last executing test programs: 5m25.355431347s ago: executing program 2 (id=1450): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111b4000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000001000000000000000941000000060018000007327564703a73797a320000000000001ba88c4351c521e78fb0bff9d35e7bd3f78bd782fba10ec9565f798c9229cbd25a087bbc89de17072579f3e07199640c6b0305b9b7e31e02370f3250a3daeae8cdb97f8de3a7129fb588a8b4af777b616ec0c4d86235aedebfbe13aa250fd3be28981a2d8bc053463eb1485e5388643d76ed0843ef75ea82d010c43cd351611c8fb8433714bea2bf7d52"], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000040)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e4d700", 0x60, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @empty, @mcast2, [@srh={0x3a, 0x4, 0x4, 0x2, 0x7e, 0x10, 0x28a5, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], "ef9edaaa64947bfe"}}}}}}}, 0x0) 5m25.111517889s ago: executing program 2 (id=1451): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @mcast2, 0x37df697b}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r2) recvmmsg(r2, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000940)=""/9, 0x9}, {&(0x7f0000000980)=""/71, 0x47}, {&(0x7f0000002e80)=""/4112, 0x1010}], 0x3}, 0xfffff001}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000002400)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="030704707900000000000100040004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) close(r4) socket(0x1e, 0x5, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x28) setsockopt$inet6_tcp_int(r5, 0x11a, 0x4, &(0x7f0000000040), 0x44) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r8, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="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"], 0x1188}, 0x1, 0x0, 0x0, 0x4000d}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newsa={0x1f0, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x640100fe, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x2}, {0x10, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}, [@algo_auth_trunc={0x9c, 0x14, {{'hmac(sha256)\x00'}, 0x280, 0x80, "e769d480b78f9d92808cdc1271b15ae3b9c34dc064e8f3a552324c771e9a7f8508870742e9c1888f84ca0c10b8b12d84c0dd4f0cd10e5c7893c136dcdfe7f37d89d1a9ac1a462ce176b74f01b08e6799"}}, @algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e23, @in=@rand_addr=0x64010100}}]}, 0x1f0}}, 0x0) 5m24.120070333s ago: executing program 2 (id=1464): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$kcm(0x2d, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x64, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000880)=ANY=[@ANYBLOB="b800000019000100000000000000000020010000000000000000000000000000ff020000000000000000000000000001004f57573a86db2844d9000000000000000200200032000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000000000000000000800"/112], 0xb8}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000380)=""/225, 0xe1}, {&(0x7f0000000580)=""/100, 0x64}, {&(0x7f0000000600)=""/121, 0x79}], 0x3, &(0x7f00000006c0)=""/41, 0x29}, 0x101) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x4, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000040)=0x15, 0x7e) (async) sendmsg$netlink(r4, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180), 0x1, 0x0, 0x0, 0x24000811}, 0x41) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000440)={@fallback=r5, r5, 0x2f}, 0x20) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)={0x7, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000010c0)={@cgroup=r5, r5, 0x2f, 0x2030, 0x4, @void, @void, @value=r6}, 0x20) (async, rerun: 32) r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc) (async) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000300)=0x8df, 0x4) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x310bb}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x30082, 0x22}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000081}, 0x24008000) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_PARMS={0x28, 0x1, {{0xf7, 0x2, 0x35, 0x3, 0x8}, {0x77, 0x0, 0x7f, 0x8000, 0x4}, 0x1, 0x9ccd, 0x1941}}]}}]}, 0x60}}, 0x4000010) (async) setsockopt$SO_J1939_PROMISC(r8, 0x6b, 0x2, &(0x7f0000000240)=0x1, 0x4) 5m23.943493931s ago: executing program 2 (id=1468): unshare(0x68040200) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0x8000, 0x4, 0xe5f2}) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f00000000c0)=0xd, 0x4) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e28, @empty}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x2, 0x4e23, @broadcast}, 0x253, 0x0, 0x0, 0x0, 0x26c8, 0x0, 0x9, 0x8, 0x866}) 5m22.362530694s ago: executing program 2 (id=1483): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x9, 0xfffffff9, 0x0, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/102, 0x66}], 0x1}, 0x1000}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/79, 0x4f}], 0x1, &(0x7f0000000240)=""/25, 0x19}, 0x9}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)=""/4096, 0xffffffffffffff95}, {&(0x7f0000000340)=""/11, 0xb}, {&(0x7f0000000440)=""/110, 0x6e}, {&(0x7f00000004c0)=""/179, 0xb3}, {&(0x7f0000000580)=""/140, 0x8c}, {&(0x7f0000000640)=""/139, 0x8b}], 0x6, &(0x7f0000000780)=""/113, 0x71}, 0x9}], 0x3, 0x0, 0x0) 5m21.898874785s ago: executing program 2 (id=1486): r0 = socket$kcm(0x2, 0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0x10, @esp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x42}, @broadcast, 0x7, 0x80}, {0x0, @remote, 0xd, 0x4, [0x7, 0x8]}, @ah_ip4_spec={@multicast1, @private=0xa010100, 0x0, 0x5}, {0x0, @local, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000270001002bbd7000fed7df5006"], 0x14}}, 0x24000004) 5m6.73648027s ago: executing program 32 (id=1486): r0 = socket$kcm(0x2, 0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0x10, @esp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x42}, @broadcast, 0x7, 0x80}, {0x0, @remote, 0xd, 0x4, [0x7, 0x8]}, @ah_ip4_spec={@multicast1, @private=0xa010100, 0x0, 0x5}, {0x0, @local, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000270001002bbd7000fed7df5006"], 0x14}}, 0x24000004) 2m44.865845621s ago: executing program 3 (id=2790): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x14, 0x3, 0x8, 0x7, 0x141, 0xffffffffffffffff, 0xfca1, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) bind$alg(0xffffffffffffffff, &(0x7f00000006c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000640)=""/11, 0xb}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000240)}}], 0x2, 0x40000000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x8, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x9, 0x20000003, 0x5, 0x3, 0x100, 0x7, 0x5, 0xdce, 0x1, 0xa, 0x1a, 0x1d, 0x0, 0xffff8004, 0x9}}]}}]}, 0x170}}, 0x24040004) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, 0xc80, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={@remote, 0x54, r3}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xb}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x400c804) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x108, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0xd8, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc8, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xb, 0x7}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xc}}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xd, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xff, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x100}}, @IFLA_VLAN_QOS_MAPPING={0x54, 0x1, {0x2, 0xce10}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1ff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x283, 0x13}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4bf4, 0x200}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xffffffffffffffd3, 0x1, {0x3, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff, 0xffff7fff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x108}}, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0xfff3, 0x5}, {0xfff2, 0xffff}, {0x1, 0xffe4}}}, 0x24}}, 0x20044800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x700, 0x7800, 0x4, 0x200, {{0x17, 0x4, 0x0, 0x3, 0x5c, 0x65, 0x0, 0x8, 0x2f, 0x0, @multicast1, @multicast2, {[@noop, @timestamp_prespec={0x44, 0x44, 0xfe, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x19}, 0x8}, {@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x1}, {@rand_addr=0x64010100, 0xf0b2}, {@private=0xa010100, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast2, 0xd}, {@local, 0x101}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000002c0)={0x0, @initdev, @dev}, &(0x7f0000000300)=0xc) 2m44.150398958s ago: executing program 3 (id=2797): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) unshare(0x28000600) r1 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000006000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7edfffffefe00008500000086000000bf09000000000000550901000000008095000000000000008510000006000000bf91000000010000b7020000000000408500000084000000b7000000000500009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) poll(&(0x7f0000000000)=[{r0, 0x410}], 0x1, 0x6) 2m43.878570437s ago: executing program 3 (id=2800): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '{'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xb2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x14840) 2m41.134603385s ago: executing program 3 (id=2803): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0x12) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="25b89ca38ffd48f3be52163448412ba88b3b3470", 0x14}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f7", 0x1d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d", 0x6b}, {&(0x7f0000000800)="38c4340e8710b8eaedd392cbf07690d4a3f2b8eadcac25284b2afc2a941cbe880cf2d0823ecd83a7b84b4154e5a802b7de51c5b236647c77656a585c60798db780d8e1bf9d21f0f1f2719ed31a3c18c47b3c5abb4dea4c758c7eb47b7e982793ca63b0b9d4b4611fbcc0ffad443b9ef7358117a5", 0x74}], 0x4, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x20044014) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f00000001c0)=""/51, 0x33}, {&(0x7f0000000740)=""/125, 0x7d}], 0x3}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x3e}}}}}, 0x63}, 0x1, 0x0, 0x0, 0x20000045}, 0x40046) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, 0x0, 0xfffffffffffffebb) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @remote, 0x54}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x17, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r6, 0x40086e81, &(0x7f0000000140)=0x1) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') gettid() 2m40.869672793s ago: executing program 3 (id=2807): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000002b40)='cubic', 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) (async) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1, 0x1, 0xfffffff8) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) syz_genetlink_get_family_id$team(&(0x7f00000044c0), r3) (async) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r3) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x2, 0x0) (async) r8 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x1}, {0x5, 0x7}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x9]}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) (async) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x1}, {0x5, 0x7}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x9]}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) bind$netlink(r6, 0x0, 0x0) (async) bind$netlink(r6, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee163", 0x55, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31}, &(0x7f0000000780)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31}, &(0x7f0000000780)=0x40) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000003c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050427bd7000fedbdf2501000000080001008ddc4ec99083396c1cd5b59bb267ceff8c87c7783b9f098bd5cf20a7400356c7fff056a7c7da87dd29e78254534aea4ab6628d1ce31349bd876bf079844a8773c1e730b9c76ed06f3bae8777b91f155285a6a525cae6ec22fe832ffda8c149f3ecfd44fd68125fa53b94a9f5276f75508bed15c2fa44c14afd73c6b26604483601d47437e3117d8ca5fea7035474840aa5bad7c6ba6d72d7d99c6400ebb7e4f33c29e85eed5d2d7c82311641e9", @ANYRES32=r5, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b757000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x54) 2m40.474291343s ago: executing program 3 (id=2810): r0 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x11d, 0x71, 0x0, &(0x7f0000000100)) unshare(0x22020400) r1 = socket(0x2a, 0x4, 0x6) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000001, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1000000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="00000008000000210000000000000000000000e05ef9759cbdb79c4af4c1f93cd0a622c3f09e13d35b96120a47d12b5503946acea0132da76833a93a5ff1ac2de2065978947cd8b7cc58c6faa874e1cb05e2e200447e2b154786d48ba1abc31cb983a8961466c17cb396032a95507124507a9b89fb452cdec5f58a82828d71c5af05fd539daa5e1b28c038a537a7c4fa4c2005e83e1f06", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000100), 0x0}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x14, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x80000) recvmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000000380)=""/193, 0xc1}, {&(0x7f0000000880)=""/206, 0xce}], 0x3}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)={0x4c, 0x13, 0x100, 0x70bd25, 0x25dfdbfe, {0xa, 0x3, 0x4, 0x0, {0x4e23, 0x4e20, [0xaf, 0x3, 0x7, 0x49], [0x2, 0x6, 0x1, 0x4], 0x0, [0x8, 0x264]}, 0x3, 0x80000001}}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) writev(r6, &(0x7f0000000080)=[{&(0x7f00000012c0)="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", 0x130}, {&(0x7f0000000180)="1a39e33c9bb56fd43a362ffea90553761d7ed507c9de39febbf44d3f865312c8f87355b539002cdd0c62a1b4af1b231aedcaa350cbed61f038c59eb5ab370f7078bb09bba3f39fd8421406392f4ce0", 0x4f}, {&(0x7f0000000480)="607dd884f33ff413bd131c8b890067b9df813bdca47007b3029f63a8ce8d396f07410753", 0x24}], 0x3) sendmmsg$inet6(r4, &(0x7f0000003b00)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x2, @mcast1}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)=ANY=[], 0x11e0}}], 0x2, 0xc040) unshare(0x40000580) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000240)={'batadv_slave_1\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x6, 0x6, "b161a9563f26"}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}}, 0x4000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0xffff0000, 0x10, 0x0, &(0x7f0000000700)="2b20c62e14816203d10ca49da2aa7bbf", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r10, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) 2m25.318628772s ago: executing program 33 (id=2810): r0 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x11d, 0x71, 0x0, &(0x7f0000000100)) unshare(0x22020400) r1 = socket(0x2a, 0x4, 0x6) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000001, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1000000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="00000008000000210000000000000000000000e05ef9759cbdb79c4af4c1f93cd0a622c3f09e13d35b96120a47d12b5503946acea0132da76833a93a5ff1ac2de2065978947cd8b7cc58c6faa874e1cb05e2e200447e2b154786d48ba1abc31cb983a8961466c17cb396032a95507124507a9b89fb452cdec5f58a82828d71c5af05fd539daa5e1b28c038a537a7c4fa4c2005e83e1f06", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000100), 0x0}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x14, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x80000) recvmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000000380)=""/193, 0xc1}, {&(0x7f0000000880)=""/206, 0xce}], 0x3}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)={0x4c, 0x13, 0x100, 0x70bd25, 0x25dfdbfe, {0xa, 0x3, 0x4, 0x0, {0x4e23, 0x4e20, [0xaf, 0x3, 0x7, 0x49], [0x2, 0x6, 0x1, 0x4], 0x0, [0x8, 0x264]}, 0x3, 0x80000001}}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) writev(r6, &(0x7f0000000080)=[{&(0x7f00000012c0)="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", 0x130}, {&(0x7f0000000180)="1a39e33c9bb56fd43a362ffea90553761d7ed507c9de39febbf44d3f865312c8f87355b539002cdd0c62a1b4af1b231aedcaa350cbed61f038c59eb5ab370f7078bb09bba3f39fd8421406392f4ce0", 0x4f}, {&(0x7f0000000480)="607dd884f33ff413bd131c8b890067b9df813bdca47007b3029f63a8ce8d396f07410753", 0x24}], 0x3) sendmmsg$inet6(r4, &(0x7f0000003b00)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x2, @mcast1}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)=ANY=[], 0x11e0}}], 0x2, 0xc040) unshare(0x40000580) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000240)={'batadv_slave_1\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x6, 0x6, "b161a9563f26"}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000002700090025bd7800fddbdf250f000000080001"], 0x1c}}, 0x4000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0xffff0000, 0x10, 0x0, &(0x7f0000000700)="2b20c62e14816203d10ca49da2aa7bbf", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r10, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) 2m24.060300203s ago: executing program 1 (id=2927): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r1, &(0x7f0000000140), 0x0}, 0x20) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000780)={0x2, &(0x7f0000000600)=[{0x2d, 0x0, 0x10, 0x1}, {0x25}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x6f4b, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000002a00)={0x3, 0x48, '\x00', 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f00000030c0)={0x1, 0x8, @status={[0x1, 0x2, 0x26d7036a, 0xad, 0x80000001, 0x9]}, [0x3, 0x9, 0x9, 0x9, 0x800, 0x100000000, 0x5, 0x3c, 0x85f6, 0x400, 0x0, 0x9, 0x0, 0x2, 0x7f, 0x4, 0x3, 0x0, 0x7, 0x3, 0x0, 0x7, 0x6, 0x0, 0x9, 0x5, 0xab48, 0x400, 0x400, 0x3, 0x9, 0x5, 0x3, 0x5, 0x6d8, 0xfffffffffffffff8, 0x7ff, 0x3, 0x6, 0x80, 0x4000400000000, 0x7, 0x1, 0xffffffff, 0x9, 0x9, 0x6, 0x2, 0x4, 0x81, 0x6, 0x0, 0x200, 0x1, 0x7, 0x2, 0x960, 0x0, 0xebb5, 0x6, 0x100, 0xd3, 0x0, 0x55a7]}) sendmmsg(r2, &(0x7f0000000200), 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x400) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/time_for_children\x00') sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0304000000000000140012800a000100090063616e0000000400028008001c00", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4002840}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, 0x0, &(0x7f0000000040)) recvmmsg(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}, {{&(0x7f0000000080)=@rc={0x1f, @none}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/137, 0x89}], 0x1}}, {{&(0x7f0000000380)=@pppol2tpv3, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/31, 0x1f}, {&(0x7f00000004c0)=""/137, 0x89}, {&(0x7f0000000580)=""/55, 0x37}], 0x3, &(0x7f0000000600)=""/34, 0x22}}, {{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000001880)=[{&(0x7f00000006c0)=""/194, 0xd0}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/159, 0x9f}], 0x3, &(0x7f00000018c0)=""/74, 0x4a}, 0x1}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000001940)=""/87, 0x57}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/60, 0x4c}, {&(0x7f0000002a40)=""/244, 0xfffffffffffffe86}, {&(0x7f0000002b40)=""/137, 0x89}, {&(0x7f0000002c00)=""/17, 0x11}, {&(0x7f0000002c40)=""/230, 0xe6}, {&(0x7f0000003000)=""/145, 0x89}], 0x8, &(0x7f0000002e80)=""/28, 0x1c}, 0x5}], 0x5, 0x45833af92e4b38ff, 0x0) 2m23.6622195s ago: executing program 1 (id=2932): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a35f200140600fe5000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='>\t\x00\x00\x00~\x00\x00'], 0x0) unshare(0x8040480) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000440)={0x80000001, 0x0, 0x0, 0x100}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000001a000100000000000000000080"], 0x84}}, 0x20048010) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r4 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41b2cc32b38d3440c6942cb76cab300"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff008}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r6) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="94010000", @ANYRES16=r7, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_gstrings={0x1b, 0x6}}) syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb8100000086dd60f57a1400403a00fe8000000000000000000000000000bbff02000000000000000000000000000102009078000000006050835900000000fc010000000000000000000000000000ff01000000000000000000000000000106000400046800000000000000000000dcef899cd28f61234dee206340704d07f342355190340c9aeaba435d6a77e631c87761651352a82cb88aa65bf91eed0267623d"], 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, 0x0, 0x0}, 0x20) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 2m23.290407008s ago: executing program 1 (id=2934): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a000000bb0000a1512600000000000086dd6a473bc600102c"], 0x4a) 2m23.038203161s ago: executing program 1 (id=2937): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x3ff, 0x3, 0x4, 0x10201, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x7, 0x5}, 0x50) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86ba", 0x19}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b", 0x17}, {0x0}, {&(0x7f0000000800)}], 0x4}}], 0x1, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m22.928597736s ago: executing program 1 (id=2939): socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRES64=r0], 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 2m22.7327185s ago: executing program 1 (id=2943): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd22, 0x0, {{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4e22, 0x1, 0x8000, 0x4, 0x2, 0x0, 0x60, 0x2f, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0xfffffffffffffffc, 0x8, 0xa, 0x8, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x0, 0x0, 0xac}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'team_slave_0\x00'}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x32, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x2, 0x100, @val=0x80}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r8 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, @nl=@unspec, @isdn={0x22, 0x2, 0x7, 0x2, 0x9}, 0xa55c, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='ip6_vti0\x00', 0x7, 0x4, 0x3}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r11, 0x800448d4, &(0x7f0000000400)) 2m7.644021159s ago: executing program 34 (id=2943): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd22, 0x0, {{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4e22, 0x1, 0x8000, 0x4, 0x2, 0x0, 0x60, 0x2f, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0xfffffffffffffffc, 0x8, 0xa, 0x8, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x0, 0x0, 0xac}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'team_slave_0\x00'}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x32, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x2, 0x100, @val=0x80}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r8 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, @nl=@unspec, @isdn={0x22, 0x2, 0x7, 0x2, 0x9}, 0xa55c, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='ip6_vti0\x00', 0x7, 0x4, 0x3}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r11, 0x800448d4, &(0x7f0000000400)) 7.120874576s ago: executing program 7 (id=3829): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000340)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002", @ANYRES32=0x0, @ANYRES16], 0x80}}, 0x0) (async) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x25, &(0x7f00000002c0), 0x8) (async) sendmsg$kcm(r0, &(0x7f0000000a80)={&(0x7f0000000240)=@ethernet={0x6, @local}, 0x80, &(0x7f0000000700)=[{&(0x7f00000003c0)="e908a09c1a50ea1713f88af410cc1028d4d7b699b83f0f7cac8fc786429c5cb2fb33856a4122ad25261fedfdd64e1a8603cbc82a10c7940525b364c39d5968a85c3effee78772cf3706decd7d4de79af89eec38bfbfccd08f6d831d9181a40577d0cc0621d2cff0c59e562f507d7aaad4796f12d3d0b27791aa5283104cf45b4e1902c280e91e4252e90611bd4173cf5920f98b8627f538b5184030c478245978a9aec17b5c4f43a32e518c06e2cc22868f5f8873d06", 0xb6}, {&(0x7f0000000480)="de4425e9414c5a383b4615cfbad8130d8175c0ef8fded886c440da6fedfd3ffc785c3f35f4157eeb42e1a889c8403c4e28dbb2dbe92e5a9d8f2c6ebb626379b3948c6aab9ede1efe1f460cc37cc0dbb5ded4983632568d83df813b937e1dfb32037eb186029fbb492bbfe8b5adbb8a571820f369aedd75b11f3a79bd451bb55990499d2008992702fe6412487c8e8515f643ce6a92544a35d050d20c17e8da3c6359db3fd4237f226fd66f6b7322c9e80aa829c96921e4ecbc2486ff451e5286554024233e8152a9befb3c0c3dd13cea", 0xd0}, {&(0x7f0000000580)="66096ffc68e48b7cd9f985c7215ea16b3679ceb1b3f86963b28c8333673d4caa3097249438f7100b7934610db6cb9b61af5edf72c0fe9d1445cecd15feb791e5559cef79cd8ca5cf0114f65f9ea5b1ca00cee3a9b2d09aa77ba8a6eb7fa3400bdccbcc1c77ab3b5e17cedc381e76cd27593b0fc6039807d208b07612f03c8d16c1584cfc965d01f91f9e33355e74e1748d1020bd21f67d96aa51669665db70", 0x9f}, {&(0x7f0000000640)="f2e3", 0x2}], 0x4, &(0x7f0000000740)=[{0xd8, 0xff, 0x4, "2235820da1ae6b24fa07863719768e2c47a0ea62c31a1029e3786e9623afb6ee55493e52d66d6b23f72efbd3c6586aa84ffdf857d8098faf7bf0ce59af90eac6251b1d18712665a8ac6b4572735216733dc5851e71e90b04a142f6f04f73cbf8cfb1cb3b68d204f306edf5350d357649af2958a07683645f7f95790c991765c571eea1a1f95a2e387841bbf219c0a338590b2708b22cda1f6d48e7ba26e896b49a51d10af9b4b361e53a24f0ffc085e13dc375b84a89fc26cf33f76f82af878d226257b663"}, {0x110, 0x29, 0xa89, "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"}, {0xd0, 0x114, 0x8, "d9b998e69a348d247758106513a62444fe821ab71347878011ddac74e5a95750e5679d35a0e7149b771c084c95299310064fcdf7713a6af8896107169fb7153dadc4448ccb45ba816a190d181a449a65f7a9db457b7907fcfc0ba1ef7cc11f1da22fdf49f6080203c49b69bb5250d7593c6fcbb0e05e2ad39c6a295ca0253847c89bc6681cce26a86eebbe0fdeb24b99de4c4b3dbabff7c78b9d94ad150101bd7b9de90c33a88b6bbd0af85ed64ad7b3f0b1f991c448658723d006956ac850a3"}, {0x38, 0x112, 0x8000, "06de9c3e3b624ab122a73fcb27cf0ff3da5be79a820bb4be1d51efd321879b69949adce369b808b5"}, {0x20, 0x108, 0x10001, "344b21f2510c535895a8f4a7b467"}], 0x310}, 0x8000) (async) r1 = socket$key(0xf, 0x3, 0x2) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x1e, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d61746368000000300002800800024000000001180003006c72726c6c72726c0500000000000000010000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) (async) sendmmsg(r1, &(0x7f00000000c0), 0x2c8, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffe, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x22}}]}}}, @IFLA_MTU={0x8, 0x4, 0x1000}]}, 0x44}}, 0x4000) 6.5067654s ago: executing program 7 (id=3836): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1b4}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080400000000000000000000000000000044000500ac141440000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x604c080}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162f", 0x26}, {&(0x7f0000002900)="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", 0xed2}, {&(0x7f00000000c0)="01d2df2e944cdb8a291a4db764bf54514270708beff053fb989b64113093", 0x1e}, {&(0x7f0000000400)="31b1667fb95ef87393ae4124a978d8f262cfc5a9dff465f2e68bc18cf43ac3f02adddbaccd4fe527717355", 0x2b}, {&(0x7f00000002c0)="eb9ed01e38c9451186", 0x9}], 0x5}, 0x40000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x8c1) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'erspan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300100000000000fbdbdf2500000000000000000000000000000001ac1414bb00000000000000000000000000000004cc9d00000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000700000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000006000000c06b6e000001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x20004000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) 6.128500913s ago: executing program 7 (id=3843): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x5, @mcast1, 0x3ff}, 0x80, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0xf}, 0x4) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r2, &(0x7f00000000c0)="7eaf9d668116879c47349548e696c4f047b21e974af5ae0221bfdd649a73ba538d5ada928c315be4935b585715b92e74f2541365538fd58c169fcaae8b0294082d47e8783b2fb3f20ebae357e2946872ab0cc940b086a62345de6a7ae88d986d33cb629f2c9f59c4d4661eb5ddc971c4581eaaebbb3f14e06d95334d5513b5a281ae557c077caffbd10d1ee4fe270e4d978156db973b42080a0f1788c925500fbc49f4fd4f9cf4eb76f51c5c18f84f96f52ba1891582c0eb73731cb206d595379e9c2a8ef08253a6c53927dff5fca097a50256a9bed03bd7b5b20c05f617625331ef785d1fbe8ef50f46e3", 0xfffffffffffffded, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00c8c7b55b7e760b8a364d33c0ed385a800f69c8f7b386df0e7ab73c901d5834a00a31e618fcb0ac2b", @ANYRES32=0x0, @ANYBLOB="05840000008000001c0012800b00010062726964676500000c00028008001400010000001400030062726964676530000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x400c800}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40ffffffff0900020073797a35000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140000000083c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003802c0000800800034000000002140000001000010000000000000000000084000a4f4f78d7065d803b"], 0xe0}}, 0x0) 4.589352113s ago: executing program 7 (id=3861): r0 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000000)={0xd, 0x8, 0x7, @random="4fc5d2bdebf4", 'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000010003b0c00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028004001200060011004e20000005001600010000d1a400060010004e23"], 0x50}}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCOUTQ(r4, 0x5411, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x3c, r6, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40840) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x4e22, 0x0, @mcast2, 0x5}}}, 0x108) 4.44615497s ago: executing program 5 (id=3862): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0xc) (async) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x6, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, @in=@broadcast, 0x4e20, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x10401, 0x9141, 0x800, 0x0, 0xf42, 0x5, 0x4}, {0x0, 0x0, 0x0, 0x1000}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@empty, 0x4d6, 0x2b}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x100350b, 0x5, 0x0, 0x4, 0x0, 0x8, 0xfffffffd}}, 0xe8) (async) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x200000}, 0x1c) (async) close(r2) write(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 32) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x6, 0x0, &(0x7f0000000080)) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB="240000000000037c0000100003800c00080000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fbffffff000000000000000085000000bc000000850000000f0000003ff9383886541566ded9bd21510000004db1ab616ecd52313abd35d2e069"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e020000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x2000c008) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xfe2c, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async, rerun: 32) socket$kcm(0x2, 0xa, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe87, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x8, 0x0, 0x0}}, 0x10) 4.336506674s ago: executing program 7 (id=3865): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r3 = socket(0x8, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000b5e30000020c0000000c000000"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000000000000000400000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000"], 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) ioctl$TUNGETSNDBUF(r4, 0x800454d3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r9, 0x0, 0x20048041) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newqdisc={0x8c, 0x24, 0x4, 0x70bd24, 0x1, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff1}, {0xffff, 0xffff}, {0xb, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x89, [0x8, 0xe, 0x4, 0x8, 0x1, 0xa, 0x8, 0x1, 0x6, 0x2, 0xe, 0x4a, 0x7, 0xe, 0xf, 0x2], 0x0, [0x3, 0x4, 0xd9, 0x1, 0x2, 0x1, 0xdc9, 0x4, 0x9a, 0x6, 0xa, 0x3ff, 0xa331, 0x100, 0x4, 0x3], [0xd, 0x9, 0x6, 0x6, 0xcbb, 0x7, 0xfff, 0x5, 0x1, 0x6, 0x6, 0x8, 0x9, 0x7291, 0xd, 0x573f]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000110700)={0x9, [], 0x7, "e81e98e4abedff"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, 0x0) gettid() 4.124277117s ago: executing program 5 (id=3866): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) close(0x3) socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x20000000}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x5000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000890) 3.905756572s ago: executing program 5 (id=3869): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd70000e0000000202ff0008000100", @ANYRES32=r3, @ANYBLOB="0800020001"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0xfffffffe, 0xd00, 0x2}, 0x1c) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, 0x0, 0x0) unshare(0x2c060000) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd7000000000000400000048031180"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000002c00070127bd7000fcdbdf25097c00000804003200040003805fe867247ccab6b79bc03d4ec030d1cf7a7e901a9a523937121609f798a36545aa55edd624aae998082d76983f43f2ec1c582f9b38799f2e3b145dc7041f6c8ff9e68ffdd92f56bb82f7d187d215c60107d397a235998d5562b2d0fb9d8e2d50e66c17744466a300613908552b2932e3435cdd45dc5c26ac75486338190eda0665047c1eba4e978f8133ce84557964e599"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r9, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r8, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)={0x5c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_HOP_PENALTY={0xfffffffffffffffb, 0x35, 0xff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x4090) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r10, 0xf501, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000020feffff720af0fff8ffffff71a4f2ff000000001f03000000000000e5000200000000002604fdffff0200007b010000000000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 3.185700247s ago: executing program 5 (id=3873): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ffff"], 0x48) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0, 0x0, '\x00', r2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000080), &(0x7f00000002c0)}, 0x20) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r3, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="18080004000600000000000000140000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000005a000000bca9000000000000350901000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8}, 0x8}, 0x90) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x9, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r6, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r7, r9, 0x8f5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000012c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', r4, r8, 0x4, 0x0, 0x4}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002440)={{r6}, &(0x7f00000023c0), &(0x7f0000002400)=r10}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r10}, 0xc) close(0x3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0}, 0x20) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001340)=ANY=[@ANYRESOCT=r10, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) 2.769669487s ago: executing program 0 (id=3877): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x38, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x9, @remote, 0x1}, @in6={0xa, 0x85eb, 0xe0000, @mcast2, 0x180}]}, &(0x7f0000000140)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000440)={r1, 0x8}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000680)={r1, @in6={{0xa, 0x4e22, 0x3, @remote}}}, &(0x7f0000000740)=0x84) sendmmsg$inet_sctp(r2, &(0x7f0000000c80)=[{&(0x7f0000000040)=@in={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="7190ed6e8c8e6fea20d08b4ea650e38bc5d31d53754db8f845d937d82c21813d96", 0x21}, {&(0x7f00000000c0)="9bcbde293ee0182377e7676f7934c8ed231910168928b0ad9fbed6dd6ae059e7940302", 0x23}, {&(0x7f0000000200)="cbff8565abdea9fd36d9b795d7a7cd8b0621e533f087eb450af8304513eaad89b29643e48516cc961ac53fc48fb741318d7c146b2c90109436b0c94af55ff86b99461a42118fa0cb27e098baa30aeb624ffa93e2", 0x54}, {&(0x7f0000000280)="4eb49deae553067a8caebcc7dd40136f6f023aa79e7832a68c9cb0f2cc9a64ddbe3fbdfa8318f8fe6cbf40508c5d0805ce89114bbc36eb2a85eb74416596bdca5126bd82b8eb38d7f695e861aeff94a8bfe598fbcd71922000660957263e7c9797beffc52bb80d437dea819c5cc0c30c2116ee84aef9de12ca1fed8cc854c06ea5e226f492819d1b34d6624c3518208a754bb58c4d914771c1bec23876c0ce6e829af7377ace54cd138542487e6330ce2cf42f7ee7e1d9c5b717a269dbd499715beea9a2d906b21a385aa2c9", 0xcc}, {&(0x7f0000000380)="c0d0c33f26ae95aae2439234db7f38666633167581051aa5a0b49413efc9845dec4cdb7673eabc9bd7c082", 0x2b}], 0x5, &(0x7f00000004c0)=[@sndinfo={0x20, 0x84, 0x2, {0xf, 0x8002, 0x9, 0x5, r1}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x1f}}, @sndinfo={0x20, 0x84, 0x2, {0xff, 0x8000, 0x4, 0x1, r3}}], 0x58, 0x44}, {&(0x7f0000000540)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000580)="6d5856b08347706eb482e948bc75211244cdeb0f0a457ce44cfd65c19acf367fb22f66132dab481d1d6710f3df40f15d5c2d38f9dcc7f37f35d35c0ebc27460ed45bc9dcb8905791cd7c24a0d5c1bb9b81beedd101a95006bdf24c67996d8fae64f65ad24b8b521086c44a9ef5ab4cf45e0a04d8d38bfb66091c42eeb29a2e21398e921ca4cd516233d2c5a7ee3d4534707976ca5eefa3c00722ff3f38aeffd982a3e8d97cf877973473c469f968f70775b757aa5c70470ba9a0ee7403", 0xbd}], 0x1, &(0x7f0000000780)=[@prinfo={0x18, 0x84, 0x5, {0x10}}, @authinfo={0x18, 0x84, 0x6, {0x9}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x1ff, 0x8000, 0x6, 0x2, 0x53, 0x0, 0x4, r4}}, @sndinfo={0x20, 0x84, 0x2, {0xb37, 0x208, 0x9, 0x1ffe0, r1}}, @sndrcv={0x30, 0x84, 0x1, {0xd8fb, 0x5, 0x205, 0x80f, 0x510b0393, 0xfffffffe, 0xa, 0x25, r1}}, @sndinfo={0x20, 0x84, 0x2, {0xd4, 0x8207, 0x1, 0x4, r1}}, @sndinfo={0x20, 0x84, 0x2, {0x1ff, 0x1, 0x6, 0x2, r1}}], 0xf0, 0x4000080}, {&(0x7f0000000880)=@in6={0xa, 0x4e20, 0x4, @empty, 0xf}, 0x1c, &(0x7f0000000b80)=[{&(0x7f00000008c0)="b02a553ce6cdf04bfaba209f0891e69b4cd1d2cdc5ff37322883d73c71f272ef9274cf541b2b28af2274d5b9aff45ddf9798764b4dbecef18a87d96609e717bcdd2f894d0b90dd013e5ad951b58c3e37a4c5fbe3748a3c3eb8992738edbeae6023d6307795c54cbeb7ebe6d9817be41f532f3e7e11529f2ab0971e8fa42e5b1872f95dce091c770b40c21260b0163cf846e1dd", 0x93}, {&(0x7f0000000980)="e4", 0x1}, {&(0x7f00000009c0)="a3359d7f1c6dafbcab1ac75430b9a578123c147f90fc8e9838a34409812190157641492110ce520bb731b6b433a0295cf9e01bc337764a90063f42029fd62ef62647c5d8dfab34c79b76be8a4132fc208d88060c9829168bef09589dfa679e2015bb3d32afb85b1ab30b0ff8ee0fee7fb813130a0252d2e8d954156970d82576b398363d05aa044639cad53bb68edc85f31f481a92616495c1c5a8978ccb7748de9fbd9a9b75", 0xa6}, {&(0x7f0000000a80)="74718723fd8a1e08fc643c0990491a4b482d23da2bb067142b636dcbec1c634688d7e604d98180a45e417f1a6c54e9b3be8d33048757eac59e4a179566cd280ce314c943", 0x44}, {&(0x7f0000000b00)="882540636f3a0bbf845d01661c7ae27a524351d6c8cf1bd2cdd3ffc16dffa9f4cae4671d4b84124b5cd1a4207ecf83bf55403aebdba2d534ec1eea180995f8b04bf11a784b4eb600028fdcd5e5eb6d0d29c21fae497e8320cf55f5e5f818ce", 0x5f}], 0x5, &(0x7f0000000c00)=[@sndinfo={0x20, 0x84, 0x2, {0x1, 0x200, 0x112, 0x3e24, r1}}, @init={0x18, 0x84, 0x0, {0x972a, 0x8001, 0x9, 0x50a}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @dstaddrv6={0x20, 0x84, 0x8, @local}], 0x78, 0x4000000}], 0x3, 0x4) 2.504790445s ago: executing program 0 (id=3880): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) mmap(&(0x7f000009f000/0x3000)=nil, 0x3000, 0x1, 0x30, 0xffffffffffffffff, 0x6f322000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x2, 0xa, 0x4}, {0x9c, 0x0, 0x7, 0x1, 0x6, 0x5}, 0x6, 0x71d, 0xa74}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @broadcast}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000440)=0x6, 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7}, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r10, 0x40, 0x4c, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x45}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000480), 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x1d, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r11, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) 2.33287181s ago: executing program 6 (id=3881): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x50) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000005c0)={r2, 0x7, 0x1, 0x6}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000005c0)={r2, 0x7, 0x1, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4, 0x1, 0xb, 0x4, 0xa, 0x0, 0x49}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xe, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000280)={0x4403, 0x215, 0x1, 0x4, 0x7, 0x0, 0x40}, 0xc) listen(r6, 0xb) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@newqdisc={0x60, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x34, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0xc}, @TCA_PIE_BETA={0x8, 0x5, 0x20}, @TCA_PIE_LIMIT={0x8, 0x2, 0x2}, @TCA_PIE_LIMIT={0x8, 0x2, 0x8}, @TCA_PIE_TARGET={0x8, 0x1, 0x6}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r9, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4810}, 0x810) sendmsg$FOU_CMD_ADD(r8, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x18, r9, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r11 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xd, &(0x7f00000000c0)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xd, &(0x7f00000000c0)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r12, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) accept4$inet6(r8, 0x0, &(0x7f00000000c0), 0x80800) (async) r13 = accept4$inet6(r8, 0x0, &(0x7f00000000c0), 0x80800) connect$bt_l2cap(r2, &(0x7f0000000400)={0x1f, 0x817e, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3a7, 0x1}, 0xe) (async) connect$bt_l2cap(r2, &(0x7f0000000400)={0x1f, 0x817e, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3a7, 0x1}, 0xe) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000200)) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@delchain={0x30, 0x2c, 0xf31, 0x70bd2c, 0x2000, {0x0, 0x0, 0x0, r10, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) sendmsg$NFT_BATCH(r2, &(0x7f0000000cc0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x30, 0xe, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x8c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x98}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x74, 0xe, 0xa, 0x300, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x118, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_USERDATA={0xef, 0xc, "af5ce19d68447b4ad8370917142d457544245cbcdebd1533f893a81603915716c90e5da8d49d2b423660b6bb835fca8ce211dc184ae27547f5a705512107ecf4d8a77791ea82ddd08478dbfc3476129ade965d68bf45313a9b89947ad8a032888a6aef210fd38e2e6734eda3ce332a265df2db16dff2b938c949dd8234a686430d2530b4f0b67a593b909eaaaf190a86879bec228d6dffe67649b0b63ef038925db0bc192f2a6e7d00f8d3786cce19f17435f0ef2777f9a9cd2d18d75424e0592660529db0d6069d5a8996f9e1a021b298553c16edebbd3b2f494db54673a2fdc909e9eb864f9269d8b88f"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x2ac}, 0x1, 0x0, 0x0, 0x20008800}, 0x20000801) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000cc0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x30, 0xe, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x8c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x98}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x74, 0xe, 0xa, 0x300, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x118, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_USERDATA={0xef, 0xc, "af5ce19d68447b4ad8370917142d457544245cbcdebd1533f893a81603915716c90e5da8d49d2b423660b6bb835fca8ce211dc184ae27547f5a705512107ecf4d8a77791ea82ddd08478dbfc3476129ade965d68bf45313a9b89947ad8a032888a6aef210fd38e2e6734eda3ce332a265df2db16dff2b938c949dd8234a686430d2530b4f0b67a593b909eaaaf190a86879bec228d6dffe67649b0b63ef038925db0bc192f2a6e7d00f8d3786cce19f17435f0ef2777f9a9cd2d18d75424e0592660529db0d6069d5a8996f9e1a021b298553c16edebbd3b2f494db54673a2fdc909e9eb864f9269d8b88f"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x2ac}, 0x1, 0x0, 0x0, 0x20008800}, 0x20000801) 2.205111074s ago: executing program 5 (id=3882): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000000)={0x7fffffff, 0x8}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x7fff, 0x7d, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x5, 0x5, 0x8}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8000000001, 0x0, 0x0, 0x1bb, 0x2000000000004}}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x45}, 0x4000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000004, 0x12, r0, 0x2a4e1000) setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000040), 0x4) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)={0x34, 0x13, 0x1, 0x70bd2b, 0x25dfdbf8, "", [@nested={0x4, 0x4f}, @typed={0x8, 0x33, 0x0, 0x0, @pid}, @nested={0x14, 0x125, 0x0, 0x1, [@nested={0x8, 0x2e, 0x0, 0x1, [@typed={0x4, 0x92, 0x0, 0x0, @binary}]}, @typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x43}}]}, @generic="f7"]}, 0x34}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) 2.002626945s ago: executing program 5 (id=3883): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a0002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="140000000800000000000000", @ANYRES32, @ANYBLOB="81220301e28a2a1c564e4c82051a3b3b95f1ccee7f353d2fe979b0584da9f6f2235d6ef5276ba57a3b7dc3564028b31aa78b0c0f2cb5a0d84a08676cb76608684ac90aac0e4f4548d8145e1766586b83b0da4a27c464494a8884ec7ee92086e36bcd98115b1029e5de34290bf1c864", @ANYRES64=0x0], 0x20) bind(r3, &(0x7f00000005c0)=@caif=@dbg={0x25, 0xfc, 0xfe}, 0x80) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)={0x50, r1, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="ca22b0e09da7"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d3d600eed4ac26175266d24c03833a3"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5f}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000000)=0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x400000002, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES64=0x0], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r9}, &(0x7f0000000540), &(0x7f0000000080)=r7}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r10}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x38, r5, 0x4, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c000}, 0x30) socket$can_raw(0x1d, 0x3, 0x1) 2.000082262s ago: executing program 6 (id=3884): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000000)={0x6, 'dummy0\x00', {0x5}, 0xb}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41040000015001001800128008000100677470000c00028008000100", @ANYRES32=r1], 0x40}}, 0x0) close(0x4) 1.997358739s ago: executing program 0 (id=3885): unshare(0x400) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(seed-generic)\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32, @ANYBLOB="0b1b050000000000440012800b000100697036677265000034000280"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100)={r4, 0x80}, 0x8) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f000000060002400000000024000480080002400000000008"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB="38100000", @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x4040800) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x1000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x8001) setsockopt$inet6_tcp_int(r7, 0x6, 0x6, &(0x7f0000000080)=0xe, 0x4) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40090}, 0x4c081) r8 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/250, 0xfa}], 0x1, &(0x7f00000003c0)=""/86, 0x56}, 0x21) socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x8000000004) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x0, 0x71, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}}, 0x0, 0x0, 0x28, 0x0, "e541bd3d3aa6a0bf75e9671e8aa4b31c134f3a9db8f52e7300fe6e079f35ac2318dc045b4b9f54061f9f15abd9fd7e5550345bce05c13ed90158fbdeb70322ea3188f81890e3d200"}, 0xd8) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r10, 0x0, 0xd1, &(0x7f0000000000)=0x8, 0x4) 1.878845012s ago: executing program 7 (id=3886): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={r5, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={r5, 0x38, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, @in6={0xa, 0x4e23, 0xce, @loopback, 0x3}]}, &(0x7f0000000380)=0x10) sendmsg$IPSET_CMD_TEST(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x54, 0xb, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x9}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xfb}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x880) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000600)={0x24, r7, 0x62c21a4ade68aba1, 0x0, 0x6, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r9}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004854}, 0x40050) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="d2be5700dc35b1df251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 1.878266372s ago: executing program 4 (id=3887): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d"], 0x0}, 0x94) write$bt_hci(0xffffffffffffffff, &(0x7f0000000500)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0x54}}}, 0x5) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7ef", 0x40}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037", 0x27}, {0x0}, {&(0x7f0000000800)}], 0x4}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e138", 0xf}], 0x2}}], 0x2, 0x20000044) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.779116473s ago: executing program 6 (id=3888): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0x1, &(0x7f0000000340)='\x00', 0x9, 0x1, 0xc45, 0x9, 0x9, 0x1, 0x1, 'syz1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x77}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 1.671882555s ago: executing program 4 (id=3889): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) socketpair(0xb, 0x6, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x68, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x5f, @media='eth\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0xc001}, 0x808a4) syz_emit_ethernet(0x46, &(0x7f0000000100)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x4, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x65, 0x4, 0x0, 0x1, 0x0, @loopback, @loopback}, "04000000ae9b1c03"}}}}}, 0x0) 1.49414249s ago: executing program 6 (id=3890): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a4000000000600007"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0xa0800}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280", @ANYRES8=r3], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x34, r1, 0x1, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 1.421418339s ago: executing program 4 (id=3891): r0 = socket$inet_sctp(0x2, 0x5, 0x84) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="ad53edd4fffbfd6d1c0c7d6cdb25b3377d350f68555a7c35490b3826e69ee72c3ccd5dd0cfc2d1894bea8dd4053931a278b4e1a3af06bd59338a1c16b1a19a3d8a16e0162a07f92a6a7423a0446fbf89a6856e9e9add2ef4784316c93a1ab2cd81a43a9f70e51a5f53a9a23e769a044acf44b8215b3b048694bf337eac3ec70cdee618b7abb3cf8a4d0a54ed9561e5b0eab18c6e05136341a5b265a5f983759dea94410063b36ea14efdf5440e90112e69a97db98e0423ceb8b43c", 0xbb}, {&(0x7f0000000100)="81da73128de2cb3e87787eb6d5c45d", 0xf}, {&(0x7f0000000140)="e9513d61fe7c9b80b0e86dd4691c56287a4bda9d04586e8ef79b650762fce002c7fb20068ea94b1d78ee50803c50ea95da134e766a30a7ae2b491e7ca91209d9", 0x40}], 0x3, &(0x7f00000001c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}, @ip_retopts={{0x74, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x27, 0x1, 0x3, [{@loopback}, {@local, 0x2}, {@remote, 0x200}]}, @rr={0x7, 0xb, 0x86, [@loopback, @multicast2]}, @lsrr={0x83, 0x1b, 0xb, [@dev={0xac, 0x14, 0x14, 0x1e}, @remote, @dev={0xac, 0x14, 0x14, 0x20}, @broadcast, @remote, @loopback]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x9c, 0x1, 0x6, [{@broadcast, 0x8}]}, @ssrr={0x89, 0xf, 0xed, [@empty, @empty, @multicast1]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @private=0xa010100}}}], 0xc8}, 0x5) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f0000000300)={0x1, @role_discovery={{0x809, 0x2}, {0xc9}}}, 0x6) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000340), &(0x7f0000000380)=0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000003c0)=0xfff, 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x114, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x26b4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd}]}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4881}, 0x40841) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001b40)={{r1, &(0x7f0000000640)='TIPCv2\x00', 0x40000, &(0x7f0000000680)={@_ha_fsid={[0xe2be, 0x8]}, {0x1000, 0x4, 0x7fffffff, 0xffffffff}}, 0x1, &(0x7f00000006c0), &(0x7f0000000700)=0x7}, 0x5, &(0x7f0000001a80)=[{0x2, 0x7fffffff, &(0x7f0000000740)='ib\x00', &(0x7f0000000780)="1cb3e11d55cca6e0d2e2cf8e06ac72059c2232821e982950731b65d95849ac5336e37bf956764fb43818b87a3e50af26b62dcc1f48a74f4a311a362066b4a47dd59f4adf0d6afbe69db2e1265faa00769db7de1ef1444e6c63503f211c52446104a7e653538c525140e8fd812478d44c4d35a0b9d9", 0x75, 0x20}, {0x1, 0xd, &(0x7f0000000800)='\x92\x00', &(0x7f0000000840)="902bca9746af32377fdbbccc237662a04e074ff55af4f1d98c379a7c88fb", 0x1e, 0x2}, {0x1, 0x4, &(0x7f0000000880)='eth\x00', &(0x7f00000008c0)="d500d738ebf5cdf18e975ab33062c1e2a022a02028aa8f73e4f61173e429275c4216bed22e552eae0ddbbc2c7fad7b974e17330c8980c534e789c82beb70a4b5a5bb4ccf68bb466dfdebd2a469b6ef3339", 0x51, 0x20}, {0x2, 0xe9be, &(0x7f0000000940)='wireguard\x00', &(0x7f0000000980)="36b5367165b4e6d4f820d1938b3d55aefa06d8da77c314dd73a4a255c83dc5abdd07bd21aedc572ec85594099689b8dae971bfb0f94a6e2a5cc88579facd1f9c055a7941907c9fdd83e5f7ab494ac71b6076566413504934a08dd5084904e98167413a2cbc9208e31cfbe2fa0ed7f4cfd1cfdb5fe7947765f7b0b7e8b4ea19cdb2cd0520b43bbc5a5af24ce6ff8df8", 0x8f, 0xa}, {0x2, 0xa, &(0x7f0000000a40)='wireguard\x00', &(0x7f0000000a80)="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", 0x1000, 0x8}]}) bind$alg(r5, &(0x7f0000001bc0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) bind$tipc(r5, &(0x7f0000001c40)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x1}}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000001c80)={0x23, 0xff, 0x6, 0x7}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001cc0), r5) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001d40)='ns/time\x00') r8 = gettid() sendmsg$nl_route(r5, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)=@RTM_GETNSID={0x24, 0x5a, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NETNSA_FD={0x8, 0x3, r7}, @NETNSA_PID={0x8, 0x2, r8}]}, 0x24}}, 0x8801) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r9, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x58, 0x140c, 0x4, 0x70bd2d, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x20044000) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001f80)={0x0, @local, @broadcast}, &(0x7f0000001fc0)=0xc) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000002000)=@base={0xb, 0x7, 0x5, 0x36bc, 0x4001, r5, 0x200, '\x00', r10, r5, 0x3, 0x3, 0x2}, 0x50) socket$inet_icmp(0x2, 0x2, 0x1) syz_emit_ethernet(0x86, &(0x7f0000002080)={@local, @local, @void, {@llc_tr={0x11, {@llc={0x2, 0xeb55bf83562eb9c5, "146f", "f7889b60a46e6b17f976a7ad988ca1bb38813d30d48c27d3cd710753c08e10b280f09488b23ba54c883ef0b410d59b8bcb1d254ba647b603bfb0b6184522889e34561856570f02d31c3772b21413f2d364c1dcd8c4320333d02b6e77efb99bc1c76ae1a6e2ea12a88947902cd3d959fe7baaab45"}}}}}, &(0x7f0000002140)={0x1, 0x4, [0x722, 0x155, 0xee9, 0x2e2]}) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000002180)={0x0, 0x4, 0x9, 0x4, 0x6, 0x57f0d076}, 0x14) ioctl$XFS_IOC_FSGETXATTRA(r11, 0x801c582d, &(0x7f00000021c0)) pwritev(r11, &(0x7f0000002540)=[{&(0x7f0000002200)="15419ae4161c82f8c4f3a89a77032aa412355d1cf13b1f76ff92a7dcda3a4bf4cfe46832539ae01dae88bb6f3127f9c95e67dc298ea6bc5a8a4937015f96524f98216d253c061de8b7aae76d155bcc0b5c11f525387eef95d1e41806adc55974175c59c6429f12e3dd3003c902009af22c2fdfec351c06bd88699995e5d7c92d43c421a1c4a6fe6c5a14131edb89167515b204ac", 0x94}, {&(0x7f00000022c0)="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", 0xfc}, {&(0x7f00000023c0)="583a12a69d520e9099ec11a07d22d2d17243fbaa528ad49d520c5333b333a52258aad07ad4887619926ee9d2674587a491e03e70d6496a5d02466ce491c1efa38ffcb67c8df637b6bcf6a642", 0x4c}, {&(0x7f0000002440)="a5aaa94f07df5df9f8123672ddc0b30e3071a0a326f5cb0e313741bfa94fd16998dc8c02738df43efa048ca63841bcf37c8e26975e3fdb03e8cc82be5a499fd8df6f71acdabe46a76e4eec2b8776129b536bc3f4cf6443b66c4fb53a24784e307d0ab1cd510bc348c5b67b5ecd30debd8cf358311ab5c9397d538c292d58e1cab95d25bbbbe3ab98425a6163808e9b0fada8ab4dfc31a153f036a9ad42bfa77d42c0f2090a645aa06a79f78e6f11f708e6c07adc1c5d96a1ee883179ab1c811852340fe4f914b2aeda9bf6fe06c5b5a0c167432814b0ff502d126a69adfaf5d2b70535dad4", 0xe5}], 0x4, 0x2, 0x0) 1.339157088s ago: executing program 6 (id=3892): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000200)=0xfffffff0, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf25070075cc", @ANYRES32=r4, @ANYBLOB="80007f0a0a000200ffffffffffff00000600050001"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESDEC], 0xfc}, 0x1, 0x0, 0x0, 0x804}, 0x40000) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r8, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)={0x3c, r7, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x4004) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002440)=ANY=[@ANYBLOB="02000000040000000800000001000000800000005a5a4696a320758743833f40f4c886c5c4c279c4a4374dc295185928319042f30d6af4a1a0a0cb667d6ea7299dbce41b212f2b08d8efc49f4759b7ac6e8e44b0b6b1e5bc0962935f7bf2a53de4a076d5d376b61dc9899c78c80f80660c2ebe74ece1b65d8c9ea51332cb88403306e4a98d1efb94741de0eaddb93daf9966a7b86e73d7c987d0f955f182a61a453255c8fa091e49a6164cdb3b42696ce68c902ec47184ea198eed4631b580509da8d33278382d8fcfbd881b6cfea68a37ca18b7fbc26f014232cbfcc6c98154e0d52be155424b94de016d3becae0a1d420daa391abecfb0eade4a682a11b7f620cb52", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB="040000000400"/28], 0x50) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r5, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{0x0}, {0x0}, {&(0x7f0000000540)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b588880", 0x8d}], 0x3}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a487b0d736", 0xc3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{0x0}, {&(0x7f0000000700)="73347c742785f90aa563b4c01785f8371c6c153843eb25bce2d86628414138f6d3eb90c44817fbcc958e331db94a8d1119eefe09b541e73e4789594b627b7ba94f6c14265df07fabab61972e1be26c0cb37d32c3a771e304e6f8cc49bdbdb05c7569b6300fef45f8992df412b3f5905c23ae4503aa74d9fca9224332942529f26a5775237db47e838d478fa852f9cecd4a33d022d908d78e33f7fefaa1f92a1a2dd193e2484b2d719f288f1b036c64f6f3da5d91a8a65ed54c2ce9a8b5ca", 0xbe}, {&(0x7f0000000800)="7abb2d2c5611b0ce6d41587da9ccee436da0be1ffb3a9090594dc662f4160f2f", 0x20}], 0x3}}], 0x3, 0x2090) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f700000000", 0x26, 0x340080d1, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000002240)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, &(0x7f0000001240)=""/4096, 0x1000}, &(0x7f0000002280)=0x40) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) 1.117899955s ago: executing program 4 (id=3893): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000007c0)=@nat={'nat\x00', 0x1b, 0x5, 0x358, 0x98, 0x0, 0xffffffff, 0x218, 0x98, 0x2c0, 0x2c0, 0xffffffff, 0x2c0, 0x2c0, 0x5, &(0x7f00000004c0), {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x36}, 0xff, 0x0, 'wg1\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x2d, 0x2, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfffa}}}, {{@ip={@local, @private=0xa010101, 0xff000000, 0xff, 'vlan0\x00', 'vlan1\x00', {0xff}, {}, 0xeb, 0x1, 0x18}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x0, 0x400, 0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xe, @private=0xa010100, @loopback, @port=0x4e23, @gre_key=0x8}}}}, {{@ip={@empty, @multicast1, 0x0, 0xff000000, 'bond_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x6c, 0x3, 0x10}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x3, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x68, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @local, @multicast1, @gre_key=0xc, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/209, 0xd1}], 0x1) (async) r2 = socket$inet6(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0017"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x20008000) (async) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b2fd2c5}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x1, 0x1, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x4, 0x1}]}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x35, 0xff9, 0x1}, 0x28) (async) r8 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) (async) r10 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000001000)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x1c8, 0x260, 0x98, 0x0, 0x130, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) (async) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c00028006", @ANYRES32=r9, @ANYBLOB="0500060001000000050007a10000000005000300df00000008000200", @ANYRES64=r7], 0x68}}, 0x0) 986.86057ms ago: executing program 0 (id=3894): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd0, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x640000c4}, 0x2400c080) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240)={0x5, 0x8001, 0xa, 0x1}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x7, 0xab, 0x10001, 0x44, @private2, @remote, 0x10, 0x1, 0xffff8001, 0x4}}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x88, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x8804) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xf0, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010101}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc9}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20044814}, 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000740), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x84, r1, 0x300, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xd5}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040844}, 0x2004001) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000000900)=@xdp={0x2c, 0x4, r2, 0x3}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000980)="80aee36dba974ee96f3ce9e588a639d881e9d932795e74af742bb33e01da816cf374b6914536e1e8c9c2bc40ba9fdb94d52bbc949fc6f52c1417191566adfdf1fa7dbd1d16cdfc9400dfc6c0090f", 0x4e}, {&(0x7f0000000a00)="87e0ee13549d9e07e24ee2a9a501648fbfa04abae358f5f916064441ad8fab1f2626cf2d11e5125e4342a3cc525c057ba137192195900f66838276720360d068f782820ad0395ffc2ff3185dfdb961b5ab2d315e3e1296e9b4c9133c5e6a9cbfe33a72cb721a2fbbecc999d86f0960de64e890a81309b19de9723fafd73f9b828d27473def2be9ddaa170791981054e1150994f538a498982d9261a6f5d1c46dd5c6", 0xa2}], 0x2, &(0x7f0000000b00)=[{0x1010, 0x11, 0xb0f, "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"}, {0xd0, 0x10d, 0x1, "13b797bd16ee63878cc9fdd017d357f34d90dfbabf97d8c3100ac0b5df88e0934833701ae28ea7acf27a38ff7810ebe6fbc33afd4b7c380b2f63c15daf4771a464596d8acdac4b201441332f325ac01e8c6072216b0a69eac00c28c8e443556558170a50d4950bf71b401b2ac876266242b65443b8886344a3aeee2866a7433794f1b8d1fcd153117d27125e496dea76edf9a87e1f4b59293ea19a839f4733734942015464405941c06b0c7adb309018844e2fc89fa7aa4844f43163"}, {0x40, 0x84, 0x129, "44b99193a719a6be70895950c429672364313e30428472cf4a1dbb5a7fffc9c98195a20108f96b8b51"}], 0x1120}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002000)={&(0x7f0000001cc0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x401, 0x0, 0x0, {0xee95011524d92061}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_USERDATA={0x8b, 0x7, 0x1, 0x0, "72cb5d145ec17a72d4cab8662e57c04a87febf4c9edffcb9c10bf61c21765b0e00d40bf69c50cf3a1b57945528161f3952cd7af7325bbfd6e525d3612d0009cd806f6bc486ecc8c9450cd2f68711891c0ef32fb1deefb5d7325ece6d38e45546d3916cd5856b69710088492b200aa3eff7714371c9fa227b66a1445d8afa49deb37363a3646100"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x168, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x42b}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_USERDATA={0x42, 0xc, "fbc743cf04b9f9ee462dae1ce338577635b5cc122fefbe773a833a6dd9f96d3d7a2cb81e0dc33fd42c3ae202508784e827c1130a887403c148063bd19ad0"}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x81}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fff000}]}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond0\x00'}]}, @NFTA_CHAIN_USERDATA={0x90, 0xc, "0b793b0451472f167c80159bbc48da75e35a27b2b08d49ae5edde2406a916284b11cb312a2476ce6a64cb4fbf92c3ec62a54caaa04ce31ded06b445f75b7727dce91221afab47914df2585006018c45a1011a9bc306c88b2bea47baf3e014c67a215009bb472be887b67381c614408e2911fe9115b41e7a351815d7d5c9e74864e8c01a6cb8c5580fbf1c6c2"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x50, 0x16, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x30}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x314}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000010) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000002080), 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002100)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000002200)=0xe8) sendmsg$nl_xfrm(r5, &(0x7f00000023c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002380)={&(0x7f0000002240)=@newae={0x114, 0x1e, 0x300, 0x70bd2b, 0x25dfdbfb, {{@in=@loopback, 0x4d4, 0xa, 0x6c}, @in6=@private1, 0x6, 0x3500}, [@policy={0xac, 0x7, {{@in6=@mcast1, @in=@private=0xa010102, 0x4e23, 0x3, 0x4e23, 0xa, 0x2, 0x0, 0x20, 0x21, 0x0, r6}, {0xfffffffffffffffc, 0xfffffffffffffffa, 0x6, 0x2, 0x9, 0xe, 0x101, 0x8}, {0x30e, 0x7, 0x9, 0x7f}, 0xffff852b, 0x0, 0x7, 0x0, 0x0, 0x1}}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd29, 0x70bd2b, 0x70bd2a, 0x70bd28, 0x2, [0x6, 0x401, 0x81]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000002400)={0x0, 0x3}, &(0x7f0000002440)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000002480)={r7, 0x3}, &(0x7f00000024c0)=0x8) bpf$PROG_BIND_MAP(0x23, &(0x7f0000002500)={r5, r3}, 0xc) recvfrom(r5, &(0x7f0000002540)=""/4096, 0x1000, 0x100a2, &(0x7f0000003540)=@sco, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r5, &(0x7f00000035c0)={0x2, 0x4e21, @local}, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000037c0)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003780)={&(0x7f0000003640)={0x10c, r1, 0x2, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc}, {0xc, 0x90, 0x3a40}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x57}, {0xc, 0x90, 0xcc}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x100}, {0xc, 0x90, 0x3}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x84}, 0x24000090) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000003800)={r8, 0x80}, 0x8) socket$inet_udp(0x2, 0x2, 0x0) r9 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000003840), 0x800) setsockopt$PNPIPE_HANDLE(r9, 0x113, 0x3, &(0x7f0000003880)=0xffff, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000038c0)={r8, 0xf}, &(0x7f0000003900)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000003940)={r10, 0xf0f, 0x5}, &(0x7f0000003980)=0x8) 951.817101ms ago: executing program 4 (id=3895): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001a00010028bd7000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="01008000140003000200000000000000000000000000000014000100706d"], 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet(0x2, 0xa, 0x8) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000071401"], 0x18}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000071401"], 0x18}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket(0x1, 0x3, 0x2) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206020b0000000000000000000000021c0007800800174000000055050007005e0000000500030007000000050001000700200005000500020000000500040000000000050004000100000011000300686173683a6e65742c6e657400000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8825}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0xc1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8801}, 0x20008854) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8801}, 0x20008854) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newtfilter={0x4d4, 0x2c, 0xd3f, 0x30bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4a8, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x8}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10003, 0xc6d, 0x7ffffffd, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0x9, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x4, 0xfff, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8000, 0x4, 0x6, 0xa, 0xfa, 0x3, 0x0, 0x4, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x9, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x83, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x6, 0x3, 0x4, 0x7f, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x9, 0x6, 0xfffffffe, 0x6, 0x5, 0x7ff, 0x4, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x5, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x7, 0xc28, 0x2, 0x400, 0x4, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0x100, 0x8, 0xfffffb98, 0xfffffffb, 0x4, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffff3f4, 0x6, 0x4, 0x7, 0x400000b, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x0, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0x2, 0x8, 0x9, 0xb}, {0x8, 0x4, 0x6, 0x2}, {0x0, 0xc, 0xb, 0x9}, {0x5eda, 0xff, 0x42, 0x4}, {0x4, 0x0, 0x5, 0x9}, {0x3ff, 0x5, 0x0, 0x2}, {0x9, 0x81, 0xc2, 0x9}]}}, @TCA_BPF_FD={0x8}]}}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newtfilter={0x4d4, 0x2c, 0xd3f, 0x30bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4a8, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x8}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x5, 0x5, 0x6, 0x4, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0x4, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10003, 0xc6d, 0x7ffffffd, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0x9, 0x3, 0xd, 0x7, 0x5, 0x13f6, 0x81, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x8, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x4, 0xfff, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8000, 0x4, 0x6, 0xa, 0xfa, 0x3, 0x0, 0x4, 0x1ff, 0x3, 0x4, 0x60000000, 0x8, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x9, 0x6e4, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x83, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x6, 0x3, 0x4, 0x7f, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x8, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x9, 0x6, 0xfffffffe, 0x6, 0x5, 0x7ff, 0x4, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x5, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x7, 0xc28, 0x2, 0x400, 0x4, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0x80, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0x100, 0x8, 0xfffffb98, 0xfffffffb, 0x4, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffff3f4, 0x6, 0x4, 0x7, 0x400000b, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x0, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0x2, 0x8, 0x9, 0xb}, {0x8, 0x4, 0x6, 0x2}, {0x0, 0xc, 0xb, 0x9}, {0x5eda, 0xff, 0x42, 0x4}, {0x4, 0x0, 0x5, 0x9}, {0x3ff, 0x5, 0x0, 0x2}, {0x9, 0x81, 0xc2, 0x9}]}}, @TCA_BPF_FD={0x8}]}}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) (async) close(r12) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 815.967187ms ago: executing program 0 (id=3896): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56441, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0x0, 0xb}, {0x9, 0x4}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffff5, 0x80000001}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x2044080) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000007000000000000000080001f850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0x75ddbfdedb4202d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 613.092148ms ago: executing program 4 (id=3897): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newchain={0x558, 0x64, 0x2, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x1, 0xe}, {0xd, 0xfff3}, {0x1, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x510, 0x2, [@TCA_CGROUP_POLICE={0xbc, 0x2, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x3, 0x3, 0x3, 0x6, {0x1, 0x0, 0x2, 0x1ff, 0x7}, {0x0, 0x1, 0x1, 0x92da, 0x0, 0x7}, 0x375, 0x9, 0x3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffb}, @TCA_POLICE_RESULT={0x8, 0x5, 0x53fe}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x0, 0x7641ebe0, 0xf312, 0x19, {0x4, 0x0, 0x0, 0x8001, 0x0, 0x7f}, {0xf5, 0x2, 0x8f, 0xf09e, 0x6, 0x4}, 0xfffffff7, 0xb4a8, 0x7ff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7806}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2000000000000}]}, @TCA_CGROUP_POLICE={0x450, 0x2, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa919, 0x5, 0x4, 0x5, 0xc9ea, {0xf9, 0x1, 0x4, 0x3, 0x2}, {0x5, 0x1, 0x38, 0x80, 0x1127, 0x2}, 0x200, 0xef, 0x4}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x0, 0x40, 0x7, 0x8, 0x3, 0xbe, 0x0, 0xf01, 0x52, 0x85, 0x8001, 0x1ff, 0xffff, 0x2, 0x9, 0x2e, 0x81, 0x5, 0x7, 0x0, 0x0, 0x5, 0xd3c, 0x8, 0x1, 0xd, 0x1, 0x2, 0x4, 0x81, 0x10000, 0x6, 0x9, 0x80000001, 0xfffffff3, 0x3, 0x9, 0x0, 0x3e7, 0x1b23, 0xfff, 0x10000, 0x3, 0x8, 0x2, 0x80000000, 0x0, 0x4, 0x0, 0x10000, 0x1ff, 0xfff, 0x0, 0x9, 0x4, 0x7ff, 0xe3f5, 0xfffffffa, 0x9, 0x1f, 0x86, 0xfffffff8, 0x401, 0x1ff, 0x4, 0xb, 0x100, 0x80000000, 0x9, 0x0, 0x0, 0x8, 0x5, 0x8000, 0xc, 0x2, 0x1, 0x81, 0x4, 0x5, 0x7, 0xfffffffc, 0x3ff, 0xfff, 0x6, 0x0, 0xffffffff, 0x2, 0x5, 0x3, 0x6, 0x3, 0x9, 0x2, 0x8, 0xe5, 0x3, 0x8, 0x9, 0x20000, 0x2, 0x1000, 0x800, 0x6f83, 0x0, 0x3, 0x5, 0x1, 0x6, 0x4, 0x4, 0x6, 0x0, 0x3, 0x4, 0x0, 0x7, 0x80000001, 0x1, 0x2, 0x1, 0x7fff, 0x0, 0xfffffffb, 0x8, 0x5, 0xbb, 0x0, 0x1ff, 0x0, 0x3, 0x800000, 0x9, 0x9, 0x7, 0x3, 0x200, 0x8, 0x7a0, 0x0, 0xd, 0x9, 0x80, 0x0, 0x3ff, 0xffffffff, 0x3, 0x7, 0x912, 0x8, 0x8, 0x99d, 0x8, 0x2, 0x6, 0x4, 0x401, 0x101, 0x6, 0x9, 0x7fffffff, 0x1, 0x10001, 0x6, 0x1, 0x3, 0x4, 0xfffffbff, 0xffff8001, 0xfffffff9, 0x0, 0xa, 0x5, 0x7f, 0x1, 0x37, 0x36, 0x4, 0x4, 0x1000, 0x2, 0x80000000, 0xfffffeff, 0x5, 0x0, 0x1, 0x8, 0x4, 0xffffffff, 0x95, 0x7, 0xffffffff, 0x0, 0x1, 0x6, 0x9, 0x6, 0xffff8000, 0xb76, 0xe00, 0x4487, 0x7, 0x3, 0xffffffc0, 0x7ff, 0x0, 0x6, 0x6, 0xfff, 0x2, 0x6, 0x10001, 0x7, 0x2, 0x9, 0x5, 0x8, 0x0, 0x5, 0x8, 0x3a, 0x4, 0x4d, 0xf, 0x9, 0x40, 0x5, 0xf73, 0xd, 0x3, 0xb, 0x4, 0xa4d00000, 0x859e, 0x80000000, 0x7, 0x6, 0xa, 0x80, 0x7, 0x4, 0x5, 0x7, 0x6, 0x1, 0x7, 0xc, 0x4, 0x7ff, 0x9, 0xd04d, 0xe, 0x6, 0xfffffff6, 0x3ff]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}]}, 0x558}, 0x1, 0x0, 0x0, 0x804}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x1, 0x8001, 0xfffffbff}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x48880) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 280.918158ms ago: executing program 6 (id=3898): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r3, 0x1) write$cgroup_int(r2, &(0x7f0000000200)=0x10001, 0x12) sendfile(r2, r1, 0x0, 0xf03a0005) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaadad1e048716e08004500001c030000000011907800002000089078747887715f5a170000d5ae0ffdd88d873f3f189a86f3ab513d811789e5e44d91f4499013f9786b06c127fab39b7215fe76a33b49f6b15411563a2189d21a942fb72f328215b399e2563b0c33f29c7e2a067ee952e4639ff585adda53d27fc7778fc1b5f01c9d392e3111a1464db2338543abd1000000000000000000"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000bba50bf4e900000000", @ANYRES32=r9, @ANYBLOB="080005000b000000"], 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01022bbd7000fbdbdf255c00000008000300", @ANYRES32=r9], 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x4008040) 0s ago: executing program 0 (id=3899): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYBLOB="08001000", @ANYRES32, @ANYBLOB='\b\x00\r'], 0x54}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x6, 0x0) (async) close(r4) (async) write(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0xc851) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x38, r8, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x20010000) (async) ioctl$int_in(r7, 0x5452, &(0x7f0000000f80)=0x7) kernel console output (not intermixed with test programs): invalid length. [ 448.438966][T17721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2778'. [ 448.533228][T17721] geneve4: entered promiscuous mode [ 448.553002][T17721] geneve4: entered allmulticast mode [ 449.093198][T17752] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2786'. [ 449.114617][T17749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2785'. [ 449.131436][T17753] netlink: 'syz.0.2787': attribute type 11 has an invalid length. [ 449.168843][T17749] netlink: 'syz.4.2785': attribute type 1 has an invalid length. [ 449.272991][T17768] xt_hashlimit: size too large, truncated to 1048576 [ 449.342014][T17766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2785'. [ 449.442386][T17749] bond9: entered promiscuous mode [ 449.456132][T17749] 8021q: adding VLAN 0 to HW filter on device bond9 [ 449.542785][T17766] bond9: entered allmulticast mode [ 449.582923][T17780] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 449.595113][T17780] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.602537][T17780] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.666526][T17749] bond9: (slave bridge8): making interface the new active one [ 449.689357][T17749] bridge8: entered promiscuous mode [ 449.704771][T17749] bridge8: entered allmulticast mode [ 449.717468][T17782] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2790'. [ 449.733773][T17749] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 449.749373][T17782] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2790'. [ 449.761170][ T1643] block nbd0: Possible stuck request ffff888027840000: control (read@0,4096B). Runtime 300 seconds [ 449.957971][T17790] lo speed is unknown, defaulting to 1000 [ 450.240035][ T9379] net_ratelimit: 73 callbacks suppressed [ 450.240057][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 450.360052][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 450.479898][ T153] bond5: (slave gretap2): failed to get link speed/duplex [ 450.670400][ T141] bond5: (slave gretap2): failed to get link speed/duplex [ 450.790670][ T9377] bond5: (slave gretap2): failed to get link speed/duplex [ 450.960678][ T141] bond5: (slave gretap2): failed to get link speed/duplex [ 451.069715][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 451.179796][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 451.289748][ T9377] bond5: (slave gretap2): failed to get link speed/duplex [ 451.400149][ T141] bond5: (slave gretap2): failed to get link speed/duplex [ 451.679835][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.687186][ C1] bridge0: topology change detected, propagating [ 451.694018][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.701299][ C1] bridge0: topology change detected, propagating [ 452.879841][ T9008] IPVS: ip_vs_send_async error -101 [ 452.976832][T17801] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 453.040891][T15752] IPVS: ip_vs_send_async error -101 [ 453.208896][T17831] tipc: Enabled bearer , priority 0 [ 453.252659][T17831] syzkaller0: entered promiscuous mode [ 453.270959][T17831] syzkaller0: entered allmulticast mode [ 453.302873][T17843] syzkaller0: entered promiscuous mode [ 453.314887][T17843] syzkaller0: entered allmulticast mode [ 453.325223][T17831] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 453.490232][T17835] tipc: Resetting bearer [ 453.502269][T17831] netlink: 'syz.0.2802': attribute type 17 has an invalid length. [ 453.517377][T17856] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2807'. [ 453.547102][T17857] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2807'. [ 453.567321][T17830] tipc: Resetting bearer [ 453.630617][T17830] tipc: Disabling bearer [ 453.679279][T17855] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2808'. [ 454.225677][T17875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2813'. [ 454.251394][T17878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2814'. [ 454.321435][ C0] ip6_tnl_xmit_ctl: 8 callbacks suppressed [ 454.321464][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 454.355441][T17866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2811'. [ 454.370832][T17878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2814'. [ 454.508923][T17882] netlink: 'syz.1.2815': attribute type 1 has an invalid length. [ 454.565634][T17882] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2815'. [ 454.772059][T17894] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 455.299737][ T9379] net_ratelimit: 28 callbacks suppressed [ 455.299759][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 455.420105][ T9373] bond5: (slave gretap2): failed to get link speed/duplex [ 455.486279][T17925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2824'. [ 455.508513][T17925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2824'. [ 455.540042][ T141] bond5: (slave gretap2): failed to get link speed/duplex [ 455.850696][ T9373] bond5: (slave gretap2): failed to get link speed/duplex [ 455.904024][T17933] bond9: option resend_igmp: invalid value (2878) [ 455.910863][T17933] bond9: option resend_igmp: allowed values 0 - 255 [ 455.921407][T17933] bond9 (unregistering): Released all slaves [ 456.019723][ T153] bond5: (slave gretap2): failed to get link speed/duplex [ 456.251940][ T141] bond5: (slave gretap2): failed to get link speed/duplex [ 456.374002][ T9373] bond5: (slave gretap2): failed to get link speed/duplex [ 456.502108][ T5628] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 456.516657][ T5628] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 456.530714][ T5628] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 456.540970][ T141] bond5: (slave gretap2): failed to get link speed/duplex [ 456.548478][ T5628] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 456.557143][ T5628] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 456.661448][ T141] bond5: (slave gretap2): failed to get link speed/duplex [ 456.791732][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 457.137646][T17973] netlink: 'syz.4.2836': attribute type 7 has an invalid length. [ 457.285712][T17954] lo speed is unknown, defaulting to 1000 [ 457.717025][T17988] lo speed is unknown, defaulting to 1000 [ 458.258428][T17954] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.269870][T17954] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.280268][T17954] bridge_slave_0: entered allmulticast mode [ 458.288654][T17954] bridge_slave_0: entered promiscuous mode [ 458.303458][T17954] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.310996][T17954] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.318651][T17954] bridge_slave_1: entered allmulticast mode [ 458.332805][T17954] bridge_slave_1: entered promiscuous mode [ 458.484586][T17954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.508675][T18005] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 458.539976][T18005] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 458.577632][T17954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.651591][ T5632] Bluetooth: hci6: command tx timeout [ 458.927745][T17954] team0: Port device team_slave_0 added [ 458.937757][T17954] team0: Port device team_slave_1 added [ 459.035338][T17954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.045526][T17954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.102960][T17954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.139878][T17954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.151704][T17954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.218123][T17954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.398070][T18023] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.410083][T18023] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.687263][T18023] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.698306][T18023] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.790446][T17954] hsr_slave_0: entered promiscuous mode [ 459.798219][T17954] hsr_slave_1: entered promiscuous mode [ 459.812089][T17954] debugfs: 'hsr0' already exists in 'hsr' [ 459.818042][T17954] Cannot create hsr debugfs directory [ 459.873846][T18023] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.884661][T18023] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.958696][T18042] __nla_validate_parse: 3 callbacks suppressed [ 459.958717][T18042] netlink: 212 bytes leftover after parsing attributes in process `syz.5.2846'. [ 459.975279][T18042] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2846'. [ 459.986816][T18042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2846'. [ 460.000222][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 460.043952][T18023] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.057387][T18023] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.322463][ T153] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.331340][ T153] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.404431][ T153] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.417630][ T153] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.450818][ T153] net_ratelimit: 14 callbacks suppressed [ 460.450838][ T153] bond5: (slave gretap2): failed to get link speed/duplex [ 460.598942][T18059] netlink: 'syz.5.2850': attribute type 5 has an invalid length. [ 460.618866][ T153] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.629036][T18059] netlink: 'syz.5.2850': attribute type 2 has an invalid length. [ 460.638139][T18059] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2850'. [ 460.648935][ T153] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.662234][ T153] bond5: (slave gretap2): failed to get link speed/duplex [ 460.694320][ T9373] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.705514][ T9373] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.720264][ T5632] Bluetooth: hci6: command tx timeout [ 460.747523][T18025] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.766919][T18025] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.901502][T18025] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.920624][T18025] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.006026][T18025] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.022377][T18025] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.035527][T18068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2855'. [ 461.151380][T18025] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.163496][T18025] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.201703][ T9373] bond5: (slave gretap2): failed to get link speed/duplex [ 461.282636][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 461.320511][ T9373] bond5: (slave gretap2): failed to get link speed/duplex [ 461.371127][T17954] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 461.382754][T17954] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 461.391728][T17954] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 461.403477][T17954] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 461.414830][T17954] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 461.429426][T17954] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 461.438317][ T9373] bond5: (slave gretap2): failed to get link speed/duplex [ 461.448225][T17954] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 461.464451][T17954] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 461.623343][T17954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.655302][T17954] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.672033][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.679412][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.696470][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.703783][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.830368][ T13] bond5: (slave gretap2): failed to get link speed/duplex [ 461.951188][ T13] bond5: (slave gretap2): failed to get link speed/duplex [ 461.969147][T18095] netlink: 'syz.5.2860': attribute type 21 has an invalid length. [ 461.989065][T18095] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2860'. [ 462.084468][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 462.162798][T18102] IPVS: ip_vs_edit_dest(): server weight less than zero [ 462.210769][ T153] bond5: (slave gretap2): failed to get link speed/duplex [ 462.294252][T18112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2864'. [ 462.350035][ T153] bond5: (slave gretap2): failed to get link speed/duplex [ 462.439152][T18119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2866'. [ 462.682701][T17954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.777069][T18132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.803307][T18134] netlink: 'syz.5.2872': attribute type 6 has an invalid length. [ 462.812223][ T5632] Bluetooth: hci6: command tx timeout [ 462.843770][T17954] veth0_vlan: entered promiscuous mode [ 462.859418][T17954] veth1_vlan: entered promiscuous mode [ 462.932580][ T9373] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 462.955118][ T9373] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 462.970712][ T9373] bond0: now running without any active interface! [ 463.011315][T17954] veth0_macvtap: entered promiscuous mode [ 463.026712][T17954] veth1_macvtap: entered promiscuous mode [ 463.079048][T17954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.105316][T17954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.127107][ T153] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.137757][ T153] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.155646][ T153] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.181880][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.200902][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 463.279891][ T9008] IPVS: ip_vs_send_async error -101 [ 463.352481][ T9379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.376454][ T9379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.415986][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.429858][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.696165][T18160] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2882'. [ 464.244053][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 464.258935][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 464.269205][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 464.287212][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 464.295131][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 464.850066][T18172] lo speed is unknown, defaulting to 1000 [ 464.880000][ T5628] Bluetooth: hci6: command tx timeout [ 465.284488][T18172] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.291895][T18172] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.299522][T18172] bridge_slave_0: entered allmulticast mode [ 465.307562][T18172] bridge_slave_0: entered promiscuous mode [ 465.317386][T18172] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.324878][T18172] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.333118][T18172] bridge_slave_1: entered allmulticast mode [ 465.340985][T18172] bridge_slave_1: entered promiscuous mode [ 465.382669][T18172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.395102][T18172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.431689][T18172] team0: Port device team_slave_0 added [ 465.441663][T18172] team0: Port device team_slave_1 added [ 465.472310][T18172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.479352][T18172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.507243][T18172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.519663][T18172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.526645][T18172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.553859][T18172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.604095][T18172] hsr_slave_0: entered promiscuous mode [ 465.611210][T18172] hsr_slave_1: entered promiscuous mode [ 465.617745][T18172] debugfs: 'hsr0' already exists in 'hsr' [ 465.623845][T18172] Cannot create hsr debugfs directory [ 465.813740][ T9379] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.822378][ T9379] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.847427][ T141] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.856050][ T141] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.875774][ T141] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.887260][ T141] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.927838][ T141] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.938072][ T141] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.005820][ T153] net_ratelimit: 22 callbacks suppressed [ 466.005844][ T153] bond5: (slave gretap2): failed to get link speed/duplex [ 466.072892][T18197] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2890'. [ 466.084294][T18197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2890'. [ 466.094048][T18197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2890'. [ 466.140076][ T153] bond5: (slave gretap2): failed to get link speed/duplex [ 466.309848][ T153] bond5: (slave gretap2): failed to get link speed/duplex [ 466.400840][ T5628] Bluetooth: hci0: command tx timeout [ 466.419861][ T153] bond5: (slave gretap2): failed to get link speed/duplex [ 466.529969][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 466.621209][T18155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 466.631290][T18181] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2888'. [ 466.642732][ T9373] bond5: (slave gretap2): failed to get link speed/duplex [ 466.668681][T18172] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 466.717070][T18172] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 466.736710][T18172] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 466.770303][T18172] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 466.808847][T18172] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 466.834497][T18172] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 466.851404][T18172] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 466.879361][T18172] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 466.962096][ T153] bond5: (slave gretap2): failed to get link speed/duplex [ 466.978909][T18215] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2895'. [ 466.988899][T18215] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2895'. [ 467.100410][ T153] bond5: (slave gretap2): failed to get link speed/duplex [ 467.176090][T18172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.208049][T18172] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.225161][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.232822][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.288859][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.296118][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.314028][T18227] sctp: [Deprecated]: syz.4.2900 (pid 18227) Use of struct sctp_assoc_value in delayed_ack socket option. [ 467.314028][T18227] Use struct sctp_sack_info instead [ 467.430645][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 467.549849][ T153] bond5: (slave gretap2): failed to get link speed/duplex [ 467.673645][T18237] IPVS: Scheduler module ip_vs_sip not found [ 467.969803][T18172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.051782][T18172] veth0_vlan: entered promiscuous mode [ 468.074888][T18172] veth1_vlan: entered promiscuous mode [ 468.127781][T18172] veth0_macvtap: entered promiscuous mode [ 468.153077][T18172] veth1_macvtap: entered promiscuous mode [ 468.217144][T18172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.241121][T18172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.278239][ T141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.289291][ T141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.315734][ T141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.353072][ T141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.491779][ T5628] Bluetooth: hci0: command tx timeout [ 468.550644][ T9379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.564804][ T9379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.627366][T18262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2911'. [ 468.696068][ T9373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.721689][ T9373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.386707][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 469.411096][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 469.424478][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 469.438035][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 469.447470][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 470.334506][T18278] lo speed is unknown, defaulting to 1000 [ 470.465476][T18317] netlink: 'syz.5.2930': attribute type 12 has an invalid length. [ 470.561081][ T5632] Bluetooth: hci0: command tx timeout [ 470.577694][T18320] 8021q: VLANs not supported on ip6gre0 [ 470.679413][T18322] tls_set_device_offload_rx: netdev not found [ 470.758081][T18326] netlink: 'syz.0.2933': attribute type 4 has an invalid length. [ 470.784137][T18326] netlink: 'syz.0.2933': attribute type 4 has an invalid length. [ 470.853787][T18326] netlink: 'syz.0.2933': attribute type 4 has an invalid length. [ 471.083343][ T9379] net_ratelimit: 25 callbacks suppressed [ 471.083366][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 471.230344][ T141] bond5: (slave gretap2): failed to get link speed/duplex [ 471.377969][T18345] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2939'. [ 471.426553][T18345] openvswitch: netlink: Message has 512 unknown bytes. [ 471.520378][ T5632] Bluetooth: hci3: command tx timeout [ 471.536479][T18278] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.544589][T18278] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.552071][T18278] bridge_slave_0: entered allmulticast mode [ 471.560423][T18278] bridge_slave_0: entered promiscuous mode [ 471.569436][T18278] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.577906][T18278] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.585887][T18278] bridge_slave_1: entered allmulticast mode [ 471.594227][T18278] bridge_slave_1: entered promiscuous mode [ 471.656006][T18278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.674451][T18278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.835250][T18278] team0: Port device team_slave_0 added [ 471.845370][T18361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2943'. [ 471.861628][T18278] team0: Port device team_slave_1 added [ 472.024942][T18278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.032682][T18278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.088965][T18278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.103723][T18278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.111379][T18278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.140562][T18278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.224580][T18374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2948'. [ 472.250566][T18374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2948'. [ 472.358563][T18278] hsr_slave_0: entered promiscuous mode [ 472.387086][T18278] hsr_slave_1: entered promiscuous mode [ 472.411551][T18278] debugfs: 'hsr0' already exists in 'hsr' [ 472.434361][T18278] Cannot create hsr debugfs directory [ 472.519948][ T13] bond5: (slave gretap2): failed to get link speed/duplex [ 472.640325][ T5632] Bluetooth: hci0: command tx timeout [ 472.702426][T18391] veth0: entered promiscuous mode [ 472.839813][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 473.019777][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 473.127147][T18278] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 473.155025][T18278] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 473.163109][T18390] veth0: left promiscuous mode [ 473.176464][ T5632] block nbd5: Receive control failed (result -32) [ 473.185198][ T5628] block nbd5: Receive control failed (result -32) [ 473.208164][T18278] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 473.235408][T18278] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 473.273672][T18406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2958'. [ 473.277364][T18278] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 473.324114][T18278] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 473.361178][T18278] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 473.390261][T18278] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 473.404721][T18410] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2960'. [ 473.435419][ T9377] bond5: (slave gretap2): failed to get link speed/duplex [ 473.600583][ T5628] Bluetooth: hci3: command tx timeout [ 473.689852][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 473.741805][T18420] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2962'. [ 473.796875][T18278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.911478][T18278] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.916973][T18432] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2968'. [ 473.936107][ T9377] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.943406][ T9377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.984883][T18432] tipc: Resetting bearer [ 474.109762][ T9377] bond5: (slave gretap2): link status up again after 0 ms [ 474.150495][ T9377] bond5: (slave gretap2): link status up again after 0 ms [ 474.186545][T18432] 8021q: adding VLAN 0 to HW filter on device eth0 [ 474.217913][T18432] 8021q: adding VLAN 0 to HW filter on device eth1 [ 474.233485][T18432] 8021q: adding VLAN 0 to HW filter on device eth2 [ 474.244552][T18432] 8021q: adding VLAN 0 to HW filter on device eth3 [ 474.409153][ T9377] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.416849][ T9377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.458239][T18447] netlink: 'syz.5.2973': attribute type 40 has an invalid length. [ 474.490486][T18450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2974'. [ 474.976107][T18468] ip6erspan0: entered allmulticast mode [ 475.679980][ T5628] Bluetooth: hci3: command tx timeout [ 475.824293][T18278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.224541][ T13] net_ratelimit: 24 callbacks suppressed [ 476.224564][ T13] bond5: (slave gretap2): failed to get link speed/duplex [ 476.352614][ T9373] bond5: (slave gretap2): failed to get link speed/duplex [ 476.366434][T18535] netlink: 'syz.0.2991': attribute type 11 has an invalid length. [ 476.411885][T18535] netlink: 'syz.0.2991': attribute type 4 has an invalid length. [ 476.434508][T18535] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2991'. [ 476.501944][ T141] bond5: (slave gretap2): failed to get link speed/duplex [ 476.602905][T18551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2994'. [ 476.641533][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 476.698121][T18551] bond2: option broadcast_neighbor: invalid value (4) [ 476.779282][T18551] bond2 (unregistering): Released all slaves [ 476.990792][T18278] veth0_vlan: entered promiscuous mode [ 477.024740][ T13] bond5: (slave gretap2): failed to get link speed/duplex [ 477.092613][T18278] veth1_vlan: entered promiscuous mode [ 477.144991][T18562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2995'. [ 477.525241][ T9373] bond5: (slave gretap2): failed to get link speed/duplex [ 477.553090][T18576] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 477.608606][T18278] veth0_macvtap: entered promiscuous mode [ 477.656420][T18278] veth1_macvtap: entered promiscuous mode [ 477.686276][T18278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.717196][T18278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.756385][ T9379] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.761006][ T5628] Bluetooth: hci3: command tx timeout [ 477.789223][ T9379] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.871107][ T9379] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.904574][ T9379] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.950810][ T141] bond5: (slave gretap2): failed to get link speed/duplex [ 478.147764][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.156910][ T141] bond5: (slave gretap2): failed to get link speed/duplex [ 478.184624][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.286910][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.314240][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.369682][ T9373] bond5: (slave gretap2): failed to get link speed/duplex [ 478.500287][ T141] bond5: (slave gretap2): failed to get link speed/duplex [ 478.728132][T18621] bond1: option xmit_hash_policy: invalid value (10) [ 478.743711][T18621] bond1 (unregistering): Released all slaves [ 478.788330][T18622] veth0_macvtap: left promiscuous mode [ 478.795299][T18622] macvtap0: entered allmulticast mode [ 478.857321][T18633] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3010'. [ 478.866996][T18633] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3010'. [ 478.884893][T18634] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3010'. [ 478.906635][ T13] bond5: (slave gretap2): failed to get link speed/duplex [ 479.061281][T18642] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3013'. [ 479.202845][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 479.472862][ T5632] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 479.487584][ T5632] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 479.497483][ T5632] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 479.513314][ T5632] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 479.526208][ T5632] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 479.601841][T18656] bond1: ARP target 9.0.0.0 is already present [ 479.629753][T18656] bond1: option arp_ip_target: invalid value (9) [ 479.667768][T18656] bond1 (unregistering): Released all slaves [ 479.732108][T18667] syz_tun: entered allmulticast mode [ 479.849233][ T1643] block nbd0: Possible stuck request ffff888027840000: control (read@0,4096B). Runtime 330 seconds [ 480.055406][T18679] netlink: 'syz.0.3020': attribute type 11 has an invalid length. [ 480.128055][T18684] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3021'. [ 480.296759][T18661] lo speed is unknown, defaulting to 1000 [ 480.345451][T18691] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 480.354256][T18688] xt_hashlimit: size too large, truncated to 1048576 [ 480.410962][T18692] netlink: 'syz.0.3024': attribute type 1 has an invalid length. [ 480.558229][T18692] bond1: entered promiscuous mode [ 480.608923][T18692] 8021q: adding VLAN 0 to HW filter on device bond1 [ 480.739081][T18699] 8021q: adding VLAN 0 to HW filter on device bond1 [ 480.750356][T18699] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 480.762340][T18699] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 480.806674][T18699] bond1: (slave xfrm1): making interface the new active one [ 480.819181][T18699] xfrm1: entered promiscuous mode [ 480.830171][T18699] xfrm1: left promiscuous mode [ 481.012740][T18706] netlink: 216 bytes leftover after parsing attributes in process `syz.5.3028'. [ 481.025757][T18706] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3028'. [ 481.130462][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 481.250111][ T12] net_ratelimit: 12 callbacks suppressed [ 481.250134][ T12] bond5: (slave gretap2): failed to get link speed/duplex [ 481.356317][T18725] bond0: (slave ip6tnl0): refused to change device type [ 481.410169][ T9377] bond5: (slave gretap2): failed to get link speed/duplex [ 481.429170][T18727] Bluetooth: MGMT ver 1.23 [ 481.599939][ T5628] Bluetooth: hci7: command tx timeout [ 481.706150][T18661] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.714655][T18661] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.722004][T18661] bridge_slave_0: entered allmulticast mode [ 481.730258][T18661] bridge_slave_0: entered promiscuous mode [ 481.739360][T18661] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.747329][T18661] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.755625][T18661] bridge_slave_1: entered allmulticast mode [ 481.765739][T18661] bridge_slave_1: entered promiscuous mode [ 481.830360][T18661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.856884][T18661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.990499][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 482.027194][T18661] team0: Port device team_slave_0 added [ 482.040807][T18661] team0: Port device team_slave_1 added [ 482.111789][T18661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.139967][T18661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.200120][T18661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.222370][T18661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.229383][T18661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.289993][T18661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.446789][T18762] netlink: 'syz.6.3043': attribute type 1 has an invalid length. [ 482.508860][T18757] bridge_slave_0: left allmulticast mode [ 482.540720][T18757] bridge_slave_0: left promiscuous mode [ 482.551493][T18757] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.578848][T18757] bridge_slave_1: left allmulticast mode [ 482.602399][T18757] bridge_slave_1: left promiscuous mode [ 482.617703][T18757] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.649382][T18757] bond0: (slave bond_slave_0): Releasing backup interface [ 482.677660][T18757] bond0: (slave bond_slave_1): Releasing backup interface [ 482.717307][T18757] team0: Port device team_slave_0 removed [ 482.742499][T18769] __nla_validate_parse: 2 callbacks suppressed [ 482.742528][T18769] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3046'. [ 482.762992][T18757] team0: Port device team_slave_1 removed [ 482.782661][T18757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.796520][T18757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.809477][T18757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.829276][T18757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.848486][T18757] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 482.999286][T18775] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3048'. [ 483.019538][T18775] xt_TCPMSS: Only works on TCP SYN packets [ 483.019856][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 483.085502][T18661] hsr_slave_0: entered promiscuous mode [ 483.101233][T18661] hsr_slave_1: entered promiscuous mode [ 483.107980][T18661] debugfs: 'hsr0' already exists in 'hsr' [ 483.117244][T18661] Cannot create hsr debugfs directory [ 483.228604][T18775] bridge_slave_1: left allmulticast mode [ 483.237446][T18775] bridge_slave_1: left promiscuous mode [ 483.247375][T18775] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.273639][T18775] bridge_slave_0: left allmulticast mode [ 483.290675][T18775] bridge_slave_0: left promiscuous mode [ 483.311398][T18775] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.441888][ T12] bond5: (slave gretap2): failed to get link speed/duplex [ 483.465367][T18787] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 483.521728][ T5628] Bluetooth: hci0: command tx timeout [ 483.545343][T18787] ipt_ECN: cannot use operation on non-tcp rule [ 483.579803][ T13] bond5: (slave gretap2): failed to get link speed/duplex [ 483.680563][ T5628] Bluetooth: hci7: command tx timeout [ 483.789932][ T13] bond5: (slave gretap2): failed to get link speed/duplex [ 483.837178][T18800] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3055'. [ 483.898967][T18806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3055'. [ 483.922644][T18805] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3056'. [ 484.124872][T18661] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.153884][T18661] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.197873][ T12] bond5: (slave gretap2): failed to get link speed/duplex [ 484.341155][T18661] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.352975][T18661] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.390788][ T13] bond5: (slave gretap2): failed to get link speed/duplex [ 484.505606][T18661] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.516853][T18661] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.541036][ T5282] veth0_vlan: left promiscuous mode [ 484.561681][ T5750] veth0_vlan: entered promiscuous mode [ 484.627276][T18661] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.640785][T18661] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.935654][T18661] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 484.953592][T18661] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 484.973746][T18661] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 485.035586][T18661] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 485.064298][T18661] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 485.106192][T18845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3064'. [ 485.124791][T18661] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 485.133978][T18661] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 485.146314][T18661] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 485.366265][T18661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.412753][T18661] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.428569][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.435980][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.469481][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.476872][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.767233][ T5632] Bluetooth: hci7: command tx timeout [ 485.871588][T18876] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 485.875607][T18867] syzkaller0: entered promiscuous mode [ 485.885902][T18867] syzkaller0: entered allmulticast mode [ 485.892708][T18876] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 485.901745][T18876] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 486.281708][T18892] bond0: entered promiscuous mode [ 486.292054][T18892] bond0: left promiscuous mode [ 486.330807][ T9377] net_ratelimit: 10 callbacks suppressed [ 486.330831][ T9377] bond5: (slave gretap2): failed to get link speed/duplex [ 486.460319][ T12] bond5: (slave gretap2): failed to get link speed/duplex [ 486.778559][T18910] Cannot find del_set index 1 as target [ 486.893621][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 486.922920][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 486.946020][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 486.957147][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 486.965348][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 487.049086][ T153] wlan1: Trigger new scan to find an IBSS to join [ 487.853810][ T5632] Bluetooth: hci7: command tx timeout [ 489.045244][ T5632] Bluetooth: hci1: command tx timeout [ 490.085797][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 490.331723][T18661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.379766][ T9373] bond5: (slave gretap2): failed to get link speed/duplex [ 490.481731][T18934] netlink: 'syz.6.3087': attribute type 11 has an invalid length. [ 490.510930][ T9373] bond5: (slave gretap2): failed to get link speed/duplex [ 490.651127][ T141] bond5: (slave gretap2): failed to get link speed/duplex [ 490.783780][T18947] pim6reg1: entered promiscuous mode [ 490.800117][T18947] pim6reg1: entered allmulticast mode [ 490.819769][ T81] bond5: (slave gretap2): failed to get link speed/duplex [ 490.891645][T18911] lo speed is unknown, defaulting to 1000 [ 490.939767][ T12] bond5: (slave gretap2): failed to get link speed/duplex [ 490.991930][T18955] gretap1: entered promiscuous mode [ 491.048453][T18955] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3093'. [ 491.064353][ T12] bond5: (slave gretap2): failed to get link speed/duplex [ 491.078218][T18958] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3093'. [ 491.123347][ T5632] Bluetooth: hci1: command tx timeout [ 491.321721][T18661] veth0_vlan: entered promiscuous mode [ 491.336253][T18965] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3096'. [ 491.407431][T18661] veth1_vlan: entered promiscuous mode [ 491.452313][ T81] bond5: (slave gretap2): failed to get link speed/duplex [ 491.530410][T18970] xt_connbytes: Forcing CT accounting to be enabled [ 491.569602][T18661] veth0_macvtap: entered promiscuous mode [ 491.605829][T18972] netlink: 'syz.0.3099': attribute type 11 has an invalid length. [ 491.607759][T18661] veth1_macvtap: entered promiscuous mode [ 491.808431][T18661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.881332][T18661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.913954][ T81] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.938204][ T81] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.986315][ T81] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.008789][ T141] wlan1: Trigger new scan to find an IBSS to join [ 492.022681][ T81] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.188622][T18990] syzkaller0: entered promiscuous mode [ 492.195704][T18990] syzkaller0: entered allmulticast mode [ 492.312729][ T81] bond5: (slave gretap2): failed to get link speed/duplex [ 492.700628][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.736032][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.940644][ T9377] bond5: (slave gretap2): failed to get link speed/duplex [ 492.967735][ T9377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.968951][T18911] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.985934][T18911] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.994441][T18911] bridge_slave_0: entered allmulticast mode [ 493.002193][ T9377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.005974][T18911] bridge_slave_0: entered promiscuous mode [ 493.018821][T19021] netlink: 'syz.5.3113': attribute type 4 has an invalid length. [ 493.027506][T19019] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3112'. [ 493.042643][ T12] wlan1: Creating new IBSS network, BSSID 3e:ad:80:89:6e:fe [ 493.053871][T19019] netlink: 'syz.6.3112': attribute type 30 has an invalid length. [ 493.070583][T18911] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.083721][T18911] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.092561][T19017] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3112'. [ 493.106804][T18911] bridge_slave_1: entered allmulticast mode [ 493.115292][T18911] bridge_slave_1: entered promiscuous mode [ 493.126469][T19017] netlink: 'syz.6.3112': attribute type 30 has an invalid length. [ 493.150630][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 493.194292][T19019] vxlan0: entered promiscuous mode [ 493.199506][T19019] vxlan0: entered allmulticast mode [ 493.205817][ T5632] Bluetooth: hci1: command tx timeout [ 493.304257][ T9379] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.325279][T19017] vxlan1: entered promiscuous mode [ 493.331998][T19017] vxlan1: entered allmulticast mode [ 493.357685][ T30] audit: type=1800 audit(1783911749.970:12): pid=19031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3114" name="memory.events" dev="tmpfs" ino=1605 res=0 errno=0 [ 493.443506][ T9379] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.462925][T18911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.472425][ T9379] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.510643][T18911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.614922][ T9379] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.664699][T18911] team0: Port device team_slave_0 added [ 493.684913][T18911] team0: Port device team_slave_1 added [ 493.740380][T18911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.752705][T18911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.782043][T18911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.797514][T18911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.805617][T18911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.832288][T18911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.906336][T19050] xfrm0: entered allmulticast mode [ 493.925257][T19050] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 494.267079][T18911] hsr_slave_0: entered promiscuous mode [ 494.283313][T18911] hsr_slave_1: entered promiscuous mode [ 494.300913][T18911] debugfs: 'hsr0' already exists in 'hsr' [ 494.316631][T18911] Cannot create hsr debugfs directory [ 494.442579][T19074] can: request_module (can-proto-0) failed. [ 494.601170][ T81] bond5: (slave gretap2): failed to get link speed/duplex [ 494.626248][T19080] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3127'. [ 494.863567][T19090] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3130'. [ 494.878522][ T9373] bond5: (slave gretap2): failed to get link speed/duplex [ 495.044095][T19096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3133'. [ 495.056592][T19096] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3133'. [ 495.116896][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803d2adc00: rx timeout, send abort [ 495.131182][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88803d2adc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 495.187067][T18911] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 495.237748][T18911] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 495.253617][T18911] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 495.280125][ T5632] Bluetooth: hci1: command tx timeout [ 495.283855][T18911] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 495.294590][T18911] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 495.319130][T18911] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 495.336650][T19100] netlink: 'syz.6.3135': attribute type 11 has an invalid length. [ 495.347954][ T81] bond5: (slave gretap2): failed to get link speed/duplex [ 495.367019][T18911] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 495.402483][T18911] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 495.464663][T19101] lo speed is unknown, defaulting to 1000 [ 495.472288][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 495.771301][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 495.850784][T19124] vlan2: entered allmulticast mode [ 495.860138][T19124] bond0: entered allmulticast mode [ 495.865840][T19124] bond_slave_0: entered allmulticast mode [ 495.872877][T19124] bond_slave_1: entered allmulticast mode [ 495.893635][T19124] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3140'. [ 495.977771][T19124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.997383][T19124] bond_slave_0: left allmulticast mode [ 496.021605][T19124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.043665][T19124] bond_slave_1: left allmulticast mode [ 496.057145][T19124] bond0 (unregistering): Released all slaves [ 496.243505][T18911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.368145][T19138] IPv6: NLM_F_CREATE should be specified when creating new route [ 496.405154][T19135] vlan2: entered promiscuous mode [ 496.414038][T19135] bridge0: entered promiscuous mode [ 496.447114][T18911] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.617951][ T9377] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.625266][ T9377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.698737][ T9377] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.706025][ T9377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.792356][ T9377] net_ratelimit: 2 callbacks suppressed [ 496.792378][ T9377] bond5: (slave gretap2): failed to get link speed/duplex [ 496.971671][ T9373] bond5: (slave gretap2): failed to get link speed/duplex [ 497.034480][T19156] netlink: 'syz.6.3147': attribute type 1 has an invalid length. [ 497.116568][T19156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 497.160566][ T36] bond5: (slave gretap2): failed to get link speed/duplex [ 497.321852][ T9373] bond5: (slave gretap2): failed to get link speed/duplex [ 497.416843][T19168] netlink: 'syz.0.3150': attribute type 1 has an invalid length. [ 497.450490][ T36] bond5: (slave gretap2): failed to get link speed/duplex [ 497.458177][T19168] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3150'. [ 497.579782][ T9373] bond5: (slave gretap2): failed to get link speed/duplex [ 497.626389][T19175] xt_hashlimit: size too large, truncated to 1048576 [ 497.725824][ T9373] bond5: (slave gretap2): failed to get link speed/duplex [ 497.862575][ T13] bond5: (slave gretap2): failed to get link speed/duplex [ 498.002482][ T13] bond5: (slave gretap2): failed to get link speed/duplex [ 498.132030][ T9377] bond5: (slave gretap2): failed to get link speed/duplex [ 498.263665][T18911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.061533][T19225] netlink: 'syz.4.3160': attribute type 16 has an invalid length. [ 499.104946][T19225] netlink: 'syz.4.3160': attribute type 17 has an invalid length. [ 499.214563][T19229] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.296810][T19229] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.594480][T19225] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.601976][T19225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.626650][T19225] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.633977][T19225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.845488][T19225] vlan2: left promiscuous mode [ 499.851162][T19225] bridge0: left promiscuous mode [ 499.918411][T19209] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3158'. [ 500.076474][T18911] veth0_vlan: entered promiscuous mode [ 500.148190][T18911] veth1_vlan: entered promiscuous mode [ 500.307726][T18911] veth0_macvtap: entered promiscuous mode [ 500.350192][T18911] veth1_macvtap: entered promiscuous mode [ 500.418659][T19267] xt_hashlimit: size too large, truncated to 1048576 [ 500.443803][T18911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.506237][T18911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.559910][ T5628] Bluetooth: hci1: command 0x0405 tx timeout [ 500.584537][ T141] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.634466][ T141] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.717538][ T141] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.748845][ T141] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.806586][T19307] bridge0: entered allmulticast mode [ 501.830733][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.842831][ T9379] net_ratelimit: 15 callbacks suppressed [ 501.842851][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 501.871830][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.952053][T19307] pim6reg: entered allmulticast mode [ 502.070934][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 502.138940][ T9373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.169656][ T9373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.201153][ T141] bond5: (slave gretap2): failed to get link speed/duplex [ 502.356960][ T12] bond5: (slave gretap2): failed to get link speed/duplex [ 502.500606][ T141] bond5: (slave gretap2): failed to get link speed/duplex [ 502.857030][T19342] bridge1: entered promiscuous mode [ 502.876673][T19342] bridge1: entered allmulticast mode [ 502.945816][T19352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3184'. [ 502.947132][T19347] netlink: 'syz.0.3182': attribute type 1 has an invalid length. [ 502.967036][ T141] bond5: (slave gretap2): failed to get link speed/duplex [ 503.002322][T19347] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.3182'. [ 503.034100][T19355] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3182'. [ 503.061973][T19344] lo speed is unknown, defaulting to 1000 [ 503.100304][ T9373] bond5: (slave gretap2): failed to get link speed/duplex [ 503.235613][ T141] bond5: (slave gretap2): failed to get link speed/duplex [ 503.380303][ T141] bond5: (slave gretap2): failed to get link speed/duplex [ 503.386909][T19375] netlink: 'syz.5.3189': attribute type 11 has an invalid length. [ 503.522623][ T9373] bond5: (slave gretap2): failed to get link speed/duplex [ 503.586958][T19381] Cannot find add_set index 0 as target [ 503.947105][T19397] Cannot find set identified by id 0 to match [ 504.026644][T19402] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3196'. [ 504.116484][T19397] xt_CT: No such helper "snmp_trap" [ 504.366397][T19409] netlink: 'syz.4.3199': attribute type 1 has an invalid length. [ 504.374927][T19409] netlink: 'syz.4.3199': attribute type 2 has an invalid length. [ 504.384055][T19409] netlink: 'syz.4.3199': attribute type 1 has an invalid length. [ 504.396827][T19409] netlink: 'syz.4.3199': attribute type 2 has an invalid length. [ 506.597873][T19385] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 506.720427][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 506.892902][ T141] net_ratelimit: 28 callbacks suppressed [ 506.892926][ T141] bond5: (slave gretap2): failed to get link speed/duplex [ 507.030244][ T141] bond5: (slave gretap2): failed to get link speed/duplex [ 507.104658][T19437] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3207'. [ 507.161966][ T141] bond5: (slave gretap2): failed to get link speed/duplex [ 507.302311][ T9373] bond5: (slave gretap2): failed to get link speed/duplex [ 507.430117][ T141] bond5: (slave gretap2): failed to get link speed/duplex [ 507.592201][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 507.680050][T19467] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3215'. [ 508.090002][ T36] bond5: (slave gretap2): failed to get link speed/duplex [ 508.231057][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 508.360794][ T9373] bond5: (slave gretap2): failed to get link speed/duplex [ 508.432808][T19502] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3224'. [ 508.503982][ T141] bond5: (slave gretap2): failed to get link speed/duplex [ 508.557759][T19505] netlink: 'syz.4.3225': attribute type 1 has an invalid length. [ 508.731436][T19509] bond0: (slave dummy0): making interface the new active one [ 508.741948][T19509] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 508.817361][T19521] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3230'. [ 508.880719][T19515] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.888716][T19515] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.930775][T19515] bond0: (slave dummy0): Releasing active interface [ 508.964810][T19527] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 509.922479][ T1643] block nbd0: Possible stuck request ffff888027840000: control (read@0,4096B). Runtime 360 seconds [ 510.561561][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 511.883290][T19538] FAULT_INJECTION: forcing a failure. [ 511.883290][T19538] name failslab, interval 1, probability 0, space 0, times 0 [ 511.897619][T19538] CPU: 1 UID: 0 PID: 19538 Comm: syz.7.3233 Not tainted syzkaller #0 PREEMPT(full) [ 511.897650][T19538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 511.897673][T19538] Call Trace: [ 511.897682][T19538] [ 511.897690][T19538] dump_stack_lvl+0xe8/0x150 [ 511.897730][T19538] should_fail_ex+0x40c/0x560 [ 511.897762][T19538] should_failslab+0xa8/0x100 [ 511.897796][T19538] __kmalloc_noprof+0xfe/0x720 [ 511.897824][T19538] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 511.897953][T19538] ? udpv6_init_sock+0x198/0x3b0 [ 511.898030][T19538] ? udpv6_init_sock+0x198/0x3b0 [ 511.898068][T19538] udpv6_init_sock+0x198/0x3b0 [ 511.898095][T19538] ? sock_init_data_uid+0x6e4/0x980 [ 511.898135][T19538] inet6_create+0xefb/0x1270 [ 511.898185][T19538] ? inet6_create+0x80/0x1270 [ 511.898212][T19538] __sock_create+0x4b3/0x9d0 [ 511.898300][T19538] udp_sock_create6+0xd2/0x650 [ 511.898353][T19538] ? __pfx_udp_sock_create6+0x10/0x10 [ 511.898385][T19538] ? rxrpc_lookup_local+0xc84/0x15d0 [ 511.898473][T19538] rxrpc_lookup_local+0xcfa/0x15d0 [ 511.898516][T19538] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 511.898564][T19538] ? rxrpc_sendmsg+0x11e/0x6b0 [ 511.898620][T19538] ? __local_bh_enable_ip+0xd0/0x130 [ 511.898651][T19538] rxrpc_sendmsg+0x34b/0x6b0 [ 511.898689][T19538] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 511.898718][T19538] sock_sendmsg_nosec+0x13a/0x180 [ 511.898746][T19538] ____sys_sendmsg+0x54e/0x850 [ 511.898785][T19538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 511.898831][T19538] ? import_iovec+0x73/0xa0 [ 511.898902][T19538] ___sys_sendmsg+0x2a5/0x360 [ 511.898935][T19538] ? __lock_acquire+0x683/0x2cf0 [ 511.898969][T19538] ? __pfx____sys_sendmsg+0x10/0x10 [ 511.899046][T19538] ? __fget_files+0x2a/0x420 [ 511.899073][T19538] ? __fget_files+0x3a2/0x420 [ 511.899112][T19538] __x64_sys_sendmsg+0x1b1/0x290 [ 511.899158][T19538] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 511.899220][T19538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.899244][T19538] do_syscall_64+0x174/0x580 [ 511.899274][T19538] ? trace_irq_disable+0x3b/0x140 [ 511.899301][T19538] ? clear_bhb_loop+0x40/0x90 [ 511.899330][T19538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.899352][T19538] RIP: 0033:0x7f65f179de59 [ 511.899373][T19538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.899392][T19538] RSP: 002b:00007f65ef9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.899415][T19538] RAX: ffffffffffffffda RBX: 00007f65f1a25fa0 RCX: 00007f65f179de59 [ 511.899431][T19538] RDX: 0000000020000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 511.899445][T19538] RBP: 00007f65ef9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 511.899459][T19538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.899472][T19538] R13: 00007f65f1a26038 R14: 00007f65f1a25fa0 R15: 00007ffe6b6ec548 [ 511.899504][T19538] [ 512.208771][T19515] bridge_slave_0: left allmulticast mode [ 512.214925][T19515] bridge_slave_0: left promiscuous mode [ 512.221237][T19515] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.236589][T19515] bridge_slave_1: left allmulticast mode [ 512.242770][T19515] bridge_slave_1: left promiscuous mode [ 512.248560][T19515] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.272958][T19515] team0: Port device team_slave_0 removed [ 512.284705][T19515] team0: Port device team_slave_1 removed [ 512.294873][T19515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.326181][T19515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.360489][T19515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.373776][T19515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.391836][T19515] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 512.416357][T19516] tipc: Enabled bearer , priority 0 [ 512.430286][ T12] bond5: (slave gretap2): failed to get link speed/duplex [ 512.536289][T19543] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 512.551684][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 512.703983][T19550] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 512.730944][T19550] bond3 (unregistering): Released all slaves [ 512.842308][T19558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3239'. [ 512.867979][T19560] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3239'. [ 512.910204][ T36] bond5: (slave gretap2): failed to get link speed/duplex [ 512.958452][T19558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3239'. [ 513.011697][T19557] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3239'. [ 513.031464][ T36] bond5: (slave gretap2): failed to get link speed/duplex [ 513.160248][ T36] bond5: (slave gretap2): failed to get link speed/duplex [ 513.290369][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 513.410134][T13374] tipc: Node number set to 3932630055 [ 513.419716][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 513.450179][T19579] FAULT_INJECTION: forcing a failure. [ 513.450179][T19579] name failslab, interval 1, probability 0, space 0, times 0 [ 513.482314][T19579] CPU: 0 UID: 0 PID: 19579 Comm: syz.0.3244 Not tainted syzkaller #0 PREEMPT(full) [ 513.482346][T19579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 513.482369][T19579] Call Trace: [ 513.482378][T19579] [ 513.482388][T19579] dump_stack_lvl+0xe8/0x150 [ 513.482427][T19579] should_fail_ex+0x40c/0x560 [ 513.482463][T19579] should_failslab+0xa8/0x100 [ 513.482498][T19579] __kmalloc_cache_noprof+0xa8/0x660 [ 513.482529][T19579] ? __kthread_create_on_node+0x115/0x3d0 [ 513.482557][T19579] ? __kthread_create_on_node+0x115/0x3d0 [ 513.482586][T19579] ? __init_swait_queue_head+0xa8/0x150 [ 513.482607][T19579] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 513.482643][T19579] __kthread_create_on_node+0x115/0x3d0 [ 513.482675][T19579] ? __pfx___kthread_create_on_node+0x10/0x10 [ 513.482714][T19579] ? udp_sock_create6+0x27c/0x650 [ 513.482738][T19579] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 513.482770][T19579] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 513.482803][T19579] kthread_create_on_node+0xeb/0x140 [ 513.482837][T19579] ? __pfx_kthread_create_on_node+0x10/0x10 [ 513.482874][T19579] ? do_raw_spin_unlock+0xf5/0x210 [ 513.482904][T19579] rxrpc_lookup_local+0xf56/0x15d0 [ 513.482948][T19579] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 513.482983][T19579] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 513.483013][T19579] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 513.483045][T19579] ? rxrpc_sendmsg+0x11e/0x6b0 [ 513.483078][T19579] ? __local_bh_enable_ip+0xd0/0x130 [ 513.483109][T19579] rxrpc_sendmsg+0x34b/0x6b0 [ 513.483147][T19579] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 513.483176][T19579] sock_sendmsg_nosec+0x13a/0x180 [ 513.483207][T19579] ____sys_sendmsg+0x54e/0x850 [ 513.483248][T19579] ? __pfx_____sys_sendmsg+0x10/0x10 [ 513.483291][T19579] ? import_iovec+0x73/0xa0 [ 513.483327][T19579] ___sys_sendmsg+0x2a5/0x360 [ 513.483365][T19579] ? __lock_acquire+0x683/0x2cf0 [ 513.483401][T19579] ? __pfx____sys_sendmsg+0x10/0x10 [ 513.483475][T19579] ? __fget_files+0x2a/0x420 [ 513.483502][T19579] ? __fget_files+0x3a2/0x420 [ 513.483543][T19579] __x64_sys_sendmsg+0x1b1/0x290 [ 513.483581][T19579] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 513.483636][T19579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.483660][T19579] do_syscall_64+0x174/0x580 [ 513.483692][T19579] ? trace_irq_disable+0x3b/0x140 [ 513.483719][T19579] ? clear_bhb_loop+0x40/0x90 [ 513.483747][T19579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.483770][T19579] RIP: 0033:0x7f4c0459de59 [ 513.483791][T19579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.483810][T19579] RSP: 002b:00007f4c05380028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.483833][T19579] RAX: ffffffffffffffda RBX: 00007f4c04825fa0 RCX: 00007f4c0459de59 [ 513.483849][T19579] RDX: 0000000020000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 513.483863][T19579] RBP: 00007f4c05380090 R08: 0000000000000000 R09: 0000000000000000 [ 513.483876][T19579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 513.483889][T19579] R13: 00007f4c04826038 R14: 00007f4c04825fa0 R15: 00007ffcb46bcaa8 [ 513.483924][T19579] [ 513.807212][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 513.822887][ T141] bond5: (slave gretap2): failed to get link speed/duplex [ 513.960328][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 514.195659][T19594] xt_ecn: cannot match TCP bits for non-tcp packets [ 514.241264][ T9008] IPVS: ip_vs_send_async error -101 [ 514.449397][T19611] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 514.644914][T19620] syzkaller1: entered promiscuous mode [ 514.657502][T19620] syzkaller1: entered allmulticast mode [ 514.826440][T19630] syzkaller1: entered promiscuous mode [ 514.836634][T19630] syzkaller1: entered allmulticast mode [ 515.022094][T19634] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.041200][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 517.499856][ T36] net_ratelimit: 29 callbacks suppressed [ 517.499901][ T36] bond5: (slave gretap2): failed to get link speed/duplex [ 517.629838][ T36] bond5: (slave gretap2): failed to get link speed/duplex [ 517.740035][ T36] bond5: (slave gretap2): failed to get link speed/duplex [ 517.752229][T19625] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 517.852330][ T36] bond5: (slave gretap2): failed to get link speed/duplex [ 517.979943][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 518.027820][T19682] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3273'. [ 518.086777][T19682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.282166][T19682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.502222][ T36] bond5: (slave gretap2): failed to get link speed/duplex [ 518.671606][T19704] netlink: 'syz.0.3279': attribute type 21 has an invalid length. [ 518.762689][T19699] syzkaller0: entered promiscuous mode [ 518.768602][T19699] syzkaller0: entered allmulticast mode [ 518.778519][T19704] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3279'. [ 518.846574][T19716] batman_adv: batadv0: Adding interface: macsec1 [ 518.865352][T19716] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.933202][T19716] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 521.592107][T19714] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 522.850099][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 522.980379][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 523.095398][T19751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3290'. [ 523.106930][ T9377] bond5: (slave gretap2): failed to get link speed/duplex [ 523.229808][ T81] bond5: (slave gretap2): failed to get link speed/duplex [ 523.365730][ T81] bond5: (slave gretap2): failed to get link speed/duplex [ 523.393641][T19763] FAULT_INJECTION: forcing a failure. [ 523.393641][T19763] name failslab, interval 1, probability 0, space 0, times 0 [ 523.412850][T19764] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3295'. [ 523.438169][T19767] netlink: 'syz.0.3296': attribute type 1 has an invalid length. [ 523.446616][T19763] CPU: 1 UID: 0 PID: 19763 Comm: syz.7.3294 Not tainted syzkaller #0 PREEMPT(full) [ 523.446647][T19763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 523.446662][T19763] Call Trace: [ 523.446671][T19763] [ 523.446681][T19763] dump_stack_lvl+0xe8/0x150 [ 523.446722][T19763] should_fail_ex+0x40c/0x560 [ 523.446771][T19763] should_failslab+0xa8/0x100 [ 523.446809][T19763] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 523.446838][T19763] ? local_lock_release+0x9c/0x160 [ 523.446873][T19763] ? __alloc_skb+0x1d7/0x7a0 [ 523.446991][T19763] ? __alloc_skb+0x1d7/0x7a0 [ 523.447033][T19763] __alloc_skb+0x1d7/0x7a0 [ 523.447072][T19763] nl80211_tx_mgmt+0xad5/0xf40 [ 523.447175][T19763] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 523.447215][T19763] ? __pfx___mutex_lock+0x10/0x10 [ 523.447250][T19763] ? __cfg80211_wdev_from_attrs+0x766/0x810 [ 523.447308][T19763] ? nl80211_pre_doit+0x53d/0x890 [ 523.447342][T19763] genl_family_rcv_msg_doit+0x233/0x340 [ 523.447385][T19763] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 523.447432][T19763] ? bpf_lsm_capable+0x9/0x20 [ 523.447462][T19763] ? security_capable+0x7e/0x2c0 [ 523.447571][T19763] genl_rcv_msg+0x614/0x7a0 [ 523.447611][T19763] ? __pfx_genl_rcv_msg+0x10/0x10 [ 523.447641][T19763] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 523.447667][T19763] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 523.447701][T19763] ? __pfx_nl80211_post_doit+0x10/0x10 [ 523.447731][T19763] ? __pfx_ref_tracker_free+0x10/0x10 [ 523.447814][T19763] netlink_rcv_skb+0x226/0x4a0 [ 523.447854][T19763] ? __pfx_genl_rcv_msg+0x10/0x10 [ 523.447886][T19763] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 523.447944][T19763] ? down_read+0x2be/0x330 [ 523.447973][T19763] genl_rcv+0x28/0x40 [ 523.447999][T19763] netlink_unicast+0x7bb/0x940 [ 523.448046][T19763] netlink_sendmsg+0x813/0xb40 [ 523.448081][T19763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.448111][T19763] ? aa_sock_msg_perm+0xf1/0x1b0 [ 523.448174][T19763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.448208][T19763] sock_sendmsg_nosec+0x13a/0x180 [ 523.448240][T19763] ____sys_sendmsg+0x54e/0x850 [ 523.448281][T19763] ? __pfx_____sys_sendmsg+0x10/0x10 [ 523.448327][T19763] ? import_iovec+0x73/0xa0 [ 523.448365][T19763] ___sys_sendmsg+0x2a5/0x360 [ 523.448399][T19763] ? __lock_acquire+0x683/0x2cf0 [ 523.448437][T19763] ? __pfx____sys_sendmsg+0x10/0x10 [ 523.448519][T19763] ? __fget_files+0x2a/0x420 [ 523.448550][T19763] ? __fget_files+0x3a2/0x420 [ 523.448596][T19763] __x64_sys_sendmsg+0x1b1/0x290 [ 523.448638][T19763] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 523.448700][T19763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.448728][T19763] do_syscall_64+0x174/0x580 [ 523.448771][T19763] ? trace_irq_disable+0x3b/0x140 [ 523.448802][T19763] ? clear_bhb_loop+0x40/0x90 [ 523.448832][T19763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.448856][T19763] RIP: 0033:0x7f65f179de59 [ 523.448880][T19763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.448902][T19763] RSP: 002b:00007f65ef9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.448927][T19763] RAX: ffffffffffffffda RBX: 00007f65f1a25fa0 RCX: 00007f65f179de59 [ 523.448945][T19763] RDX: 0000000020000080 RSI: 0000200000000040 RDI: 0000000000000003 [ 523.448961][T19763] RBP: 00007f65ef9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 523.448975][T19763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.448989][T19763] R13: 00007f65f1a26038 R14: 00007f65f1a25fa0 R15: 00007ffe6b6ec548 [ 523.449029][T19763] [ 523.951491][T19769] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3296'. [ 524.084955][T19767] 8021q: adding VLAN 0 to HW filter on device bond2 [ 524.105168][T19766] vlan2: entered allmulticast mode [ 524.111145][T19768] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3295'. [ 524.121990][T19766] bond2: entered allmulticast mode [ 524.162581][ T81] bond5: (slave gretap2): failed to get link speed/duplex [ 524.321139][ T81] bond5: (slave gretap2): failed to get link speed/duplex [ 524.426556][T19798] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3303'. [ 524.490849][ T141] bond5: (slave gretap2): failed to get link speed/duplex [ 524.635667][T19799] lo speed is unknown, defaulting to 1000 [ 524.654851][ T81] bond5: (slave gretap2): failed to get link speed/duplex [ 524.771470][ T13] bond5: (slave gretap2): failed to get link speed/duplex [ 524.843449][T19819] FAULT_INJECTION: forcing a failure. [ 524.843449][T19819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.881109][ T9008] IPVS: ip_vs_send_async error -101 [ 524.901264][T19819] CPU: 1 UID: 0 PID: 19819 Comm: syz.6.3310 Not tainted syzkaller #0 PREEMPT(full) [ 524.901305][T19819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 524.901319][T19819] Call Trace: [ 524.901328][T19819] [ 524.901337][T19819] dump_stack_lvl+0xe8/0x150 [ 524.901378][T19819] should_fail_ex+0x40c/0x560 [ 524.901410][T19819] _copy_from_iter+0x1d3/0x1660 [ 524.901438][T19819] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 524.901468][T19819] ? rcu_is_watching+0x15/0xb0 [ 524.901506][T19819] ? trace_kmem_cache_alloc+0x29/0xe0 [ 524.901535][T19819] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 524.901562][T19819] ? __pfx__copy_from_iter+0x10/0x10 [ 524.901590][T19819] ? __alloc_skb+0x276/0x7a0 [ 524.901618][T19819] ? __alloc_skb+0x276/0x7a0 [ 524.901654][T19819] ? netlink_sendmsg+0x650/0xb40 [ 524.901676][T19819] ? skb_put+0x112/0x210 [ 524.901710][T19819] netlink_sendmsg+0x6c0/0xb40 [ 524.901743][T19819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.901770][T19819] ? aa_sock_msg_perm+0xf1/0x1b0 [ 524.901799][T19819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.901820][T19819] sock_sendmsg_nosec+0x13a/0x180 [ 524.901850][T19819] ____sys_sendmsg+0x54e/0x850 [ 524.901894][T19819] ? __pfx_____sys_sendmsg+0x10/0x10 [ 524.901938][T19819] ? import_iovec+0x73/0xa0 [ 524.901973][T19819] ___sys_sendmsg+0x2a5/0x360 [ 524.902005][T19819] ? __lock_acquire+0x683/0x2cf0 [ 524.902039][T19819] ? __pfx____sys_sendmsg+0x10/0x10 [ 524.902112][T19819] ? __fget_files+0x2a/0x420 [ 524.902140][T19819] ? __fget_files+0x3a2/0x420 [ 524.902181][T19819] __x64_sys_sendmsg+0x1b1/0x290 [ 524.902218][T19819] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 524.902272][T19819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.902304][T19819] do_syscall_64+0x174/0x580 [ 524.902336][T19819] ? trace_irq_disable+0x3b/0x140 [ 524.902365][T19819] ? clear_bhb_loop+0x40/0x90 [ 524.902393][T19819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.902416][T19819] RIP: 0033:0x7faa8579de59 [ 524.902437][T19819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.902456][T19819] RSP: 002b:00007faa865bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.902479][T19819] RAX: ffffffffffffffda RBX: 00007faa85a25fa0 RCX: 00007faa8579de59 [ 524.902495][T19819] RDX: 0000000000040840 RSI: 0000200000000680 RDI: 0000000000000003 [ 524.902509][T19819] RBP: 00007faa865bb090 R08: 0000000000000000 R09: 0000000000000000 [ 524.902522][T19819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.902535][T19819] R13: 00007faa85a26038 R14: 00007faa85a25fa0 R15: 00007ffc2456d108 [ 524.902569][T19819] [ 524.989907][T19815] lo speed is unknown, defaulting to 1000 [ 525.212029][T19823] erspan0: entered allmulticast mode [ 525.603750][T19833] lo speed is unknown, defaulting to 1000 [ 526.074438][T19798] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3303'. [ 526.181798][T19859] netlink: 'syz.6.3323': attribute type 1 has an invalid length. [ 526.299108][ T6306] IPVS: starting estimator thread 0... [ 526.411157][T19861] IPVS: using max 26 ests per chain, 62400 per kthread [ 527.327095][T19879] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3330'. [ 527.849073][T19886] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3333'. [ 527.865297][ T13] net_ratelimit: 15 callbacks suppressed [ 527.865321][ T13] bond5: (slave gretap2): failed to get link speed/duplex [ 527.967428][T19888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3334'. [ 527.989393][T19888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3334'. [ 528.010515][ T36] bond5: (slave gretap2): failed to get link speed/duplex [ 528.175454][ T81] bond5: (slave gretap2): failed to get link speed/duplex [ 528.219498][T19902] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3337'. [ 528.301117][ T36] bond5: (slave gretap2): failed to get link speed/duplex [ 528.420627][ T36] bond5: (slave gretap2): failed to get link speed/duplex [ 528.443683][T19910] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3340'. [ 528.498262][T19910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3340'. [ 528.525088][T19910] netlink: 'syz.0.3340': attribute type 8 has an invalid length. [ 528.540057][ T36] bond5: (slave gretap2): failed to get link speed/duplex [ 528.545572][T19910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3340'. [ 528.589251][T19910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3340'. [ 528.602178][T19910] netlink: 'syz.0.3340': attribute type 8 has an invalid length. [ 528.610994][ T81] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.611048][ T81] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.611086][ T81] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.611124][ T81] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.647383][T19910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3340'. [ 528.686845][T19915] 8021q: adding VLAN 0 to HW filter on device bond3 [ 528.700488][ T81] bond5: (slave gretap2): failed to get link speed/duplex [ 528.820629][ T36] bond5: (slave gretap2): failed to get link speed/duplex [ 528.870753][T19926] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3346'. [ 528.880780][T19927] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3346'. [ 528.900789][T19927] ip6gre1: entered promiscuous mode [ 528.913401][T19927] ip6gre1: entered allmulticast mode [ 528.950398][ T81] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 528.958419][ T81] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 528.969261][T19930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.980465][ T6306] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 528.991732][ T9377] bond5: (slave gretap2): failed to get link speed/duplex [ 529.765092][ T6306] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 529.841580][ T6306] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 530.637715][T19995] FAULT_INJECTION: forcing a failure. [ 530.637715][T19995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.654212][T19995] CPU: 1 UID: 0 PID: 19995 Comm: syz.4.3361 Not tainted syzkaller #0 PREEMPT(full) [ 530.654241][T19995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 530.654255][T19995] Call Trace: [ 530.654264][T19995] [ 530.654273][T19995] dump_stack_lvl+0xe8/0x150 [ 530.654311][T19995] should_fail_ex+0x40c/0x560 [ 530.654341][T19995] _copy_from_user+0x2d/0xb0 [ 530.654374][T19995] __sys_sendto+0x2a9/0x5a0 [ 530.654404][T19995] ? ksys_write+0x1e6/0x270 [ 530.654442][T19995] ? __pfx___sys_sendto+0x10/0x10 [ 530.654470][T19995] ? __mutex_unlock_slowpath+0x731/0x900 [ 530.654543][T19995] ? __pfx_ksys_write+0x10/0x10 [ 530.654582][T19995] __x64_sys_sendto+0xde/0x100 [ 530.654613][T19995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.654637][T19995] do_syscall_64+0x174/0x580 [ 530.654668][T19995] ? trace_irq_disable+0x3b/0x140 [ 530.654695][T19995] ? clear_bhb_loop+0x40/0x90 [ 530.654722][T19995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.654761][T19995] RIP: 0033:0x7fc08cf9de59 [ 530.654782][T19995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.654801][T19995] RSP: 002b:00007fc08de26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 530.654824][T19995] RAX: ffffffffffffffda RBX: 00007fc08d225fa0 RCX: 00007fc08cf9de59 [ 530.654841][T19995] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 530.654855][T19995] RBP: 00007fc08de26090 R08: 000020000005ffe4 R09: 000000000000001c [ 530.654869][T19995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.654882][T19995] R13: 00007fc08d226038 R14: 00007fc08d225fa0 R15: 00007fff615dc678 [ 530.654918][T19995] [ 531.094438][T20000] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 531.132785][T20000] syzkaller0: entered promiscuous mode [ 531.157399][T20000] syzkaller0: entered allmulticast mode [ 531.918065][T20038] smbdirect: ib_dev[syz2] removed [ 532.099693][T20056] netlink: 'syz.7.3380': attribute type 11 has an invalid length. [ 532.278488][T20058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3381'. [ 532.619242][T20075] tipc: Started in network mode [ 532.635993][T20075] tipc: Node identity bec095cbbbc, cluster identity 4711 [ 532.657067][T20075] tipc: Enabled bearer , priority 0 [ 532.683301][T20078] syzkaller0: entered promiscuous mode [ 532.707010][T20078] syzkaller0: entered allmulticast mode [ 532.829058][T20081] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3388'. [ 532.856138][T20075] tipc: Resetting bearer [ 532.876386][T20074] tipc: Resetting bearer [ 532.921528][T20074] tipc: Disabling bearer [ 533.119864][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 533.140102][ T12] net_ratelimit: 26 callbacks suppressed [ 533.140124][ T12] bond5: (slave gretap2): failed to get link speed/duplex [ 533.449665][ T9382] bond5: (slave gretap2): failed to get link speed/duplex [ 533.477470][T20077] __nla_validate_parse: 2 callbacks suppressed [ 533.477493][T20077] netlink: 774 bytes leftover after parsing attributes in process `syz.0.3386'. [ 533.500736][T20077] netlink: 'syz.0.3386': attribute type 75 has an invalid length. [ 533.560394][ T8745] bond5: (slave gretap2): failed to get link speed/duplex [ 533.669734][ T8745] bond5: (slave gretap2): failed to get link speed/duplex [ 533.779710][ T8745] bond5: (slave gretap2): failed to get link speed/duplex [ 533.890151][ T8745] bond5: (slave gretap2): failed to get link speed/duplex [ 534.000362][ T1127] bond5: (slave gretap2): failed to get link speed/duplex [ 534.109802][ T9375] bond5: (slave gretap2): failed to get link speed/duplex [ 534.220037][ T81] bond5: (slave gretap2): failed to get link speed/duplex [ 534.330513][ T9375] bond5: (slave gretap2): failed to get link speed/duplex [ 535.786053][T20092] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 538.179784][ T8745] net_ratelimit: 34 callbacks suppressed [ 538.179808][ T8745] bond5: (slave gretap2): failed to get link speed/duplex [ 538.299867][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 538.410533][ T81] bond5: (slave gretap2): failed to get link speed/duplex [ 538.530116][ T1127] bond5: (slave gretap2): failed to get link speed/duplex [ 538.640374][ T8745] bond5: (slave gretap2): failed to get link speed/duplex [ 538.750117][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 538.861009][ T81] bond5: (slave gretap2): failed to get link speed/duplex [ 538.940049][ T4987] udevd[4987]: worker [5648] /devices/virtual/block/nbd0 timeout; kill it [ 538.950011][ T4987] udevd[4987]: seq 12245 '/devices/virtual/block/nbd0' killed [ 538.969932][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 539.080234][ T81] bond5: (slave gretap2): failed to get link speed/duplex [ 539.191073][ T8745] bond5: (slave gretap2): failed to get link speed/duplex [ 540.004443][ T1643] block nbd0: Possible stuck request ffff888027840000: control (read@0,4096B). Runtime 390 seconds [ 541.919796][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 543.261180][ T9382] net_ratelimit: 36 callbacks suppressed [ 543.261203][ T9382] bond5: (slave gretap2): failed to get link speed/duplex [ 543.381161][ T9382] bond5: (slave gretap2): failed to get link speed/duplex [ 543.490282][ T1127] bond5: (slave gretap2): failed to get link speed/duplex [ 543.602038][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 543.710341][ T9382] bond5: (slave gretap2): failed to get link speed/duplex [ 543.820149][ T9382] bond5: (slave gretap2): failed to get link speed/duplex [ 543.930251][ T9375] bond5: (slave gretap2): failed to get link speed/duplex [ 544.041524][ T9375] bond5: (slave gretap2): failed to get link speed/duplex [ 544.151399][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 544.260145][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 548.330697][ T8745] net_ratelimit: 36 callbacks suppressed [ 548.330720][ T8745] bond5: (slave gretap2): failed to get link speed/duplex [ 548.449983][ T81] bond5: (slave gretap2): failed to get link speed/duplex [ 548.559882][ T81] bond5: (slave gretap2): failed to get link speed/duplex [ 548.669774][ T8745] bond5: (slave gretap2): failed to get link speed/duplex [ 548.779970][ T9375] bond5: (slave gretap2): failed to get link speed/duplex [ 548.889795][ T9382] bond5: (slave gretap2): failed to get link speed/duplex [ 549.013780][ T9382] bond5: (slave gretap2): failed to get link speed/duplex [ 549.017314][T20121] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3393'. [ 549.149801][ T9375] bond5: (slave gretap2): failed to get link speed/duplex [ 549.172263][T20135] netlink: 'syz.5.3394': attribute type 11 has an invalid length. [ 549.254602][T20134] syzkaller1: entered promiscuous mode [ 549.273426][T20134] syzkaller1: entered allmulticast mode [ 549.340351][ T81] bond5: (slave gretap2): failed to get link speed/duplex [ 549.510185][ T9382] bond5: (slave gretap2): failed to get link speed/duplex [ 549.819935][T20164] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3404'. [ 549.974313][ T81] tipc: Subscription rejected, illegal request [ 550.160739][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3407'. [ 550.264810][T20176] pim6reg: entered allmulticast mode [ 550.289136][T20176] netlink: 'syz.5.3407': attribute type 10 has an invalid length. [ 550.580704][T20188] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3410'. [ 550.605399][T20184] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3409'. [ 550.730961][T20197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3412'. [ 550.745561][T20182] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3410'. [ 550.947063][T20209] syzkaller1: entered promiscuous mode [ 550.953344][T20209] syzkaller1: entered allmulticast mode [ 551.032861][T20171] Cannot find set identified by id 0 to match [ 551.258331][T20215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3415'. [ 551.277674][T20215] vlan3: entered promiscuous mode [ 551.286037][T20215] gretap0: entered promiscuous mode [ 551.378427][T20221] netlink: 100 bytes leftover after parsing attributes in process `syz.7.3416'. [ 553.360159][ T81] net_ratelimit: 33 callbacks suppressed [ 553.360183][ T81] bond5: (slave gretap2): failed to get link speed/duplex [ 553.479260][T20188] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 553.483948][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 553.495855][T20206] netlink: 'syz.5.3413': attribute type 11 has an invalid length. [ 553.506980][T20206] netlink: 'syz.5.3413': attribute type 4 has an invalid length. [ 553.515311][T20206] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3413'. [ 553.535052][T20207] netlink: 'syz.5.3413': attribute type 11 has an invalid length. [ 553.543356][T20207] netlink: 'syz.5.3413': attribute type 4 has an invalid length. [ 553.611182][ T9375] bond5: (slave gretap2): failed to get link speed/duplex [ 553.720241][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 553.840003][ T81] bond5: (slave gretap2): failed to get link speed/duplex [ 553.960338][ T9382] bond5: (slave gretap2): failed to get link speed/duplex [ 554.091123][ T9377] bond5: (slave gretap2): failed to get link speed/duplex [ 554.229756][ T9382] bond5: (slave gretap2): failed to get link speed/duplex [ 554.359849][ T9382] bond5: (slave gretap2): failed to get link speed/duplex [ 554.416631][T20263] bridge0 (unregistering): left allmulticast mode [ 554.499732][ T9377] bond5: (slave gretap2): failed to get link speed/duplex [ 554.589364][T20272] tipc: Enabled bearer , priority 10 [ 554.597756][T20273] __nla_validate_parse: 1 callbacks suppressed [ 554.597775][T20273] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3431'. [ 554.801358][T20282] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3433'. [ 554.918175][T20289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3433'. [ 555.131526][T20301] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3439'. [ 555.580242][ T6306] tipc: Node number set to 83924427 [ 556.871640][T20309] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3442'. [ 557.003083][T20314] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10 [ 557.697000][T20282] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 558.373678][ T9375] net_ratelimit: 33 callbacks suppressed [ 558.373701][ T9375] bond5: (slave gretap2): failed to get link speed/duplex [ 558.530774][ T9377] bond5: (slave gretap2): failed to get link speed/duplex [ 558.680406][ T9375] bond5: (slave gretap2): failed to get link speed/duplex [ 558.820921][ T9375] bond5: (slave gretap2): failed to get link speed/duplex [ 558.835481][T20367] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3457'. [ 558.979667][ T9382] bond5: (slave gretap2): failed to get link speed/duplex [ 559.103472][ T81] bond5: (slave gretap2): failed to get link speed/duplex [ 559.122117][T20376] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3460'. [ 559.152141][T20376] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3460'. [ 559.171733][T20379] xt_TCPMSS: Only works on TCP SYN packets [ 559.199791][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 559.219945][ T9375] bond5: (slave gretap2): failed to get link speed/duplex [ 559.346297][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 559.367287][T20384] netlink: 200 bytes leftover after parsing attributes in process `syz.6.3462'. [ 559.479764][ T9375] bond5: (slave gretap2): failed to get link speed/duplex [ 559.588131][T20390] macsec2: entered promiscuous mode [ 559.618201][T20390] erspan0: entered promiscuous mode [ 559.643589][T20390] erspan0: left promiscuous mode [ 559.668529][T20394] netlink: 'syz.7.3466': attribute type 1 has an invalid length. [ 559.755826][T20397] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3466'. [ 559.874496][T20394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 560.002189][T20399] bond1: (slave geneve2): making interface the new active one [ 560.043053][T20399] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 560.890016][ T9377] bond5: (slave gretap2): failed to get link speed/duplex [ 561.252671][T20437] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3477'. [ 561.296295][T20442] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3478'. [ 561.552506][T20451] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3478'. [ 561.597274][T20454] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3479'. [ 561.615619][T20448] bond0: (slave netdevsim0): Error: Device is in use and cannot be enslaved [ 561.797677][T20460] netlink: 'syz.4.3482': attribute type 2 has an invalid length. [ 562.057193][T20462] tipc: Enabled bearer , priority 0 [ 562.076335][T20462] syzkaller0: entered promiscuous mode [ 562.087324][T20462] syzkaller0: entered allmulticast mode [ 562.204430][T20462] tipc: Resetting bearer [ 562.331876][T20477] tipc: Resetting bearer [ 562.427508][T20477] tipc: Disabling bearer [ 563.049368][ T12] wlan1: Trigger new scan to find an IBSS to join [ 563.829775][ T36] net_ratelimit: 12 callbacks suppressed [ 563.829799][ T36] bond5: (slave gretap2): failed to get link speed/duplex [ 563.979748][ T36] bond5: (slave gretap2): failed to get link speed/duplex [ 564.006786][T20537] netlink: 'syz.5.3495': attribute type 13 has an invalid length. [ 564.067129][T20538] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3495'. [ 564.131767][T20541] netlink: 'syz.6.3496': attribute type 1 has an invalid length. [ 564.213388][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 564.250967][ T9382] bond5: (slave gretap2): failed to get link speed/duplex [ 564.336522][T20554] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 564.371602][T20556] netlink: 220 bytes leftover after parsing attributes in process `syz.6.3499'. [ 564.403517][T20556] tc_dump_action: action bad kind [ 564.420513][ T9382] bond5: (slave gretap2): failed to get link speed/duplex [ 564.450915][T20560] FAULT_INJECTION: forcing a failure. [ 564.450915][T20560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.498615][T20560] CPU: 0 UID: 0 PID: 20560 Comm: syz.7.3500 Not tainted syzkaller #0 PREEMPT(full) [ 564.498646][T20560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 564.498659][T20560] Call Trace: [ 564.498667][T20560] [ 564.498677][T20560] dump_stack_lvl+0xe8/0x150 [ 564.498718][T20560] should_fail_ex+0x40c/0x560 [ 564.498751][T20560] _copy_from_user+0x2d/0xb0 [ 564.498785][T20560] kstrtouint_from_user+0xd6/0x180 [ 564.498816][T20560] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 564.498861][T20560] proc_fail_nth_write+0x8e/0x210 [ 564.498893][T20560] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 564.498932][T20560] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 564.498962][T20560] vfs_write+0x296/0xba0 [ 564.499005][T20560] ? __pfx_vfs_write+0x10/0x10 [ 564.499040][T20560] ? __fget_files+0x2a/0x420 [ 564.499082][T20560] ? __fget_files+0x3a2/0x420 [ 564.499109][T20560] ? __fget_files+0x2a/0x420 [ 564.499147][T20560] ksys_write+0x150/0x270 [ 564.499183][T20560] ? __pfx_ksys_write+0x10/0x10 [ 564.499225][T20560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.499250][T20560] do_syscall_64+0x174/0x580 [ 564.499282][T20560] ? trace_irq_disable+0x3b/0x140 [ 564.499310][T20560] ? clear_bhb_loop+0x40/0x90 [ 564.499338][T20560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.499361][T20560] RIP: 0033:0x7f65f175e68e [ 564.499382][T20560] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 564.499401][T20560] RSP: 002b:00007f65ef9f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 564.499424][T20560] RAX: ffffffffffffffda RBX: 00007f65ef9f66c0 RCX: 00007f65f175e68e [ 564.499439][T20560] RDX: 0000000000000001 RSI: 00007f65ef9f60a0 RDI: 0000000000000004 [ 564.499453][T20560] RBP: 00007f65ef9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 564.499466][T20560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.499478][T20560] R13: 00007f65f1a26038 R14: 00007f65f1a25fa0 R15: 00007ffe6b6ec548 [ 564.499514][T20560] [ 564.752442][ T189] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 564.760763][ T9375] bond5: (slave gretap2): failed to get link speed/duplex [ 564.854610][T20574] sctp: [Deprecated]: syz.7.3504 (pid 20574) Use of int in max_burst socket option deprecated. [ 564.854610][T20574] Use struct sctp_assoc_value instead [ 564.881409][ T9375] bond5: (slave gretap2): failed to get link speed/duplex [ 564.991397][ T9382] bond5: (slave gretap2): failed to get link speed/duplex [ 565.121439][ T36] bond5: (slave gretap2): failed to get link speed/duplex [ 565.157148][T20595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3509'. [ 565.194208][T20595] xt_hashlimit: size too large, truncated to 1048576 [ 565.233457][T20595] xt_hashlimit: max too large, truncated to 1048576 [ 565.259848][ T36] bond5: (slave gretap2): failed to get link speed/duplex [ 565.281014][T20600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3513'. [ 565.305151][T20605] netlink: 'syz.6.3512': attribute type 1 has an invalid length. [ 565.341931][T20605] netlink: 232 bytes leftover after parsing attributes in process `syz.6.3512'. [ 565.381701][T20605] netlink: 'syz.6.3512': attribute type 1 has an invalid length. [ 565.496492][T20612] syzkaller0: entered promiscuous mode [ 565.517527][T20612] syzkaller0: entered allmulticast mode [ 565.643732][T20612] tipc: Started in network mode [ 565.681097][T20612] tipc: Node identity d223e56852b1, cluster identity 4711 [ 565.715366][T20612] tipc: Enabled bearer , priority 0 [ 565.803172][T20615] tipc: Resetting bearer [ 565.853750][T20611] tipc: Resetting bearer [ 565.945073][T20611] tipc: Disabling bearer [ 565.982952][T20633] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3517'. [ 566.000150][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.018855][T20633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3517'. [ 566.029876][T20635] bridge0: port 1(syz_tun) entered blocking state [ 566.050558][T20635] bridge0: port 1(syz_tun) entered disabled state [ 566.066781][T20635] syz_tun: entered allmulticast mode [ 566.108202][T20635] syz_tun: entered promiscuous mode [ 566.123190][T20639] netlink: 'syz.6.3517': attribute type 4 has an invalid length. [ 567.110043][T20685] ip6erspan0: entered allmulticast mode [ 567.657934][T20717] netlink: 'syz.7.3538': attribute type 1 has an invalid length. [ 568.156574][T20744] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3548'. [ 568.173175][T20744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3548'. [ 568.195455][T20744] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3548'. [ 568.206266][T20746] x_tables: duplicate underflow at hook 2 [ 568.227150][T20744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3548'. [ 568.244328][T20744] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3548'. [ 568.850632][ T9377] net_ratelimit: 23 callbacks suppressed [ 568.850655][ T9377] bond5: (slave gretap2): failed to get link speed/duplex [ 568.970349][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 569.079841][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 569.189681][ T9377] bond5: (slave gretap2): failed to get link speed/duplex [ 569.299721][ T9377] bond5: (slave gretap2): failed to get link speed/duplex [ 569.410110][ T13] bond5: (slave gretap2): failed to get link speed/duplex [ 569.519929][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 569.630037][ T9377] bond5: (slave gretap2): failed to get link speed/duplex [ 569.750153][ T81] bond5: (slave gretap2): failed to get link speed/duplex [ 569.870072][ T81] bond5: (slave gretap2): failed to get link speed/duplex [ 570.080444][ T1643] block nbd0: Possible stuck request ffff888027840000: control (read@0,4096B). Runtime 420 seconds [ 570.915458][T20728] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 571.158824][T20784] netlink: 'syz.7.3557': attribute type 1 has an invalid length. [ 571.176858][T20784] __nla_validate_parse: 9 callbacks suppressed [ 571.176894][T20784] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3557'. [ 571.209996][T20784] netlink: 'syz.7.3557': attribute type 1 has an invalid length. [ 571.210771][T20786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3558'. [ 571.366694][T20786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3558'. [ 571.554732][T20807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3564'. [ 572.156107][T20835] tipc: Enabled bearer , priority 0 [ 572.174253][T20835] syzkaller0: entered promiscuous mode [ 572.186911][T20835] syzkaller0: entered allmulticast mode [ 572.288228][T20843] tipc: Resetting bearer [ 572.351359][T20833] tipc: Resetting bearer [ 572.472224][T20833] tipc: Disabling bearer [ 573.164372][T20874] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3579'. [ 576.560521][ T81] net_ratelimit: 22 callbacks suppressed [ 576.560545][ T81] bond5: (slave gretap2): failed to get link speed/duplex [ 576.701873][ T141] bond5: (slave gretap2): failed to get link speed/duplex [ 576.840945][ T141] bond5: (slave gretap2): failed to get link speed/duplex [ 576.970962][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 577.090186][ T9379] bond5: (slave gretap2): failed to get link speed/duplex [ 577.134720][T20907] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3591'. [ 577.163587][T20907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3591'. [ 577.516348][T20921] xt_TCPMSS: Only works on TCP SYN packets [ 577.635819][T20925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3595'. [ 577.651468][T20926] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3594'. [ 577.673977][T20926] netlink: 'syz.7.3594': attribute type 5 has an invalid length. [ 577.695187][T20926] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3594'. [ 577.739465][T20929] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3594'. [ 577.758823][T20929] netlink: 'syz.7.3594': attribute type 5 has an invalid length. [ 577.768459][T20929] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3594'. [ 577.993668][ T36] bond8 (unregistering): (slave ip6gretap2): Releasing active interface [ 578.176598][T20938] openvswitch: netlink: Multiple metadata blocks provided [ 578.276965][ T36] bond5 (unregistering): (slave gretap2): Releasing backup interface [ 578.439360][ T36] bond1 (unregistering): (slave bridge1): Releasing active interface [ 578.529323][ T36] bond9 (unregistering): (slave bridge8): Releasing backup interface [ 578.540219][ T36] bridge8 (unregistering): left promiscuous mode [ 578.548347][ T36] bridge8 (unregistering): left allmulticast mode [ 578.572402][ T36] bond1 (unregistering): Released all slaves [ 578.595822][ T36] bond2 (unregistering): (slave veth5): Releasing active interface [ 578.604567][ T36] batadv1: entered promiscuous mode [ 578.616320][ T36] bond2 (unregistering): (slave batadv1): Releasing active interface [ 578.627972][ T36] bond2 (unregistering): Released all slaves [ 578.661295][ T36] bond3 (unregistering): (slave veth7): Releasing active interface [ 578.672030][ T36] bond3 (unregistering): Released all slaves [ 578.699452][ T36] bond4 (unregistering): Released all slaves [ 578.728301][ T36] bond5 (unregistering): Released all slaves [ 578.772400][ T36] bond6 (unregistering): Released all slaves [ 578.818471][ T36] bond0 (unregistering): (slave wlan0): Releasing backup interface [ 578.831063][ T36] bond0 (unregistering): Released all slaves [ 578.863702][ T36] bond7 (unregistering): (slave veth19): Releasing active interface [ 578.875131][ T36] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 578.893904][ T36] bond7 (unregistering): Released all slaves [ 578.913945][ T36] bond8 (unregistering): Released all slaves [ 578.934970][ T36] bond9 (unregistering): Released all slaves [ 578.958743][T20907] bond0: entered promiscuous mode [ 578.966773][T20907] bond0: left promiscuous mode [ 579.207066][ T9377] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.292580][ T36] : left promiscuous mode [ 579.638859][ T9377] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.677913][ T9377] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.785410][T20968] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 579.911296][ T9377] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 579.946181][ T36] : left promiscuous mode [ 580.035441][T20985] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3610'. [ 580.125543][ T36] tipc: Disabling bearer [ 580.188790][ T36] tipc: Left network mode [ 580.442529][ T36] IPVS: stopping master sync thread 9008 ... [ 580.493270][ T5632] Bluetooth: hci6: command 0x0406 tx timeout [ 580.834151][T21020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3621'. [ 581.775380][ T30] audit: type=1804 audit(1783911838.390:13): pid=21046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3629" name="/newroot/401/cgroup.controllers" dev="tmpfs" ino=2071 res=1 errno=0 [ 581.868948][ T30] audit: type=1800 audit(1783911838.390:14): pid=21046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3629" name="cgroup.controllers" dev="tmpfs" ino=2071 res=0 errno=0 [ 581.941975][ T30] audit: type=1800 audit(1783911838.400:15): pid=21046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3629" name="cgroup.controllers" dev="tmpfs" ino=2071 res=0 errno=0 [ 582.212787][T21069] ip6gretap0: entered promiscuous mode [ 582.315087][T21079] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3639'. [ 582.366641][T21079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3639'. [ 582.483183][ T36] hsr_slave_0: left promiscuous mode [ 582.598370][ T36] veth1_vlan: left promiscuous mode [ 582.606432][ T36] veth0_vlan: left promiscuous mode [ 584.009496][T21125] netlink: 'syz.7.3649': attribute type 1 has an invalid length. [ 584.057785][T21125] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3649'. [ 584.393657][T21137] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3652'. [ 584.732797][T21149] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3653'. [ 584.908427][T21154] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 584.968064][ T36] IPVS: stop unused estimator thread 0... [ 585.380839][T21176] netlink: 'syz.6.3660': attribute type 1 has an invalid length. [ 585.461517][T21176] bond2: (slave dummy0): making interface the new active one [ 585.471542][T21176] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 585.493999][T21183] x_tables: duplicate entry at hook 2 [ 585.528145][T21183] netlink: 'syz.0.3662': attribute type 1 has an invalid length. [ 585.563397][T21183] netlink: 'syz.0.3662': attribute type 1 has an invalid length. [ 585.603664][T21183] netlink: 'syz.0.3662': attribute type 2 has an invalid length. [ 585.704432][T21187] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.712450][T21187] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.767303][T21187] bond2: (slave dummy0): Releasing active interface [ 585.858095][T21187] bridge_slave_0: left allmulticast mode [ 585.864755][T21187] bridge_slave_0: left promiscuous mode [ 585.874141][T21187] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.896249][T21187] bridge_slave_1: left allmulticast mode [ 585.903350][T21187] bridge_slave_1: left promiscuous mode [ 585.909406][T21187] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.942010][T21187] bond0: (slave bond_slave_0): Releasing backup interface [ 585.965961][T21187] bond0: (slave bond_slave_1): Releasing backup interface [ 586.012298][T21187] team0: Port device team_slave_0 removed [ 586.042686][T21187] team0: Port device team_slave_1 removed [ 586.067041][T21187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.112735][T21187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.173411][T21187] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 586.434747][T21204] syzkaller0: entered promiscuous mode [ 586.451249][T21204] syzkaller0: entered allmulticast mode [ 586.563284][T21226] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3667'. [ 586.628859][T21227] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3669'. [ 586.818470][T21241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3672'. [ 586.836719][T21241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3672'. [ 587.015818][T21249] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3673'. [ 590.734536][ T5632] Bluetooth: hci0: command 0x0406 tx timeout [ 590.987852][T21274] netlink: 'syz.7.3678': attribute type 1 has an invalid length. [ 591.068701][T21280] x_tables: duplicate underflow at hook 2 [ 591.447415][T21296] __nla_validate_parse: 1 callbacks suppressed [ 591.447434][T21296] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3682'. [ 591.821297][T21303] syzkaller0: entered promiscuous mode [ 591.837965][T21303] syzkaller0: entered allmulticast mode [ 592.044364][T21328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3689'. [ 592.111770][T21333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3691'. [ 594.409789][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 595.842470][ T5628] Bluetooth: hci3: command 0x0406 tx timeout [ 595.946034][T21333] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 596.293062][T21378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.315704][T21387] xt_TCPMSS: Only works on TCP SYN packets [ 596.337968][T21386] xt_TCPMSS: Only works on TCP SYN packets [ 596.883514][T21412] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3705'. [ 596.915284][T21412] tipc: Started in network mode [ 596.937654][T21412] tipc: Node identity 4246, cluster identity 4711 [ 596.963365][T21412] tipc: Node number set to 16966 [ 597.468228][T21427] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3709'. [ 597.498659][T21427] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3709'. [ 597.677830][T21435] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3713'. [ 597.709064][T21435] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3713'. [ 598.243483][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 598.408966][T21474] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3722'. [ 599.168039][T21505] netlink: 260 bytes leftover after parsing attributes in process `syz.7.3733'. [ 599.299468][T21512] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20000 [ 599.519067][T21533] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 599.645677][T21529] block nbd6: server does not support multiple connections per device. [ 599.673833][T21529] block nbd6: shutting down sockets [ 599.685135][T21543] syzkaller0: entered promiscuous mode [ 599.708888][T21543] syzkaller0: entered allmulticast mode [ 599.737383][T21541] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 600.027660][T21558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3748'. [ 600.040513][T21558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3748'. [ 600.063061][T21558] netlink: 'syz.0.3748': attribute type 1 has an invalid length. [ 600.080567][T21558] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3748'. [ 600.111138][T21562] gretap1: entered allmulticast mode [ 600.165475][ T1643] block nbd0: Possible stuck request ffff888027840000: control (read@0,4096B). Runtime 450 seconds [ 600.584074][T21585] Bluetooth: MGMT ver 1.23 [ 600.727716][T21588] nbd: device at index 64 is going down [ 600.862105][T21555] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 601.015959][ T5623] udevd[5623]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 601.039102][ T5623] udevd[5623]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 601.089077][T21603] netlink: 'syz.6.3759': attribute type 11 has an invalid length. [ 601.682837][T21625] 8021q: adding VLAN 0 to HW filter on device bond4 [ 602.025814][T21651] geneve1: entered promiscuous mode [ 602.077136][T21651] geneve1: entered allmulticast mode [ 602.083774][ T5632] Bluetooth: hci0: command 0x0406 tx timeout [ 602.396887][T21659] __nla_validate_parse: 9 callbacks suppressed [ 602.396908][T21659] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3774'. [ 602.624384][T21684] netlink: 'syz.7.3778': attribute type 2 has an invalid length. [ 602.643823][T21684] netlink: 228 bytes leftover after parsing attributes in process `syz.7.3778'. [ 603.109476][T21708] netlink: 'syz.0.3781': attribute type 28 has an invalid length. [ 603.141764][T21708] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3781'. [ 603.269846][T21717] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3784'. [ 603.517420][T21730] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3786'. [ 604.458309][T21761] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3797'. [ 604.632345][T21771] syzkaller1: entered promiscuous mode [ 604.638180][T21771] syzkaller1: entered allmulticast mode [ 604.986451][T21783] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3804'. [ 604.988138][T21787] IPv6: Can't replace route, no match found [ 605.013465][ T6306] IPVS: starting estimator thread 0... [ 605.024849][T21785] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3805'. [ 605.038154][T21787] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3806'. [ 605.053148][T21785] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3805'. [ 605.111830][T21790] IPVS: using max 29 ests per chain, 69600 per kthread [ 605.192611][T21793] syzkaller0: entered promiscuous mode [ 605.198533][T21793] syzkaller0: entered allmulticast mode [ 605.605165][T21810] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 605.651109][T21810] bond2 (unregistering): Released all slaves [ 606.081211][ T5628] Bluetooth: hci7: command 0x0406 tx timeout [ 606.762748][T21868] netlink: 'syz.5.3824': attribute type 2 has an invalid length. [ 606.764611][T21869] netlink: 'syz.7.3823': attribute type 11 has an invalid length. [ 607.904016][T21912] netlink: 'syz.5.3837': attribute type 11 has an invalid length. [ 608.220588][T21931] __nla_validate_parse: 7 callbacks suppressed [ 608.220607][T21931] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3844'. [ 608.832819][T21963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3852'. [ 608.862324][T21963] syz_tun: left allmulticast mode [ 608.877697][T21963] syz_tun: left promiscuous mode [ 608.888404][T21963] bridge0: port 1(syz_tun) entered disabled state [ 608.916884][T21963] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 609.035794][T21968] openvswitch: netlink: Message has 4 unknown bytes. [ 609.051031][T21968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.205709][T21977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3856'. [ 609.217237][T21977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.626168][T21989] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3859'. [ 609.678352][T21996] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3861'. [ 611.073330][T22038] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3873'. [ 611.140289][T22038] 8021q: adding VLAN 0 to HW filter on device bond5 [ 611.170812][T22044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 611.585924][T22055] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3878'. [ 611.909195][T22043] tipc: Enabling of bearer rejected, failed to enable media [ 611.963343][T22068] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3881'. [ 612.001663][T22069] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3881'. [ 612.106608][T22072] mac80211_hwsim hwsim19 wlan1: Caught tx_queue_len zero misconfig [ 612.116984][T22072] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3882'. [ 612.676303][ T6314] hid-generic 0005:0C45:0009.0001: unknown main item tag 0x0 [ 612.786075][T22101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 612.921368][ T6314] hid-generic 0005:0C45:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 613.006162][T22107] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 613.143579][T22110] netlink: 'syz.4.3893': attribute type 23 has an invalid length. [ 613.312246][T22119] netlink: 'syz.4.3895': attribute type 3 has an invalid length. [ 613.346295][T22119] __nla_validate_parse: 2 callbacks suppressed [ 613.346318][T22119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3895'. [ 613.380367][T22120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3895'. [ 613.466601][T22084] lo speed is unknown, defaulting to 1000 [ 613.509936][T22084] lo speed is unknown, defaulting to 1000 [ 613.549390][T22084] lo speed is unknown, defaulting to 1000 [ 613.559941][T22084] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 613.563107][T22126] tipc: Enabled bearer , priority 0 [ 613.591343][T22084] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 613.611066][T22125] syzkaller0: entered promiscuous mode [ 613.617271][T22125] syzkaller0: entered allmulticast mode [ 613.643758][T22084] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 613.735200][T22084] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 613.771206][T22129] tipc: Resetting bearer [ 613.957915][T22128] syzkaller0: entered promiscuous mode [ 613.964307][T22128] syzkaller0: entered allmulticast mode [ 613.983469][T22084] lo speed is unknown, defaulting to 1000 [ 613.990305][T22122] tipc: Resetting bearer [ 614.041748][T22122] tipc: Disabling bearer [ 614.192525][T22137] netlink: 'syz.0.3899': attribute type 16 has an invalid length. [ 614.215301][T22133] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3898'. [ 614.880297][ T31] INFO: task syz.3.2810:17868 blocked for more than 143 seconds. [ 614.892345][ T31] Not tainted syzkaller #0 [ 614.909934][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 614.918803][ T31] task:syz.3.2810 state:D stack:27200 pid:17868 tgid:17863 ppid:5626 task_flags:0x400140 flags:0x00080002 [ 614.933210][ T31] Call Trace: [ 614.936610][ T31] [ 614.940968][ T31] __schedule+0x17d9/0x56c0 [ 614.945564][ T31] ? __lock_acquire+0x683/0x2cf0 [ 614.950908][ T31] ? __lock_acquire+0x683/0x2cf0 [ 614.955928][ T31] ? __pfx___schedule+0x10/0x10 [ 614.962234][ T31] ? schedule+0x90/0x2b0 [ 614.966572][ T31] schedule+0x164/0x2b0 [ 614.971236][ T31] schedule_preempt_disabled+0x13/0x30 [ 614.976959][ T31] __mutex_lock+0x7bf/0x1550 [ 614.983177][ T31] ? __mutex_lock+0x5d4/0x1550 [ 614.988044][ T31] ? nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 614.994104][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 614.999297][ T31] ? net_generic+0x1e/0x240 [ 615.004087][ T31] ? net_generic+0x1e/0x240 [ 615.008768][ T31] ? net_generic+0x1e/0x240 [ 615.013767][ T31] ? net_generic+0x1e/0x240 [ 615.018483][ T31] nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 615.024085][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 615.030125][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 615.036370][ T31] ? bpf_lsm_capable+0x9/0x20 [ 615.041575][ T31] ? security_capable+0x7e/0x2c0 [ 615.046633][ T31] genl_rcv_msg+0x614/0x7a0 [ 615.051786][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 615.056916][ T31] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 615.063176][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 615.068636][ T31] netlink_rcv_skb+0x226/0x4a0 [ 615.076036][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 615.081311][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 615.086723][ T31] ? down_read+0x2be/0x330 [ 615.091789][ T31] genl_rcv+0x28/0x40 [ 615.095853][ T31] netlink_unicast+0x7bb/0x940 [ 615.100875][ T31] netlink_sendmsg+0x813/0xb40 [ 615.105753][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.111503][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 615.116595][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.122070][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 615.127257][ T31] ____sys_sendmsg+0x54e/0x850 [ 615.132514][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 615.137871][ T31] ? import_iovec+0x73/0xa0 [ 615.142529][ T31] ___sys_sendmsg+0x2a5/0x360 [ 615.147259][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 615.152872][ T31] ? futex_wake+0x51b/0x5f0 [ 615.157467][ T31] ? __pfx_do_futex+0x10/0x10 [ 615.163087][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 615.168130][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 615.174488][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.182882][ T31] do_syscall_64+0x174/0x580 [ 615.187588][ T31] ? clear_bhb_loop+0x40/0x90 [ 615.192659][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.198596][ T31] RIP: 0033:0x7f9eb7f9de59 [ 615.203363][ T31] RSP: 002b:00007f9eb61f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 615.212343][ T31] RAX: ffffffffffffffda RBX: 00007f9eb8225fa0 RCX: 00007f9eb7f9de59 [ 615.220475][ T31] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000008 [ 615.229293][ T31] RBP: 00007f9eb8033e6f R08: 0000000000000000 R09: 0000000000000000 [ 615.237725][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 615.245910][ T31] R13: 00007f9eb8226038 R14: 00007f9eb8225fa0 R15: 00007ffcf7496e98 [ 615.254290][ T31] [ 615.257444][ T31] [ 615.257444][ T31] Showing all locks held in the system: [ 615.265358][ T31] 1 lock held by khungtaskd/31: [ 615.272062][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 615.292482][ T31] 4 locks held by kworker/u8:7/153: [ 615.297799][ T31] #0: ffff888020ab8140 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 615.310833][ T31] #1: ffffc90002e8fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 615.324481][ T31] #2: ffff88802ab423e8 (&wb->work_lock){..-.}-{3:3}, at: wb_workfn+0x1006/0x10f0 [ 615.335625][ T31] #3: ffffffff9aa60060 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xb7/0x420 [ 615.347835][ T31] 2 locks held by getty/5374: [ 615.352919][ T31] #0: ffff88823bec60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 615.370650][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 615.382171][ T31] 1 lock held by udevd/5648: [ 615.386817][ T31] #0: ffff8880276fe350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 615.396596][ T31] 3 locks held by kworker/u8:10/9373: [ 615.402308][ T31] #0: ffff88803174c940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 615.414665][ T31] #1: ffffc90004eafc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 615.429449][ T31] #2: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 615.441344][ T31] 3 locks held by kworker/u8:12/9377: [ 615.446805][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 615.458982][ T31] #1: ffffc9000385fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 615.470327][ T31] #2: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 615.479402][ T31] 2 locks held by syz.2.1486/12117: [ 615.484961][ T31] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 615.493665][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 615.504038][ T31] 2 locks held by syz.3.2810/17868: [ 615.509267][ T31] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 615.518045][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 615.532389][ T31] 2 locks held by syz.1.2943/18357: [ 615.537642][ T31] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 615.545991][ T31] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xd20 [ 615.556506][ T31] 2 locks held by syz.5.3883/22074: [ 615.561848][ T31] #0: ffffffff9001d6a8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 615.571803][ T31] #1: ffff88803ad8cfe0 (&device->compat_devs_mutex){+.+.}-{4:4}, at: rdma_dev_exit_net+0x1ac/0x340 [ 615.582855][ T31] 6 locks held by syz.7.3886/22084: [ 615.588304][ T31] #0: ffffffff9ab1b1a8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x33d/0xa40 [ 615.598813][ T31] #1: ffffffff8fd8ae28 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x429/0x650 [ 615.608573][ T31] #2: ffffffff8fd7c308 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0xff/0x3e0 [ 615.619001][ T31] #3: ffffffff8fd7c4c8 (rdma_nets_rwsem){++++}-{4:4}, at: enable_device_and_get+0x27c/0x3e0 [ 615.629334][ T31] #4: ffff88803ad8cfe0 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 615.640940][ T31] #5: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x173/0x7f0 [ 615.650557][ T31] 2 locks held by syz.4.3897/22127: [ 615.655795][ T31] #0: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 615.665195][ T31] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 615.676274][ T31] 2 locks held by syz.6.3898/22133: [ 615.681841][ T31] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 615.690465][ T31] #1: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x890 [ 615.700163][ T31] 2 locks held by syz.0.3899/22137: [ 615.705401][ T31] #0: ffffffff8f777a68 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 615.715181][ T31] #1: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 615.724735][ T31] [ 615.727139][ T31] ============================================= [ 615.727139][ T31] [ 615.735915][ T31] NMI backtrace for cpu 0 [ 615.735935][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 615.735958][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 615.735969][ T31] Call Trace: [ 615.735979][ T31] [ 615.735988][ T31] dump_stack_lvl+0xe8/0x150 [ 615.736023][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 615.736126][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 615.736157][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 615.736186][ T31] sys_info+0x135/0x170 [ 615.736206][ T31] watchdog+0xfd7/0x1030 [ 615.736237][ T31] ? watchdog+0x1c7/0x1030 [ 615.736267][ T31] kthread+0x388/0x470 [ 615.736295][ T31] ? __pfx_watchdog+0x10/0x10 [ 615.736316][ T31] ? __pfx_kthread+0x10/0x10 [ 615.736355][ T31] ret_from_fork+0x514/0xb70 [ 615.736387][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 615.736414][ T31] ? __switch_to+0xc89/0x1420 [ 615.736440][ T31] ? __pfx_kthread+0x10/0x10 [ 615.736469][ T31] ret_from_fork_asm+0x1a/0x30 [ 615.736502][ T31] [ 615.736510][ T31] Sending NMI from CPU 0 to CPUs 1: [ 615.850280][ C1] NMI backtrace for cpu 1 [ 615.850297][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 615.850318][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 615.850331][ C1] RIP: 0010:debug_object_deactivate+0xd5/0x250 [ 615.850362][ C1] Code: 4c 89 ff e8 9d f3 55 fd 4d 8b 3f 45 31 f6 eb 06 4d 8b 3f 41 ff c6 4d 85 ff 74 36 4d 8d 6f 18 4c 89 e8 48 c1 e8 03 80 3c 28 00 <74> 08 4c 89 ef e8 71 f3 55 fd 4d 39 65 00 74 29 4c 89 f8 48 c1 e8 [ 615.850379][ C1] RSP: 0018:ffffc90000a08cc8 EFLAGS: 00000046 [ 615.850396][ C1] RAX: 1ffff1100f673c9d RBX: ffffffff9aa1dc88 RCX: 0000000000000001 [ 615.850410][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000a08c20 [ 615.850421][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 615.850433][ C1] R10: dffffc0000000000 R11: fffff52000141184 R12: ffff8880256be8a0 [ 615.850447][ C1] R13: ffff88807b39e4e8 R14: 0000000000000002 R15: ffff88807b39e4d0 [ 615.850460][ C1] FS: 0000000000000000(0000) GS:ffff88812505e000(0000) knlGS:0000000000000000 [ 615.850475][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 615.850491][ C1] CR2: 00005555750bb4e8 CR3: 00000000757b6000 CR4: 00000000003526f0 [ 615.850507][ C1] Call Trace: [ 615.850514][ C1] [ 615.850527][ C1] detach_timer+0x33/0x2d0 [ 615.850558][ C1] __run_timer_base+0x5d3/0x8b0 [ 615.850582][ C1] ? ktime_get+0x45/0x220 [ 615.850612][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 615.850639][ C1] ? ktime_get+0x1f5/0x220 [ 615.850661][ C1] ? lapic_next_event+0x11/0x20 [ 615.850682][ C1] run_timer_softirq+0xb7/0x170 [ 615.850707][ C1] handle_softirqs+0x225/0x840 [ 615.850730][ C1] ? __irq_exit_rcu+0xca/0x220 [ 615.850754][ C1] __irq_exit_rcu+0xca/0x220 [ 615.850775][ C1] irq_exit_rcu+0x9/0x30 [ 615.850793][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 615.850827][ C1] [ 615.850833][ C1] [ 615.850841][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 615.850860][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 615.850886][ C1] Code: ac 80 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 7a 1a 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 615.850902][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000246 [ 615.850916][ C1] RAX: 000000000014cb1b RBX: ffffffff819ab450 RCX: 0000000080000001 [ 615.850929][ C1] RDX: 0000000000000001 RSI: ffffffff8e22ba3a RDI: ffffffff8c4bd380 [ 615.850942][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 615.850956][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 615.850969][ C1] R13: 1ffff11003c53000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 615.850985][ C1] ? do_idle+0x2e0/0x540 [ 615.851014][ C1] default_idle+0x9/0x20 [ 615.851030][ C1] default_idle_call+0x72/0xb0 [ 615.851047][ C1] do_idle+0x2e0/0x540 [ 615.851072][ C1] ? __pfx_do_idle+0x10/0x10 [ 615.851100][ C1] cpu_startup_entry+0x43/0x60 [ 615.851124][ C1] start_secondary+0x101/0x110 [ 615.851148][ C1] common_startup_64+0x13e/0x157 [ 615.851177][ C1] [ 616.163705][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 616.170724][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 616.179872][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 616.189983][ T31] Call Trace: [ 616.193312][ T31] [ 616.196301][ T31] vpanic+0x56c/0xa60 [ 616.200341][ T31] ? __pfx___schedule+0x10/0x10 [ 616.205244][ T31] ? __pfx_vpanic+0x10/0x10 [ 616.209799][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 616.216009][ T31] panic+0xc5/0xd0 [ 616.219769][ T31] ? __pfx_panic+0x10/0x10 [ 616.224208][ T31] ? preempt_schedule_common+0x82/0xd0 [ 616.229689][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 616.235091][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 616.241307][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 616.247488][ T31] watchdog+0x1030/0x1030 [ 616.251839][ T31] ? watchdog+0x1c7/0x1030 [ 616.256278][ T31] kthread+0x388/0x470 [ 616.260415][ T31] ? __pfx_watchdog+0x10/0x10 [ 616.265148][ T31] ? __pfx_kthread+0x10/0x10 [ 616.269785][ T31] ret_from_fork+0x514/0xb70 [ 616.274425][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 616.279583][ T31] ? __switch_to+0xc89/0x1420 [ 616.284301][ T31] ? __pfx_kthread+0x10/0x10 [ 616.288936][ T31] ret_from_fork_asm+0x1a/0x30 [ 616.293759][ T31] [ 616.297429][ T31] Kernel Offset: disabled [ 616.301776][ T31] Rebooting in 86400 seconds..