, 0x10, 0xd49, 0xffff25a3, 0x3, 0x40}, {0x0, 0xb, 0x8, 0x5, 0x5, 0x2}, {0x8001, 0xea27, 0xf2, 0x3ff, 0x10001, 0x7000}, {0x2, 0x937, 0x325, 0xe04d, 0x8, 0x401}, {0xfffffff5, 0x7, 0x916, 0x1000, 0xffffffff, 0x8}, {0xfffffff7, 0x5, 0x401, 0x1, 0xe, 0x80000001}, {0xe, 0x2, 0x7, 0xe, 0xe8, 0x9}, {0x3, 0x2, 0xffff043c, 0x2, 0x5, 0x8}, {0x9, 0x2, 0x800, 0x8000, 0x9, 0xb}, {0x7ff, 0x8, 0x2, 0x2beb, 0x4, 0x9}, {0x7ff, 0x0, 0x4, 0x80000000, 0x6, 0x7}, {0x80000001, 0x4, 0xb0b, 0x9, 0xbc, 0x3}, {0x3, 0x3, 0x2, 0x9, 0x20, 0x8}, {0x401, 0x0, 0x5, 0x7a89, 0xd1f, 0x7}, {0xfffffffa, 0x4, 0x3, 0xffffff01, 0x3, 0xffff5705}, {0x7a, 0x100, 0x2, 0x5, 0x7, 0x80000000}, {0x7, 0xbeea, 0xff, 0x5, 0xc8f6, 0x3ff}, {0xff, 0x3, 0x2, 0x101, 0x1000, 0x3}, {0x0, 0x4, 0x0, 0x7ff, 0x4, 0x59}, {0x3, 0x5, 0x6, 0x7, 0x7, 0x9}, {0x4, 0x10000, 0x5, 0x6, 0x8, 0x8}, {0x9, 0x2, 0x5, 0x7, 0x2, 0xd9}, {0x6, 0x8000, 0x1, 0x12}, {0x8, 0x1, 0x2, 0x7, 0x9, 0x6}, {0x7, 0x8, 0x5, 0x6, 0x40, 0x5}, {0x7b, 0x4, 0x3, 0x10001, 0x0, 0x1}, {0xf, 0x2, 0x10000, 0x7, 0x2f71, 0x7}, {0x3, 0x6, 0x8, 0x8, 0xf6, 0xf}, {0x9, 0x2, 0xa0000, 0x3, 0x2, 0x5}, {0x9, 0xad17, 0x5, 0xb, 0xc, 0xa}, {0x0, 0x2, 0x3, 0x9, 0x6c2f, 0x9ad}, {0xf4, 0x34000000, 0x40, 0x4, 0x1, 0x80000001}, {0x2, 0xfffffff3, 0x1ff, 0x200, 0x8bc6, 0x502}, {0xd512, 0x3, 0x100, 0x1, 0x10000, 0x75b}, {0x0, 0x65a9c006, 0xc, 0x2, 0x8, 0x8}, {0x0, 0x7, 0x7f, 0x24, 0xffffffff, 0x300}, {0x9, 0x8, 0x98, 0x3, 0xd, 0xf6}, {0xfffffff3, 0x400, 0x8, 0xfff, 0x9, 0x8}, {0x6, 0x3, 0x9, 0x6, 0x7c, 0x2}, {0x10, 0x9, 0x80, 0xd25, 0xfffffffa, 0x10}, {0x29, 0x4, 0x6, 0x7, 0xae86, 0x3}, {0xffffffff, 0xfffffffd, 0x2, 0x40, 0xb, 0x6}, {0x8, 0x2c5, 0xc, 0xa9, 0x3, 0x6}, {0x38, 0x2, 0x115f, 0x1, 0x6, 0x1}, {0x9, 0x775, 0x6, 0x8, 0x9, 0x401}, {0x0, 0x80000000, 0x2, 0x7fff, 0x0, 0x240}, {0x7, 0x6, 0x5, 0x5, 0x9, 0xff}, {0x10000, 0x800, 0x1ff, 0x1, 0x8, 0xa2}, {0x8, 0x1ff, 0x7, 0x3, 0x6, 0xc88}, {0xfffffffe, 0x9935, 0xfffffff7, 0x1, 0x2, 0x8}, {0xff, 0x7fff, 0xfffffffa, 0x2, 0x90, 0xffffff01}, {0x0, 0x77, 0x0, 0x1ec, 0x5, 0xbf}, {0x2, 0x1, 0x8, 0xb, 0x8, 0x7}, {0x9, 0x7f, 0x3, 0x3, 0x3, 0x3}, {0xa, 0x40, 0x2a7b, 0x6, 0x8, 0xffff}, {0x9, 0x3, 0x2, 0x1, 0x8000, 0x6}, {0x8, 0x5, 0x1, 0x1c00000, 0xc25, 0x1}, {0x0, 0x1, 0x3ff, 0x4, 0xd, 0x3}, {0x9, 0x10, 0x1, 0x3, 0x2, 0x7}, {0x4, 0x0, 0x1, 0x7, 0x5, 0x8}, {0x1, 0xfffffe00, 0x9, 0xcc47, 0xb7b, 0x1}, {0x0, 0x3743, 0x0, 0x7, 0x4, 0x8}, {0x7fff, 0xf, 0x0, 0x7, 0x0, 0xd5d}, {0x4f, 0x3, 0x4, 0x69c8, 0x676, 0x9}, {0x101, 0x68, 0xcde6, 0x0, 0x0, 0x8}, {0x8000, 0xcf9, 0x1000, 0x9, 0x6, 0x5}, {0xff, 0xffffffff, 0x5, 0x6, 0x4, 0xd}, {0x800, 0x0, 0x3256831, 0x3, 0x9, 0x6}, {0x800, 0x0, 0x0, 0x1, 0x3, 0x9}, {0x0, 0xd8, 0x47b, 0x9, 0x1, 0x1}, {0x1000, 0x0, 0x225, 0x10000, 0xc05d, 0x5}, {0x9, 0x4, 0x5, 0x2, 0x3, 0x4}, {0x4, 0x4, 0x5, 0xa, 0x11, 0x2}, {0x8, 0x4, 0x0, 0x5, 0xe8, 0x7}, {0x123eef26, 0x7, 0x0, 0x4, 0x4, 0x2}, {0x0, 0x2, 0x5, 0x1, 0x6, 0x8}, {0x6, 0x4cce3fdb, 0x6, 0x690, 0x2, 0x3}, {0xff, 0x7, 0x8001, 0x3d2, 0x30ed, 0xf}, {0x3, 0x2, 0x1, 0x1ff, 0x81, 0xfffffffd}, {0x8, 0x4, 0x8, 0x1, 0xfffeffff, 0x1}, {0x3, 0x3, 0x100, 0x5, 0x5, 0x8001}, {0xe, 0xf, 0xa92, 0x8, 0x8, 0xff}, {0x9000, 0x0, 0x8, 0x5, 0x3, 0x3}, {0x2, 0xe5, 0x16, 0xc0a, 0x10, 0x7b0}, {0xe, 0x9, 0x2, 0x7, 0x80000000}], [{0x3}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x5}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x5}, {0x5}, {0x2}, {0x4}, {0x4, 0x1}, {0x1}, {0x1}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0xab4210059399130b, 0x1}, {0x1}, {0x2}, {}, {0x5, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {}, {0x1}, {0x4, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x4}, {0x3}, {}, {0x0, 0x1}, {0xe55367e11aee8e45, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x52b8555d5e998e6}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x2}]}}, @TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0xc, 0x4, 0x3, 0xfffff08b, 0x7}, 0x0, 0x7, [{0x200, 0x4, 0x7ff, 0x2, 0x8, 0x5}, {0x7, 0x5e25, 0x825d, 0x9a6, 0x3, 0x6}, {0x2, 0x8, 0x4, 0x1, 0x7, 0x6}, {0x7, 0x9, 0x8, 0xf, 0x10000, 0x2}, {0x7, 0x3aed, 0x0, 0x3, 0x0, 0x9}, {0x13, 0xfffffffc, 0x4, 0x8, 0x3, 0x7}]}, [{0x1, 0x2, 0x75, 0x0, 0x4, 0x7}, {0x1, 0x3, 0x400, 0x6, 0x3, 0x81}, {0x7fffffff, 0x80, 0x4, 0x7, 0xd3a, 0x7}, {0xcf06, 0x4, 0x100, 0x9, 0x0, 0x9}, {0x25, 0x0, 0x8, 0x8, 0x6, 0x1ff}, {0x101, 0x8, 0x8, 0x69, 0x0, 0x99c}, {0x5, 0x376e, 0x200, 0x1ff, 0x400, 0x3}, {0x1, 0x0, 0xf4f7, 0x6, 0x2, 0x3ba77809}, {0x8fcc, 0x65, 0x5, 0xcfc2, 0x7, 0x4}, {0x6, 0x700000, 0xdef8, 0x7, 0x7, 0x2}, {0x1, 0xfff, 0x8, 0x2, 0x9a, 0x3}, {0x0, 0xa, 0xc7a, 0x80, 0x965, 0x8210}, {0x8, 0x5, 0x1, 0x1, 0x7, 0x7}, {0x8, 0x8, 0xff, 0x7, 0x6, 0x1}, {0xffffffc5, 0x6, 0x7, 0x81, 0xbd41, 0x9}, {0x5, 0x3, 0x11, 0x55, 0x8, 0x1b4}, {0x4, 0x9, 0x1000, 0x6, 0x89f}, {0x8, 0x2, 0x2, 0xfffffff7, 0xffffc3a1, 0x8}, {0x7ff, 0xffffffff, 0x76, 0x4, 0x5, 0x1400}, {0xb9, 0x100, 0x5, 0x800, 0x81, 0xb}, {0x800, 0x6, 0xa7, 0x3, 0x1000, 0x9}, {0xfffffff8, 0x6, 0x1000, 0x2, 0x9, 0x419}, {0x5, 0x0, 0xffff8000, 0x3, 0x5, 0xb1}, {0x3, 0x4, 0x6, 0x3, 0xfffffffd, 0x8}, {0x101, 0x7, 0x2, 0x7, 0x54b1, 0x3}, {0x1, 0x1, 0x7, 0x0, 0x4, 0x5}, {0xdbf, 0x8000, 0x3, 0x5, 0xbfd9, 0x9}, {0x800, 0x6, 0xa, 0xc, 0x8, 0x8}, {0x40, 0x1, 0x1, 0x6, 0x9, 0x748}, {0xfff, 0xc3d1, 0xffffffb7, 0x8000, 0x0, 0x1}, {0x81, 0x81, 0x6, 0xfffffff7, 0x7ff, 0x9}, {0x3, 0x5, 0x9, 0x40, 0xbc, 0x2}, {0x3, 0x60, 0x8, 0x5, 0x4, 0x6}, {0x5, 0xe, 0xfffffff6, 0x264, 0x80000001, 0xfffffffa}, {0x448, 0x5, 0x3ff, 0x7, 0xfffffff7, 0x1}, {0x9, 0x40, 0x5, 0x2, 0x43, 0x7}, {0x2, 0xf8, 0xe23b, 0x2, 0x4, 0x2}, {0x5, 0x0, 0x9, 0x32cf, 0x8, 0xfffffff8}, {0x6, 0x2, 0x8, 0x64cf, 0x7, 0x2}, {0x7, 0x401, 0x53f, 0x7, 0x4}, {0x8, 0x80000001, 0x0, 0x2, 0xe, 0x2}, {0x5, 0x7, 0x6, 0x14, 0x9, 0x1}, {0x7, 0xfffeffff, 0x5, 0x4, 0x81, 0x2e}, {0x10001, 0x4, 0x7, 0x733, 0x80, 0x10000}, {0x3, 0x1736, 0x8001, 0x510, 0x7, 0x3}, {0x3, 0x8, 0x5, 0x642, 0x4, 0x1}, {0xffffffff, 0x6, 0x101, 0x5, 0x4, 0x1}, {0x38000, 0x4, 0x1, 0x6, 0x0, 0x10001}, {0x5, 0x1, 0x1, 0x15b, 0x8, 0x2}, {0xfffffffd, 0x7, 0x9, 0x9776, 0x6, 0x466b}, {0x80000000, 0x4, 0x100, 0x1ae, 0x36b, 0x5}, {0xde, 0x7, 0x7, 0x3, 0x1911, 0x3}, {0xaca1a2f, 0xfff, 0x0, 0x9, 0x19, 0x2}, {0x80, 0x9, 0x7, 0xff, 0x5, 0x4}, {0x6, 0x9, 0x3, 0x400, 0x5, 0x6}, {0x10, 0xc287, 0xf4ee, 0x9, 0x21, 0x1}, {0x4, 0x6, 0x5, 0x8, 0x2}, {0xd2, 0x4, 0xf8, 0x200, 0x1a, 0x4}, {0x200, 0x9, 0x2, 0x8, 0x0, 0xdba4}, {0x10001, 0x2aa75ac4, 0x800000, 0x0, 0x100, 0x9}, {0x8, 0xfffffff9, 0x0, 0x6b2deeb, 0x10, 0x6}, {0x4, 0x6, 0x1, 0xbe04, 0x5, 0x2}, {0xffffffff, 0xcc22, 0x2000, 0x5, 0x0, 0xfffffff9}, {0x45e5f60, 0x5, 0x1, 0x1000, 0x8, 0x9}, {0x2, 0x1a, 0x1, 0x9, 0xd, 0x9}, {0x0, 0xfffffff8, 0x7, 0xa00, 0xa7, 0x9}, {0xfffffffc, 0x8, 0x8, 0x8, 0x7, 0x1}, {0x9, 0x4, 0x1, 0xd, 0xfffffffa, 0x66}, {0x7, 0x9, 0xd44, 0x0, 0xba, 0x9}, {0x4, 0x2, 0x55be, 0x8, 0x5, 0x9}, {0x9, 0x4, 0x5, 0x5, 0xc3, 0x4}, {0xe1, 0x3, 0x7f, 0x7, 0xa, 0xfffffffb}, {0x5, 0x3, 0xd40, 0x342e, 0xffff02e8}, {0x129, 0x9, 0x4ac7, 0x1ff, 0x1, 0x3}, {0xc4, 0x7, 0x0, 0x6, 0x401, 0x7}, {0xb, 0x2, 0xf5db, 0x6, 0x6, 0xb}, {0x9, 0xfffffffc, 0x400, 0xa, 0x1, 0x400}, {0x8, 0x4, 0xda6, 0x1, 0x9, 0x3}, {0x4, 0x9, 0x5, 0x99b, 0x32c, 0x6}, {0x7, 0x0, 0x1, 0x4, 0x6, 0x3}, {0xc, 0x0, 0xff, 0x8, 0x4}, {0xf6cf, 0x3, 0x2, 0x6, 0x80000001, 0x3}, {0x9, 0x4, 0xd, 0x5, 0x0, 0x3}, {0x6, 0x8, 0xf8000000, 0x401, 0x200, 0x5}, {0x8, 0x1, 0x40, 0x7, 0x1, 0x3}, {0x4, 0x4a73, 0x8, 0x3, 0x8000, 0x5}, {0xb1a9, 0x3, 0xfffffbff, 0x4, 0x2, 0xb3c}, {0x1000, 0xfe, 0x9, 0x8, 0x8, 0x3ff}, {0x9, 0x2, 0x5, 0xfff, 0xde2, 0x6}, {0x5035, 0x5, 0x3, 0x8f69, 0x7, 0xfff}, {0x9, 0x6, 0x2, 0xe672, 0x0, 0x97}, {0x0, 0xeb1a, 0x2, 0x100, 0x7, 0x1}, {0xfffffa6b, 0x2, 0xfffffffe, 0x6, 0xc, 0x8a3}, {0x51c, 0x2b0650c0, 0xfffffff1, 0x10001, 0x0, 0x101}, {0x6, 0x0, 0x5e, 0x8, 0x5f4b, 0x7}, {0x10001, 0x1, 0x9, 0x3, 0x267aa520, 0x7}, {0xb, 0x40, 0x4, 0x9, 0x3, 0x4f}, {0x4, 0x100, 0x5, 0x0, 0x1, 0x7ff}, {0x321, 0x9, 0x0, 0x6, 0x8, 0x9}, {0xfff, 0x0, 0x80000000, 0xc, 0x7f, 0xb}, {0x6, 0xf, 0x98, 0x4, 0x1, 0xec81}, {0x1, 0x400, 0x2, 0x9, 0x8, 0x6}, {0x80, 0x2, 0xe, 0x6, 0x9, 0x7}, {0x10, 0xff, 0x2, 0x5, 0x0, 0x2}, {0xffffffa5, 0xfffffff7, 0xe33, 0x4, 0x6, 0x8}, {0x5, 0x2, 0x0, 0x7ea7, 0xfffffffd, 0x1000}, {0x9, 0x4, 0x8, 0x800, 0x7, 0x6}, {0x4, 0x4d, 0x2, 0x1, 0xcd, 0x6}, {0x101, 0x8, 0x0, 0x0, 0xb7, 0x5}, {0x47, 0xd9, 0xc, 0x5, 0xc19b, 0x1}, {0x9, 0x9, 0x8, 0x3, 0x8, 0xf9}, {0x3d, 0xa5b5534, 0x6, 0x6, 0x4, 0x3}, {0x5c74, 0x4000, 0x0, 0xf, 0x0, 0x2}, {0x6, 0x2, 0x1, 0x31d, 0x5, 0x5}, {0x7, 0xd, 0x0, 0x2, 0x401, 0x1}, {0x5, 0x400, 0x20a, 0x9, 0x3, 0x3}, {0x0, 0x86, 0x80000000, 0x1, 0xf43a, 0xa8ab}, {0xf, 0x2, 0x5, 0x9, 0x0, 0x7}, {0x0, 0xf54, 0x53, 0x7, 0x80c, 0xa2}, {0x0, 0x401, 0x7, 0x7, 0xc7, 0x1b0}, {0x5, 0x8, 0x81, 0x5, 0x7, 0x7}, {0x7fff, 0x6, 0xfffffffc, 0xf, 0x3, 0x1}, {0x7, 0xe97, 0x6, 0x5, 0x1, 0xc76}, {0x8000, 0x74a, 0x9, 0x0, 0x4, 0x8}, {0x5, 0x6, 0x8, 0x5, 0x9, 0x8ee}, {0x400, 0x3ff, 0x2, 0xfd2, 0xffff, 0x100}, {0x6, 0x80, 0xb, 0x1, 0x81, 0x8000}, {0x0, 0x2, 0x5, 0xfffff74f, 0x2, 0x7f}], [{0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x3}, {0x4}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x2}, {0x0, 0x1}, {0x2}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {}, {}, {0x3}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x5}, {0x2}, {}, {0x5}, {0x1}, {0x1}, {0xfa799a626fa21fb2}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x4}, {0x3}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x558dc37179d7eba4}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {}, {0x2}, {0x2}, {0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x4}]}}]}, {0x69, 0x6, "99265db83c3a7342b4201527287211f24f900b8e69956b1dc2dddf42dc00790ca9f51d6110134459df2cae658b3113f9915e793b794acc50fa8f6a1e48cf86dba0d9775e35bf3235a6354e43643a617ab4855ec344c32fad0c2eed9cde36afc7512e05a268"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0xa0, 0x1, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0xfff2}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}]}, {0x63, 0x6, "2efea5fe77e5090ced72fa80348ba68990059f1a2f6d4fd8b20a4e380bd436a0571334d8eb0b99643d0e339bb79ac5fd4cfd4bac314065361a8da76f70a922af25ce1c1a68e1c15cb07db2cf2fad85b2ef86a053752bf762416f5d45970757"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_gact={0xe8, 0x2, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xf7a}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x7, 0x2, 0x8, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1023, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x131e, 0xfffffffffffffff0}}]}, {0x80, 0x6, "82bd55931d57d4bc310b06171ad876ed17f0a9b3d2717a4c50f334bc631b65cc4d2f609337a977499b89c538ba86caf2a53b5b7024f8c3eacfdeb967857fd3037bdc5e0fcd506588ec5cd5545402af5274d2405bb7c3d0150a1db90e87e141b18b57507b76a53edea55c4f2ffa7a07731248d4dbe87a22d1f9a92c1b"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x27c4}, 0x1, 0x0, 0x0, 0x44800}, 0x20008010) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r14, &(0x7f00000035c0)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x34, r13, 0x510, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000804}, 0x8041) sendto$inet6(r4, &(0x7f0000003600)="47a1018e2ecb0216b6b204a4f34489ab2fbea367e44be8abeb864f21741d23e7b14ac2297baf92199cd8da7b02a99021d15b3769fbbda172befbcb3357bbaa6baf43f58a70e215ab3a2dc2be1ce378cae4b39949352974e8e3e9b56115ff23453f1bf5903aac72289d14b27d224f2e3dcee4bcf145491c0a3d", 0x79, 0x20008000, &(0x7f0000003680)={0xa, 0x4e20, 0x6, @mcast1, 0xfffffff7}, 0x1c) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_DEVICE(r15, &(0x7f00000038c0)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003880)={&(0x7f0000003840)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048000}, 0x4081) 3.625646923s ago: executing program 5 (id=3107): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xfffe) r1 = socket$l2tp(0x2, 0x2, 0x73) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x20, &(0x7f0000003e40)=""/222}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f00000001c0)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000280)={@rand_addr, 0x0}, &(0x7f00000002c0)=0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x401}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xaf}, @jmp={0x5, 0x0, 0xb, 0x2, 0x0, 0x20, 0x8}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x6}, @ldst={0x0, 0x1, 0x4, 0x2, 0xa, 0xfffffffffffffff0, 0xffffffffffffffff}, @exit, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}]}, &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x50, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) getsockname$l2tp(r1, &(0x7f0000000040), &(0x7f0000000100)=0x10) 3.480020719s ago: executing program 6 (id=3108): preadv(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000000000)=""/40, 0x28}, {&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/240, 0xf0}, {&(0x7f0000001140)=""/144, 0x90}, {&(0x7f0000001200)=""/40, 0x28}, {&(0x7f0000001240)=""/240, 0xf0}, {&(0x7f0000001340)=""/99, 0x63}, {&(0x7f00000013c0)=""/189, 0xbd}], 0x8, 0x6, 0xc8) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r0, &(0x7f0000001500)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000001540)=0x20) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x68, 0x1, 0x4, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x101}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_MODE={0xa}, @NFULA_CFG_MODE={0xa, 0x2, {0x6, 0x1}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_MODE={0xa, 0x2, {0xfffffffb, 0x1}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004010) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001700), 0xffffffffffffffff) (rerun: 32) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000001880)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001740)={0xd0, r3, 0x10, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x40}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x3b51}, {0x5, 0x12, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x2040000) pwrite64(r1, &(0x7f00000018c0)="a993ccea9060763790d12e779175be0248a4a30b3c638480f68ed1f2ea1f61af89cd55c4e32fe162a5da935c15959fa4ed7135643a2917ef71af65aaae8a7d252963710bedb6402db5c33bed794864fe65238672c8d775ddc3544ef5248c903ef78e7ae19cbe78ee3d42900ee0329d8125d1414543ae54827f19b6b0e8c7894caac65947d617cefa7cb0375748007b8f30c66f6cc85469834b186cd08262ca65517cc0c7f7e103ec81bf272e924dd7cc6668d33b037d2a3b401a60524a900670a831487927b1", 0xc6, 0xffffffffffffff48) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000019c0), 0x8) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000001a00), 0x4) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000002ac0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001a40)=""/95, 0x5f, 0x0, &(0x7f0000001ac0)=""/4096, 0x1000}, &(0x7f0000002b00)=0x40) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002b80), r4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002bc0)={'dvmrp1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000002cc0)={'syztnl1\x00', &(0x7f0000002c00)={'tunl0\x00', 0x0, 0x7, 0x8, 0x1, 0x297, {{0x25, 0x4, 0x1, 0xc, 0x94, 0x65, 0x0, 0xb, 0x4, 0x0, @empty, @private=0xa010101, {[@cipso={0x86, 0x69, 0x635dfa9c86cfd660, [{0x7, 0xe, "07217df642db9c9903caf8fb"}, {0x7, 0x8, "37a18a3cc8c9"}, {0x5, 0x11, "2300d6e7cda2e911a075144f5a02d9"}, {0x2, 0xe, "d749c5c798e454dcb36e50c3"}, {0x5, 0x10, "7c299ef676a4cb88e1cc8168cb7b"}, {0x6, 0xe, "117b695392fdf8ef28949053"}, {0x2, 0x4, "9786"}, {0x6, 0xa, "4eedaa82b9bbefd2"}, {0x7, 0x2}]}, @timestamp_addr={0x44, 0x14, 0xb9, 0x1, 0x6, [{@multicast1, 0xffffff7f}, {@remote, 0xc30c}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000002d80)={'syztnl2\x00', &(0x7f0000002d00)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x7, 0xf, 0x0, @private0, @empty, 0x1, 0x20, 0x2d, 0x4}}) (async) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000002dc0)=0x0, &(0x7f0000002e00)=0x4) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000002f40)={'ip_vti0\x00', &(0x7f0000002e40)={'gre0\x00', 0x0, 0x8040, 0x80, 0x1, 0x8000, {{0x2c, 0x4, 0x0, 0x2b, 0xb0, 0x68, 0x0, 0x4, 0x4, 0x0, @empty, @multicast1, {[@lsrr={0x83, 0x7, 0x15, [@empty]}, @lsrr={0x83, 0x27, 0x28, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x26}, @rand_addr=0x64010101, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010100, @local]}, @ssrr={0x89, 0x1f, 0x3c, [@private=0xa010101, @private=0xa010101, @local, @multicast1, @broadcast, @loopback, @private=0xa010102]}, @end, @timestamp_prespec={0x44, 0x4c, 0x89, 0x3, 0x9, [{@broadcast, 0x8}, {@multicast2, 0x400}, {@private=0xa010100, 0x6}, {@local, 0x5}, {@loopback, 0x6}, {@broadcast, 0x3}, {@local, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@rand_addr=0x64010101, 0x2}]}]}}}}}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000003000)={'ip6_vti0\x00', &(0x7f0000002f80)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x5d, 0x4, 0x25, @private1, @loopback, 0x7, 0x700, 0xcbda}}) (rerun: 32) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000003240)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003200)={&(0x7f0000003040)={0x1a4, r6, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000003340)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003300)={&(0x7f00000032c0)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000003440)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003400)={&(0x7f00000033c0)={0x3c, 0x4, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x20000c40) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f00000034c0), r2) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000003600)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000035c0)={&(0x7f0000003500)={0x88, r13, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1c}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x88}, 0x1, 0x0, 0x0, 0x8884}, 0x24040001) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000003740)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003700)={&(0x7f0000003680)={0x48, r3, 0x20, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48070}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000003780)) (async, rerun: 64) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000037c0)={'raw\x00', 0x0, [0x5, 0x3, 0x80000, 0x8e9, 0xfffffff9]}, &(0x7f0000003840)=0x54) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003880)={'bridge_slave_0\x00'}) (async) ioctl$XFS_IOC_GETBMAP(r4, 0xc0205826, &(0x7f00000038c0)={0x7, 0x1, 0xffffffffffffffff, 0x80, 0x5}) 3.479198235s ago: executing program 5 (id=3109): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0xfc, 0x13, 0x101, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x13}, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x3}, {0x0, 0x1, 0x0, 0x100}, 0x8c1, 0x40000}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x3, 0x1, 0x1, 0x5, 0x2, 0x80000001}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000100)={0x5, @remote}) 3.305098146s ago: executing program 1 (id=3110): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1a00000000338f25150f90805321ce7d8f493318a9bbf19b52bf1b71d48fc7392d351df93411f915a62d206b1741be7af256633010311a056afaea26d6"], 0x48) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000740)={{0xffffffffffffffff, &(0x7f0000000040)='GPL\x00', 0x140, &(0x7f00000000c0)={@align=0x9, {0x1b6, 0x6, 0xc3, 0x80}}, 0x3, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x9}, 0x4, &(0x7f00000006c0)=[{0x3, 0x2, &(0x7f0000000000)='\x03\x00\x06\x04\x91\xa4\xecn\x98\x9a+\x9a\x1c\xbfXl#e\x1f\xfe\xfag\xb9\xf4g\xc9\\\f\x03\xda\xb4`!\xf1\x174\xba\xaf\xbdmi\xa8u\xd7\x15H', &(0x7f00000001c0)="a27624f844b29c306563054d21705fcfd0602fa8ba2237a2dbea32228edde44a7028a3eb32dd2c553845d926384daa0af2d08c64b13c42087c10e3c23187201e0fbf9bbdbe9f5a72f79a3613f43dd59fe63f5f80cde80bc7a36f632b622a36b8b1bb90cf2fdc897379da7ee36a937548afcb55fa912337af8c5c96152488ff8c52ff73f5075c657e3d105d960d7f4f3191d29283aa0d947ba4ba21c6557408d666a8b2192694d2361745b3ad3bb73d98df41fda4e3c4314038605bc58f641efeeada3ca72fe2934603e7b0175b676ca3c53f3cd27d6a214acdf7afa2c899b7c25c7e3507e5930e7346583f51b9d0caf6bfd8b79f", 0xf4, 0xa}, {0x3, 0x0, &(0x7f00000002c0)='-,+\x00', &(0x7f0000000600)="c4d31d9759252b9fa1adcc9a562cb1a479a1b80701", 0x15, 0x2}, {0x3, 0xf, &(0x7f0000000340)='\x00', &(0x7f0000000500)="90be9ade64e7554ae11c1455ecbfd73addb7c2f40cafc6d094820e319ff021e73f7608fc2502a8dc95a53543836df0d280ce032bf6f08f4f1f707fa8270aac9c9a4a60b0d1042bd7f385f5e5d312bd711e42b4e478c51db7b7a1860b2e06e5af4dfd09ab7b0a81915780fefc150e5c573ecc20b75f7c3832c0258487279b3a0d0f6c9a2c5dc26670daebeaa301217076adc0b6618458666c12db90d4e6c73e7df217613081153dcc6b2a540e9246988b3fe8666a3aa612d45e2edfe9f2d24704c7f482d60bab306c28861fb96a1510a2971bd3a37eefd0bcd2184adf72153e86142fd4a99534bae0b1f7251cedaf9217c3a502280e02c40025bd9c94", 0xfc}, {0x2, 0x2998, &(0x7f0000000180)='-:\b),\x00', &(0x7f0000000640)="bba1292cc0ef3681165bcb77b0a7c4e96699dba66e5f2b50ca4df57406a4b316abf4b771de1629131d2c03baf0d1caf6df7ac6a099f6ab2b64259e8fe8b660776fae614b31f55b884e3ed7", 0x4b, 0x38}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e0806000000000018440000f8ffffff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ff17ffb703000008000000b704000002000000850000008200000085100000fcffffff85000000790000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002b80)={0x11, 0x5, &(0x7f00000029c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb7}, [@map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x394fcaeb}]}, &(0x7f0000002a00)='syzkaller\x00', 0x490b79b9, 0x19, &(0x7f0000002a40)=""/25, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002a80)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000002ac0)={0x0, 0x6, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002b00)=[r2, r1, r0, r0], &(0x7f0000002b40)=[{0x2, 0x5, 0x0, 0x1}], 0x10, 0x7}, 0x94) setsockopt$inet_mreqn(r1, 0x0, 0x513e7b9a12279037, &(0x7f0000000300)={@remote, @multicast1}, 0xc) writev(r1, &(0x7f0000002940)=[{&(0x7f0000000380)="d9a23693fe3de971a43a382e64fa027e84890dc82a54a4aa1e0f7ac792425286344aaa08243f27cb828a23b588bc83315548266b08c07964bf6f3f9933e667ff8ab908034f78b8d0f1378aedc7869e15a504814bf60d8039f37ca88d9b5427715557e0bb2b1dd14c096086edb1031a57a39503ee8eb31b056fa3512d470ff742758ab3b612c70bdba00541ef5406b44b49b11832b39955f93507ac2cc83a444fc9e809db", 0xa4}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="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", 0x1000}, {&(0x7f0000002840)="c8fc9b4586b75858c5706dd8422ceed870457a34329a4ac7c596a7d4b4748db7684a6d68a0dd4bd64304a30ec8cd81b952ecd2a67b798ced08972aefea74cfe09ea74e071864af08556c720f024cedf2a98e23fafbb546aa346e9e0e3c39ba58934924a2a12358d65db3de24cd4fdce6deadc150a2332ec6b4003e2ffd5b75c5fbb0f2b4cc04a2a16fdfdf124b9fb5", 0x8f}, {&(0x7f0000002900)="cd808466839abc366496973d760b412c4f5c27149d25b9748e82b7f5df176abfa7c3cdaddb60ad", 0x27}], 0x5) sendmsg$tipc(r1, &(0x7f0000002ec0)={&(0x7f0000002c40)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10, &(0x7f0000002e40)=[{&(0x7f0000002c80)="137e1f41234806e64e2c50d43091c89abef7e1cfdbefb3389439be5154459335e4dc4fcd6386dc59b2dde475a6e91a387e20a2183fc993c562c4811ecbc352eb0bd6dec1212b1a86503cbf71ac35a8f65b01cecd227f3fb952f12c208561aeaa6821efdc241181dc2fb3c64bfff1458e0c0723e386eacb449901c89e02e157460c4d960a29fd562c08d0f1c7dd6b8ce68d7300e692e74f8eef51a2af07175bca52e7ae389343594ffc58abb02c2a4406511d8c2e20e16deefebbdaa6b24eec766f3021b68f64fa6d2a76c8e2d02e4c803fe586c5acdf9422f479a25473b1d6470d9ffd5f9ff9ebb66fed04fea69f1277788e194a192c64", 0xf7}, {&(0x7f0000002d80)="d050614a6127be5b2192d36dacf91013ff0bb589b68b7f9112ea16cb6d680e3f4c032d5141b538d86dc0863d81b41dbcf1d0f28185a9891a9685bf72eaecfe0aac594e63b2475144cc404a4562b133d3090e95b417992b08d2955ea088870f0c7cfe482ed88ef517aa7a7f05da2a848c14e5370d5cb3a310", 0x78}, {&(0x7f0000002e00)="ee", 0x1}], 0x3, &(0x7f0000002e80)="cdfc2f40eb", 0x5, 0x2000}, 0x4084800) 3.30372784s ago: executing program 7 (id=3111): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='batadv0\x00', 0xfc46) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000000280)="399b76", 0x3}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000180)="583c485f2587569b2b3f6c5961168177f242f81057", 0x15, 0x3b00, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111c6000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x19) r2 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000040)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r2, &(0x7f00000001c0)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x0, 0x3, 0x9, 0x3}, 0xe) write$nci(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="40b8"], 0x5) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x801}]}}}]}, 0x44}}, 0x0) 3.195095032s ago: executing program 1 (id=3112): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='q#'], 0xb6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="b702000000000000b703000000000000850000007c000000b70000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, &(0x7f00000006c0)="000000000000000002", 0x0}, 0x50) 3.108374781s ago: executing program 8 (id=3113): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000640)={0x6c, @rand_addr=0x64010100, 0x4e22, 0x0, 'sh\x00', 0x11, 0xb418, 0x2d}, 0x2c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00114edb185eafed52", @ANYBLOB], 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r2) sendmsg$nl_route(r1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r7, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000380)={0x8, 0x4e21, @broadcast}, 0x10, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000800)="08003b117c123a3d", 0x8}], 0x2}, 0x20008890) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1100000004000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000d12a235100000000000000005da1c7e2eba4bfd37a2f2ce1b951f177fac4763f001ee145b7ac78e535bec149b79137db9ee78ed33da2ba88bf6e2b3cfa40ca849a31b3fb6945a50c525146245b41a848f669fa14ede6a208767cfa267feea654515ee6414a1237c336bfff5f9f2695ec247540"], 0x50) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000000)="4c0000001100040000000000001cff2000000000000000", 0x17) 3.041781821s ago: executing program 5 (id=3114): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf250c00000008000300", @ANYRES32=r1, @ANYBLOB="040028000500e93ab3ae0000146eaa52589d41c6ba0700000e0284b0c09a6ebb"], 0x3c}, 0x1, 0x0, 0x0, 0x8806}, 0x0) (fail_nth: 8) 173.405251ms ago: executing program 5 (id=3115): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc010000130001010000000000000000fe8000000000000000000000000000bbe00000010000000000000000000000000100000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) 124.083506ms ago: executing program 7 (id=3116): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002f20702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200020095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) close(0x3) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$inet_sctp(r6, &(0x7f0000005f00)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000380)="10fb478f8e4990cd962993ad8dd206d2060d81e87f1b49d6be24051a259d124d3ba0b6f677b873c2082876bef74261d8b93054abb23fcc0341511f7cc53bb18d6d87be7bdb79930fdc799e152cd2d6cd25956eaec876858a5f5f9da686ab52bf54d62de5ea1ed7375970525d7b079986a72530b1244ac7bff4ea6e092cfac6d8f55339db56379dd861b80aa3b800"/154, 0x9a}, {&(0x7f0000000600)="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", 0xeb7}], 0x2, 0x0, 0x0, 0x4040000}], 0x1, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[], 0x24}}, 0x240408c0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRES64=r0, @ANYRES16=r0, @ANYRESHEX, @ANYRESOCT=r0, @ANYRESDEC=r3], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000053c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005380)={&(0x7f0000006200)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r7], 0x1248}}, 0x10004805) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) ioctl$XFS_IOC_FSGROWFSLOG(r2, 0x4008586f, &(0x7f0000000080)={0x1, 0x5}) connect$inet(r8, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0xa) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000280)={0x2, 'erspan0\x00', 0x3}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1e, 0x4, 0x0) recvmmsg$unix(r10, &(0x7f0000006140)=[{{&(0x7f0000000180)=@abs, 0x6e, 0x0}}, {{&(0x7f0000002600)=@abs, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000003100)=""/4080, 0xff0}], 0x1}}, {{&(0x7f0000002d00), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000002d80)=""/136, 0x88}, {0x0}], 0x2}}], 0x3, 0x0, 0x0) sendmmsg(r10, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYRES32=r10, @ANYRES32=0x0, @ANYBLOB="f9ffffff080002"], 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0xc090) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) 121.148349ms ago: executing program 8 (id=3117): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x17}]}}}]}, 0x50}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000001040)=0x10000b, 0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x194, 0x14, 0x400, 0x70bd2d, 0x25dfdbff, {0xa, 0x2}, [@INET_DIAG_REQ_BYTECODE={0xc2, 0x1, "ba599a61ed89039d33bcf13718c40bec53d863529f1f437b7b316ec98e469f7fc23367437415ad52eef66a505584a0bcde1dc4c0a8c3030ac7d6fa756fc7099ed43375a58281b255864c399d502ca938d68a5ae3a6de3d11a3c58d30d181448a0979f6fc476a15931574cc7a924a64dfbe5137871da48ba8b9dd7181fd29959f8066bb12f08d137dfe8583fabaa897eca3a5cee6d709e77e98e8f139d7b3775ce2d53eaf1afe80256546d83d676fdb27866826c9afe6c1a839eee18c8317"}, @INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "0a13cf1df9e7f6783393f54eb5ec395f5609b9e8b2b28124519ee4f4ea325d682ffce7ddca364e83bcaae3f8ac8fb216187d80c027005c70313eed5263e70f3b6dae5841e03e"}, @INET_DIAG_REQ_BYTECODE={0x70, 0x1, "b0e26d41fdd903ab491e2f373802f1091adde4aeefc5fcda41020d170b4b7a72ac1d20d54566a71ce1c1e2ce07fd81425f65c29209539dbc1d9c14ebd8af24374ad660486ff9a0e2ee5b743a6393ab8ec8ec407b5c90bf034e5da7110479f54d607e9d5fc4765f100f3b64dc"}]}, 0x194}, 0x1, 0x0, 0x0, 0x4004850}, 0x20000004) 73.503031ms ago: executing program 6 (id=3118): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, 0x0, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x20000040) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x136e54520700452d, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x80000000000000a, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20000000) write(r2, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0xa82a02e4010a08bd}, "1a01c783a8bc563d", "e9a0bd986e338531d1157bc12d1fc364fdbaaa4d2954c1166835dbbe78286228", "bd69dbc7", "1d7265a045a85572"}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x4}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x10}]}}]}, 0x38}}, 0x4800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x8, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000740)={{0xffffffffffffffff, 0x0, 0x4800, &(0x7f0000000580)={@align=0x2, {0x8, 0x9, 0xe, 0x40}}, 0xd, 0x0, &(0x7f0000000600)=0xfffffff9}, {[0x2, 0x4000000, 0x80, 0x44367f7]}, 0x10d3, 0xcb, &(0x7f0000000640)=""/203}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="581800004400010029bd700004000000010000000400488040180180", @ANYRES32], 0x1858}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 72.189258ms ago: executing program 1 (id=3119): socket$kcm(0x10, 0x2, 0x0) socketpair(0x8, 0x6, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @private=0xa010101}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48842}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)=@newtfilter={0xc8, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0xf}, {}, {0x10, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x98, 0x2, [@TCA_BASIC_EMATCHES={0x94, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x34, 0x3, 0x0, 0x0, {{0x6, 0x4, 0x6c}, [@TCA_EM_META_RVALUE={0x27, 0x3, [@TCF_META_TYPE_VAR="53a080bfa372c9d6", @TCF_META_TYPE_VAR="8681828267c53a32", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="12140867a79804", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT]}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2, 0x7, 0x8d8}, {{0x2, 0x0, 0x0, 0x1}, {0x3}}}}]}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x1, 0x0, 0x0, {{0x10, 0x9, 0xc8c6}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x1ff}, {0x2, 0x6, 0x4}}}]}]}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x80) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp={0xd, 0x0, 0x0, 0x7, 0x6, 0x4, 0x8001}}}}}, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f00000002c0)={@multicast1, @multicast2}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x10, 0x0, 0x20040001}}) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000100001002abd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="802100000c400000140003006272696467655f736c6176655f30000008000400d40000001c0016801800018014000a0004d4b7e4"], 0x58}, 0x1, 0x0, 0x0, 0x8014}, 0x20000040) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x24040040) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000300)={0x3, &(0x7f0000000500)=[{0x28, 0x5, 0x0, 0xfffff034}, {0x50, 0x7, 0x0, 0x100}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) socket$netlink(0x10, 0x3, 0xc) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000002806"], 0xfdef) 0s ago: executing program 7 (id=3120): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="7800000016002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x24040000, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) kernel console output (not intermixed with test programs): uous mode [ 392.342337][T14691] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.757950][T14694] veth0: Caught tx_queue_len zero misconfig [ 392.885016][T14701] macsec1: entered promiscuous mode [ 392.885044][T14701] bridge0: entered promiscuous mode [ 393.759652][T14704] vlan2: entered promiscuous mode [ 393.759701][T14704] bridge0: entered promiscuous mode [ 393.833392][T14704] syzkaller0: entered promiscuous mode [ 393.833423][T14704] syzkaller0: entered allmulticast mode [ 394.183886][T14658] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 394.538215][T14712] netlink: 'syz.2.2148': attribute type 4 has an invalid length. [ 394.538242][T14712] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2148'. [ 394.544339][T14711] netlink: 'syz.2.2148': attribute type 4 has an invalid length. [ 394.544396][T14711] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2148'. [ 394.699957][T14716] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2149'. [ 394.946058][T14722] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2150'. [ 397.862828][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 398.573225][ T999] net_ratelimit: 14 callbacks suppressed [ 398.573252][ T999] bond6: (slave geneve0): failed to get link speed/duplex [ 398.573418][T14724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2150'. [ 398.682715][ T1447] bond6: (slave geneve0): failed to get link speed/duplex [ 398.792751][ T1447] bond6: (slave geneve0): failed to get link speed/duplex [ 398.904558][ T999] bond6: (slave geneve0): failed to get link speed/duplex [ 399.012901][ T999] bond6: (slave geneve0): failed to get link speed/duplex [ 399.033949][T14736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2151'. [ 399.040789][T14736] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2151'. [ 399.040817][T14736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2151'. [ 399.122823][ T999] bond6: (slave geneve0): failed to get link speed/duplex [ 399.233601][ T999] bond6: (slave geneve0): failed to get link speed/duplex [ 399.449957][ T999] bond6: (slave geneve0): failed to get link speed/duplex [ 399.554405][ T7138] bond6: (slave geneve0): failed to get link speed/duplex [ 399.682545][ T999] bond6: (slave geneve0): failed to get link speed/duplex [ 399.861557][T14759] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2159'. [ 399.946098][T14763] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2159'. [ 399.968959][T14754] syzkaller0: entered promiscuous mode [ 399.969160][T14754] syzkaller0: entered allmulticast mode [ 400.015698][T14765] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2160'. [ 400.219005][T14771] netlink: 'syz.1.2161': attribute type 10 has an invalid length. [ 400.312310][T14780] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2162'. [ 400.313167][T14779] netlink: 'syz.1.2161': attribute type 10 has an invalid length. [ 400.421088][T14771] bond0: (slave netdevsim1): Releasing backup interface [ 400.522104][T14784] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2164'. [ 400.551773][T14779] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 400.610537][T14779] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 401.843254][T14833] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2176'. [ 402.282959][T14856] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 402.788879][T14859] lo speed is unknown, defaulting to 1000 [ 403.559586][T14885] tap0: tun_chr_ioctl cmd 1074025677 [ 403.559732][T14885] tap0: linktype set to 804 [ 403.635956][T14895] ovs-s: entered promiscuous mode [ 403.861064][T14908] __nla_validate_parse: 2 callbacks suppressed [ 403.861086][T14908] netlink: 304 bytes leftover after parsing attributes in process `syz.0.2194'. [ 403.908505][T14892] syzkaller0: entered promiscuous mode [ 403.908534][T14892] syzkaller0: entered allmulticast mode [ 403.925833][ T83] net_ratelimit: 25 callbacks suppressed [ 403.925856][ T83] bond6: (slave geneve0): failed to get link speed/duplex [ 404.233434][T14909] tipc: Enabling of bearer rejected, failed to enable media [ 404.286898][T14917] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2195'. [ 404.331399][ T1447] bond6: (slave geneve0): failed to get link speed/duplex [ 404.987951][T14927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2197'. [ 405.437626][T14950] sctp: [Deprecated]: syz.5.2202 (pid 14950) Use of struct sctp_assoc_value in delayed_ack socket option. [ 405.437626][T14950] Use struct sctp_sack_info instead [ 406.231258][T14956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2203'. [ 409.551995][T14939] syzkaller0: left promiscuous mode [ 409.552023][T14939] syzkaller0: left allmulticast mode [ 409.747966][T14942] lo speed is unknown, defaulting to 1000 [ 409.859228][T14961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2204'. [ 410.102752][ T39] bond6: (slave geneve0): failed to get link speed/duplex [ 410.323463][ T83] bond6: (slave geneve0): failed to get link speed/duplex [ 410.367714][T14984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2209'. [ 410.432534][ T7138] bond6: (slave geneve0): failed to get link speed/duplex [ 410.549517][ T83] bond6: (slave geneve0): failed to get link speed/duplex [ 410.654159][ T39] bond6: (slave geneve0): failed to get link speed/duplex [ 410.683381][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.685249][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.685864][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.769743][T14991] dummy0: left allmulticast mode [ 410.769964][T14991] dummy0: left promiscuous mode [ 410.770334][T14991] bridge0: port 3(dummy0) entered disabled state [ 410.813155][T14991] bridge_slave_0: left allmulticast mode [ 410.815140][T14991] bridge_slave_0: left promiscuous mode [ 410.815377][T14991] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.977665][T14991] bridge_slave_1: left allmulticast mode [ 410.980072][T14991] bridge_slave_1: left promiscuous mode [ 410.981135][T14991] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.124716][T14991] bond5: (slave veth0_to_bond): Releasing active interface [ 411.179164][T14991] bond0: (slave bond_slave_0): Releasing backup interface [ 411.247225][T15006] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 411.247267][T15006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.255474][T14991] bond0: (slave bond_slave_1): Releasing backup interface [ 411.299527][T14991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.299555][T14991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.689004][T15014] netlink: 'syz.2.2216': attribute type 5 has an invalid length. [ 412.029704][T15026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2219'. [ 412.105793][ T5625] Bluetooth: hci5: command 0x0405 tx timeout [ 412.137217][T15027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2221'. [ 412.156585][T15026] batadv0: entered promiscuous mode [ 412.161299][T15026] macsec1: entered promiscuous mode [ 412.161581][T15026] macsec1: entered allmulticast mode [ 412.161599][T15026] batadv0: entered allmulticast mode [ 412.191334][T15026] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 412.200926][T15026] batadv0: left allmulticast mode [ 412.201238][T15026] batadv0: left promiscuous mode [ 412.379232][T15033] tc_dump_action: action bad kind [ 412.583186][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 413.059327][T15047] netlink: 'syz.2.2224': attribute type 9 has an invalid length. [ 413.679880][T15082] SET target dimension over the limit! [ 413.945022][T15085] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2228'. [ 414.004005][T15093] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2231'. [ 414.005805][T15088] netlink: 'syz.1.2229': attribute type 10 has an invalid length. [ 414.454809][T15104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2233'. [ 414.544874][T15107] netlink: 'syz.1.2235': attribute type 9 has an invalid length. [ 414.769548][T15109] bridge0: left allmulticast mode [ 414.796253][T15109] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2236'. [ 414.796450][T15109] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2236'. [ 415.056537][T15116] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2240'. [ 415.056565][T15116] nbd: must specify at least one socket [ 415.118047][ T1447] net_ratelimit: 29 callbacks suppressed [ 415.118073][ T1447] bond6: (slave geneve0): failed to get link speed/duplex [ 415.143813][ T1447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.145147][ T39] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.228589][ T999] bond6: (slave geneve0): failed to get link speed/duplex [ 415.420883][T15123] ip_tables: iptables: counters copy to user failed while replacing table [ 415.457017][T15127] ip6gre0: Master is either lo or non-ether device [ 415.470551][ T999] bond6: (slave geneve0): failed to get link speed/duplex [ 415.585751][T15120] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 415.592649][ T999] bond6: (slave geneve0): failed to get link speed/duplex [ 415.705346][ T83] bond6: (slave geneve0): failed to get link speed/duplex [ 415.795757][ T1447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.795978][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.971421][T15137] veth1_to_bond: entered allmulticast mode [ 415.985124][T15145] veth1_to_bond: entered promiscuous mode [ 415.990147][T15137] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2245'. [ 416.034969][T15146] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2247'. [ 416.064868][T15137] veth1_to_bond (unregistering): left allmulticast mode [ 416.064922][T15137] veth1_to_bond (unregistering): left promiscuous mode [ 416.100233][T15137] bond0: (slave bond_slave_1): Releasing backup interface [ 416.388498][T15152] netlink: 'syz.3.2248': attribute type 21 has an invalid length. [ 416.388541][T15152] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2248'. [ 416.388595][T15152] netlink: 'syz.3.2248': attribute type 4 has an invalid length. [ 416.388611][T15152] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2248'. [ 416.554238][T15154] netlink: 'syz.1.2249': attribute type 1 has an invalid length. [ 416.668275][T15160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2249'. [ 416.686037][T15154] bond13: entered promiscuous mode [ 416.686595][T15154] 8021q: adding VLAN 0 to HW filter on device bond13 [ 416.745204][T15162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2250'. [ 416.803624][T15160] 8021q: adding VLAN 0 to HW filter on device bond13 [ 416.807012][T15160] bond13: (slave wireguard0): The slave device specified does not support setting the MAC address [ 416.807040][T15160] bond13: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 416.925817][T15160] bond13: (slave wireguard0): making interface the new active one [ 416.925847][T15160] wireguard0: entered promiscuous mode [ 416.928987][T15160] bond13: (slave wireguard0): Enslaving as an active interface with an up link [ 417.404803][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2254'. [ 417.622338][T15180] netlink: 'syz.5.2256': attribute type 4 has an invalid length. [ 417.624634][T15177] tipc: Enabling of bearer rejected, already enabled [ 417.660636][T15180] netlink: 'syz.5.2256': attribute type 4 has an invalid length. [ 417.685946][T15177] syzkaller0: entered promiscuous mode [ 417.685980][T15177] syzkaller0: entered allmulticast mode [ 417.743880][T15183] IPVS: length: 183 != 8 [ 417.993123][T15192] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2260'. [ 418.081472][T15192] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2260'. [ 420.154710][T11338] net_ratelimit: 54 callbacks suppressed [ 420.154737][T11338] bond6: (slave geneve0): failed to get link speed/duplex [ 420.267391][T11338] bond6: (slave geneve0): failed to get link speed/duplex [ 420.377947][T15245] syzkaller1: entered promiscuous mode [ 420.378156][T15245] syzkaller1: entered allmulticast mode [ 420.396009][ T999] bond6: (slave geneve0): failed to get link speed/duplex [ 420.625541][T15257] FAULT_INJECTION: forcing a failure. [ 420.625541][T15257] name failslab, interval 1, probability 0, space 0, times 0 [ 420.625585][T15257] CPU: 1 UID: 0 PID: 15257 Comm: syz.1.2272 Not tainted syzkaller #0 PREEMPT(full) [ 420.625611][T15257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 420.625625][T15257] Call Trace: [ 420.625634][T15257] [ 420.625645][T15257] dump_stack_lvl+0xe8/0x150 [ 420.625688][T15257] should_fail_ex+0x410/0x560 [ 420.625722][T15257] should_failslab+0xa8/0x100 [ 420.625755][T15257] __kmalloc_cache_noprof+0xa3/0x600 [ 420.625781][T15257] ? __kmalloc_cache_noprof+0x14d/0x600 [ 420.625803][T15257] ? sctp_add_bind_addr+0x8c/0x370 [ 420.625827][T15257] ? sctp_add_bind_addr+0x8c/0x370 [ 420.625861][T15257] sctp_add_bind_addr+0x8c/0x370 [ 420.625892][T15257] sctp_copy_local_addr_list+0x31a/0x4e0 [ 420.625921][T15257] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 420.625949][T15257] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 420.625978][T15257] ? sctp_v6_is_any+0x64/0x80 [ 420.626008][T15257] ? sctp_copy_one_addr+0x93/0x360 [ 420.626038][T15257] sctp_bind_addr_copy+0xb3/0x3c0 [ 420.626065][T15257] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 420.626106][T15257] sctp_connect_new_asoc+0x2ff/0x6b0 [ 420.626141][T15257] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 420.626182][T15257] ? __local_bh_enable_ip+0xd6/0x140 [ 420.626211][T15257] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 420.626242][T15257] ? security_sctp_bind_connect+0x7e/0x2c0 [ 420.626272][T15257] sctp_sendmsg+0x159b/0x2d00 [ 420.626321][T15257] ? __pfx_sctp_sendmsg+0x10/0x10 [ 420.626359][T15257] ? __lock_acquire+0x747/0x2de0 [ 420.626400][T15257] ? aa_sock_msg_perm+0xf5/0x210 [ 420.626429][T15257] ? sock_rps_record_flow+0x19/0x350 [ 420.626460][T15257] ? inet_sendmsg+0x298/0x320 [ 420.626498][T15257] ? __pfx_inet_sendmsg+0x10/0x10 [ 420.626524][T15257] sock_sendmsg_nosec+0x10f/0x190 [ 420.626555][T15257] ____sys_sendmsg+0x54e/0x850 [ 420.626595][T15257] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.626639][T15257] ? import_iovec+0x73/0xa0 [ 420.626674][T15257] ___sys_sendmsg+0x2a5/0x360 [ 420.626707][T15257] ? __lock_acquire+0x747/0x2de0 [ 420.626737][T15257] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.626778][T15257] ? kstrtouint+0x6e/0xe0 [ 420.626833][T15257] ? __fget_files+0x2a/0x420 [ 420.626864][T15257] ? __fget_files+0x3a2/0x420 [ 420.626909][T15257] __sys_sendmmsg+0x273/0x4d0 [ 420.626950][T15257] ? __pfx___sys_sendmmsg+0x10/0x10 [ 420.626996][T15257] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 420.627037][T15257] ? ksys_write+0x242/0x270 [ 420.627074][T15257] ? __pfx_ksys_write+0x10/0x10 [ 420.627118][T15257] __x64_sys_sendmmsg+0xa0/0xc0 [ 420.627155][T15257] do_syscall_64+0x166/0x520 [ 420.627176][T15257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.627200][T15257] ? clear_bhb_loop+0x70/0xc0 [ 420.627229][T15257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.627253][T15257] RIP: 0033:0x7f531459e199 [ 420.627275][T15257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.627295][T15257] RSP: 002b:00007f5315385028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 420.627321][T15257] RAX: ffffffffffffffda RBX: 00007f5314825fa0 RCX: 00007f531459e199 [ 420.627338][T15257] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000005 [ 420.627354][T15257] RBP: 00007f5315385090 R08: 0000000000000000 R09: 0000000000000000 [ 420.627368][T15257] R10: 0000000020048844 R11: 0000000000000246 R12: 0000000000000002 [ 420.627383][T15257] R13: 00007f5314826038 R14: 00007f5314825fa0 R15: 00007ffc2f531848 [ 420.627422][T15257] [ 420.953217][ T6443] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.953819][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.076179][T15262] __nla_validate_parse: 4 callbacks suppressed [ 421.076199][T15262] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2273'. [ 421.594811][ T999] bond6: (slave geneve0): failed to get link speed/duplex [ 421.706563][ T999] bond6: (slave geneve0): failed to get link speed/duplex [ 421.783211][T15266] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2275'. [ 421.813196][T11338] bond6: (slave geneve0): failed to get link speed/duplex [ 421.925368][ T999] bond6: (slave geneve0): failed to get link speed/duplex [ 422.046981][ T39] bond6: (slave geneve0): failed to get link speed/duplex [ 422.481647][T15290] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2279'. [ 422.489237][T15291] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2279'. [ 423.417397][T11338] bond0: (slave netdevsim1): link status definitely down, disabling slave [ 423.421245][T11338] bond0: now running without any active interface! [ 423.451789][T15315] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2285'. [ 423.669783][T15321] block nbd0: server does not support multiple connections per device. [ 423.670201][T15321] block nbd0: shutting down sockets [ 423.937862][T15323] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2287'. [ 424.235101][T15328] netlink: 'syz.1.2289': attribute type 1 has an invalid length. [ 424.249323][T15328] nbd: must specify at least one socket [ 424.331006][T15329] netlink: 'syz.5.2288': attribute type 1 has an invalid length. [ 424.409733][T15331] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2290'. [ 425.160999][T15343] tipc: Started in network mode [ 425.161036][T15343] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 425.161717][T15343] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 425.162104][T15343] tipc: Enabled bearer , priority 10 [ 425.201117][T15343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2293'. [ 425.244109][ T1467] net_ratelimit: 27 callbacks suppressed [ 425.244135][ T1467] bond6: (slave geneve0): failed to get link speed/duplex [ 425.279360][T15349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2295'. [ 425.365002][ T1467] bond6: (slave geneve0): failed to get link speed/duplex [ 425.474242][ T1467] bond6: (slave geneve0): failed to get link speed/duplex [ 425.593822][T11338] bond6: (slave geneve0): failed to get link speed/duplex [ 425.704120][ T1467] bond6: (slave geneve0): failed to get link speed/duplex [ 425.813780][ T1405] bond6: (slave geneve0): failed to get link speed/duplex [ 425.925350][ T1405] bond6: (slave geneve0): failed to get link speed/duplex [ 426.034696][ T999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.035834][ T1467] bond6: (slave geneve0): failed to get link speed/duplex [ 426.145026][T11338] bond6: (slave geneve0): failed to get link speed/duplex [ 426.275625][ T31] tipc: Node number set to 1 [ 426.516349][ T5625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 426.521107][ T5625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 426.522212][ T5625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 426.550562][ T5625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 426.556263][ T5625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 427.243321][T15390] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2304'. [ 427.825359][T15401] xt_LOG: level 115 >= 8 [ 427.924417][T15405] netlink: 'syz.3.2308': attribute type 1 has an invalid length. [ 427.996738][T15409] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2308'. [ 428.140977][T15405] 8021q: adding VLAN 0 to HW filter on device bond6 [ 428.236094][T15409] bond6: (slave geneve5): making interface the new active one [ 428.256941][T15409] bond6: (slave geneve5): Enslaving as an active interface with an up link [ 428.304852][T15414] sctp: [Deprecated]: syz.2.2311 (pid 15414) Use of struct sctp_assoc_value in delayed_ack socket option. [ 428.304852][T15414] Use struct sctp_sack_info instead [ 428.311175][T15414] netlink: 'syz.2.2311': attribute type 8 has an invalid length. [ 428.311199][T15414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2311'. [ 428.423325][T15416] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2311'. [ 428.423365][T15416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2311'. [ 428.478895][T15419] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2312'. [ 428.492130][T15419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2312'. [ 428.662810][ T5625] Bluetooth: hci6: command tx timeout [ 428.718458][T15374] lo speed is unknown, defaulting to 1000 [ 428.897948][T15431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2315'. [ 429.239700][T15434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2318'. [ 429.239807][T15434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2318'. [ 429.394242][T15440] netlink: 'syz.5.2320': attribute type 1 has an invalid length. [ 430.087497][T15374] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.089257][T15374] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.090991][T15374] bridge_slave_0: entered allmulticast mode [ 430.128255][T15374] bridge_slave_0: entered promiscuous mode [ 430.150039][T15374] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.150155][T15374] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.156972][T15374] bridge_slave_1: entered allmulticast mode [ 430.176358][T15374] bridge_slave_1: entered promiscuous mode [ 430.198299][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.198322][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.199608][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.199628][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.200938][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.200956][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.202253][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.202270][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.241213][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.241285][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.300760][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.300788][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.301013][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.301028][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.301246][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.301262][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.301529][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.301544][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.321814][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.321876][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.327478][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.329789][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.331210][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.410763][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.411029][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.411045][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.411264][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.411278][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.411494][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.411508][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.411758][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.411773][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.412063][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.412078][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.412296][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.412311][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.443137][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.443189][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.461281][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.461339][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.461988][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.462030][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.487734][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.487815][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.490549][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.490596][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.491321][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.491363][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.501066][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.501131][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.555802][T11338] net_ratelimit: 39 callbacks suppressed [ 430.555865][T11338] bond6: (slave geneve0): failed to get link speed/duplex [ 430.613754][T15374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.638518][T15374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.640058][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.640081][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.640309][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.640324][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.647878][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.647944][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.655584][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.655646][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.662064][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.662110][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.770319][ T5625] Bluetooth: hci6: command tx timeout [ 430.858688][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.858715][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.858955][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.858971][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 430.859218][T15465] Bluetooth: hci0: unsupported parameter 5135 [ 430.859233][T15465] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 431.005687][T15374] team0: Port device team_slave_0 added [ 431.170035][T15374] team0: Port device team_slave_1 added [ 431.401124][T15374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.401146][T15374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.401176][T15374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.459386][T15374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.459417][T15374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.459447][T15374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.536834][T15488] netlink: 'syz.5.2331': attribute type 12 has an invalid length. [ 431.618490][T15490] netlink: 'syz.5.2331': attribute type 12 has an invalid length. [ 431.784624][ T7136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.806156][ T1405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.814730][T15374] hsr_slave_0: entered promiscuous mode [ 431.834695][T15374] hsr_slave_1: entered promiscuous mode [ 431.842090][T15374] debugfs: 'hsr0' already exists in 'hsr' [ 431.842114][T15374] Cannot create hsr debugfs directory [ 432.032747][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.071082][T15505] netlink: 'syz.2.2334': attribute type 4 has an invalid length. [ 432.272612][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.422586][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 432.439961][ T7136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.440182][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.704300][ T83] bond6: (slave geneve0): failed to get link speed/duplex [ 432.812597][ T999] bond6: (slave geneve0): failed to get link speed/duplex [ 432.822789][ T5625] Bluetooth: hci6: command tx timeout [ 432.935531][T15528] bond_slave_0: entered promiscuous mode [ 432.935559][T15528] bond_slave_0: entered allmulticast mode [ 432.996869][T15528] bond0: (slave bond_slave_0): Releasing backup interface [ 433.027220][T15528] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 433.399309][T15374] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 433.449855][T15374] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 433.460898][T15374] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 433.517700][T15374] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 433.518877][T15374] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 433.537902][T15535] __nla_validate_parse: 6 callbacks suppressed [ 433.537924][T15535] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2342'. [ 433.592248][T15374] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 433.604536][T15374] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 433.663015][T15374] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 433.944041][ T5625] Bluetooth: hci4: SCO packet too small [ 433.944311][ T5625] Bluetooth: hci4: SCO packet too small [ 434.449596][T15563] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2345'. [ 434.902540][ T5625] Bluetooth: hci6: command tx timeout [ 435.615919][ T1405] net_ratelimit: 30 callbacks suppressed [ 435.615947][ T1405] bond6: (slave geneve0): failed to get link speed/duplex [ 435.724973][ T39] bond6: (slave geneve0): failed to get link speed/duplex [ 435.832561][ T999] bond6: (slave geneve0): failed to get link speed/duplex [ 435.944335][ T7136] bond6: (slave geneve0): failed to get link speed/duplex [ 436.032521][T15534] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.072595][ T1405] bond6: (slave geneve0): failed to get link speed/duplex [ 436.245497][ T39] bond6: (slave geneve0): failed to get link speed/duplex [ 436.322170][T15574] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2346'. [ 436.390145][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2349'. [ 436.444057][T15578] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2349'. [ 436.474700][ T7136] bond6: (slave geneve0): failed to get link speed/duplex [ 436.511770][T15578] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 436.533861][T15374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.596205][T15374] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.632905][ T7136] bond6: (slave geneve0): failed to get link speed/duplex [ 436.717868][ T1405] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.717983][ T1405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.785428][ T39] bond6: (slave geneve0): failed to get link speed/duplex [ 436.844689][T11339] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.844805][T11339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.069092][T15585] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 437.124716][T15585] ip6gre0: entered promiscuous mode [ 437.146227][T15585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2350'. [ 437.458218][T15595] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2352'. [ 437.807109][T15074] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 438.505829][T15074] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 438.526811][T15623] C: renamed from lo (while UP) [ 438.605702][T15630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2356'. [ 439.258175][T15639] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2360'. [ 439.366882][T11338] IPVS: starting estimator thread 0... [ 439.452628][T15648] IPVS: using max 27 ests per chain, 64800 per kthread [ 439.553984][T15374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.906810][T15676] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2365'. [ 439.911408][ T1405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.911433][ T1405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.695183][ T7138] net_ratelimit: 66 callbacks suppressed [ 440.695208][ T7138] bond6: (slave geneve0): failed to get link speed/duplex [ 440.811756][ T7138] bond6: (slave geneve0): failed to get link speed/duplex [ 440.921875][T11339] bond6: (slave geneve0): failed to get link speed/duplex [ 441.022782][ T1467] bond6: (slave geneve0): failed to get link speed/duplex [ 441.154378][ T1467] bond6: (slave geneve0): failed to get link speed/duplex [ 441.263497][ T39] bond6: (slave geneve0): failed to get link speed/duplex [ 441.341115][T15702] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2372'. [ 441.404040][ T999] bond6: (slave geneve0): failed to get link speed/duplex [ 441.428012][T15374] veth0_vlan: entered promiscuous mode [ 441.474963][T15703] syzkaller0: entered promiscuous mode [ 441.475171][T15703] syzkaller0: entered allmulticast mode [ 441.516619][T15707] xt_hashlimit: size too large, truncated to 1048576 [ 441.550565][T15374] veth1_vlan: entered promiscuous mode [ 441.562114][T15711] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2374'. [ 441.595309][T11339] bond6: (slave geneve0): failed to get link speed/duplex [ 441.780715][ T999] bond6: (slave geneve0): failed to get link speed/duplex [ 441.893675][T15374] veth0_macvtap: entered promiscuous mode [ 442.019983][T15726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2375'. [ 442.020011][T15726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2375'. [ 442.140130][T15719] 8021q: adding VLAN 0 to HW filter on device bond14 [ 442.166391][T15374] veth1_macvtap: entered promiscuous mode [ 442.190054][ T7136] bond6: (slave geneve0): failed to get link speed/duplex [ 442.337806][T15374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.418642][T15374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.572584][ T7136] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.572695][ T7136] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.573624][ T7136] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.573693][ T7136] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.704331][T15736] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 443.183825][ T1405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.183852][ T1405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.328570][T15748] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2382'. [ 443.427062][ T7136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.427087][ T7136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.457229][T15748] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2382'. [ 443.582182][T15751] syzkaller0: entered promiscuous mode [ 443.582209][T15751] syzkaller0: entered allmulticast mode [ 443.603546][T15753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2382'. [ 443.640753][T15752] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2383'. [ 443.971899][T15761] netlink: 'syz.2.2387': attribute type 1 has an invalid length. [ 444.016252][T15757] netlink: 260 bytes leftover after parsing attributes in process `syz.6.2299'. [ 444.232266][T15771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2391'. [ 444.246840][T15772] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2389'. [ 444.356219][T15774] bond15: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 444.379832][T15774] bond15 (unregistering): Released all slaves [ 445.381905][T15805] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2399'. [ 445.407784][T15805] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2399'. [ 445.454237][T15801] netlink: 'syz.2.2397': attribute type 2 has an invalid length. [ 445.547383][T15811] netlink: 'syz.6.2401': attribute type 2 has an invalid length. [ 445.547409][T15811] netlink: 228 bytes leftover after parsing attributes in process `syz.6.2401'. [ 445.552074][T15811] netlink: 'syz.6.2401': attribute type 61 has an invalid length. [ 445.552100][T15811] netlink: 'syz.6.2401': attribute type 268 has an invalid length. [ 445.612775][T15817] netlink: 'syz.6.2401': attribute type 61 has an invalid length. [ 445.612805][T15817] netlink: 'syz.6.2401': attribute type 268 has an invalid length. [ 445.615148][T15811] netlink: 'syz.6.2401': attribute type 61 has an invalid length. [ 445.615173][T15811] netlink: 'syz.6.2401': attribute type 268 has an invalid length. [ 445.803029][ T999] net_ratelimit: 32 callbacks suppressed [ 445.803056][ T999] bond6: (slave geneve0): failed to get link speed/duplex [ 445.861730][T15824] netlink: 'syz.1.2404': attribute type 1 has an invalid length. [ 445.915422][T11339] bond6: (slave geneve0): failed to get link speed/duplex [ 446.025084][ T999] bond6: (slave geneve0): failed to get link speed/duplex [ 446.132962][T11339] bond6: (slave geneve0): failed to get link speed/duplex [ 446.272698][T11339] bond6: (slave geneve0): failed to get link speed/duplex [ 446.339046][T15828] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2406'. [ 446.339627][T15828] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 446.504890][T11338] bond6: (slave geneve0): failed to get link speed/duplex [ 446.613524][T11338] bond6: (slave geneve0): failed to get link speed/duplex [ 446.735515][T15832] ip6gre1: entered allmulticast mode [ 446.747990][ T39] bond6: (slave geneve0): failed to get link speed/duplex [ 447.197862][T11339] bond6: (slave geneve0): failed to get link speed/duplex [ 447.208169][T15858] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 447.306134][ T999] bond6: (slave geneve0): failed to get link speed/duplex [ 447.309429][ T5629] Bluetooth: hci4: command 0x0406 tx timeout [ 447.395214][ T1467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.395249][ T1467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.604835][T15871] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 447.657807][T15876] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2419'. [ 447.727869][T15871] netlink: 830 bytes leftover after parsing attributes in process `syz.6.2419'. [ 448.572395][T15894] ip6gre0: left promiscuous mode [ 449.002127][T15894] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 449.018577][T15894] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 449.405627][T15932] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 449.542000][T15940] __nla_validate_parse: 5 callbacks suppressed [ 449.542022][T15940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2435'. [ 449.542037][T15940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2435'. [ 449.668985][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2435'. [ 449.669013][T15946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2435'. [ 449.935938][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2435'. [ 449.935965][T15946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2435'. [ 449.967164][T15940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2435'. [ 449.967189][T15940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2435'. [ 450.091133][T15954] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2439'. [ 450.273220][ T5629] Bluetooth: hci6: command 0x0405 tx timeout [ 450.344379][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 450.442843][T15964] sctp: [Deprecated]: syz.3.2441 (pid 15964) Use of int in maxseg socket option. [ 450.442843][T15964] Use struct sctp_assoc_value instead [ 450.486791][T15964] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2441'. [ 450.918365][ T1467] net_ratelimit: 38 callbacks suppressed [ 450.918390][ T1467] bond6: (slave geneve0): failed to get link speed/duplex [ 450.985951][ T1405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.025162][ T1405] bond6: (slave geneve0): failed to get link speed/duplex [ 451.137743][ T1405] bond6: (slave geneve0): failed to get link speed/duplex [ 451.413617][ T1467] bond6: (slave geneve0): failed to get link speed/duplex [ 451.439082][T15976] validate_nla: 3 callbacks suppressed [ 451.439103][T15976] netlink: 'syz.5.2445': attribute type 1 has an invalid length. [ 451.486024][T15976] netlink: 'syz.5.2445': attribute type 2 has an invalid length. [ 451.527909][ T1467] bond6: (slave geneve0): failed to get link speed/duplex [ 451.635483][T11338] bond6: (slave geneve0): failed to get link speed/duplex [ 451.891408][T16000] x_tables: unsorted entry at hook 4 [ 452.186281][T11338] bond6: (slave geneve0): failed to get link speed/duplex [ 452.484086][T16021] x_tables: duplicate underflow at hook 1 [ 452.620025][T15996] syzkaller1: entered promiscuous mode [ 452.620237][T15996] syzkaller1: entered allmulticast mode [ 452.663595][ T7138] bond6: (slave geneve0): failed to get link speed/duplex [ 452.917999][ T7138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.397894][T16032] netlink: 'syz.3.2456': attribute type 1 has an invalid length. [ 453.776553][T16032] bond7: entered promiscuous mode [ 453.778921][T16032] 8021q: adding VLAN 0 to HW filter on device bond7 [ 453.869855][T16040] macvtap1: entered allmulticast mode [ 453.956329][T16044] macvtap2: entered allmulticast mode [ 454.120035][ T999] IPVS: starting estimator thread 0... [ 454.162315][T16057] netlink: 'syz.2.2459': attribute type 7 has an invalid length. [ 454.162339][T16057] netlink: 'syz.2.2459': attribute type 8 has an invalid length. [ 454.222580][T16066] IPVS: using max 25 ests per chain, 60000 per kthread [ 454.514628][T16048] ip6gre1: entered allmulticast mode [ 454.658074][T16057] dummy0: entered promiscuous mode [ 454.685826][T16057] team0: entered promiscuous mode [ 454.685853][T16057] team_slave_0: entered promiscuous mode [ 454.686232][T16057] team_slave_1: entered promiscuous mode [ 454.711315][T16057] erspan0: entered promiscuous mode [ 455.170123][T16098] netlink: 'syz.6.2465': attribute type 4 has an invalid length. [ 455.170150][T16098] __nla_validate_parse: 6 callbacks suppressed [ 455.170162][T16098] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2465'. [ 455.253470][T16094] vti0: entered promiscuous mode [ 455.513047][T16113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2466'. [ 455.697678][T16117] C: entered promiscuous mode [ 455.880896][T16117] tunl0: entered promiscuous mode [ 456.034932][T16117] gre0: entered promiscuous mode [ 456.172244][T16117] gretap0: entered promiscuous mode [ 456.607063][T16117] ip_vti0: entered promiscuous mode [ 456.717587][T16117] ip6_vti0: entered promiscuous mode [ 456.801392][T16117] sit0: entered promiscuous mode [ 456.945235][T16138] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 456.948895][T16117] ip6tnl0: entered promiscuous mode [ 457.093797][T16117] ip6gre0: entered promiscuous mode [ 457.116286][T16117] syz_tun: entered promiscuous mode [ 457.134321][T16117] ip6gretap0: entered promiscuous mode [ 457.138366][T16117] vcan0: entered promiscuous mode [ 457.149148][T16117] bond0: entered promiscuous mode [ 457.149212][T16117] bond_slave_0: entered promiscuous mode [ 457.149843][T16117] bond_slave_1: entered promiscuous mode [ 457.150243][T16117] vlan1: entered promiscuous mode [ 457.180393][T16117] nlmon0: entered promiscuous mode [ 457.181426][T16117] batadv0: entered promiscuous mode [ 457.194333][T16117] veth0: entered promiscuous mode [ 457.196825][T16117] veth1: entered promiscuous mode [ 457.201724][T16117] wg0: entered promiscuous mode [ 457.222247][T16117] wg1: entered promiscuous mode [ 457.233766][T16117] wg2: entered promiscuous mode [ 457.235250][T16117] veth0_to_bridge: entered promiscuous mode [ 457.237674][T16117] bridge_slave_0: entered promiscuous mode [ 457.240239][T16117] veth1_to_bridge: entered promiscuous mode [ 457.269767][T16117] bridge_slave_1: entered promiscuous mode [ 457.272193][T16117] veth0_to_bond: entered promiscuous mode [ 457.290414][T16117] veth1_to_bond: entered promiscuous mode [ 457.309958][T16117] veth0_to_team: entered promiscuous mode [ 457.321719][T16117] veth1_to_team: entered promiscuous mode [ 457.338358][T16117] veth1_to_batadv: entered promiscuous mode [ 457.340704][T16117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.340760][T16117] batadv_slave_1: entered promiscuous mode [ 457.365523][T16117] xfrm0: entered promiscuous mode [ 457.367565][T16117] veth0_to_hsr: entered promiscuous mode [ 457.394915][T16117] veth1_to_hsr: entered promiscuous mode [ 457.409823][T16117] hsr0: entered promiscuous mode [ 457.412296][T16117] veth1_virt_wifi: entered promiscuous mode [ 457.429463][T16117] veth0_virt_wifi: entered promiscuous mode [ 457.439762][T16117] virt_wifi0: entered promiscuous mode [ 457.461618][T16117] macvlan0: entered promiscuous mode [ 457.471450][T16117] macvlan1: entered promiscuous mode [ 457.481326][T16117] ipvlan1: entered promiscuous mode [ 457.501664][T16117] geneve0: entered promiscuous mode [ 457.573586][T16156] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2472'. [ 457.574759][T16117] geneve1: entered promiscuous mode [ 457.579718][T16117] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 457.581381][T16117] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 457.614923][T16117] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 457.616433][T16117] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 457.643048][T16117] ip6tnl1: entered promiscuous mode [ 457.644604][T16117] vxlan0: entered promiscuous mode [ 457.645126][T16117] mac80211_hwsim hwsim13 wlan2: entered promiscuous mode [ 457.645338][T16117] tipc: Resetting bearer [ 457.681473][T16117] veth2: entered promiscuous mode [ 457.691747][T16117] veth3: entered promiscuous mode [ 457.699795][T16117] ipvlan0: entered promiscuous mode [ 457.700278][T16157] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2472'. [ 457.721624][T16117] bond1: entered promiscuous mode [ 457.729331][T16117] dvmrp0: entered promiscuous mode [ 457.730900][T16117] vlan1.0000: entered promiscuous mode [ 457.731599][T16117] gtp0: entered promiscuous mode [ 457.749392][T16117] batman_adv: batadv0: Interface deactivated: macvtap1 [ 457.751398][T16117] macvtap1: entered promiscuous mode [ 457.767532][T16117] mac80211_hwsim hwsim11 nicvf0: entered promiscuous mode [ 457.768251][T16117] bond2: entered promiscuous mode [ 457.769115][T16117] ip6tnl2: entered promiscuous mode [ 457.814221][T16117] bond3: entered promiscuous mode [ 457.818204][T16117] vrf0: entered promiscuous mode [ 457.820730][T16117] mac80211_hwsim hwsim66 wlan3: entered promiscuous mode [ 457.820985][T16117] syztnl0: entered promiscuous mode [ 457.822183][T16117] mac80211_hwsim hwsim67 wlan4: entered promiscuous mode [ 457.855068][T16117] vxlan1: entered promiscuous mode [ 457.855284][T16117] ip6tnl3: entered promiscuous mode [ 457.855411][T16117] veth4: entered promiscuous mode [ 457.855581][T16117] veth5: entered promiscuous mode [ 457.855768][T16117] bridge0: entered promiscuous mode [ 457.856261][T16117] hsr1: entered promiscuous mode [ 457.907830][T16117] mac80211_hwsim hwsim77 wlan0: entered promiscuous mode [ 457.922226][ T31] C speed is unknown, defaulting to 1000 [ 457.922838][ T83] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.922873][ T83] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.922921][ T83] net_ratelimit: 17 callbacks suppressed [ 457.922934][ T83] bond6: (slave geneve0): failed to get link speed/duplex [ 457.923403][ T39] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.923434][ T39] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.923475][ T39] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.923505][ T39] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.923553][ T39] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.923583][ T39] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.020474][ T31] syz2: Port: 1 Link DOWN [ 458.052723][ T83] bond6: (slave geneve0): failed to get link speed/duplex [ 458.059637][T16148] dummy0: entered promiscuous mode [ 458.059691][T16148] dummy0: entered allmulticast mode [ 458.214570][ T1405] bond6: (slave geneve0): failed to get link speed/duplex [ 458.640560][T16159] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 458.660173][ T39] bond6: (slave geneve0): failed to get link speed/duplex [ 458.689243][T16172] netlink: 'syz.5.2475': attribute type 21 has an invalid length. [ 458.689275][T16172] IPv6: NLM_F_CREATE should be specified when creating new route [ 458.745722][T16170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2474'. [ 458.763513][ T1405] bond6: (slave geneve0): failed to get link speed/duplex [ 458.821708][T16167] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2473'. [ 458.874067][ T1405] bond6: (slave geneve0): failed to get link speed/duplex [ 458.982864][ T999] bond6: (slave geneve0): failed to get link speed/duplex [ 459.092567][ T39] bond6: (slave geneve0): failed to get link speed/duplex [ 459.204812][ T999] bond6: (slave geneve0): failed to get link speed/duplex [ 459.646067][T16203] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2482'. [ 459.646104][T16203] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2482'. [ 459.646123][T16203] netlink: 'syz.2.2482': attribute type 4 has an invalid length. [ 459.654169][T16203] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2482'. [ 459.787610][T16203] netlink: 'syz.2.2482': attribute type 1 has an invalid length. [ 459.901178][T16203] bond3: (slave veth0_to_bond): Releasing backup interface [ 459.901218][T16203] bond3: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 459.960805][T16203] veth0_to_bond: left promiscuous mode [ 460.081294][T16211] netlink: 'syz.5.2485': attribute type 1 has an invalid length. [ 460.156003][T16221] netlink: 'syz.5.2485': attribute type 1 has an invalid length. [ 460.179360][T16203] bridge2: entered promiscuous mode [ 460.347496][T16211] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.896027][T16237] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 460.919873][T16238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2488'. [ 461.018769][T16242] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2490'. [ 461.056806][T16245] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2489'. [ 461.360257][T16254] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2491'. [ 461.672435][T16265] netlink: 'syz.6.2493': attribute type 1 has an invalid length. [ 461.672459][T16265] netlink: 5120 bytes leftover after parsing attributes in process `syz.6.2493'. [ 461.739337][T16265] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2493'. [ 461.821705][T16266] netlink: 3544 bytes leftover after parsing attributes in process `syz.3.2494'. [ 462.461288][T16285] ip6gre1: entered allmulticast mode [ 462.488953][T16279] C speed is unknown, defaulting to 1000 [ 462.815606][T16303] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2503'. [ 462.935267][T16301] netlink: 'syz.2.2502': attribute type 1 has an invalid length. [ 463.114408][ T7136] net_ratelimit: 21 callbacks suppressed [ 463.114434][ T7136] bond6: (slave geneve0): failed to get link speed/duplex [ 463.301144][T16306] bond4: (slave geneve2): making interface the new active one [ 463.313934][T16306] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 463.412927][ T1405] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 463.412985][ T1405] bond6: (slave geneve0): failed to get link speed/duplex [ 463.413567][ T1405] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 463.413922][ T1405] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 463.413963][ T1405] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 463.623394][ T39] bond6: (slave geneve0): failed to get link speed/duplex [ 463.733316][ T1467] bond6: (slave geneve0): failed to get link speed/duplex [ 463.832815][T16319] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2507'. [ 463.845902][ T999] bond6: (slave geneve0): failed to get link speed/duplex [ 463.963575][ T39] bond6: (slave geneve0): failed to get link speed/duplex [ 464.073182][ T1467] bond6: (slave geneve0): failed to get link speed/duplex [ 464.190380][ T39] bond6: (slave geneve0): failed to get link speed/duplex [ 464.293579][ T999] bond6: (slave geneve0): failed to get link speed/duplex [ 464.403105][ T999] bond6: (slave geneve0): failed to get link speed/duplex [ 464.410001][T16327] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2509'. [ 466.160843][T16373] __nla_validate_parse: 4 callbacks suppressed [ 466.160866][T16373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2522'. [ 466.172546][T16376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2522'. [ 466.270213][T16380] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2524'. [ 466.820679][T16396] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2528'. [ 466.820871][T16396] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2528'. [ 466.821027][T16396] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2528'. [ 466.821196][T16396] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2528'. [ 466.867827][T16396] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2528'. [ 466.870940][T16396] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2528'. [ 466.871106][T16396] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2528'. [ 467.182577][T16405] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6 [ 467.405852][T16412] netlink: 'syz.6.2532': attribute type 4 has an invalid length. [ 467.650758][T16424] tipc: Enabled bearer , priority 10 [ 468.123366][ T39] net_ratelimit: 29 callbacks suppressed [ 468.123396][ T39] bond6: (slave geneve0): failed to get link speed/duplex [ 468.232501][ T1405] bond6: (slave geneve0): failed to get link speed/duplex [ 468.260932][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057974400: rx timeout, send abort [ 468.342905][ T1405] bond6: (slave geneve0): failed to get link speed/duplex [ 468.452626][ T1467] bond6: (slave geneve0): failed to get link speed/duplex [ 468.563802][ T39] bond6: (slave geneve0): failed to get link speed/duplex [ 468.675144][T11338] bond6: (slave geneve0): failed to get link speed/duplex [ 468.761141][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057974c00: rx timeout, send abort [ 468.770875][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057974400: abort rx timeout. Force session deactivation [ 468.787627][T11338] bond6: (slave geneve0): failed to get link speed/duplex [ 468.892444][ T39] bond6: (slave geneve0): failed to get link speed/duplex [ 469.036493][ T1467] bond6: (slave geneve0): failed to get link speed/duplex [ 469.152715][ T39] bond6: (slave geneve0): failed to get link speed/duplex [ 469.261199][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057974c00: abort rx timeout. Force session deactivation [ 470.079092][T16489] block nbd0: not configured, cannot reconfigure [ 470.730254][T16498] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.731882][T16498] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.170893][T16508] ovs0: entered promiscuous mode [ 471.431963][T16517] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:7 [ 471.499566][T16515] __nla_validate_parse: 45 callbacks suppressed [ 471.499584][T16515] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2560'. [ 472.031906][T16537] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2569'. [ 472.065490][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2567'. [ 472.123486][T16541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2567'. [ 472.187189][T16540] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2568'. [ 472.473985][T16553] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2572'. [ 472.478494][T16558] netlink: 'syz.6.2573': attribute type 1 has an invalid length. [ 472.664954][T16565] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2574'. [ 472.683087][T16558] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2573'. [ 472.765675][T16561] 8021q: adding VLAN 0 to HW filter on device bond2 [ 472.797136][T16561] bond1: (slave bond2): making interface the new active one [ 472.811808][T16561] bond1: (slave bond2): Enslaving as an active interface with an up link [ 472.854366][T16562] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 472.915169][T16558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 472.955415][T16568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2575'. [ 473.023562][T16568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2575'. [ 473.213043][T11338] net_ratelimit: 26 callbacks suppressed [ 473.213071][T11338] bond6: (slave geneve0): failed to get link speed/duplex [ 473.322888][ T39] bond6: (slave geneve0): failed to get link speed/duplex [ 473.446401][ T83] bond6: (slave geneve0): failed to get link speed/duplex [ 473.553087][ T83] bond6: (slave geneve0): failed to get link speed/duplex [ 473.664558][T11338] bond6: (slave geneve0): failed to get link speed/duplex [ 473.693346][T16581] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 473.694005][T16581] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 473.694648][T16581] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 473.695304][T16581] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 473.696478][T16581] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 474.281605][T16602] netlink: 'syz.6.2585': attribute type 1 has an invalid length. [ 474.282409][T16603] netlink: 'syz.6.2585': attribute type 1 has an invalid length. [ 474.328161][T16600] bridge1: entered promiscuous mode [ 474.409409][T16608] IPVS: length: 255 != 24 [ 474.409476][T16607] IPVS: length: 255 != 24 [ 474.442984][T16607] x_tables: duplicate underflow at hook 2 [ 476.590166][T16654] batman_adv: batadv0: Adding interface: syzkaller0 [ 476.590186][T16654] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.590214][T16654] batman_adv: batadv0: Interface activated: syzkaller0 [ 476.763650][T16661] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 476.796649][T16660] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 477.073174][T16660] batman_adv: batadv0: Removing interface: syzkaller0 [ 477.354705][T16693] __nla_validate_parse: 7 callbacks suppressed [ 477.354731][T16693] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2608'. [ 477.754506][T16699] macsec0: entered promiscuous mode [ 477.788981][T16699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2610'. [ 477.971427][T16699] macsec0 (unregistering): left promiscuous mode [ 478.125828][T16710] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2614'. [ 478.235196][ T39] net_ratelimit: 28 callbacks suppressed [ 478.235221][ T39] bond6: (slave geneve0): failed to get link speed/duplex [ 478.346956][T11338] bond6: (slave geneve0): failed to get link speed/duplex [ 478.453956][ T39] bond6: (slave geneve0): failed to get link speed/duplex [ 478.886655][T16734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2619'. [ 479.045356][ T1405] bond6: (slave geneve0): failed to get link speed/duplex [ 479.168425][T11339] bond6: (slave geneve0): failed to get link speed/duplex [ 479.273124][ T7138] bond6: (slave geneve0): failed to get link speed/duplex [ 479.384587][ T39] bond6: (slave geneve0): failed to get link speed/duplex [ 479.497206][ T1405] bond6: (slave geneve0): failed to get link speed/duplex [ 479.538980][T16751] Bluetooth: hci0: unsupported parameter 5135 [ 479.539006][T16751] Bluetooth: hci0: unsupported parameter 8192 [ 479.539021][T16751] Bluetooth: hci0: unsupported parameter 5135 [ 479.539035][T16751] Bluetooth: hci0: unsupported parameter 8192 [ 479.612904][T11339] bond6: (slave geneve0): failed to get link speed/duplex [ 479.727043][T16758] xt_l2tp: missing protocol rule (udp|l2tpip) [ 479.727048][ T83] bond6: (slave geneve0): failed to get link speed/duplex [ 479.731742][T16742] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 479.912806][T16763] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2624'. [ 480.395580][T16777] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2627'. [ 480.728197][T16786] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2631'. [ 480.950174][T16789] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2629'. [ 481.063569][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 481.089767][T16795] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2632'. [ 481.294518][T16798] bond5: option updelay: invalid value (18446744073709518847) [ 481.294547][T16798] bond5: option updelay: allowed values 0 - 2147483647 [ 481.339059][T16798] bond5 (unregistering): Released all slaves [ 482.119887][T16833] bridge_slave_0: Caught tx_queue_len zero misconfig [ 482.644531][T16854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.661881][T16854] batman_adv: batadv0: Removing interface: macvtap1 [ 483.325107][ T7138] net_ratelimit: 18 callbacks suppressed [ 483.325134][ T7138] bond6: (slave geneve0): failed to get link speed/duplex [ 483.435244][ T7136] bond6: (slave geneve0): failed to get link speed/duplex [ 483.543077][T11338] bond6: (slave geneve0): failed to get link speed/duplex [ 483.693808][T11339] bond6: (slave geneve0): failed to get link speed/duplex [ 483.730179][T16873] C speed is unknown, defaulting to 1000 [ 483.873945][T16881] FAULT_INJECTION: forcing a failure. [ 483.873945][T16881] name failslab, interval 1, probability 0, space 0, times 0 [ 483.873984][T16881] CPU: 1 UID: 0 PID: 16881 Comm: syz.6.2651 Not tainted syzkaller #0 PREEMPT(full) [ 483.874011][T16881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 483.874026][T16881] Call Trace: [ 483.874035][T16881] [ 483.874045][T16881] dump_stack_lvl+0xe8/0x150 [ 483.874083][T16881] should_fail_ex+0x410/0x560 [ 483.874116][T16881] should_failslab+0xa8/0x100 [ 483.874148][T16881] __kmalloc_cache_noprof+0xa3/0x600 [ 483.874170][T16881] ? sctp_v6_to_sk_saddr+0x100/0x1c0 [ 483.874197][T16881] ? sctp_association_new+0x89/0x25d0 [ 483.874229][T16881] ? sctp_association_new+0x89/0x25d0 [ 483.874268][T16881] sctp_association_new+0x89/0x25d0 [ 483.874301][T16881] ? __ipv6_addr_type+0x108/0x2f0 [ 483.874341][T16881] sctp_connect_new_asoc+0x2e4/0x6b0 [ 483.874377][T16881] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 483.874415][T16881] ? __local_bh_enable_ip+0xd6/0x140 [ 483.874444][T16881] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 483.874476][T16881] ? security_sctp_bind_connect+0x7e/0x2c0 [ 483.874503][T16881] sctp_sendmsg+0x159b/0x2d00 [ 483.874550][T16881] ? __pfx_sctp_sendmsg+0x10/0x10 [ 483.874586][T16881] ? __lock_acquire+0x747/0x2de0 [ 483.874626][T16881] ? aa_sock_msg_perm+0xf5/0x210 [ 483.874658][T16881] ? sock_rps_record_flow+0x19/0x350 [ 483.874690][T16881] ? inet_sendmsg+0x298/0x320 [ 483.874718][T16881] ? __pfx_inet_sendmsg+0x10/0x10 [ 483.874743][T16881] sock_sendmsg_nosec+0x10f/0x190 [ 483.874771][T16881] ____sys_sendmsg+0x54e/0x850 [ 483.874811][T16881] ? __pfx_____sys_sendmsg+0x10/0x10 [ 483.874856][T16881] ? import_iovec+0x73/0xa0 [ 483.874890][T16881] ___sys_sendmsg+0x2a5/0x360 [ 483.874929][T16881] ? __lock_acquire+0x747/0x2de0 [ 483.874959][T16881] ? __pfx____sys_sendmsg+0x10/0x10 [ 483.875034][T16881] ? __fget_files+0x2a/0x420 [ 483.875066][T16881] ? __fget_files+0x3a2/0x420 [ 483.875110][T16881] __x64_sys_sendmsg+0x1b1/0x290 [ 483.875147][T16881] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 483.875206][T16881] do_syscall_64+0x166/0x520 [ 483.875226][T16881] ? trace_irq_disable+0x3b/0x140 [ 483.875257][T16881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.875282][T16881] ? clear_bhb_loop+0x70/0xc0 [ 483.875311][T16881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.875334][T16881] RIP: 0033:0x7f4bcf59e199 [ 483.875356][T16881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.875376][T16881] RSP: 002b:00007f4bd04db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.875402][T16881] RAX: ffffffffffffffda RBX: 00007f4bcf825fa0 RCX: 00007f4bcf59e199 [ 483.875419][T16881] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000003 [ 483.875434][T16881] RBP: 00007f4bd04db090 R08: 0000000000000000 R09: 0000000000000000 [ 483.875447][T16881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.875461][T16881] R13: 00007f4bcf826038 R14: 00007f4bcf825fa0 R15: 00007ffee203f3a8 [ 483.875500][T16881] [ 484.144368][ T7136] bond6: (slave geneve0): failed to get link speed/duplex [ 484.404320][ T1405] bond6: (slave geneve0): failed to get link speed/duplex [ 484.514470][ T1405] bond6: (slave geneve0): failed to get link speed/duplex [ 484.625674][ T39] bond6: (slave geneve0): failed to get link speed/duplex [ 484.719702][T16890] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 484.732891][ T39] bond6: (slave geneve0): failed to get link speed/duplex [ 484.843591][ T39] bond6: (slave geneve0): failed to get link speed/duplex [ 487.551843][T16930] batman_adv: batadv0: Adding interface: gretap1 [ 487.551865][T16930] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.602981][T16930] batman_adv: batadv0: Interface activated: gretap1 [ 487.629754][T16890] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 488.112924][T16953] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2669'. [ 488.372807][T11338] net_ratelimit: 15 callbacks suppressed [ 488.372836][T11338] bond6: (slave geneve0): failed to get link speed/duplex [ 488.482475][ T7138] bond6: (slave geneve0): failed to get link speed/duplex [ 488.602530][T11338] bond6: (slave geneve0): failed to get link speed/duplex [ 488.892497][ T7138] bond6: (slave geneve0): failed to get link speed/duplex [ 488.920258][T16965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2674'. [ 488.920520][T16966] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 488.946961][T16966] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2674'. [ 488.985664][T16968] FAULT_INJECTION: forcing a failure. [ 488.985664][T16968] name failslab, interval 1, probability 0, space 0, times 0 [ 488.985699][T16968] CPU: 0 UID: 0 PID: 16968 Comm: syz.5.2675 Not tainted syzkaller #0 PREEMPT(full) [ 488.985723][T16968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 488.985736][T16968] Call Trace: [ 488.985743][T16968] [ 488.985752][T16968] dump_stack_lvl+0xe8/0x150 [ 488.985785][T16968] should_fail_ex+0x410/0x560 [ 488.985814][T16968] should_failslab+0xa8/0x100 [ 488.985840][T16968] __kmalloc_cache_noprof+0xa3/0x600 [ 488.985862][T16968] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 488.985884][T16968] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 488.985912][T16968] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 488.985934][T16968] ? sctp_stream_interleave_init+0x55/0x90 [ 488.985978][T16968] sctp_association_new+0x15be/0x25d0 [ 488.986015][T16968] sctp_connect_new_asoc+0x2e4/0x6b0 [ 488.986045][T16968] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 488.986079][T16968] ? __local_bh_enable_ip+0xd6/0x140 [ 488.986103][T16968] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 488.986130][T16968] ? security_sctp_bind_connect+0x7e/0x2c0 [ 488.986154][T16968] sctp_sendmsg+0x159b/0x2d00 [ 488.986193][T16968] ? __pfx_sctp_sendmsg+0x10/0x10 [ 488.986223][T16968] ? __lock_acquire+0x747/0x2de0 [ 488.986256][T16968] ? aa_sock_msg_perm+0xf5/0x210 [ 488.986279][T16968] ? sock_rps_record_flow+0x19/0x350 [ 488.986306][T16968] ? inet_sendmsg+0x298/0x320 [ 488.986335][T16968] ? __pfx_inet_sendmsg+0x10/0x10 [ 488.986360][T16968] sock_sendmsg_nosec+0x10f/0x190 [ 488.986388][T16968] ____sys_sendmsg+0x54e/0x850 [ 488.986422][T16968] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.986460][T16968] ? import_iovec+0x73/0xa0 [ 488.986489][T16968] ___sys_sendmsg+0x2a5/0x360 [ 488.986515][T16968] ? __lock_acquire+0x747/0x2de0 [ 488.986539][T16968] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.986602][T16968] ? __fget_files+0x2a/0x420 [ 488.986628][T16968] ? __fget_files+0x3a2/0x420 [ 488.986669][T16968] __x64_sys_sendmsg+0x1b1/0x290 [ 488.986700][T16968] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 488.986749][T16968] do_syscall_64+0x166/0x520 [ 488.986767][T16968] ? trace_irq_disable+0x3b/0x140 [ 488.986787][T16968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.986806][T16968] ? clear_bhb_loop+0x70/0xc0 [ 488.986829][T16968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.986848][T16968] RIP: 0033:0x7fa9a6f9e199 [ 488.986867][T16968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.986884][T16968] RSP: 002b:00007fa9a7e3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.986906][T16968] RAX: ffffffffffffffda RBX: 00007fa9a7225fa0 RCX: 00007fa9a6f9e199 [ 488.986921][T16968] RDX: 0000000024000052 RSI: 00002000000000c0 RDI: 0000000000000003 [ 488.986934][T16968] RBP: 00007fa9a7e3d090 R08: 0000000000000000 R09: 0000000000000000 [ 488.986955][T16968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.986967][T16968] R13: 00007fa9a7226038 R14: 00007fa9a7225fa0 R15: 00007ffcea4e19b8 [ 488.987000][T16968] [ 489.305909][ T83] bond6: (slave geneve0): failed to get link speed/duplex [ 489.416269][ T1405] bond6: (slave geneve0): failed to get link speed/duplex [ 489.526911][ T83] bond6: (slave geneve0): failed to get link speed/duplex [ 489.634760][ T7138] bond6: (slave geneve0): failed to get link speed/duplex [ 489.698297][T16974] netlink: 'syz.1.2676': attribute type 1 has an invalid length. [ 489.742746][ T39] bond6: (slave geneve0): failed to get link speed/duplex [ 489.853089][ T7138] bond6: (slave geneve0): failed to get link speed/duplex [ 490.719257][T17005] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 491.281992][T17021] tipc: Enabled bearer , priority 0 [ 491.399231][T17025] syzkaller0: Caught tx_queue_len zero misconfig [ 491.587969][T17031] xt_hashlimit: size too large, truncated to 1048576 [ 492.283709][ T8022] tipc: Node number set to 720914370 [ 493.023954][T17050] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2695'. [ 493.055069][T17051] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2695'. [ 493.245356][T17060] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2696'. [ 493.246429][T17060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2696'. [ 493.482822][T11338] net_ratelimit: 29 callbacks suppressed [ 493.482848][T11338] bond6: (slave geneve0): failed to get link speed/duplex [ 493.605645][T11339] bond6: (slave geneve0): failed to get link speed/duplex [ 493.719643][ T7138] bond6: (slave geneve0): failed to get link speed/duplex [ 493.854209][T11339] bond6: (slave geneve0): failed to get link speed/duplex [ 493.981207][ T7138] bond6: (slave geneve0): failed to get link speed/duplex [ 494.084998][ T39] bond6: (slave geneve0): failed to get link speed/duplex [ 494.195938][ T7138] bond6: (slave geneve0): failed to get link speed/duplex [ 494.302740][ T39] bond6: (slave geneve0): failed to get link speed/duplex [ 494.412613][ T7138] bond6: (slave geneve0): failed to get link speed/duplex [ 494.453891][T17082] gre0: entered promiscuous mode [ 494.453918][T17082] gre0: entered allmulticast mode [ 494.479150][T17084] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2703'. [ 494.572944][ T83] bond6: (slave geneve0): failed to get link speed/duplex [ 496.080179][T17055] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 496.215736][T17100] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2704'. [ 496.341592][T17103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2705'. [ 496.467572][T17110] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2707'. [ 496.798315][T17122] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2711'. [ 497.523864][ T5629] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 497.531026][ T5629] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 497.549095][ T5629] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 497.565275][ T5629] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 497.566032][ T5629] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 497.828893][T17142] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2717'. [ 497.829146][T17142] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2717'. [ 498.192026][T17151] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.192253][T17151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.193226][T17151] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.193579][T17151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.394306][ T83] net_ratelimit: 31 callbacks suppressed [ 499.394332][ T83] bond6: (slave geneve0): failed to get link speed/duplex [ 499.441126][T17135] C speed is unknown, defaulting to 1000 [ 499.509649][T17166] syzkaller1: entered promiscuous mode [ 499.509676][T17166] syzkaller1: entered allmulticast mode [ 499.611110][T17168] nbd: must specify a size in bytes for the device [ 499.637813][ T5629] Bluetooth: hci7: command tx timeout [ 499.705064][ T83] bond6: (slave geneve0): failed to get link speed/duplex [ 499.832604][T11338] bond6: (slave geneve0): failed to get link speed/duplex [ 500.062829][ T83] bond6: (slave geneve0): failed to get link speed/duplex [ 500.303968][ T1405] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.304012][ T1405] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.525010][T11339] bond6: (slave geneve0): failed to get link speed/duplex [ 500.634262][T11338] bond6: (slave geneve0): failed to get link speed/duplex [ 500.745323][T11338] bond6: (slave geneve0): failed to get link speed/duplex [ 501.011263][ T1405] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.011305][ T1405] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.065241][ T7138] bond6: (slave geneve0): failed to get link speed/duplex [ 501.231658][T17204] netlink: NAT attribute has 4 unknown bytes [ 501.231697][T17204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.250454][ T1405] bond0: (slave netdevsim1): Releasing backup interface [ 501.269568][ T1405] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.269610][ T1405] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.440156][T17202] netlink: 'syz.6.2726': attribute type 18 has an invalid length. [ 501.454792][ T1405] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.454830][ T1405] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.522850][T17135] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.523049][T17135] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.523222][T17135] bridge_slave_0: entered allmulticast mode [ 501.530516][T17135] bridge_slave_0: entered promiscuous mode [ 501.579882][T17135] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.580000][T17135] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.580179][T17135] bridge_slave_1: entered allmulticast mode [ 501.591431][T17135] bridge_slave_1: entered promiscuous mode [ 501.703044][ T5629] Bluetooth: hci7: command tx timeout [ 501.746297][T17135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.772369][T17135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.996501][T17135] team0: Port device team_slave_0 added [ 502.231987][T17135] team0: Port device team_slave_1 added [ 502.477914][T17135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.477935][T17135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.477966][T17135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.500601][T17135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.500717][T17135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.500999][T17135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.701118][ T1405] gretap0: left allmulticast mode [ 502.701226][ T1405] batadv_slave_1: left allmulticast mode [ 502.726946][ T1405] batman_adv: batadv0: Interface deactivated: gretap1 [ 502.730804][T17231] netlink: 'syz.5.2731': attribute type 10 has an invalid length. [ 502.730827][T17231] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2731'. [ 503.220538][ T1405] batman_adv: batadv0: Removing interface: gretap1 [ 503.316572][ T1405] bond1 (unregistering): (slave geneve2): Releasing active interface [ 503.358520][ T1405] bond6 (unregistering): (slave geneve0): Removing an active aggregator [ 503.360105][ T1405] bond6 (unregistering): (slave geneve0): Releasing backup interface [ 503.501511][ T1405] bond0 (unregistering): Released all slaves [ 503.521224][ T1405] bond1 (unregistering): Released all slaves [ 503.550900][ T1405] bond2 (unregistering): Released all slaves [ 503.581059][ T1405] bond3 (unregistering): Released all slaves [ 503.609935][ T1405] bond4 (unregistering): Released all slaves [ 503.636659][ T1405] bond5 (unregistering): Released all slaves [ 503.669267][ T1405] bond6 (unregistering): Released all slaves [ 503.697119][ T1405] bond7 (unregistering): Released all slaves [ 503.729232][ T1405] bond8 (unregistering): Released all slaves [ 503.753282][ T1405] bond9 (unregistering): Released all slaves [ 503.782085][ T1405] bond10 (unregistering): Released all slaves [ 503.792699][ T5629] Bluetooth: hci7: command tx timeout [ 503.815727][ T1405] bond11 (unregistering): Released all slaves [ 503.841791][ T1405] bond12 (unregistering): Released all slaves [ 503.870923][ T1405] bond13 (unregistering): (slave wireguard0): Releasing backup interface [ 503.870956][ T1405] wireguard0: left promiscuous mode [ 503.884354][ T1405] bond13 (unregistering): Released all slaves [ 503.917692][ T1405] bond14 (unregistering): Released all slaves [ 504.558765][ T1405] tipc: Disabling bearer [ 504.559578][ T1405] tipc: Left network mode [ 504.611248][T17135] hsr_slave_0: entered promiscuous mode [ 504.630103][T17135] hsr_slave_1: entered promiscuous mode [ 504.631034][T17135] debugfs: 'hsr0' already exists in 'hsr' [ 504.631058][T17135] Cannot create hsr debugfs directory [ 505.091332][T17250] netlink: 'syz.6.2734': attribute type 4 has an invalid length. [ 505.091358][T17250] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2734'. [ 505.241805][T17254] netlink: 'syz.6.2734': attribute type 4 has an invalid length. [ 505.241831][T17254] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2734'. [ 505.863111][ T5629] Bluetooth: hci7: command tx timeout [ 506.760916][T17284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2740'. [ 506.776924][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 506.780963][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 506.793119][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 506.807740][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 506.808414][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 506.905810][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 507.058527][ T5629] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 507.070959][ T5629] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 507.079947][ T5629] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 507.098492][ T5629] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 507.108029][ T5629] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 507.935850][T17317] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 508.183903][T17316] netlink: 'syz.5.2744': attribute type 4 has an invalid length. [ 508.904466][ T5625] Bluetooth: hci0: command tx timeout [ 509.223102][ T5625] Bluetooth: hci8: command tx timeout [ 509.993025][T17285] C speed is unknown, defaulting to 1000 [ 510.088534][T17291] C speed is unknown, defaulting to 1000 [ 510.178755][T17361] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2751'. [ 510.218021][ T1405] hsr_slave_0: left promiscuous mode [ 510.218972][ T1405] hsr_slave_1: left promiscuous mode [ 510.243383][T17363] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2751'. [ 510.269991][ T1405] veth0_macvtap: left promiscuous mode [ 510.271783][ T1405] veth1_vlan: left promiscuous mode [ 510.271864][ T1405] veth0_vlan: left promiscuous mode [ 510.982488][ T5629] Bluetooth: hci0: command tx timeout [ 511.302546][ T5629] Bluetooth: hci8: command tx timeout [ 513.064438][ T5629] Bluetooth: hci0: command tx timeout [ 513.382512][ T5629] Bluetooth: hci8: command tx timeout [ 513.752925][T17135] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 513.773946][T17135] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 513.938947][T17135] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 514.240528][T17135] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 514.283564][T17135] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 514.310459][T17135] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 514.338255][T17135] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 514.393367][T17135] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 514.768520][T17435] Bluetooth: MGMT ver 1.23 [ 514.780414][ T1405] IPVS: stop unused estimator thread 0... [ 514.866011][T17435] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2756'. [ 514.917651][T17435] netlink: 'syz.5.2756': attribute type 39 has an invalid length. [ 515.110734][T17291] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.110901][T17291] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.111073][T17291] bridge_slave_0: entered allmulticast mode [ 515.119840][T17291] bridge_slave_0: entered promiscuous mode [ 515.135742][T17291] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.135904][T17291] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.136506][T17291] bridge_slave_1: entered allmulticast mode [ 515.146686][T17291] bridge_slave_1: entered promiscuous mode [ 515.157467][ T5629] Bluetooth: hci0: command tx timeout [ 515.175592][T17440] netlink: 'syz.6.2757': attribute type 1 has an invalid length. [ 515.240134][T17440] 8021q: adding VLAN 0 to HW filter on device bond5 [ 515.285806][T17291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.337443][T17291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.462935][ T5629] Bluetooth: hci8: command tx timeout [ 515.524930][T17291] team0: Port device team_slave_0 added [ 515.573081][T17461] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2761'. [ 515.573118][T17461] net_ratelimit: 2 callbacks suppressed [ 515.573131][T17461] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 515.576192][T17291] team0: Port device team_slave_1 added [ 515.715258][T17465] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2763'. [ 515.715296][T17465] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2763'. [ 515.717303][T17285] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.717422][T17285] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.717574][T17285] bridge_slave_0: entered allmulticast mode [ 515.720201][T17285] bridge_slave_0: entered promiscuous mode [ 515.728109][T17291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.728164][T17291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.728240][T17291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.738581][T17291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.738642][T17291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.738734][T17291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.854778][T17285] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.856132][T17285] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.856669][T17285] bridge_slave_1: entered allmulticast mode [ 515.890765][T17285] bridge_slave_1: entered promiscuous mode [ 515.955855][T17470] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2764'. [ 516.042142][T17285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.059848][T17291] hsr_slave_0: entered promiscuous mode [ 516.060989][T17291] hsr_slave_1: entered promiscuous mode [ 516.075937][T17285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.076151][T17470] ±ÿ: renamed from lo (while UP) [ 516.188429][T17135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.251765][T17285] team0: Port device team_slave_0 added [ 516.271821][T17285] team0: Port device team_slave_1 added [ 516.410030][T17285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.410057][T17285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.410077][T17285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.449471][T17285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.449529][T17285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.449598][T17285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.524655][T17135] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.655137][T11337] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.655316][T11337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.728233][T17285] hsr_slave_0: entered promiscuous mode [ 516.731018][T17285] hsr_slave_1: entered promiscuous mode [ 516.741730][T17285] debugfs: 'hsr0' already exists in 'hsr' [ 516.749995][T17285] Cannot create hsr debugfs directory [ 516.775753][ T1405] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.775867][ T1405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.267786][T17491] tipc: Enabled bearer , priority 0 [ 517.385346][T17491] syzkaller0: entered promiscuous mode [ 517.385367][T17491] syzkaller0: entered allmulticast mode [ 517.386077][T17491] tipc: Resetting bearer [ 517.437358][T17499] tipc: Enabling of bearer rejected, already enabled [ 517.559505][T17291] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 517.587254][T17291] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 517.612554][T17291] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 517.708835][T17291] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 518.423532][T17487] tipc: Resetting bearer [ 519.951412][T17505] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 519.951693][T17504] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 519.975292][T17504] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2772'. [ 522.839254][T17487] tipc: Disabling bearer [ 522.849134][T17291] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 522.853995][T17291] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 522.856929][T17291] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 522.876485][T17291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 522.879182][T17504] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2772'. [ 522.879230][T17504] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2772'. [ 523.258559][T17515] geneve0: entered promiscuous mode [ 523.272572][T17515] batman_adv: batadv0: Adding interface: macvlan2 [ 523.272592][T17515] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.272625][T17515] batman_adv: batadv0: Interface activated: macvlan2 [ 523.326600][T17285] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 523.349359][T17285] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 523.367843][T17285] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 523.395247][T17285] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 523.396287][T17285] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 523.457719][T17285] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 523.472197][T17285] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 523.499018][T17285] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 523.747310][T17291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.806549][T17291] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.821259][T17135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.844778][T11338] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.844857][T11338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.886436][T11338] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.886548][T11338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.921453][T17285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.047664][T17285] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.131903][T11338] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.132014][T11338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.157988][T17135] veth0_vlan: entered promiscuous mode [ 524.200336][T11338] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.200448][T11338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.227071][T17549] pim6reg: entered allmulticast mode [ 524.264782][T17135] veth1_vlan: entered promiscuous mode [ 524.364377][T17552] pimreg9: entered allmulticast mode [ 524.388116][T17549] pim6reg: left allmulticast mode [ 524.469220][T17135] veth0_macvtap: entered promiscuous mode [ 524.540858][T17135] veth1_macvtap: entered promiscuous mode [ 524.638334][T17135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.671398][T17135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.714686][ T83] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.862874][ T999] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.863686][ T999] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.863727][ T999] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.023131][ T1405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.023156][ T1405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.146045][ T1467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.146070][ T1467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.648944][T17291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.688889][T17585] netlink: 'syz.1.2785': attribute type 1 has an invalid length. [ 525.727778][T17585] team0: Port device team_slave_1 removed [ 526.091516][T17597] netlink: 'syz.1.2788': attribute type 1 has an invalid length. [ 526.091541][T17597] netlink: 756 bytes leftover after parsing attributes in process `syz.1.2788'. [ 526.232120][T17607] netlink: 200 bytes leftover after parsing attributes in process `syz.6.2789'. [ 526.248124][T17285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.421428][T17291] veth0_vlan: entered promiscuous mode [ 526.465819][T17291] veth1_vlan: entered promiscuous mode [ 526.515829][T17291] veth0_macvtap: entered promiscuous mode [ 526.517176][T17614] netlink: 'syz.1.2790': attribute type 1 has an invalid length. [ 526.522243][T17291] veth1_macvtap: entered promiscuous mode [ 526.569355][T17291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.583499][T17291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.700758][T17619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2791'. [ 526.738284][T17622] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2792'. [ 526.919531][T17624] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2793'. [ 526.938520][T17624] veth1_to_team: entered promiscuous mode [ 526.947955][T17624] veth0_to_team: entered promiscuous mode [ 526.951593][T17624] debugfs: 'hsr1' already exists in 'hsr' [ 526.951646][T17624] Cannot create hsr debugfs directory [ 526.951699][T17624] hsr1: entered promiscuous mode [ 526.954213][ T1405] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.956499][ T999] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.956731][ T999] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.956838][ T999] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.177581][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.177605][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.200415][T17633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2795'. [ 527.214132][T17631] netlink: 'syz.6.2796': attribute type 9 has an invalid length. [ 527.285681][T17285] veth0_vlan: entered promiscuous mode [ 527.289025][ T1405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.289047][ T1405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.341256][T17285] veth1_vlan: entered promiscuous mode [ 527.496025][T17285] veth0_macvtap: entered promiscuous mode [ 527.529289][T17285] veth1_macvtap: entered promiscuous mode [ 527.656362][T17285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.696390][T17285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.767038][ T7138] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.768520][ T83] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.768572][ T83] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.768613][ T83] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.177533][T17656] netlink: 'syz.1.2800': attribute type 4 has an invalid length. [ 528.203307][T17652] smbdirect: ib_dev[syz2] renamed to [sy] [ 528.309713][T17638] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 528.309766][T17638] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 528.309813][T17638] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 528.311767][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.311789][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.426892][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.426917][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.570449][T17670] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2736'. [ 528.771762][T17676] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 529.064317][T17693] netlink: 'syz.7.2809': attribute type 49 has an invalid length. [ 529.680569][T17702] netlink: 'syz.6.2812': attribute type 2 has an invalid length. [ 529.805571][T17709] netlink: 'syz.7.2814': attribute type 1 has an invalid length. [ 529.967424][T17716] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2815'. [ 530.130589][T17716] 8021q: adding VLAN 0 to HW filter on device bond6 [ 530.834597][T17745] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2821'. [ 530.834623][T17745] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2821'. [ 530.868847][T17745] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 530.870253][T17745] bond1 (unregistering): Released all slaves [ 530.907725][T17748] netlink: 'syz.8.2820': attribute type 1 has an invalid length. [ 530.907743][T17748] netlink: 'syz.8.2820': attribute type 2 has an invalid length. [ 531.357022][T17759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2825'. [ 531.360887][ T32] audit: type=1804 audit(1791343123.803:6): pid=17759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2825" name="/newroot/8/cgroup.controllers" dev="tmpfs" ino=58 res=1 errno=0 [ 531.361172][ T32] audit: type=1800 audit(1791343123.803:7): pid=17759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2825" name="cgroup.controllers" dev="tmpfs" ino=58 res=0 errno=0 [ 531.723494][T11339] IPVS: starting estimator thread 0... [ 531.812774][T17776] IPVS: using max 28 ests per chain, 67200 per kthread [ 531.856530][T17767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2826'. [ 531.975352][T17786] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 531.979594][T17787] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2829'. [ 532.007213][T17785] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 532.159009][T17800] syzkaller0: entered promiscuous mode [ 532.159033][T17800] syzkaller0: entered allmulticast mode [ 532.179973][T17804] netlink: 'syz.7.2831': attribute type 4 has an invalid length. [ 532.180007][T17804] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2831'. [ 532.366426][T17809] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2834'. [ 532.977555][T17844] netlink: 'syz.5.2843': attribute type 1 has an invalid length. [ 532.991093][T17842] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2844'. [ 533.161385][T17848] Cannot find map_set index 2 as target [ 533.385457][T17856] wlan1 speed is unknown, defaulting to 1000 [ 533.385517][T17856] wlan1 speed is unknown, defaulting to 1000 [ 533.386237][T17856] wlan1 speed is unknown, defaulting to 1000 [ 533.387145][T17856] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 533.387171][T17856] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 533.387262][T17856] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 533.471580][T17856] wlan1 speed is unknown, defaulting to 1000 [ 533.479735][T17856] wlan1 speed is unknown, defaulting to 1000 [ 533.482018][T17856] wlan1 speed is unknown, defaulting to 1000 [ 533.497752][T17856] wlan1 speed is unknown, defaulting to 1000 [ 533.501051][T17856] wlan1 speed is unknown, defaulting to 1000 [ 533.524860][T17856] wlan1 speed is unknown, defaulting to 1000 [ 533.555729][T17856] wlan1 speed is unknown, defaulting to 1000 [ 533.561894][T17856] wlan1 speed is unknown, defaulting to 1000 [ 533.579060][T17856] wlan1 speed is unknown, defaulting to 1000 [ 533.732127][T17863] __nla_validate_parse: 2 callbacks suppressed [ 533.732152][T17863] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2849'. [ 533.889018][T17872] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2853'. [ 533.889055][T17872] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2853'. [ 533.934892][ T39] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.935944][ T39] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.935989][ T39] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 533.936027][ T39] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.224678][T17880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.293681][T17880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2854'. [ 534.345786][T17891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.350968][T17889] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2856'. [ 534.425186][T17889] ip_tables: iptables: counters copy to user failed while replacing table [ 534.689512][T17906] netlink: 268 bytes leftover after parsing attributes in process `syz.6.2862'. [ 534.868815][T17922] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 534.868851][T17922] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.994662][T17925] SET target dimension over the limit! [ 535.099940][T17934] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2868'. [ 535.193987][T17938] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2869'. [ 535.458500][T17953] netlink: 'syz.5.2872': attribute type 1 has an invalid length. [ 535.775406][T17953] bridge4: entered promiscuous mode [ 535.775431][T17953] bridge4: entered allmulticast mode [ 535.797752][T17953] bond2: (slave bridge4): making interface the new active one [ 535.798339][T17953] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 535.827452][T17984] tun0: tun_chr_ioctl cmd 1074025675 [ 535.827479][T17984] tun0: persist enabled [ 535.827848][T17984] tun0: tun_chr_ioctl cmd 1074025675 [ 535.827866][T17984] tun0: persist enabled [ 535.885254][T17984] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 536.537487][T18010] x_tables: duplicate underflow at hook 1 [ 536.661088][T18021] netlink: 'syz.7.2887': attribute type 1 has an invalid length. [ 536.661115][T18021] netlink: 'syz.7.2887': attribute type 7 has an invalid length. [ 536.661130][T18021] netlink: 'syz.7.2887': attribute type 8 has an invalid length. [ 536.661144][T18021] netlink: 'syz.7.2887': attribute type 1 has an invalid length. [ 536.661158][T18021] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2887'. [ 536.837902][T18030] batman_adv: batadv0: Adding interface: veth0 [ 536.837949][T18030] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.837998][T18030] batman_adv: batadv0: Interface activated: veth0 [ 536.842088][T18030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.842116][T18030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.878512][T18030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.878537][T18030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.956433][T18030] batman_adv: batadv0: Interface deactivated: veth0 [ 536.956461][T18030] batman_adv: batadv0: Removing interface: veth0 [ 537.009716][T18033] netlink: 3560 bytes leftover after parsing attributes in process `syz.8.2888'. [ 537.106664][T18044] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 537.330377][T18051] xt_TCPMSS: Only works on TCP SYN packets [ 537.369979][T18044] IPVS: Scheduler module ip_vs_sip not found [ 537.417208][T18058] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 537.606902][T18066] syzkaller0: entered promiscuous mode [ 537.606928][T18066] syzkaller0: entered allmulticast mode [ 537.774303][T18071] sctp: [Deprecated]: syz.1.2898 (pid 18071) Use of int in maxseg socket option. [ 537.774303][T18071] Use struct sctp_assoc_value instead [ 538.003148][T18078] IPVS: set_ctl: invalid protocol: 10 0.16.0.2:0 [ 538.003976][T18078] IPVS: set_ctl: invalid protocol: 28771 101.116.46.101:26214 [ 538.368992][T18099] netlink: 'syz.6.2906': attribute type 1 has an invalid length. [ 538.504676][T18099] 8021q: adding VLAN 0 to HW filter on device bond7 [ 538.546569][T18104] bond7: (slave gretap2): making interface the new active one [ 538.561699][T18104] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 538.885996][T18118] C speed is unknown, defaulting to 1000 [ 538.909524][T18118] wlan1 speed is unknown, defaulting to 1000 [ 539.082126][T18134] __nla_validate_parse: 4 callbacks suppressed [ 539.082157][T18134] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2916'. [ 539.082175][T18134] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2916'. [ 539.082202][T18134] netlink: 'syz.8.2916': attribute type 7 has an invalid length. [ 539.121336][T18133] netlink: 'syz.7.2915': attribute type 1 has an invalid length. [ 539.300520][T18138] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2915'. [ 539.351821][T18125] netlink: 'syz.7.2915': attribute type 10 has an invalid length. [ 539.351850][T18125] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2915'. [ 539.394768][T18134] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2916'. [ 539.394793][T18134] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2916'. [ 539.394819][T18134] netlink: 'syz.8.2916': attribute type 7 has an invalid length. [ 539.564091][T18125] dummy0: entered promiscuous mode [ 539.626684][T18143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2917'. [ 539.759387][T18146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2918'. [ 539.759412][T18146] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2918'. [ 539.759668][T18146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2918'. [ 540.016010][T18160] erspan0: entered promiscuous mode [ 540.277463][ T8014] hid-generic 0005:0008:0009.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 540.432777][T18176] x_tables: duplicate underflow at hook 1 [ 540.540149][T18174] fido_id[18174]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci8/hci8:200/report_descriptor': No such file or directory [ 540.688023][T18182] netlink: 'syz.5.2929': attribute type 7 has an invalid length. [ 540.690418][T18182] xt_connbytes: Forcing CT accounting to be enabled [ 541.145473][ T8014] hid-generic 0005:0008:0009.0002: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 541.267978][T18211] fido_id[18211]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci8/hci8:200/report_descriptor': No such file or directory [ 543.173598][T18197] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 544.203848][T18224] __nla_validate_parse: 3 callbacks suppressed [ 544.203873][T18224] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2937'. [ 544.204219][T18224] 8021q: VLANs not supported on ip_vti0 [ 544.273916][T18228] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 544.273978][ T39] IPVS: starting estimator thread 0... [ 544.353969][T18232] netlink: 3560 bytes leftover after parsing attributes in process `syz.1.2940'. [ 544.356465][T18224] syzkaller0: entered promiscuous mode [ 544.356489][T18224] syzkaller0: entered allmulticast mode [ 544.372726][T18229] IPVS: using max 26 ests per chain, 62400 per kthread [ 545.182066][T18261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 545.825316][T18281] tc_dump_action: action bad kind [ 546.047027][T18292] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2956'. [ 547.190334][T18321] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2959'. [ 547.973020][T18352] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2967'. [ 548.025240][T18353] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2967'. [ 548.377632][T18372] hsr0: entered promiscuous mode [ 548.488037][T18368] syzkaller0: entered promiscuous mode [ 548.488063][T18368] syzkaller0: entered allmulticast mode [ 548.560854][T18377] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2974'. [ 548.605959][T18377] 8021q: VLANs not supported on vxcan1 [ 548.754950][T18371] hsr0: left promiscuous mode [ 548.824324][T18379] batman_adv: batadv0: Adding interface: syzkaller0 [ 548.824344][T18379] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.824378][T18379] batman_adv: batadv0: Interface activated: syzkaller0 [ 549.062010][T18395] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2977'. [ 549.703504][ T5625] Bluetooth: hci5: command 0x0405 tx timeout [ 549.979077][T18379] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 550.014362][T18379] batman_adv: batadv0: Removing interface: syzkaller0 [ 550.022200][T17976] wlan1 speed is unknown, defaulting to 1000 [ 550.376083][T18432] validate_nla: 2 callbacks suppressed [ 550.376107][T18432] netlink: 'syz.1.2986': attribute type 9 has an invalid length. [ 550.440326][T18436] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2987'. [ 550.440356][T18436] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2987'. [ 550.502913][T18436] Bluetooth: hci0: invalid length 0, exp 2 for type 4 [ 550.909579][T18445] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2990'. [ 551.081604][T18465] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 551.081882][T18466] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 551.266730][T18476] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2997'. [ 551.266759][T18476] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2997'. [ 551.314701][T18476] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2997'. [ 551.674826][T18486] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.881710][T18497] FAULT_INJECTION: forcing a failure. [ 551.881710][T18497] name failslab, interval 1, probability 0, space 0, times 0 [ 551.881748][T18497] CPU: 0 UID: 0 PID: 18497 Comm: syz.7.3005 Not tainted syzkaller #0 PREEMPT(full) [ 551.881772][T18497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 551.881786][T18497] Call Trace: [ 551.881795][T18497] [ 551.881805][T18497] dump_stack_lvl+0xe8/0x150 [ 551.881842][T18497] should_fail_ex+0x410/0x560 [ 551.881874][T18497] should_failslab+0xa8/0x100 [ 551.881903][T18497] ? skb_clone+0x212/0x3a0 [ 551.881941][T18497] kmem_cache_alloc_noprof+0xa1/0x600 [ 551.881979][T18497] ? skb_clone+0x212/0x3a0 [ 551.882028][T18497] skb_clone+0x212/0x3a0 [ 551.882067][T18497] __netlink_deliver_tap+0x355/0x6e0 [ 551.882104][T18497] ? netlink_deliver_tap+0x2e/0x1b0 [ 551.882131][T18497] netlink_deliver_tap+0x19c/0x1b0 [ 551.882157][T18497] netlink_unicast+0x781/0x940 [ 551.882193][T18497] netlink_sendmsg+0x813/0xb40 [ 551.882229][T18497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.882264][T18497] ? apparmor_socket_sendmsg+0x98/0x360 [ 551.882293][T18497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.882317][T18497] sock_sendmsg_nosec+0x14e/0x190 [ 551.882344][T18497] ____sys_sendmsg+0x54e/0x850 [ 551.882383][T18497] ? __pfx_____sys_sendmsg+0x10/0x10 [ 551.882425][T18497] ? import_iovec+0x73/0xa0 [ 551.882457][T18497] ___sys_sendmsg+0x2a5/0x360 [ 551.882487][T18497] ? __lock_acquire+0x747/0x2de0 [ 551.882515][T18497] ? __pfx____sys_sendmsg+0x10/0x10 [ 551.882586][T18497] ? __fget_files+0x2a/0x420 [ 551.882616][T18497] ? __fget_files+0x3a2/0x420 [ 551.882659][T18497] __x64_sys_sendmsg+0x1b1/0x290 [ 551.882694][T18497] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 551.882752][T18497] do_syscall_64+0x166/0x520 [ 551.882772][T18497] ? trace_irq_disable+0x3b/0x140 [ 551.882795][T18497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.882818][T18497] ? clear_bhb_loop+0x70/0xc0 [ 551.882846][T18497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.882868][T18497] RIP: 0033:0x7f978f99e199 [ 551.882889][T18497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.882908][T18497] RSP: 002b:00007f97908d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.882933][T18497] RAX: ffffffffffffffda RBX: 00007f978fc25fa0 RCX: 00007f978f99e199 [ 551.882949][T18497] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000004 [ 551.882964][T18497] RBP: 00007f97908d5090 R08: 0000000000000000 R09: 0000000000000000 [ 551.882978][T18497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.882992][T18497] R13: 00007f978fc26038 R14: 00007f978fc25fa0 R15: 00007fffbf9269b8 [ 551.883037][T18497] [ 552.317634][T18503] xt_policy: output policy not valid in PREROUTING and INPUT [ 552.365825][T18506] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 552.469835][T18483] netlink: 'syz.1.3000': attribute type 4 has an invalid length. [ 552.735881][T18522] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3011'. [ 552.860275][T18522] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3011'. [ 553.224083][T18540] tipc: Started in network mode [ 553.224104][T18540] tipc: Node identity , cluster identity 4711 [ 553.224120][T18540] tipc: Failed to obtain node identity [ 553.224148][T18540] tipc: Enabling of bearer rejected, failed to enable media [ 553.619201][T18557] block nbd0: not configured, cannot reconfigure [ 553.744669][T18568] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3025'. [ 553.819437][T18564] C speed is unknown, defaulting to 1000 [ 553.845232][T18570] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3024'. [ 553.949102][T18578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.001514][T18564] wlan1 speed is unknown, defaulting to 1000 [ 554.314450][T18579] C speed is unknown, defaulting to 1000 [ 554.356391][T18583] batman_adv: batadv0: Adding interface: dummy0 [ 554.356417][T18583] batman_adv: batadv0: Interface activated: dummy0 [ 554.428175][T18584] batadv0: mtu less than device minimum [ 554.429761][T18584] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 554.431304][T18584] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 554.433676][T18584] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 554.437573][T18584] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 554.441168][T18584] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 554.445584][T18584] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 554.719197][T18579] wlan1 speed is unknown, defaulting to 1000 [ 554.978051][T18597] netlink: 'syz.6.3030': attribute type 11 has an invalid length. [ 555.590709][T18626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3034'. [ 556.088306][T18643] batadv_slave_1: entered promiscuous mode [ 556.114733][T18643] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3041'. [ 556.114850][T18643] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3041'. [ 556.259037][T18654] dummy0: left promiscuous mode [ 556.556624][T18654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.745799][T18642] batadv_slave_1: left promiscuous mode [ 557.264706][T18677] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3051'. [ 557.287162][T18677] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 557.899033][T18707] syzkaller0: entered promiscuous mode [ 557.899059][T18707] syzkaller0: entered allmulticast mode [ 557.925806][T18707] tipc: Started in network mode [ 557.925828][T18707] tipc: Node identity , cluster identity 4711 [ 557.925846][T18707] tipc: Failed to obtain node identity [ 557.925874][T18707] tipc: Enabling of bearer rejected, failed to enable media [ 558.279014][T18723] netlink: 'syz.5.3063': attribute type 13 has an invalid length. [ 558.674227][T18737] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3069'. [ 558.908691][T18741] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3070'. [ 560.759091][T18751] netlink: 'syz.1.3074': attribute type 2 has an invalid length. [ 560.762134][T18751] netlink: 'syz.1.3074': attribute type 2 has an invalid length. [ 561.079356][T18772] tipc: Started in network mode [ 561.079395][T18772] tipc: Node identity 3e5f50f1a9cc, cluster identity 4711 [ 561.079725][T18772] tipc: Enabled bearer , priority 0 [ 561.081114][T18772] syzkaller0: entered promiscuous mode [ 561.081136][T18772] syzkaller0: entered allmulticast mode [ 561.140838][T18772] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 561.226864][T18782] netlink: 116 bytes leftover after parsing attributes in process `syz.7.3079'. [ 561.228757][T18781] tipc: Started in network mode [ 561.228782][T18781] tipc: Node identity 1001001, cluster identity 4711 [ 561.228797][T18781] tipc: Node number set to 16781313 [ 561.272268][T18787] tipc: Resetting bearer [ 561.319144][T18786] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3083'. [ 561.529765][T18771] tipc: Resetting bearer [ 561.575299][T18771] tipc: Disabling bearer [ 561.808296][T18798] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3085'. [ 561.828974][T18798] netlink: 'syz.7.3085': attribute type 46 has an invalid length. [ 561.829004][T18798] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3085'. [ 561.998958][T18804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3087'. [ 562.836538][T18836] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3095'. [ 563.167697][T18862] Bluetooth: ISO socket layer initialized [ 563.272835][T18869] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3102'. [ 563.875913][T18881] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3105'. [ 564.385067][T18917] IPVS: set_ctl: invalid protocol: 108 100.1.1.0:20002 [ 564.455786][T18922] FAULT_INJECTION: forcing a failure. [ 564.455786][T18922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.455813][T18922] CPU: 1 UID: 0 PID: 18922 Comm: syz.5.3114 Not tainted syzkaller #0 PREEMPT(full) [ 564.455831][T18922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 564.455841][T18922] Call Trace: [ 564.455847][T18922] [ 564.455854][T18922] dump_stack_lvl+0xe8/0x150 [ 564.455882][T18922] should_fail_ex+0x410/0x560 [ 564.455905][T18922] _copy_to_user+0x31/0xb0 [ 564.455929][T18922] simple_read_from_buffer+0xe1/0x170 [ 564.455957][T18922] proc_fail_nth_read+0x1bb/0x230 [ 564.455972][T18922] ? common_file_perm+0x20e/0x2b0 [ 564.455996][T18922] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 564.456014][T18922] ? rw_verify_area+0x24a/0x4c0 [ 564.456040][T18922] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 564.456055][T18922] vfs_read+0x213/0xa80 [ 564.456083][T18922] ? __pfx___mutex_lock+0x10/0x10 [ 564.456100][T18922] ? __pfx_vfs_read+0x10/0x10 [ 564.456129][T18922] ? __fget_files+0x2a/0x420 [ 564.456156][T18922] ? __fget_files+0x3a2/0x420 [ 564.456177][T18922] ? __fget_files+0x2a/0x420 [ 564.456206][T18922] ksys_read+0x150/0x270 [ 564.456232][T18922] ? __pfx_ksys_read+0x10/0x10 [ 564.456297][T18922] do_syscall_64+0x166/0x520 [ 564.456311][T18922] ? trace_irq_disable+0x3b/0x140 [ 564.456327][T18922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.456344][T18922] ? clear_bhb_loop+0x70/0xc0 [ 564.456363][T18922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.456379][T18922] RIP: 0033:0x7fa9a6f5e9ce [ 564.456394][T18922] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 564.456408][T18922] RSP: 002b:00007fa9a7e1bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 564.456426][T18922] RAX: ffffffffffffffda RBX: 00007fa9a7e1c6c0 RCX: 00007fa9a6f5e9ce [ 564.456438][T18922] RDX: 000000000000000f RSI: 00007fa9a7e1c0a0 RDI: 0000000000000005 [ 564.456448][T18922] RBP: 00007fa9a7e1c090 R08: 0000000000000000 R09: 0000000000000000 [ 564.456458][T18922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.456468][T18922] R13: 00007fa9a7226128 R14: 00007fa9a7226090 R15: 00007ffcea4e19b8 [ 564.456494][T18922] [ 564.608024][T18923] Bluetooth: hci0: invalid length 0, exp 2 for type 4 [ 567.166313][T18907] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 567.359175][T18930] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 3, id = 0 [ 567.462172][T18935] IPv6: sit1: Disabled Multicast RS [ 567.462823][ T33] INFO: task syz.0.2210:14988 blocked for more than 143 seconds. [ 567.462849][ T33] Not tainted syzkaller #0 [ 567.462861][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 567.462872][ T33] task:syz.0.2210 state:D stack:25272 pid:14988 tgid:14987 ppid:5628 task_flags:0x400140 flags:0x00080002 [ 567.462938][ T33] Call Trace: [ 567.462946][ T33] [ 567.462971][ T33] __schedule+0x17db/0x58f0 [ 567.463072][ T33] ? __pfx___schedule+0x10/0x10 [ 567.463115][ T33] ? schedule+0x90/0x2b0 [ 567.463152][ T33] schedule+0x164/0x2b0 [ 567.463188][ T33] schedule_preempt_disabled+0x13/0x30 [ 567.463220][ T33] __mutex_lock+0x7c1/0x1550 [ 567.463248][ T33] ? __mutex_lock+0x5d4/0x1550 [ 567.463273][ T33] ? nfsd_nl_expkey_get_reqs_dumpit+0xfb/0xd60 [ 567.463306][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 567.463337][ T33] ? net_generic+0x1e/0x240 [ 567.463363][ T33] ? net_generic+0x1e/0x240 [ 567.463396][ T33] nfsd_nl_expkey_get_reqs_dumpit+0xfb/0xd60 [ 567.463437][ T33] ? rcu_is_watching+0x16/0xb0 [ 567.463466][ T33] ? trace_kmalloc+0x2a/0xf0 [ 567.463489][ T33] ? __pfx_nfsd_nl_expkey_get_reqs_dumpit+0x10/0x10 [ 567.463518][ T33] ? __kmalloc_node_track_caller_noprof+0x4 ** replaying previous printk message ** [ 567.463518][ T33] ? __kmalloc_node_track_caller_noprof+0x4d2/0x720 [ 567.463544][ T33] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 567.463567][ T33] ? netlink_dump+0x1e7/0xee0 [ 567.463589][ T33] ? netlink_dump+0x1e7/0xee0 [ 567.463647][ T33] genl_dumpit+0x10b/0x1b0 [ 567.463684][ T33] netlink_dump+0x711/0xee0 [ 567.463722][ T33] ? __pfx_netlink_dump+0x10/0x10 [ 567.463760][ T33] ? genl_start+0x497/0x6d0 [ 567.463798][ T33] __netlink_dump_start+0x589/0x7b0 [ 567.463830][ T33] genl_family_rcv_msg_dumpit+0x213/0x310 [ 567.463866][ T33] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 567.463906][ T33] ? __pfx_genl_start+0x10/0x10 [ 567.463933][ T33] ? __pfx_genl_dumpit+0x10/0x10 [ 567.463967][ T33] ? __pfx_genl_done+0x10/0x10 [ 567.464002][ T33] ? bpf_lsm_capable+0x9/0x20 [ 567.464024][ T33] ? security_capable+0x7e/0x2c0 [ 567.464060][ T33] genl_rcv_msg+0x5e1/0x7a0 [ 567.464096][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 567.464125][ T33] ? __pfx_nfsd_nl_expkey_get_reqs_dumpit+0x10/0x10 [ 567.464199][ T33] netlink_rcv_skb+0x226/0x4a0 [ 567.464225][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 567.464258][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 567.464302][ T33] ? down_read+0x2be/0x330 [ 567.464329][ T33] genl_rcv+0x28/0x40 [ 567.464357][ T33] netlink_unicast+0x7bd/0x940 [ 567.464389][ T33] netlink_sendmsg+0x813/0xb40 [ 567.464424][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.464459][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 567.464488][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.464512][ T33] sock_sendmsg_nosec+0x14e/0x190 [ 567.464538][ T33] ____sys_sendmsg+0x54e/0x850 [ 567.464573][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 567.464637][ T33] ? import_iovec+0x73/0xa0 [ 567.464672][ T33] ___sys_sendmsg+0x2a5/0x360 [ 567.464707][ T33] ? __lock_acquire+0x747/0x2de0 [ 567.464735][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 567.464770][ T33] ? futex_wait+0x2a2/0x390 [ 567.464830][ T33] ? __fget_files+0x2a/0x420 [ 567.464861][ T33] ? __fget_files+0x3a2/0x420 [ 567.464904][ T33] __x64_sys_sendmsg+0x1b1/0x290 [ 567.464940][ T33] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 567.465005][ T33] do_syscall_64+0x166/0x520 [ 567.465024][ T33] ? trace_irq_disable+0x3b/0x140 [ 567.465045][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.465065][ T33] ? clear_bhb_loop+0x70/0xc0 [ 567.465091][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.465111][ T33] RIP: 0033:0x7fb126f9e199 [ 567.465130][ T33] RSP: 002b:00007fb127e4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 567.465154][ T33] RAX: ffffffffffffffda RBX: 00007fb127225fa0 RCX: 00007fb126f9e199 [ 567.465171][ T33] RDX: 00000000040088c0 RSI: 0000200000000300 RDI: 0000000000000004 [ 567.465185][ T33] RBP: 00007fb1270358e0 R08: 0000000000000000 R09: 0000000000000000 [ 567.465200][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.465214][ T33] R13: 00007fb127226038 R14: 00007fb127225fa0 R15: 00007fff05e1e758 [ 567.465251][ T33] [ 567.465332][ T33] [ 567.465332][ T33] Showing all locks held in the system: [ 567.465346][ T33] locks held by khungtaskd/33: 1, last CPU#1: [ 567.465360][ T33] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 567.465443][ T33] locks held by getty/5378: 2, on CPU#1: [ 567.465457][ T33] #0: ffff88803530e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 567.465510][ T33] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 567.465573][ T33] locks held by syz.4.1888/13597: 2, on CPU#1: [ 567.465586][ T33] #0: ffffffff902b91e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 567.465663][ T33] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 567.465724][ T33] locks held by syz.0.2210/14988: 3, on CPU#1: [ 567.465737][ T33] #0: ffffffff902b91e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 567.465785][ T33] #1: ffff88802507f6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 567.465829][ T33] #2: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_get_reqs_dumpit+0xfb/0xd60 [ 567.465880][ T33] locks held by syz.3.2686/17018: 2, on CPU#1: [ 567.465893][ T33] #0: ffffffff902b91e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 567.465939][ T33] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 567.466010][ T33] locks held by syz.2.2688/17023: 2, on CPU#1: [ 567.466022][ T33] #0: ffffffff902b91e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 567.466067][ T33] #1: ffffffff8f09f7c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 567.466120][ T33] locks held by syz.5.3115/18932: 1, last CPU#0: [ 567.466132][ T33] #0: ffff88801b09f180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 567.466183][ T33] locks held by syz.8.3117/18935: 12, last CPU#0: [ 567.466196][ T33] #0: ffffffff907b52e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 567.466250][ T33] #1: ffffffff90254da0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 567.466297][ T33] #2: ffffffff8ef329f8 (sysctl_lock){+.+.}-{3:3}, at: __register_sysctl_table+0xf09/0x1370 [ 567.466340][ T33] #3: ffffc90000007cc0 ((&ndev->rs_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 567.466387][ T33] #4: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x203/0x1650 [ 567.466431][ T33] #5: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x11e/0x540 [ 567.466480][ T33] #6: ffffffff8ed5c900 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3920 [ 567.466524][ T33] #7: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: bond_start_xmit+0xb4/0x19e0 [ 567.466572][ T33] #8: ffffffff8ed5c900 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3920 [ 567.466640][ T33] #9: ffff888078040228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0x114e/0x3920 [ 567.466688][ T33] #10: ffff8880b86416d8 (&pcp->lock){+.+.}-{3:3}, at: get_page_from_freelist+0x6a1/0x2280 [ 567.466734][ T33] #11: ffff88813fffbf18 (&zone->lock){-.-.}-{3:3}, at: __rmqueue_pcplist+0x497/0x1b90 [ 567.466780][ T33] [ 567.466785][ T33] ============================================= [ 567.466785][ T33] [ 567.466806][ T33] NMI backtrace for cpu 1 [ 567.466819][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 567.466841][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 567.466852][ T33] Call Trace: [ 567.466861][ T33] [ 567.466869][ T33] dump_stack_lvl+0xe8/0x150 [ 567.466895][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 567.466919][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 567.466959][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 567.466988][ T33] sys_info+0x135/0x170 [ 567.467008][ T33] watchdog+0xfd7/0x1030 [ 567.467036][ T33] ? watchdog+0x1c7/0x1030 [ 567.467064][ T33] kthread+0x38b/0x480 [ 567.467085][ T33] ? __pfx_watchdog+0x10/0x10 [ 567.467103][ T33] ? __pfx_kthread+0x10/0x10 [ 567.467122][ T33] ret_from_fork+0x514/0xb70 [ 567.467154][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 567.467180][ T33] ? __switch_to+0xc89/0x1420 [ 567.467207][ T33] ? __pfx_kthread+0x10/0x10 [ 567.467224][ T33] ret_from_fork_asm+0x1a/0x30 [ 567.467266][ T33] [ 567.467272][ T33] Sending NMI from CPU 1 to CPUs 0: [ 567.467310][ C0] NMI backtrace for cpu 0 [ 567.467324][ C0] CPU: 0 UID: 0 PID: 18935 Comm: syz.8.3117 Not tainted syzkaller #0 PREEMPT(full) [ 567.467346][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 567.467357][ C0] RIP: 0010:__lock_acquire+0x1a2e/0x2de0 [ 567.467380][ C0] Code: 14 25 ff 0f 00 00 39 05 ac a5 f6 12 73 06 89 05 a4 a5 f6 12 49 8b 06 48 89 df 4c 39 e8 0f 84 39 fe ff ff 4c 89 78 30 48 8b 00 <4c> 39 e8 75 f4 48 89 df e9 25 fe ff ff 48 89 fb 48 c7 c7 f0 a9 c2 [ 567.467398][ C0] RSP: 0000:ffffc900000063c0 EFLAGS: 00000006 [ 567.467414][ C0] RAX: ffffffff972f17f8 RBX: 00000000000003dd RCX: 00000000000000d0 [ 567.467428][ C0] RDX: 0000000000000002 RSI: ffff88803040eb50 RDI: 00000000000003dd [ 567.467441][ C0] RBP: cf0781055e5514f1 R08: ffffc90000006388 R09: 0000000000000020 [ 567.467463][ C0] R10: 0000000000000003 R11: ffffffff81a3c7d0 R12: 00000000000000cf [ 567.467475][ C0] R13: ffffffff943c53c0 R14: ffffffff97286258 R15: ffffffff972865d8 [ 567.467490][ C0] FS: 00007f2f018436c0(0000) GS:ffff888124cda000(0000) knlGS:0000000000000000 [ 567.467507][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 567.467521][ C0] CR2: 000000110c2cc1bb CR3: 0000000058548000 CR4: 00000000003526f0 [ 567.467538][ C0] Call Trace: [ 567.467546][ C0] [ 567.467566][ C0] lock_acquire+0x115/0x350 [ 567.467585][ C0] ? ktime_get+0x45/0x220 [ 567.467612][ C0] ? ktime_get+0x45/0x220 [ 567.467630][ C0] seqcount_lockdep_reader_access+0x55/0x100 [ 567.467650][ C0] ? ktime_get+0x45/0x220 [ 567.467667][ C0] ktime_get+0x45/0x220 [ 567.467685][ C0] clockevents_program_event+0x290/0x630 [ 567.467713][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 567.467739][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 567.467759][ C0] ? tick_program_event+0x8f/0x120 [ 567.467779][ C0] __hrtimer_rearm_deferred+0x36c/0x4b0 [ 567.467809][ C0] irqentry_exit+0x8d3/0x910 [ 567.467842][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 567.467863][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 567.467891][ C0] Code: f7 e8 cd 1f bb f5 f7 c3 00 02 00 00 74 05 e8 60 6d e7 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 04 1d ac f5 65 48 8b 05 4c 80 ab 07 48 85 c0 74 18 5b 41 5e e9 [ 567.467907][ C0] RSP: 0000:ffffc90000006810 EFLAGS: 00000206 [ 567.467922][ C0] RAX: 0000000000000002 RBX: 0000000000000246 RCX: 0000000000000505 [ 567.467934][ C0] RDX: 0000000000000002 RSI: ffffffff8e405b24 RDI: 0000000000000001 [ 567.467947][ C0] RBP: 00000000fffffe00 R08: ffffffff9079a57f R09: 1ffffffff20f34af [ 567.467961][ C0] R10: dffffc0000000000 R11: fffffbfff20f34b0 R12: ffff8880b86417e0 [ 567.467976][ C0] R13: ffff8880b8641700 R14: ffff88813fffbf00 R15: ffffea0002048010 [ 567.468000][ C0] __rmqueue_pcplist+0x129e/0x1b90 [ 567.468037][ C0] get_page_from_freelist+0x71a/0x2280 [ 567.468080][ C0] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 567.468103][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 567.468125][ C0] ? __pfx_policy_nodemask+0x10/0x10 [ 567.468155][ C0] alloc_pages_mpol+0x21e/0x390 [ 567.468181][ C0] ___kmalloc_large_node+0x4f/0x120 [ 567.468200][ C0] ? gre_tap_xmit+0x417/0x760 [ 567.468217][ C0] __kmalloc_large_node_noprof+0x18/0x90 [ 567.468236][ C0] ? gre_tap_xmit+0x417/0x760 [ 567.468252][ C0] __kmalloc_node_track_caller_noprof+0x15e/0x720 [ 567.468274][ C0] ? gre_tap_xmit+0x417/0x760 [ 567.468293][ C0] pskb_expand_head+0x22c/0x13a0 [ 567.468330][ C0] gre_tap_xmit+0x417/0x760 [ 567.468349][ C0] ? __pfx_gre_tap_xmit+0x10/0x10 [ 567.468366][ C0] ? __pfx_gre_build_header+0x10/0x10 [ 567.468388][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 567.468426][ C0] sch_direct_xmit+0x257/0x4c0 [ 567.468463][ C0] ? __pfx_sch_direct_xmit+0x10/0x10 [ 567.468495][ C0] __qdisc_run+0xb11/0x1620 [ 567.468531][ C0] __dev_queue_xmit+0x17e7/0x3920 [ 567.468551][ C0] ? __dev_queue_xmit+0x29b/0x3920 [ 567.468575][ C0] ? __lock_acquire+0x747/0x2de0 [ 567.468596][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 567.468623][ C0] ? lock_acquire+0x115/0x350 [ 567.468650][ C0] ? bond_do_alb_xmit+0x539/0x8d0 [ 567.468667][ C0] ? bond_dev_queue_xmit+0x9c/0x150 [ 567.468697][ C0] bond_start_xmit+0x70a/0x19e0 [ 567.468721][ C0] ? bond_start_xmit+0xb4/0x19e0 [ 567.468743][ C0] ? __pfx_bond_start_xmit+0x10/0x10 [ 567.468764][ C0] ? netif_skb_features+0x8ba/0xf20 [ 567.468795][ C0] ? __pfx_netif_skb_features+0x10/0x10 [ 567.468829][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 567.468865][ C0] __dev_queue_xmit+0x14d1/0x3920 [ 567.468885][ C0] ? __dev_queue_xmit+0x29b/0x3920 [ 567.468911][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 567.468931][ C0] ? lock_acquire+0x115/0x350 [ 567.468949][ C0] ? ip6_output+0x337/0x540 [ 567.468980][ C0] ? ip6_finish_output2+0xe87/0x14b0 [ 567.469011][ C0] ? ip6_output+0x11e/0x540 [ 567.469034][ C0] ip6_output+0x337/0x540 [ 567.469059][ C0] ? __pfx_ip6_output+0x10/0x10 [ 567.469081][ C0] ndisc_send_skb+0xcb2/0x1650 [ 567.469102][ C0] ? ndisc_send_skb+0x203/0x1650 [ 567.469125][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 567.469145][ C0] ? __pfx_dst_output+0x10/0x10 [ 567.469175][ C0] addrconf_rs_timer+0x2d2/0x6c0 [ 567.469203][ C0] ? lock_acquire+0x115/0x350 [ 567.469222][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 567.469250][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 567.469279][ C0] call_timer_fn+0x18d/0x5f0 [ 567.469302][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 567.469328][ C0] ? call_timer_fn+0xd5/0x5f0 [ 567.469350][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 567.469378][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 567.469402][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 567.469431][ C0] __run_timer_base+0x652/0x8b0 [ 567.469463][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 567.469486][ C0] ? ktime_get+0x1f5/0x220 [ 567.469504][ C0] ? lapic_next_event+0x11/0x20 [ 567.469526][ C0] run_timer_softirq+0xb7/0x170 [ 567.469547][ C0] handle_softirqs+0x226/0x860 [ 567.469573][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 567.469601][ C0] __irq_exit_rcu+0xcb/0x220 [ 567.469628][ C0] irq_exit_rcu+0x9/0x30 [ 567.469650][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 567.469679][ C0] [ 567.469685][ C0] [ 567.469692][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 567.469712][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x5e/0x80 [ 567.469741][ C0] Code: 00 00 00 10 0f 93 c2 40 08 f2 75 35 83 b9 44 17 00 00 00 74 2c 8b 91 18 17 00 00 83 fa 02 75 21 48 8b 91 20 17 00 00 48 8b 32 <48> 8d 7e 01 8b 89 1c 17 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 [ 567.469758][ C0] RSP: 0000:ffffc9000de7e7b8 EFLAGS: 00000246 [ 567.469773][ C0] RAX: ffffffff82781405 RBX: ffff8880749bcf60 RCX: ffff88803040ddc0 [ 567.469788][ C0] RDX: ffffc90012cba000 RSI: 0000000000006e74 RDI: 0000000000006e74 [ 567.469801][ C0] RBP: ffff8880430b8cb8 R08: 0000000000000007 R09: 00000000749bcf00 [ 567.469814][ C0] R10: dffffc0000000000 R11: fffff52001bcfd04 R12: ffff8880749bcf68 [ 567.469828][ C0] R13: 0000000000000004 R14: ffff88803697e460 R15: ffff8880595d4a68 [ 567.469845][ C0] ? insert_header+0xc75/0x1260 [ 567.469868][ C0] insert_header+0xc75/0x1260 [ 567.469897][ C0] __register_sysctl_table+0xfca/0x1370 [ 567.469922][ C0] neigh_sysctl_register+0x9b1/0xa90 [ 567.469949][ C0] ? __pfx_ndisc_ifinfo_sysctl_change+0x10/0x10 [ 567.469974][ C0] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 567.470008][ C0] ? mutex_init_lockdep+0xdf/0x110 [ 567.470035][ C0] addrconf_sysctl_register+0xb3/0x1c0 [ 567.470065][ C0] ipv6_add_dev+0xd5f/0x1400 [ 567.470092][ C0] addrconf_notify+0x771/0x1050 [ 567.470121][ C0] notifier_call_chain+0x1a5/0x3d0 [ 567.470154][ C0] register_netdevice+0x1c03/0x2280 [ 567.470180][ C0] ? __pfx_register_netdevice+0x10/0x10 [ 567.470197][ C0] ? __hw_addr_insert+0x1f8/0x220 [ 567.470229][ C0] ? ipip6_tunnel_create+0x14b/0x480 [ 567.470259][ C0] ipip6_tunnel_create+0x1e5/0x480 [ 567.470288][ C0] ipip6_newlink+0x38b/0x6d0 [ 567.470311][ C0] ? alloc_netdev_mqs+0xd5b/0x1240 [ 567.470329][ C0] ? trace_kmalloc+0x2a/0xf0 [ 567.470348][ C0] ? __pfx_ipip6_newlink+0x10/0x10 [ 567.470373][ C0] ? __kvmalloc_node_noprof+0x345/0x820 [ 567.470403][ C0] ? rtnl_create_link+0xa04/0xd70 [ 567.470424][ C0] ? __pfx_ipip6_newlink+0x10/0x10 [ 567.470454][ C0] rtnl_newlink_create+0x305/0x7b0 [ 567.470487][ C0] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 567.470516][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 567.470539][ C0] ? ns_capable+0x89/0xe0 [ 567.470564][ C0] rtnl_newlink+0x167a/0x1c30 [ 567.470600][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 567.470625][ C0] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 567.470646][ C0] ? netlink_deliver_tap+0x19c/0x1b0 [ 567.470664][ C0] ? netlink_unicast+0x781/0x940 [ 567.470680][ C0] ? netlink_sendmsg+0x813/0xb40 [ 567.470699][ C0] ? sock_sendmsg_nosec+0x14e/0x190 [ 567.470718][ C0] ? ____sys_sendmsg+0x54e/0x850 [ 567.470743][ C0] ? ___sys_sendmsg+0x2a5/0x360 [ 567.470768][ C0] ? __x64_sys_sendmsg+0x1b1/0x290 [ 567.470794][ C0] ? do_syscall_64+0x166/0x520 [ 567.470809][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.470846][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 567.470865][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 567.470895][ C0] ? nlmon_xmit+0xb0/0x100 [ 567.470914][ C0] ? kmem_cache_free+0x182/0x650 [ 567.470937][ C0] ? __lock_acquire+0x747/0x2de0 [ 567.470961][ C0] ? __dev_queue_xmit+0x29b/0x3920 [ 567.470980][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 567.471003][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 567.471044][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 567.471068][ C0] rtnetlink_rcv_msg+0x802/0xc00 [ 567.471095][ C0] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 567.471120][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 567.471146][ C0] ? __copy_skb_header+0xa3/0x4a0 [ 567.471178][ C0] netlink_rcv_skb+0x226/0x4a0 [ 567.471198][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 567.471224][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 567.471250][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 567.471269][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 567.471292][ C0] netlink_unicast+0x7bd/0x940 [ 567.471315][ C0] netlink_sendmsg+0x813/0xb40 [ 567.471340][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.471365][ C0] ? apparmor_socket_sendmsg+0x98/0x360 [ 567.471387][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.471407][ C0] sock_sendmsg_nosec+0x14e/0x190 [ 567.471428][ C0] ____sys_sendmsg+0x54e/0x850 [ 567.471464][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 567.471495][ C0] ? import_iovec+0x73/0xa0 [ 567.471521][ C0] ___sys_sendmsg+0x2a5/0x360 [ 567.471546][ C0] ? __lock_acquire+0x747/0x2de0 [ 567.471567][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 567.471599][ C0] ? futex_wait+0x2a2/0x390 [ 567.471645][ C0] ? __fget_files+0x2a/0x420 [ 567.471671][ C0] ? __fget_files+0x3a2/0x420 [ 567.471702][ C0] __x64_sys_sendmsg+0x1b1/0x290 [ 567.471730][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 567.471768][ C0] do_syscall_64+0x166/0x520 [ 567.471784][ C0] ? trace_irq_disable+0x3b/0x140 [ 567.471803][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.471822][ C0] ? clear_bhb_loop+0x70/0xc0 [ 567.471843][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.471862][ C0] RIP: 0033:0x7f2f0099e199 [ 567.471879][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.471895][ C0] RSP: 002b:00007f2f01843028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 567.471913][ C0] RAX: ffffffffffffffda RBX: 00007f2f00c25fa0 RCX: 00007f2f0099e199 [ 567.471928][ C0] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 567.471940][ C0] RBP: 00007f2f00a358e0 R08: 0000000000000000 R09: 0000000000000000 [ 567.471953][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.471965][ C0] R13: 00007f2f00c26038 R14: 00007f2f00c25fa0 R15: 00007ffc345ec768 [ 567.471988][ C0] [ 567.604555][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 569.481653][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 569.490804][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 569.500879][ T33] Call Trace: [ 569.504195][ T33] [ 569.507149][ T33] vpanic+0x56d/0xa60 [ 569.511169][ T33] ? __pfx___schedule+0x10/0x10 [ 569.516075][ T33] ? __pfx_vpanic+0x10/0x10 [ 569.520619][ T33] panic+0xc5/0xd0 [ 569.524366][ T33] ? __pfx_panic+0x10/0x10 [ 569.528806][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 569.534294][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 569.539686][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 569.545881][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 569.552080][ T33] watchdog+0x1030/0x1030 [ 569.556452][ T33] ? watchdog+0x1c7/0x1030 [ 569.560908][ T33] kthread+0x38b/0x480 [ 569.565009][ T33] ? __pfx_watchdog+0x10/0x10 [ 569.569709][ T33] ? __pfx_kthread+0x10/0x10 [ 569.574322][ T33] ret_from_fork+0x514/0xb70 [ 569.578955][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 569.584101][ T33] ? __switch_to+0xc89/0x1420 [ 569.588835][ T33] ? __pfx_kthread+0x10/0x10 [ 569.593456][ T33] ret_from_fork_asm+0x1a/0x30 [ 569.598267][ T33] [ 569.601477][ T33] Kernel Offset: disabled [ 569.605817][ T33] Rebooting in 86400 seconds..