last executing test programs: 5m53.092692968s ago: executing program 1 (id=7707): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x19, 0x0, &(0x7f0000001400)) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0xfffffffd, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8000000000081, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000480)=0xffffffff, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x60, r8, 0x1, 0x70bd28, 0x25dfdc04, {}, [{{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x400000000000000, 0x0, 0x44001}, 0x24008850) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x30, r5, 0x1, 0x1, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x10001}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4}]}, 0x30}}, 0x24008084) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000340), 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) write$tun(r11, &(0x7f0000000380)={@void, @val={0x3, 0x3, 0x8, 0x1007, 0x1e, 0x10}, @x25={0x1, 0x2, 0xf1, "dc94dc97804b47d77b7a0b1665fcf9aa84d4e10eeea29eab419d59c95bbf3d2cef18b862da51050992b3dcf3802cb790a2390fad4646107dcae829527c31876f4f803983771ac6ea9200e9ee4899e33a03656808f2150b7f79f24f3faf687b2a9ea21aa3f3169c17c03020387d1bba4c5126d0c73c01550b1c106ce7776a6a4013f67dd82730bea46b040f496dfa115742ca80db3aaaba7318a7bfef9c2b268ff9e27a42f359224619a26d33fbb07bbb37c1b7bd639e1e5706830497cc043162dac9"}}, 0xcf) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000004000000080000001410"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\b'], 0x48) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000001e80), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)=ANY=[@ANYBLOB="000000003cc82577517beb205713070c9a965f26010000000000000040a6a04e768862dedd2ff09a4d26ad27d1d88d89898d2a66abdcf71e80fc7ba82470033b4deb125e9051c1709fe1aacb18748e2b8bcdc733fb1bc5e33e716b075d246c7e7b381c3dc68b3774dc57bc25c39cd384a1233adf21af9d7f7a02989651fe2793519c7a8d6b2780e10cda019001e552e58255aa56b19d34fe4863c96aac7146980ef83e4dd913a900815e5eb99f678adff56b7366a08d", @ANYRES16=r12, @ANYBLOB="7b1a28bd7000fddbdf25010000000000000001410000001c001700000006000000036574683a6d6163767461703000000000"], 0x38}, 0x1, 0x0, 0x0, 0x240488e1}, 0x4044054) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r13, 0x7ca8e000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r13, 0x28, 0x2, &(0x7f00000000c0)=0x5499, 0x8) 5m52.291099479s ago: executing program 1 (id=7716): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() r2 = syz_open_procfs$namespace(r1, &(0x7f00000006c0)='ns/time_for_children\x00') syz_open_procfs$namespace(r1, &(0x7f0000000380)='ns/time_for_children\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f00000004c0)=0xe8) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000440)=[{r5, 0x40}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) close(r4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000500)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8], 0x90}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={0x40c, 0x24, 0x301, 0x670bd24, 0x25dfdbfc, {0x15}, [@typed={0xc, 0xeb, 0x0, 0x0, @u64=0x68}, @nested={0x3eb, 0xcd, 0x0, 0x1, [@typed={0xb8, 0x117, 0x0, 0x0, @binary="aea758495cae132ab1ef7beadcd36ab02e79c1309bd5d5d09469050706f0cf159763bd83cb0d4cb0e5e63eae1de43ed45a0255005ddb71c6a14aea7c9c85f133e19f03e65cc24c28b428bc845bbb62f3dd9079199860fcc1a2cba3d7de8470611a4500562af1da2b4ecc5a6e690c1e3ac8f4367e41e68b670530f5759ca00863d1526bf8015f240c1ed3d46e324a62ee95112a38b266b1b0734c02cde0c7840a6b57215fe2d34dd7f7237294f72c1709e836820d"}, @nested={0x149, 0x157, 0x0, 0x1, [@generic="e229090623f0f9aca14782bdec41c3bbf143264f9501e5dd6f5d0866b4880ab9e80069a84877fc751bcef9453dba628a03ee918dea6f1124eebeea3de6a740ce94857e909e6fca02d7fee5cdd9cf5b71a947c7b149c8e3c2a7f0853383864d6c3438108c4749ab4af259b498d977312220e8b96ed50c96f8bc3d9ddf420dccd515f8892636b23519b2c27b2f8f1bc7f3ac0d56c1363814", @nested={0x4, 0x163}, @typed={0x8, 0x8c, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x10a, 0x0, 0x0, @uid=r3}, @nested={0x4, 0xc}, @generic="f52f77285919242a8e675c84f7f96d5c7e90aadbca61503f5723d09794197ca2f60e941265ca3d80498a9c83cf3fe6bddbc37bd42d890c1a53ff396866d416a30e0f33851905c9e72362020047b3a508198df0429d5fcfd3fd5dfdd26af34634897950dfc8399107d6e7eb2f41ceb7a6d8ade3d740a315e19576428ffff62c2cddaf22b3d1199636dd9e", @typed={0x8, 0x5a, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x162}]}, @generic="b8c315b27629d7e86424a1bf3708b1b123f17d1f73ab96716491fa8c436ed74433b9761d856b2875502c9e9ac1af7097257832c08c91a52937c9271cb82d99614bc0990f55ca559ba80c413fc76e12fdd04fd69de80917808eb5001e15a9086361d4b4e889745e2580b85936b046c5c7cae89dc815935587be980a5bff994a711793ae9c76371ca9794ae9c090ee12ba2c0d0dddc3c29a37520665ea18d9211970eed6b78f845dea46053550d83fd6189d10b9084b859551e1a88fc44821293f9cb4bf2927c704739eb811f43665bfb1537af466952de4d89c86ba69df95f8110a4d0d2b1a85a2a0efc59e70b8ac", @typed={0x8, 0x4d, 0x0, 0x0, @fd=r2}, @nested={0xc, 0x59, 0x0, 0x1, [@typed={0x8, 0x91, 0x0, 0x0, @u32=0x5ee49f05}]}, @generic="0253f732e4de99c90a188ab7828f26132ab65ee259977114570897bb068fe2b6d09fce9e72fe4cc1b042eee0ce7bfd82143fe5e51d8e541a9701fea626a8851253ba983d0da54428da8c55d5bbe8af4488ad4141bfb5cec923bf08bd21164ca0d46be9cac1d3698a96ab76676d8535b597520ef9cd276ceaa4aad13a06d567023964c937b8d8745a6c27d8631749e81730d1b4aeec52a28a2d49459b55a947eb846a9cc5ec75b14023dec4c41f4d30c725f464484dfd3b3ce1331c229b74ce4f22efa14738d8d6ef203ef53906203dd22630e46dc502f2c5e5235eb4560ddf3d98"]}]}, 0x40c}, 0x1, 0x0, 0x0, 0x40008840}, 0x48110) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x411, 0x70bd23, 0x25dfdbbd, {0x0, 0x0, 0x0, 0x0, 0x7079d, 0x40606}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0xb4ab035985936913}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040054}, 0x8000) 5m51.678340313s ago: executing program 1 (id=7722): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) unshare(0x22020600) r3 = socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000580)={0x14, 0xa, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4003}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c084}, 0x8000) bind$inet(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r4 = accept4(r2, 0x0, 0x0, 0x80000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES32=r5], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x0, 0x5, 0x14, @dev={0xfe, 0x80, '\x00', 0x13}, @local, 0x40, 0x80}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xac}, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r8, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0x0, [0xb, 0xffffffffffffffff, 0xe, 0xc0000000000000, 0x8000, 0xc], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x78) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x20, 0x25, 0x109, 0x870bd22, 0x25dfdbfd, {0x2}, [@nested={0xc, 0x3e, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @u32=0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7, r1}, 0xc) 5m51.101503611s ago: executing program 1 (id=7732): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYRES16, @ANYRES32, @ANYRES32, @ANYBLOB="400001801400020070696d3672656730"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) (async) ioctl$OCFS2_IOC_MOVE_EXT(0xffffffffffffffff, 0x40406f06, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r2, 0x0) (async, rerun: 64) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) (async, rerun: 32) r7 = accept4(r6, 0x0, 0x0, 0x800) (rerun: 32) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async, rerun: 64) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5m50.738997968s ago: executing program 1 (id=7739): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff"], 0xfc}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x90) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x8, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x1089}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x72, &(0x7f0000000000)=""/114}, 0x94) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) sendmsg$nl_generic(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002000010025c77000fcdbdf25601800000800a500", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000851}, 0x24040004) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) r6 = socket(0x10, 0x80000, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x40000) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000500410009002abdf000000000000333a0f91af30000000004000ab7bdb9293a0e"], 0x18}}, 0x4004080) r8 = socket$kcm(0x10, 0x2, 0x4) ppoll(&(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000040), &(0x7f0000000080)={[0xfffffffffffffffb]}, 0x8) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_sctp_SIOCINQ(r6, 0x541b, &(0x7f0000000380)) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000ef042d4b4006050000000084000000de003bf3aefa4bc7ed4e1b6ae252a5bec6d31113e575c21a1977b774b89c0600000031000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x800) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) 5m50.118364416s ago: executing program 1 (id=7749): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@ptr={0x4, 0x0, 0x0, 0x2, 0x1}, @volatile={0x9, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x30]}}, &(0x7f0000000040)=""/237, 0x33, 0xed, 0x0, 0xc673}, 0x28) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000180)={0x6, 0x5, 0x3, 0x8862, 0x4, 0x0, [{0x3, 0x2, 0x2b215e80, '\x00', 0x800}, {0x9, 0x2b30, 0x7, '\x00', 0x2}, {0x2, 0xff, 0x5, '\x00', 0xc04}, {0x8, 0x4, 0x1, '\x00', 0xc0a}]}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x8) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000006, 0x6c5d466179ae2976, r1, 0x50220000) r3 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000380), &(0x7f00000003c0)=0xe) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r2, r2, 0x12, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x8, 0x0, &(0x7f0000000400)=[0xa00000, 0xffffffffffffffff, 0x7, 0x7, 0x7, 0x0, 0x59e5, 0x5], 0x81}}, 0x30) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r4, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x59}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f00000005c0)={'vcan0\x00', 0xffff, 0xb68}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x8c, r5, 0x300, 0x70bd28, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x81}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xdf}, {0x6}, {0x8, 0x15, 0xe47b}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8041}, 0x41) setsockopt$inet6_int(r2, 0x29, 0x18, &(0x7f0000000880)=0x1, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(r1, &(0x7f00000008c0)='io.pressure\x00', 0x2, 0x0) r7 = accept(r3, &(0x7f0000000900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000980)=0x80) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x38, 0x0, 0x9, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) close(r6) sendmsg$OSF_MSG_ADD(r6, &(0x7f00000014c0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001480)={&(0x7f0000000b00)={0x964, 0x0, 0x5, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [{{0x254, 0x1, {{0x3}, 0xf8, 0xdd, 0x100, 0x2, 0x27, 'syz0\x00', "c37f16584c9086e390d5fab43c69b9913e51c29b8291698c41758f55e21dbb1c", "93ee9a5c50f6db05005f8f9c82f0081c279dc46f9d025ce1ed8949d13760c698", [{0x7, 0x260, {0x0, 0xe}}, {0x9, 0x0, {0x3, 0x8}}, {0x7, 0x2542, {0x1, 0x4e}}, {0x7ff, 0x1ff, {0x3, 0x6}}, {0x10, 0x1, {0x2, 0x2}}, {0x7, 0x1ff, {0x2, 0x8000}}, {0x8, 0x0, {0x3, 0x8}}, {0xb, 0x1, {0x2, 0x90000}}, {0x40, 0x40, {0x3, 0x6}}, {0x6, 0x9, {0x0, 0x1000}}, {0x5, 0x7, {0x1}}, {0xa, 0xffff, {0x1, 0x1}}, {0x9, 0xa, {0x1, 0x4}}, {0x9, 0xd, {0x3, 0x80000001}}, {0xfffb, 0x6, {0x3, 0xc8}}, {0x5, 0x1, {0x2, 0x748}}, {0x3, 0x9, {0x2, 0x2}}, {0x6, 0x4, {0x0, 0xfffff001}}, {0x5, 0x7, {0x2}}, {0x5, 0x4, {0x3, 0x1}}, {0x1, 0x9, {0x1}}, {0x1000, 0x6, {0x1, 0x8}}, {0x1000, 0x2, {0x3, 0x5}}, {0x40, 0x0, {0x1, 0x2}}, {0x3, 0x3, {0x1, 0x400}}, {0x6, 0x1, {0x3, 0x6}}, {0x7, 0x3, {0x0, 0x5}}, {0x2, 0x33e, {0x1, 0x401}}, {0x4, 0x8, {0x3, 0x9}}, {0x854, 0x51b9, {0x1, 0x3}}, {0x0, 0x6, {0x0, 0x1000}}, {0x0, 0x6, {0x0, 0x9}}, {0xfbff, 0xd}, {0x0, 0x12}, {0x6, 0xff7f, {0x1, 0x3}}, {0x10, 0x7a01, {0x2, 0x100}}, {0x9, 0x8, {0x1, 0x9}}, {0x100, 0x9, {0x2, 0x9633}}, {0xdb, 0x7f, {0x0, 0x81}}, {0x3, 0x6, {0x0, 0x1}}]}}}, {{0x254, 0x1, {{0x3, 0x3}, 0xeb, 0x3, 0x4ed, 0x8, 0x19, 'syz0\x00', "2f980776de3e1120b9777b5325fd0b559471284ff2a057abe12dcea266275769", "7ddd6705f9c9eb53c7d71a6921681447cfd524b53b5ff7684a939bfb0a2e9b80", [{0x5, 0x53ce, {0x2, 0x6}}, {0xa, 0x800, {0x0, 0x4}}, {0x2, 0xfff4, {0x0, 0x9}}, {0xfffa, 0x4, {0x2, 0xb}}, {0x800, 0x0, {0x2, 0x3}}, {0x3, 0x4b3f, {0x3, 0x7}}, {0xa50, 0x8, {0x0, 0x9}}, {0x7ff, 0x1, {0x1, 0x9}}, {0x0, 0x24, {0x2, 0x5}}, {0xa7c3, 0x3, {0x2, 0x8}}, {0x80, 0x5, {0x3, 0x4}}, {0x28, 0x3, {0x0, 0xfffffff8}}, {0x3, 0x649b, {0x0, 0x7}}, {0x8000, 0x7, {0x0, 0x4f77}}, {0xdc8c, 0x80, {0x0, 0xff}}, {0x2c4, 0x5, {0x1, 0x6}}, {0x3, 0x40, {0x2, 0x6}}, {0x7ff, 0x401, {0x0, 0x4}}, {0x6, 0x1ff, {0x1, 0x7f}}, {0xffff, 0x9, {0x2, 0x2}}, {0x7, 0x9, {0x0, 0x6}}, {0x3, 0x2, {0x3, 0x3be}}, {0x9, 0x5, {0x2, 0x5}}, {0x10, 0x101, {0x2, 0x1}}, {0x4, 0x8, {0x0, 0x6}}, {0x1, 0x10, {0x3, 0x9}}, {0x8, 0x5, {0x0, 0x9}}, {0x2, 0x3, {0x0, 0x8}}, {0x3, 0x5a, {0x1, 0x2}}, {0x6, 0x1000, {0x3, 0xbb2}}, {0x6, 0x4, {0x3, 0x8}}, {0x1f84, 0x400, {0x1, 0x4}}, {0x6, 0x6, {0x0, 0x4}}, {0x800, 0x1a, {0x1, 0x24}}, {0x0, 0x100, {0x1, 0x3}}, {0x7, 0x9, {0x2, 0x80000000}}, {0x101, 0xc, {0x0, 0x5}}, {0x4, 0x4, {0x1, 0xe2}}, {0xbcb6, 0xc6, {0x2, 0x9}}, {0x8ab, 0x9, {0x1, 0xff}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x8, 0x1, 0x200, 0x3, 0x16, 'syz0\x00', "b4b0c892faa614a676dcab774dff12f14390542254765b4636619d28b08a341b", "0e6c74df7b69afda0e190e8726e275905642e93853522e56ddd7e5d76fb464aa", [{0x8000, 0x2, {0x3, 0x525}}, {0x3, 0xf, {0x1, 0xd}}, {0xfba, 0x2, {0x1, 0x6}}, {0x3, 0x8000, {0x0, 0x6}}, {0x685f, 0xe, {0x0, 0x8}}, {0x6, 0x0, {0x0, 0xa}}, {0x6, 0xd, {0x0, 0x1}}, {0x0, 0xfffa, {0x3, 0x5}}, {0x4, 0x5, {0x3, 0x8}}, {0x5, 0xd, {0x1}}, {0x10, 0x2, {0x3, 0x8}}, {0xf992, 0x1, {0x1, 0xfc7}}, {0x1ff, 0xc3a2, {0x2, 0x3}}, {0xa, 0x7, {0x0, 0x7}}, {0xd, 0x100, {0x3, 0x2}}, {0x6dd1, 0xfff, {0x2, 0x3ff}}, {0x5, 0x6, {0x2, 0xb4dd}}, {0xffff, 0xd, {0x1, 0x1}}, {0xb, 0x1, {0x2, 0x4}}, {0x6, 0x8001, {0x3}}, {0x3, 0x9, {0x0, 0x6}}, {0x9, 0x2, {0x2, 0x9}}, {0x4, 0x5, {0x0, 0x3}}, {0x1000, 0x7ff, {0x1, 0x9}}, {0x7, 0x150, {0x2, 0x8}}, {0xbb6, 0x8, {0x1}}, {0xe7f, 0x9, {0x2, 0x9}}, {0x93b, 0x6904, {0x1, 0xff}}, {0x0, 0x9e, {0x0, 0x2}}, {0x8, 0x7f, {0x3, 0x40}}, {0x6, 0x8000, {0x2, 0x3}}, {0x5, 0x81, {0x3}}, {0x9, 0xfff8, {0x1, 0xb08}}, {0x4, 0x2, {0x3, 0x8}}, {0x4000, 0x2, {0x0, 0x9}}, {0x9, 0x5, {0x2, 0xf}}, {0x3, 0x4, {0x2, 0xb69}}, {0x8, 0x1000, {0x2, 0xfffffffb}}, {0x8, 0x4, {0x1, 0x81}}, {0xfff, 0x3, {0x0, 0xffffffff}}]}}}, {{0x254, 0x1, {{0x1, 0xfffffff9}, 0x8, 0xff, 0x1, 0x6, 0xd, 'syz0\x00', "288d903babe9e84140a6804cf236db20dc24064c22cc590406c510157d42a0ef", "4e2efcc875aca5db7786c16fd100885f28c2240dfa12a03e6d53973ff9564024", [{0x4, 0x8, {0x1, 0x8}}, {0x2, 0xb, {0x1, 0x5}}, {0x6, 0x5, {0x1, 0x12}}, {0x4, 0x160, {0x0, 0x10001}}, {0xb, 0x8, {0x0, 0x3997}}, {0xffff, 0x10, {0x0, 0x100}}, {0xe, 0xa301, {0x3, 0x2}}, {0xfff8, 0x7f, {0x2, 0xb}}, {0x6, 0x8000, {0x2, 0xfffeffff}}, {0x100, 0xfffb, {0x2, 0x5c1}}, {0x65, 0xc, {0x3, 0x1000}}, {0xffda, 0x7951, {0x0, 0x3}}, {0x8d, 0x81, {0x0, 0x8000}}, {0x8, 0x8, {0x3, 0xcde}}, {0x6, 0x70, {0x2}}, {0x7, 0x40, {0x2, 0x1000}}, {0x81, 0x0, {0x2}}, {0x8, 0x4000, {0x0, 0x877e}}, {0xffc0, 0x0, {0x1, 0x2}}, {0x2, 0x8, {0x0, 0x400}}, {0x3, 0xb}, {0xf, 0x7, {0x2, 0x7}}, {0x28, 0x173, {0x0, 0x9}}, {0x2, 0x400, {0x1, 0x1}}, {0x84b, 0x0, {0x0, 0xc}}, {0x5, 0x247, {0x2, 0xb}}, {0x8, 0xc, {0x3, 0x7268}}, {0x0, 0x554, {0x2, 0x63}}, {0x8000, 0x0, {0x0, 0x99af}}, {0x8e6e, 0x2, {0x1, 0x89}}, {0xfff2, 0x400, {0x3, 0xc85}}, {0x0, 0x5, {0x0, 0x10001}}, {0x7, 0x2, {0x2, 0x5eee}}, {0x51b, 0x6, {0x1, 0xb}}, {0xd7, 0x200, {0x0, 0xff}}, {0x7fff, 0xaa3d, {0x1, 0x7fff}}, {0x3, 0x34ba, {0x2, 0xf274}}, {0x5, 0x9, {0x1, 0x101}}, {0x2, 0x8001, {0x3, 0x5}}, {0x2, 0x4a05, {0x2}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$TIPC_NL_MON_GET(r7, &(0x7f0000001740)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001700)={&(0x7f0000001540)={0x1a4, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "0ed183bd83a518620667f275bed5becd91eeb029ee79f5b1"}}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x534c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa6}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x39}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x40881}, 0x20040840) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000001780)=@req3={0x7f, 0x2, 0x4, 0x8, 0xa, 0x9, 0x6810}, 0x1c) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001800)=0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000001840)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000001940)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x64, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x4004000) sendmsg$nfc_llcp(r7, &(0x7f0000001b40)={&(0x7f0000001980)={0x27, 0x0, 0xffffffffffffffff, 0x4, 0x8, 0x40, "954d7f79c02beb3892c258ade1e1dc02d328183b8f40139a05282b540879985cfee75d749405d38cc79aa7a96f75971330a40f9e4c29fe7a91df6072e07048", 0x35}, 0x60, &(0x7f0000001b00)=[{&(0x7f0000001a00)="37e316a16f0a5205695f9900b408c6ece752bf0587bd33ee6801a8415c189967a90c7cd49124e7aba638158fe5aa3f1e6c88d30c95b5bdd8bb1262c3583f7e7a39eb7c750ad3b09d3ec57259bc4d8e4a82b35b21355a4b6c6e260d1d319dffc0972cc2e3bcff5fe1864b4d4f995849cdad2e190da0ad83af63dc3f71c88aed488f906ab4116739a91cbe768bb332b5d2652591514eadc9b34420349149863ac5949528d085834f3e80dd82733c8d74fd62834b26302497df27d4b3ba5ebde83113aff9c01a98c6bae40ee99822cd6daba655d82ff341bf03f9c162eb23e86cd962dc35ec9cc2b495ba85a76551", 0xed}], 0x1, 0x0, 0x0, 0x20000010}, 0x24000000) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x20, 0x8, 0x6, 0x0, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x4) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x1c, 0x0, 0x20, 0x70bd29, 0x3, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24045091}, 0x40) 5m34.171732523s ago: executing program 32 (id=7749): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@ptr={0x4, 0x0, 0x0, 0x2, 0x1}, @volatile={0x9, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x30]}}, &(0x7f0000000040)=""/237, 0x33, 0xed, 0x0, 0xc673}, 0x28) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000180)={0x6, 0x5, 0x3, 0x8862, 0x4, 0x0, [{0x3, 0x2, 0x2b215e80, '\x00', 0x800}, {0x9, 0x2b30, 0x7, '\x00', 0x2}, {0x2, 0xff, 0x5, '\x00', 0xc04}, {0x8, 0x4, 0x1, '\x00', 0xc0a}]}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x8) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000006, 0x6c5d466179ae2976, r1, 0x50220000) r3 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000380), &(0x7f00000003c0)=0xe) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r2, r2, 0x12, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x8, 0x0, &(0x7f0000000400)=[0xa00000, 0xffffffffffffffff, 0x7, 0x7, 0x7, 0x0, 0x59e5, 0x5], 0x81}}, 0x30) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r4, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x59}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f00000005c0)={'vcan0\x00', 0xffff, 0xb68}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x8c, r5, 0x300, 0x70bd28, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x81}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xdf}, {0x6}, {0x8, 0x15, 0xe47b}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8041}, 0x41) setsockopt$inet6_int(r2, 0x29, 0x18, &(0x7f0000000880)=0x1, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(r1, &(0x7f00000008c0)='io.pressure\x00', 0x2, 0x0) r7 = accept(r3, &(0x7f0000000900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000980)=0x80) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x38, 0x0, 0x9, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) close(r6) sendmsg$OSF_MSG_ADD(r6, &(0x7f00000014c0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001480)={&(0x7f0000000b00)={0x964, 0x0, 0x5, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [{{0x254, 0x1, {{0x3}, 0xf8, 0xdd, 0x100, 0x2, 0x27, 'syz0\x00', "c37f16584c9086e390d5fab43c69b9913e51c29b8291698c41758f55e21dbb1c", "93ee9a5c50f6db05005f8f9c82f0081c279dc46f9d025ce1ed8949d13760c698", [{0x7, 0x260, {0x0, 0xe}}, {0x9, 0x0, {0x3, 0x8}}, {0x7, 0x2542, {0x1, 0x4e}}, {0x7ff, 0x1ff, {0x3, 0x6}}, {0x10, 0x1, {0x2, 0x2}}, {0x7, 0x1ff, {0x2, 0x8000}}, {0x8, 0x0, {0x3, 0x8}}, {0xb, 0x1, {0x2, 0x90000}}, {0x40, 0x40, {0x3, 0x6}}, {0x6, 0x9, {0x0, 0x1000}}, {0x5, 0x7, {0x1}}, {0xa, 0xffff, {0x1, 0x1}}, {0x9, 0xa, {0x1, 0x4}}, {0x9, 0xd, {0x3, 0x80000001}}, {0xfffb, 0x6, {0x3, 0xc8}}, {0x5, 0x1, {0x2, 0x748}}, {0x3, 0x9, {0x2, 0x2}}, {0x6, 0x4, {0x0, 0xfffff001}}, {0x5, 0x7, {0x2}}, {0x5, 0x4, {0x3, 0x1}}, {0x1, 0x9, {0x1}}, {0x1000, 0x6, {0x1, 0x8}}, {0x1000, 0x2, {0x3, 0x5}}, {0x40, 0x0, {0x1, 0x2}}, {0x3, 0x3, {0x1, 0x400}}, {0x6, 0x1, {0x3, 0x6}}, {0x7, 0x3, {0x0, 0x5}}, {0x2, 0x33e, {0x1, 0x401}}, {0x4, 0x8, {0x3, 0x9}}, {0x854, 0x51b9, {0x1, 0x3}}, {0x0, 0x6, {0x0, 0x1000}}, {0x0, 0x6, {0x0, 0x9}}, {0xfbff, 0xd}, {0x0, 0x12}, {0x6, 0xff7f, {0x1, 0x3}}, {0x10, 0x7a01, {0x2, 0x100}}, {0x9, 0x8, {0x1, 0x9}}, {0x100, 0x9, {0x2, 0x9633}}, {0xdb, 0x7f, {0x0, 0x81}}, {0x3, 0x6, {0x0, 0x1}}]}}}, {{0x254, 0x1, {{0x3, 0x3}, 0xeb, 0x3, 0x4ed, 0x8, 0x19, 'syz0\x00', "2f980776de3e1120b9777b5325fd0b559471284ff2a057abe12dcea266275769", "7ddd6705f9c9eb53c7d71a6921681447cfd524b53b5ff7684a939bfb0a2e9b80", [{0x5, 0x53ce, {0x2, 0x6}}, {0xa, 0x800, {0x0, 0x4}}, {0x2, 0xfff4, {0x0, 0x9}}, {0xfffa, 0x4, {0x2, 0xb}}, {0x800, 0x0, {0x2, 0x3}}, {0x3, 0x4b3f, {0x3, 0x7}}, {0xa50, 0x8, {0x0, 0x9}}, {0x7ff, 0x1, {0x1, 0x9}}, {0x0, 0x24, {0x2, 0x5}}, {0xa7c3, 0x3, {0x2, 0x8}}, {0x80, 0x5, {0x3, 0x4}}, {0x28, 0x3, {0x0, 0xfffffff8}}, {0x3, 0x649b, {0x0, 0x7}}, {0x8000, 0x7, {0x0, 0x4f77}}, {0xdc8c, 0x80, {0x0, 0xff}}, {0x2c4, 0x5, {0x1, 0x6}}, {0x3, 0x40, {0x2, 0x6}}, {0x7ff, 0x401, {0x0, 0x4}}, {0x6, 0x1ff, {0x1, 0x7f}}, {0xffff, 0x9, {0x2, 0x2}}, {0x7, 0x9, {0x0, 0x6}}, {0x3, 0x2, {0x3, 0x3be}}, {0x9, 0x5, {0x2, 0x5}}, {0x10, 0x101, {0x2, 0x1}}, {0x4, 0x8, {0x0, 0x6}}, {0x1, 0x10, {0x3, 0x9}}, {0x8, 0x5, {0x0, 0x9}}, {0x2, 0x3, {0x0, 0x8}}, {0x3, 0x5a, {0x1, 0x2}}, {0x6, 0x1000, {0x3, 0xbb2}}, {0x6, 0x4, {0x3, 0x8}}, {0x1f84, 0x400, {0x1, 0x4}}, {0x6, 0x6, {0x0, 0x4}}, {0x800, 0x1a, {0x1, 0x24}}, {0x0, 0x100, {0x1, 0x3}}, {0x7, 0x9, {0x2, 0x80000000}}, {0x101, 0xc, {0x0, 0x5}}, {0x4, 0x4, {0x1, 0xe2}}, {0xbcb6, 0xc6, {0x2, 0x9}}, {0x8ab, 0x9, {0x1, 0xff}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x8, 0x1, 0x200, 0x3, 0x16, 'syz0\x00', "b4b0c892faa614a676dcab774dff12f14390542254765b4636619d28b08a341b", "0e6c74df7b69afda0e190e8726e275905642e93853522e56ddd7e5d76fb464aa", [{0x8000, 0x2, {0x3, 0x525}}, {0x3, 0xf, {0x1, 0xd}}, {0xfba, 0x2, {0x1, 0x6}}, {0x3, 0x8000, {0x0, 0x6}}, {0x685f, 0xe, {0x0, 0x8}}, {0x6, 0x0, {0x0, 0xa}}, {0x6, 0xd, {0x0, 0x1}}, {0x0, 0xfffa, {0x3, 0x5}}, {0x4, 0x5, {0x3, 0x8}}, {0x5, 0xd, {0x1}}, {0x10, 0x2, {0x3, 0x8}}, {0xf992, 0x1, {0x1, 0xfc7}}, {0x1ff, 0xc3a2, {0x2, 0x3}}, {0xa, 0x7, {0x0, 0x7}}, {0xd, 0x100, {0x3, 0x2}}, {0x6dd1, 0xfff, {0x2, 0x3ff}}, {0x5, 0x6, {0x2, 0xb4dd}}, {0xffff, 0xd, {0x1, 0x1}}, {0xb, 0x1, {0x2, 0x4}}, {0x6, 0x8001, {0x3}}, {0x3, 0x9, {0x0, 0x6}}, {0x9, 0x2, {0x2, 0x9}}, {0x4, 0x5, {0x0, 0x3}}, {0x1000, 0x7ff, {0x1, 0x9}}, {0x7, 0x150, {0x2, 0x8}}, {0xbb6, 0x8, {0x1}}, {0xe7f, 0x9, {0x2, 0x9}}, {0x93b, 0x6904, {0x1, 0xff}}, {0x0, 0x9e, {0x0, 0x2}}, {0x8, 0x7f, {0x3, 0x40}}, {0x6, 0x8000, {0x2, 0x3}}, {0x5, 0x81, {0x3}}, {0x9, 0xfff8, {0x1, 0xb08}}, {0x4, 0x2, {0x3, 0x8}}, {0x4000, 0x2, {0x0, 0x9}}, {0x9, 0x5, {0x2, 0xf}}, {0x3, 0x4, {0x2, 0xb69}}, {0x8, 0x1000, {0x2, 0xfffffffb}}, {0x8, 0x4, {0x1, 0x81}}, {0xfff, 0x3, {0x0, 0xffffffff}}]}}}, {{0x254, 0x1, {{0x1, 0xfffffff9}, 0x8, 0xff, 0x1, 0x6, 0xd, 'syz0\x00', "288d903babe9e84140a6804cf236db20dc24064c22cc590406c510157d42a0ef", "4e2efcc875aca5db7786c16fd100885f28c2240dfa12a03e6d53973ff9564024", [{0x4, 0x8, {0x1, 0x8}}, {0x2, 0xb, {0x1, 0x5}}, {0x6, 0x5, {0x1, 0x12}}, {0x4, 0x160, {0x0, 0x10001}}, {0xb, 0x8, {0x0, 0x3997}}, {0xffff, 0x10, {0x0, 0x100}}, {0xe, 0xa301, {0x3, 0x2}}, {0xfff8, 0x7f, {0x2, 0xb}}, {0x6, 0x8000, {0x2, 0xfffeffff}}, {0x100, 0xfffb, {0x2, 0x5c1}}, {0x65, 0xc, {0x3, 0x1000}}, {0xffda, 0x7951, {0x0, 0x3}}, {0x8d, 0x81, {0x0, 0x8000}}, {0x8, 0x8, {0x3, 0xcde}}, {0x6, 0x70, {0x2}}, {0x7, 0x40, {0x2, 0x1000}}, {0x81, 0x0, {0x2}}, {0x8, 0x4000, {0x0, 0x877e}}, {0xffc0, 0x0, {0x1, 0x2}}, {0x2, 0x8, {0x0, 0x400}}, {0x3, 0xb}, {0xf, 0x7, {0x2, 0x7}}, {0x28, 0x173, {0x0, 0x9}}, {0x2, 0x400, {0x1, 0x1}}, {0x84b, 0x0, {0x0, 0xc}}, {0x5, 0x247, {0x2, 0xb}}, {0x8, 0xc, {0x3, 0x7268}}, {0x0, 0x554, {0x2, 0x63}}, {0x8000, 0x0, {0x0, 0x99af}}, {0x8e6e, 0x2, {0x1, 0x89}}, {0xfff2, 0x400, {0x3, 0xc85}}, {0x0, 0x5, {0x0, 0x10001}}, {0x7, 0x2, {0x2, 0x5eee}}, {0x51b, 0x6, {0x1, 0xb}}, {0xd7, 0x200, {0x0, 0xff}}, {0x7fff, 0xaa3d, {0x1, 0x7fff}}, {0x3, 0x34ba, {0x2, 0xf274}}, {0x5, 0x9, {0x1, 0x101}}, {0x2, 0x8001, {0x3, 0x5}}, {0x2, 0x4a05, {0x2}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$TIPC_NL_MON_GET(r7, &(0x7f0000001740)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001700)={&(0x7f0000001540)={0x1a4, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "0ed183bd83a518620667f275bed5becd91eeb029ee79f5b1"}}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x534c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa6}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x39}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x40881}, 0x20040840) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000001780)=@req3={0x7f, 0x2, 0x4, 0x8, 0xa, 0x9, 0x6810}, 0x1c) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001800)=0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000001840)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000001940)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x64, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x4004000) sendmsg$nfc_llcp(r7, &(0x7f0000001b40)={&(0x7f0000001980)={0x27, 0x0, 0xffffffffffffffff, 0x4, 0x8, 0x40, "954d7f79c02beb3892c258ade1e1dc02d328183b8f40139a05282b540879985cfee75d749405d38cc79aa7a96f75971330a40f9e4c29fe7a91df6072e07048", 0x35}, 0x60, &(0x7f0000001b00)=[{&(0x7f0000001a00)="37e316a16f0a5205695f9900b408c6ece752bf0587bd33ee6801a8415c189967a90c7cd49124e7aba638158fe5aa3f1e6c88d30c95b5bdd8bb1262c3583f7e7a39eb7c750ad3b09d3ec57259bc4d8e4a82b35b21355a4b6c6e260d1d319dffc0972cc2e3bcff5fe1864b4d4f995849cdad2e190da0ad83af63dc3f71c88aed488f906ab4116739a91cbe768bb332b5d2652591514eadc9b34420349149863ac5949528d085834f3e80dd82733c8d74fd62834b26302497df27d4b3ba5ebde83113aff9c01a98c6bae40ee99822cd6daba655d82ff341bf03f9c162eb23e86cd962dc35ec9cc2b495ba85a76551", 0xed}], 0x1, 0x0, 0x0, 0x20000010}, 0x24000000) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x20, 0x8, 0x6, 0x0, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x4) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x1c, 0x0, 0x20, 0x70bd29, 0x3, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24045091}, 0x40) 1m30.34696495s ago: executing program 3 (id=9321): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000011"], 0x128}, 0x24004004) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x40004240) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000180)={r6}, 0x8) setsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000300)=0xc6a, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000340)) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYRES8=r3, @ANYRES8=r5, @ANYRESDEC=r3, @ANYRES64, @ANYRES64=r7, @ANYRESDEC=r6, @ANYBLOB="1cc0403955e99e0edcd8f490cbdc2f6ceb05be1249a44b46d3f318f62e6cb1dc83f2bdeddd8a645ee229133de3768280a63902837666206e0d9fbbf2205efffa77ef9645daf75e1169a594bef819413f28299861851f67bb3d91df737969c9978d16cce9f4a4a7b65c6cf6e76a4129db32105664bd2e342556ee907cec96fb4bfdeb1da19f99a927c040", @ANYRES8=0x0, @ANYRES64=r5], 0x44}}, 0x7bc58dfa0bc7dd6a) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18f800000000f38b5f784255a7d7f942dfd17500000029a1aab8e424c114"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r10, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0xfffffe71, 0x4b5734940ca4ac9e}}, 0x20) sendmsg$DEVLINK_CMD_PORT_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000080000000054000000080001007063690011000200303030303a30303a31302e30000000000800030000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x0, 0x188, 0xffffffff, 0x2a0, 0x0, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, {0x6}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x15, @empty, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key=0x85, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) write$bt_hci(r3, &(0x7f0000000440)=ANY=[@ANYRES8=r2], 0xa) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000240), 0x8) close(r12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1m30.226287421s ago: executing program 3 (id=9322): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) unshare(0x20000400) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=r1, 0x26, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2, r2}, 0x4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000c40)={{r3, &(0x7f0000000800)='memory.current\x00', 0x0, &(0x7f0000000440)={@_ha_fsid={[0x7fff, 0x1]}, {0x6, 0x1, 0x3ce9, 0x1}}, 0x1000, &(0x7f0000000540), &(0x7f0000000580)=0xfffffffb}, 0x4, &(0x7f0000000bc0)=[{0x1, 0x3, &(0x7f00000005c0)='\x00', &(0x7f0000000640)="e3af8b27e9364a8e9b9897f9f7b44b28a447b37a0f7ff786388813d0408dd1c171df5b1f50453f065e3086d0d97574294b9d738c8d2f7f033fefdec8848a77852e226ee4d327f177005e39fa811b22fa03e6592033244ad4dc93ba8c9ceec0608508f0941bd1d895d7fc4bebe04b2223d52d3c1d1f1d287d04dfb85ca85ca5d7c61564770c48314f07e6b73ac5fd63c4a5bf871f11edbf566860f02910eff8823e356d2760ba2425408d48979310d719f308484650bd90f45cde99119723cc54", 0xc0, 0x10}, {0x3, 0x9, &(0x7f0000000700)='memory.current\x00', &(0x7f0000000740)="853eeb318dbd0d95feae61b9bb6e91cbf69e7709eaef6b6497c83530f93b12ebd34515e230c57a53535131a43a", 0x2d, 0x12}, {0x1, 0x7, &(0x7f0000000780)='mptcp_pm\x00', &(0x7f0000000a00)="dae89cda0da3a63dc4f9a8e315d0a093610a6c4582ec5105ace85a28ce5dd21765830d112d0fce49c62555cf7cb5830f27a2283ebd0748eed7cc07bf1873bdb6a85382f184b339d4ccf274b8c01a0959a0b657356c838f91d6cbe077dd178305a55d828361031252388e8a94cd76fd68571c2dadc86ee7d4c75a1c1008988276aa34d7ecc7686266dc041d671e0f8d3abb8c2480867576b62496665cfc35e66e09b0bba0", 0xa4, 0x2}, {0x1, 0x8befb5f1, &(0x7f0000000ac0)='ethtool\x00', &(0x7f0000000b00)="bcf2468d5b1486d01dac898edbc6e9281d2e52d957627e167dc67682c94b292cd42f913cc6012843e0c68046baad242bebbdb3058672312b922c6cb6ae4123b2ee5519622fed9bc5ea36e6fb234ba1c7e6cb09732f11bf26cd84060f48edab0cf05e18b90d184923d4708cad10ab6fa6d92733e804b748b6223835d0b1f9524d3e06c7431ea7bf9c1ff20930ed358b47173f10faf63ebb24c37f5674aab42811c5fd00216889278631abe0acdb2f49576ea65c1bc2f5", 0xb6, 0x2a}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x11, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, [@call={0x85, 0x0, 0x0, 0xe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x2000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1d, 0x18, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000ffffffff0000000006000000852000000500be0018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000060000006ed80900050000001850000008000000000000000000000018130000a993d3f648975c803769dfe84b66e0d901b6b1208549a2f5a50c7cf3c59404a81a39756d81e4b14c6b3f4facabcc96cadc95cb0d91c86a62995ab47e2cc9fc24ce8ae78e1ca0b4087cb6575e75d43c0ec2dce7fe0eccffda1fa3be", @ANYRES32=r2, @ANYBLOB="00000000000000001836000003000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x3, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffd}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r11, &(0x7f0000000240)={0x1f, 0x3, @any, 0x0, 0x2}, 0xe) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x70bd2e, 0x25dfdbfc, {0x2, 0x0, 0x49, 0xff, r14}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, @IFA_FLAGS={0x8, 0x8, 0x700}]}, 0x28}}, 0x0) connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="07000000000000000000020000022000018014000400fe8800000000000000b96e337feeb8c00000000000000108"], 0x34}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 1m29.925279811s ago: executing program 3 (id=9324): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) (async, rerun: 64) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (rerun: 64) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000004e870000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async, rerun: 32) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_opts(r6, 0x29, 0x37, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303}, "d014099aec5be3ac", "472259edad6df8f8466f0e7df1e8d838e568c15ead6b667720b09b167c5b648c", "7d870c5e", "5a1ee36789d2f0e4"}, 0x38) (async) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (rerun: 64) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) 1m28.515162895s ago: executing program 3 (id=9330): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x2) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) (async, rerun: 32) r3 = socket(0x26, 0x3, 0xffffff07) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@can_newroute={0x13c, 0x18, 0xea98cfd161013f2, 0x70bd2b, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_CS_CRC8={0x11e, 0x6, {0x9, 0x45, 0x4c, 0xff, 0x6, "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", 0x1, "fbed3e329911c6912caa362e75caa2bde35313f8"}}, @CGW_DST_IF={0x8, 0xa, r2}]}, 0x13c}}, 0x40000800) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18}, 0x800) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$nl_audit(0x10, 0x3, 0x9) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xc8) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x2}]}, 0x10) (async) recvmmsg(r5, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}, 0xfffffffe}], 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x12) 1m28.412237288s ago: executing program 3 (id=9331): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000001a00)=[{&(0x7f0000000180)=""/33, 0x21}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2) (async) readv(r0, &(0x7f0000001a00)=[{&(0x7f0000000180)=""/33, 0x21}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0xc921d000) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x51a, 0x30, "3265ae3a3c93c23b602f4fcd5f2e748624bf89f1dadaaf865cec88401dc88e990c098db6e61c4f923d4d87f679c806eb"}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb1000000080065584803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) (async) sendto$packet(r3, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb1000000080065584803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200087ad, &(0x7f0000e68000)={0x2, 0x4e20, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x11}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x94) (async) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x94) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x2e}], 0x1, 0x0, 0x2d}, 0x80) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1, @private1}}}}}}, 0x0) 1m27.33951036s ago: executing program 3 (id=9337): socket$key(0xf, 0x3, 0x2) socket$kcm(0x2, 0x200000000000001, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0xde23, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'xfrm0\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x4000002}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0xde23, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'xfrm0\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x4000002}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000017c00000c00fe80080005005208e7fd87c89a7b5a35cce49ca98eff379fecb6b1c3d3b9ecfd9a0eba99d52c79805bfbf284a5256aecbb02f95f88f949a900b625b33c39b47e921e7d6196eded44bad7fc294b3bc9906474c6541ef74ca70580295fcaa93599b05d6fd9ab3622a381582c567c943672779c4ef8113009e234af0b4dfcb5fcea4c93810c6f13f9836be1f60bad28b8d8cd3c80a92de3eb17f877398f5389411b69b9273a1f691d4976046721d533b662d3a56a2a9b96ad06a6c839a4e45b6d3cc17a0c110515b2561e7afca9f4cc233fdb9dd1455ab97dd4120f66d23baa1af61ae932850a05131da1dfb4a6b639032017", @ANYRES32=r1, @ANYBLOB="0c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002807235ab62"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 1m11.838885291s ago: executing program 33 (id=9337): socket$key(0xf, 0x3, 0x2) socket$kcm(0x2, 0x200000000000001, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0xde23, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'xfrm0\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x4000002}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0xde23, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'xfrm0\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x4000002}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002807235ab62"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 9.472246922s ago: executing program 2 (id=9735): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/163, 0xfeb2}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x410, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x340, 0xffffffff, 0xffffffff, 0x340, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xffffffff, 0x164d2c527ac5db29], [], 'team_slave_1\x00', 'vlan1\x00', {}, {}, 0x0, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x2e}, [0x0, 0xff], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x2b}, 0x0, 0x230, 0x270, 0x0, {}, [@common=@srh={{0x30}, {0xd1, 0x8, 0x8, 0x8, 0xf, 0x4c, 0x400}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x52, 0x1, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x4, 0x1, 0x9, 0x9, 0x80000000, 0x5, 0x0, 0x80000000]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x470) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x41}, 0x84c0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}}, 0x0) write$cgroup_int(r1, &(0x7f0000000140), 0xfffffdef) 9.083526762s ago: executing program 0 (id=9740): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.979075799s ago: executing program 0 (id=9741): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000001401"], 0x28}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000002300)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4008054) sendmmsg$sock(r1, &(0x7f0000005fc0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="a8bf02c4b45439770b46c8d8716b862837fb3d2521cfbf6e0da9d32b80ed8f53598f8ee6cdebd625e530bf522162e52d9499fb963c58199ec41881687ee617200eb65e1378138a86de18495fdac80e27ee262f1950facbae802d238c77e407dd0642d195ec371193cba1dcfed2ae8809cacb5d343fbbb07d07551ef3e25295c02c789ab4f31a0c634bfa81a8aef217a5049625e54b", 0x12}], 0x1}}, {{&(0x7f0000000140)=@l2={0x1f, 0x8, @any, 0x3ff}, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)="15ed88ce188bb9c754573da5365b1d5a23fb4f2b860454b50da3031c995aff343b18a04b58e7cec695a0bfebc90c9a7c82124b5c91e217cd54605b5738a4435de63f6f133e3fb599aa195e248574c584bb10d9a9976019540749107f18e541ff8681e87c8fa4e825b64aa079306ffb1e2443ca875d5c5bff1538cd549a279110a5001e152d3b9fa0f49be724258f22fc", 0x90}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000300)}, {&(0x7f0000000400)="4e95651e189b46f547516a48f37b8c30a71649a052ad07bd20ee3a0ce6a1ac43dad14bf17353b51d1556512bdcb54e35c4949f0019496272425db46f799ae8e7afe0bdd5bdd194a6ca1db3f2aae80eed841cd42a04dbba89d1ff677f3127b51a36db5ec090bda7943645567b0de2486aeb99f1bf40aa5c40651847c3b76b8c7ac37afc7af7d262e53eccae004420f801750ec7435c57c999521a2f", 0x9b}, {&(0x7f00000064c0)="ec460bb1c8c7da5d8982da57d066e634da9283140b39b823fd66c7a444d0ca5242360e8c16f2f17c202f1610d83da3ac5c23377a6420bdaf8b45a3a972c17b12d0d1fa4ae0f5fc179629618a78ce6efac18438a4aec53a6a45fa86ab1dc87d429d1b557f2cc5f0fa745e71569f7c55de57a3227cfca8f19881b8729a7a3160f1b5a0da4a52c648d6356a5f478440323a969ec9b879973a2ca2291705000000000000006be8e0ddf2c38585bc432465c1a327cd292714ead1cbb7c763df231b2276f83dd0a63e145af9536ca1d3c60e762a63ca4500d00f33db", 0xd9}, {&(0x7f0000000680)}], 0x5, &(0x7f0000000880)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x53eb}}, @txtime={{0x18, 0x1, 0x3d, 0x400000000000003}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xf26}}, @txtime={{0x0, 0x1, 0x3d, 0x8505}}], 0xa8}}, {{&(0x7f0000000800)=@nfc_llcp={0x27, r4, 0x0, 0x1, 0x82, 0x2, "2004bc3c203d1544d2ccbd0727cdc490b43acaff90db71493f398b8d15ede45573097533049cb925d47f9cf51ddb5878e79d21b3dff1b26d3f4ed81fb4aa06", 0x18}, 0x80, &(0x7f0000000a80), 0x0, &(0x7f0000000ac0)=[@mark={{0x14, 0x1, 0x24, 0x401}}, @txtime={{0x0, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14}}], 0x78}}, {{&(0x7f0000000b40)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000001d80)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-neon)\x00'}, 0x80, &(0x7f0000001e00), 0x0, &(0x7f0000000600)=[@mark={{0x14, 0x1, 0x24, 0xec}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x60}}, {{&(0x7f0000001ec0)=@phonet={0x23, 0x9, 0x3, 0x2}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001f40)="0966528756745bc431fac64ffbf310901441be82ce8abaf917b1dd21305db54ab834a0b9d0be066bf8e78826ac43046b6cccc3da0400c6cb0894423ce9c09b9486f89a692e4ec422669a8cf18a0f1122a963d660c071970888f4ff88b747c9829eb4921bebbc55a22933e482191209d510d6b80fa7", 0x75}, {&(0x7f0000001fc0)="4727bf4071da7d26df57b548a6c2fea77f0542f850ede5d0e224", 0x1a}, {&(0x7f0000002000)="4658ee46cc8044edd2f257c2ab1ca61232e5e77465cd91791e743baebc336b1ddf26de22f62f5bfad9e6d5605f4f3285d26c8895a3da501356dec0ff9a41c057df26be2ac56eb7fe29a07a2893873592597a61d76a2e30f07de5bd81641dd3eecad9b07cf81ebdfce776f0909206da8b621d69987fb8d6e3dc43ea4b6fd0cf37fa34b313", 0x84}], 0x3}}, {{&(0x7f0000002100)=@qipcrtr={0x2a, 0x3, 0x1}, 0x80, &(0x7f0000003780)=[{&(0x7f0000002180)="2e011f0da59514bf105019ac4f8e3f7d21b3b9f69382511c6a97bfd664958f4b6cc5b7bb2d33e0a80366417ad83fd2794ad6a5284df4de816a61903cc9c1a622ae1c2bf6f7b725587bb19a89dc689eb4c086dc94f338444ca8d8d7d1bed54c80fa7647f07d9cd02289f70449bdd32788f86fdafe", 0x74}, {&(0x7f0000002200)="31b8e376a97944f867a3885a8272eb2f9d88464828dfb11cee8fa7733be2211e3ece94a2c06e375eb166f0a84a4954e04bc7da87328a8b7edd5d6c3607fa573e6675f03c8a604e2260a8dc132629b7fec277c8f049ec513e7b0a812e0b71067cd90e998df36c3772bd2bfec677020e75a97a89bcc9b3cb56dad0cf38edb7b27d9debee74ff3d7928d51c183354a7d773819c0a2cf39ba2c579010ba715999a6f6a3718645cb9914bbca340578db63e60e6efdd696fa456659b5715a11431379a332f5adb9c3f093a98c945c9b6b861369d0338eb4b35e1728443de79e141afebc5124c70a1f5d44f26da6ccae100", 0xee}, {&(0x7f00000002c0)="26add99d9cc769", 0x7}, {&(0x7f0000002340)="37e38504956b8bb746c86b246db379827eec20f97ac49279540eb20139f8f05bcf2305119fc2b973029ecb09e50170a8ba7d10f3f7d64d76e361dbb55e1ef1d7ca257129ac95946d9c86da0a91c1d6ad591bd7dc7b7fc1fa379579a71aa3a496af067eeb621a6889fbd53061b70b0c849fa34620c2af452b78b3d18f2ea11925d8ac4d626dc5dbff5c2952496e302be32617adb74cbf5e43ce9abe673e968d1b41d3cfcf6afab72e63a755720df3a9f1888dd21bfe8d3e25e23e0c368a6a7aa027ce7d47d067c17a3f86d83dd61e723af2e4ff7ca66a026654105053efab815b470faf", 0xe3}, {&(0x7f0000002440)="a631671b125055a08563ec1f76556ffb162bf9bf30355271da93635d63517c6f9ee5833e322c12d554749e651665ac98d2cc321e083e9eb78a1faacce1ff7ae52522b51ecf5924e8141b52c7da2a6a1b7453fddf066a", 0x56}, {&(0x7f00000024c0)="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", 0x1000}, {&(0x7f00000034c0)="b2e439cc26d4d78d09733cf2f0eec2d6f574f63c4ef9d571c07da25f42aa93e81b31e41c5b49cb0e623e3fb0ce7eac3dfb096416d02effcdb492daa8ff3b5a26cd5c79aba5ffeb0c719bc3dd3e16b2faf0bd91d559232aff766ea6b2adbb127b2e7afb0cfba4ed0525627fb6a6711cbf7fbc490ec575b61ab96dd1122760843aebad0cbfdbd599be0ed40195d73268e140f86eedbb4db0a0a0ba4405c8aaa4e3227508f672052adac8da2457d7dfc5144d62cae704fc1191787c7225dab44943b781be", 0xc3}, {&(0x7f0000006380)}, {&(0x7f0000003680)="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", 0xfc}], 0x9}}, {{&(0x7f0000003840)=@isdn={0x22, 0x2c, 0x2, 0x9, 0x4}, 0x80, &(0x7f0000005c40), 0x0, &(0x7f0000005cc0)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x68fd}}], 0x30}}, {{0x0, 0x0, 0x0}}], 0xa, 0x0) unshare(0x20040600) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="200029bd7000fbdbdf25100000000800092000070000080009000500"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040804) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c0010000000018001a9050000000000000060", @ANYRES32=r5, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r6, 0x800000}, 0x38) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)="e8700e444d", 0x5}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xa008) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0xe8, r9, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfb95}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2ee}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5f74}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x28}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xad}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40801}, 0x4001) 8.403508671s ago: executing program 2 (id=9748): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req3={0x26e00000, 0x8, 0x10000, 0x4, 0x0, 0x7, 0x8}, 0x1c) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xfffffffffffffde5, &(0x7f0000000080)=[@in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000000140)=0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) unshare(0x20010000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000001c0)=0x1003, 0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)={0x0, 0xf7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000480)={r5, 0x9c, "9af09f5f513e086dbbc8d6e7eab28bf9236504760fdc2c011e702835da724343671c241bd4502611959f3437b93a189ce3d6914d49f61375dba6980e821338462eefdc8b4674b6055c7e63d6469eda14af76ae599912a61027da7785561444e442762abd227a17c000de7758016417eca2aaaa8241a74415810a7c20ca820886322339ca952f7c9cb44124994025096692d3f0b7b00aad8b4bc2c548"}, &(0x7f0000000100)=0xa4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r1, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) close(0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000a40)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRESOCT], 0xfdef) 6.646980345s ago: executing program 0 (id=9759): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="88020100", @ANYRES16=0x0, @ANYBLOB="00002abd7000ffdbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0008000000080001007063690011000200303030303a30303a31302e300000000008000b00e60200000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00f8090000"], 0x88}, 0x1, 0x0, 0x0, 0x4c000}, 0x4080) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd700000000000647262675f70725f686d61635f736861333834"], 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_crypto(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x4000014}, 0x840) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0xd, 0x0, 0x4, 0x7fff, 0x3, 0x708, 0x0, 0xe7ad, r5}, &(0x7f0000000080)=0x20) ioctl(r0, 0x8b1b, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@gettaction={0x3c, 0x32, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r6, 0x29, 0x4b, 0x0, 0x0) 4.916008278s ago: executing program 4 (id=9774): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.902646935s ago: executing program 4 (id=9775): socket$kcm(0x21, 0x2, 0x2) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a00)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0x0, 0x190, 0xffffffff, 0x190, 0x190, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @dev={0xac, 0x14, 0x14, 0x72}, @local, @icmp_id=0x65, @gre_key=0xfffe}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @private=0xa010102, @rand_addr=0x64010101, @icmp_id=0x65, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x14, @multicast1, @loopback, @gre_key=0x40, @port=0x4e22}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xff, 0xff, 'vxcan1\x00', 'ip6_vti0\x00', {0xff}, {}, 0x21, 0x5, 0x1}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @gre_key=0x8, @icmp_id=0x64}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x8, 0x4) socket$alg(0x26, 0x5, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) pwrite64(r2, 0x0, 0x0, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x8, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) accept$alg(r2, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000100)={0x80000000, 0x0, 0x0, 0x0, 0x800, 0x0, 0x8000100ffffe}, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) 4.497754399s ago: executing program 5 (id=9776): r0 = gettid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) 4.351783126s ago: executing program 4 (id=9777): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414f6030490781200183f2500000000000000000100007f"], 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000002880)={&(0x7f0000001f40)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8c2}, 0x1c, 0x0, 0x0, &(0x7f0000002540)=ANY=[@ANYBLOB="180000000000000029000000360000000800000000e2ffff23000000000000002900000032"], 0x40}, 0x40) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0xefffffff, @mcast1, 0x5}, 0x80, &(0x7f0000000080)=[{&(0x7f00000003c0)="f4000900062b2b25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x400800c) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', 0x0}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095", 0x4a}, {&(0x7f0000000c00)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb68ce9ead3459bab1cf", 0x56}], 0x3, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0xa0}], 0x18}], 0x1, 0x4000090) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x25a, 0x0, 0x1}}, 0x40) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/223, 0xdf}], 0x1}}], 0x1, 0x42, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000240)={r6, 0x1, 0x6, @random="00000200"}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000780)={r6, 0x1, 0x6}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$key(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000009c0)={0x2, 0x3, 0x8, 0x9, 0x41, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_lifetime={0x4, 0x3, 0x1145, 0x1000, 0x3, 0x1}, @sadb_key={0x2000000000000016, 0x8, 0x178, 0x0, "2e59c109e14254741b5d4efe6a9619f793eca3fbb3f1788de22c9ba22d350fbc18eab8f80bf4fb7a2257c812a405f9"}, @sadb_x_sec_ctx={0x1e, 0x18, 0x3, 0xe5, 0xe1, "7cc554ba3c5a87c2281070b819650e401ef7e08e805d51317f6e137a0db48f66283c82ec45af82d8cdc5b97b88ba983d25976f2f956ff632b030e6e1944cc275b253d7b84b07e70ab4dd5ce2f212d58e2072d2e4e4e0be37bd7f6da2816bd5bed0da4b37b8098797d0504edb0976de6e0f77363dfb0792ac64f8c724908e8fcaf14237294d240327268ca96bd7ffb855019392f83006d0f9d6cc65eefca5c9ed0a9b4ebe394efa303e33632411196937d00feaa040e25913a45813761e7530c6015fbd24f2e1cb3ead336379b09cbc0359e30f14dc42170addb8694ee6aac63202"}, @sadb_address={0x3, 0x7, 0x2b, 0x80, 0x0, @in6={0xa, 0x4e21, 0x80000001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}}, @sadb_x_filter={0x5, 0x1a, @in6=@rand_addr=' \x01\x00', @in=@broadcast, 0x9, 0x4}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @multicast1}}, @sadb_lifetime={0x4, 0x3, 0x1, 0xffffffff, 0x2, 0x7}]}, 0x208}}, 0x8000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0x22e2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0xffff}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r10, 0x0, 0xd4, &(0x7f0000000040)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f00000002c0)={'macsec0\x00', @random="0100061f8145"}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) 4.223238114s ago: executing program 5 (id=9779): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYRESDEC], 0x78}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000240)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x7, 0x2000000024be, 0x2000000024ee, 0x5], 0x20, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESOCT=0x0, @ANYRES16=r1, @ANYRES32, @ANYBLOB="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"]}, 0x31c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_emit_ethernet(0x1f, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0011aaab63f429acda6d866175f876a76c0cee145e4c67651dcaac"], 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') unshare(0x6a040000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x2e, 0x5, 0x72}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) unshare(0x2010100) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r5) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB="001280ee000100626f6e64000000001c00028005002ac604002000080020000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 4.11106345s ago: executing program 4 (id=9780): bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="27738d50c7f5"}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000080), 0x2, 0x0) sendfile(r6, r6, &(0x7f00000000c0)=0x4, 0x38c6) recvmsg$unix(r3, &(0x7f0000001180)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000140)=""/61, 0x3d}], 0x1}, 0x10200) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000000)={r8, 0x12, 0x30}, 0xc) r9 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x60, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x60}}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001200)=ANY=[@ANYRES8=r2, @ANYRESHEX=r8, @ANYRESHEX=r4, @ANYRES64=r0, @ANYRES8=r4, @ANYRES8=r2], 0x48}, 0x1, 0x0, 0x0, 0x20040080}, 0x20400c1) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r4, 0x40105870, &(0x7f00000011c0)={0x9, 0x8}) ioctl$NILFS_IOCTL_SET_SUINFO(r4, 0x40186e8d, &(0x7f00000010c0)={&(0x7f0000001000)=[{0x32ea, 0x2, 0x0, {0x65, 0x80, 0x2}}, {0x151b, 0x3, 0x0, {0xfffffffffffffffc, 0x3, 0x1}}], 0x2, 0x20, 0x8000, 0x2367}) 3.492676774s ago: executing program 6 (id=9784): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200003d06e6ff0000000007000000850000002c00000085000000a000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001600010000001000000000000a000000", @ANYRES32=0x0, @ANYBLOB="14000200fe8000000000000000000000000000aa"], 0x2c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.059566431s ago: executing program 6 (id=9785): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.919809993s ago: executing program 6 (id=9786): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="18080000ddf7ffff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000a600da4cafd22bc150e33ed23a190000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000739af8ff00000000b509000001000000dbaaf8fff1000000bf8600000000000007080000fffdffffbfa400000000000007040000f0ffffffc7020000080000001822000034a623414d5b50e364e555c5417910eedc4827b27035170a087c5859539e6dec2c8154f1ad4a71b2ae1f324f11f7e2196617f8c62ab9dfd5fcaca45928c60c60e9080a6e0a64", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="18080000ddf7ffff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000a600da4cafd22bc150e33ed23a190000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000739af8ff00000000b509000001000000dbaaf8fff1000000bf8600000000000007080000fffdffffbfa400000000000007040000f0ffffffc7020000080000001822000034a623414d5b50e364e555c5417910eedc4827b27035170a087c5859539e6dec2c8154f1ad4a71b2ae1f324f11f7e2196617f8c62ab9dfd5fcaca45928c60c60e9080a6e0a64", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0xb8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0xb8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x26c, r6, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffe01}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20310000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf2ed}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x362}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5e2}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x12}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc60}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x44800}, 0x2004c005) (async) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x26c, r6, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffe01}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20310000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf2ed}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x362}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5e2}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x12}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc60}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x44800}, 0x2004c005) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@delqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xe, 0xffe0}, {0x5, 0x1}, {0xc, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4f484}, 0x4000040) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@delqdisc={0x24, 0x25, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xe, 0xffe0}, {0x5, 0x1}, {0xc, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4f484}, 0x4000040) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xc8}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xe0}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x7e}]}}}]}, 0x4c}, 0x1, 0xd, 0x0, 0x4000000}, 0x0) r11 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x138, 0xb, 0xd0e0011, 0x138, 0xc6, 0x210, 0x1d8, 0x190, 0x210, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x138, 0x7000000, {}, [@common=@icmp={{0x28}, {0xd, "0010", 0x4}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0x0, 0xff]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x2, 0x0, [0x22, 0x18, 0x3e, 0x24, 0x2b, 0x26, 0x29, 0x25, 0x0, 0x3a, 0x26, 0x2c, 0x4, 0x2d, 0x1b, 0x3b], 0x0, 0x1, 0x9}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'vxcan1\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x0, 0x0, 0x20000, 'snmp_trap\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) socket$packet(0x11, 0x3, 0x300) (async) r12 = socket$packet(0x11, 0x3, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r13, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) unshare(0x2c020400) (async) unshare(0x2c020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xff, 0x1, 0x7fff, 0x80000000, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0xcf12, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x4, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0xd, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf6, 0x5, 0x5, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x1, 0xfffffefd, 0x6, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x800102, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x403, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xff, 0x1, 0x7fff, 0x80000000, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0xcf12, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x4, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0xd, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf6, 0x5, 0x5, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x1, 0xfffffefd, 0x6, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x800102, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x403, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000100)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000100)='GPL\x00'}, 0x94) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r12, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendto$packet(r12, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockopt$IP_SET_OP_GET_BYINDEX(r12, 0x1, 0x53, &(0x7f00000002c0)={0x7, 0x7, 0x1}, &(0x7f0000000380)=0x28) 2.575919202s ago: executing program 6 (id=9787): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x2d, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000240)={r2, &(0x7f00000000c0)='!}\xa5\\@)$*]\x00', 0x80000, &(0x7f0000000140)={@align=0xb, {0xa70, 0x9, 0xdda, 0x6}}, 0x9, &(0x7f0000000280)={@_ha_fsid}, &(0x7f0000000180)=0x401000}) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) close(0xffffffffffffffff) r4 = socket(0xf, 0x8, 0x3) getsockname(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x2) shutdown(r2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @local, 0x4e24, 0x0, 'fo\x00', 0x3c, 0xc, 0x5c}, 0x2c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @restrict, @union={0x0, 0x0, 0x0, 0x2, 0x0, 0x3}]}}, 0x0, 0x56}, 0x28) connect$unix(r2, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept(r5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000780)={r3, &(0x7f0000000640)="078cb5ba9ba107e95f6d56abe5604f6134d544f5ba38c39d200e22d3a60c41ea2d3bff24c49842ed0a0a554339297efe95a5777d2ab422569a1de8ba8ff862fa778ae9ebc9c910f1ca1b826c7d2b3e99e2a298a795335df82b6cc54db07cf3a2154adddb83dd626a57a747c6fe430c588cecf2f30ebabc62241a156eaf177e0c9e0440704b6b83d3b67274a8c9cfe4b488604053989a90f35630d9faf3df1815787cc4aae16a6c2dc5544a8d50e5aea815f5e9d998eec52bfe609cc09d073e92a0fb5c56553eef8d63be7c5ff558739c", &(0x7f0000000740)=@tcp=r4, 0x1}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10) 2.443611472s ago: executing program 2 (id=9788): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="000100000000e8cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@ipv6_newaddr={0x34, 0x14, 0x200, 0x2, 0xfffffffe, {0xa, 0x40, 0x8, 0x0, r2}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_CACHEINFO={0x14, 0x6, {0x9, 0x9, 0x2, 0x1}}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="1400020000000000000000000000ffff"], 0x34}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000380)={'veth1\x00'}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x5, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x100}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x200001d4}, 0x8840) sendmsg$AUDIT_LIST_RULES(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x3f5, 0x9d252722643056ca, 0x70bd25, 0xa5dfdbff, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20}, 0x800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)="1400000016000b63d25a80f77311d12022508ec9a280c1877fb9494b3efd6422b3a1471c070000000000000036a8ec7284e9dfa4b143947091460dfed9682a69b7bf85496a94ac7112c28b08d44b0045d1fcb429e2ec1e9c50e35076de3005251d18ff1c7cc04617871e6bf72833bbcb401f3b770a565f40920055535cd3bf29b167a87d03372f25f602f6d4241d514230dbedc2fbf390266b0d031f00977dc116e966d4b0c2106b8febbfc97038253fc92255723d706166950fa8", 0xbb}], 0x1}, 0x20000080) epoll_create1(0x0) 2.242788305s ago: executing program 2 (id=9789): ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000000)) r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={{r1}, 0x3ff, 0x7, 0xa906}) ioctl$FICLONE(r1, 0x40049409, r1) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x248, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3b}, 0xff, 0xffffff00, 'syzkaller1\x00', 'vlan0\x00', {0xff}, {0xff}, 0x67, 0x2, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@loopback, @multicast1, 0x0, 0x7fffff80, 'macvlan0\x00', 'veth1_to_team\x00', {0xff}, {}, 0x84, 0x1, 0x2}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x20, 0x96}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x0, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) r2 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x80800) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000480)={0x62, 0x30, '\x00', [@calipso={0x7, 0x50, {0x3, 0x12, 0x1f, 0x4, [0x9, 0x401, 0x40000000, 0x4, 0x8001, 0x4, 0x6, 0x100, 0x4]}}, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0xfe}, @jumbo={0xc2, 0x4, 0x1000}, @generic={0x7, 0xe2, "d51e30a74ea6402e89636fac889c0a6fbdf56614e5a1f5ad1fffa7440536dadc84ea88b92619213d1497d86ec18f4729922bf5b7b5c6622f25e385f13b50b5f82aecd12eaacb16e91481159976d0129fa117c6057e2591dada2fb9269e8453b088ecdaabd12526301ff4da99353eeaa19cd2700ee1fe3f17e00fdca0b390a0806505b1c857e4a071b47b588513da39a5d9286a12c1d762c7e91185f75f4163a3a7e935e18344ec455b2ed6475ba793801a6af275466b3df567dbbdc6ef38227fdffe2825e2fb330d706de3041ebde7361ddfe9584cb4f7c3959f5c7488a8418e6eec"}, @calipso={0x7, 0x30, {0x3, 0xa, 0x7f, 0x4, [0x10000, 0x6, 0x2, 0x2, 0x2]}}]}, 0x190) vmsplice(r0, &(0x7f0000001a40)=[{&(0x7f0000000640)="f185e645a8da7472030f292cb280c0dfcd4703e6bd52a023b30870078791341a067ccd2e0b3d7e229c68e76358c9c4977b8337a12633324f904e0ae6", 0x3c}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="d9ece6a7ff7080f8d1f3533a7d217d9cfe2c679d246320f691e28717557d6bc92ebfa33ce6466bd4f252ff90ed1c73900105af6a017257d6a4c0d069f2dca29dc1e94d2fc2b0", 0x46}, {&(0x7f0000001700)="263b305114f0709c180816a83fc40f6e5afaed71de6acd48186a4ea74e8535f0cc826428123c725757eef57d2f63edd0f9be4f42da8db82fe6c5d48b575dcf68dd61a645243c30d2b8ca5fe61a244f374c2b13194b43ddd8f471ae04d9959fbf83e5d070a65b7b94df5c81553c9868799acb4538ffdde6babb5e2f9fece60d069909d63c3a57c6d4d33b9d371bd1c92cb70a7b7bb421ddbcd94f6f97af65", 0x9e}, {&(0x7f00000017c0)="b98d2db2d84d38c53a33859e9f55fda7d7f2eeedf8553a5685a326811d29ca80cead3405d46b31215c9cc4fc20e8c7a46926a3d3eb45ad04fe0ad8cb9905c5958396e646d0c27fb28d5b390e010a67a0eadd9db4d9d7d3eb015463016b92c905fb7b21f2b0f136028088d079118b89bc5bd571830dfb286c48d7e8f2b38e01aa48a8d5e93b62e8b7f66360a3c7fd5cb9f9d0b9f7", 0x94}, {&(0x7f0000001880)="16c05b3f2466702d9df825f852f4ce1e7e5bdfd91beb06a8a712dced831981c8edf9af35fe5444fe9085c7a967db8d8e68b80ea1f6b02de9da8387eb91ef3d3d06554d774ed6683cf927c442d8654ce598dc2766fe6e291c1744249f4eaa996082ba09ef6bd7d00704c5eb304cb190b18086837ed7e53a16b3c9da296cb5f7815753770ef73f0e105a599c15b97328caa8115669a3b4daec8c5c5e9d6114", 0x9e}, {&(0x7f0000001940)}, {&(0x7f0000001980)="bb0b81fa14a7f50867666d892069b58111edb5c79bdd0d9431bb48ec036656fcac76822c31a760f48bfae6a8f3446babc431ab8d2d24f6c435388ade1caa7ff95072e27fddf6d8f6ee200c288f0a6c3a09e8457188c19e2640b369228cf4dca9cc78b94f5b49e7ed2d871cae4d80c1ce97fb0a31fd07ea029af0b5b86cae1d8f8092892de3d763f0dd", 0x89}], 0x8, 0x9) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000001ac0), &(0x7f0000001b00)=0x30) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001bc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001b40), &(0x7f0000001b80)='%pi6 \x00'}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001c80)={'syztnl0\x00', &(0x7f0000001c00)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x7, 0x4, 0x10, @mcast1, @empty, 0x8000, 0x40, 0x7, 0x68}}) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000001e40)={r0, &(0x7f0000001d40)='macvlan0\x00', 0x0, &(0x7f0000001d80)={@align=0x50c, {0x8de, 0x5, 0xfffffbff, 0x4}}, 0x50c89e8, &(0x7f0000001dc0), &(0x7f0000001e00)=0x80000000}) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001e80)={0x0, r3}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001cc0)=@base={0x11, 0x5, 0xff, 0x200, 0x1c000, r4, 0x10, '\x00', r5, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x0, @value=r6, @void, @value=r7}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001ec0)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r3, 0xc0186e87, &(0x7f0000001f80)={&(0x7f0000001f00)=[{0x2, 0x100000000000000, 0x8, 0x1, 0x100}, {0x200, 0x6, 0x2, 0x8, 0x2}], 0x2, 0x28, 0x5, 0x9}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001fc0)={0x0, 0x0, 0x3c49, 0x4c}, &(0x7f0000002000)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000002040)=@sack_info={r8, 0x1, 0x7f}, &(0x7f0000002080)=0xc) openat$ppp(0xffffffffffffff9c, &(0x7f00000020c0), 0x4180c0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f0000002280)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x10040800}, 0xc, &(0x7f0000002240)={&(0x7f0000002140)=@newqdisc={0xf4, 0x24, 0x4, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xf, 0x9}, {0x5, 0x6}, {0x4, 0x1}}, [@q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x95f}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x5}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x88}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x17e9}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1c}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7f}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1eee}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}]}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x45}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f00000023c0)={0x33, 0x6, '\x00', [@padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x31}}, @ra={0x5, 0x2, 0x2}, @calipso={0x7, 0x10, {0x0, 0x2, 0xac, 0x0, [0xd9]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x10000}]}, 0x40) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000024c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x20, 0x1, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x804) recvmmsg(r1, &(0x7f0000005ec0)=[{{&(0x7f0000002500)=@isdn, 0x80, &(0x7f0000002940)=[{&(0x7f0000002580)=""/168, 0xa8}, {&(0x7f0000002640)=""/229, 0xe5}, {&(0x7f0000002740)=""/185, 0xb9}, {&(0x7f0000002800)=""/152, 0x98}, {&(0x7f00000028c0)=""/72, 0x48}], 0x5, &(0x7f00000029c0)=""/4096, 0x1000}}, {{&(0x7f00000039c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000003d40)=[{&(0x7f0000003a40)=""/224, 0xe0}, {&(0x7f0000003b40)=""/149, 0x95}, {&(0x7f0000003c00)=""/3, 0x3}, {&(0x7f0000003c40)=""/217, 0xd9}], 0x4, &(0x7f0000003d80)=""/106, 0x6a}, 0xfffffffd}, {{&(0x7f0000003e00)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000003e80)=""/58, 0x3a}, {&(0x7f0000003ec0)=""/254, 0xfe}], 0x2}, 0x5}, {{&(0x7f0000004000)=@tipc, 0x80, &(0x7f0000004340)=[{&(0x7f0000004080)=""/204, 0xcc}, {&(0x7f0000004180)=""/56, 0x38}, {&(0x7f00000041c0)=""/23, 0x17}, {&(0x7f0000004200)=""/253, 0xfd}, {&(0x7f0000004300)=""/62, 0x3e}], 0x5, &(0x7f00000043c0)=""/225, 0xe1}, 0x8001}, {{&(0x7f00000044c0)=@tipc=@id, 0x80, &(0x7f0000005800)=[{&(0x7f0000004540)=""/215, 0xd7}, {&(0x7f0000004640)=""/4, 0x4}, {&(0x7f0000004680)=""/4096, 0x1000}, {&(0x7f0000005680)=""/189, 0xbd}, {&(0x7f0000005740)=""/31, 0x1f}, {&(0x7f0000005780)=""/22, 0x16}, {&(0x7f00000057c0)=""/53, 0x35}], 0x7, &(0x7f0000005880)=""/231, 0xe7}, 0x2}, {{&(0x7f0000005980)=@x25, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000005a00)=""/165, 0xa5}, {&(0x7f0000005ac0)=""/199, 0xc7}], 0x2}, 0x1}, {{0x0, 0x0, &(0x7f0000005e00)=[{&(0x7f0000005c00)}, {&(0x7f0000005c40)=""/222, 0xde}, {&(0x7f0000005d40)=""/152, 0x98}], 0x3, &(0x7f0000005e40)=""/87, 0x57}, 0x1}], 0x7, 0x40000102, 0x0) r9 = syz_genetlink_get_family_id$team(&(0x7f00000060c0), r6) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000006180)={'syztnl2\x00', &(0x7f0000006100)={'syztnl2\x00', r5, 0x40, 0x40, 0xf, 0x8, {{0x11, 0x4, 0x2, 0x4, 0x44, 0x68, 0x0, 0x16, 0x0, 0x0, @rand_addr=0x64010101, @private=0xa010100, {[@noop, @noop, @timestamp_prespec={0x44, 0x2c, 0xc5, 0x3, 0x4, [{@multicast2, 0x3}, {@local}, {@rand_addr=0x64010101, 0x1ff}, {@empty, 0xc}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x8000}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000006980)={&(0x7f0000006080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000006940)={&(0x7f00000062c0)={0x678, r9, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r5}, {0x224, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6d}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x74}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r5}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r5}, {0x1f8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0x7, 0x7, 0xe0}, {0x2, 0x8, 0x9a, 0x3}, {0x0, 0x40, 0x8, 0x9}, {0x7, 0x0, 0x7a}, {0x7ff, 0x92, 0x9, 0x5}]}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x8, 0x40, 0x7}, {0xbb, 0x2, 0xc, 0x400}, {0x1000, 0x3b, 0x0, 0x1}, {0x3, 0x2, 0x5, 0x1000}, {0x2, 0x42, 0x81, 0x723}, {0x2, 0x6, 0x0, 0xc}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x678}, 0x1, 0x0, 0x0, 0x1}, 0x10) 1.815256884s ago: executing program 0 (id=9790): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x17, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.699336597s ago: executing program 5 (id=9791): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7b, &(0x7f00000000c0)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f0000000300), 0x8, 0xb5, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x2}, {0x2}]}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000240)=""/220, 0x40, 0xdc, 0xa}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) 1.619906082s ago: executing program 4 (id=9792): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0441, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f00000001c0)=0x20000002, 0x4) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r4, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f9806", @ANYRES32=0x41424344], 0xfce) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x40, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x8, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9436}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}]}}]}, 0x40}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x3, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x40000) sendto$packet(r0, 0x0, 0x0, 0x870, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x14) 1.154070557s ago: executing program 2 (id=9793): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x54, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x10000}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb8}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xd, 0xa}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xfffffff9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004001}, 0x20008000) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x20040001, 0x604, 0x2, 0x0, 0x0, 0x0, 0x4}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x64, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x4}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x7}, @IFLA_BOND_MIIMON={0x8}, @IFLA_BOND_ARP_ALL_TARGETS={0x8}]}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x64}}, 0x40) 1.054851687s ago: executing program 5 (id=9794): r0 = socket$key(0xf, 0x3, 0x2) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000000000)={0x1000, 0x3, 0x1, 0x5}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x7, &(0x7f0000000040)={0x0, {{0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3ff}}, {{0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}}}, 0x108) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001a00)={{r1, &(0x7f0000000180)='.]{:\\\x00', 0x723c80, &(0x7f00000001c0)={@align=0x8, {0x1, 0xce34, 0x101, 0x2}}, 0x10001, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0xf}, 0x7, &(0x7f0000001900)=[{0x3, 0x1, &(0x7f0000000280)='\x00', &(0x7f00000002c0)="c4767ebe8f04be35188b41277b72616c8c25e0bb554ea31df71109ccc9a098b1e718389b00a08439bf920ce27bf1f3fe62f25b439f03781df20c1d6483b1619e6672cccdcd04a32a7ff1615b232c19ce9666bb53031b6cab7092c7b6fc36e3880131e0422e0eb3e3cc24442cb5aa5537ae1a4eaaa43b9b43b2737d518566acb9cb69b2ece92c4591a133963ba5a8fc325b5b83a6833b7744afa389984280eac2541e1972cdcb93b365f63c10", 0xac, 0x10}, {0x2, 0x1, &(0x7f0000000380)='\xff\xff', &(0x7f00000003c0)="970e3481e695bb602f67e04aed203e430ec6a2c7105c6094b9c4e45966bb98883506368ce061fcd74add64330265f0589faec4cde20e2cad8e480fc9468d0e99df90ff139690d629f293b814e31c445d40b45f282757b7a8687f25e00f00208f52e6cffe4a68cd1ebb70f07da6d805b965d1b9c1ba639db5bd7d04eb6089f925cfbf847b69d37dea2f66227de0143b37068597b3b8df8127df41d4a7b38fb57a380b170b77361b7bcd80e5b3859b3a9eb0b69bb548de11c8e781449b726f41be272dcca253f86f01fedc83630d0a7ff4210fd6f93bd169172633c2f157c75b5c47ffd497d414623411f7bed0765afd11", 0xf0}, {0x3, 0xd7, &(0x7f00000004c0)='\x00', &(0x7f0000000500)="06f18f8cae07f9cdf69919bf1a10cc2d02152b8e44976716004baa0b1400eef62a8f8f143d18363594272ce8aae4febbc2fed02b680e1725f823eaeb59ba1856ab649d68f1d81be655df50c811ff06829bfc1a5a1b0d07c342e36b495f467f109104835e949044d2e8645cfeed424c8d8b192b73a73069ba54b4eb57fab5c6d2ff6e65955744f997c21d4ad43b1b4750fea85cff7d5964b03e60cf415793fac60b44cdcb4320a8a351a34134d87070d086af34028840e8446e19969a9ed3d59e503bd475daebf344d87542fd65ca845e2ba6ea946016d385af3e22ca7fd64dc126b200792c32c53a534d91", 0xeb, 0x3a}, {0x1, 0x200, &(0x7f0000000600)='\x00', &(0x7f0000000640)="2c663f26a23542ff2c587f33a353e528cdfdb55a48a6ccc2dbd30dbefc7e056697a77132a1d33eb7c6b178b67eea8007c457cb8755b23522a41e3b3a4966a461998b8be7c9354a40b26e97c7d932197c019614b61ce3b0167b3c6fa38cd18c87a25545b25915e0bf294908b641cb1896757752c417f98c707f7b461f87b7514753557597cc5173c105d341a68b63d7e2d5fbd750123fedd6a64cf7685344eb86b5d4ae26336b2582ec88", 0xaa, 0x3a}, {0x2, 0x0, &(0x7f0000000700)='\x00', &(0x7f0000000740)="371290a97048c3d5cbf78b9a44e2a70fbd114b453aa72d1f3705b6ddd259d96adffa5412070ffb00213e37bbbb776fe3b623e2a99916fb60e20b46ebf6dab05f13f6ccc6fc778475f6b86954940bc9f62db1012a350297b05d651cef0c8b53837736da0206d0af534661c3dfa745c976e8a1ebd7a83786f5447d18afbb1ca0354d849fe4cb8b03d94460fc84927c7756e4513a7f6530e1984c2a482e9929e1ab27487d923cbb4e97e58d759980d5416d52f8f55edd2fe22a76fd95303a519443619a87a573690973110b60aa01da3435434bdcec2921f75475d7e95796d46b6c5afadd698edad49ca43205c665b3a99200b5c6be71", 0xf5}, {0x3, 0x6f, &(0x7f0000000840)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000880)="2043ba2567293915bda64d7c0b", 0xd, 0x28}, {0x2, 0x2, &(0x7f00000008c0)=',.\x00', &(0x7f0000000900)="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", 0x1000, 0x32}]}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x24, r3, 0x720, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x2}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20004000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c40)={{r2}, &(0x7f0000001bc0), &(0x7f0000001c00)=r2}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001c80)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d80), r4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000001ec0)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x64, r6, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044800) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x80, r6, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x80}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ae}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000028c0)={0xff6, {{0xa, 0x4e20, 0x8000, @private0, 0x7}}, {{0xa, 0x4e23, 0x401, @mcast1, 0x2}}}, 0x108) 919.144085ms ago: executing program 6 (id=9795): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200003d06e6ff0000000007000000850000002c00000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x7a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634e250fb5b", 0x10}, {&(0x7f0000002400)="a18d55b6456bac655039b6a674900d579347393e35fdeed1fa8f68a4b05addbeeb0fbefbde6bcf26771ea0fdc771a23b3fb0462475833a25704ba4e839ef72c08766edbf2dafc979b1d9652f1c53fb2e2103f0a9f761bea9623c0673bd281cfce139ddb9aaa0c712059e85784fcd6fd8d48f99fc8147ef98dcc988d989d4c301", 0x80}], 0x2, 0x0, 0x0, 0x8000}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x158e87948cd542ef}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="900000000002010400000000000000000a100000040001803c0003800c0002800500014d060000002c000180140003002001000000000000000000000000000014000400ff0100000000000000000000000000013c0002800c00028005000100860000002c00018014000300ff02000000000000000000000000000114000400"], 0x90}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r4, @ANYBLOB="100001"], 0x28}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r5, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000004, @mcast2, 0x4}, 0x1c) write(r5, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4805c}, 0x0) 728.696781ms ago: executing program 5 (id=9796): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 671.267902ms ago: executing program 2 (id=9797): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f00000005c0)={&(0x7f0000000200), 0xc, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="dc9e0000", @ANYRES16, @ANYBLOB="00012dbd7000ffdbdf254d0000000800030000000000080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000002900a800cdb955fa4b78a0bcf636858359a2e7c2aede40bd8ac653c8754731e0708a5f2f04ea816f3d000000"], 0xdc}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028005002d00200000001ef540574773755e5e48dc7edb27394d97ad76e9d5a0bfc624177363d041a1d277a0385d27eae1b70fb6"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000080)) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4c854}, 0x800) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="4c000000f702010100000800000000000500ab9308000440000059322800028006000340000100a2ee00316203400005400004000180080001000a010100"], 0x4c}}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000003900)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x348, 0x98, 0x2b0, 0x218, 0x98, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x14}, 0xff, 0xff000000, 'batadv_slave_1\x00', 'bridge_slave_0\x00', {0x59e9ca6af987edf9}, {}, 0xda, 0x3}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3b}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'geneve0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x42}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x7, 0xeec}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r6, &(0x7f0000000100)="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", 0xfb, 0x0, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="d15e5aac9b12532c73a0463d4c8f15ba1feae1e576d8c90e66ef6afa3f25c19a307f2e2ff630c855c1e5fe66dbae4d5584efd85e4375a9e9a1df51e730140b1fc16eba73b4e13a5f1c835eefe2b35db74acf73a13a71bcafd4b0939dabbf81ec"], 0x13a0}, 0x1, 0x0, 0x0, 0x20000045}, 0xc000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x20000043}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a3000000000140000000000000000000614000000110001000000000000000000"], 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r9 = accept$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(r9, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 521.487017ms ago: executing program 0 (id=9798): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, 0x10, 0x107, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x6, 0x1, 0x0, 0x1, [@generic='@\x00']}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000100)) getsockopt$inet_buf(r0, 0x118, 0x1, 0x0, &(0x7f00000003c0)) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) listen(r2, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0xb, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r2], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffefc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x81) 473.77361ms ago: executing program 5 (id=9799): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3000000}, @generic={0x67, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfffffff8}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xfff}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3000000}, @generic={0x67, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfffffff8}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) (async) 8.67285ms ago: executing program 0 (id=9800): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000081}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000011) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000081}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000011) socket$inet_sctp(0x2, 0x1, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x818}}, 0xd, 0x7, 0xe, 0x6, 0x2, 0x4, 0x91}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000280)={r4}, &(0x7f00000002c0)=0x8) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000280)={r4}, &(0x7f00000002c0)=0x8) ioctl$sock_netdev_private(r3, 0x89f8, &(0x7f0000000300)="afbaa17cd9a2f7dc2d8b337ad4c0fc3c0f85225b2846f57687b1aea3c991f1d5b0b42b43822ba152f3f3dbae942c6826f1eae02bb5af548c40a604c76ee2709367fefd5bd6a1ee1fe16f0f830d91b4a5e76fcb9dcc2876edcf63339d5dafb185bcd5542a9b0737946ff849fe2bcc0fecb2c4e30b957b861c9d05166e09cb961deb220490156411400c020487c561e709cf9122a668362ab96aa14c2f9b18238d1a993219831bd71369241d2842b0d90a017f378ef4273c876c1608a52ed6e4a5180e2698079b3b9fd914b69d9857af455de01e9c86fe13f2354acf63036bad8c") openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2440, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2440, 0x0) recvfrom$llc(0xffffffffffffffff, &(0x7f0000000440)=""/105, 0x69, 0x140, &(0x7f00000004c0)={0x1a, 0x8, 0x22, 0x5, 0x9, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x5420a056}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x7c, r6, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7f}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x800}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x655}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xa}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048000}, 0x80) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x5420a056}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x7c, r6, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7f}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x800}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x655}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xa}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048000}, 0x80) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000006c0)=0x0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40d4) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000007c0)={0x99a, 0x1, 0x4, 0xffff}, 0x8) r8 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000800)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000800)={'vxcan0\x00'}) socket$inet_icmp(0x2, 0x2, 0x1) (async) r9 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000840)='syz_tun\x00', 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000880), r0) setsockopt$inet_icmp_ICMP_FILTER(r9, 0x1, 0x1, &(0x7f00000008c0)={0x5}, 0x4) (async) setsockopt$inet_icmp_ICMP_FILTER(r9, 0x1, 0x1, &(0x7f00000008c0)={0x5}, 0x4) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r10, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x28}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20048014}, 0x4000014) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000a40)={r5, 0x5}, 0x8) socket$inet_smc(0x2b, 0x1, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r11, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x5, 0x4, 0x2]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c001) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r1, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", ""]}, 0x14}}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c80)={'wpan0\x00'}) syz_emit_ethernet(0x28, &(0x7f0000000cc0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @val={@val={0x88a8, 0x4, 0x0, 0x2}, {0x8100, 0x4, 0x0, 0x1}}, {@mpls_uc={0x8847, {[{0x7}], @generic="667ca42526bbf8068a6737f83432"}}}}, &(0x7f0000000d00)={0x0, 0x4, [0x72d, 0x42d, 0x77e, 0x75a]}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000ec0)={0xffffffffffffffff, &(0x7f0000000d80)="2f0e6f1fcd686cced7a00c2415ccfe3e63e0c3f49e987368271a4f04a4ce9ce5aaa37a94b289f6d16e6717d64864a9a8328a7421a25f684fc065ebc95f6d5d797b4c9d11db2b37594a169830afde8286b3745a27d46621faeb6d10524927692605100e5384521bcefc8fb3ad58b829288f40eba05c9154358df81024552842ac72932a9854cc71151200d7a4e8b3cfd19393a71e163fc0b37272a9b270d4c842e8c1c1395477865b4e8f424da5d13228a0f13a8ae5c4c814fea60404f1955d0ddf16b03e7a00e0", &(0x7f0000000e80)=""/47}, 0x20) 557.732µs ago: executing program 4 (id=9801): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$unix(0x1, 0x5, 0x0) shutdown(r1, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x7}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x401, 0xffffffffffffffff, 0xe80, 0x4}, 0x4, r4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xf8}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000100001082cbd7000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="010940000000000000002b8008000100", @ANYRES32, @ANYBLOB="08000300190000001400030076657468305f766972745f776966690008000d0007000000"], 0x50}}, 0x400c040) 0s ago: executing program 6 (id=9802): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)='b', 0x1}], 0x1, &(0x7f0000000140)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x4000081) close(0x3) kernel console output (not intermixed with test programs): mode [ 1467.834655][T10126] ipt_rpfilter: unknown options [ 1467.961695][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1468.914616][T10131] netdevsim netdevsim3 €Â: renamed from netdevsim0 (while UP) [ 1468.948638][T10135] netlink: 65051 bytes leftover after parsing attributes in process `syz.5.8966'. [ 1468.969914][T26722] net_ratelimit: 86 callbacks suppressed [ 1468.969939][T26722] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1469.006133][T26722] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1469.055289][T26749] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1469.083449][T26749] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1469.107305][T10147] syzkaller0: entered promiscuous mode [ 1469.112863][T10147] syzkaller0: entered allmulticast mode [ 1469.176214][T10162] xt_hashlimit: size too large, truncated to 1048576 [ 1469.193695][T26722] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1469.193734][T26722] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1469.296908][T26722] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1469.335069][T26722] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1469.385181][T26722] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1469.445350][T26722] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1470.257035][T10182] netlink: 5304 bytes leftover after parsing attributes in process `syz.2.8976'. [ 1474.071974][T26718] net_ratelimit: 130 callbacks suppressed [ 1474.072001][T26718] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1474.121451][T26718] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1474.191934][T26718] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1474.223173][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1474.253046][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1474.280119][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1474.311802][T26756] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1474.335244][T26756] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1474.356691][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1474.382230][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1474.895954][T10172] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1474.946186][T10178] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1475.125832][T10180] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.144329][T10180] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1475.226840][T10194] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8980'. [ 1475.303205][T10194] lo speed is unknown, defaulting to 1000 [ 1475.311055][T10194] lo speed is unknown, defaulting to 1000 [ 1475.538727][T10191] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8979'. [ 1475.556860][T10191] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8979'. [ 1475.572445][T10191] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8979'. [ 1475.683105][T10194] wg1 speed is unknown, defaulting to 1000 [ 1475.920384][T10180] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.933953][T10180] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1476.067293][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8985'. [ 1476.196368][T10180] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.206277][T10180] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1476.638558][T10234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8989'. [ 1476.721035][T10221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8987'. [ 1476.917247][T10237] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1476.947993][T10236] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1477.300052][T10180] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.319460][T10180] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1477.606075][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8992'. [ 1477.974821][T26733] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1477.983252][T26733] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1477.991542][T26733] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1477.999838][T26733] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1478.183573][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1478.193057][ T36] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1478.231114][T10264] tipc: Enabled bearer , priority 0 [ 1478.315585][T10275] netlink: 'syz.4.8999': attribute type 1 has an invalid length. [ 1478.443548][T10276] netlink: 'syz.4.8999': attribute type 1 has an invalid length. [ 1478.573044][T10269] syzkaller0: entered promiscuous mode [ 1478.599147][T10269] syzkaller0: entered allmulticast mode [ 1478.629040][T10269] tipc: Resetting bearer [ 1478.756430][T10275] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1478.853785][T10289] netlink: 'syz.3.9002': attribute type 2 has an invalid length. [ 1478.872868][T10293] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.9000'. [ 1479.085318][T26744] net_ratelimit: 105 callbacks suppressed [ 1479.085344][T26744] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1479.101407][ T36] tipc: Resetting bearer [ 1479.111300][T26733] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1479.123274][T26733] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1479.131811][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1479.158323][T10276] bond6: (slave batadv1): Opening slave failed [ 1479.177440][T26744] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1479.193263][T10263] tipc: Resetting bearer [ 1479.277956][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1479.319036][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1479.386184][T10303] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9004'. [ 1479.398985][T10303] netlink: 43 bytes leftover after parsing attributes in process `syz.2.9004'. [ 1479.410516][T10303] netlink: 'syz.2.9004': attribute type 6 has an invalid length. [ 1479.418381][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1479.426315][T10303] netlink: 'syz.2.9004': attribute type 5 has an invalid length. [ 1479.523374][T26744] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1479.643879][ T4233] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1479.794485][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1479.865336][ T4233] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1484.095118][T26757] net_ratelimit: 158 callbacks suppressed [ 1484.095144][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1484.125243][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1484.151000][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1484.185598][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1484.245489][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1484.282914][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1484.312216][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1484.362116][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1484.401339][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1484.447809][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1484.522572][T10263] tipc: Disabling bearer [ 1484.556627][T10290] syzkaller0: entered promiscuous mode [ 1484.562201][T10290] syzkaller0: entered allmulticast mode [ 1489.111363][ T36] net_ratelimit: 148 callbacks suppressed [ 1489.111425][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1489.225434][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1489.253492][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1489.339313][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1489.458551][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1489.572106][T26756] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1489.692085][T26744] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1489.719212][T26744] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1489.810749][T26744] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1489.923930][T26744] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1489.962961][ T5972] tipc: Node number set to 3905159352 [ 1489.975556][T10303] kthread_run failed with err -4 [ 1490.143094][T10313] lo speed is unknown, defaulting to 1000 [ 1490.218556][T10313] lo speed is unknown, defaulting to 1000 [ 1490.308977][T10325] __nla_validate_parse: 1 callbacks suppressed [ 1490.309001][T10325] netlink: 4856 bytes leftover after parsing attributes in process `syz.4.9010'. [ 1490.341379][T10327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9009'. [ 1490.998955][T28472] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1491.015629][T28472] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1491.027359][T28472] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1491.039511][T28472] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1491.048655][T28472] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1491.180740][T10340] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9012'. [ 1491.595322][T10313] wg1 speed is unknown, defaulting to 1000 [ 1491.813007][T10357] syzkaller1: entered promiscuous mode [ 1491.842509][T10357] syzkaller1: entered allmulticast mode [ 1491.852295][T10357] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9018'. [ 1491.873340][T10357] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9018'. [ 1492.325486][T10335] lo speed is unknown, defaulting to 1000 [ 1492.342142][T10335] lo speed is unknown, defaulting to 1000 [ 1492.706854][T10384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9024'. [ 1492.767894][T10386] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9024'. [ 1493.058211][T10386] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9024'. [ 1493.069324][T10399] syzkaller1: entered allmulticast mode [ 1493.314943][T28472] Bluetooth: hci1: command tx timeout [ 1493.351032][T10335] wg1 speed is unknown, defaulting to 1000 [ 1493.658595][T10408] lo speed is unknown, defaulting to 1000 [ 1493.660197][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9029'. [ 1493.680187][T10408] lo speed is unknown, defaulting to 1000 [ 1494.125348][T10408] wg1 speed is unknown, defaulting to 1000 [ 1494.172053][T10419] netlink: 'syz.3.9031': attribute type 1 has an invalid length. [ 1494.180763][T10419] netlink: 'syz.3.9031': attribute type 3 has an invalid length. [ 1494.189602][T10419] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9031'. [ 1494.218796][T26733] net_ratelimit: 97 callbacks suppressed [ 1494.218822][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1494.305158][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1494.335327][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1494.368542][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1494.382641][T10423] sctp: [Deprecated]: syz.4.9032 (pid 10423) Use of int in max_burst socket option. [ 1494.382641][T10423] Use struct sctp_assoc_value instead [ 1494.405443][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1494.445456][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1494.462855][T10335] bridge0: port 1(bridge_slave_0) entered blocking state [ 1494.485179][T10335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.492637][T10335] bridge_slave_0: entered allmulticast mode [ 1494.504930][ T4228] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1494.515622][T10335] bridge_slave_0: entered promiscuous mode [ 1494.530960][T10335] bridge0: port 2(bridge_slave_1) entered blocking state [ 1494.538361][T10335] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.559591][ T4228] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1494.560241][T10335] bridge_slave_1: entered allmulticast mode [ 1494.575466][T10335] bridge_slave_1: entered promiscuous mode [ 1494.671291][ T4228] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1494.707258][T10435] xt_hashlimit: size too large, truncated to 1048576 [ 1494.713420][T10335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1494.750281][T10335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1494.788366][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1494.969672][T10335] team0: Port device team_slave_0 added [ 1495.000120][T10335] team0: Port device team_slave_1 added [ 1495.117365][T10335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1495.135249][T10335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1495.162942][T10335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1495.215831][T10335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1495.222973][T10335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1495.251657][T10335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1495.346338][T10335] hsr_slave_0: entered promiscuous mode [ 1495.353437][T10335] hsr_slave_1: entered promiscuous mode [ 1495.361818][T10335] debugfs: 'hsr0' already exists in 'hsr' [ 1495.369351][T10335] Cannot create hsr debugfs directory [ 1495.385536][T10458] netlink: 'syz.3.9042': attribute type 8 has an invalid length. [ 1495.393693][T10458] __nla_validate_parse: 1 callbacks suppressed [ 1495.393713][T10458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9042'. [ 1495.412434][T28472] Bluetooth: hci1: command tx timeout [ 1495.432513][T10458] veth1_to_team: entered promiscuous mode [ 1495.439626][T10458] gretap0: entered promiscuous mode [ 1495.457495][T10458] veth1_to_team: left promiscuous mode [ 1495.464361][T10458] gretap0: left promiscuous mode [ 1495.828230][T10461] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9043'. [ 1496.123638][T10335] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1496.151560][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9045'. [ 1496.161619][T10335] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1496.196996][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9045'. [ 1496.302279][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9046'. [ 1496.866495][T10497] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 1496.934182][T10335] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1496.980523][T10335] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1497.191708][T10335] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1497.213193][T10335] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1497.410374][T10514] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.497045][T28472] Bluetooth: hci1: command tx timeout [ 1497.518816][T10526] netlink: 244 bytes leftover after parsing attributes in process `syz.4.9059'. [ 1497.662433][T10532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9061'. [ 1497.673090][T10532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9061'. [ 1497.686002][T10335] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1497.696289][T10335] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1497.753987][T10534] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9062'. [ 1497.985791][T10548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9064'. [ 1498.736270][T10562] gtp1: entered allmulticast mode [ 1498.837874][T10335] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1498.896172][T10335] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1498.904756][T10335] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1498.917516][T10335] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1498.925851][T10335] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1498.938519][T10335] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1498.955868][T10335] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1498.986560][T10335] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1499.177569][T10335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1499.199882][T10335] 8021q: adding VLAN 0 to HW filter on device team0 [ 1499.241084][T10575] netlink: 'syz.3.9072': attribute type 9 has an invalid length. [ 1499.255066][T26733] net_ratelimit: 83 callbacks suppressed [ 1499.255089][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1499.270573][T10575] netlink: 'syz.3.9072': attribute type 6 has an invalid length. [ 1499.294884][T10575] netlink: 'syz.3.9072': attribute type 7 has an invalid length. [ 1499.302849][T10575] netlink: 'syz.3.9072': attribute type 8 has an invalid length. [ 1499.311806][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1499.349215][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1499.356956][T26756] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1499.411046][T26756] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1499.451054][T26756] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1499.486526][T26756] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1499.508382][T26756] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1499.539005][T26744] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1499.557695][T28472] Bluetooth: hci1: command tx timeout [ 1499.577189][T26744] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1499.689832][T26744] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1499.894384][T26725] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.901762][T26725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1500.097186][T26725] bridge0: port 2(bridge_slave_1) entered blocking state [ 1500.104461][T26725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1500.145828][T10585] gtp0: entered promiscuous mode [ 1500.150930][T10585] gtp0: entered allmulticast mode [ 1500.580255][T10616] __nla_validate_parse: 3 callbacks suppressed [ 1500.580278][T10616] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9082'. [ 1500.596242][T10616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9082'. [ 1500.628070][T10622] batadv_slave_1: entered promiscuous mode [ 1500.663723][T10615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9082'. [ 1500.672965][T10615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9082'. [ 1501.519973][T10631] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input12 [ 1504.301063][T26733] net_ratelimit: 118 callbacks suppressed [ 1504.301088][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1504.336664][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1504.447939][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1504.487587][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1504.515234][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1504.540396][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1504.684025][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1504.793638][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1504.820785][T26756] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1504.845062][T26756] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1505.173447][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1506.239050][T10609] batadv_slave_1: left promiscuous mode [ 1506.509899][T10644] netlink: 'syz.4.9085': attribute type 1 has an invalid length. [ 1506.569487][T10644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9085'. [ 1506.642170][T10651] netlink: 256 bytes leftover after parsing attributes in process `syz.3.9089'. [ 1506.686742][T10335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1506.816499][T10335] veth0_vlan: entered promiscuous mode [ 1506.858718][T10335] veth1_vlan: entered promiscuous mode [ 1506.860730][T26749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1506.897479][T10656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1506.908782][T26749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1507.034685][T10335] veth0_macvtap: entered promiscuous mode [ 1507.089878][T10680] batadv_slave_1: entered promiscuous mode [ 1507.102063][T10335] veth1_macvtap: entered promiscuous mode [ 1507.111198][T10677] batadv_slave_1: left promiscuous mode [ 1507.178871][T10335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1507.198232][T10335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1507.215767][ T4233] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.259629][T10682] netlink: 'syz.4.9096': attribute type 1 has an invalid length. [ 1507.313375][ T4233] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.322980][T10689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9099'. [ 1507.392180][T10682] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1507.413857][ T4233] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.419842][T10682] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9096'. [ 1507.422673][ T4233] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.603844][T26725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1507.612702][T26725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1507.654432][T26744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1507.662822][T26744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1507.691398][T10693] netlink: 88 bytes leftover after parsing attributes in process `syz.0.9100'. [ 1507.704183][T10694] netlink: 88 bytes leftover after parsing attributes in process `syz.0.9100'. [ 1508.026221][T10708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9104'. [ 1508.173456][T10720] batadv_slave_1: entered promiscuous mode [ 1508.176125][T10719] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9108'. [ 1508.360316][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9110'. [ 1508.369333][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9110'. [ 1508.572259][T10718] batadv_slave_1: left promiscuous mode [ 1509.253217][T10758] siw: device registration error -23 [ 1509.473472][ T36] net_ratelimit: 78 callbacks suppressed [ 1509.473499][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1509.537263][ T36] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1509.700617][T10766] x_tables: duplicate underflow at hook 2 [ 1509.708876][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1509.745018][ T4233] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1509.765005][ T4233] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1509.885209][T26744] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1509.917820][T26744] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1510.047654][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1510.063051][T26725] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1510.186376][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1510.363531][T10781] batadv_slave_1: entered promiscuous mode [ 1510.401237][T10784] netlink: 'syz.2.9125': attribute type 1 has an invalid length. [ 1510.413439][T10780] batadv_slave_1: left promiscuous mode [ 1510.653889][T10789] netlink: 'syz.2.9128': attribute type 10 has an invalid length. [ 1510.714073][T10793] netlink: 'syz.2.9128': attribute type 10 has an invalid length. [ 1510.799559][T10789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1510.809522][T10789] team0: Port device netdevsim1 added [ 1510.869740][T10793] team0: Port device netdevsim1 removed [ 1510.878106][T10793] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1510.887790][T10793] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1510.978433][T10796] macsec1: entered allmulticast mode [ 1510.998460][T10796] bond0: entered allmulticast mode [ 1511.011901][T10796] bond_slave_0: entered allmulticast mode [ 1511.034612][T10796] bond_slave_1: entered allmulticast mode [ 1511.061753][T10796] bond_slave_0: entered promiscuous mode [ 1511.070253][T10796] bond_slave_1: entered promiscuous mode [ 1511.116861][T10796] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1511.160624][T10796] bond0: left allmulticast mode [ 1511.171166][T10796] bond_slave_0: left allmulticast mode [ 1511.205602][T10796] bond_slave_1: left allmulticast mode [ 1511.315109][ T9772] bond_slave_0: left promiscuous mode [ 1511.322886][ T9772] bond_slave_1: left promiscuous mode [ 1511.516694][T10807] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1511.895516][T10819] batadv_slave_1: entered promiscuous mode [ 1511.960924][T10818] batadv_slave_1: left promiscuous mode [ 1512.661468][T10836] __nla_validate_parse: 8 callbacks suppressed [ 1512.661490][T10836] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9144'. [ 1512.705512][T10838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9144'. [ 1512.709484][T10837] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9142'. [ 1512.715032][T10838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9144'. [ 1512.715061][T10838] netlink: 1 bytes leftover after parsing attributes in process `syz.4.9144'. [ 1512.801939][T10842] netlink: 'syz.5.9145': attribute type 1 has an invalid length. [ 1512.849161][T10842] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1512.871907][T10842] vlan2: entered promiscuous mode [ 1512.878249][T10842] bond8: entered promiscuous mode [ 1512.891406][T10842] vlan2: entered allmulticast mode [ 1512.902985][T10842] bond8: entered allmulticast mode [ 1512.935285][T10842] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9145'. [ 1512.983732][T10845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9143'. [ 1512.994281][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9143'. [ 1513.039629][T10842] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1513.051129][T10842] bond8: (slave batadv1): making interface the new active one [ 1513.059104][T10842] batadv1: entered promiscuous mode [ 1513.087125][T10839] sctp: [Deprecated]: syz.0.9143 (pid 10839) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1513.087125][T10839] Use struct sctp_sack_info instead [ 1513.104607][T10842] batadv1: entered allmulticast mode [ 1513.110923][T10842] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 1513.122220][T10852] batadv_slave_1: entered promiscuous mode [ 1513.132239][T10850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9147'. [ 1513.150334][T10851] batadv_slave_1: left promiscuous mode [ 1513.157704][T10835] netlink: 'syz.0.9143': attribute type 1 has an invalid length. [ 1513.167497][T10835] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9143'. [ 1513.277889][T10849] tipc: Started in network mode [ 1513.282976][T10849] tipc: Node identity 0a8d0d4c47ec, cluster identity 4711 [ 1513.290363][T10849] tipc: Enabled bearer , priority 0 [ 1513.298313][T10849] syzkaller0: entered promiscuous mode [ 1513.303826][T10849] syzkaller0: entered allmulticast mode [ 1513.487954][T10849] tipc: Resetting bearer [ 1513.600717][T10847] tipc: Resetting bearer [ 1513.648269][T10847] tipc: Disabling bearer [ 1513.756308][T10879] netlink: 'syz.2.9155': attribute type 21 has an invalid length. [ 1513.764477][T10879] netlink: 'syz.2.9155': attribute type 22 has an invalid length. [ 1513.773426][T10879] netlink: 'syz.2.9155': attribute type 23 has an invalid length. [ 1513.781876][T10879] netlink: 'syz.2.9155': attribute type 25 has an invalid length. [ 1513.797529][T10879] netlink: 'syz.2.9155': attribute type 26 has an invalid length. [ 1513.824055][T10874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1513.833082][T10880] netlink: 'syz.5.9157': attribute type 18 has an invalid length. [ 1513.837695][T10874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1513.945799][T10874] veth1_to_batadv: left promiscuous mode [ 1513.960471][T10874] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1513.971227][T10874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1514.037868][T10874] veth1_vlan: left promiscuous mode [ 1514.190056][T10894] batadv_slave_1: entered promiscuous mode [ 1514.231509][T10893] batadv_slave_1: left promiscuous mode [ 1514.266996][T10896] syzkaller0: entered promiscuous mode [ 1514.272644][T10896] syzkaller0: entered allmulticast mode [ 1514.471332][T10902] netlink: 'syz.5.9163': attribute type 13 has an invalid length. [ 1514.620671][T26733] net_ratelimit: 86 callbacks suppressed [ 1514.620698][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1514.680036][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1514.693416][T26733] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1514.850332][T26744] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1514.858317][T26744] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1515.023608][T10913] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1515.040504][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1515.050902][T26733] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1515.165171][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1515.187780][T26733] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1515.325041][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1515.834898][T10946] batadv_slave_1: entered promiscuous mode [ 1515.845576][T10945] batadv_slave_1: left promiscuous mode [ 1516.340561][T10968] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1516.833643][T10989] batadv_slave_1: entered promiscuous mode [ 1516.904639][T10988] batadv_slave_1: left promiscuous mode [ 1517.457268][T11017] ip6t_srh: unknown srh invflags BA61 [ 1517.603616][T11017] bond9: option resend_igmp: invalid value (2878) [ 1517.610157][T11017] bond9: option resend_igmp: allowed values 0 - 255 [ 1517.619030][T11017] bond9 (unregistering): Released all slaves [ 1517.729024][T11028] bridge8: entered allmulticast mode [ 1517.940169][T11043] lo speed is unknown, defaulting to 1000 [ 1517.947996][T11043] lo speed is unknown, defaulting to 1000 [ 1517.983489][T11034] bond9: option arp_all_targets: invalid value (129) [ 1518.004196][T11034] bond9 (unregistering): Released all slaves [ 1518.172462][T11052] __nla_validate_parse: 18 callbacks suppressed [ 1518.172483][T11052] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9205'. [ 1518.207996][T11052] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9205'. [ 1518.228442][T11052] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9205'. [ 1518.339562][T11043] wg1 speed is unknown, defaulting to 1000 [ 1518.590468][T11063] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9208'. [ 1518.897429][T11066] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9209'. [ 1519.128304][T11066] tipc: Enabling of bearer rejected, already enabled [ 1519.479210][T11080] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1519.603129][T11083] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 1519.676922][T26757] net_ratelimit: 89 callbacks suppressed [ 1519.676947][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1519.711430][T26757] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1519.766456][T11094] netlink: 'syz.4.9216': attribute type 1 has an invalid length. [ 1519.836891][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1519.866246][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1519.885148][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1519.918914][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1519.947140][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1520.009544][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1520.041072][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1520.064964][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1520.077066][T11094] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1520.117111][T11100] bond8: (slave ip6erspan0): making interface the new active one [ 1520.127285][T11100] bond8: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1520.586022][T11122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9225'. [ 1520.659858][T11126] netlink: 'syz.0.9227': attribute type 6 has an invalid length. [ 1520.669621][T11126] netlink: 'syz.0.9227': attribute type 23 has an invalid length. [ 1520.685884][T11126] IPv6: NLM_F_CREATE should be specified when creating new route [ 1520.761914][T11120] netlink: 'syz.2.9223': attribute type 1 has an invalid length. [ 1520.878948][T26733] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.937417][T26733] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.967075][T26733] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.976844][T26733] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.964097][T11111] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1524.779038][ T4233] net_ratelimit: 83 callbacks suppressed [ 1524.779064][ T4233] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1524.840228][ T4233] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1524.975039][T26749] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1525.008844][T26749] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1525.052369][T11213] netlink: 'syz.3.9249': attribute type 1 has an invalid length. [ 1525.136322][T26744] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1525.174458][T11213] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1525.196080][T11219] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1525.213527][T11219] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1525.218096][T11220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9252'. [ 1525.267053][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1525.295354][T11220] team0: entered promiscuous mode [ 1525.303334][T11219] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1525.316775][T11220] team_slave_0: entered promiscuous mode [ 1525.327224][T11220] team_slave_1: entered promiscuous mode [ 1525.339005][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1525.450179][T26744] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1525.475004][T26744] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1525.515760][T26744] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1525.529156][T11227] pim6reg: entered allmulticast mode [ 1525.539595][T11232] pim6reg: left allmulticast mode [ 1525.580533][T11234] batadv_slave_1: entered promiscuous mode [ 1525.592470][T11233] batadv_slave_1: left promiscuous mode [ 1525.685173][T11241] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9256'. [ 1525.747892][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9258'. [ 1525.814468][T11248] vlan0: entered promiscuous mode [ 1525.820773][T11248] bond0: entered promiscuous mode [ 1525.834816][T11248] bond_slave_0: entered promiscuous mode [ 1525.840864][T11248] bond_slave_1: entered promiscuous mode [ 1526.055385][T11256] netlink: 'syz.3.9257': attribute type 1 has an invalid length. [ 1526.785639][T11265] netlink: 'syz.4.9263': attribute type 14 has an invalid length. [ 1526.793517][T11265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9263'. [ 1526.802423][T11265] bond0: option xmit_hash_policy: invalid value (22) [ 1526.928366][T11274] batadv_slave_1: entered promiscuous mode [ 1526.942507][T11271] batadv_slave_1: left promiscuous mode [ 1526.949782][T11273] bridge_slave_1: invalid flags given to default FDB implementation [ 1527.189320][T11284] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9268'. [ 1527.213275][T11284] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9268'. [ 1527.258828][T11289] netlink: 'syz.4.9270': attribute type 1 has an invalid length. [ 1527.330190][T11292] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9270'. [ 1527.838945][T11319] netlink: 'syz.5.9279': attribute type 1 has an invalid length. [ 1527.951089][T11309] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.984521][T11316] batadv_slave_1: entered promiscuous mode [ 1528.085380][T11319] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1528.097917][T11315] batadv_slave_1: left promiscuous mode [ 1528.113286][T11338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9281'. [ 1528.449435][T11309] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.772379][T11355] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1529.249489][T11309] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.402208][T11371] batadv_slave_1: entered promiscuous mode [ 1529.468940][T11375] netlink: 'syz.4.9294': attribute type 4 has an invalid length. [ 1529.489547][T11375] netlink: 240 bytes leftover after parsing attributes in process `syz.4.9294'. [ 1529.507518][T11309] netdevsim netdevsim3 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.660574][T11370] batadv_slave_1: left promiscuous mode [ 1529.694290][T11384] netlink: 120 bytes leftover after parsing attributes in process `syz.4.9297'. [ 1529.703916][T11384] netlink: 'syz.4.9297': attribute type 1 has an invalid length. [ 1529.713625][T11382] tap0: tun_chr_ioctl cmd 2148553947 [ 1529.826145][ T4233] net_ratelimit: 86 callbacks suppressed [ 1529.826168][ T4233] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1529.847080][T26733] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.875173][T26733] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.915027][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1529.943816][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1529.987244][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1530.028927][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1530.064701][T26744] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.101683][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1530.155017][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1530.182776][T26725] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.212360][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1530.246555][T26725] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1530.386790][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1530.402107][T11406] __nla_validate_parse: 3 callbacks suppressed [ 1530.402132][T11406] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9305'. [ 1530.691317][T17990] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1530.703329][T11418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9307'. [ 1530.716017][T17990] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1530.739996][T17990] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1530.780279][T17990] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1530.792051][T17990] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1531.216566][T11438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9312'. [ 1531.284214][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9312'. [ 1531.501908][T11416] lo speed is unknown, defaulting to 1000 [ 1531.540126][T11416] lo speed is unknown, defaulting to 1000 [ 1531.783044][T11464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9315'. [ 1531.799659][T11463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9318'. [ 1531.828284][T11463] netlink: 'syz.0.9318': attribute type 2 has an invalid length. [ 1531.836279][T11463] netlink: 'syz.0.9318': attribute type 1 has an invalid length. [ 1531.844136][T11463] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9318'. [ 1531.968098][T11452] lo speed is unknown, defaulting to 1000 [ 1532.136933][T11465] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1532.170033][T11452] lo speed is unknown, defaulting to 1000 [ 1532.175874][T11416] wg1 speed is unknown, defaulting to 1000 [ 1532.211048][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9320'. [ 1532.325450][T11467] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9320'. [ 1532.337597][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9320'. [ 1532.838437][T17990] Bluetooth: hci4: command tx timeout [ 1533.104301][T11472] syzkaller1: entered promiscuous mode [ 1533.118407][T11472] syzkaller1: entered allmulticast mode [ 1533.135277][T11452] wg1 speed is unknown, defaulting to 1000 [ 1533.736686][T11493] xt_NFQUEUE: number of queues (3633) out of range (got 69161) [ 1534.155777][T11506] netlink: 'syz.0.9326': attribute type 9 has an invalid length. [ 1534.173253][T11506] netlink: 'syz.0.9326': attribute type 6 has an invalid length. [ 1534.181146][T11506] netlink: 'syz.0.9326': attribute type 7 has an invalid length. [ 1534.188915][T11506] netlink: 'syz.0.9326': attribute type 8 has an invalid length. [ 1534.552008][T11416] bridge0: port 1(bridge_slave_0) entered blocking state [ 1534.560207][T11416] bridge0: port 1(bridge_slave_0) entered disabled state [ 1534.577541][T11416] bridge_slave_0: entered allmulticast mode [ 1534.590103][T11416] bridge_slave_0: entered promiscuous mode [ 1534.612709][T11416] bridge0: port 2(bridge_slave_1) entered blocking state [ 1534.630688][T11416] bridge0: port 2(bridge_slave_1) entered disabled state [ 1534.647074][T11416] bridge_slave_1: entered allmulticast mode [ 1534.666915][T11416] bridge_slave_1: entered promiscuous mode [ 1534.767593][T11416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1534.839507][T11416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1534.915098][T17990] Bluetooth: hci4: command tx timeout [ 1534.942625][T11416] team0: Port device team_slave_0 added [ 1534.949192][T26725] net_ratelimit: 124 callbacks suppressed [ 1534.949213][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1534.959646][T11416] team0: Port device team_slave_1 added [ 1535.052726][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1535.167027][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1535.273829][ T4233] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1535.320360][T11416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1535.327656][T11416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1535.372222][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1535.384739][T11416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1535.422427][T11416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1535.430269][T11416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1535.488676][T11416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1535.546416][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1535.598792][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1535.711937][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1535.825657][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1535.939697][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1535.976314][T11545] __nla_validate_parse: 4 callbacks suppressed [ 1535.976335][T11545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9333'. [ 1536.031026][T11416] hsr_slave_0: entered promiscuous mode [ 1536.043235][T11416] hsr_slave_1: entered promiscuous mode [ 1536.051903][T11416] debugfs: 'hsr0' already exists in 'hsr' [ 1536.066449][T11548] netlink: 'syz.0.9336': attribute type 10 has an invalid length. [ 1536.074322][T11548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9336'. [ 1536.080122][T11416] Cannot create hsr debugfs directory [ 1536.144566][T26725] netdevsim netdevsim4 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 1536.192884][T26725] netdevsim netdevsim4 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 1536.291495][T11552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9336'. [ 1536.322037][T11552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9336'. [ 1536.393897][T11554] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9337'. [ 1536.653580][T26725] netdevsim netdevsim4 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 1536.699809][T26725] netdevsim netdevsim4 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 1536.780978][T26733] dvmrp0: left allmulticast mode [ 1536.995309][T17990] Bluetooth: hci4: command tx timeout [ 1537.025974][T26733] bond8 (unregistering): (slave ip6erspan0): Releasing active interface [ 1537.034804][T11564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9338'. [ 1537.349077][T26733] bond4 (unregistering): (slave bridge2): Releasing active interface [ 1537.386707][T26733] bond0 (unregistering): Released all slaves [ 1537.401083][T26733] bond1 (unregistering): Released all slaves [ 1537.453555][T26733] bond2 (unregistering): Released all slaves [ 1537.478355][T26733] bond3 (unregistering): Released all slaves [ 1537.493435][T26733] bond4 (unregistering): Released all slaves [ 1537.507600][T26733] bond5 (unregistering): Released all slaves [ 1537.522007][T26733] bond6 (unregistering): Released all slaves [ 1537.572346][T26733] bond7 (unregistering): Released all slaves [ 1537.587837][T26733] bond8 (unregistering): Released all slaves [ 1537.602339][T26733] bond9 (unregistering): Released all slaves [ 1537.711247][T11580] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9339'. [ 1537.712660][ T5289] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1537.750499][T11580] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9339'. [ 1538.069378][T26733] hmac(sha2: left promiscuous mode [ 1538.174047][T11587] mac80211_hwsim hwsim98 ªªªªª;: renamed from wlan0 (while UP) [ 1538.195032][T11587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9341'. [ 1538.211763][T11416] netdevsim netdevsim4 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1538.264320][T11591] syz.2.9341: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1538.285440][T11591] CPU: 1 UID: 0 PID: 11591 Comm: syz.2.9341 Not tainted syzkaller #0 PREEMPT(full) [ 1538.285474][T11591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1538.285490][T11591] Call Trace: [ 1538.285500][T11591] [ 1538.285510][T11591] dump_stack_lvl+0xe8/0x150 [ 1538.285544][T11591] warn_alloc+0x249/0x340 [ 1538.285578][T11591] ? stack_trace_save+0xa9/0x100 [ 1538.285615][T11591] ? __pfx_warn_alloc+0x10/0x10 [ 1538.285652][T11591] ? kasan_save_track+0x4f/0x80 [ 1538.285679][T11591] ? kasan_save_track+0x3e/0x80 [ 1538.285717][T11591] ? __kasan_kmalloc+0x93/0xb0 [ 1538.285743][T11591] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1538.285771][T11591] ? xskq_create+0x56/0x170 [ 1538.285800][T11591] ? xsk_setsockopt+0x54c/0x990 [ 1538.285827][T11591] ? do_sock_setsockopt+0x17c/0x1b0 [ 1538.285849][T11591] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1538.285869][T11591] ? do_syscall_64+0x15f/0xf80 [ 1538.285896][T11591] __vmalloc_node_range_noprof+0x132/0x1750 [ 1538.285961][T11591] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1538.285996][T11591] ? __kasan_kmalloc+0x93/0xb0 [ 1538.286033][T11591] vmalloc_user_noprof+0xad/0xe0 [ 1538.286064][T11591] ? xskq_create+0xbf/0x170 [ 1538.286094][T11591] xskq_create+0xbf/0x170 [ 1538.286127][T11591] xsk_init_queue+0x8a/0xe0 [ 1538.286160][T11591] xsk_setsockopt+0x54c/0x990 [ 1538.286191][T11591] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1538.286219][T11591] ? __pfx_aa_sk_perm+0x10/0x10 [ 1538.286249][T11591] ? aa_sock_opt_perm+0xff/0x1a0 [ 1538.286283][T11591] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1538.286311][T11591] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1538.286340][T11591] do_sock_setsockopt+0x17c/0x1b0 [ 1538.286369][T11591] __x64_sys_setsockopt+0x13d/0x1b0 [ 1538.286393][T11591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1538.286418][T11591] do_syscall_64+0x15f/0xf80 [ 1538.286438][T11591] ? trace_irq_disable+0x3b/0x140 [ 1538.286471][T11591] ? clear_bhb_loop+0x40/0x90 [ 1538.286498][T11591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1538.286519][T11591] RIP: 0033:0x7fa0e859ce59 [ 1538.286541][T11591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1538.286560][T11591] RSP: 002b:00007fa0e93a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1538.286585][T11591] RAX: ffffffffffffffda RBX: 00007fa0e8816090 RCX: 00007fa0e859ce59 [ 1538.286601][T11591] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 1538.286614][T11591] RBP: 00007fa0e8632d6f R08: 0000000000000004 R09: 0000000000000000 [ 1538.286627][T11591] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1538.286641][T11591] R13: 00007fa0e8816128 R14: 00007fa0e8816090 R15: 00007fff34962288 [ 1538.286679][T11591] [ 1538.286774][T11591] Mem-Info: [ 1538.622568][T11591] active_anon:10293 inactive_anon:0 isolated_anon:0 [ 1538.622568][T11591] active_file:2710 inactive_file:41215 isolated_file:0 [ 1538.622568][T11591] unevictable:768 dirty:263 writeback:0 [ 1538.622568][T11591] slab_reclaimable:14064 slab_unreclaimable:250271 [ 1538.622568][T11591] mapped:32933 shmem:1304 pagetables:3890 [ 1538.622568][T11591] sec_pagetables:0 bounce:0 [ 1538.622568][T11591] kernel_misc_reclaimable:0 [ 1538.622568][T11591] free:1140428 free_pcp:26786 free_cma:0 [ 1538.690569][T11591] Node 0 active_anon:41172kB inactive_anon:0kB active_file:10840kB inactive_file:164656kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:25432kB dirty:1048kB writeback:0kB shmem:3680kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19096kB pagetables:15468kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1538.730136][T11591] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106400kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:92kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1538.776132][T11591] Node 0 DMA free:11184kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:80kB local_pcp:8kB free_cma:0kB [ 1538.850722][T11591] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1538.858000][T11591] Node 0 DMA32 free:1238360kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41172kB inactive_anon:0kB active_file:10840kB inactive_file:164656kB unevictable:1536kB writepending:1048kB zspages:0kB present:3129332kB managed:2552360kB mlocked:0kB bounce:0kB free_pcp:49136kB local_pcp:20968kB free_cma:0kB [ 1538.895304][T11591] lowmem_reserve[]: 0 0 0 0 0 [ 1538.900247][T11591] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:660kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1538.953630][T11591] lowmem_reserve[]: 0 0 0 0 0 [ 1538.959842][T11591] Node 1 Normal free:3312168kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:58480kB local_pcp:31080kB free_cma:0kB [ 1539.002496][T11591] lowmem_reserve[]: 0 0 0 0 0 [ 1539.018212][T11591] Node 0 DMA: 0*4kB 2*8kB (U) 2*16kB (U) 2*32kB (U) 1*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11184kB [ 1539.054462][T11591] Node 0 DMA32: 8268*4kB (UME) 10408*8kB (UME) 6872*16kB (UME) 869*32kB (UME) 617*64kB (UM) 796*128kB (UME) 623*256kB (UME) 241*512kB (UM) 290*1024kB (UM) 130*2048kB (UM) 0*4096kB = 1241552kB [ 1539.076755][T28472] Bluetooth: hci4: command tx timeout [ 1539.102955][T11591] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1539.127064][T11591] Node 1 Normal: 9*4kB (U) 9*8kB (UM) 11*16kB (UM) 8*32kB (UM) 15*64kB (UM) 11*128kB (UM) 11*256kB (UM) 12*512kB (UM) 9*1024kB (UM) 9*2048kB (U) 799*4096kB (UM) = 3312220kB [ 1539.189789][T11591] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1539.200675][T11591] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1539.213604][T11591] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1539.224195][T11591] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1539.234353][T11591] 45227 total pagecache pages [ 1539.239542][T11591] 0 pages in swap cache [ 1539.243764][T11591] Free swap = 124996kB [ 1539.253857][T11591] Total swap = 124996kB [ 1539.259157][T11591] 2097051 pages RAM [ 1539.263139][T11591] 0 pages HighMem/MovableOnly [ 1539.269051][T11591] 427181 pages reserved [ 1539.273295][T11591] 0 pages cma reserved [ 1539.288504][T26733] tipc: Disabling bearer [ 1539.296591][T26733] tipc: Left network mode [ 1539.296631][T11618] macvlan0: entered promiscuous mode [ 1539.332201][T11618] macvlan0: entered allmulticast mode [ 1539.337853][T11618] veth1_vlan: entered allmulticast mode [ 1539.346493][ T5289] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1539.368045][T11618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9343'. [ 1539.381013][T26733] IPVS: stopping backup sync thread 9190 ... [ 1539.392230][T11416] netdevsim netdevsim4 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1539.491521][T11618] veth1_vlan: left allmulticast mode [ 1539.516675][T11618] macvlan0 (unregistering): left promiscuous mode [ 1539.523195][T11618] macvlan0 (unregistering): left allmulticast mode [ 1540.049162][ T36] net_ratelimit: 95 callbacks suppressed [ 1540.049189][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1540.077085][T11416] netdevsim netdevsim4 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1540.087185][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1540.115883][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1540.145192][T26744] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1540.176258][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1540.215534][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1540.256031][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1540.316663][T26744] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1540.415214][T26749] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1540.454964][T26749] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1540.662132][T11416] netdevsim netdevsim4 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1540.733859][T11663] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 1541.155453][T28472] Bluetooth: hci4: command 0x0405 tx timeout [ 1541.241205][T11685] __nla_validate_parse: 4 callbacks suppressed [ 1541.241228][T11685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9356'. [ 1541.911846][T11697] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9360'. [ 1541.925545][T11416] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1541.957960][T11416] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1542.017120][T11697] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9360'. [ 1542.027629][T11416] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1542.033290][T11707] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9363'. [ 1542.050553][T11416] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1542.250501][T11694] lo speed is unknown, defaulting to 1000 [ 1542.258399][T11694] lo speed is unknown, defaulting to 1000 [ 1542.299885][T11416] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1542.380567][T11416] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1542.417067][T11416] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1542.429951][T11705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9362'. [ 1542.447778][T11416] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1542.832038][T11731] macsec1: entered allmulticast mode [ 1542.856566][T11731] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 1542.908003][T11694] wg1 speed is unknown, defaulting to 1000 [ 1543.180542][T11416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1543.279832][T11416] 8021q: adding VLAN 0 to HW filter on device team0 [ 1543.343556][T26757] bridge0: port 1(bridge_slave_0) entered blocking state [ 1543.350879][T26757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1543.371510][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9366'. [ 1543.396391][T26757] bridge0: port 2(bridge_slave_1) entered blocking state [ 1543.403840][T26757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1543.799502][T11764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9369'. [ 1544.444086][T11782] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9371'. [ 1545.022754][T11791] netlink: 'syz.5.9372': attribute type 7 has an invalid length. [ 1545.114486][ T4228] net_ratelimit: 126 callbacks suppressed [ 1545.114512][ T4228] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1545.165228][ T4228] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1545.209971][ T4228] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1545.400194][T26756] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1545.409348][T26756] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1545.538397][T11416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1545.546981][T26756] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1545.567232][T26756] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1545.644474][T11801] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 1545.686095][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1545.715197][T26756] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1546.434488][T11815] syzkaller0: entered promiscuous mode [ 1546.440357][T11815] syzkaller0: entered allmulticast mode [ 1546.598980][T11416] veth0_vlan: entered promiscuous mode [ 1546.625621][T11416] veth1_vlan: entered promiscuous mode [ 1546.693973][T11416] veth0_macvtap: entered promiscuous mode [ 1546.723947][T11416] veth1_macvtap: entered promiscuous mode [ 1546.752652][T11416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1546.778007][T11416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1546.800472][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1546.817975][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1546.846553][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.281727][T11828] netlink: 'syz.0.9379': attribute type 14 has an invalid length. [ 1547.290980][T11828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9379'. [ 1547.398701][T11831] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9378'. [ 1547.408227][T11831] netlink: 116 bytes leftover after parsing attributes in process `syz.2.9378'. [ 1547.418770][T11831] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9378'. [ 1550.209504][T26756] net_ratelimit: 128 callbacks suppressed [ 1550.209535][T26756] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1550.252106][T26749] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1550.289452][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1550.337201][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1550.464620][T26756] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1550.491529][T26756] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1550.568679][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1550.597585][T26756] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1550.689599][T26756] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1550.801906][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1551.907099][ T3718] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1551.978064][ T3718] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1552.009645][ T3718] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1552.049409][ T3718] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1552.059838][ T3718] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1552.821540][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.848521][T11826] erspan0: entered promiscuous mode [ 1552.856286][T11826] vlan2: entered promiscuous mode [ 1553.347052][T26757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1553.355519][T26757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1553.750292][T26749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1553.759936][T26749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1553.826639][T11869] netlink: 'syz.5.9387': attribute type 1 has an invalid length. [ 1553.880947][T11868] tipc: Enabling of bearer rejected, failed to enable media [ 1554.033718][T11876] Bluetooth: MGMT ver 1.23 [ 1554.048592][T11876] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9386'. [ 1554.180660][T11875] ip6tnl5: entered promiscuous mode [ 1554.224691][T11882] netlink: 'syz.2.9390': attribute type 10 has an invalid length. [ 1554.232955][T11882] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9390'. [ 1554.306999][ T3718] Bluetooth: hci3: command tx timeout [ 1554.351600][T11885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9303'. [ 1554.366524][T11882] dummy0: entered promiscuous mode [ 1554.372304][T11882] bridge0: port 3(dummy0) entered blocking state [ 1554.412515][T11882] bridge0: port 3(dummy0) entered disabled state [ 1554.455919][T11882] dummy0: entered allmulticast mode [ 1554.489420][T11882] bridge0: port 3(dummy0) entered blocking state [ 1554.496304][T11882] bridge0: port 3(dummy0) entered forwarding state [ 1554.585239][T26733] hsr_slave_0: left promiscuous mode [ 1554.627122][T26733] hsr_slave_1: left promiscuous mode [ 1554.885041][T26733] team0 (unregistering): Port device veth1_to_hsr removed [ 1555.158997][T11834] lo speed is unknown, defaulting to 1000 [ 1555.167074][T11834] lo speed is unknown, defaulting to 1000 [ 1555.323633][T26764] net_ratelimit: 135 callbacks suppressed [ 1555.323658][T26764] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1555.358862][T11895] netlink: 'syz.4.9391': attribute type 1 has an invalid length. [ 1555.375103][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1555.404354][ T36] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1555.404742][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9397'. [ 1555.547841][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1555.590102][ T36] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1555.601019][T11914] netlink: 'syz.0.9397': attribute type 7 has an invalid length. [ 1555.632482][T11914] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9397'. [ 1555.736624][T26764] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1555.752038][T11834] wg1 speed is unknown, defaulting to 1000 [ 1555.758987][T26764] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1555.845804][T11920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9398'. [ 1556.008343][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1556.062859][T11920] veth0_macvtap: left promiscuous mode [ 1556.093447][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1556.142572][T26764] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1556.472466][ T3718] Bluetooth: hci3: command tx timeout [ 1556.524641][T11930] netlink: 68 bytes leftover after parsing attributes in process `syz.5.9403'. [ 1556.736335][T26733] IPVS: stop unused estimator thread 0... [ 1556.954730][T11944] netlink: 'syz.5.9407': attribute type 1 has an invalid length. [ 1557.099865][T11951] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1557.111593][T11951] bond11: (slave bond12): making interface the new active one [ 1557.120016][T11951] bond11: (slave bond12): Enslaving as an active interface with an up link [ 1557.371758][T11834] bridge0: port 1(bridge_slave_0) entered blocking state [ 1557.379011][T11834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1557.386642][T11834] bridge_slave_0: entered allmulticast mode [ 1557.394142][T11834] bridge_slave_0: entered promiscuous mode [ 1557.403126][T11834] bridge0: port 2(bridge_slave_1) entered blocking state [ 1557.410408][T11834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.418474][T11834] bridge_slave_1: entered allmulticast mode [ 1557.426864][T11834] bridge_slave_1: entered promiscuous mode [ 1557.554652][T11834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1557.631901][T11834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1557.857999][T26733] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.944618][T11958] xt_hashlimit: size too large, truncated to 1048576 [ 1557.992260][T11834] team0: Port device team_slave_0 added [ 1558.049549][T11834] team0: Port device team_slave_1 added [ 1558.176448][T11960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.219188][T11961] netlink: 'syz.2.9409': attribute type 1 has an invalid length. [ 1558.240417][T11961] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9409'. [ 1558.247487][T11960] bridge_slave_0 (unregistering): left allmulticast mode [ 1558.265706][T11960] bridge_slave_0 (unregistering): left promiscuous mode [ 1558.273109][T11960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.353806][T11834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1558.369281][T11834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1558.403511][T11834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1558.423103][T11834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1558.433904][T11834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1558.471259][T11834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1558.499773][T26733] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.542238][ T3718] Bluetooth: hci3: command tx timeout [ 1559.079147][T12012] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.9420'. [ 1559.269685][T11990] bridge0: port 3(dummy0) entered disabled state [ 1559.276293][T11990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.562491][T11990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1559.578564][T11990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1559.881839][T26733] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.039782][T26757] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.068156][T26757] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.101037][T26757] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.202733][T26757] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.292260][T11834] hsr_slave_0: entered promiscuous mode [ 1560.316569][T11834] hsr_slave_1: entered promiscuous mode [ 1560.328386][T26757] net_ratelimit: 110 callbacks suppressed [ 1560.328408][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1560.385030][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1560.428358][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1560.441394][T26733] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.454921][T26744] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1560.542577][T26764] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1560.565835][T26764] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1560.596264][ T3718] Bluetooth: hci3: command tx timeout [ 1560.605209][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1560.665329][T26756] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1560.798624][T26756] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1560.906510][T26744] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1561.040223][T12055] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9430'. [ 1561.066143][T26725] netdevsim netdevsim3 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 1561.354540][T26725] netdevsim netdevsim3 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 1561.391414][T26725] netdevsim netdevsim3 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 1561.420436][T12065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9434'. [ 1561.461519][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1561.591808][T26725] netdevsim netdevsim3 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 1561.624375][T26733] bridge_slave_1: left promiscuous mode [ 1561.637549][T26733] bridge0: port 2(bridge_slave_1) entered disabled state [ 1561.648884][T26733] bridge_slave_0: left allmulticast mode [ 1561.656289][T26733] bridge_slave_0: left promiscuous mode [ 1561.664367][T26733] bridge0: port 1(bridge_slave_0) entered disabled state [ 1562.209538][T26733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1562.223104][T26733] bond_slave_0: left promiscuous mode [ 1562.246581][T26733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1562.257161][T26733] bond_slave_1: left promiscuous mode [ 1562.264070][T26733] bond0 (unregistering): Released all slaves [ 1562.275013][T26733] bond1 (unregistering): Released all slaves [ 1562.303120][T11834] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1562.315208][T11834] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1562.335733][ T5289] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1562.417014][T11834] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1562.436801][T11834] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1562.447622][T26733] tipc: Left network mode [ 1562.516161][T11834] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1562.561369][T12099] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.9438'. [ 1562.617561][T11834] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1562.631060][T11834] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1562.697672][T11834] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1563.348229][T11834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1563.459135][T11834] 8021q: adding VLAN 0 to HW filter on device team0 [ 1563.570217][T26756] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.577660][T26756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1563.587846][T26756] bridge0: port 2(bridge_slave_1) entered blocking state [ 1563.595125][T26756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1563.810389][T12155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9449'. [ 1563.817215][T12145] bond1: peer notification delay (7) is not a multiple of miimon (2121), value rounded to 0 ms [ 1563.819705][T12155] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9449'. [ 1563.880792][ T5289] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1564.169810][T12161] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1564.499050][T12185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9454'. [ 1564.578029][ T30] audit: type=1804 audit(1779462622.597:22): pid=12183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.9453" name="/newroot/11/cgroup.controllers" dev="tmpfs" ino=73 res=1 errno=0 [ 1564.667998][ T30] audit: type=1800 audit(1779462622.597:23): pid=12183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9453" name="cgroup.controllers" dev="tmpfs" ino=73 res=0 errno=0 [ 1564.747917][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9454'. [ 1565.065088][T26733] hsr_slave_0: left promiscuous mode [ 1565.103982][T26733] hsr_slave_1: left promiscuous mode [ 1565.110392][T26733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1565.117827][T26733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1565.148006][T26733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1565.159994][T26733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1565.163948][T12209] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1565.201093][T12207] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9458'. [ 1565.248822][T12201] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9456'. [ 1565.253420][T12207] netlink: 'syz.2.9458': attribute type 3 has an invalid length. [ 1565.288188][T12207] netlink: 666 bytes leftover after parsing attributes in process `syz.2.9458'. [ 1565.336521][ T4228] net_ratelimit: 102 callbacks suppressed [ 1565.336545][ T4228] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1565.405260][ T4228] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1565.445251][T26749] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1565.485273][T26744] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1565.515036][T26744] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1565.545908][T26744] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1565.590735][T26744] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1565.635780][T26744] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1565.667506][ T4228] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1565.705469][T26749] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1565.968287][T26733] team0 (unregistering): Port device team_slave_1 removed [ 1566.059823][T26733] team0 (unregistering): Port device team_slave_0 removed [ 1566.182592][T12198] netlink: 1 bytes leftover after parsing attributes in process `syz.4.9456'. [ 1566.239063][ T5289] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1566.488310][T12237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9462'. [ 1566.865357][T12260] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9466'. [ 1566.869661][T12249] lo speed is unknown, defaulting to 1000 [ 1566.875816][T12260] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9466'. [ 1566.909269][T12249] lo speed is unknown, defaulting to 1000 [ 1567.127313][T11834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1567.476038][T12284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9468'. [ 1567.644421][T26733] IPVS: stop unused estimator thread 0... [ 1568.071231][T12249] wg1 speed is unknown, defaulting to 1000 [ 1568.148851][T11834] veth0_vlan: entered promiscuous mode [ 1568.162590][T11834] veth1_vlan: entered promiscuous mode [ 1568.316423][ T5289] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1568.417472][T12299] netlink: 'syz.4.9471': attribute type 14 has an invalid length. [ 1568.429855][T12299] netlink: 'syz.4.9471': attribute type 12 has an invalid length. [ 1568.456063][T11834] veth0_macvtap: entered promiscuous mode [ 1568.500861][T11834] veth1_macvtap: entered promiscuous mode [ 1568.596698][T11834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1568.733959][T11834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1568.851753][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1568.898742][T12314] No such timeout policy "syz1" [ 1568.913392][T12314] No such timeout policy "syz1" [ 1569.027924][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.043802][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.068095][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.448876][T26764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1569.485932][T26764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1569.625115][T26725] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1569.638491][T26725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1570.097680][T12342] __nla_validate_parse: 5 callbacks suppressed [ 1570.097703][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9380'. [ 1570.305061][T12348] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9484'. [ 1570.358814][T26733] net_ratelimit: 78 callbacks suppressed [ 1570.358840][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1570.395140][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1570.415699][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1570.436939][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1570.531036][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1570.613553][T26764] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1570.631260][T12330] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1570.668176][T26764] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1570.729204][T26764] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1570.795487][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1570.878363][T12366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9488'. [ 1570.933045][T12366] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9488'. [ 1570.983548][T17990] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1571.008586][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1571.059320][T12371] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1571.073964][T12371] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1571.088500][T12371] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1571.100481][T12371] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1571.117007][T12366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9488'. [ 1571.128967][T12366] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9488'. [ 1571.138547][T12366] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9488'. [ 1571.683435][T12391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9493'. [ 1572.220790][T26756] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.382429][T12405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9496'. [ 1572.406819][T12400] sctp: [Deprecated]: syz.6.9495 (pid 12400) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1572.406819][T12400] Use struct sctp_sack_info instead [ 1572.617637][T12369] lo speed is unknown, defaulting to 1000 [ 1572.627474][T12369] lo speed is unknown, defaulting to 1000 [ 1572.646760][T12416] netlink: 188 bytes leftover after parsing attributes in process `syz.4.9499'. [ 1572.712173][T12418] syzkaller0: entered promiscuous mode [ 1572.729785][T12418] syzkaller0: entered allmulticast mode [ 1572.755082][T26756] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.865796][T12418] netdevsim netdevsim5: Direct firmware load for . failed with error -2 [ 1572.882966][T12418] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1573.091474][T12428] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1573.103349][T12369] wg1 speed is unknown, defaulting to 1000 [ 1573.104406][T26749] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1573.118427][T26749] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1573.214618][T26756] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.239976][T12371] Bluetooth: hci5: command tx timeout [ 1573.328894][T26749] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1573.368352][T26749] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1573.479677][T12432] syz_tun: entered allmulticast mode [ 1573.499865][T12432] syz_tun: left allmulticast mode [ 1573.834733][T26756] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.954675][T12438] lo speed is unknown, defaulting to 1000 [ 1573.999459][T12438] lo speed is unknown, defaulting to 1000 [ 1574.475581][T12464] FAULT_INJECTION: forcing a failure. [ 1574.475581][T12464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1574.497185][T12464] CPU: 1 UID: 0 PID: 12464 Comm: syz.2.9518 Not tainted syzkaller #0 PREEMPT(full) [ 1574.497214][T12464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1574.497226][T12464] Call Trace: [ 1574.497235][T12464] [ 1574.497244][T12464] dump_stack_lvl+0xe8/0x150 [ 1574.497276][T12464] should_fail_ex+0x412/0x560 [ 1574.497309][T12464] _copy_from_user+0x2d/0xb0 [ 1574.497349][T12464] ___sys_sendmsg+0x1c6/0x360 [ 1574.497372][T12464] ? __lock_acquire+0x6b5/0x2cf0 [ 1574.497399][T12464] ? __pfx____sys_sendmsg+0x10/0x10 [ 1574.497460][T12464] ? __fget_files+0x2a/0x420 [ 1574.497483][T12464] ? __fget_files+0x3a0/0x420 [ 1574.497516][T12464] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1574.497540][T12464] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1574.497566][T12464] ? __pfx_ksys_write+0x10/0x10 [ 1574.497599][T12464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.497616][T12464] do_syscall_64+0x15f/0xf80 [ 1574.497632][T12464] ? trace_irq_disable+0x3b/0x140 [ 1574.497657][T12464] ? clear_bhb_loop+0x40/0x90 [ 1574.497678][T12464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.497699][T12464] RIP: 0033:0x7fa0e859ce59 [ 1574.497720][T12464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1574.497739][T12464] RSP: 002b:00007fa0e93c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1574.497765][T12464] RAX: ffffffffffffffda RBX: 00007fa0e8815fa0 RCX: 00007fa0e859ce59 [ 1574.497781][T12464] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000003 [ 1574.497795][T12464] RBP: 00007fa0e93c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1574.497808][T12464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1574.497822][T12464] R13: 00007fa0e8816038 R14: 00007fa0e8815fa0 R15: 00007fff34962288 [ 1574.497856][T12464] [ 1574.520120][T12438] wg1 speed is unknown, defaulting to 1000 [ 1574.890237][T12369] bridge0: port 1(bridge_slave_0) entered blocking state [ 1574.913840][T12369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.927917][T12369] bridge_slave_0: entered allmulticast mode [ 1574.976809][T12369] bridge_slave_0: entered promiscuous mode [ 1574.985932][T12369] bridge0: port 2(bridge_slave_1) entered blocking state [ 1574.993105][T12369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1575.000426][T12369] bridge_slave_1: entered allmulticast mode [ 1575.110953][T12369] bridge_slave_1: entered promiscuous mode [ 1575.244146][T12369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1575.304483][T12369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1575.314383][T12479] lo speed is unknown, defaulting to 1000 [ 1575.320176][T12371] Bluetooth: hci5: command tx timeout [ 1575.400840][ T36] net_ratelimit: 85 callbacks suppressed [ 1575.400866][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1575.513230][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1575.541893][T12479] lo speed is unknown, defaulting to 1000 [ 1575.553964][T12369] team0: Port device team_slave_0 added [ 1575.575128][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1575.600703][T12369] team0: Port device team_slave_1 added [ 1575.608480][ T36] netdevsim netdevsim0 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 1575.625024][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1575.645201][ T4228] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1575.666643][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1575.694985][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1575.746195][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1575.785345][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1575.796119][T12369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1575.807451][T12369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1575.837247][T12502] FAULT_INJECTION: forcing a failure. [ 1575.837247][T12502] name failslab, interval 1, probability 0, space 0, times 0 [ 1575.850849][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1575.860682][T12502] CPU: 0 UID: 0 PID: 12502 Comm: syz.6.9529 Not tainted syzkaller #0 PREEMPT(full) [ 1575.860710][T12502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1575.860722][T12502] Call Trace: [ 1575.860731][T12502] [ 1575.860740][T12502] dump_stack_lvl+0xe8/0x150 [ 1575.860771][T12502] should_fail_ex+0x412/0x560 [ 1575.860806][T12502] should_failslab+0xa8/0x100 [ 1575.860840][T12502] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1575.860870][T12502] ? __alloc_skb+0x186/0x7d0 [ 1575.860891][T12502] ? __alloc_skb+0x1d0/0x7d0 [ 1575.860908][T12502] ? __local_bh_enable_ip+0xd0/0x130 [ 1575.860936][T12502] __alloc_skb+0x1d0/0x7d0 [ 1575.860955][T12502] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1575.860989][T12502] netlink_sendmsg+0x5d4/0xb40 [ 1575.861022][T12502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1575.861049][T12502] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1575.861080][T12502] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1575.861112][T12502] ____sys_sendmsg+0x972/0x9f0 [ 1575.861136][T12502] ? __might_fault+0xaf/0x130 [ 1575.861170][T12502] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1575.861204][T12502] ? import_iovec+0x73/0xa0 [ 1575.861239][T12502] ___sys_sendmsg+0x2a5/0x360 [ 1575.861261][T12502] ? __lock_acquire+0x6b5/0x2cf0 [ 1575.861290][T12502] ? __pfx____sys_sendmsg+0x10/0x10 [ 1575.861352][T12502] ? __fget_files+0x2a/0x420 [ 1575.861377][T12502] ? __fget_files+0x3a0/0x420 [ 1575.861414][T12502] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1575.861441][T12502] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1575.861476][T12502] ? __pfx_ksys_write+0x10/0x10 [ 1575.861518][T12502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.861541][T12502] do_syscall_64+0x15f/0xf80 [ 1575.861562][T12502] ? trace_irq_disable+0x3b/0x140 [ 1575.861603][T12502] ? clear_bhb_loop+0x40/0x90 [ 1575.861630][T12502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.861651][T12502] RIP: 0033:0x7f63d9b9ce59 [ 1575.861672][T12502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1575.861692][T12502] RSP: 002b:00007f63daa35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1575.861715][T12502] RAX: ffffffffffffffda RBX: 00007f63d9e15fa0 RCX: 00007f63d9b9ce59 [ 1575.861730][T12502] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000003 [ 1575.861745][T12502] RBP: 00007f63daa35090 R08: 0000000000000000 R09: 0000000000000000 [ 1575.861758][T12502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1575.861771][T12502] R13: 00007f63d9e16038 R14: 00007f63d9e15fa0 R15: 00007ffd238ee4b8 [ 1575.861805][T12502] [ 1575.864380][T12369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1576.223323][T12507] __nla_validate_parse: 6 callbacks suppressed [ 1576.223346][T12507] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9530'. [ 1576.247511][T12507] veth0_macvtap: left promiscuous mode [ 1576.324423][T12479] wg1 speed is unknown, defaulting to 1000 [ 1576.327870][T12369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1576.339113][T12369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1576.385525][T12369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1576.397544][T26733] netdevsim netdevsim0 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 1576.555448][T26733] netdevsim netdevsim0 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 1576.630693][T12513] netlink: 'syz.5.9531': attribute type 8 has an invalid length. [ 1576.667958][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9531'. [ 1577.041694][T26757] netdevsim netdevsim0 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 1577.166937][T26756] gretap1: left allmulticast mode [ 1577.182139][T26756] gretap1: left promiscuous mode [ 1577.196051][T26756] bridge4: port 1(gretap1) entered disabled state [ 1577.258139][T26756] dvmrp0: left allmulticast mode [ 1577.432087][T12371] Bluetooth: hci5: command tx timeout [ 1577.659954][T26756] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 1577.852271][T26756] bond5 (unregistering): (slave vti0): Releasing backup interface [ 1577.860506][T26756] vti0 (unregistering): left promiscuous mode [ 1578.272815][T26756] bond0 (unregistering): Released all slaves [ 1578.300607][T26756] bond1 (unregistering): Released all slaves [ 1578.331474][T26756] bond2 (unregistering): Released all slaves [ 1578.363423][T26756] bond3 (unregistering): Released all slaves [ 1578.390620][T26756] bond4 (unregistering): Released all slaves [ 1578.420502][T26756] bond5 (unregistering): Released all slaves [ 1578.462432][T26756] bond6 (unregistering): Released all slaves [ 1578.496620][T12369] hsr_slave_0: entered promiscuous mode [ 1578.503180][T12369] hsr_slave_1: entered promiscuous mode [ 1578.545582][T12369] debugfs: 'hsr0' already exists in 'hsr' [ 1578.551376][T12369] Cannot create hsr debugfs directory [ 1578.725642][ T5289] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1579.182964][T26756] hmó3)óÿ: left promiscuous mode [ 1579.478043][T28472] Bluetooth: hci5: command tx timeout [ 1579.933355][T26756] 5Ò: left promiscuous mode [ 1580.270475][T12549] netlink: 'syz.5.9537': attribute type 1 has an invalid length. [ 1580.307601][T26756] tipc: Disabling bearer [ 1580.377386][T26756] tipc: Left network mode [ 1580.446922][T26725] net_ratelimit: 144 callbacks suppressed [ 1580.446946][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1580.495036][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1580.524936][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1580.560581][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1580.665458][T26749] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1580.697461][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1580.738105][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1580.759026][T12369] netdevsim netdevsim0 eth12 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1580.790069][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1580.900006][T26749] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1580.924890][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1581.137395][T12572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.158724][T12572] bridge_slave_0 (unregistering): left allmulticast mode [ 1581.165919][T12572] bridge_slave_0 (unregistering): left promiscuous mode [ 1581.173161][T12572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.293598][T12369] netdevsim netdevsim0 eth11 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1581.320643][ T5289] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1581.919203][T12369] netdevsim netdevsim0 eth10 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1582.173399][T12587] lo speed is unknown, defaulting to 1000 [ 1582.181457][T12587] lo speed is unknown, defaulting to 1000 [ 1582.541314][T12369] netdevsim netdevsim0 eth9 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1582.735459][T12605] lo speed is unknown, defaulting to 1000 [ 1583.047867][T12624] FAULT_INJECTION: forcing a failure. [ 1583.047867][T12624] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.060886][T12624] CPU: 1 UID: 0 PID: 12624 Comm: syz.6.9551 Not tainted syzkaller #0 PREEMPT(full) [ 1583.060916][T12624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1583.060929][T12624] Call Trace: [ 1583.060938][T12624] [ 1583.060946][T12624] dump_stack_lvl+0xe8/0x150 [ 1583.060976][T12624] should_fail_ex+0x412/0x560 [ 1583.061010][T12624] should_failslab+0xa8/0x100 [ 1583.061042][T12624] __kmalloc_cache_noprof+0x88/0x660 [ 1583.061073][T12624] ? nfnetlink_rcv+0xfdf/0x27b0 [ 1583.061103][T12624] nfnetlink_rcv+0xfdf/0x27b0 [ 1583.061166][T12624] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1583.061208][T12624] ? ref_tracker_free+0x693/0x840 [ 1583.061280][T12624] ? __netlink_deliver_tap+0x807/0x850 [ 1583.061315][T12624] ? netlink_deliver_tap+0x2e/0x1b0 [ 1583.061338][T12624] ? netlink_deliver_tap+0x2e/0x1b0 [ 1583.061368][T12624] netlink_unicast+0x75c/0x8e0 [ 1583.061403][T12624] netlink_sendmsg+0x813/0xb40 [ 1583.061438][T12624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1583.061467][T12624] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1583.061498][T12624] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1583.061529][T12624] ____sys_sendmsg+0x972/0x9f0 [ 1583.061553][T12624] ? __might_fault+0xaf/0x130 [ 1583.061586][T12624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1583.061621][T12624] ? import_iovec+0x73/0xa0 [ 1583.061656][T12624] ___sys_sendmsg+0x2a5/0x360 [ 1583.061678][T12624] ? __lock_acquire+0x6b5/0x2cf0 [ 1583.061705][T12624] ? __pfx____sys_sendmsg+0x10/0x10 [ 1583.061767][T12624] ? __fget_files+0x2a/0x420 [ 1583.061791][T12624] ? __fget_files+0x3a0/0x420 [ 1583.061829][T12624] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1583.061856][T12624] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1583.061891][T12624] ? __pfx_ksys_write+0x10/0x10 [ 1583.061930][T12624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.061953][T12624] do_syscall_64+0x15f/0xf80 [ 1583.061975][T12624] ? trace_irq_disable+0x3b/0x140 [ 1583.062006][T12624] ? clear_bhb_loop+0x40/0x90 [ 1583.062033][T12624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.062055][T12624] RIP: 0033:0x7f63d9b9ce59 [ 1583.062077][T12624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1583.062095][T12624] RSP: 002b:00007f63daa35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1583.062119][T12624] RAX: ffffffffffffffda RBX: 00007f63d9e15fa0 RCX: 00007f63d9b9ce59 [ 1583.062135][T12624] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000003 [ 1583.062148][T12624] RBP: 00007f63daa35090 R08: 0000000000000000 R09: 0000000000000000 [ 1583.062161][T12624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1583.062174][T12624] R13: 00007f63d9e16038 R14: 00007f63d9e15fa0 R15: 00007ffd238ee4b8 [ 1583.062211][T12624] [ 1583.579453][T12605] lo speed is unknown, defaulting to 1000 [ 1583.579487][T12587] wg1 speed is unknown, defaulting to 1000 [ 1584.101986][T12640] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9554'. [ 1584.186915][T12643] netlink: 'syz.2.9554': attribute type 1 has an invalid length. [ 1584.194714][T12643] netlink: 13782 bytes leftover after parsing attributes in process `syz.2.9554'. [ 1584.219288][T12646] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.9555'. [ 1584.314414][T12646] bridge0: port 3(vlan2) entered blocking state [ 1584.344150][T12646] bridge0: port 3(vlan2) entered disabled state [ 1584.350750][T12646] vlan2: entered allmulticast mode [ 1584.361472][T12646] bridge0: entered allmulticast mode [ 1584.418590][T12646] vlan2: left allmulticast mode [ 1584.427904][T12646] bridge0: left allmulticast mode [ 1584.515826][T12369] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1584.529282][T12369] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1584.588908][T12369] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1584.614715][T12369] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1584.637073][T12651] syzkaller0: entered promiscuous mode [ 1584.642707][T12651] syzkaller0: entered allmulticast mode [ 1584.686120][T12369] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1584.791303][T12369] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1584.803958][T12369] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1584.851196][T12369] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1585.257438][T12605] wg1 speed is unknown, defaulting to 1000 [ 1585.455137][T26757] net_ratelimit: 111 callbacks suppressed [ 1585.455161][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1585.496063][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1585.537577][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1585.574033][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1585.627695][ T4228] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1585.684249][ T4228] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1585.735672][ T4228] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1585.795404][T26749] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1585.835740][T26749] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1585.885648][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1586.263816][T12703] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9562'. [ 1586.590047][T12711] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1586.849855][T12719] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9566'. [ 1586.915508][T12721] ip6erspan1: entered allmulticast mode [ 1587.428709][T26756] hsr_slave_0: left promiscuous mode [ 1587.446781][T26756] hsr_slave_1: left promiscuous mode [ 1588.518480][T12730] syzkaller0: entered promiscuous mode [ 1588.524052][T12730] syzkaller0: entered allmulticast mode [ 1588.619767][T12744] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9569'. [ 1588.674689][T12369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1588.717372][T12740] lo speed is unknown, defaulting to 1000 [ 1588.725230][T12740] lo speed is unknown, defaulting to 1000 [ 1588.823242][T12369] 8021q: adding VLAN 0 to HW filter on device team0 [ 1588.854365][T26749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.861679][T26749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1588.892342][T26749] bridge0: port 2(bridge_slave_1) entered blocking state [ 1588.899556][T26749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1588.975058][T12369] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1588.985669][T12369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1589.304148][T12761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9571'. [ 1589.493059][T12773] tipc: Started in network mode [ 1589.502457][T12773] tipc: Node identity 42c7b054bea8, cluster identity 4711 [ 1589.532522][T12773] tipc: Enabled bearer , priority 0 [ 1589.540471][T12740] wg1 speed is unknown, defaulting to 1000 [ 1589.541346][T12773] syzkaller0: entered promiscuous mode [ 1589.553520][T12773] syzkaller0: entered allmulticast mode [ 1589.737249][T12777] tipc: Resetting bearer [ 1590.304061][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9575'. [ 1590.477393][T26733] net_ratelimit: 124 callbacks suppressed [ 1590.477417][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1590.555136][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1590.611650][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1590.665150][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1590.709649][T12772] tipc: Resetting bearer [ 1590.727487][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1590.785017][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1590.805753][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1590.859535][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1590.915540][T26744] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1590.947079][T26744] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1590.956966][T12772] tipc: Disabling bearer [ 1590.989410][T12369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1591.029457][ T8108] tipc: Node number set to 4235178068 [ 1591.591213][T12369] veth0_vlan: entered promiscuous mode [ 1591.604857][T12369] veth1_vlan: entered promiscuous mode [ 1591.763403][T12369] veth0_macvtap: entered promiscuous mode [ 1591.809064][T12369] veth1_macvtap: entered promiscuous mode [ 1591.874213][T12369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1591.886384][T12369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1592.002917][T26733] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.012129][T26733] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.137199][T26733] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.153703][T26733] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.214269][T26756] IPVS: stop unused estimator thread 0... [ 1592.483402][T12832] xfrm0: entered allmulticast mode [ 1592.491623][T12834] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9580'. [ 1592.559021][T26733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1592.589387][T26733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1592.879739][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1592.887622][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1593.329874][T12856] netlink: 244 bytes leftover after parsing attributes in process `syz.2.9586'. [ 1593.346251][T12860] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9486'. [ 1593.358179][T12856] workqueue: Failed to create a rescuer kthread for wq "phy5": -EINTR [ 1593.387028][T12860] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9486'. [ 1593.547101][T12872] tipc: Enabling of bearer rejected, failed to enable media [ 1594.942579][T12925] batman_adv: batadv0: Adding interface: dummy0 [ 1595.012931][T12925] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1595.039420][T12925] batman_adv: batadv0: Interface activated: dummy0 [ 1595.102977][T12930] batadv_slave_1: entered promiscuous mode [ 1595.295599][T12941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9603'. [ 1595.308027][T12929] batadv_slave_1: left promiscuous mode [ 1595.354506][T12937] lo speed is unknown, defaulting to 1000 [ 1595.385505][T12937] lo speed is unknown, defaulting to 1000 [ 1595.517399][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9600'. [ 1595.575952][ T36] net_ratelimit: 77 callbacks suppressed [ 1595.575973][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1595.607488][ T36] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1595.662569][T12953] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9606'. [ 1595.766574][T26764] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1595.777383][T12956] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9606'. [ 1595.795243][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1595.801067][T12947] batadv0: mtu less than device minimum [ 1595.804609][T12947] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1595.831648][T12947] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1595.844958][T12947] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1595.858192][T12947] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1595.870650][T12947] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1596.068844][T12959] bridge5: entered promiscuous mode [ 1596.083494][T12959] bridge5: entered allmulticast mode [ 1596.112718][T12959] team0: Port device bridge5 added [ 1596.204014][T12955] bridge6: entered promiscuous mode [ 1596.221692][T12955] bridge6: entered allmulticast mode [ 1596.313238][T12955] team0: Port device bridge6 added [ 1596.384719][T12964] bridge0: port 1(team0) entered blocking state [ 1596.391229][T12964] bridge0: port 1(team0) entered disabled state [ 1596.397937][T12964] team0: entered allmulticast mode [ 1596.403098][T12964] team_slave_0: entered allmulticast mode [ 1596.408952][T12964] team_slave_1: entered allmulticast mode [ 1596.414812][T12964] bond3: entered allmulticast mode [ 1596.425418][T12964] team0: entered promiscuous mode [ 1596.430525][T12964] team_slave_0: entered promiscuous mode [ 1596.436413][T12964] team_slave_1: entered promiscuous mode [ 1596.442294][T12964] bond3: entered promiscuous mode [ 1596.448768][T12964] bridge0: port 1(team0) entered blocking state [ 1596.455171][T12964] bridge0: port 1(team0) entered forwarding state [ 1596.508795][T12937] wg1 speed is unknown, defaulting to 1000 [ 1596.611012][T12969] veth0: entered promiscuous mode [ 1596.620326][T12969] netlink: 11 bytes leftover after parsing attributes in process `syz.4.9608'. [ 1596.631005][T12969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9608'. [ 1596.688921][T12969] veth0 (unregistering): left promiscuous mode [ 1597.318820][T12982] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9612'. [ 1597.734281][T12995] batadv_slave_1: entered promiscuous mode [ 1597.753159][T12997] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9617'. [ 1597.812774][T12997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9617'. [ 1597.932520][T12993] batadv_slave_1: left promiscuous mode [ 1598.233485][T13004] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9619'. [ 1598.598001][T13004] veth3: entered allmulticast mode [ 1599.001684][T13011] tipc: Started in network mode [ 1599.006720][T13011] tipc: Node identity aaaaaaaaaa2e, cluster identity 4711 [ 1599.073086][T13011] tipc: Enabled bearer , priority 10 [ 1599.806812][T13031] batadv_slave_1: entered promiscuous mode [ 1599.952972][T13030] batadv_slave_1: left promiscuous mode [ 1600.146644][ T5969] tipc: Node number set to 8694442 [ 1600.403234][T13057] __nla_validate_parse: 7 callbacks suppressed [ 1600.403255][T13057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9635'. [ 1600.463689][T13058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9634'. [ 1600.523493][T13057] team0: Port device team_slave_0 removed [ 1600.585079][T26764] net_ratelimit: 133 callbacks suppressed [ 1600.585106][T26764] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1600.668882][T13058] veth0_macvtap: left promiscuous mode [ 1600.711193][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1600.784467][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1600.807885][T13067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1600.896006][T26764] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1600.917876][T26764] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1600.961794][T13075] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9640'. [ 1600.973237][T13075] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9640'. [ 1601.056190][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1601.065038][T26733] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1601.104047][T13079] batadv_slave_1: entered promiscuous mode [ 1601.194985][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1601.202790][T26757] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1601.214684][T13077] batadv_slave_1: left promiscuous mode [ 1601.870634][T13111] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9652'. [ 1601.882006][T13111] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9652'. [ 1602.000611][T13105] lo speed is unknown, defaulting to 1000 [ 1602.043139][T13105] lo speed is unknown, defaulting to 1000 [ 1602.111610][T13119] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9654'. [ 1602.121094][ T8745] IPVS: starting estimator thread 0... [ 1602.149392][T13119] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9654'. [ 1602.327713][T13127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9655'. [ 1602.341875][T13127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9655'. [ 1602.380547][T13125] batadv_slave_1: entered promiscuous mode [ 1602.409022][T13122] batadv_slave_1: left promiscuous mode [ 1602.504980][T13117] IPVS: using max 25 ests per chain, 60000 per kthread [ 1602.759502][T13105] wg1 speed is unknown, defaulting to 1000 [ 1603.377289][T13148] bond1 (unregistering): Released all slaves [ 1603.841793][T13166] batadv_slave_1: entered promiscuous mode [ 1604.057493][T13165] batadv_slave_1: left promiscuous mode [ 1605.640735][T13203] __nla_validate_parse: 5 callbacks suppressed [ 1605.640757][T13203] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9678'. [ 1605.701708][T26733] net_ratelimit: 99 callbacks suppressed [ 1605.701733][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1605.720657][T26733] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1605.784528][T13205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9679'. [ 1605.863784][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1605.871759][T26733] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1605.881343][T13205] rdma_rxe: rxe_newlink: failed to add wg1 [ 1606.087562][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1606.097971][T26757] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1606.229327][T26718] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1606.237234][T26718] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1606.412601][T13219] lo speed is unknown, defaulting to 1000 [ 1606.431998][T13217] TC_ACT_REPEAT abuse ? [ 1606.469990][T26718] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1606.857147][T13219] lo speed is unknown, defaulting to 1000 [ 1606.994954][ T4228] wlan1: Trigger new scan to find an IBSS to join [ 1607.078552][T13249] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9687'. [ 1607.088146][T13249] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9687'. [ 1607.160869][T13219] wg1 speed is unknown, defaulting to 1000 [ 1609.363512][T13213] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1609.884917][T13293] batadv_slave_1: entered promiscuous mode [ 1609.907935][T13301] syzkaller1: entered promiscuous mode [ 1609.913645][T13301] syzkaller1: entered allmulticast mode [ 1610.010849][T13305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9702'. [ 1610.050457][T13306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9701'. [ 1610.272041][T13305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.296590][T13305] bridge_slave_1 (unregistering): left allmulticast mode [ 1610.303736][T13305] bridge_slave_1 (unregistering): left promiscuous mode [ 1610.310790][T13305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.363125][T13292] batadv_slave_1: left promiscuous mode [ 1610.550241][T13320] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9708'. [ 1610.757290][T26756] net_ratelimit: 82 callbacks suppressed [ 1610.757315][T26756] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1610.770759][T26756] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1610.949136][T13326] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9711'. [ 1610.997197][ T4228] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1611.041203][T13326] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9711'. [ 1611.093748][T13335] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9711'. [ 1611.136314][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1611.158868][T17161] IPVS: starting estimator thread 0... [ 1611.160709][T13335] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9711'. [ 1611.224931][T26756] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1611.315251][T26756] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1611.315736][T13340] IPVS: using max 26 ests per chain, 62400 per kthread [ 1611.420827][T13339] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9715'. [ 1611.511794][ T4228] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1611.550563][T13339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9715'. [ 1611.560712][T13339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9715'. [ 1611.593520][T13346] batadv_slave_1: entered promiscuous mode [ 1611.635803][T26764] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1611.669098][T13345] batadv_slave_1: left promiscuous mode [ 1611.762693][T26764] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1611.925158][T26756] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1612.011930][T26764] wlan1: Trigger new scan to find an IBSS to join [ 1612.068473][T13367] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9720'. [ 1612.163096][T13367] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1612.179917][T13371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9721'. [ 1612.203254][T13368] vlan2: entered promiscuous mode [ 1612.208509][T13368] bond1: entered promiscuous mode [ 1612.213786][T13368] vlan2: entered allmulticast mode [ 1612.220187][T13368] bond1: entered allmulticast mode [ 1612.651559][T13378] bond2: option xmit_hash_policy: invalid value (10) [ 1612.679259][T13378] bond2 (unregistering): Released all slaves [ 1612.733346][T13381] syzkaller0: entered promiscuous mode [ 1612.739976][T13381] syzkaller0: entered allmulticast mode [ 1612.915606][T28472] block nbd8: Receive control failed (result -1) [ 1613.426870][T26757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1613.563616][T13401] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9727'. [ 1613.819703][T13408] batadv_slave_1: entered promiscuous mode [ 1613.830694][T13407] batadv_slave_1: left promiscuous mode [ 1613.973264][T13410] xt_TCPMSS: Only works on TCP SYN packets [ 1614.285462][T13421] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1614.598056][T13437] batadv_slave_1: entered promiscuous mode [ 1614.610455][T13436] batadv_slave_1: left promiscuous mode [ 1615.457944][T13440] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1615.464225][T13440] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1615.478949][T13465] lo speed is unknown, defaulting to 1000 [ 1615.510165][T13465] lo speed is unknown, defaulting to 1000 [ 1615.815462][ T36] net_ratelimit: 63 callbacks suppressed [ 1615.815487][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1615.939276][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1615.965731][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1615.995082][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1616.015027][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1616.035077][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1616.065086][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1616.105015][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1616.120214][T13440] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1616.127381][T13485] __nla_validate_parse: 6 callbacks suppressed [ 1616.127402][T13485] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9754'. [ 1616.133555][T13440] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1616.134246][T26725] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1616.176674][T13490] batadv_slave_1: entered promiscuous mode [ 1616.236671][T13440] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1616.242635][T13440] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1616.269321][T13489] netlink: 144 bytes leftover after parsing attributes in process `syz.5.9755'. [ 1616.299238][ T4228] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1616.313807][T13489] xt_hashlimit: invalid rate [ 1616.328832][T13465] wg1 speed is unknown, defaulting to 1000 [ 1616.353859][T13486] batadv_slave_1: left promiscuous mode [ 1616.529239][T13440] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1616.556784][T13440] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1617.058061][T13507] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9760'. [ 1617.103103][T13507] netlink: 'syz.6.9760': attribute type 1 has an invalid length. [ 1617.310657][T13509] lo speed is unknown, defaulting to 1000 [ 1617.331837][T13509] lo speed is unknown, defaulting to 1000 [ 1617.493869][T13518] syzkaller0: entered promiscuous mode [ 1617.501406][T13518] syzkaller0: entered allmulticast mode [ 1617.544290][T13522] x_tables: duplicate underflow at hook 3 [ 1617.754419][T13527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9765'. [ 1617.846014][T13529] batadv_slave_1: entered promiscuous mode [ 1617.856678][T13528] batadv_slave_1: left promiscuous mode [ 1617.979704][T13509] wg1 speed is unknown, defaulting to 1000 [ 1618.007667][T13531] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9767'. [ 1618.816804][T13555] netlink: 'syz.4.9775': attribute type 1 has an invalid length. [ 1618.824679][T13555] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9775'. [ 1618.833719][T13555] netlink: 1 bytes leftover after parsing attributes in process `syz.4.9775'. [ 1618.885141][T13555] netlink: 658 bytes leftover after parsing attributes in process `syz.4.9775'. [ 1619.270809][T13563] batadv_slave_1: entered promiscuous mode [ 1619.378301][T13559] batadv_slave_1: left promiscuous mode [ 1619.526041][T13568] netlink: 4356 bytes leftover after parsing attributes in process `syz.6.9778'. [ 1619.790417][T13572] lo speed is unknown, defaulting to 1000 [ 1619.812712][T13572] lo speed is unknown, defaulting to 1000 [ 1620.888246][T26756] net_ratelimit: 87 callbacks suppressed [ 1620.888273][T26756] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1620.909987][T26756] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1621.034975][T26756] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1621.060605][T26756] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1621.089435][T13572] wg1 speed is unknown, defaulting to 1000 [ 1621.195049][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1621.210117][T26733] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1621.213877][T13601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9788'. [ 1621.336504][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1621.369525][T26733] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1621.430467][T13603] x_tables: duplicate underflow at hook 2 [ 1621.557113][T26757] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1621.564927][T26757] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1622.050320][T13612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9792'. [ 1622.209467][T13612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9792'. [ 1623.666158][T13645] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9801'. [ 1623.719199][T26718] [ 1623.721687][T26718] ====================================================== [ 1623.728733][T26718] WARNING: possible circular locking dependency detected [ 1623.735814][T26718] syzkaller #0 Not tainted [ 1623.740327][T26718] ------------------------------------------------------ [ 1623.747426][T26718] kworker/u8:5/26718 is trying to acquire lock: [ 1623.753680][T26718] ffffffff8ea85460 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1623.763699][T26718] [ 1623.763699][T26718] but task is already holding lock: [ 1623.771078][T26718] ffff88804063c5e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 1623.780019][T26718] [ 1623.780019][T26718] which lock already depends on the new lock. [ 1623.780019][T26718] [ 1623.790455][T26718] [ 1623.790455][T26718] the existing dependency chain (in reverse order) is: [ 1623.799576][T26718] [ 1623.799576][T26718] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 1623.807595][T26718] lock_sock_nested+0x41/0x100 [ 1623.812911][T26718] mptcp_connect+0x4c3/0x830 [ 1623.818079][T26718] __inet_stream_connect+0x25a/0xdd0 [ 1623.823936][T26718] inet_stream_connect+0x66/0xa0 [ 1623.829555][T26718] __sys_connect+0x312/0x450 [ 1623.834765][T26718] __x64_sys_connect+0x7a/0x90 [ 1623.840182][T26718] do_syscall_64+0x15f/0xf80 [ 1623.845316][T26718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.851749][T26718] [ 1623.851749][T26718] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1623.859585][T26718] lock_sock_nested+0x41/0x100 [ 1623.865019][T26718] inet_shutdown+0x6a/0x390 [ 1623.870069][T26718] nbd_mark_nsock_dead+0x2e9/0x560 [ 1623.875764][T26718] recv_work+0x1c2e/0x1d40 [ 1623.880887][T26718] process_scheduled_works+0xb5d/0x1860 [ 1623.887132][T26718] worker_thread+0xa53/0xfc0 [ 1623.892334][T26718] kthread+0x389/0x470 [ 1623.896940][T26718] ret_from_fork+0x514/0xb70 [ 1623.902143][T26718] ret_from_fork_asm+0x1a/0x30 [ 1623.907434][T26718] [ 1623.907434][T26718] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1623.915264][T26718] __mutex_lock+0x1a3/0x1550 [ 1623.920849][T26718] nbd_queue_rq+0x37b/0x1100 [ 1623.926100][T26718] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1623.932215][T26718] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1623.939191][T26718] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1623.945999][T26718] blk_mq_run_hw_queue+0x348/0x4f0 [ 1623.951743][T26718] blk_mq_dispatch_list+0xd16/0xe10 [ 1623.957471][T26718] blk_mq_flush_plug_list+0x48d/0x570 [ 1623.963571][T26718] __blk_flush_plug+0x3ed/0x4d0 [ 1623.969153][T26718] __submit_bio+0x28d/0x580 [ 1623.974293][T26718] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1623.980489][T26718] block_read_full_folio+0x599/0x830 [ 1623.986303][T26718] filemap_read_folio+0x137/0x3b0 [ 1623.991862][T26718] do_read_cache_folio+0x358/0x590 [ 1623.997513][T26718] read_part_sector+0xb6/0x2b0 [ 1624.002808][T26718] adfspart_check_ICS+0xb1/0x960 [ 1624.008352][T26718] bdev_disk_changed+0x817/0x1770 [ 1624.014078][T26718] blkdev_get_whole+0x380/0x510 [ 1624.019468][T26718] bdev_open+0x31e/0xd30 [ 1624.024284][T26718] blkdev_open+0x470/0x610 [ 1624.029419][T26718] do_dentry_open+0x785/0x14e0 [ 1624.034819][T26718] vfs_open+0x3b/0x340 [ 1624.039439][T26718] path_openat+0x2e08/0x3860 [ 1624.044878][T26718] do_file_open+0x23e/0x4a0 [ 1624.050031][T26718] do_sys_openat2+0x113/0x200 [ 1624.055260][T26718] __x64_sys_openat+0x138/0x170 [ 1624.060658][T26718] do_syscall_64+0x15f/0xf80 [ 1624.065781][T26718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.072286][T26718] [ 1624.072286][T26718] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1624.079503][T26718] __mutex_lock+0x1a3/0x1550 [ 1624.084615][T26718] nbd_queue_rq+0xc6/0x1100 [ 1624.089741][T26718] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1624.095866][T26718] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1624.102740][T26718] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1624.109246][T26718] blk_mq_run_hw_queue+0x348/0x4f0 [ 1624.114884][T26718] blk_mq_dispatch_list+0xd16/0xe10 [ 1624.120614][T26718] blk_mq_flush_plug_list+0x48d/0x570 [ 1624.126527][T26718] __blk_flush_plug+0x3ed/0x4d0 [ 1624.132010][T26718] __submit_bio+0x28d/0x580 [ 1624.137100][T26718] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1624.143391][T26718] block_read_full_folio+0x599/0x830 [ 1624.149219][T26718] filemap_read_folio+0x137/0x3b0 [ 1624.154784][T26718] do_read_cache_folio+0x358/0x590 [ 1624.160530][T26718] read_part_sector+0xb6/0x2b0 [ 1624.165858][T26718] adfspart_check_ICS+0xb1/0x960 [ 1624.171347][T26718] bdev_disk_changed+0x817/0x1770 [ 1624.176904][T26718] blkdev_get_whole+0x380/0x510 [ 1624.182278][T26718] bdev_open+0x31e/0xd30 [ 1624.187105][T26718] blkdev_open+0x470/0x610 [ 1624.192046][T26718] do_dentry_open+0x785/0x14e0 [ 1624.197337][T26718] vfs_open+0x3b/0x340 [ 1624.202063][T26718] path_openat+0x2e08/0x3860 [ 1624.207272][T26718] do_file_open+0x23e/0x4a0 [ 1624.212301][T26718] do_sys_openat2+0x113/0x200 [ 1624.217594][T26718] __x64_sys_openat+0x138/0x170 [ 1624.223143][T26718] do_syscall_64+0x15f/0xf80 [ 1624.228271][T26718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.234690][T26718] [ 1624.234690][T26718] -> #3 (set->srcu){.+.+}-{0:0}: [ 1624.242618][T26718] __synchronize_srcu+0xca/0x300 [ 1624.248104][T26718] elevator_switch+0x1e8/0x7a0 [ 1624.253401][T26718] elevator_change+0x2cc/0x450 [ 1624.258714][T26718] elevator_set_default+0x36c/0x430 [ 1624.264580][T26718] blk_register_queue+0x3e9/0x4e0 [ 1624.270346][T26718] __add_disk+0x677/0xd50 [ 1624.275220][T26718] add_disk_fwnode+0xfb/0x480 [ 1624.280424][T26718] nbd_dev_add+0x72c/0xb50 [ 1624.285538][T26718] nbd_init+0x168/0x1f0 [ 1624.290223][T26718] do_one_initcall+0x250/0x870 [ 1624.295515][T26718] do_initcall_level+0x104/0x190 [ 1624.301067][T26718] do_initcalls+0x59/0xa0 [ 1624.305958][T26718] kernel_init_freeable+0x2a6/0x3e0 [ 1624.311768][T26718] kernel_init+0x1d/0x1d0 [ 1624.316642][T26718] ret_from_fork+0x514/0xb70 [ 1624.321756][T26718] ret_from_fork_asm+0x1a/0x30 [ 1624.327221][T26718] [ 1624.327221][T26718] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1624.335142][T26718] __mutex_lock+0x1a3/0x1550 [ 1624.340514][T26718] elevator_change+0x1b3/0x450 [ 1624.345980][T26718] elevator_set_none+0xb5/0x140 [ 1624.351455][T26718] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1624.357784][T26718] nbd_start_device+0x17f/0xb10 [ 1624.363254][T26718] nbd_genl_connect+0x165b/0x1cf0 [ 1624.369012][T26718] genl_family_rcv_msg_doit+0x22a/0x330 [ 1624.375131][T26718] genl_rcv_msg+0x61c/0x7a0 [ 1624.380178][T26718] netlink_rcv_skb+0x232/0x4b0 [ 1624.385571][T26718] genl_rcv+0x28/0x40 [ 1624.390176][T26718] netlink_unicast+0x75c/0x8e0 [ 1624.395462][T26718] netlink_sendmsg+0x813/0xb40 [ 1624.400841][T26718] ____sys_sendmsg+0x972/0x9f0 [ 1624.406228][T26718] ___sys_sendmsg+0x2a5/0x360 [ 1624.411431][T26718] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1624.416915][T26718] do_syscall_64+0x15f/0xf80 [ 1624.422058][T26718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.428569][T26718] [ 1624.428569][T26718] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1624.437360][T26718] blk_alloc_queue+0x546/0x680 [ 1624.442658][T26718] __blk_mq_alloc_disk+0x197/0x390 [ 1624.448386][T26718] nbd_dev_add+0x499/0xb50 [ 1624.453409][T26718] nbd_init+0x168/0x1f0 [ 1624.458194][T26718] do_one_initcall+0x250/0x870 [ 1624.463599][T26718] do_initcall_level+0x104/0x190 [ 1624.469166][T26718] do_initcalls+0x59/0xa0 [ 1624.474053][T26718] kernel_init_freeable+0x2a6/0x3e0 [ 1624.479803][T26718] kernel_init+0x1d/0x1d0 [ 1624.484669][T26718] ret_from_fork+0x514/0xb70 [ 1624.490062][T26718] ret_from_fork_asm+0x1a/0x30 [ 1624.495365][T26718] [ 1624.495365][T26718] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1624.502754][T26718] __lock_acquire+0x15a5/0x2cf0 [ 1624.508131][T26718] lock_acquire+0x106/0x350 [ 1624.513278][T26718] fs_reclaim_acquire+0x71/0x100 [ 1624.518743][T26718] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1624.525714][T26718] __alloc_skb+0x1d0/0x7d0 [ 1624.530840][T26718] tcp_send_active_reset+0x8a/0x550 [ 1624.536683][T26718] __tcp_close+0x4c5/0xfe0 [ 1624.541622][T26718] tcp_close+0x28/0x110 [ 1624.546305][T26718] inet_release+0x143/0x190 [ 1624.551335][T26718] sock_release+0x85/0x150 [ 1624.556363][T26718] rds_tcp_accept_one+0x641/0xd70 [ 1624.562133][T26718] rds_tcp_accept_worker+0x1d/0x70 [ 1624.567894][T26718] process_scheduled_works+0xb5d/0x1860 [ 1624.573992][T26718] worker_thread+0xa53/0xfc0 [ 1624.579165][T26718] kthread+0x389/0x470 [ 1624.583805][T26718] ret_from_fork+0x514/0xb70 [ 1624.588960][T26718] ret_from_fork_asm+0x1a/0x30 [ 1624.594355][T26718] [ 1624.594355][T26718] other info that might help us debug this: [ 1624.594355][T26718] [ 1624.604837][T26718] Chain exists of: [ 1624.604837][T26718] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 1624.604837][T26718] [ 1624.617910][T26718] Possible unsafe locking scenario: [ 1624.617910][T26718] [ 1624.625451][T26718] CPU0 CPU1 [ 1624.630813][T26718] ---- ---- [ 1624.636351][T26718] lock(k-sk_lock-AF_INET6); [ 1624.641029][T26718] lock(sk_lock-AF_INET6); [ 1624.648097][T26718] lock(k-sk_lock-AF_INET6); [ 1624.655392][T26718] lock(fs_reclaim); [ 1624.659471][T26718] [ 1624.659471][T26718] *** DEADLOCK *** [ 1624.659471][T26718] [ 1624.667702][T26718] 4 locks held by kworker/u8:5/26718: [ 1624.673069][T26718] #0: ffff888032015940 ((wq_completion)krdsd){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1624.684051][T26718] #1: ffffc90005a7fc40 ((work_completion)(&rtn->rds_tcp_accept_w)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1624.696756][T26718] #2: ffff888064579e60 (&rtn->rds_tcp_accept_lock){+.+.}-{4:4}, at: rds_tcp_accept_one+0xa9/0xd70 [ 1624.707564][T26718] #3: ffff88804063c5e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 1624.717095][T26718] [ 1624.717095][T26718] stack backtrace: [ 1624.723102][T26718] CPU: 0 UID: 0 PID: 26718 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 1624.723128][T26718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1624.723140][T26718] Workqueue: krdsd rds_tcp_accept_worker [ 1624.723163][T26718] Call Trace: [ 1624.723170][T26718] [ 1624.723177][T26718] dump_stack_lvl+0xe8/0x150 [ 1624.723196][T26718] print_circular_bug+0x2e1/0x300 [ 1624.723219][T26718] check_noncircular+0x12e/0x150 [ 1624.723242][T26718] __lock_acquire+0x15a5/0x2cf0 [ 1624.723260][T26718] ? lockdep_unlock+0x5d/0xd0 [ 1624.723274][T26718] ? __lock_acquire+0x146e/0x2cf0 [ 1624.723297][T26718] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1624.723318][T26718] lock_acquire+0x106/0x350 [ 1624.723334][T26718] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1624.723356][T26718] ? lock_acquire+0x106/0x350 [ 1624.723375][T26718] fs_reclaim_acquire+0x71/0x100 [ 1624.723397][T26718] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1624.723417][T26718] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1624.723438][T26718] ? __alloc_skb+0x1d0/0x7d0 [ 1624.723452][T26718] ? __local_bh_enable_ip+0xd0/0x130 [ 1624.723471][T26718] __alloc_skb+0x1d0/0x7d0 [ 1624.723486][T26718] tcp_send_active_reset+0x8a/0x550 [ 1624.723510][T26718] __tcp_close+0x4c5/0xfe0 [ 1624.723531][T26718] tcp_close+0x28/0x110 [ 1624.723548][T26718] inet_release+0x143/0x190 [ 1624.723570][T26718] sock_release+0x85/0x150 [ 1624.723590][T26718] rds_tcp_accept_one+0x641/0xd70 [ 1624.723611][T26718] ? process_scheduled_works+0xa70/0x1860 [ 1624.723628][T26718] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 1624.723651][T26718] rds_tcp_accept_worker+0x1d/0x70 [ 1624.723670][T26718] ? process_scheduled_works+0xa70/0x1860 [ 1624.723685][T26718] process_scheduled_works+0xb5d/0x1860 [ 1624.723711][T26718] ? __pfx_process_scheduled_works+0x10/0x10 [ 1624.723729][T26718] ? assign_work+0x3d5/0x5e0 [ 1624.723745][T26718] worker_thread+0xa53/0xfc0 [ 1624.723771][T26718] kthread+0x389/0x470 [ 1624.723791][T26718] ? __pfx_worker_thread+0x10/0x10 [ 1624.723807][T26718] ? __pfx_kthread+0x10/0x10 [ 1624.723826][T26718] ret_from_fork+0x514/0xb70 [ 1624.723845][T26718] ? __pfx_ret_from_fork+0x10/0x10 [ 1624.723861][T26718] ? __switch_to+0xc79/0x1410 [ 1624.723884][T26718] ? __pfx_kthread+0x10/0x10 [ 1624.723903][T26718] ret_from_fork_asm+0x1a/0x30 [ 1624.723928][T26718] [ 1625.155735][T13655] bridge0: entered allmulticast mode [ 1625.165955][T13655] pim6reg: entered allmulticast mode [ 1625.941038][T26725] net_ratelimit: 58 callbacks suppressed [ 1625.941064][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1625.955718][T26725] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1626.155546][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1626.163580][T26725] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1626.274959][T26733] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1626.282837][T26733] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1626.478556][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1626.486348][ T36] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1626.692487][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1626.700391][ T36] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1631.035896][ T36] net_ratelimit: 74 callbacks suppressed [ 1631.035920][ T36] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1631.049819][ T36] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1631.165442][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1631.173380][T26725] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1631.284983][T26725] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1631.293654][T26725] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1631.405080][ T4228] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1631.413624][ T4228] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1631.525117][ T4228] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1631.533699][ T4228] bond6: (slave ip6gretap1): failed to get link speed/duplex