last executing test programs: 3m22.062141779s ago: executing program 2 (id=2453): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f6", 0x4}], 0x1}, 0x0) r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xb000700d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000040)={0x6000200c}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0x5}, {0x6}]}, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f00000000c0)={r7, r7, 0x206, 0xffffff51, 0x0, 0x2, 0x72, 0x1, 0x7, 0x7, 0x0, 0x8, 'syz0\x00'}) r9 = socket$unix(0x1, 0x2, 0x0) connect$unix(r9, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x4) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f0000000000)) r10 = socket(0xa, 0x2, 0x0) listen(r10, 0x100) sendmsg$inet_sctp(r10, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4002804}, 0x0) socket(0x5, 0x5, 0x9) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x48010) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000e80), r11) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) 3m20.31405807s ago: executing program 2 (id=2464): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x800, 0x3d}}}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x200, {0xe, 0x0, 0x2, 0xb382}}}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r2, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2d}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4018001}, 0x41011) getsockname$netlink(r0, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@RTM_GETMDB={0x18, 0x56, 0x400, 0x70bd29, 0x25dfdbfb, {0x7, r4}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x800) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r5, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'syzkaller1\x00', 0x0}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000009c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000680)={0x2fc, r7, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x14c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x42, 0x3, "55c4ce47c55a104d2e2c3c71b3f5d18e74efdafabc00c69a5b41819051665ead6bba2698791c0d46611847ca9dc83dfcf59c8a4566dc09e0ddeb7453b5c5"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x156}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x95, 0x3, "ef838d17a4b37b4d5418902729f96277588a7055aeb15972f89ca6f667598f8ba2ecfce786ff9c5c16800b1682768f5ee610087a855a9f3f587aa1fc28f9f7c03e30eebef7820f552df45b52023c654e02fcdf7a1502929ad97b56376b88ce808a20d7c5f36d5b45434e690c15acb899afc92fb8d481e87343f8ca7f9576560039fed51245a2d88427ff4f2ba7f8daae9c"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "6188abae27665f8d26c080143ad458c78289c4ecbc"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xbe97}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x11e48ca8}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd3}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x60}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf3d0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x724355a2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3156a699}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x10001, @empty, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf9f}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040040) r8 = socket(0x21, 0x6, 0x1000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f0000000a40)={'syztnl1\x00', r4, 0x29, 0x9, 0x6, 0x3, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x80, 0x7a7d4464, 0x6}}) sendmsg$nl_route_sched(r8, &(0x7f0000000cc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b00)=@delqdisc={0x180, 0x25, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x2, 0x5}, {0x6, 0xfff1}, {0x3, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0xfc, 0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x1, 0xab40, 0x6, 0x2, 0x10e, 0x6, 0x2}}, {0x8, 0x2, [0x6, 0x5]}}, {{0x1c, 0x1, {0xd, 0xa6, 0x6, 0x9, 0x1, 0x0, 0x4, 0x5}}, {0xe, 0x2, [0x2, 0x8001, 0x8000, 0xa915, 0x8]}}, {{0x1c, 0x1, {0x3, 0x5, 0x7, 0x6, 0x1, 0x1, 0x65cb5132, 0x8}}, {0x14, 0x2, [0xffff, 0x83, 0x6, 0x7ff, 0x0, 0x3d91, 0x0, 0x7]}}, {{0x1c, 0x1, {0x5, 0x9, 0x7fff, 0x8bd7, 0x0, 0x3, 0x2, 0x1}}, {0x6, 0x2, [0x100]}}, {{0x1c, 0x1, {0x6, 0x26, 0xfff, 0x1, 0x0, 0x6000, 0x0, 0x2}}, {0x8, 0x2, [0x7, 0x6]}}, {{0x1c, 0x1, {0xf9, 0x6, 0x9, 0x4, 0x1, 0x0, 0x4, 0x2}}, {0x8, 0x2, [0x2, 0xaa]}}, {{0x1c, 0x1, {0x7, 0x93, 0xa, 0x5, 0x2, 0x9, 0x889, 0x4}}, {0xc, 0x2, [0x1, 0xfff, 0x4, 0x1]}}, {{0x1c, 0x1, {0x80, 0x6, 0x9, 0x5, 0x0, 0x5, 0x2, 0x5}}, {0xe, 0x2, [0xf, 0x7, 0x7f, 0xfff8, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x180}, 0x1, 0x0, 0x0, 0x800}, 0x4) connect$tipc(r8, &(0x7f0000000d00)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}, 0x1}}, 0x10) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6eb1, 0x0, 0x0, 0x0, 0xa}, [@alu={0x7, 0x0, 0x4, 0xa, 0x0, 0x4, 0x10}]}, &(0x7f0000000d80)='syzkaller\x00', 0x1055, 0xee, &(0x7f0000000dc0)=""/238, 0x41000, 0x20, '\x00', r9, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x2d8f, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000f00)=[{0x4, 0x2, 0xd, 0xa}, {0x2, 0x4, 0x1, 0x8}, {0x5, 0x5, 0x1}]}, 0x94) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000001000)=0xf) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@bloom_filter={0x1e, 0x8, 0x9, 0x0, 0x4, 0x1, 0x9, '\x00', r9, r8, 0x5, 0x2, 0x1, 0x7}, 0x50) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcf, 0xcf, 0x3, [@float={0x5, 0x0, 0x0, 0x10, 0x8}, @datasec={0x8, 0x6, 0x0, 0xf, 0x3, [{0x4, 0x3, 0x4}, {0x2, 0x8, 0x1}, {0x5, 0x4a, 0x7}, {0x2, 0x1, 0x3}, {0x1, 0x20000000, 0x6}, {0x4, 0x9, 0xc}], "95e25f"}, @const={0xc}, @struct={0x4, 0x5, 0x0, 0x4, 0x0, 0x80, [{0x9, 0x3}, {0x6, 0x0, 0x4}, {0x5, 0x0, 0x1ff}, {0xb, 0x4, 0x6}, {0xa, 0x2, 0x8}]}, @float={0xc, 0x0, 0x0, 0x10, 0x2}, @float={0xa, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x0]}}, &(0x7f00000012c0)=""/104, 0xeb, 0x68, 0x0, 0xe11a, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001400)={0x621e6aa8, 0x0}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001440)={0x1, 0xffffffffffffffff}, 0x4) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x12, 0x7a9, 0xfffffff9, 0x4, 0x800, 0x1, 0xb09, '\x00', r6, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001500), &(0x7f0000001540)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000015c0), &(0x7f0000001600)=r10}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x1f, 0x14, &(0x7f00000010c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb6d}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@call={0x85, 0x0, 0x0, 0x5f}, @func, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x3}, @generic={0x2, 0x1, 0x5, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x1a, '\x00', r4, @fallback=0x14, r12, 0x8, &(0x7f0000001380)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000013c0)={0x0, 0x9, 0x5, 0x7fffffff}, 0x10, r13, r10, 0x1, &(0x7f0000001680)=[r14, r15, r16, r17], &(0x7f00000016c0)=[{0x0, 0x3, 0x6, 0xc}], 0x10, 0x80}, 0x94) r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001800), r8) sendmsg$NL80211_CMD_LEAVE_IBSS(r8, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x20, r18, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x4000010) 3m19.673985332s ago: executing program 2 (id=2472): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x9f47c777102a64be) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, 0x1}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x153140, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x48) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x80000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x2, 0x5, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x89, &(0x7f0000000800)=""/137, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) listen(r5, 0x80004) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="120000000400000004f6ffff110000000000000043f5d3178159a98f0e93d3042358a3af54170140530288a2be9242341ceb475c67d9b7af81616b425a4bc91dc96cf6e0f4f94d951dac13f3554c137add794ffd2499c482bb44e200bd078a8fd5e165ded63f1926486143660b2559a6b51e1fc0fe6e5c58abab8af1e33753359041c9930e934c8c1260914e566cad08e13ed3b3968056e8c0e88243a4b82d7bde424d8c7ca2f76b4dac79c0ebdd67aae93cf09ced63a24e4f01543003f763a9d745a7600c3a9428051fc2570c09fda6dd93d35dd9928afe1fbffa446c6fde2c6b35605fca", @ANYRES16=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000076da1c25abfb1ee0000000000000"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r6, &(0x7f0000000cc0)="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", &(0x7f0000000a40)=@tcp6=r5}, 0x20) recvmmsg(r5, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/52, 0x34}], 0x1}, 0xe}, {{&(0x7f0000000440)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000940)=""/152, 0x98}, {&(0x7f0000000c40)=""/107, 0x6b}, {&(0x7f0000000fc0)=""/118, 0x76}, {&(0x7f0000001040)=""/197, 0xc5}, {&(0x7f0000001140)=""/227, 0xe3}], 0x5, &(0x7f00000012c0)=""/130, 0x82}, 0xc87d}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000001380)=""/247, 0xf7}, {&(0x7f0000001480)=""/59, 0x3b}, {&(0x7f00000014c0)=""/154, 0x9a}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/120, 0x78}], 0x5}, 0x1}, {{&(0x7f0000002b40)=@xdp, 0x80, &(0x7f0000002bc0), 0x0, &(0x7f0000002c00)=""/251, 0xfb}, 0x9}], 0x5, 0x0, 0x0) r9 = socket(0x21, 0x800, 0x1) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r8], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYBLOB="000c608e422cf536dd37", @ANYRES8=0x0, @ANYRES32=r1, @ANYRES8=r9, @ANYRESHEX, @ANYRES64=r7], 0x48) accept(r9, &(0x7f00000008c0)=@phonet, &(0x7f0000000140)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000002e40)=ANY=[@ANYRES16=r6, @ANYRES32, @ANYBLOB="5f586b10118ea1c42623b5acd4214cf84e3d603ee5a7255c841d337d71b4d79629ff6b484d07773ab6a3b4c04b7ac8d220ae8d1114d8a70818", @ANYRES16=r8, @ANYRES32=0x0, @ANYBLOB="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", @ANYRESHEX=r1, @ANYRES32=r2, @ANYBLOB="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"], 0x50) r11 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1040073, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x39, 0x8, 0x0, 0x0}}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$inet_sctp(r11, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x804c040}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES16=r4], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) socket$nl_netfilter(0x10, 0x3, 0xc) 3m16.507447318s ago: executing program 2 (id=2499): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r6) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r9) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r10, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r8, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1=0xe0000306}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) splice(r5, 0x0, r6, 0x0, 0xfffd, 0x0) connect$bt_l2cap(r6, &(0x7f0000000300)={0x1f, 0x0, @none, 0x9}, 0xe) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv4_deladdr={0xfffffea9, 0x15, 0x200, 0xfffffffe, 0x1, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_BROADCAST={0x0, 0x4, @empty}]}, 0x20}}, 0x24000044) 3m15.681316043s ago: executing program 2 (id=2506): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0xfffc, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) connect$unix(r3, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x8}}}}}}, 0x2e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000009000080850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0xffffff81, 0x0, 0x0, 0x0, 0x7, 0xffff80fe}, 0x7) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000004c0)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x4, 0xffffffffffffffff}]}, 0x108) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {&(0x7f00000014c0)=""/4096, 0x94}], 0x2}, 0x200}], 0x1, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r8, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r7, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) 3m14.282090624s ago: executing program 2 (id=2516): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000240)={r0, &(0x7f0000000000)='@%\x00', 0xc980, &(0x7f0000000040)={@_ha_fsid={[0x10001, 0x8]}, {0xfffd, 0x6, 0x6b0051ab, 0x9}}, 0x53ef6c09, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000200)=0xd2e8}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x3c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff80, 0x10, &(0x7f0000000000), 0x76}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b2b, &(0x7f0000000040)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000000000e00000007"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x3ec0) close(0x3) write(r6, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x25, &(0x7f0000000780)=ANY=[@ANYBLOB="1842000004000000000000000000000018130000", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f00000003c0)='syzkaller\x00', 0x9, 0x2e, &(0x7f0000000400)=""/46, 0x41100, 0x0, '\x00', r4, 0x25, r1, 0x8, &(0x7f0000000540)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x9, 0xd, 0xe76}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r1, 0xffffffffffffffff, r1, r1, r1, r1, r1], 0x0, 0x10, 0x800}, 0x94) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m59.249549921s ago: executing program 32 (id=2516): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000240)={r0, &(0x7f0000000000)='@%\x00', 0xc980, &(0x7f0000000040)={@_ha_fsid={[0x10001, 0x8]}, {0xfffd, 0x6, 0x6b0051ab, 0x9}}, 0x53ef6c09, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000200)=0xd2e8}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x3c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff80, 0x10, &(0x7f0000000000), 0x76}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b2b, &(0x7f0000000040)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000000000e00000007"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x3ec0) close(0x3) write(r6, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x25, &(0x7f0000000780)=ANY=[@ANYBLOB="1842000004000000000000000000000018130000", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f00000003c0)='syzkaller\x00', 0x9, 0x2e, &(0x7f0000000400)=""/46, 0x41100, 0x0, '\x00', r4, 0x25, r1, 0x8, &(0x7f0000000540)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x9, 0xd, 0xe76}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r1, 0xffffffffffffffff, r1, r1, r1, r1, r1], 0x0, 0x10, 0x800}, 0x94) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m38.753388923s ago: executing program 5 (id=2828): ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000002300)={&(0x7f0000001300)=""/4096, 0x1000}) r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x3, 0xfffffffd, 0x14, @mcast1, @mcast2={0xff, 0x3}, 0x8, 0xba08}}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_GETPARENTS(r3, 0xc028583e, &(0x7f0000000440)={{[0x4, 0x45, 0xfffffffc, 0x1f]}, 0x0, 0x1, 0x6, 0x0, &(0x7f0000000380)=[{{@align=0x5, {0x40, 0xc, 0x60c, 0x7}}, 0x6, 0x0, 'sfq\x00'}, {{@_ha_fsid={[0x5, 0x8]}, {0x3, 0x9, 0x3, 0x874}}, 0x100, 0x0, '{{%@)\x00'}]}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'bridge_slave_1\x00'}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[], 0x5c}}, 0x20084884) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket(0x10, 0x803, 0x0) socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x3}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0x8000}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x5, 0xfff3}}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0xc040) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad", 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="b40000000109010800000000000000000a0000090900010073797a3100000000080005400000001c08000540000000060900010073797a30000000000c00048008", @ANYRESDEC=r10], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x880) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001008010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b00000000000800040000050000"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 2m37.935612196s ago: executing program 5 (id=2833): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x7813, 0x3, 0x0, 0xfffdffff, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r4, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000b9c15b45a401b1af0000bfa200000000000007020000f8ffffffb703000008000000b704000000000600850000e463857f947977a60000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES8=r3, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB="1bdd9e4aa7f4891e3be6bdaae8c5346fbb2472bba3d4b1bcbeedcc76a30d9aa0981455f80122a183dd9e91a83b1ac6f24040fc7fcfca48c6db40dfcb08ade8eb238dd0dedd1aa8a4c19dd1681aa58051bd6c3ec4985e94decb29947a23bd2455a2e86699bb"], 0x3c}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f0000001300)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001340)='Y', 0x1}, {0x0, 0x18}], 0x2}}], 0x1, 0x0) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0xfffffffd) r9 = accept4(r8, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GETFSUUID(r9, 0x8008662c, &(0x7f0000000040)) recvmmsg(r9, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r10, @ANYBLOB="0000000046146224280012800b0001006d61637365630000180002800c0004000100000100c28000050003000f"], 0x48}}, 0x40000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 2m37.328018603s ago: executing program 5 (id=2836): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$inet(0x2, 0x800, 0x1) sendto$inet(r1, &(0x7f0000000240)="7235874d0c955954c0efa75dff4a619dc7e17a391ddbaf9b0b8e9fb66768eeffc9f36c33a8d05cb1a32f66e96776255b2fcbfe677f07fa552d016a1facbbaaca17cca844946677ab3071639df1b3d0d3e2854a638714262ce85ccef2c775a6dde3c0ebe2ed4a8e12ee584a46d502a254cf3fe9c6b3f1f025b701948159d2aab1aeb753738e394e08e3ddb9773e7d0e9820fa1956547139b9c542dba505056e536e7099385db16d1d9ca219f4c4787344de209af1015612134856de7fcd58707d531bac226652c6888d110b59ca", 0xcd, 0x40004, &(0x7f0000000340)={0x2, 0x4e20, @private=0xa010102}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f30000000004000000000200", "e73400", "000000d900"}, 0x38) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x1, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'filter\x00', 0x0, [0xeddb, 0x1, 0x2, 0x5d3d98c4, 0x4]}, &(0x7f0000000080)=0x54) 2m32.005186991s ago: executing program 5 (id=2867): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x98, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_OBJ_USERDATA={0x51, 0x8, "dbbb8938d4b97bc17342576c4dbf14a64abc81373e12334bee3d19a371fea272690efa6467f9d5ebffb7e8874dcd2c0e1e6c76464d6e8a368c2a88ede88b5744f621892c73243e4238a8546913"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={r6, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x57f, 0x8000004, 0x21, 0x1, 0x8}, &(0x7f0000000040)=0x9c) sendto$inet6(r4, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000440)="f7f77fd95ee5", 0x6, 0x20008895, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000005c0)={r0, &(0x7f0000000300)='\x00', 0x680c82, &(0x7f0000000500)={@align=0x5, {0x2, 0x6, 0x49, 0x2}}, 0x7, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x8cb}) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c00028008000140000000020800024000000016080001400000000220000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a320000"], 0xa0}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000200)={@broadcast, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000100", 0x64, 0x11, 0x0, @empty, @mcast2, {[], {0xfffe, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "75462d59cf0d72118137e1d8c01d4641aa2936006171375e0c0d70a00038f8cb", "85bf05267ec510575a1cdf03bc75bb00", {"850d58622eee203833d9c122aabe7075", "f071ffd6f854a9c51535886ee02e0af9"}}}}}}}}, 0x0) 2m31.47016853s ago: executing program 5 (id=2871): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300001a000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000400), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0xf00, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m31.113202236s ago: executing program 5 (id=2873): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1f}, [@generic={0x91, 0x1, 0x1, 0x6e}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x25dfdc00, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x8840) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0xa, 0x0, 0x81, 0x20050, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0xab) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0x2e, 0x70, 0x5, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x40, 0x10, 0x6, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0x2e, 0x70, 0x5, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x40, 0x10, 0x6, 0x8}}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x21040000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd4, r3, 0x0, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x42}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8}, 0x8000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x9, 0x0, r1, 0x7, '\x00', r2, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x9, 0x0, r1, 0x7, '\x00', r2, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000002c0)={r5, 0x5, 0x1, 0xb, 0x3, 0x4}, 0x14) 2m15.989158456s ago: executing program 33 (id=2873): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1f}, [@generic={0x91, 0x1, 0x1, 0x6e}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x25dfdc00, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x8840) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0xa, 0x0, 0x81, 0x20050, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0xab) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0x2e, 0x70, 0x5, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x40, 0x10, 0x6, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0x2e, 0x70, 0x5, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x40, 0x10, 0x6, 0x8}}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x21040000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd4, r3, 0x0, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x42}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8}, 0x8000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x9, 0x0, r1, 0x7, '\x00', r2, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x9, 0x0, r1, 0x7, '\x00', r2, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000002c0)={r5, 0x5, 0x1, 0xb, 0x3, 0x4}, 0x14) 1m39.169123343s ago: executing program 1 (id=3104): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000080)=0xa, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) listen(r2, 0x0) (async) listen(r2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4) listen(r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000ad30173f11370007000042f6b76191df8b12b6c0009500000000000000add12396e29e17c76002a41ccfdd2fbe5c2a59897b"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6) getsockname$packet(r6, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) getsockname$packet(r6, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000100037040100"/20, @ANYRES32=r7, @ANYBLOB="c30803000b2ebe263000128008000100736974002400028008000300e0000002060010000000000006000f0001000000060011004e230000"], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000180)={0x0, 0xe}, &(0x7f00000001c0)=0x8) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000180)={0x0, 0xe}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000380)={r8, 0x4}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000380)={r8, 0x4}, 0x8) 1m38.633845593s ago: executing program 1 (id=3110): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0x0, 0x16, 0x0, 0x7f, 0x4500}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r0, 0x0, 0xfffffffffffffffc}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1f, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x11, '\x00', r1}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@func={0x7, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x5f, 0x30, 0x0, 0x61, 0x0, 0x2e]}}, &(0x7f0000000100)=""/76, 0x2c, 0x4c, 0x0, 0x9}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300000000000000fe000000ffffe00000021400020000000000000000000000ffff"], 0x5c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r4) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000840)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0xcc, r5, 0x20, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x48000}, 0x4008845) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) readv(r6, &(0x7f0000000780)=[{&(0x7f0000000100)=""/39}, {&(0x7f0000000380)=""/210}, {&(0x7f0000000540)=""/139}, {&(0x7f0000000600)=""/47}, {&(0x7f0000000280)=""/90}, {&(0x7f0000000740)=""/49}], 0x1000000000000149) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r7, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002040)=[@sndrcv={0x30, 0x84, 0x1, {0x5, 0xdb9, 0x0, 0x7, 0x4, 0x3, 0x5, 0x10}}, @sndrcv={0x30, 0x84, 0x1, {0xffff, 0x0, 0x820c, 0x3efa, 0xe, 0x40, 0x0, 0x3}}], 0x60, 0x800}, 0x8000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r2, 0x3, 0x2, 0x1}, 0x50) 1m35.667323391s ago: executing program 1 (id=3112): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r2], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1m34.492364494s ago: executing program 1 (id=3119): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) (async) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'wg0\x00', @broadcast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r6) (async) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) (async) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000500)={@broadcast, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) 1m33.869086264s ago: executing program 1 (id=3124): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], &(0x7f0000000100)=""/110, 0x4e, 0x6e, 0x1, 0x6}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'netdevsim0\x00', {0x1000002}, 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000a7d4635d7b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a14000000000c00000a000000000000007740ca92"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) recvmmsg(r5, 0x0, 0x0, 0x2000, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000ffff2400078008001240000004011800028014000240fe88000000000000000000000000fd010500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574000000000e6f437a1befe52a94e0c55d4c56d751c636b53ba7803503f94178a8b4666815b7a099102d317075b3d8ce2ab13d8c641addcb072a5a92ec99b1df9790fa3582090a9246a7b04da3f131bf88b16032affd205cc9764a05ac5c7db1e74f102b3a006f3367c14dcd3d1c94436b4fcc8d5b8756aa3aef9616b9ea8ac24ad584612ef85f8e6c8a19bc3041599d2e214d0349ce4773d4a529a7452a374c099c11bd203ac2f7fe07bf0ff5"], 0x6c}}, 0x40) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc, 0xd}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a640000000900010400000000000000000200000038000480340001800c0001006561796c6f6164002400028008000440000000000800034000000057080002400000bc172bf4e7b2ed08000a0900010073797a3000000000090002007379d970dc30311d7a3200000000140000001100010000000000000000000300010ad9742cead6263e73ce1d400b482b3bd70b0da64597e1b740b517ab99bbdb38028e56a7aa015455ed796fdc800b33ccfbc817595c718bc23db39b2cc55dfd81fe02cc9e4e89ef66048bdd9c45b926fd60dc92081a02e14eb76f77b06f4709a20335a48168d8a1ba3c2dfc8a3faf481bbebadd99a86b08bde9accab56c3ac1b3662c3ae380c677cef606d4d6102495d913b4c5dc193d62358fd120f3de7cda54fb5881f060b4e709b5038cdd4067b6b7f10ae5ff28fd004396cfda215e636455e2937f281a6b0949df16ad31407352889d6c9f4e9b6e4366d44c0f73912b750fdbb526ee082f76efadf16f5c338661e4a5823f23745bbda7c9de1f12a546caa8bed66871a7498039d7810d42b31c15223c970e89f421a6a147bd8815c515744e64aea8b95420daefca5894c4c13ef2f54bb66588ba485363dd2b6c26560a3202e4ba8e1f6811518c0ecf24c19279daace499d524adb163145b5a99caf9798f82e8cff6b3b9af3d317fcc948870409b96419fb07e036b20511f5c53505d92ed2ae5b7cd6a5f4ca9a71ff5d9aa75269f56678aa0e52aa7140b46d71be9f7fc0f7892aeee190538fe242d34a92b76f7034dc224d824208cc5ba4eb681250cf96ee6d8ce94317cb75b167997be1a648c04b6d733e915fcca23daf6122fb638a3e665e21632c8f7cbdb943fac068d16871ab9e11a7ac1565ea1ad1d6b9300d3c12ed2719da371abf29a04edd1762121b675ce"], 0x8c}}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 1m32.9377405s ago: executing program 1 (id=3128): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="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"], 0x40}}, 0xf1deddb28a47ebbe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x240000d2) bind$llc(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x50, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r6 = socket(0x15, 0x5, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r6, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket(0x0, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000e7", @ANYRES16=r7, @ANYBLOB="04002bbd7000fedbdf250200000005000400020000000900010073797a32000000000900010073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000c1}, 0x8000) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 1m16.93551349s ago: executing program 34 (id=3128): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="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"], 0x40}}, 0xf1deddb28a47ebbe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x240000d2) bind$llc(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x50, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r6 = socket(0x15, 0x5, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r6, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket(0x0, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000e7", @ANYRES16=r7, @ANYBLOB="04002bbd7000fedbdf250200000005000400020000000900010073797a32000000000900010073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000c1}, 0x8000) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 32.277960911s ago: executing program 4 (id=3659): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x9}, 0x50) close(0x3) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000580)={0x30000011}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x3b, 0xffffffffffffffff, &(0x7f0000000540)=0x24) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) close(0x3) (async) r3 = socket(0x2, 0xa, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) (async) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000880)={r7, 0x1, 0x5, 0x9, 0x0, 0x4, 0x1, 0xf7, {r6, @in6={{0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7ff}}, 0x0, 0x3, 0x3, 0xc078, 0x3}}, &(0x7f0000000940)=0xb0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) sendto(r9, 0x0, 0x0, 0x20050, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x430, 0x130, 0x130, 0x98, 0x130, 0x98, 0x398, 0x398, 0x398, 0x398, 0x398, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x2, 0x71}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x23}, 0x0, 0xffffffff, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6tnl0\x00', {0x42, 0x21800000, 0x7fff, 0x1, 0x0, 0x0, 0x101, 0x78, 0x40}, {0x8001}}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x11}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xc, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) (async) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x88, 0x464, 0x10, 0x70bd27, 0x25dfdbfd, "6f9a1dafe5b8f671aaf072b9b9cc907acfadfb2fc797e6852a5031c2d3c67660917abe399c4984d2b7f31afeca0d0d2adc3c383bdd77e626fd778d54b8ebfc1604320856414da44ac1d716c048e6777569388e013363887e7827148740fb9de5415c70d52a6afee186fe8403e4a7b0dd5b01c48199", [""]}, 0x88}, 0x1, 0x0, 0x0, 0x4001}, 0x20002000) 32.157495861s ago: executing program 4 (id=3661): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0xc, 0x2, 0x81, 0x10}, {0x40, 0x40, 0x9, 0xfffffffc}, {0x6, 0xba, 0x2, 0xffff}]}, 0x3) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x52) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x9b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0xf0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000040)) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @dev, @loopback}, &(0x7f00000004c0)=0xc) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x5, [@enum64={0xc, 0x1, 0x0, 0x13, 0x1, 0xa671406b3075566f, [{0xd, 0x8, 0x10001}]}, @struct={0xb, 0x5, 0x0, 0x4, 0x1, 0x9, [{0xd, 0x3, 0x4}, {0xc, 0x5, 0x1}, {0x1, 0x4, 0x10}, {0xc, 0x4, 0x1}, {0x5, 0x2, 0xfffffffa}]}]}, {0x0, [0x2e, 0x5f, 0x2e]}}, &(0x7f0000000580)=""/56, 0x7d, 0x38, 0x1, 0x9}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}, [@call={0x85, 0x0, 0x0, 0x9f}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x89, &(0x7f00000003c0)=""/137, 0x41100, 0x10, '\x00', r3, 0x1c, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1d463, r2, 0x1, 0x0, &(0x7f00000006c0)=[{0x1, 0x3, 0xe, 0xb}], 0x10, 0xffffff01}, 0x94) 32.123475995s ago: executing program 4 (id=3663): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fddbdf25010000000800010000000000080002000100000004000880340004800500030005000000050007"], 0x5c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c900"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 31.844582293s ago: executing program 4 (id=3667): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x48, r2, 0x1, 0x1070bd28, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r4 = accept(0xffffffffffffffff, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r4, 0x0, 0x200080c0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x3}, 0x10) bind$tipc(r5, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x4000, r7}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r9}, &(0x7f0000000840), &(0x7f0000000880)=r10}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xffffff14}, [@map_fd={0x18, 0x2}]}, &(0x7f00000001c0)='GPL\x00', 0x6, 0xa5, &(0x7f00000002c0)=""/165, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x1, 0x4, 0x3, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000880)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0x1, r9], &(0x7f0000000900)=[{0x4, 0x4, 0xe, 0xb}], 0x10, 0x7}, 0x94) accept4(r7, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket(0xa, 0x1, 0x400b88a) connect$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e22, 0x7ff, @empty, 0x4cae}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="35c60100ef000000500012800e0001006970366772657461700000003c00028014000600fe88000000000000000000000000010114000700ff8000000000000000000000000000bb060002000700000008000100", @ANYRES16=r12], 0x70}, 0x1, 0x0, 0x0, 0x240488c0}, 0x0) 31.46818753s ago: executing program 4 (id=3671): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0f000000040000000800000009"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000100001000800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000900016806c0001800c0003000100000006000100280001"], 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 31.144199934s ago: executing program 4 (id=3674): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="6800000010001fff00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000088520300400012800b000100697036746e6c00003000028014000300fe8000000000000000000000000000aa08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="050009"], 0x68}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000080) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 16.065498574s ago: executing program 35 (id=3674): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="6800000010001fff00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000088520300400012800b000100697036746e6c00003000028014000300fe8000000000000000000000000000aa08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="050009"], 0x68}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000080) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 4.249234589s ago: executing program 6 (id=3833): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000dc0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="25052dbd7000fbdbdf251200000008000300", @ANYRES32=r4, @ANYBLOB="06001000d4000000"], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x80) (async) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="25052dbd7000fbdbdf251200000008000300", @ANYRES32=r4, @ANYBLOB="06001000d4000000"], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x80) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x148, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 'dvmrp0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0xfd, 0x4}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x6a5f}}, @common=@frag={{0x30}, {[0x2d, 0x200], 0x0, 0x8, 0x2}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x2, 0x9c, 0x5, 'syz0\x00', 'syz1\x00', {0x159c}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) r8 = socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) (async) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) r14 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r14, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r14, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r14, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r14, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3}], 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="0d000000000000007110b3000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) 4.07746161s ago: executing program 0 (id=3835): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18, 0x40040}], 0x1, 0x8040) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000700)=ANY=[], 0x1c}}, 0x0) recvmsg(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)=""/23, 0x17}], 0x1}, 0x142) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0x40}, 0x40000002) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r5, r8, 0x25, 0x2, @void}, 0x10) write$tun(r3, &(0x7f0000000380)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x6, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0x3}]}}}}}}, 0x3a) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) 3.294140879s ago: executing program 6 (id=3841): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000200)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000440)={{r1, &(0x7f0000000180)='[:\x00', 0x0, &(0x7f00000001c0)={@align=0x5, {0x9, 0x0, 0x321, 0xc47}}, 0xfbf, &(0x7f0000000300), &(0x7f0000000340)=0x6}, {[0x0, 0x5, 0x8001, 0x8]}, 0x5, 0x86, &(0x7f0000000380)=""/134}) write$nci(r2, &(0x7f00000004c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x0, @v={0x81, 0x2, 0x1, 0x6, 0xe, 0x0, 0x1, {0x10, 0xc, "6e90ea8b5e230e7d"}, 0x5a, 0x0, 0x3, 0x9, 0xac, "4c3b2e830c6a41a3c13a2f4e9353d22728746066e73fa7b73ceb2f9993fae208c6c14c8f9ca4f81bbe4002d29f14e6ad44ce42685a6561f6a9719cb7355c056000dd413cf4f47b63db7a24c25f826cae8770c336d8655aa82b49e11dc452502b2850b055e81388f335136bae3be5bb5a384a33b5ecbbd08baa8cb344c8d4c820b5d08e6241a88decbf3a76f0dcb1045c4879ab3f678bfc633daa1817c6077bda65a9d612e4ccb92cb2b4f9e3"}}, 0xc5) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="14089330e4e7a6e0bac90200180001ebff0000009a9cbb250c103eb875008000000010000041ce1a3439a43a66a958389d317e18827793c86705b0d4e820aa8a1820e1e4444b529ab1458faf8ec3d64433aa00000000000000000006224200"], 0x14}, 0x1, 0x3000000, 0x0, 0x20000800}, 0x20008800) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x140d, 0x400, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001900010000000000000000000a0000000035"], 0x30}}, 0x0) 3.045658647s ago: executing program 6 (id=3843): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x112, 0x4, 0x0, &(0x7f0000000080)) (async) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x112, 0x4, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000000000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000000000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000440)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0xc) r6 = socket$inet(0x2, 0x3, 0x1) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4, @remote}, 0x10) splice(r4, 0x0, r6, 0x0, 0x8000, 0x0) (async) splice(r4, 0x0, r6, 0x0, 0x8000, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000000c0)={0x93c8, 0x1000, 0x3ff, 0x8d, 0xaf, 0x7b, 0xe}, 0xc) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x38, r1, 0x60b, 0x70bd2c, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}]}, 0x38}}, 0x4) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x38, r1, 0x60b, 0x70bd2c, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}]}, 0x38}}, 0x4) r7 = socket(0x400000000010, 0x3, 0x0) write(r7, 0x0, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0180000000000000000003020200090001"], 0x20}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r9, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040044}, 0x20000000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) (async) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 2.9561267s ago: executing program 0 (id=3844): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1fffffff}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$int_out(r2, 0x5460, &(0x7f00000000c0)) r3 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x2000000000000002) 2.896024813s ago: executing program 3 (id=3845): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="880000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c000280050001000000000024000e800c0002800400010093070000140001"], 0x88}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb0615}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 2.771541124s ago: executing program 0 (id=3847): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="0e000000040000000800000003"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) socket$kcm(0x29, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f0000000400)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2226, &(0x7f00000056c0)=ANY=[], 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r8, 0x10c, 0x2, &(0x7f0000000000)=0x8000, 0x4) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="6ac964a54223"], 0xfdef) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'team_slave_0\x00', {0x2, 0x4e22, @multicast1}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, @alu={0x7}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00'}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r4) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x4c, r11, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4c800) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r10, 0x0, 0x0}, 0x10) socketpair(0x1a, 0x100000005, 0x10, &(0x7f0000000000)) 2.543054772s ago: executing program 7 (id=3848): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x400003}]}, 0x3c}}, 0x20000018) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 2.393607765s ago: executing program 6 (id=3849): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 2.392329524s ago: executing program 3 (id=3850): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x80010, r0, 0x4c702000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r2, &(0x7f0000000a40)=[{&(0x7f00000007c0)='g', 0x1}], 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="fc000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000200002009000000", @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd0200000000000000000000000000000000000000000000440008002001"], 0xfc}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="b00000000314010026bd7000ffdbdf2509007278650014003300677265300000000000000000000000000900020073797a320000000008004100736977001400330076657468315f746f5f626f6e640000000900020073797a30000000000800410073697700b3ff33006970766c616e310000000000000000000900020073797a3000000000080041007369770014003300626f6e645f736c6176655f3000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008010) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x15, &(0x7f0000000140)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @generic={0xe1, 0x4, 0x2, 0xfffb, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20f, 0x0, 0x0, 0x0, 0x4}, @generic={0x3, 0x7, 0xd, 0x1, 0x3}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x3}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x7}], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x0, 0x10001, 0x8}, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r4, 0x0, 0x34, 0xc6, &(0x7f00000000c0)="fd4e0ea897c3af08c430ae23033892e1c77d20132c7b042652298df09dd464397c9c7328b720153eac75718fd5656b3d61fb0199", &(0x7f0000000500)=""/198, 0x7fffffff, 0x0, 0x86, 0x6d, &(0x7f0000000240)="b6bd4fb9b56e6b1a3777aa2588dddb63c55182f4b9996b84280b710492fb8ea83236bc5f774112cb8f8028ee7bbbf99ca558b4b682a87469a3d5847ffd35dbb5d84f9982ec669fc490e1478178fdca91f1a43f4d2cdd93c87f0049994f756fdfcab33cb97078c423f2e693721f9f5797d07ca220afa6656d69e1041d7775896ad8f693567d36", &(0x7f0000000300)="89f0e3ac80053f1ed6bfbd2be4fa820bfc85be6283c090a66012c1fcc079548791fa3555720d0df42a6feca3ea54fb162279d11e584d4416c6b077bbb1bc76e356eada3cec4ac18a04a9396e0445167a88bc97e5d0e6f80f939a953979675b2ebb393b50e7f75b09dda0b07144", 0x0, 0x0, 0x1ff}, 0x50) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f00000003c0), 0x10) 2.310611707s ago: executing program 7 (id=3851): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240), 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000a8000000a8000000080000000b00000000000007000000000d00000005000093000000000d00000008000000810000000f000000090000009d0500000f00000041000000060000000600000004000000ff0700000500000000000100e10000000e00000009000006040000000b000000010001000500f26b06000000010000000400000003000000070000000900000000000000060000000600000008000000080000000a000000000000d80500000008000000003000610e5f0000"], &(0x7f00000005c0)=""/248, 0xc8, 0xf8, 0x1, 0x8}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000070a01"], 0x14}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000001c0)={'ip6gretap0\x00', 0x200}) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2030000aaaaaaaaaa0086dd600101000000000030aa89f8000000000000000000000000ff02"], 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000580)={'ip6erspan0\x00', 0x10}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0001"], 0xfdef) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="000008060000"], 0xfdef) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0xff, 0x270}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000100)={r9, 0x7}, 0x8) r10 = accept4(r0, &(0x7f0000000340)=@in={0x2, 0x0, @empty}, &(0x7f00000003c0)=0x80, 0x80000) recvmsg(r10, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe97}, 0x100) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001f400000000000000000000000a44000000120a09000000000000000000020000000900010073797a30140000000900020073797a3100000000080003400000000108000860000000000800044000"], 0x6c}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="05008100a3fa6ebb4ddb41f9e805d15439eb198d4faad91dd5feea6a59362ce922aaa82020e688f8161e2a35c05caa374af00aa5602d62667f14e254154a5926a7dee55b076d7bc99557160dfacf183864306fc0eb31d7c0296cf32be2e5d65509150d7b54799eaf9b3f164377b775ad155590bec518b9a7b113e62770166235831fe2768320664763285fc57b3ba37230c2cd77361ef4e461c331f9d6bd5533cfb6d3aab138eb87467e1649a9f588d72c3f07731375b58b513a1dae9c11c0cd1d41951f4787"], 0x89) 2.215473668s ago: executing program 3 (id=3852): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001800090400150000000000002d"], 0x1c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x103}) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000380)=0xfffffffe, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x9c}}, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_pid(r6, &(0x7f0000002380), 0x12) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@local, @empty}, &(0x7f0000000340)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'gretap0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x8000, 0x700, 0x2, 0x6, {{0x27, 0x4, 0x3, 0x2, 0x9c, 0x68, 0x0, 0x4, 0x29, 0x0, @local, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x3e, 0x3, [{0x3, 0xc, "50d3ff9b9aed171f592d"}, {0x0, 0xe, "7c78fb93cdf986f31b9407e6"}, {0x5, 0x2}, {0x5, 0x10, "1d8713c1c900f9bf50e92701a041"}, {0x5, 0xc, "9bf5435d669af8cac120"}]}, @timestamp_prespec={0x44, 0x1c, 0xf6, 0x3, 0x4, [{@loopback, 0x1}, {@loopback, 0x80000000}, {@empty, 0x898}]}, @rr={0x7, 0x23, 0x78, [@multicast1, @loopback, @multicast2, @broadcast, @local, @empty, @multicast1, @multicast1]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, &(0x7f0000000240), &(0x7f00000004c0)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x80, 0x1, 0x7, 0x4, {{0xc, 0x4, 0x0, 0x1, 0x30, 0x65, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010102, {[@timestamp_addr={0x44, 0x1c, 0x12, 0x1, 0x2, [{@empty, 0x4}, {@multicast2, 0xe}, {@private=0xa010102, 0xfffffffd}]}]}}}}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000c0018000aac0f000bae0f00"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x5, 0x8}]}]}, {0x0, [0xd78d3475a2897935, 0x5f, 0x2e, 0x5f, 0x2e]}}, &(0x7f0000000f40)=""/4086, 0x3f, 0xff6, 0x5}, 0x28) 2.073344635s ago: executing program 6 (id=3853): getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0x5, 0x1ff, 0xfb9d, 0x9, {0x0, @in={{0x2, 0x4e22, @private=0xa010100}}, 0x81, 0x2, 0x80000001, 0x4b, 0x9}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100040000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 1.979675824s ago: executing program 0 (id=3854): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0xcd, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x2000000) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/88, 0x58}, 0xa1}], 0x1, 0x45833af92e4b39ff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x966, 0x0, 0xfffc, 0xa}, {0x1, 0x4, 0x0, 0x80000000, 0x6, 0x9, 0x0, 0x40000000000000}, {0x0, 0x9, 0x53e5, 0x23}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x2, @in=@multicast1, 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001080)=ANY=[@ANYBLOB="01000000000000000a00000300000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000000206010300000000000000000000000005000500000000000900020073797a32000000000500040000000000050001"], 0x48}}, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)={0x28, r4, 0x50dc85624ea6cf59, 0x70bd27, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x6, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0xffffffffffffff81, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x0, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x0, 0x4, 0x4e21}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000600)={r5, r5, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) shutdown(r5, 0x1) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x4, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0xfffffffc, 0x3c}, 0xa, @in=@empty, 0x6, 0x4, 0x3, 0x0, 0x401, 0x54}]}]}, 0xfc}}, 0x0) sendto$inet6(r7, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1.457343755s ago: executing program 7 (id=3855): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff"], 0x78) (async) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff"], 0x78) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="0300000000000000380012800b0001006970366772650000c8f370082800028006000f008000000014000700ff010000000000000000000000000001060010004e210000"], 0x58}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x1, 0x7bca, 0x5}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getchain={0x2c, 0x66, 0x204, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xffff, 0x4}, {0xb, 0x6}, {0xb, 0xe}}, [{0x8, 0xb, 0xe32c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x17, 0x9, 0x70bd25, 0x25dfdc01, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 1.293439099s ago: executing program 6 (id=3856): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0xa0, &(0x7f0000000740)=[@in6={0xa, 0x4e22, 0x2, @private2}, @in6={0xa, 0x4e20, 0x3ac9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e24, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x3}, @in6={0xa, 0x4e25, 0x6, @private0, 0x6}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x67184afa9d15b511) accept4(r2, 0x0, 0x0, 0x800) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=r0, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=r0, @ANYBLOB, @ANYRES64=0x0], 0x20) socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_devices(r4, 0x0, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) sendto$unix(r3, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a377", 0xf0, 0x800, 0x0, 0x0) recvfrom(r3, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) (async) recvfrom(r3, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r6, 0x1, 0x80000400, 0x4}, 0x14}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000100)={r5, 0x400, 0x1}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000304000000000000000100000300", @ANYRES32=0x0, @ANYBLOB="680ab00000000000140012800a000100767863616e0000000400028004001a03bf4616a078103c4b1a6dff5b6edc439efd9c5cbf67e59a186fd6df59e056be2eeb052526a3f658dbde0934ca3e5ef97cde60a0dedb666eca6ee68e5e49e9127e10577b5d3138184d2d137a85534e18239e362e2541a5cf1994daa6e6ff131d920ff833a9ea5b9579f7e4cfe67cdf57fc938d710fd929a2c55f0d0cee0d8b6ecedb3dd445603ce616fa642e687a5220ec16690a7a1080541743321349d2cdfd8f54ee292d7c4382e2fb3497ea24e129e98f6d5f344ad6ca8b9c5021fae3"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000880)='m', 0x1}], 0x1}, 0x5) (async) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000880)='m', 0x1}], 0x1}, 0x5) setsockopt$sock_attach_bpf(r7, 0x1, 0x10, &(0x7f0000000100), 0x4) (async) setsockopt$sock_attach_bpf(r7, 0x1, 0x10, &(0x7f0000000100), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) 1.200702753s ago: executing program 3 (id=3857): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x401, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x168, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'caif0\x00'}}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x300000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5996}]}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x8004}, 0x4004001) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000300)={0x2d4, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x831}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6ec}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x77, 0x3, "6671130d18b93a76c29344a99ff78a43e3c4068ce1fab64c5d25ba59fec43da1398a6fdfa4e2db0b0cb0ee62ee9a5441cd71904288a48bdf6dffddd585dbbb93972d5836402e06e22539a4eb95e2ad452e36b6a618fe51f0c72c11d57e94bdd39df22a766ae0022f77230b76d8c10753885775"}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x14, 0x2, @in={0x2, 0x3, @loopback}}}}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "d6fc51229abf30acdb01998e23f139c47eb672ebefca7afe5c6159c464c4"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "dd3e047930a73951d6b9b5a12cdde60065cf9bf2568d9e313db173674e2fa3824170"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ID={0x33, 0x3, "7de8f1ba1491e084eeefa6ffe71b3cb00c0803503c8f5fca82135ae90a565875991f519a6e35bcb062851dad7da481"}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000880) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{&(0x7f0000000680)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000c00)=[{&(0x7f00000006c0)="33135df8fc78d0f9b72058065a34d85c24eabb502519374019b3a03c2d8bd4bd1b12f8c48b559c882d9e653c401cb3adc3c5130d54a255f7d6cd52a250eba123fdaf14b976401b4e2a7c551efaa605c895129cf863a5bddd3164b40890608e738160ff2fb0252fc0be9466e8ea726a0c736a080b355df7868c3c4560bbe197ae98dc3b61905b5ac75c4c1b939606fdfb4c6663fe6ec070ea98e35254845671e33bf48e607ed7fe11a80d098fc5986815df7f7d178e06ef1a94bbd88992c36dae2148b458474adc10e05e6d223c230e2d88c85da0f4d1d391b79ca8bd5b5135e249748cf8595416b42d", 0xe9}, {&(0x7f00000007c0)="18799f2b2d335c49e7ae0b6b1722dc6a5b57b1c507e78913af8f144d8cec24e75c5f179adc5e8ac7d9fea8471cc29631c8628761b399a0051bbbe794081f4ebc773de91e8455", 0x46}, {&(0x7f0000000840)="36c6983e1b1691442cb22ad27b84ac1287d288fcaf87efdd5e344077128872ffb22ce621f427a8bed0a356eb2fd1cca53fa7566b5456edcc0e17005f712a792e0c86898423592c304914f3c6eef3e54939d7272ec58e1b1a7183c48c7edca1312b4eb055fb7d5944096d4c2aefe9a46e5f73b63f1f617b90500eb7f506366c9110335b1c9ca421ea35835c5f31d48f799f02744a12a4c944a7554e3310375a582e6519c1ed67717379b36df80adcb789fe282b0750bcfa57ca87f192abf9a9a5d6f997297cfb423bc6e70b9b2c0828c13faf829a01bd159427b5f3ee7f341ca3624ab861b0650b54505d7119d86f808f5e0456", 0xf3}, {&(0x7f0000000940)="9425dc396baa244e693c62e9edb2c95b0cc70b3cc5448d0e4ff3391543881394c1fddbfee40dcd2bc1cf98e7add865782933da486753d50b84ebd0abe4077afb82dc962cc741a77ff7e6dd7fc00a0b918478a1cb32135736b6cfca95b327e95f9a49e4f7d7b9dafc48889e31aef58067df07bb948174a03852e14c7a782dab1a78ff4ad2", 0x84}, {&(0x7f0000000a00)="e84c4a2b3ca51bf327f1db1fc39017f435e791c0d1f2f082848f945542f7c7673c0aed71268eb18f735fabdb55ed2a6e72c8b6b2f6c265dc80fe777174ffd45b094b78f9e8c00e5aa54150c9adc2e6210c7880a4e7a1a5320cc1daa4dbc68b1843962eb15a443d728b4fd901d6d63ba2d87b6680722b17ced3a12f627de6397778645263f0bbf337a8e0e65bbf82df361ca7bd521616d1a510738667376af9a0d7f5fefea52d65647df018aea106cb96e0da50e3e5749afc4cd5894b7524c6de9de4829318c7a7", 0xc7}, {&(0x7f0000000b00)="e564f8e061e1ac9bb2cd7188df58c808c162bf5088ba2229ed9562d3ce3e7ba4c6fb0fc9523d860fcf5a272d5d7d6f453d3bfb0c93fc1337040e339c6d5554d948a2a1bd3230948e8bf182a8f972e1f4fff3202301426e63f3174a55154aafb5d8a84808e5ba4d8544c59954543fab8dd12ea0e26c060fa3f404634cbee235c507e5bd9fefbd0078aaebb028e070d535915f81a2c91d8d9d88b4ff043d4a53f7f75d003bf85fa8bd363125a457e13ccff72e5009e673fd30aacc9933187f3f471be2d076", 0xc4}], 0x6, &(0x7f0000000cc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}], 0x48}}], 0x1, 0x800) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000f00)={{r1, &(0x7f0000000d80)='syz0\x00', 0x101, &(0x7f0000000dc0)={@align=0x1000, {0xfc01, 0x1ff, 0x2, 0x2}}, 0x5, &(0x7f0000000e00), &(0x7f0000000e40)=0x401}, {[0x8, 0x8, 0x9, 0x400]}, 0x0, 0x6b, &(0x7f0000000e80)=""/107}) bind$bt_hci(r4, &(0x7f0000000f80), 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000fc0), r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r4) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x20, r5, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3a}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x50) syz_genetlink_get_family_id$l2tp(&(0x7f0000001140), r1) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000001180), &(0x7f00000011c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000001200)=[@in6={0xa, 0x4e24, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x7}, @in6={0xa, 0x4e20, 0x5, @remote, 0xffff}, @in6={0xa, 0x4e21, 0xbd, @rand_addr=' \x01\x00', 0x4}, @in6={0xa, 0x4e22, 0x3, @mcast2, 0x3}, @in6={0xa, 0x4e21, 0xa9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e20, @private=0xa010101}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e23, 0x3, @mcast1, 0x8}, @in6={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8}], 0xf4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001300)={r1, 0x1, 0x666d, 0xffffffffffffff00}) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000001340)) sendmsg$inet_sctp(r6, &(0x7f0000001500)={&(0x7f0000001380)=@in6={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfff}, 0x1c, &(0x7f0000001480)=[{&(0x7f00000013c0)="19d419be0b3577fd2d1f2a4f8d0f5db6857ab2d089b9e3d6bf2653455ab1ade8586a1efe236c4ec1b693475e62ca766be6c8b150ac66fa96ebd5d550a2057fd017ab23a79f8dabc68a7cc62bc60b96cedc640b5b7a0efb4a760400e5cd4a0da8b5e358fb44f8b1c3e8ad7d44fdaf339970d4c42f503ebf9989384c36a6b3e720e3909453e29194e30ef15f2154be7d21194194fdcd7475d0a1eeb344153556912dcba8f228d4439181001aef311f2e0f821097241c86c5df23cf5684", 0xbc}], 0x1, &(0x7f00000014c0), 0x0, 0x4000000}, 0x4004000) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001580), r4) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000002b00)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002ac0)={&(0x7f00000015c0)={0x14dc, r7, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xf7, @private0, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @mcast2, 0x5}}}}]}, @TIPC_NLA_NODE={0x15c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x54, 0x3, "e3d5b58efac2d265942603868c38e5817b128a6f0c580f1b4ebead348099c1a9ec11e64a79968f89ba1623df9bcaaa4aca23b81be3d68e0d58f52bc79f62c8d29280e5eb09704707397612aa21bd32d7"}, @TIPC_NLA_NODE_ID={0xe4, 0x3, "900e03593f82afb88d20d27eb24ec2c0975a4e54e0e4779129cd653d7700af3be31b74868cdbfe5c486cf4ec7fe6255ff5e1be9cb8b6c37e39d736aa717acddcbe2c78701fbc85cba4e800747309aeff26e4b62fb0a8ac918a7b6f948e4fb9c49e6e8b8c0885f3f1e9a13f9fed5116f7143b4f679e2991bd418b0056578da3ad5f94366d5b231ce8b3e489a93de04e9e9e60a8d65eb26fec7cf4648f6f121c27680091b759137650981ebcad226d8b2cdea13f79cefb057e4d9520fb81d936994f7e2b1ea3c9b153437b4f587695cb87660b65c5c2ae194de4ce51a2f53f45bd"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10}]}, @TIPC_NLA_NODE={0x10a4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "4adb446b94994ca93b7e25d745589ba655441cebeb069a0444385e2e0947431a"}}, @TIPC_NLA_NODE_ID={0x53, 0x3, "ee08d3bfd5f63dccbffa85f8ad17dd3b1d0a6e4f864c52d1795d1a3c077fd618a01d66460c975eec065a79b9aae5ed157754d6f092631cd61cf4e4cc99e360aa0e8e26b6a81638c85139545fa0862b"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "94e0220353d38fba24ebfd6d3926673f7dd68b79475a7d42c4ee547960c91ad345c0f93bf78e900618bbb26dcbe94039a07677f5f1dda445cd950ac11496f985a8040b3b11529602eecef4aab1f6f7c18369a10c0589a3c38dd9c98b876edaf5984ac3f1d0744ff10faef0c57ff27a7b960331e5b3da1a9e275ff54528a1255cf359bc4fdf5974e3e107f44ccec19b08678fd1e5a0854e3583ed4451d9ca0dfdd72507183301a398fcd06297c4d1aa76d62fb9822736ff4fc09275ac3775c8ac55dc622cb5dc439565cda0b957e2a5faf7c61fad378a92ac273b5ce4450566ba7fa10ceb2c3e30e95a8d9aa602d0458520b3d69bbb636f59a268539cf730655696674ebf6675a3c63eafbd1528dbc2e06f2184cf62e70afc154808e6211daf107d5e242918a80254a1765d41f5552eaa4257dd21a3f720475f2c310206eaa6ee5b0d02a3d3921d1e14c99b880fa9b7f406823aa58b8f7eb5a5b78047ed2d464f381935297310ef68863bf3177056bf7cead890818111c2f3b6afd2883f5ed7b572134e65fb0180fbcc9f5d3b5bd7949b6d6d99a951bb44bc4b53d369c87dbb959d1b853f3aa664f37d76b3083ebd7c0d473267f3ad0eed73eef7a50a471caf92c4e4558545d03197a4a3f2443e1283365f3474b46723aba168f4698a750c283c2afcd795f812cefd41c0880620c42b3e00d73db340715a1cd460289eeb3a2e748f67f7f026859726cff1575b6fb7065c93622749455e22baa379cdc78377610e32419ae1e99eef89d32ee9254c6729466e69657ea3d252e841b6eeb118e6e892c61974d205709003a70a3ac028bc93bd26245f3cf73233a34a6bb0ea4a99c24bd528868d781b49a3a1a325b96d546cc326c3937d83f153b356dbb453e18a29043de413870f1118dbae681d9e727f97772ce9083f429f464e91d66072d1545d3d9f79a9aafbe8bd328a3ffd8560c03e3fff3f288bc8dd6af1cc47023b7718b315580a243767fd00fd21debd24fdc2974695f6ca085f5f6e58f699e81ae5646f77901c84540ddb068da85c41374b111490ccfce1771b464752eb851162d02dc1026308f070b4e30a57ed36f8ec7096b104a348ea1e2725d457b8449d8ed038635c39f68fdd2588f48887443324a9297259d452eed26b7c4b17c52f122e2bb322a9e87b5492bdd4bbac76dc5df0815e6c08469cb4303674c9326cfaa732f18e122a2475e4c5b19af972530781d9c60c7a326c59f8e87582175febaa8946d71c64ea224aedab258645f42ab31caaa910346c5c1a05b77e2f587707df6a2388196ef3842f8cdcd160be5a182c5e6f1b894863bfd91e353a799e63ea0a87ebb2a610765834689c9bb846f02dbf5e729136949eede88ba5492af0b6acf467fc82d4770a59e35bc509e05b3af754d543f279ffdde429c5d60f529751e07cc60ab506a7b1ac513b1b1e7f39c5c99e8e50204c3b0934cafb9e7fa256f84f92403f08202876e9f9cd2fef58bc79faab89dca1546ec390aeaaf600d1295d7cf1cea930d2659d56ace8e7e43a7a8cd74d3632f256f12280252f950317f08f0d9e7a492bb0d2fb703d8ddab5cd9b9924c35616e9f7eba58d4cbf2924d4559cec20cf0451281bad73073be287640beb8dd4cfd6ae0163d35387c8907d776f87ab1865359191a2fb85d1ed0a280f32ff8242a093df1cd69517e36b840f050308c6c817a908ddd41d8c45679650831c40070fc4f4401f6a363aebb1ec8dee6b9dcce2133ffdbb3bd282016f9bb661059f1eca92da7c194ba4f361239e65502eec1157c6a79850b69f568dd3c1bfcc852291de0126cbf445a6f0d4dc04f98871050ccbda0568d36193135802639b7f9f78d70db63d02a066be6cb4022c8f5db1b312e3c66e4010cbfedf1502b8d2065ed2babe2819ba456232993723032d2c8d6512e9b00660b459552a7196e3780d6fddc5058bebdfdcb576435b5cb4ff892554dec151274e4d53249c1c29e4b1195ddde01f45792ec382f0ff62d9a75fd37cd01aa003fb89d0aa4c4fa81985643924e5630809e793fd9ae9983a02237ff1419efa29749121f246fb0afca91d1f0877561047a2ddb6820f4177852edc1968e308ea90569b11a4098c812797d673d2e39651e98dbc4f322798ed87b8edca0fd90c7e88ed1af3ea0cd0d3803df5fe23ab471870c7e230e0b4767874c30e3a5d306f2c18cab4cddb6a9ddb597178bc40799ec56b3e6b3cfd724f7b9ffe4b8d8c354c6c3e0939127aabbfa2c8790c0cea98a907e827b8e83fedaf28a5eb110a69583f4e80c8de2061f60e83d453418366f25604a139d0539cbd8e20260f1586cf06bf700645940b08539f6f118a4b0dbc031fff679df37bbd10e4d2471229b6db76daceafc9754c9360d89ce849bee1d960541e51d3f5527bf32b717e3d1d9d55c83184de51349865f90a262614b7f01a8b666251405e890c98d347c925cdf274a56377e04cf306d1308248b268b641245371dcba67059d75785d144ab7154ee2598eaeb71e1e4ef22dad6ada91e1fcfd0f5b4f1f1bcd37ca7f24b33e044dfa022c720f2f19cfc004fe41bcdf0b1391579e377ff10d0ad43712a5898c46fe6728de4581d8ab3b2778cff450eb3ab4ac922b5316fe1885525d1e9e21c567df5c3bd6a901ce8fbf099fde443dfc66abde8f8ce91e50a794d26508e7e360d94dcaf46cff22dea7a2a4b530d1e72289ab942647ddcc2644473571c7c053713d19a9bf6f1503c5d6dd0346bcf0fad5ffe53015ad3098f7c983baafc5f90fbfec76ea6f3e733dce5834aaabd01e9c0762b62b0d328e370fc931114ddc3d6583db1441156f6927b3788fabdd3134f071aed7e64f518683bc597ab688c12fe42259c789bdf56e11dfb5f1d648c1c8052ecf1c4e72c8bc96b89eb11ce8dbc6e86cfd11d23e9b0984c3b13dbf7dc68a205d5b235572593dbab10dd052cf4576c6eabc247b755f88c8d68d1fafdec493cd2063b9d04abe2f2e0e95fb6d4e10bd7b09d805c3869faadc04190c705f2df11f5fba66030882ef1ac8b0bfa0bd1557b9000aa1090fffb902e80574703d03e34054d8958d4393316a604ae39f1604ac70e56e1638c972b41cd56056c1e0316988cd7d4a04416876fe2a7ebf1df1f6e495e6e70a4f8955fcb161d5e9e4b1bd49ce63016fddddc54214779eabd0673af144ab1ce98531cca3957ca3d53a64ed4b4ef0cfe8d044356fd1c5a7f44cbcc2047b039b65b35d2920354c32a50e17605d182ee03ba0ea1113bfe4d5086cc9733346434c6d7117a44d9be8ed361615f302ecfd23ee2b5ea4fd5bc4213a4a58510e54462a4e98fad5d11d07a513a182528e282ea1fd49cee63c422fdb2a95273bd8dd8435b19c2ad86de74c2ce3ed9bfc7a970dead502d2e1eecaf7d150d7f084e13023acb4682f7b921f339770c39ffed137c4149bf9a7467eaa0ff2d9ab82e28c6f87533fbe6c88140a169c715b6f0a5497ab991ba9631d89b3345bb3b4e07f522ef0acda86daeb69458de9885efc3634e0fc91c69adb73734c58f5a74fec98a1a9a8b0cb6349dce821bb1a426000382113cd57b10fcd0f98cad9c4d946012440bd8c0a79a8405a3835a8a2ab3b08adbcd97be8cb7a608dc218fed0ed54d4116f1d04a4cbabde5d4fe217187fb33de7103aa9f9777aa4a5db5c641afe84f2525986c81165049bc8ccb1d353cd187b8c427f021e119dea80598d76825b9b62b237b082f52bba3f3df71cf820b17256f04107ada1832465e76f2585fe49ccc962e4e6951ebd149edc65b27b3591ce9d7ba43e8c470126c26c36442c04ea400915c5bcf3e98f10592f0f54372fa1b77016afadd34024897c9cb722a0110ac06c2c865e70b05da1480ef98dcc41cc12e1d29eb2e856b0e309c90531f54c89457453ef34ea9d9ad59994755c51cd65e553d0d9f6823e3e0ef67b46496b9eba5965ada90681e38f7b81812b6e2a3086b9786bad0e3ad70eba10b75862b367c09c31ed42a2c1863755d05c3e23ede8b59f121ee0d31e7381a9712171c681c3e9e7ee2e2bbc57927fa947473b5700395563713ea14a56b1e2aa3a0a999159c8a08ada7f08451b67d16ec60ab6a6c01c9173fcc0ca6591be9615cc52fcdcf2008d7be6893784541b129bc8b2825813bc155fbfcc4fe20a844a1bb99c372ad4b67fe920abcfeb69dadffcfc93893de940a56d93973ef35df0335ef795723f3061c4c9f349f434e385dd4e62ea83044f84ffa5bde7c4944846b3308237d9f15f1d18bd96c202c25e9dbfdf5f9ce839c9660f2943458ab4488697411c183e854f2b78e8c7e03f6049c1fcaa970b855ce5ddfa2963ba4454a09c8cf3980a3460cadde46638cb9a9ebb155ee9a679fce54c3cc6bcd366cd3f34872012c844a997199537a237b4c88883e9d7cb8559432de1c424ea1f0f42f91308a14cb8e011141cd9805788b2fb2d54cf592204723f42340403a9379659832ee7e231fc8922b476ae7165846bddcf0a5d6975721b3514f572b4cb63f6c4e07dcb96b640a40fe673124007b2185217f47088e6e3854e0b7ea2cefb76622bd1097a78c97d562100c045dc081fcb48c0e988ab729befb26b60e1d41ab93450a2d567a94236d21008029850c808a2cd59b3055a510de8e95426f1ebb6383b018f0a60c4824c95e1153db3a6193e09017e9dd897f0712c6d76b4f0e3e8ff778d13a16d4b79464f2d266eef9e6756ea18b505fe3dd501919801a297f0c538d67d83f56bf867b2abaaf132d6813a10c29bb8ddce5dbaa63da0fb647f7a8a7211ab4ac6c2f8ce46cca2afcc9b1d8997c815c3dda28323cee44e3b45a293f9c236c03604638a69da5dd5f3aaf5a135967a391a0a653cb28e3bac109c2c4d8384653ffb438c06da96e4e2b6d8df59a2f98fb31c73fc74ddfd7bfc1020c875b2465362a8c8d61ac2f07d17a7d41e2ca87a7fa84739dae93fd433fce11d51b8d8c8ea31da7f7f9e77c598cba56bed5cbba4f0b8a4bee80272f5b82a23c517f710945784d8ddfe2013ee4512be0ba6db0c6207266a69e95dc115d6d3ca56e22039b07cfc5f6ed0368e86e36b9dd878bad631f3ac70987ebcad63ca537daa6d955b4e1b7e61fbb92fbf0cdb82f71eba5487883b99dc20b54b58049be4745742ffc57f9b76e33e74107ad3e5c2ef26dd67426ab272f50bc36c90d9cc29888cc6c58044dc1db6606a951b2e034419192909cbc45cd57b4c624c30e2d643222f70b1749b64b96da22a7804f637d2c6a6d4ce85384ceec2e51a578c34da11c37afcc978b13b88c62414492dbe0f9018e9a01ffe654280b77821f91f352fbf4babd7c8633fd403d62e1c0ce6c8f6e773908eb73d44a5b93b38e9f41192faacc11720b9c0b169d13670549e4216049f9d35061fa929e76e784966e404993c519160d9a1526e8dd930e5e2b3da1736d7931032ea4005f83de6e81a42d27d384fcb7fac93730b829681d742c1f28074d35616fa369dfd1c743266550a3ca8f62fa9e90a718cc389caa33de53798ede5b12127fe5b3ece811914bcd56481a6405b76e00ac667baf8c51363573cb3df07f297772b2d1b6b5c9122b49d3f97adc604e6b009ef41a142dfcae745caffdc8dc876f8b1aac136361c963cffe51f4297323745205f4096e396b484dee99e58d689dd5e97866141c7ff6569a83818110c4ad6ba7c99e2352578851b028ad37d0a2369404d0d5edd78ee0d3b6ace9a217407849fdd123ba383a1fcc83ec38bf575b084a071c2b34f65854433e5329cbe1214c065abb866fd8c90"}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pimreg0\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pimreg1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc3d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd82}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa3c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc05f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x60000000}]}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0xd, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @mcast2, 0x971e}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff9}]}]}, 0x14dc}, 0x1, 0x0, 0x0, 0x4000}, 0x24000012) getsockname$packet(r4, &(0x7f0000002b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002b80)=0x14) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000002c80)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x20, r5, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6d}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40051}, 0x20000804) r8 = socket$inet(0x2, 0x4, 0x29ce) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f0000002cc0)={0x1, [0x5]}, &(0x7f0000002d00)=0x6) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002e00)={&(0x7f0000002d80)={0x5c, r7, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x84}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4048044}, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000002ec0), r9) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r10, &(0x7f0000002f80)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x14, r11, 0x800, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800) 1.051244478s ago: executing program 7 (id=3858): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000140)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0)={0x5}, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r3 = socket(0x1e, 0x805, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x2, 0x10) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bind$packet(r3, &(0x7f0000000680)={0x11, 0x11, 0x0, 0x1, 0x80, 0x6, @broadcast}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r6}, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x600, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000100000000070000000c000780080012400000ffff050001000600000005000400000000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c697000"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x3ff, 0xffffffff, 0x4e, 0x567}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x8, 0x8, 0xf, 0x0, r5, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000181100", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r10, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r9}, 0xc) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f00000001c0)=""/44, &(0x7f0000000340)=0x2c) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x4000001) sendto$inet(r2, &(0x7f0000000700)="d3b5155c6e69fc70fe2059d474b6f131f757e3331aca3885ddf3d206fd3b81157e8bfbaa5b01d9dc4be2fac6a4b1bd0fd42fdf709bdefe246a5ae53da451adb71158b053d5e779b2d4194d99d88f278904a11d27de6e914885d88f9d36a5a01cc4857979df90a49782d6fa598bef7ea9cae3f6fa7057ad794d5822fb8632ea6994847266ffdd1d8a249392e0c78486506ae759cc918db65843faf8068bf749655ce804b17826a1c09f22a5626f1edac5021ec91a33cba9c55320b0ad6e09f5c61add", 0x0, 0xc0, 0x0, 0xfffffffffffffef1) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000020386d7a77f5f6516320000050000020800034700000008090002000000000800000000"], 0x28}, 0x1, 0x0, 0x0, 0x10008804}, 0x1) 872.665711ms ago: executing program 3 (id=3859): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x161042, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@delpolicy={0x64, 0x14, 0x211, 0x0, 0x0, {{@in=@broadcast, @in6=@private2}, 0x6e6bc0}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}]}, 0x64}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xf8, 0x0, 0xf8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'bond0\x00', {}, {}, 0x11, 0x0, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xe}}, @common=@unspec=@connmark={{0x30}, {0x1, 0x2, 0xfe}}]}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @rand_addr=0x64010101, 0x0, 0x0, 'dvmrp0\x00', 'dvmrp1\x00', {0xb25f05e6834eb86f}, {0xff}, 0x1d, 0x1, 0x49}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@addrtype={{0x60}, {0x60b, 0xe03, 0x1, 0x20000000}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x2, 0x0, 0x5], 0x0, 0x2}, {0x1, [0x3, 0x8, 0x5, 0x6, 0x2], 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000012c0)=ANY=[@ANYBLOB="86b71b3b", @ANYRES8=r1, @ANYBLOB="1709000000000000000001000000050007000000000008000900000000001400200000000000000000000000ffff0a010101"], 0x38}, 0x1, 0x620b, 0x0, 0x404c800}, 0x480d0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="580000000002010200000000000000000a00e100040003803c0002802c0001800a000300fc00000000000000000000000000000114000400fe8000000000000000000000000000130c0002800500010000000000040001"], 0x58}}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c0004"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000001340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001300)={&(0x7f0000000280)={0x30, 0x1411, 0x800, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20080010}, 0x20000000) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 561.411375ms ago: executing program 3 (id=3860): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002540)=ANY=[], 0x50) r2 = socket$phonet(0x23, 0x2, 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3401000010000100"/20, @ANYRES32=r2, @ANYBLOB="000000000000000014011a80400002803c000180080021000000000008001800000000000800030000000000080009000000000008000c0000000000080012000000000008001f00000000006c000a80140007"], 0x134}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, 0x0, &(0x7f0000000300)=0x35) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x38, 0x1412, 0x300, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) readv(r4, &(0x7f0000001300)=[{&(0x7f0000001340)=""/4097, 0x1001}], 0x1) close(0x3) r6 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(r6, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000001c0)="ddfb9d190e9dff9a22acba42a6f8e466417f62e9f175b9beec22a649fe76c7c35230792e885a1c6c176643e403bf20417b477b209356d28c705e5358eb8eeefbf02cf7cde6e10b278ea900d35c47587f9acfe757eb16bd", 0x57}, {&(0x7f0000000380)="6924b6b5da4bea34", 0x8}, {&(0x7f00000003c0)="a827acefbc94cabd2bdc0553e08c2416b0aecfa93e09624e7391b79893c3c73a1392d792aba4438494c5a7fab0a8d86d18fd6907e19818ebdefe20d66bb75c3b51ceea853fdc8fabf28d3ebb925d", 0x4e}, {&(0x7f0000000440)="a28f3563f6c6ff6fa74bc141d938d2aa30019fd28d7dc6f26f55c1d6bc9a96c8a42c0072509d50389a8d9ccb35d1eaaa2540a7c107fa757557c9de1847fd338e3582b475d143cc41bdbb58936589c077daf552e8e92e8594bf72b4f0bc0f5157fb1833f68b793e495a69dd3b74ff82028049ab8be4fdadd24e5d02a7eedec02529a63a7c217fcc4555e6fda221cb4ecb4c93a12896a35bbf2cea9d71c1df067b992ea0f025ea5d00c3665bc4421084ad90fae64a35052d43f3d3ce789b73a725b24f111cb1db663ec39b14d7e99192e1dabb83c2511ac266517198057329aaec5911a3051c3dbc0ead9e95047a85c92ce1144fdcbb25acbff7b248893ce520a23b89f83726dda23a39a5085fb0753f3357f054091c42cf864759e8052ce77b526936dde51846a528286691a21e2ffbcf0b7b2ce5242b3c167424ec8c28e5780887ed2e7595a4bbc7926545b349b3e3e0d2339fb741179279516f0972ebc1cd272641468c9e91a98be1d6824e133baa001bb9bcc90c6803b5a2cef2f3ca25cb00c03cde7b815e37e1c710ce18d0fe848db7b79ecfc14d0b3c9b4028224659ec050ed7078092a3fd231609e63b8bcf7d0516bbda5b33cbe2416605e6bdad33863e6b7c1d8d94337cf506450348a724cec392c9b65500b49a87803fe290f77de7646d4b19d61a3ca9b161419e90d2590ab613e8bba3d87985148e486d7d5c669b86f0b11cb80071da860ae1e71b1f8b8e474e2a468c02e4087e3f8c869584c725ee03002e5d6b6bb5613de0ecabcc67fa0e2afbe182299cdb6bd02316397b8b47f938125cc4fe0f093b374b90a4e8633647f20c2c0b05419648054ef8a21e46ab856f0896967d418739c412b0e2abbd6cfd28c613d309648318e1a3ac3fe8aa044e2d1b2c0d675da19d423f9927c5b5cff04068fde676f7d38eaaa6281615048cb9106b2d6f128e8ec9f8f4d38dab07d0c7fb60bff1ae1838bc95cbfaa24adc27781d4ab166d471153dab43405bbc303607881708028a4106ca5209edf1266749f769cc46d7d5cdfaef6d7de2045c454834f80e74b07a75fcd59cffb35f6fd8d5a3e4b4d8e08d3679487be90cb08de1132b81d6fc51be2eb5ce5ad95a828fc6b040976047f8686922cc1a54636f2717a800a986c380782dd106d3d6e55fd57753531fcd00fec0e5ab8909662791be44b7280d87ef17e9aacf00ed80d5cd8a090571d1eb4453e8a77bd0ee0eada9175d790375c411b3d84cc8cf92ad18ddca2710d53306ac2c1aae8dab7e7245ca6ee4790fc959015038a37415c22fcbc20c3dbd56dd6fde928a32be65f3f05971caf9e45fedaf226e87a508df380166bf4f782ff70841ed5e8258a31a9318190edef5dd4232da13beced726b70b9d360a808831f64366928a61c123cddb2121bef0aaf400af079c0724e00a9630959f295d484b570bff8f0754779913df823a3e2fecdeec5fbf100cac7077df4e62a6bae4141f7fa89e6390853a24bb145d2101a65d8942094db648ac02f0a20bfce55bed0f7c164bc35cddbd21df33477166b8b9e02d673bda70d97845fa39d276e383f759caa7da2a40f089c431dae1d59cf4581850549c18774738f126bb5c74a432703d4b7c04a3227c1e8eae05af7f59e544c5353ad11588d5c8f6195dcf95abc055b6ddb222261dff6042dfab6052d3b4264285b0630a7ae3d4217bc4b3ec9378b8767e54678346a0b00fdfccf1e9e3117cbc7557bd1c14f6c3067184bd3f5702b9e2430a5e5fe77b1b707569f7a5c4fbbf5078715f404c0881344fce74033737c27d64046cdc77af96b2aa028a04234b302d1046b8cbf03e1f8c342fdeda24851b5665fb361026e57dc1ad22228ebd63ea1a1ba896b0a1edd28b0576c5014f4868ef55f30f50248b16a7f25e1fed0141a036437425c073d753b9f77b32fbd0d6908f83121b14bbfe0ff18e7522de2671640b854b7ed67cfe1e3e928bb33c572bbb0859e7b5e310e0b05bbd4010c0e4cb49193df403c7249aaaef9481dc94de2e5c98195508d11348bb737f23c4f6276a040ddfeb3a113e07aa2f43cd2c351f5ebd2cb3569ba85e628b4ff169d26195aad53279f41879371eed78de717a0ac6ae388d91a95d69482ea550b1eff6020ac6e632f10d635faf201f8f853799c268d0397da756e13ed3d73a3f9a43becd750230a7dc51b48f4bfe549e92e203f1c373c45f241887a5297397c2a6c747f8e8027af89898d54acef4bda479b9bf59993eeb1c105f0e293a02aef659e097e6bf3ff25df004faac57486c203d23f3bf165e8aec8d4f73b5c7c74eecccd6fd6c39ffc36e7be3d12c21676e87d1dcd8c8980a85848b2deae167013843faa6e8d53dfe88454b63356b2cbde3a1fdc83df51bd1dac53089b75fa4e1bc8922dcf2434c980e89ff542f78ab8b8eb5ac5199a77a1fc4cfb5b9157a01c7cbdb0925a2c82a78770e80506e13ef9754b10a4ede769406e820af7d983af655ac9b7e8df1d3ef0b736ec762bee63e1024bfae8085a2c2607cc3e51433815f0f62fe3be58a6c778e12be2d0b615c22a7f8b6044e2f51462e78affb44d5fa30fb0d336b84cce703402f3ab7e2359b9bed79084664079ffaa1e4be03f6f7bcc5ea64320d705f8455588f648e709f5b31bc37fec4cde4cf1e82bd57625ce0715bedfb1623c827170a468c9a32451a64f3e654831baab121f25455286ab1f3f7119e291caaf46a952c8324a12c21de8bcf3a8d3eb9c0a8381da6eddd385bb359f74264d5ff1db53e37bc081e3955492b36f89ab30455d7c219dd27929b1b69eb77bb7d1c2bcf30c018df2a491a3390917820065d66bd61faf3e580d0f635337ef3a0f211f11b0ec242dd202615b244bcd5a044411c5a22d0024ba38cc3cf34d22ff984a4e27277ac0cc76d5baf1f257188093fa5cc671ba9cb34bac615c8b3c0bfadf7ea1fd7b0c5fc1b60f1a314bd0c181d73eca5e58e92953bcdc0e3154b7dca413d2bf73d661265e1d4d6cb6756a6dce479ea69a633c7548ed536bb6fae73326cfcd141839b5ad14f2999a916ec2c70af8b8df926b9ea8acea6b0b3baeb44d78ba9fb4b63a39a246c4deec13ffbc2ecce42a2d6694d04d4179f35013b4a198d7e30e71f51a767781003dde233070ba26462a2f8f3ddcc9dc1a8956dad0a11f285e4668a02c211c2dd4ca3766d478a52e6424ef80397c9ca9e64b5770414f793b16301044f929ef87c2bcc332ba15f3bd641efd92f1029941ca350b0cd12e99d922a671d0e9e6f6811d5a3e1f248df5dbdaf31f67b1af2cbd1962315c499273954e549cb6f30452142433a1683dca257135e0238fd4e44cce53c106f3b4fb361c5b9f17a96b97d9e09a99423a1fb8a8eef00ecac7ddf2972e2a4b9eaffe8b6b63fe3b5d0f313aa55674d03411cccd01b2b22002071d5e1884afe25dd7e101c277ee3f711c50ebc2ab9085e92e95686315193ef5f53029e3c092a51e4b8fcc1ac5100501236eda35d637c2da6a0977cd5c47cf4b50321c5ea3567653ac3a562f99d7b856a1f0ae713295cdbdb8812fef8470900113b23b4661705b655696559297c03ec436398c44def4091d7558fe33220f01dc2ac87af44e6596328e78598a2a0ac410d8f6e47e59c3bdda6f9f849e137462fbcf5d1b84d90a471be4bdec09adad9da00273c33d1f61ab056a556124840b14c062c69242ba21239704a02cf434924501d46c09022ec0b52c2b3f72554a606d54c9c67bbc942956c6458732a841294e25f2329ecf0e03e53d9107071c0f6e5af1deb9ddedf0f2d62ccf4dd8b7e121642d7d137d2fde93ba13a9a8b29399b6a89dca058a4f8f77aeb73de6620c86f7c8b2dc665687f10dff6b83b5fd8a5263c6af745fd42313299379d5514cae8d196be78505ef31414ce107c26ef1512852b74ac240a95b6b9da0f95c6cdea89a1435463b5d64820b306c7f6512c52276c1eda5690676ddbec2541cc216f1d6262080f6f6914ffc048c33b972ff227fd0442a534ea5c0b098e32a88ab10bebcec69ed0317f0793959a331adf06d630a6dd29d2dd98f006d136ac92b56b9ce9c4ac42b69b99cb62a0566f466411aa3ea68439fe802e7055adc53dbb1fd59d94b77e0e24e4eb0ccfcd9ee5775fad37d1e833448b5e7916f4bd860353187238aac5a53fb01f4d31bf20224a44e6a897349edd144e40251503b739faaadc894eedeef28de420951df6ada28c9d8d6e69f510c85c28080cefd74b24cacaf5a1f1161889dc0c5d0bf053a97f36db5369262ff60bd2b7304d32e73d133aac8f8d431794f57c3d3abae1344ebe186df8eb4dff3b1d90a2a7665312514b05eb7ff212d9a428bd31104433c4d0571acbe2649e45e2de57bd13902efe3427aefefe3c92ecc5788aadc53fd26f3465690d319daf0332d8c6af0c55336dab9b518984455fffadaaca6c35765c3df612c783e8454fcf09b4c9046223481048faba972ee9aa4cde52c5478eee7655f1e8a2e3b5171e7fccfdaecb1ab5a35a60710fa4c23d6dd2acc10e44b29bace8ead83759f86e8580ea77f146dd89725d62335cbb8fe878da7ec32e329501b637f0c38bbd5ed4aea293f5c8da818751e639430ff1f50199ed08a4abbb4c31f9dfb88978a3db6613b20cfd39f9f8fbead062d7e202d030f4a4420c4eaa88671f2fd079b474471ab67db2fe7f58dd935eda2cc8aa8b4b5f0c156eb7a8be690cced2233141bd26dfcbb800e092b4770d8665f76a8fb720f62e8717789dcf0d7184431303382a25ee51a571f0ed37d1cfd488290e75fed4fe8739a4762c2965e29e5421b16247dab098876ccb8420fd9de3382a1b5394a55762b13112c3396d762308590c3651c72011a75120f7fa32ebf97fe323912d95c103ed456acddf4a214938f4948cefaa986e14b0d694ecdca3a27e1e976becc49557492c2c2d8ddfa8eb12b3d179c0cc3a261e5fb8c2ae60065663fd2e7fab92fc696521a119adc58e561e851eba6f9e2dd381214c2f0a346226b766bbdd90161310d9574cae58472aba0bf2ad1cc8aa67659381575b8fd09e6bd769ca2491fd9507a57040e39feefa8a0c7cb86638f9b4541cdecadfb0ca58e419f6edfb365e18f5e441dcedf0c068602fe52e45e32146262493e92fcd1d4058c2564db0c7b76805e59aed2e27f2b3032347417b6ee921fdc2563518d48fb8f4ef9f269ce23aec8a3cb029fd94643162b48f45e736f8439d448f88cfd6ca9c755830070a358d5a0cd620dccebc39045a2ee44c31c2ca45c436c50c1ada357d8ff4d3451d10340a981cbe7a42ca6238e19890e51a5332146461fdf63090b128b9330d6e69a7aa7786047025ff519cd65b474ca01234c3b07b3563d06d336268e8b79094c27cad0b007f432f90e2a5e14a11909d15d6fe9c94fb5049928be1b9871c3e4e68abb12242e357af89f19086d55c9af5888366ac389b9a381a65263fe1c34f8ca95c3993a25dc189862ce1c4389ca36f91d79c72ca02e17bd6e6ebaa38c307c730151415ea6831e194b8343c6f293b0bc1f7e26ee5b8e4", 0xf53}], 0x4, &(0x7f00000015c0)=ANY=[], 0x218}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4004801) write$cgroup_int(r5, &(0x7f00000000c0)=0x4054, 0x12) ioctl$XFS_IOC_GETBMAPX(r1, 0xc0205838, &(0x7f0000000100)={0x0, 0x1ff, 0x4, 0xffff, 0x80000001, 0x2, 0x4}) close(0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r8, 0x0, 0x16, &(0x7f0000000000)=0x3, 0x4) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) 354.716062ms ago: executing program 0 (id=3861): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000700fffe38000000090a010400000000000000000700000008000f40000000020900010073797a3100000000080005400000001c08000f4000e1ff06140000001000010000000000000000000084000a"], 0x74}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e6576650000500002800500080000000000040038020500090001000000050003"], 0x88}}, 0x0) 168.498536ms ago: executing program 0 (id=3862): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x1}, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3, &(0x7f0000000000)=0x7ff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910300000000000730a11ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x1a, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) 41.710194ms ago: executing program 7 (id=3863): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010000d042abd70000000001600000000", @ANYRES32=0x0, @ANYBLOB="010000000832020008002e00", @ANYRES32], 0x56}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB="370000000400016500ea00050000000028080000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) 0s ago: executing program 7 (id=3864): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x4d2, 0x33}, @in=@dev, {0x1, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0x48, 0x1, {{'sha1\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x1}, {0xcdbf0d3388237035, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8}]}}]}, 0x3c}}, 0x20004015) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$packet(0x11, 0x3, 0x300) write$tun(r1, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x1200, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0xfdef) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022bf0000000000000500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000db003000a0000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xc7, &(0x7f0000000240)=""/199}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): known, defaulting to 1000 [ 421.899983][ T809] veth1_to_hsr: entered promiscuous mode [ 421.911181][T14475] syz0: Port: 1 Link ACTIVE [ 421.932071][T12133] bond2: (slave bridge1): link status up again after 0 ms [ 421.985909][T12133] bond2: (slave bridge1): link status up again after 0 ms [ 422.038099][ T7014] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.057016][ T7014] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 422.080185][ T7014] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.100707][ T7014] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.130864][ T7014] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 422.150270][ T7014] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.250109][T14475] lo speed is unknown, defaulting to 1000 [ 422.387911][ T7014] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.399403][ T7014] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 422.416735][ T7014] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.427574][ T7014] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.437175][T14475] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 422.445438][ T7014] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 422.455026][ T7014] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.512375][T17159] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.525421][ T809] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 422.595731][ T7014] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.603021][ T7014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.650400][T12133] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.657738][T12133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.874621][T17700] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2880'. [ 423.361288][T17718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2882'. [ 423.389534][T17718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2882'. [ 423.625779][T17724] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2883'. [ 423.852202][T17730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2884'. [ 423.888286][T17159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.914568][T17730] xt_TPROXY: Can be used only with -p tcp or -p udp [ 424.012498][ T7014] net_ratelimit: 40 callbacks suppressed [ 424.012614][ T7014] bond2: (slave bridge1): failed to get link speed/duplex [ 424.095516][T17159] veth0_vlan: entered promiscuous mode [ 424.154736][T17159] veth1_vlan: entered promiscuous mode [ 424.215358][T17159] veth0_macvtap: entered promiscuous mode [ 424.239523][T17159] veth1_macvtap: entered promiscuous mode [ 424.336942][ T7009] bond2: (slave bridge1): failed to get link speed/duplex [ 424.367967][T17159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.406014][T17159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.457018][ T7009] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.458670][T17750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2888'. [ 424.477382][T17750] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 424.496440][ T7009] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.517573][T17753] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 424.529252][ T7009] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.548017][ T7009] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.663346][ T7006] bond2: (slave bridge1): failed to get link speed/duplex [ 424.912254][ T7009] bond2: (slave bridge1): failed to get link speed/duplex [ 424.935684][T12118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.959142][T12118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.993323][T12115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.005530][T12115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.043068][T12133] bond2: (slave bridge1): failed to get link speed/duplex [ 425.242780][ T7009] bond2: (slave bridge1): failed to get link speed/duplex [ 425.267493][T17776] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2895'. [ 425.373670][T12133] bond2: (slave bridge1): failed to get link speed/duplex [ 425.497139][T12118] bond2: (slave bridge1): failed to get link speed/duplex [ 425.626237][T12115] bond2: (slave bridge1): failed to get link speed/duplex [ 425.782771][T17797] netlink: 'syz.0.2900': attribute type 1 has an invalid length. [ 425.808359][T17797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2900'. [ 425.856123][ T5648] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 425.877996][ T5648] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 425.890647][ T5648] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 425.907523][ T5648] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 425.920812][ T5648] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 425.923268][T17797] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 426.203121][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 426.594018][T17799] lo speed is unknown, defaulting to 1000 [ 426.863627][T17829] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2908'. [ 426.946654][T17833] netlink: 'syz.3.2909': attribute type 12 has an invalid length. [ 426.973392][T17833] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.2909'. [ 426.988223][T17833] tipc: Enabling of bearer rejected, failed to enable media [ 427.168604][T17841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2911'. [ 427.248570][T17841] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2911'. [ 427.855651][T17870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2916'. [ 427.928508][T17799] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.936190][T17799] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.945760][T17799] bridge_slave_0: entered allmulticast mode [ 427.954354][T17799] bridge_slave_0: entered promiscuous mode [ 427.964837][T17799] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.972278][T17799] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.980089][T17799] bridge_slave_1: entered allmulticast mode [ 427.989967][T17799] bridge_slave_1: entered promiscuous mode [ 428.035570][T17799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.050443][T17799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.059840][ T5650] Bluetooth: hci0: command tx timeout [ 428.163384][T17799] team0: Port device team_slave_0 added [ 428.194910][T17799] team0: Port device team_slave_1 added [ 428.234030][T17799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.241052][T17799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.267955][T17799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.287499][T17799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.299110][T17799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.326205][T17799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.346558][T17877] netlink: 'syz.3.2918': attribute type 178 has an invalid length. [ 428.421239][T17799] hsr_slave_0: entered promiscuous mode [ 428.430295][T17799] hsr_slave_1: entered promiscuous mode [ 428.439231][T17799] debugfs: 'hsr0' already exists in 'hsr' [ 428.445964][T17799] Cannot create hsr debugfs directory [ 428.519324][T17882] netlink: 'syz.3.2919': attribute type 2 has an invalid length. [ 428.530493][T17882] netlink: 'syz.3.2919': attribute type 9 has an invalid length. [ 428.538561][T17882] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2919'. [ 428.551326][T17882] netlink: 'syz.3.2919': attribute type 11 has an invalid length. [ 429.020432][T17900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2923'. [ 429.038292][T17901] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2924'. [ 429.090942][T17799] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.101681][T17799] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 429.115552][T17799] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.162856][T12115] net_ratelimit: 19 callbacks suppressed [ 429.162879][T12115] bond2: (slave bridge1): failed to get link speed/duplex [ 429.288413][T17799] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.314416][T17799] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 429.326076][T17799] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.362932][ T7006] bond2: (slave bridge1): failed to get link speed/duplex [ 429.452021][T17799] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.462826][T17799] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 429.477245][T17799] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.542440][T12115] bond2: (slave bridge1): failed to get link speed/duplex [ 430.125256][ T5650] Bluetooth: hci0: command tx timeout [ 431.563107][T17799] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.574807][T17799] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0 [ 431.589369][T17799] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.202129][ T5650] Bluetooth: hci0: command tx timeout [ 432.579645][T12133] bond2: (slave bridge1): failed to get link speed/duplex [ 432.692933][T12115] bond2: (slave bridge1): failed to get link speed/duplex [ 432.830253][T12118] bond2: (slave bridge1): failed to get link speed/duplex [ 432.905021][T17951] netlink: 'syz.0.2933': attribute type 58 has an invalid length. [ 433.055034][T17957] openvswitch: netlink: Flow key attribute not present in set flow. [ 433.092049][ T7014] bond2: (slave bridge1): failed to get link speed/duplex [ 433.157544][T17799] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 433.198928][T17799] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 433.217481][T17799] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 433.277342][T17799] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 433.285965][T17799] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 433.301071][T17799] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 433.328986][T17799] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 433.362788][T17799] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 433.386747][T17966] gre0: entered promiscuous mode [ 433.392361][T17979] openvswitch: netlink: IP tunnel dst address not specified [ 433.402072][T17966] gre0: entered allmulticast mode [ 433.526717][T17991] netlink: 'syz.0.2941': attribute type 13 has an invalid length. [ 433.711006][T17997] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2943'. [ 433.760866][T17993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2941'. [ 433.803590][T17997] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2943'. [ 433.819664][T17991] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2941'. [ 433.831561][ T7014] bond2: (slave bridge1): failed to get link speed/duplex [ 433.871565][T17799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.978070][T17799] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.006747][ T7014] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.014157][ T7014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.080295][T12133] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.087593][T12133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.201253][T18014] netlink: 604 bytes leftover after parsing attributes in process `syz.0.2947'. [ 434.215106][T18014] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2947'. [ 434.250558][T18014] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2947'. [ 434.283553][ T5650] Bluetooth: hci0: command tx timeout [ 434.323596][T18014] hmac(sha224: entered promiscuous mode [ 434.342157][T18014] net_ratelimit: 2 callbacks suppressed [ 434.342176][T18014] TC_ACT_REPEAT abuse ? [ 434.402976][ T7014] bond2: (slave bridge1): failed to get link speed/duplex [ 434.470025][ T30] audit: type=1804 audit(1780627855.329:12): pid=18022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2949" name="/newroot/604/cgroup.controllers" dev="tmpfs" ino=3098 res=1 errno=0 [ 434.532035][ T30] audit: type=1800 audit(1780627855.329:13): pid=18022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2949" name="cgroup.controllers" dev="tmpfs" ino=3098 res=0 errno=0 [ 434.822273][ T7009] bond2: (slave bridge1): failed to get link speed/duplex [ 435.025372][T18030] syzkaller0: entered promiscuous mode [ 435.032996][T18030] syzkaller0: entered allmulticast mode [ 435.052418][T12133] bond2: (slave bridge1): failed to get link speed/duplex [ 435.195126][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 436.290256][ T5648] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 436.318017][ T5648] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 436.343154][ T5648] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 436.376950][ T5648] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 436.386571][ T5648] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 438.395145][T18053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2953'. [ 438.522078][ T5648] Bluetooth: hci3: command tx timeout [ 438.613316][ T7006] bond2: (slave bridge1): failed to get link speed/duplex [ 438.628393][T18069] netlink: 'syz.3.2956': attribute type 7 has an invalid length. [ 438.679462][T18070] netlink: 'syz.3.2956': attribute type 1 has an invalid length. [ 438.730665][T18070] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2956'. [ 438.768451][T18070] netlink: 'syz.3.2956': attribute type 1 has an invalid length. [ 438.825544][T18070] netlink: 638 bytes leftover after parsing attributes in process `syz.3.2956'. [ 438.885852][T18073] bond16: entered promiscuous mode [ 438.894688][T18070] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2956'. [ 438.904339][T18073] 8021q: adding VLAN 0 to HW filter on device bond16 [ 438.934406][ T7006] bond2: (slave bridge1): failed to get link speed/duplex [ 439.072921][ T7006] bond2: (slave bridge1): failed to get link speed/duplex [ 439.176047][T17799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.215331][T18099] batadv0: entered promiscuous mode [ 439.237810][T18099] veth1_to_hsr: entered promiscuous mode [ 439.257615][T18102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2959'. [ 439.285501][T18099] hsr1: entered allmulticast mode [ 439.297062][T18099] batadv0: entered allmulticast mode [ 439.302618][T18102] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2959'. [ 439.319910][T18099] veth1_to_hsr: entered allmulticast mode [ 439.326593][T18102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2959'. [ 439.392046][T18102] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2959'. [ 439.437508][T18102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2959'. [ 439.682498][ T7006] bond2: (slave bridge1): failed to get link speed/duplex [ 439.721560][T18059] lo speed is unknown, defaulting to 1000 [ 439.832062][T12133] bond2: (slave bridge1): failed to get link speed/duplex [ 439.972024][T12118] bond2: (slave bridge1): failed to get link speed/duplex [ 440.064361][T18136] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2967'. [ 440.602068][ T5648] Bluetooth: hci3: command tx timeout [ 442.682328][ T5648] Bluetooth: hci3: command tx timeout [ 443.225102][T18145] tipc: Started in network mode [ 443.232309][T18145] tipc: Node identity , cluster identity 4711 [ 443.238948][T18145] tipc: Failed to obtain node identity [ 443.248106][T18145] tipc: Enabling of bearer rejected, failed to enable media [ 443.258101][T18149] syzkaller0: entered promiscuous mode [ 443.272528][T18149] syzkaller0: entered allmulticast mode [ 443.407530][T18155] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2970'. [ 443.424343][T12133] bond2: (slave bridge1): failed to get link speed/duplex [ 444.772746][ T5648] Bluetooth: hci3: command tx timeout [ 446.216858][T18154] lo speed is unknown, defaulting to 1000 [ 446.233815][T18157] bridge13: the hash_elasticity option has been deprecated and is always 16 [ 446.253284][ T7014] bond2: (slave bridge1): failed to get link speed/duplex [ 446.383448][T12133] bond2: (slave bridge1): failed to get link speed/duplex [ 446.426627][T18169] netlink: 'syz.3.2973': attribute type 12 has an invalid length. [ 446.437059][T18166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2972'. [ 446.464195][T17799] veth0_vlan: entered promiscuous mode [ 446.488882][T17799] veth1_vlan: entered promiscuous mode [ 446.735358][T12133] bond2: (slave bridge1): failed to get link speed/duplex [ 446.863316][T18178] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2975'. [ 446.950868][T12120] bond2: (slave bridge1): failed to get link speed/duplex [ 446.960119][T17799] veth0_macvtap: entered promiscuous mode [ 447.018593][T18059] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.033529][T18059] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.045307][T18059] bridge_slave_0: entered allmulticast mode [ 447.054156][T18059] bridge_slave_0: entered promiscuous mode [ 447.063325][T18059] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.070564][T18059] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.078647][T18059] bridge_slave_1: entered allmulticast mode [ 447.094041][T18059] bridge_slave_1: entered promiscuous mode [ 447.104681][T17799] veth1_macvtap: entered promiscuous mode [ 447.121648][ T809] IPVS: starting estimator thread 0... [ 447.232014][T18186] IPVS: using max 27 ests per chain, 64800 per kthread [ 447.260934][T18059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.292166][T12133] bond2: (slave bridge1): failed to get link speed/duplex [ 447.337197][T18059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.478626][T17799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.501276][T18188] netlink: 'syz.3.2976': attribute type 3 has an invalid length. [ 447.519486][T18059] team0: Port device team_slave_0 added [ 447.554709][T17799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.595245][ T7009] bond2: (slave bridge1): failed to get link speed/duplex [ 447.625669][T18059] team0: Port device team_slave_1 added [ 447.693476][T18059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.701574][T18059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.728422][T18059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.741662][T12133] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.744850][T18195] netlink: 'syz.0.2979': attribute type 1 has an invalid length. [ 447.761153][T12133] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.786792][T18059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.795191][T18059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.848908][T18059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.894653][T12133] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.905537][T12133] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.091569][T18059] hsr_slave_0: entered promiscuous mode [ 448.104739][T18059] hsr_slave_1: entered promiscuous mode [ 448.124050][T18059] debugfs: 'hsr0' already exists in 'hsr' [ 448.131460][T18059] Cannot create hsr debugfs directory [ 448.245178][T12115] bond2: (slave bridge1): failed to get link speed/duplex [ 448.474141][T18209] tipc: Started in network mode [ 448.479585][T18209] tipc: Node identity 0601d894c694, cluster identity 4711 [ 448.488709][T18209] tipc: Enabled bearer , priority 0 [ 448.525150][ T7014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.563546][ T7014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.634967][T18209] tipc: Disabling bearer [ 448.651629][T18218] netlink: 'syz.3.2985': attribute type 13 has an invalid length. [ 448.788713][T18217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2984'. [ 448.821583][T18222] netlink: 'syz.0.2986': attribute type 1 has an invalid length. [ 448.832317][T18222] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2986'. [ 448.839266][T12133] bond2: (slave bridge1): failed to get link speed/duplex [ 448.850349][T12115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.863922][T12115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.042957][ T7667] bond2: (slave bridge1): failed to get link speed/duplex [ 449.284224][T12133] bond2: (slave bridge1): failed to get link speed/duplex [ 449.464456][T18249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2990'. [ 449.506266][T18250] netlink: 476 bytes leftover after parsing attributes in process `syz.0.2990'. [ 449.613713][T18248] bond1 (unregistering): Released all slaves [ 449.676028][T18059] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 449.718125][T18059] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 449.770103][T18059] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 449.806959][T18059] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 449.810988][T18261] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 449.839257][T18059] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 449.853084][T18059] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 449.987499][T18259] vlan4: entered promiscuous mode [ 449.992865][T18259] bridge0: entered promiscuous mode [ 450.007700][T18059] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 450.022967][T18059] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 450.327170][T18059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.345088][T18280] lo: Caught tx_queue_len zero misconfig [ 450.440775][T18059] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.476064][T18288] netlink: 'syz.4.3000': attribute type 27 has an invalid length. [ 450.485828][T12133] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.493103][T12133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.625810][ T7014] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.633082][ T7014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.930884][T18297] can: request_module (can-proto-3) failed. [ 450.937350][T18307] tipc: Started in network mode [ 450.949211][T18307] tipc: Node identity ba14be370469, cluster identity 4711 [ 450.965347][T18307] tipc: Enabled bearer , priority 0 [ 450.987575][T18307] syzkaller0: entered promiscuous mode [ 451.016613][T18307] syzkaller0: entered allmulticast mode [ 451.140501][T18319] Bluetooth: MGMT ver 1.23 [ 451.202606][T18320] C: renamed from veth1_to_team [ 451.229467][T18328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3010'. [ 451.258431][T18320] netlink: 'syz.3.3010': attribute type 4 has an invalid length. [ 451.283002][T18320] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3010'. [ 451.320177][T18320] net_ratelimit: 7 callbacks suppressed [ 451.320200][T18320] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 451.375783][T18307] tipc: Resetting bearer [ 451.413370][T18328] v: renamed from gre0 [ 451.427653][T18328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3010'. [ 451.448477][T18328] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check. [ 451.468237][T18304] tipc: Resetting bearer [ 451.513756][T18304] tipc: Disabling bearer [ 451.613485][T12133] bond2: (slave bridge1): failed to get link speed/duplex [ 451.644522][T18341] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3012'. [ 451.690713][T18337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3012'. [ 451.743316][T12115] bond2: (slave bridge1): failed to get link speed/duplex [ 451.808983][T18343] syzkaller0: entered promiscuous mode [ 451.816905][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 451.853748][T18343] syzkaller0: entered allmulticast mode [ 451.886345][T12115] bond2: (slave bridge1): failed to get link speed/duplex [ 452.108601][T18348] lo speed is unknown, defaulting to 1000 [ 452.144699][T12123] bond2: (slave bridge1): failed to get link speed/duplex [ 452.288521][ T7667] bond2: (slave bridge1): failed to get link speed/duplex [ 452.432100][ T7667] bond2: (slave bridge1): failed to get link speed/duplex [ 452.495538][T18368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3019'. [ 452.507359][T18059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.634619][T18365] IPVS: lc: FWM 3 0x00000003 - no destination available [ 452.734374][T18373] bond18 (unregistering): Released all slaves [ 452.802648][T18377] tipc: Enabling of bearer rejected, failed to enable media [ 453.089704][T12123] bond2: (slave bridge1): failed to get link speed/duplex [ 453.168259][T18364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.227943][T18390] netlink: 'syz.3.3021': attribute type 7 has an invalid length. [ 453.269715][T18393] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3023'. [ 453.454106][T18059] veth0_vlan: entered promiscuous mode [ 453.501899][T18059] veth1_vlan: entered promiscuous mode [ 453.574894][T18400] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 453.612485][T18059] veth0_macvtap: entered promiscuous mode [ 453.642579][T18059] veth1_macvtap: entered promiscuous mode [ 453.654235][T18400] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 453.719378][T18059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.737634][T18400] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 453.790855][T18059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.791112][T18400] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 453.853012][ T7667] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.879354][ T7667] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.917286][ T7667] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.931715][ T7667] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.213835][T18408] netlink: 'syz.1.3027': attribute type 1 has an invalid length. [ 454.224897][T18410] netlink: 'syz.4.3028': attribute type 12 has an invalid length. [ 454.243917][ T7009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.260151][ T7009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.427765][ T7014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.450528][ T7014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.840540][T18425] syzkaller0: entered promiscuous mode [ 454.858009][T18425] syzkaller0: entered allmulticast mode [ 454.882462][T18427] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2955'. [ 454.921059][T18425] netlink: 'syz.1.3031': attribute type 1 has an invalid length. [ 454.980732][T18429] netlink: 'syz.0.3033': attribute type 1 has an invalid length. [ 455.014690][T18429] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3033'. [ 455.256099][ T5650] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 455.274807][ T5650] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 455.287439][ T5650] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 455.299388][ T5650] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 455.307577][ T5650] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 456.185246][ T5642] syz_tun (unregistering): left allmulticast mode [ 456.215008][ T5642] syz_tun (unregistering): left promiscuous mode [ 456.241275][ T5642] bridge0: port 1(syz_tun) entered disabled state [ 456.384376][T18471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3044'. [ 456.432356][T12120] net_ratelimit: 18 callbacks suppressed [ 456.432377][T12120] bond2: (slave bridge1): failed to get link speed/duplex [ 456.592494][T12123] bond2: (slave bridge1): failed to get link speed/duplex [ 456.754673][T18484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3046'. [ 456.810982][T18493] netlink: 212392 bytes leftover after parsing attributes in process `syz.0.3046'. [ 456.949520][T18489] netlink: 'syz.4.3047': attribute type 11 has an invalid length. [ 457.013439][T12119] bond2: (slave bridge1): failed to get link speed/duplex [ 457.133908][T18509] pim6reg1: entered promiscuous mode [ 457.201433][T18509] pim6reg1: entered allmulticast mode [ 457.406235][ T5650] Bluetooth: hci7: command tx timeout [ 457.496568][T18433] lo speed is unknown, defaulting to 1000 [ 457.552728][T12116] bond2: (slave bridge1): failed to get link speed/duplex [ 457.699490][T18520] netlink: 'syz.0.3049': attribute type 1 has an invalid length. [ 457.758741][T18519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3050'. [ 457.833047][T18527] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3049'. [ 458.443887][ T7014] bond8 (unregistering): (slave gretap1): Releasing active interface [ 458.665955][ T7014] bond15 (unregistering): (slave geneve5): Releasing active interface [ 458.683772][ T7014] bond7 (unregistering): (slave geneve3): Releasing active interface [ 458.771985][ T7014] bond9 (unregistering): (slave bridge5): Releasing backup interface [ 458.881733][ T7014] bond0 (unregistering): Released all slaves [ 458.894672][ T7014] bond1 (unregistering): Released all slaves [ 458.917859][ T7014] bond2 (unregistering): (slave batadv1): Releasing active interface [ 458.939167][ T7014] bond2 (unregistering): Released all slaves [ 458.955807][ T7014] bond3 (unregistering): Released all slaves [ 458.971480][ T7014] bond4 (unregistering): Released all slaves [ 458.988030][ T7014] bond5 (unregistering): Released all slaves [ 459.006844][ T7014] bond6 (unregistering): Released all slaves [ 459.023745][ T7014] bond7 (unregistering): Released all slaves [ 459.040094][ T7014] bond8 (unregistering): Released all slaves [ 459.066269][ T7014] bond9 (unregistering): Released all slaves [ 459.114319][ T7014] bond10 (unregistering): Released all slaves [ 459.130212][ T7014] bond11 (unregistering): Released all slaves [ 459.147788][ T7014] bond12 (unregistering): Released all slaves [ 459.165059][ T7014] bond13 (unregistering): Released all slaves [ 459.196696][ T7014] bond14 (unregistering): Released all slaves [ 459.214220][ T7014] bond15 (unregistering): Released all slaves [ 459.230567][ T7014] bond16 (unregistering): Released all slaves [ 459.248023][ T7014] bond17 (unregistering): Released all slaves [ 459.328260][T18520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 459.398027][T18536] vlan3: entered allmulticast mode [ 459.412113][T18536] veth0_to_bond: entered allmulticast mode [ 459.427836][T18536] bond1: (slave vlan3): making interface the new active one [ 459.445088][T18536] bond1: (slave vlan3): Enslaving as an active interface with an up link [ 459.482667][ T5650] Bluetooth: hci7: command tx timeout [ 459.545075][T18535] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.553000][T18535] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.678885][T18535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.699005][T18535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.796423][T18557] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3056'. [ 459.879003][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 459.899042][T18559] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3056'. [ 459.937736][ T48] smbdirect: ib_dev[syz1] removed [ 459.957950][T18559] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3056'. [ 459.968054][T12115] bond2: (slave bridge1): failed to get link speed/duplex [ 460.030021][T18557] wg0: entered promiscuous mode [ 460.058401][T18557] wg0: entered allmulticast mode [ 460.065877][T12120] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.087974][T12120] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.130168][T12120] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.248180][T18559] vlan0: entered promiscuous mode [ 460.314451][T12120] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.488398][ T7014] tipc: Disabling bearer [ 460.518046][ T7014] tipc: Left network mode [ 460.532584][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 460.905903][T18568] syzkaller0: entered promiscuous mode [ 460.916903][T18568] syzkaller0: entered allmulticast mode [ 461.579303][ T5650] Bluetooth: hci7: command tx timeout [ 462.029711][T18593] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3064'. [ 463.644034][ T5650] Bluetooth: hci7: command tx timeout [ 464.741525][T18574] netlink: 'syz.4.3057': attribute type 3 has an invalid length. [ 464.832971][T12116] bond2: (slave bridge1): failed to get link speed/duplex [ 465.126417][T18596] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.197186][T18600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3066'. [ 465.216178][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 465.387252][T18617] sctp: [Deprecated]: syz.4.3070 (pid 18617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 465.387252][T18617] Use struct sctp_sack_info instead [ 465.448003][T18619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3069'. [ 465.468096][T18596] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.469629][T18619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3069'. [ 465.500357][T18617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3070'. [ 465.612878][T12121] bond2: (slave bridge1): failed to get link speed/duplex [ 465.635428][T18625] xt_hashlimit: size too large, truncated to 1048576 [ 465.738204][T18596] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.050188][T18596] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.109211][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 466.163169][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 466.228147][T18640] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 466.244676][T18640] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 466.581240][T18652] batadv0: Caught tx_queue_len zero misconfig [ 466.632669][T12121] bond2: (slave bridge1): failed to get link speed/duplex [ 466.741076][T18661] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3077'. [ 466.901192][T18674] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3080'. [ 466.914179][T18674] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3080'. [ 466.927782][T18674] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3080'. [ 466.960469][T12121] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.149859][T18681] sctp: [Deprecated]: syz.0.3081 (pid 18681) Use of int in max_burst socket option. [ 467.149859][T18681] Use struct sctp_assoc_value instead [ 467.175294][T18688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3082'. [ 467.205733][T18681] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3081'. [ 467.258705][T18433] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.270131][T18433] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.278481][T18433] bridge_slave_0: entered allmulticast mode [ 467.296825][T18433] bridge_slave_0: entered promiscuous mode [ 467.358096][T12123] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.391385][T18433] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.419182][T18433] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.452145][T18433] bridge_slave_1: entered allmulticast mode [ 467.478856][T18433] bridge_slave_1: entered promiscuous mode [ 467.616157][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 467.658025][T12121] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.712456][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 467.755920][T18433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.871546][T18681] lo speed is unknown, defaulting to 1000 [ 467.885135][T18433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.910090][T18712] netlink: 'syz.4.3086': attribute type 1 has an invalid length. [ 467.932207][T18712] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3086'. [ 467.947301][T12121] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.965633][T12121] bond2: (slave bridge1): failed to get link speed/duplex [ 468.383015][T18433] team0: Port device team_slave_0 added [ 468.410456][T18433] team0: Port device team_slave_1 added [ 468.541720][T18433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.566939][T18433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.608549][T18433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.675933][T18433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.704221][T18433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.777729][T18433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.835012][T18711] lo speed is unknown, defaulting to 1000 [ 468.873689][T12115] bond2: (slave bridge1): failed to get link speed/duplex [ 469.009921][T18433] hsr_slave_0: entered promiscuous mode [ 469.029085][T18433] hsr_slave_1: entered promiscuous mode [ 469.048662][T18433] debugfs: 'hsr0' already exists in 'hsr' [ 469.065762][T18433] Cannot create hsr debugfs directory [ 469.373275][ T5294] 8021q: adding VLAN 0 to HW filter on device eth4 [ 469.817626][T18765] tipc: Started in network mode [ 469.832640][T18765] tipc: Node identity 52ba1cff9e24, cluster identity 4711 [ 469.851538][T18765] tipc: Enabled bearer , priority 0 [ 469.889498][T18765] tipc: Resetting bearer [ 469.918774][T18762] syzkaller0: entered promiscuous mode [ 469.924400][T18762] syzkaller0: entered allmulticast mode [ 470.012672][ T7014] hsr_slave_0: left promiscuous mode [ 470.023213][ T7014] hsr_slave_1: left promiscuous mode [ 470.091280][T18778] x_tables: duplicate underflow at hook 1 [ 470.473781][T18761] tipc: Resetting bearer [ 470.497103][T18761] tipc: Disabling bearer [ 470.721058][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 471.012102][T12123] bond2: (slave bridge1): failed to get link speed/duplex [ 471.277710][T18797] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3099'. [ 472.068002][T18797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.096354][T18797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.183157][T18815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3100'. [ 472.262349][T18815] vlan2: entered promiscuous mode [ 472.278243][T18815] veth1: entered promiscuous mode [ 472.360035][T18819] netlink: 'syz.6.3101': attribute type 1 has an invalid length. [ 472.369249][T18819] netlink: 'syz.6.3101': attribute type 2 has an invalid length. [ 472.378054][T18819] netlink: 'syz.6.3101': attribute type 1 has an invalid length. [ 472.389834][T18819] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.3101'. [ 472.506714][ T7014] IPVS: stop unused estimator thread 0... [ 472.512794][T12116] bond2: (slave bridge1): failed to get link speed/duplex [ 472.633535][T12121] bond2: (slave bridge1): failed to get link speed/duplex [ 472.773269][T12121] bond2: (slave bridge1): failed to get link speed/duplex [ 472.913990][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 473.222276][T12116] bond2: (slave bridge1): failed to get link speed/duplex [ 473.590037][T18866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3109'. [ 476.312163][ T7014] bond2: (slave bridge1): failed to get link speed/duplex [ 476.492081][T18433] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 476.533172][T18433] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 476.542135][T18859] lo speed is unknown, defaulting to 1000 [ 476.546176][T18433] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 476.610100][T18433] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 476.686167][T18433] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 476.713035][T18433] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 476.741166][T18899] syzkaller0: entered promiscuous mode [ 476.752087][T18899] syzkaller0: entered allmulticast mode [ 476.803566][T18433] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 476.825339][T18899] netlink: 'syz.1.3112': attribute type 1 has an invalid length. [ 476.855667][T18433] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 476.880352][T18903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3112'. [ 476.903112][T18903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3112'. [ 477.066550][T18899] bond11: entered promiscuous mode [ 477.076096][T18899] 8021q: adding VLAN 0 to HW filter on device bond11 [ 477.149381][T18907] bond11: (slave bridge7): making interface the new active one [ 477.184062][T18907] bridge7: entered promiscuous mode [ 477.202963][T18907] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 477.382720][T12123] bond2: (slave bridge1): failed to get link speed/duplex [ 477.446639][T18946] netlink: 'syz.4.3118': attribute type 29 has an invalid length. [ 477.455444][T18946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3118'. [ 477.502926][T12116] bond2: (slave bridge1): failed to get link speed/duplex [ 477.642498][T12115] bond2: (slave bridge1): failed to get link speed/duplex [ 477.683561][T18952] tipc: Enabled bearer , priority 0 [ 477.725268][T18953] tipc: Resetting bearer [ 477.818922][T18950] tipc: Disabling bearer [ 478.116075][T12115] bond2: (slave bridge1): failed to get link speed/duplex [ 478.230258][T18433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.423555][T18433] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.456902][T12128] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.464339][T12128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.864984][T12123] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.872382][T12123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.972352][T12128] bond2: (slave bridge1): failed to get link speed/duplex [ 479.192871][T12123] bond2: (slave bridge1): failed to get link speed/duplex [ 479.278711][T18992] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 479.330024][T12123] bond2: (slave bridge1): failed to get link speed/duplex [ 479.463662][T12123] bond2: (slave bridge1): failed to get link speed/duplex [ 479.698728][T19006] vlan2: entered allmulticast mode [ 479.720690][T19006] dummy0: entered allmulticast mode [ 479.762447][T12128] bond2: (slave bridge1): failed to get link speed/duplex [ 480.640859][T18433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.850278][T18433] veth0_vlan: entered promiscuous mode [ 480.891168][T18433] veth1_vlan: entered promiscuous mode [ 480.900474][T19047] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3137'. [ 481.011449][T18433] veth0_macvtap: entered promiscuous mode [ 481.037362][T18433] veth1_macvtap: entered promiscuous mode [ 481.091201][T18433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.138282][T18433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.158636][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.180327][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.227149][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.247385][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.329488][T12115] net_ratelimit: 9 callbacks suppressed [ 481.329518][T12115] bond2: (slave bridge1): failed to get link speed/duplex [ 481.468459][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.489642][T19057] Cannot find del_set index 0 as target [ 481.504704][T12128] bond2: (slave bridge1): failed to get link speed/duplex [ 481.514643][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.618538][T12128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.643644][T12123] bond2: (slave bridge1): failed to get link speed/duplex [ 481.649172][T12128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.762071][ T48] bond2: (slave bridge1): failed to get link speed/duplex [ 481.893058][T12128] bond2: (slave bridge1): failed to get link speed/duplex [ 482.022210][T12123] bond2: (slave bridge1): failed to get link speed/duplex [ 482.142071][T12115] bond2: (slave bridge1): failed to get link speed/duplex [ 482.434470][T12118] bond2: (slave bridge1): failed to get link speed/duplex [ 482.557492][T19087] tipc: Enabling of bearer rejected, failed to enable media [ 482.652003][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 482.803810][T12118] bond2: (slave bridge1): failed to get link speed/duplex [ 482.841386][T19090] tipc: Enabling of bearer rejected, failed to enable media [ 482.895980][T19090] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3149'. [ 483.123549][T19101] syzkaller0: entered promiscuous mode [ 483.142578][T19101] syzkaller0: entered allmulticast mode [ 483.160474][T19099] tipc: Enabled bearer , priority 0 [ 483.264000][T19099] tipc: Resetting bearer [ 483.295908][T19107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3154'. [ 483.348620][T19099] tipc: Disabling bearer [ 483.395799][T19107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3154'. [ 483.414361][T19112] netlink: 'syz.6.3156': attribute type 10 has an invalid length. [ 483.525798][T19112] team0: Port device veth1_to_hsr added [ 483.614406][ T30] audit: type=1804 audit(1780627904.479:14): pid=19120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3158" name="/newroot/4/cgroup.controllers" dev="tmpfs" ino=38 res=1 errno=0 [ 483.636633][T19121] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3157'. [ 483.730591][ T30] audit: type=1800 audit(1780627904.479:15): pid=19120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3158" name="cgroup.controllers" dev="tmpfs" ino=38 res=0 errno=0 [ 484.930141][T12133] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.942165][T19166] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3170'. [ 484.951540][T12133] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.984807][T12133] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.038905][T12133] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.082795][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 485.108599][T19166] veth5: entered allmulticast mode [ 485.123962][T19166] bond1: (slave veth5): Enslaving as an active interface with an up link [ 485.153026][T19166] bond1 (unregistering): (slave veth5): Releasing backup interface [ 485.173733][T19166] bond1 (unregistering): Released all slaves [ 486.049328][T19202] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3182'. [ 486.064359][T19203] netlink: 'syz.4.3182': attribute type 3 has an invalid length. [ 486.149507][T19207] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3184'. [ 486.192157][T19211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3184'. [ 486.212270][T19214] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3186'. [ 486.393567][T12128] net_ratelimit: 29 callbacks suppressed [ 486.393587][T12128] bond2: (slave bridge1): failed to get link speed/duplex [ 486.445605][T19221] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 486.476200][T19223] pim6reg1: entered allmulticast mode [ 486.573459][T12128] bond2: (slave bridge1): failed to get link speed/duplex [ 486.637101][T19230] netlink: 'syz.3.3190': attribute type 1 has an invalid length. [ 486.684810][T19230] vlan2: entered promiscuous mode [ 486.697853][T19230] veth0_to_team: entered promiscuous mode [ 486.726185][T19230] vlan2: entered allmulticast mode [ 486.748646][T19230] veth0_to_team: entered allmulticast mode [ 486.844516][T19230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3190'. [ 486.936881][T12123] bond2: (slave bridge1): failed to get link speed/duplex [ 487.054279][T12133] bond2: (slave bridge1): failed to get link speed/duplex [ 487.131376][T19255] netlink: 'syz.0.3195': attribute type 1 has an invalid length. [ 487.154811][T19257] netlink: 'syz.6.3196': attribute type 13 has an invalid length. [ 487.180912][T19257] netlink: 'syz.6.3196': attribute type 17 has an invalid length. [ 487.338782][T19257] wg0: left promiscuous mode [ 487.349086][T19257] wg0: left allmulticast mode [ 487.413824][T19268] RDS: rds_bind could not find a transport for ::9500:0:0:0, load rds_tcp or rds_rdma? [ 487.467074][T19257] vlan0: left promiscuous mode [ 487.541617][T19257] 8021q: adding VLAN 0 to HW filter on device eth0 [ 487.558910][T19257] 8021q: adding VLAN 0 to HW filter on device eth1 [ 487.577956][T19257] 8021q: adding VLAN 0 to HW filter on device eth2 [ 487.595777][T19257] 8021q: adding VLAN 0 to HW filter on device eth3 [ 487.613602][T19257] vlan2: left allmulticast mode [ 487.618609][T19257] dummy0: left allmulticast mode [ 487.628878][T19257] veth5: left allmulticast mode [ 487.695975][T19275] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 487.893252][T12115] bond2: (slave bridge1): failed to get link speed/duplex [ 488.019369][T19295] netlink: 'syz.0.3203': attribute type 9 has an invalid length. [ 488.054059][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 488.077969][T19295] netlink: 'syz.0.3203': attribute type 6 has an invalid length. [ 488.098972][T19295] netlink: 'syz.0.3203': attribute type 7 has an invalid length. [ 488.137062][T19295] netlink: 'syz.0.3203': attribute type 8 has an invalid length. [ 488.152100][ T5766] IPVS: starting estimator thread 0... [ 488.262652][T19299] IPVS: using max 32 ests per chain, 76800 per kthread [ 488.263989][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 488.423409][T12115] bond2: (slave bridge1): failed to get link speed/duplex [ 488.553320][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 488.679094][T12118] bond2: (slave bridge1): failed to get link speed/duplex [ 488.969623][T19320] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 489.280688][T19338] __nla_validate_parse: 8 callbacks suppressed [ 489.280712][T19338] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3212'. [ 489.385612][T19341] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 489.535767][T19344] netlink: 'syz.3.3217': attribute type 10 has an invalid length. [ 489.559966][T19344] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3217'. [ 489.584764][T19346] syzkaller1: entered promiscuous mode [ 489.590646][T19346] syzkaller1: entered allmulticast mode [ 489.598912][T19344] team0: entered promiscuous mode [ 489.607627][T19344] team_slave_0: entered promiscuous mode [ 489.614078][T19344] team_slave_1: entered promiscuous mode [ 489.620250][T19344] team0: entered allmulticast mode [ 489.626207][T19344] team_slave_0: entered allmulticast mode [ 489.636196][T19344] team_slave_1: entered allmulticast mode [ 489.644491][T19344] bridge0: port 3(team0) entered blocking state [ 489.651173][T19344] bridge0: port 3(team0) entered disabled state [ 489.665738][T19344] bridge0: port 3(team0) entered blocking state [ 489.672294][T19344] bridge0: port 3(team0) entered forwarding state [ 489.830815][T19356] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3221'. [ 490.050513][T19363] bridge0: port 3(team0) entered disabled state [ 490.146620][T19363] bridge_slave_0: left allmulticast mode [ 490.174025][T19363] bridge_slave_0: left promiscuous mode [ 490.185398][T19363] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.211505][T19378] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3225'. [ 490.224599][T19363] bridge_slave_1: left allmulticast mode [ 490.241397][T19363] bridge_slave_1: left promiscuous mode [ 490.254624][T19363] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.265331][T19375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3225'. [ 490.299588][T19363] bond0: (slave bond_slave_0): Releasing backup interface [ 490.328489][T19363] bond0: (slave bond_slave_1): Releasing backup interface [ 490.351801][T19363] team_slave_0: left promiscuous mode [ 490.359910][T19363] team_slave_0: left allmulticast mode [ 490.378922][T19363] team0: Port device team_slave_0 removed [ 490.404708][T19363] team_slave_1: left promiscuous mode [ 490.410615][T19363] team_slave_1: left allmulticast mode [ 490.425192][T19363] team0: Port device team_slave_1 removed [ 490.433980][T19363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.449388][T19363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.465347][T19363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.473629][T19363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.046689][T19409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3230'. [ 491.117969][T19415] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3231'. [ 491.137529][T19415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3231'. [ 491.149121][T19415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3231'. [ 491.240737][T19419] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3233'. [ 491.404276][T12123] net_ratelimit: 21 callbacks suppressed [ 491.404300][T12123] bond2: (slave bridge1): failed to get link speed/duplex [ 491.543176][T12123] bond2: (slave bridge1): failed to get link speed/duplex [ 491.601267][T19434] sctp: [Deprecated]: syz.4.3238 (pid 19434) Use of struct sctp_assoc_value in delayed_ack socket option. [ 491.601267][T19434] Use struct sctp_sack_info instead [ 491.682779][T12118] bond2: (slave bridge1): failed to get link speed/duplex [ 491.853241][T12123] bond2: (slave bridge1): failed to get link speed/duplex [ 491.878043][T19448] netlink: 'syz.6.3241': attribute type 1 has an invalid length. [ 491.983458][T12133] bond2: (slave bridge1): failed to get link speed/duplex [ 492.039469][T19454] netlink: 'syz.3.3242': attribute type 23 has an invalid length. [ 492.143478][T12118] bond2: (slave bridge1): failed to get link speed/duplex [ 492.264346][T12118] bond2: (slave bridge1): failed to get link speed/duplex [ 492.482200][T12133] bond2: (slave bridge1): failed to get link speed/duplex [ 495.339972][ T5648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 495.367016][ T5648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 495.409977][ T5648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 495.442537][ T5648] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 495.457941][ T5648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 496.713149][T12133] bond2: (slave bridge1): failed to get link speed/duplex [ 496.757636][T19490] __nla_validate_parse: 1 callbacks suppressed [ 496.757656][T19490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3249'. [ 496.792129][T19490] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3249'. [ 496.850076][T19491] syzkaller0: entered promiscuous mode [ 496.864880][T19491] syzkaller0: entered allmulticast mode [ 496.923544][T12115] bond2: (slave bridge1): failed to get link speed/duplex [ 497.063229][T12115] bond2: (slave bridge1): failed to get link speed/duplex [ 497.192888][T12115] bond2: (slave bridge1): failed to get link speed/duplex [ 497.332034][T12118] bond2: (slave bridge1): failed to get link speed/duplex [ 497.462260][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 497.562233][ T5650] Bluetooth: hci4: command tx timeout [ 497.603211][T19535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3259'. [ 497.644806][T19484] lo speed is unknown, defaulting to 1000 [ 497.653745][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 497.671794][T19535] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3259'. [ 497.802787][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 497.932112][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 498.132876][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 498.231738][T19553] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 498.493210][T19570] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3271'. [ 498.539866][T19570] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3271'. [ 498.742256][T19579] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 498.788074][T19586] tipc: Enabled bearer , priority 0 [ 498.818592][T19586] syzkaller0: entered promiscuous mode [ 498.831817][T19586] syzkaller0: entered allmulticast mode [ 498.880197][T19586] tipc: Resetting bearer [ 498.911170][T19585] tipc: Resetting bearer [ 498.933591][T19585] tipc: Disabling bearer [ 498.955190][T19593] vlan2: entered promiscuous mode [ 498.962764][T19593] bridge0: entered promiscuous mode [ 499.264779][T19484] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.272453][T19484] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.279878][T19484] bridge_slave_0: entered allmulticast mode [ 499.295965][T19484] bridge_slave_0: entered promiscuous mode [ 499.337221][T19606] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3280'. [ 499.376414][T19607] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3280'. [ 499.398159][T19484] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.412964][T19610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3281'. [ 499.426556][T19484] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.429376][T19610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3281'. [ 499.448837][T19484] bridge_slave_1: entered allmulticast mode [ 499.461144][T19610] netlink: 'syz.3.3281': attribute type 18 has an invalid length. [ 499.476206][T19484] bridge_slave_1: entered promiscuous mode [ 499.507593][T19613] xt_hashlimit: size too large, truncated to 1048576 [ 499.642804][ T5648] Bluetooth: hci4: command tx timeout [ 499.675947][T19618] netlink: 'syz.0.3283': attribute type 6 has an invalid length. [ 499.692072][T19618] netlink: 'syz.0.3283': attribute type 7 has an invalid length. [ 499.728372][T19618] netlink: 'syz.0.3283': attribute type 8 has an invalid length. [ 499.762310][T19618] netlink: 'syz.0.3283': attribute type 15 has an invalid length. [ 499.799471][T19616] syzkaller1: entered promiscuous mode [ 499.844285][T19616] syzkaller1: entered allmulticast mode [ 499.857503][T19484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.891368][T19484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.108835][T19484] team0: Port device team_slave_0 added [ 500.121135][T19484] team0: Port device team_slave_1 added [ 500.185501][T19638] nbd: must specify a device to reconfigure [ 500.240452][T19484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.256355][T19484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.329455][T19484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.361599][T19484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.377740][T19484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.461235][T19484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.631196][T19660] netlink: 'syz.0.3296': attribute type 6 has an invalid length. [ 500.642481][T19660] netlink: 'syz.0.3296': attribute type 7 has an invalid length. [ 500.659623][T19660] netlink: 'syz.0.3296': attribute type 8 has an invalid length. [ 500.839524][T19484] hsr_slave_0: entered promiscuous mode [ 500.872889][T19484] hsr_slave_1: entered promiscuous mode [ 500.895677][T19484] debugfs: 'hsr0' already exists in 'hsr' [ 500.919992][T19484] Cannot create hsr debugfs directory [ 501.242522][ T5650] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 501.262574][ T5650] Bluetooth: hci2: command 0x0406 tx timeout [ 501.736215][ T5650] Bluetooth: hci4: command tx timeout [ 501.745836][T12115] net_ratelimit: 2 callbacks suppressed [ 501.745855][T12115] bond2: (slave bridge1): failed to get link speed/duplex [ 501.944823][T19718] veth0_macvtap: left promiscuous mode [ 502.075130][T19720] __nla_validate_parse: 4 callbacks suppressed [ 502.075154][T19720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3313'. [ 502.079239][T19722] veth0: entered promiscuous mode [ 502.122791][T12115] bond2: (slave bridge1): failed to get link speed/duplex [ 502.138620][T19720] veth0 (unregistering): left promiscuous mode [ 502.210909][T19725] netlink: 'syz.6.3314': attribute type 21 has an invalid length. [ 502.220843][T19725] netlink: 'syz.6.3314': attribute type 22 has an invalid length. [ 502.234944][T19725] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3314'. [ 502.245486][T19726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3315'. [ 502.353450][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 502.408676][T19731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3316'. [ 502.507160][T19731] 8021q: adding VLAN 0 to HW filter on device bond1 [ 502.616676][T12115] bond2: (slave bridge1): failed to get link speed/duplex [ 502.679676][T19484] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 502.717780][T19484] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 502.731678][T19484] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 502.828456][T19484] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 502.856939][T19484] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 502.910354][T19484] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 502.939448][T19749] tipc: Enabled bearer , priority 10 [ 502.948402][T19748] tipc: Enabling of bearer rejected, already enabled [ 502.962608][T19749] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 502.978921][T19748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3322'. [ 503.022210][T19484] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 503.046205][T19484] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 503.087968][T19748] ip6tnl1: entered allmulticast mode [ 503.192249][T12123] bond2: (slave bridge1): failed to get link speed/duplex [ 503.372540][T12118] bond2: (slave bridge1): failed to get link speed/duplex [ 503.381231][T19782] netlink: 164448 bytes leftover after parsing attributes in process `syz.0.3327'. [ 503.413054][T19782] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3327'. [ 503.561253][T19788] bond1: Unable to set up delay as MII monitoring is disabled [ 503.607771][T19788] bond1 (unregistering): Released all slaves [ 503.713517][T12123] bond2: (slave bridge1): failed to get link speed/duplex [ 503.736341][T19484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.803705][ T5650] Bluetooth: hci4: command tx timeout [ 503.815014][T19484] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.849286][T12123] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.856636][T12123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.931097][ T7014] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.938521][ T7014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.965398][ T7014] bond2: (slave bridge1): failed to get link speed/duplex [ 503.996352][ T5737] tipc: Node number set to 3231045780 [ 504.019261][ T5294] veth0_macvtap: entered promiscuous mode [ 504.155166][T19806] mac80211_hwsim hwsim57 syzkaller0: entered promiscuous mode [ 504.173425][T19806] mac80211_hwsim hwsim57 syzkaller0: entered allmulticast mode [ 504.197794][T12123] bond2: (slave bridge1): failed to get link speed/duplex [ 504.354542][T19803] tipc: Resetting bearer [ 504.439162][T19814] syzkaller0: entered promiscuous mode [ 504.445847][T19814] syzkaller0: entered allmulticast mode [ 504.458627][T19812] syzkaller0: entered promiscuous mode [ 504.472145][T19812] syzkaller0: entered allmulticast mode [ 504.508797][T19812] tipc: Enabled bearer , priority 0 [ 504.684787][T19816] tipc: Resetting bearer [ 504.768578][T19811] tipc: Resetting bearer [ 504.859169][T19811] tipc: Disabling bearer [ 505.052837][T12123] bond2: (slave bridge1): failed to get link speed/duplex [ 505.398824][T19851] validate_nla: 4 callbacks suppressed [ 505.398935][T19851] netlink: 'syz.0.3342': attribute type 11 has an invalid length. [ 505.693046][T19860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3344'. [ 506.498900][T19484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.631004][T19896] netlink: 'syz.0.3351': attribute type 3 has an invalid length. [ 506.649720][T19896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3351'. [ 506.680181][T19896] netlink: 'syz.0.3351': attribute type 21 has an invalid length. [ 506.701246][T19894] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3352'. [ 506.745082][T19894] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 506.802966][T12133] net_ratelimit: 10 callbacks suppressed [ 506.802987][T12133] bond2: (slave bridge1): failed to get link speed/duplex [ 507.150684][T19484] veth0_vlan: entered promiscuous mode [ 507.169092][ T7014] bond2: (slave bridge1): failed to get link speed/duplex [ 507.210491][T19484] veth1_vlan: entered promiscuous mode [ 507.302053][ T7014] bond2: (slave bridge1): failed to get link speed/duplex [ 507.333524][T19925] x_tables: duplicate underflow at hook 3 [ 507.452827][T19484] veth0_macvtap: entered promiscuous mode [ 507.468723][T19928] lo speed is unknown, defaulting to 1000 [ 507.475594][ T7014] bond2: (slave bridge1): failed to get link speed/duplex [ 507.497651][T19484] veth1_macvtap: entered promiscuous mode [ 507.588329][T19484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.604351][ T7014] bond2: (slave bridge1): failed to get link speed/duplex [ 507.616708][T19934] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 507.674699][T19484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.795574][T12115] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.814635][T12115] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.894974][T12115] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.910110][T12115] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.042272][ T7014] bond2: (slave bridge1): failed to get link speed/duplex [ 508.232783][T12120] bond2: (slave bridge1): failed to get link speed/duplex [ 508.389270][T19952] netlink: 'syz.3.3365': attribute type 1 has an invalid length. [ 508.425635][T19951] __nla_validate_parse: 1 callbacks suppressed [ 508.425654][T19951] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3364'. [ 508.463725][T19952] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 508.485785][T19951] vlan4: entered promiscuous mode [ 508.499633][T19951] geneve1: entered promiscuous mode [ 508.505717][T19951] vlan4: entered allmulticast mode [ 508.511096][T19951] geneve1: entered allmulticast mode [ 508.599162][T12123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.607574][T12118] bond2: (slave bridge1): failed to get link speed/duplex [ 508.630953][T12123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.873554][T19965] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 509.101357][T19965] IPVS: set_ctl: invalid protocol: 115 100.1.1.2:20002 [ 509.148703][T12133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.157996][T12133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.172414][T12115] bond2: (slave bridge1): failed to get link speed/duplex [ 509.853506][T19992] veth0: entered promiscuous mode [ 509.872373][T19992] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3375'. [ 510.372721][T20013] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3382'. [ 510.417020][T20014] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3381'. [ 510.447378][T20017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3383'. [ 510.850211][T20037] netlink: 'syz.3.3389': attribute type 10 has an invalid length. [ 510.949197][T20037] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 510.993634][T20048] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3392'. [ 511.068248][T20054] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3390'. [ 511.074682][T20046] bond2: option primary_reselect: invalid value (6) [ 511.099828][T20046] bond2 (unregistering): Released all slaves [ 511.427515][T20069] mac80211_hwsim hwsim56 wlan0: entered promiscuous mode [ 511.442503][T20069] mac80211_hwsim hwsim56 wlan0: entered allmulticast mode [ 511.482840][T20069] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3398'. [ 511.614732][ T5788] hid-generic 0005:0007:0007.0003: collection stack underflow [ 511.648332][ T5788] hid-generic 0005:0007:0007.0003: item 0 2 0 12 parsing failed [ 511.679034][ T5788] hid-generic 0005:0007:0007.0003: probe with driver hid-generic failed with error -22 [ 511.902209][T12133] net_ratelimit: 18 callbacks suppressed [ 511.902230][T12133] bond2: (slave bridge1): failed to get link speed/duplex [ 511.925405][T20086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3405'. [ 511.935658][T12133] bond0: (slave bond_slave_0): interface is now down [ 511.987607][T12133] bond0: (slave bond_slave_1): interface is now down [ 512.032048][T12133] bond0: (slave ip6gretap1): interface is now down [ 512.043840][T12118] bond2: (slave bridge1): failed to get link speed/duplex [ 512.194580][T12133] bond0: now running without any active interface! [ 512.238319][T20095] sctp: [Deprecated]: syz.6.3406 (pid 20095) Use of int in maxseg socket option. [ 512.238319][T20095] Use struct sctp_assoc_value instead [ 512.302153][T20096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3408'. [ 512.324030][T12118] bond2: (slave bridge1): failed to get link speed/duplex [ 512.370552][T20098] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 512.452088][T12123] bond2: (slave bridge1): failed to get link speed/duplex [ 512.582006][T12133] bond2: (slave bridge1): failed to get link speed/duplex [ 512.710260][ T7014] bond2: (slave bridge1): failed to get link speed/duplex [ 512.854834][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 513.019446][ T7014] bond2: (slave bridge1): failed to get link speed/duplex [ 513.093123][T20134] netlink: 'syz.7.3419': attribute type 1 has an invalid length. [ 513.128534][T20133] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 513.173794][T20138] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 513.181813][T20133] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 513.353888][T12115] bond2: (slave bridge1): failed to get link speed/duplex [ 513.592629][T20157] __nla_validate_parse: 6 callbacks suppressed [ 513.592651][T20157] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3425'. [ 513.599068][T20155] tipc: Enabled bearer , priority 0 [ 513.606220][T20155] netlink: 136 bytes leftover after parsing attributes in process `syz.6.3424'. [ 513.651619][T20155] tipc: Resetting bearer [ 514.027018][T20170] bond0: entered promiscuous mode [ 514.042354][T20170] bond_slave_0: entered promiscuous mode [ 514.055673][T20170] bond_slave_1: entered promiscuous mode [ 514.080331][T20170] batadv0: entered promiscuous mode [ 514.092868][T20170] debugfs: 'hsr1' already exists in 'hsr' [ 514.112017][T20170] Cannot create hsr debugfs directory [ 514.331697][T20189] netlink: 840 bytes leftover after parsing attributes in process `syz.7.3436'. [ 514.373827][T20192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3434'. [ 514.634164][ T5873] tipc: Node number set to 3432914175 [ 514.714024][T20207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3439'. [ 514.916050][T20220] netlink: 152 bytes leftover after parsing attributes in process `syz.7.3442'. [ 515.097696][T20223] netlink: 'syz.3.3444': attribute type 11 has an invalid length. [ 515.248323][T20229] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3447'. [ 515.270108][T20229] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3447'. [ 515.284869][T20229] C: renamed from veth1_to_team (while UP) [ 515.297539][T20229] netlink: 'syz.6.3447': attribute type 2 has an invalid length. [ 515.305900][T20229] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3447'. [ 516.009666][T20275] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3458'. [ 516.992188][T12115] net_ratelimit: 29 callbacks suppressed [ 516.992209][T12115] bond2: (slave bridge1): failed to get link speed/duplex [ 517.133590][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 517.276173][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 517.432787][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 517.544052][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 517.692551][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 517.840519][T20372] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 517.880085][T20379] xt_hashlimit: max too large, truncated to 1048576 [ 517.912339][T12120] bond2: (slave bridge1): failed to get link speed/duplex [ 518.032228][T12120] bond2: (slave bridge1): failed to get link speed/duplex [ 518.153375][T12120] bond2: (slave bridge1): failed to get link speed/duplex [ 518.987349][T20426] lo speed is unknown, defaulting to 1000 [ 520.247494][T20350] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 520.726008][T20460] __nla_validate_parse: 7 callbacks suppressed [ 520.726027][T20460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3500'. [ 520.843871][T20457] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3498'. [ 520.884224][ T24] IPVS: starting estimator thread 0... [ 520.992366][T20471] IPVS: using max 24 ests per chain, 57600 per kthread [ 521.020401][T20477] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3505'. [ 521.048603][T20475] bridge2: entered promiscuous mode [ 521.062019][T20475] bridge2: entered allmulticast mode [ 521.099620][T20475] team0: Port device bridge2 added [ 521.507967][T20495] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3508'. [ 521.531275][T20495] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3508'. [ 521.735841][T20504] Unsupported ieee802154 address type: 0 [ 522.012169][T12130] net_ratelimit: 33 callbacks suppressed [ 522.012192][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 522.162008][ T7014] bond2: (slave bridge1): failed to get link speed/duplex [ 522.292720][ T7014] bond2: (slave bridge1): failed to get link speed/duplex [ 522.302789][T20523] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3518'. [ 522.602475][T20540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3520'. [ 522.618294][T20541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3520'. [ 522.710913][T20546] netlink: 'syz.4.3521': attribute type 39 has an invalid length. [ 522.793060][T12123] bond2: (slave bridge1): failed to get link speed/duplex [ 522.954394][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 522.983994][T20555] netlink: 'syz.6.3522': attribute type 1 has an invalid length. [ 523.124502][T20562] bond2: (slave geneve2): making interface the new active one [ 523.136420][T20562] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 523.217389][T12130] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 523.232500][T12130] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 523.252495][T12130] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 523.271042][T12130] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 523.280437][T20549] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3522'. [ 523.299210][T20549] 8021q: adding VLAN 0 to HW filter on device bond2 [ 523.312956][T12123] bond2: (slave bridge1): failed to get link speed/duplex [ 523.531176][T20549] tipc: Resetting bearer [ 523.573257][T12115] bond2: (slave bridge1): failed to get link speed/duplex [ 523.693465][T12123] bond2: (slave bridge1): failed to get link speed/duplex [ 523.783764][T20589] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3532'. [ 523.892903][T20595] lo speed is unknown, defaulting to 1000 [ 523.921484][T20599] ip6gre1: entered promiscuous mode [ 523.935221][T20599] ip6gre1: entered allmulticast mode [ 524.037476][T20598] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 524.072197][T12123] bond2: (slave bridge1): failed to get link speed/duplex [ 524.467088][T20613] netlink: 'syz.6.3537': attribute type 1 has an invalid length. [ 525.227853][T20647] xt_socket: unknown flags 0x8 [ 525.234970][T20648] xt_socket: unknown flags 0x8 [ 525.457458][T20662] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.467675][T20662] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.942830][T20671] team0: Port device team_slave_0 removed [ 525.989024][T20679] bridge0: port 3(vlan4) entered blocking state [ 525.996633][T20679] bridge0: port 3(vlan4) entered disabled state [ 526.015982][T20679] vlan4: entered allmulticast mode [ 526.035499][T20679] dummy0: entered allmulticast mode [ 526.057047][T20679] vlan4: entered promiscuous mode [ 526.064333][T20679] dummy0: entered promiscuous mode [ 526.105913][T20686] __nla_validate_parse: 11 callbacks suppressed [ 526.105935][T20686] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3558'. [ 526.128772][T20686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3558'. [ 526.133700][T20683] vlan0: entered promiscuous mode [ 526.145955][T20686] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3558'. [ 526.215223][T20688] tipc: Resetting bearer [ 526.266200][T20689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3559'. [ 526.381236][T20689] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3559'. [ 526.431296][T20700] netlink: 'syz.6.3562': attribute type 1 has an invalid length. [ 526.594450][T20700] bond3: entered promiscuous mode [ 526.616116][T20700] 8021q: adding VLAN 0 to HW filter on device bond3 [ 526.693025][T20716] Cannot find del_set index 0 as target [ 526.735105][T20711] 8021q: adding VLAN 0 to HW filter on device bond3 [ 526.750619][T20711] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 526.762246][T20711] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 526.789700][T20711] bond3: (slave vti0): making interface the new active one [ 526.802296][T20711] vti0: entered promiscuous mode [ 526.817111][T20711] bond3: (slave vti0): Enslaving as an active interface with an up link [ 526.883855][ T30] audit: type=1800 audit(1780627947.749:16): pid=20712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3563" name="memory.events" dev="tmpfs" ino=239 res=0 errno=0 [ 527.023916][T12128] net_ratelimit: 10 callbacks suppressed [ 527.023937][T12128] bond2: (slave bridge1): failed to get link speed/duplex [ 527.113143][T20725] netlink: 'syz.4.3567': attribute type 4 has an invalid length. [ 527.136836][T20725] netlink: 'syz.4.3567': attribute type 4 has an invalid length. [ 527.194358][T12115] bond2: (slave bridge1): failed to get link speed/duplex [ 527.333994][T12120] bond2: (slave bridge1): failed to get link speed/duplex [ 527.350682][T20732] sctp: [Deprecated]: syz.0.3570 (pid 20732) Use of int in max_burst socket option. [ 527.350682][T20732] Use struct sctp_assoc_value instead [ 527.395795][T20732] netlink: 'syz.0.3570': attribute type 1 has an invalid length. [ 527.415033][T20732] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3570'. [ 527.456645][T20734] syzkaller1: entered promiscuous mode [ 527.491254][T20734] syzkaller1: entered allmulticast mode [ 527.523442][T20737] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 527.600507][ T5712] IPVS: starting estimator thread 0... [ 527.633174][ T7014] bond2: (slave bridge1): failed to get link speed/duplex [ 527.702056][T20748] IPVS: using max 28 ests per chain, 67200 per kthread [ 527.752595][T12123] bond2: (slave bridge1): failed to get link speed/duplex [ 527.896219][ T7014] bond2: (slave bridge1): failed to get link speed/duplex [ 528.022144][T12128] bond2: (slave bridge1): failed to get link speed/duplex [ 528.145672][T12120] bond2: (slave bridge1): failed to get link speed/duplex [ 528.159014][T20737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3570'. [ 528.292405][T12128] bond2: (slave bridge1): failed to get link speed/duplex [ 528.346936][ T5873] IPVS: starting estimator thread 0... [ 528.462042][T20776] IPVS: using max 28 ests per chain, 67200 per kthread [ 528.497768][ T5873] IPVS: starting estimator thread 0... [ 528.517858][T20757] IPVS: sh: FWM 3 0x00000003 - no destination available [ 528.552989][T20769] lo speed is unknown, defaulting to 1000 [ 528.593592][T20783] IPVS: using max 25 ests per chain, 60000 per kthread [ 529.318162][T20788] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.403977][T20736] Bluetooth: hci6: command 0x0406 tx timeout [ 529.410263][T20736] Bluetooth: hci5: command 0x0406 tx timeout [ 529.642573][T20788] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.668036][T20816] netlink: 'syz.3.3593': attribute type 1 has an invalid length. [ 529.755667][T20816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 529.887086][T20828] netlink: 'syz.3.3593': attribute type 10 has an invalid length. [ 529.899884][T20788] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.902143][T20827] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 529.914050][T20828] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3593'. [ 530.159534][T20818] bond1: (slave veth7): Enslaving as an active interface with a down link [ 530.191378][T20816] bond1: (slave dummy0): making interface the new active one [ 530.206214][T20816] dummy0: entered promiscuous mode [ 530.212349][T20816] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 530.272383][T20832] syzkaller0: entered promiscuous mode [ 530.277945][T20832] syzkaller0: entered allmulticast mode [ 530.287859][T20828] bond1: (slave dummy0): Releasing active interface [ 534.265762][T20788] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.422167][T12123] net_ratelimit: 4 callbacks suppressed [ 534.422189][T12123] bond2: (slave bridge1): failed to get link speed/duplex [ 534.437916][T20853] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 534.644118][T12118] bond2: (slave bridge1): failed to get link speed/duplex [ 534.667037][T20865] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3603'. [ 534.708909][T20865] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3603'. [ 534.732903][T20865] netlink: 'syz.6.3603': attribute type 14 has an invalid length. [ 534.744538][T20859] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3601'. [ 534.767139][T20865] netlink: 'syz.6.3603': attribute type 11 has an invalid length. [ 534.783076][T12118] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.795240][T20866] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3601'. [ 534.840385][T12118] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.908448][T20870] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3604'. [ 535.013185][T12123] bond2: (slave bridge1): failed to get link speed/duplex [ 535.075097][T12123] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.209193][T20873] Bluetooth: MGMT ver 1.23 [ 535.219573][T20883] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3607'. [ 535.232433][T20883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 535.273100][ T7014] bond2: (slave bridge1): failed to get link speed/duplex [ 535.358682][T20888] netlink: 'syz.4.3609': attribute type 3 has an invalid length. [ 535.392285][T12128] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.413215][T12128] bond2: (slave bridge1): failed to get link speed/duplex [ 535.511492][T20888] netlink: 'syz.4.3609': attribute type 2 has an invalid length. [ 535.533719][T12120] bond2: (slave bridge1): failed to get link speed/duplex [ 535.555008][T20888] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3609'. [ 535.607884][T20899] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3612'. [ 535.616301][T20898] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3612'. [ 535.767263][T20911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.787550][T20899] bond4: option broadcast_neighbor: invalid value (30) [ 535.817141][T20899] bond4 (unregistering): Released all slaves [ 535.891390][T20898] bond4: option broadcast_neighbor: invalid value (30) [ 535.901380][T20898] bond4 (unregistering): Released all slaves [ 535.988094][ T7014] bond2: (slave bridge1): failed to get link speed/duplex [ 536.121360][T20926] xt_hashlimit: size too large, truncated to 1048576 [ 536.196664][T20927] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.252694][T20929] netlink: 'syz.6.3617': attribute type 1 has an invalid length. [ 536.264691][T20927] bridge_slave_0 (unregistering): left allmulticast mode [ 536.309322][T20929] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3617'. [ 536.312115][T20927] bridge_slave_0 (unregistering): left promiscuous mode [ 536.407080][T20927] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.522937][T12128] bond2: (slave bridge1): failed to get link speed/duplex [ 537.064039][T20970] macvlan2: entered promiscuous mode [ 537.069634][T20970] macvlan2: entered allmulticast mode [ 537.076131][T20970] team0: Device macvlan2 is already an upper device of the team interface [ 537.477413][T20985] syzkaller1: entered promiscuous mode [ 537.484461][T20985] syzkaller1: entered allmulticast mode [ 537.777126][T20998] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.784964][T20998] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.847653][T21002] xt_time: unknown flags 0xf4 [ 537.883923][T20998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.899347][T20998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.009386][T21001] netlink: 'syz.6.3638': attribute type 6 has an invalid length. [ 538.018096][T12123] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.028400][T12123] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.050070][T12123] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.078704][T12123] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.172866][T21005] netlink: 'syz.4.3641': attribute type 21 has an invalid length. [ 538.187446][T21005] netlink: 'syz.4.3641': attribute type 1 has an invalid length. [ 538.881813][T21035] mac80211_hwsim hwsim57 syzkaller0: left promiscuous mode [ 538.901952][T21035] mac80211_hwsim hwsim57 syzkaller0: left allmulticast mode [ 539.083012][ T5873] page_pool_release_retry() stalled pool shutdown: id 197, 1 inflight 60 sec [ 539.213646][T21048] netlink: 'syz.6.3651': attribute type 11 has an invalid length. [ 539.230743][T21050] tipc: Can't bind to reserved service type 0 [ 539.439221][T21053] mac80211_hwsim hwsim57 syzkaller0: entered promiscuous mode [ 539.447386][T21053] mac80211_hwsim hwsim57 syzkaller0: entered allmulticast mode [ 539.463015][T12130] net_ratelimit: 18 callbacks suppressed [ 539.463034][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 539.569616][T21055] geneve2: entered allmulticast mode [ 539.603407][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 539.722583][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 539.842604][T12123] bond2: (slave bridge1): failed to get link speed/duplex [ 540.094582][T12120] bond2: (slave bridge1): failed to get link speed/duplex [ 540.223808][T12123] bond2: (slave bridge1): failed to get link speed/duplex [ 540.342217][T12123] bond2: (slave bridge1): failed to get link speed/duplex [ 540.444920][ T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 540.462109][T12120] bond2: (slave bridge1): failed to get link speed/duplex [ 540.574680][T12120] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 540.632859][T12120] bond2: (slave bridge1): failed to get link speed/duplex [ 540.704425][T21113] __nla_validate_parse: 7 callbacks suppressed [ 540.704446][T21113] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3671'. [ 540.735121][T21113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 540.780547][T21115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3672'. [ 540.808636][T21115] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 540.822174][ T5737] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 540.923842][T21126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3674'. [ 541.129714][ T5294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 541.652787][T12128] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 541.664280][T12128] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 542.443123][ T5737] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 543.259421][T21095] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 543.445766][T21139] netlink: 25 bytes leftover after parsing attributes in process `syz.3.3679'. [ 543.466672][T21139] lo: entered promiscuous mode [ 543.485394][T21139] lo: entered allmulticast mode [ 543.496843][T21137] netlink: 'syz.3.3679': attribute type 4 has an invalid length. [ 543.678984][T21148] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3681'. [ 543.721071][T21153] syzkaller1: entered promiscuous mode [ 543.729289][T21153] syzkaller1: entered allmulticast mode [ 543.741085][T21153] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3682'. [ 543.961784][T21164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3684'. [ 543.976943][T21164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3684'. [ 544.098501][T21170] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 544.228806][T21176] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.236149][T21176] bridge0: port 2(bridge_slave_1) entered listening state [ 544.243678][T21176] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.251106][T21176] bridge0: port 1(bridge_slave_0) entered listening state [ 544.336826][T21179] xt_hashlimit: size too large, truncated to 1048576 [ 544.592689][ T7014] net_ratelimit: 33 callbacks suppressed [ 544.592712][ T7014] bond2: (slave bridge1): failed to get link speed/duplex [ 544.629137][T21189] syzkaller0: entered promiscuous mode [ 544.647061][T21189] syzkaller0: entered allmulticast mode [ 544.670105][T21189] tipc: Started in network mode [ 544.689111][T21189] tipc: Node identity 966250296afc, cluster identity 4711 [ 544.706645][T21189] tipc: Enabled bearer , priority 0 [ 544.744533][T21203] netlink: 'syz.3.3692': attribute type 10 has an invalid length. [ 544.769706][T21203] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3692'. [ 544.887479][T21188] tipc: Resetting bearer [ 544.938646][T21188] tipc: Disabling bearer [ 544.987367][T21203] geneve1: entered promiscuous mode [ 544.992950][T21203] geneve1: entered allmulticast mode [ 545.016650][T21203] team0: Port device geneve1 added [ 545.052657][ T7014] bond2: (slave bridge1): failed to get link speed/duplex [ 545.201989][T12128] bond2: (slave bridge1): failed to get link speed/duplex [ 545.228415][T21214] netlink: 'syz.6.3697': attribute type 1 has an invalid length. [ 545.312301][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 545.332518][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 545.340721][T21221] netlink: 'syz.7.3698': attribute type 5 has an invalid length. [ 545.432569][T12128] bond2: (slave bridge1): failed to get link speed/duplex [ 545.552669][T21228] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3701'. [ 545.573238][T21228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 545.632628][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 545.688975][T21231] netlink: 'syz.3.3702': attribute type 1 has an invalid length. [ 545.866183][T21231] 8021q: adding VLAN 0 to HW filter on device bond2 [ 545.922384][T12120] bond2: (slave bridge1): failed to get link speed/duplex [ 546.032103][T12120] bond2: (slave bridge1): failed to get link speed/duplex [ 546.107801][T21239] __nla_validate_parse: 1 callbacks suppressed [ 546.107821][T21239] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3703'. [ 546.163083][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 546.342529][T21248] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3706'. [ 546.610111][T21266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3711'. [ 546.631521][T21266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3711'. [ 546.648090][T21266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3711'. [ 546.658162][T21266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3711'. [ 546.959634][T21276] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3713'. [ 547.014457][T21282] syzkaller1: entered promiscuous mode [ 547.020401][T21282] syzkaller1: entered allmulticast mode [ 547.264450][T21292] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3719'. [ 547.273821][T21292] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3719'. [ 547.814826][T21317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3728'. [ 547.877095][T21319] dummy0: left promiscuous mode [ 548.000549][T21321] netlink: 'syz.7.3729': attribute type 1 has an invalid length. [ 548.034037][T21321] netlink: 'syz.7.3729': attribute type 1 has an invalid length. [ 549.104153][T21348] wg2: Caught tx_queue_len zero misconfig [ 549.338630][T21356] netlink: 'syz.0.3736': attribute type 1 has an invalid length. [ 549.624380][ T7014] net_ratelimit: 31 callbacks suppressed [ 549.624405][ T7014] bond2: (slave bridge1): failed to get link speed/duplex [ 549.752444][ T7014] bond2: (slave bridge1): failed to get link speed/duplex [ 549.862188][T12128] bond2: (slave bridge1): failed to get link speed/duplex [ 549.992015][T12128] bond2: (slave bridge1): failed to get link speed/duplex [ 550.102124][ T7014] bond2: (slave bridge1): failed to get link speed/duplex [ 550.222099][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 550.313143][T21397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.342675][T12128] bond2: (slave bridge1): failed to get link speed/duplex [ 550.452255][T12128] bond2: (slave bridge1): failed to get link speed/duplex [ 550.582543][T12128] bond2: (slave bridge1): failed to get link speed/duplex [ 550.856911][T21410] xt_hashlimit: max too large, truncated to 1048576 [ 550.864533][T21410] xt_hashlimit: overflow, try lower: 2/0 [ 550.992268][T21412] sctp: [Deprecated]: syz.6.3753 (pid 21412) Use of struct sctp_assoc_value in delayed_ack socket option. [ 550.992268][T21412] Use struct sctp_sack_info instead [ 551.025284][T21412] sctp: [Deprecated]: syz.6.3753 (pid 21412) Use of struct sctp_assoc_value in delayed_ack socket option. [ 551.025284][T21412] Use struct sctp_sack_info instead [ 552.922870][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 552.931242][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 553.202216][T21391] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 553.214476][T21396] netlink: 'syz.7.3747': attribute type 1 has an invalid length. [ 553.476513][T21434] __nla_validate_parse: 5 callbacks suppressed [ 553.476535][T21434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3758'. [ 553.518195][T21434] hsr_slave_0: left promiscuous mode [ 553.531004][T21434] hsr_slave_1: left promiscuous mode [ 553.833581][T21453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3764'. [ 553.885562][T21453] 8021q: adding VLAN 0 to HW filter on device bond3 [ 554.033338][T21447] bond3: entered allmulticast mode [ 554.105929][T21466] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3766'. [ 554.132547][T21466] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3766'. [ 554.306259][T21472] ip6t_srh: unknown srh invflags BA61 [ 554.309656][T21473] ip6t_srh: unknown srh invflags BA61 [ 554.589863][T21445] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 554.742869][ T7014] net_ratelimit: 36 callbacks suppressed [ 554.742891][ T7014] bond2: (slave bridge1): failed to get link speed/duplex [ 554.926779][ T7014] bond2: (slave bridge1): failed to get link speed/duplex [ 555.052137][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 555.172195][T12120] bond2: (slave bridge1): failed to get link speed/duplex [ 555.291294][T21503] netlink: set zone limit has 4 unknown bytes [ 555.403051][T12128] bond2: (slave bridge1): failed to get link speed/duplex [ 555.522317][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 555.642524][ T7014] bond2: (slave bridge1): failed to get link speed/duplex [ 555.791642][T21524] syzkaller0: entered promiscuous mode [ 555.808887][T21524] syzkaller0: entered allmulticast mode [ 555.831927][T12128] bond2: (slave bridge1): failed to get link speed/duplex [ 556.093552][T21534] netlink: 'syz.0.3785': attribute type 1 has an invalid length. [ 556.102063][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 556.178328][T21537] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 556.199141][T21537] bond4 (unregistering): Released all slaves [ 556.208391][T21540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3787'. [ 556.277898][T21540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3787'. [ 556.373120][ T5650] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 556.389207][ T5650] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 556.398711][ T5650] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 556.410559][ T5650] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 556.418957][ T5650] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 556.438391][T21545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3789'. [ 556.479873][T21543] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3788'. [ 556.513459][T21545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3789'. [ 556.565447][T21545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3789'. [ 557.069650][T21574] macvlan2: entered promiscuous mode [ 557.083081][T21574] macvlan2: entered allmulticast mode [ 557.130947][T21572] syzkaller0: entered promiscuous mode [ 557.149561][T21572] syzkaller0: entered allmulticast mode [ 557.437115][T21585] netlink: 'syz.3.3800': attribute type 1 has an invalid length. [ 557.505574][T21585] bond4: entered promiscuous mode [ 557.507671][T21590] FAULT_INJECTION: forcing a failure. [ 557.507671][T21590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.514495][T21585] 8021q: adding VLAN 0 to HW filter on device bond4 [ 557.544986][T21546] lo speed is unknown, defaulting to 1000 [ 557.596896][T21586] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 557.625369][T21590] CPU: 1 UID: 0 PID: 21590 Comm: syz.6.3801 Not tainted syzkaller #0 PREEMPT(full) [ 557.625403][T21590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 557.625417][T21590] Call Trace: [ 557.625426][T21590] [ 557.625436][T21590] dump_stack_lvl+0xe8/0x150 [ 557.625470][T21590] should_fail_ex+0x412/0x560 [ 557.625503][T21590] _copy_from_user+0x2d/0xb0 [ 557.625530][T21590] ipv6_set_mcast_msfilter+0x148/0x310 [ 557.625672][T21590] do_ipv6_setsockopt+0x12ee/0x3150 [ 557.625701][T21590] ? get_pid_task+0x20/0x1f0 [ 557.625738][T21590] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 557.625770][T21590] ? get_pid_task+0x20/0x1f0 [ 557.625795][T21590] ? get_pid_task+0x20/0x1f0 [ 557.625819][T21590] ? get_pid_task+0x20/0x1f0 [ 557.625867][T21590] ? __lock_acquire+0x6b5/0x2cf0 [ 557.625912][T21590] ? aa_sk_perm+0x6d5/0x900 [ 557.625945][T21590] ? __fget_files+0x2a/0x420 [ 557.625978][T21590] ? __pfx_aa_sk_perm+0x10/0x10 [ 557.626010][T21590] ? __fget_files+0x2a/0x420 [ 557.626034][T21590] ? aa_sock_opt_perm+0xff/0x1a0 [ 557.626068][T21590] ipv6_setsockopt+0x59/0x170 [ 557.626093][T21590] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 557.626162][T21590] do_sock_setsockopt+0x17c/0x1b0 [ 557.626191][T21590] __x64_sys_setsockopt+0x13d/0x1b0 [ 557.626215][T21590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.626239][T21590] do_syscall_64+0x174/0x580 [ 557.626263][T21590] ? trace_irq_disable+0x3b/0x140 [ 557.626294][T21590] ? clear_bhb_loop+0x40/0x90 [ 557.626321][T21590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.626340][T21590] RIP: 0033:0x7f12eef9ce59 [ 557.626361][T21590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.626377][T21590] RSP: 002b:00007f12ed1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 557.626400][T21590] RAX: ffffffffffffffda RBX: 00007f12ef215fa0 RCX: 00007f12eef9ce59 [ 557.626415][T21590] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000004 [ 557.626427][T21590] RBP: 00007f12ed1f6090 R08: 0000000000000190 R09: 0000000000000000 [ 557.626440][T21590] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 557.626453][T21590] R13: 00007f12ef216038 R14: 00007f12ef215fa0 R15: 00007ffd63d41db8 [ 557.626489][T21590] [ 558.185897][T21605] xt_hashlimit: max too large, truncated to 1048576 [ 558.198438][T21605] xt_ecn: cannot match TCP bits for non-tcp packets [ 558.522904][ T5650] Bluetooth: hci8: command tx timeout [ 558.649442][T21624] __nla_validate_parse: 4 callbacks suppressed [ 558.649460][T21624] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3811'. [ 558.706780][T21621] syzkaller0: entered promiscuous mode [ 558.712597][T21621] syzkaller0: entered allmulticast mode [ 558.731962][T21621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3810'. [ 558.851246][T21630] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3812'. [ 558.881782][T21630] netlink: 'syz.7.3812': attribute type 9 has an invalid length. [ 558.948412][T12128] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.958083][T12128] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.004595][T12128] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.014524][T12128] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.030715][T21630] netlink: 'syz.7.3812': attribute type 3 has an invalid length. [ 559.132670][T21639] bond4: entered promiscuous mode [ 559.138489][T21639] 8021q: adding VLAN 0 to HW filter on device bond4 [ 559.178799][T21546] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.194888][T21546] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.217317][T21546] bridge_slave_0: entered allmulticast mode [ 559.235997][T21642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3815'. [ 559.250099][T21546] bridge_slave_0: entered promiscuous mode [ 559.275058][T21546] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.287173][T21546] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.294976][T21546] bridge_slave_1: entered allmulticast mode [ 559.305814][T21546] bridge_slave_1: entered promiscuous mode [ 559.391651][T21647] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3817'. [ 559.469120][T21546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.127725][ T5650] Bluetooth: hci3: command 0x0406 tx timeout [ 560.615287][ T5648] Bluetooth: hci8: command tx timeout [ 562.695118][ T5648] Bluetooth: hci8: command tx timeout [ 563.371181][T21546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.387226][T21654] geneve3: entered promiscuous mode [ 563.493707][T12120] net_ratelimit: 16 callbacks suppressed [ 563.493728][T12120] bond2: (slave bridge1): failed to get link speed/duplex [ 563.553960][T21546] team0: Port device team_slave_0 added [ 563.586698][T21546] team0: Port device team_slave_1 added [ 563.595595][T21672] FAULT_INJECTION: forcing a failure. [ 563.595595][T21672] name failslab, interval 1, probability 0, space 0, times 0 [ 563.612835][T21672] CPU: 1 UID: 0 PID: 21672 Comm: syz.7.3824 Not tainted syzkaller #0 PREEMPT(full) [ 563.612861][T21672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 563.612874][T21672] Call Trace: [ 563.612883][T21672] [ 563.612892][T21672] dump_stack_lvl+0xe8/0x150 [ 563.612923][T21672] should_fail_ex+0x412/0x560 [ 563.612953][T21672] should_failslab+0xa8/0x100 [ 563.612979][T21672] __kmalloc_cache_noprof+0x88/0x660 [ 563.613011][T21672] ? ip6_mc_add_src+0x750/0xf90 [ 563.613137][T21672] ip6_mc_add_src+0x750/0xf90 [ 563.613181][T21672] ip6_mc_msfilter+0x9da/0xf50 [ 563.613218][T21672] ipv6_set_mcast_msfilter+0x25e/0x310 [ 563.613254][T21672] do_ipv6_setsockopt+0x12ee/0x3150 [ 563.613281][T21672] ? get_pid_task+0x20/0x1f0 [ 563.613317][T21672] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 563.613345][T21672] ? get_pid_task+0x20/0x1f0 [ 563.613370][T21672] ? get_pid_task+0x20/0x1f0 [ 563.613393][T21672] ? get_pid_task+0x20/0x1f0 [ 563.613431][T21672] ? __lock_acquire+0x6b5/0x2cf0 [ 563.613473][T21672] ? aa_sk_perm+0x6d5/0x900 [ 563.613519][T21672] ? __fget_files+0x2a/0x420 [ 563.613550][T21672] ? __pfx_aa_sk_perm+0x10/0x10 [ 563.613582][T21672] ? __fget_files+0x2a/0x420 [ 563.613604][T21672] ? aa_sock_opt_perm+0xff/0x1a0 [ 563.613637][T21672] ipv6_setsockopt+0x59/0x170 [ 563.613665][T21672] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 563.613698][T21672] do_sock_setsockopt+0x17c/0x1b0 [ 563.613726][T21672] __x64_sys_setsockopt+0x13d/0x1b0 [ 563.613752][T21672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.613776][T21672] do_syscall_64+0x174/0x580 [ 563.613807][T21672] ? trace_irq_disable+0x3b/0x140 [ 563.613839][T21672] ? clear_bhb_loop+0x40/0x90 [ 563.613864][T21672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.613884][T21672] RIP: 0033:0x7f24e859ce59 [ 563.613904][T21672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.613922][T21672] RSP: 002b:00007f24e94a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 563.613944][T21672] RAX: ffffffffffffffda RBX: 00007f24e8815fa0 RCX: 00007f24e859ce59 [ 563.613963][T21672] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000004 [ 563.613974][T21672] RBP: 00007f24e94a7090 R08: 0000000000000190 R09: 0000000000000000 [ 563.613987][T21672] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 563.614000][T21672] R13: 00007f24e8816038 R14: 00007f24e8815fa0 R15: 00007ffd617a3d88 [ 563.614035][T21672] [ 563.878705][T12120] bond2: (slave bridge1): failed to get link speed/duplex [ 563.985639][T21675] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3826'. [ 564.044928][T21546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.074573][T21546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.168812][T21546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.202819][T12116] bond2: (slave bridge1): failed to get link speed/duplex [ 564.216466][T21546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.244326][T21546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.336123][T21546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.487245][T21693] netlink: 'syz.6.3830': attribute type 10 has an invalid length. [ 564.548396][T21692] netlink: 41 bytes leftover after parsing attributes in process `syz.6.3830'. [ 564.567970][T21692] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3830'. [ 564.701258][T21546] hsr_slave_0: entered promiscuous mode [ 564.712826][T21546] hsr_slave_1: entered promiscuous mode [ 564.723872][T21546] debugfs: 'hsr0' already exists in 'hsr' [ 564.734393][T21546] Cannot create hsr debugfs directory [ 564.761949][ T5648] Bluetooth: hci8: command tx timeout [ 567.539800][T21693] syz_tun: entered promiscuous mode [ 567.617292][T21693] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 567.627739][T21692] netlink: 41 bytes leftover after parsing attributes in process `syz.6.3830'. [ 567.642125][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 567.794535][T21708] xt_hashlimit: max too large, truncated to 1048576 [ 567.814401][T21708] No such timeout policy "syz1" [ 567.874808][T21711] xt_nfacct: accounting object `syz0' does not exist [ 567.888801][T21714] netlink: 'syz.3.3834': attribute type 1 has an invalid length. [ 567.898131][T12118] bond2: (slave bridge1): failed to get link speed/duplex [ 568.004660][T21721] FAULT_INJECTION: forcing a failure. [ 568.004660][T21721] name failslab, interval 1, probability 0, space 0, times 0 [ 568.021286][T21721] CPU: 1 UID: 0 PID: 21721 Comm: syz.7.3836 Not tainted syzkaller #0 PREEMPT(full) [ 568.021320][T21721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 568.021333][T21721] Call Trace: [ 568.021341][T21721] [ 568.021350][T21721] dump_stack_lvl+0xe8/0x150 [ 568.021382][T21721] should_fail_ex+0x412/0x560 [ 568.021411][T21721] should_failslab+0xa8/0x100 [ 568.021435][T21721] __kmalloc_cache_noprof+0x88/0x660 [ 568.021466][T21721] ? ip6_mc_add_src+0x750/0xf90 [ 568.021497][T21721] ip6_mc_add_src+0x750/0xf90 [ 568.021540][T21721] ip6_mc_msfilter+0x9da/0xf50 [ 568.021580][T21721] ipv6_set_mcast_msfilter+0x25e/0x310 [ 568.021617][T21721] do_ipv6_setsockopt+0x12ee/0x3150 [ 568.021644][T21721] ? get_pid_task+0x20/0x1f0 [ 568.021681][T21721] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 568.021710][T21721] ? get_pid_task+0x20/0x1f0 [ 568.021735][T21721] ? get_pid_task+0x20/0x1f0 [ 568.021759][T21721] ? get_pid_task+0x20/0x1f0 [ 568.021798][T21721] ? __lock_acquire+0x6b5/0x2cf0 [ 568.021844][T21721] ? aa_sk_perm+0x6d5/0x900 [ 568.021882][T21721] ? __fget_files+0x2a/0x420 [ 568.021913][T21721] ? __pfx_aa_sk_perm+0x10/0x10 [ 568.021944][T21721] ? __fget_files+0x2a/0x420 [ 568.021966][T21721] ? aa_sock_opt_perm+0xff/0x1a0 [ 568.022000][T21721] ipv6_setsockopt+0x59/0x170 [ 568.022027][T21721] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 568.022060][T21721] do_sock_setsockopt+0x17c/0x1b0 [ 568.022087][T21721] __x64_sys_setsockopt+0x13d/0x1b0 [ 568.022112][T21721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.022133][T21721] do_syscall_64+0x174/0x580 [ 568.022155][T21721] ? trace_irq_disable+0x3b/0x140 [ 568.022185][T21721] ? clear_bhb_loop+0x40/0x90 [ 568.022209][T21721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.022229][T21721] RIP: 0033:0x7f24e859ce59 [ 568.022248][T21721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.022266][T21721] RSP: 002b:00007f24e94a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 568.022288][T21721] RAX: ffffffffffffffda RBX: 00007f24e8815fa0 RCX: 00007f24e859ce59 [ 568.022302][T21721] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000004 [ 568.022315][T21721] RBP: 00007f24e94a7090 R08: 0000000000000190 R09: 0000000000000000 [ 568.022326][T21721] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 568.022338][T21721] R13: 00007f24e8816038 R14: 00007f24e8815fa0 R15: 00007ffd617a3d88 [ 568.022385][T21721] [ 568.291043][T21714] 8021q: adding VLAN 0 to HW filter on device bond5 [ 568.329905][T21716] vlan3: entered allmulticast mode [ 568.335467][T21716] veth0_to_bond: entered allmulticast mode [ 568.377825][T21730] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3837'. [ 568.400162][T21716] bond5: (slave vlan3): Enslaving as an active interface with a down link [ 568.430338][T21732] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3837'. [ 568.486753][T21735] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3835'. [ 568.531169][T21735] gretap0: entered promiscuous mode [ 568.678879][T21730] 8021q: adding VLAN 0 to HW filter on device bond2 [ 568.696958][T21725] syzkaller1: entered promiscuous mode [ 568.707351][T21725] syzkaller1: entered allmulticast mode [ 568.855344][T21748] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3841'. [ 569.062688][T12116] bond2: (slave bridge1): failed to get link speed/duplex [ 569.158409][T21759] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3843'. [ 569.182181][T12128] bond2: (slave bridge1): failed to get link speed/duplex [ 569.192045][T21758] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3843'. [ 569.252769][T21768] FAULT_INJECTION: forcing a failure. [ 569.252769][T21768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.272575][T21764] bond6: entered allmulticast mode [ 569.280780][T21764] 8021q: adding VLAN 0 to HW filter on device bond6 [ 569.286511][T21768] CPU: 1 UID: 0 PID: 21768 Comm: syz.7.3846 Not tainted syzkaller #0 PREEMPT(full) [ 569.286586][T21768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 569.286626][T21768] Call Trace: [ 569.286651][T21768] [ 569.286688][T21768] dump_stack_lvl+0xe8/0x150 [ 569.286785][T21768] should_fail_ex+0x412/0x560 [ 569.286865][T21768] _copy_to_user+0x31/0xb0 [ 569.286940][T21768] simple_read_from_buffer+0xe1/0x170 [ 569.287031][T21768] proc_fail_nth_read+0x1bb/0x230 [ 569.287173][T21768] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 569.287256][T21768] ? rw_verify_area+0x2a6/0x4d0 [ 569.287340][T21768] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 569.287414][T21768] vfs_read+0x20c/0xa70 [ 569.287508][T21768] ? __pfx___mutex_lock+0x10/0x10 [ 569.287633][T21768] ? __pfx_vfs_read+0x10/0x10 [ 569.287664][T21768] ? __fget_files+0x2a/0x420 [ 569.287692][T21768] ? __fget_files+0x3a0/0x420 [ 569.287715][T21768] ? __fget_files+0x2a/0x420 [ 569.287749][T21768] ksys_read+0x150/0x270 [ 569.287781][T21768] ? __pfx_ksys_read+0x10/0x10 [ 569.287819][T21768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.287841][T21768] do_syscall_64+0x174/0x580 [ 569.287861][T21768] ? trace_irq_disable+0x3b/0x140 [ 569.287893][T21768] ? clear_bhb_loop+0x40/0x90 [ 569.287919][T21768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.287939][T21768] RIP: 0033:0x7f24e855d68e [ 569.287958][T21768] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 569.287979][T21768] RSP: 002b:00007f24e94a6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 569.288000][T21768] RAX: ffffffffffffffda RBX: 00007f24e94a76c0 RCX: 00007f24e855d68e [ 569.288065][T21768] RDX: 000000000000000f RSI: 00007f24e94a70a0 RDI: 0000000000000005 [ 569.288111][T21768] RBP: 00007f24e94a7090 R08: 0000000000000000 R09: 0000000000000000 [ 569.288137][T21768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.288175][T21768] R13: 00007f24e8816038 R14: 00007f24e8815fa0 R15: 00007ffd617a3d88 [ 569.288278][T21768] [ 569.572502][T12115] bond2: (slave bridge1): failed to get link speed/duplex [ 569.627552][T21776] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3849'. [ 569.717770][T21778] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3850'. [ 569.727456][T21779] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3849'. [ 569.742352][T12133] bond2: (slave bridge1): failed to get link speed/duplex [ 569.759535][T21776] gretap0: entered promiscuous mode [ 569.782068][T21779] 0ªî{X¹¦: renamed from gretap0 [ 569.806489][T21779] 0ªî{X¹¦: left promiscuous mode [ 569.812225][T21779] 0ªî{X¹¦: entered allmulticast mode [ 569.823289][T21779] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 570.028612][T21786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3852'. [ 570.063162][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 570.100657][T21791] netlink: 211720 bytes leftover after parsing attributes in process `syz.6.3853'. [ 570.269630][T21795] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3854'. [ 570.329271][T21795] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci8/hci8:200/input8 [ 570.595352][T21546] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 570.690881][T21546] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 570.727521][T21546] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 570.770809][T21546] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 570.830100][T21546] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 570.903293][T21546] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 570.932382][T21546] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 570.989271][T21546] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 571.022539][T12116] bond2: (slave bridge1): failed to get link speed/duplex [ 571.264873][T12133] bond2: (slave bridge1): failed to get link speed/duplex [ 571.387720][T21546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.435898][T12130] bond2: (slave bridge1): failed to get link speed/duplex [ 571.493334][T21546] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.517720][T12130] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.525031][T12130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.548315][T12116] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.555686][T12116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.592510][T12133] bond2: (slave bridge1): failed to get link speed/duplex [ 571.666416][T21821] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3860'. [ 571.682469][T21821] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3860'. [ 571.737094][T21824] netlink: 'syz.0.3861': attribute type 5 has an invalid length. [ 571.764507][T21824] geneve2: entered promiscuous mode [ 571.770095][T21824] geneve2: entered allmulticast mode [ 571.784021][T12133] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 36434 - 0 [ 571.796747][T12133] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 36434 - 0 [ 571.822753][T12133] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 36434 - 0 [ 571.839671][T12133] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 36434 - 0 [ 572.138881][ T31] INFO: task syz.5.2873:17661 blocked for more than 143 seconds. [ 572.162930][ T31] Not tainted syzkaller #0 [ 572.182553][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 572.210966][ T31] task:syz.5.2873 state:D stack:26880 pid:17661 tgid:17653 ppid:16758 task_flags:0x400140 flags:0x00080002 [ 572.261898][ T31] Call Trace: [ 572.267885][ T31] [ 572.272334][ T31] __schedule+0x1821/0x5740 [ 572.278704][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 572.285715][ T31] ? __pfx___schedule+0x10/0x10 [ 572.291378][ T31] ? schedule+0x90/0x360 [ 572.302008][ T31] schedule+0x164/0x360 [ 572.308590][ T31] schedule_preempt_disabled+0x13/0x30 [ 572.317209][ T31] __mutex_lock+0x7f7/0x1550 [ 572.325854][ T31] ? __mutex_lock+0x608/0x1550 [ 572.331466][ T31] ? nfsd_nl_version_get_doit+0x181/0xcd0 [ 572.338724][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 572.352361][ T31] ? __nlmsg_put+0xef/0x1b0 [ 572.365603][ T31] ? genlmsg_put+0x137/0x2e0 [ 572.371238][ T31] nfsd_nl_version_get_doit+0x181/0xcd0 [ 572.378158][ T31] ? __nla_parse+0x40/0x60 [ 572.383612][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 572.390615][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 572.399000][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 572.407912][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 572.416230][ T31] ? __asan_memcpy+0x40/0x70 [ 572.423935][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 572.436626][ T31] genl_rcv_msg+0x61c/0x7a0 [ 572.442871][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 572.448646][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 572.464362][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 572.470693][ T31] netlink_rcv_skb+0x232/0x4b0 [ 572.477509][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 572.484386][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 572.490557][ T31] ? down_read+0x270/0x2e0 [ 572.497540][ T31] ? genl_rcv+0xd/0x40 [ 572.508027][ T31] genl_rcv+0x28/0x40 [ 572.513491][ T31] netlink_unicast+0x75c/0x8e0 [ 572.519328][ T31] netlink_sendmsg+0x813/0xb40 [ 572.527570][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.537374][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 572.543872][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 572.549988][ T31] ____sys_sendmsg+0x972/0x9f0 [ 572.555956][ T31] ? __might_fault+0xaf/0x130 [ 572.561430][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 572.567660][ T31] ? import_iovec+0x73/0xa0 [ 572.573217][ T31] ___sys_sendmsg+0x2a5/0x360 [ 572.578730][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 572.584833][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 572.591053][ T31] ? futex_wait+0x2a2/0x390 [ 572.596479][ T31] ? __fget_files+0x2a/0x420 [ 572.603219][ T31] ? __fget_files+0x3a0/0x420 [ 572.608654][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 572.614577][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 572.620841][ T31] ? rcu_is_watching+0x15/0xb0 [ 572.627000][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.634445][ T31] do_syscall_64+0x174/0x580 [ 572.639933][ T31] ? trace_irq_disable+0x3b/0x140 [ 572.646311][ T31] ? clear_bhb_loop+0x40/0x90 [ 572.652492][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.660333][ T31] RIP: 0033:0x7f3799f9ce59 [ 572.665829][ T31] RSP: 002b:00007f379aec9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.676216][ T31] RAX: ffffffffffffffda RBX: 00007f379a215fa0 RCX: 00007f3799f9ce59 [ 572.687888][ T31] RDX: 0000000000008840 RSI: 0000200000000100 RDI: 0000000000000004 [ 572.711652][ T31] RBP: 00007f379a032d6f R08: 0000000000000000 R09: 0000000000000000 [ 572.721378][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.730883][ T31] R13: 00007f379a216038 R14: 00007f379a215fa0 R15: 00007ffea5b79b78 [ 572.744870][ T31] [ 572.748745][ T31] [ 572.748745][ T31] Showing all locks held in the system: [ 572.759718][ T31] 1 lock held by khungtaskd/31: [ 572.780392][ T31] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 572.792514][ T31] 2 locks held by getty/5387: [ 572.798087][ T31] #0: ffff888035f4f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 572.810606][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 572.843275][ T31] 3 locks held by kworker/u8:26/12118: [ 572.855817][ T31] #0: ffff888031736140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 572.892098][ T31] #1: ffffc900033d7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 572.912456][ T31] #2: ffffffff8fdc8f40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 572.922843][ T31] 2 locks held by syz.2.2516/16073: [ 572.928234][ T31] #0: ffffffff8fe393a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 572.937740][ T31] #1: ffffffff8ec8b1c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 572.950052][ T31] 2 locks held by syz.5.2873/17661: [ 572.955802][ T31] #0: ffffffff8fe393a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 572.964783][ T31] #1: ffffffff8ec8b1c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x181/0xcd0 [ 572.975466][ T31] 2 locks held by syz.1.3128/18992: [ 572.980704][ T31] #0: ffffffff8fe393a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 572.989891][ T31] #1: ffffffff8ec8b1c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 573.000557][ T31] 2 locks held by syz.4.3674/21126: [ 573.008053][ T31] #0: ffffffff8fe393a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 573.016623][ T31] #1: ffffffff8ec8b1c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 573.027181][ T31] 1 lock held by syz-executor/21546: [ 573.032634][ T31] #0: ffffffff8fdc8f40 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x65f/0xe30 [ 573.043324][ T31] 1 lock held by syz.6.3856/21803: [ 573.048674][ T31] #0: ffff8880778f3bc0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 573.060092][ T31] 2 locks held by syz.3.3860/21820: [ 573.065979][ T31] #0: ffff888058cb5e40 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 573.076848][ T31] #1: ffff88805fc28260 (sk_lock-AF_CAN){+.+.}-{0:0}, at: isotp_release+0x46d/0xa80 [ 573.087075][ T31] 1 lock held by syz.7.3864/21832: [ 573.092307][ T31] #0: ffffffff8fdc8f40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 573.103375][ T31] 2 locks held by dhcpcd/21837: [ 573.108297][ T31] #0: ffff888058cbbbc0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 573.120031][ T31] #1: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 573.131350][ T31] 2 locks held by dhcpcd/21838: [ 573.136328][ T31] #0: ffff888058ce1940 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 573.147203][ T31] #1: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 573.173971][ T31] [ 573.185405][ T31] ============================================= [ 573.185405][ T31] [ 573.207389][ T31] NMI backtrace for cpu 1 [ 573.207410][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 573.207433][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 573.207445][ T31] Call Trace: [ 573.207454][ T31] [ 573.207463][ T31] dump_stack_lvl+0xe8/0x150 [ 573.207494][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 573.207674][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 573.207717][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 573.207749][ T31] sys_info+0x135/0x170 [ 573.207799][ T31] watchdog+0xfd3/0x1030 [ 573.207845][ T31] ? watchdog+0x1c9/0x1030 [ 573.207883][ T31] kthread+0x389/0x470 [ 573.207911][ T31] ? __pfx_watchdog+0x10/0x10 [ 573.207939][ T31] ? __pfx_kthread+0x10/0x10 [ 573.207968][ T31] ret_from_fork+0x514/0xb70 [ 573.208007][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 573.208030][ T31] ? __switch_to+0xc79/0x1410 [ 573.208064][ T31] ? __pfx_kthread+0x10/0x10 [ 573.208092][ T31] ret_from_fork_asm+0x1a/0x30 [ 573.208134][ T31] [ 573.208142][ T31] Sending NMI from CPU 1 to CPUs 0: [ 573.323879][ C0] NMI backtrace for cpu 0 [ 573.323900][ C0] CPU: 0 UID: 0 PID: 5759 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 573.323920][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 573.323933][ C0] Workqueue: events iterate_cleanup_work [ 573.324104][ C0] RIP: 0010:lock_is_held_type+0xf2/0x150 [ 573.324127][ C0] Code: c5 0f 94 c3 eb 05 bb 01 00 00 00 48 c7 c7 12 27 22 8e e8 b1 1a 00 00 b8 ff ff ff ff 65 0f c1 05 f4 5c 90 07 83 f8 01 75 25 9c <58> a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 01 fb 89 d8 5b 41 [ 573.324142][ C0] RSP: 0018:ffffc90000007770 EFLAGS: 00000046 [ 573.324157][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000101 [ 573.324168][ C0] RDX: 0000000000000000 RSI: ffffffff8e222712 RDI: ffffffff8c28b7e0 [ 573.324180][ C0] RBP: 00000000ffffffff R08: ffff88806bf5f5c7 R09: 1ffff1100d7ebeb8 [ 573.324192][ C0] R10: dffffc0000000000 R11: ffffed100d7ebeb9 R12: 0000000000000046 [ 573.324205][ C0] R13: ffff8880270add00 R14: ffff8880b873aee0 R15: 0000000000000004 [ 573.324218][ C0] FS: 0000000000000000(0000) GS:ffff88812528a000(0000) knlGS:0000000000000000 [ 573.324232][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 573.324243][ C0] CR2: 00007f03ff035e9c CR3: 0000000021fe4000 CR4: 00000000003526f0 [ 573.324259][ C0] Call Trace: [ 573.324266][ C0] [ 573.324278][ C0] update_se+0x91/0x610 [ 573.324310][ C0] update_curr+0x75/0x4e0 [ 573.324339][ C0] dequeue_entities+0x1a8/0x3b20 [ 573.324378][ C0] dequeue_task_fair+0x200/0x660 [ 573.324404][ C0] detach_task+0x1c0/0x3a0 [ 573.324424][ C0] sched_balance_rq+0x3edc/0x5a60 [ 573.324463][ C0] ? __pfx_sched_balance_rq+0x10/0x10 [ 573.324486][ C0] ? irqentry_exit+0x218/0x8b0 [ 573.324538][ C0] sched_balance_domains+0x40f/0x900 [ 573.324559][ C0] ? sched_balance_domains+0xf9/0x900 [ 573.324580][ C0] handle_softirqs+0x22a/0x840 [ 573.324600][ C0] ? __irq_exit_rcu+0xca/0x220 [ 573.324623][ C0] __irq_exit_rcu+0xca/0x220 [ 573.324640][ C0] irq_exit_rcu+0x9/0x30 [ 573.324655][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 573.324673][ C0] [ 573.324679][ C0] [ 573.324686][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 573.324705][ C0] RIP: 0010:nf_ct_iterate_cleanup+0x4c4/0x520 [ 573.324748][ C0] Code: a2 92 bd f7 48 c7 c7 80 65 e4 8c be 31 09 00 00 31 d2 e8 af 29 cb f7 2e 2e 2e 31 c0 4c 8b 24 24 41 ff c4 44 3b 25 b8 fc 66 06 <73> 18 e8 85 7c fb f7 e9 d0 fb ff ff e8 7b 7c fb f7 eb df e8 74 7c [ 573.324762][ C0] RSP: 0018:ffffc90004687990 EFLAGS: 00000283 [ 573.324776][ C0] RAX: ffffffff89ca3a25 RBX: ffffc90004687a40 RCX: ffff8880270add00 [ 573.324789][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 573.324800][ C0] RBP: 0000000000000001 R08: ffffffff90308af7 R09: 1ffffffff206115e [ 573.324812][ C0] R10: dffffc0000000000 R11: fffffbfff206115f R12: 0000000000035d91 [ 573.324825][ C0] R13: ffff8881499aec80 R14: dffffc0000000000 R15: 1ffff920008d0f48 [ 573.324843][ C0] ? nf_ct_iterate_cleanup+0x4d5/0x520 [ 573.324866][ C0] ? nf_ct_iterate_cleanup+0x10e/0x520 [ 573.324886][ C0] ? __pfx_inet_cmp+0x10/0x10 [ 573.324907][ C0] iterate_cleanup_work+0xe8/0x1a0 [ 573.324929][ C0] ? __pfx_iterate_cleanup_work+0x10/0x10 [ 573.324954][ C0] ? process_scheduled_works+0xa70/0x1860 [ 573.324971][ C0] ? process_scheduled_works+0xa70/0x1860 [ 573.324990][ C0] process_scheduled_works+0xb5d/0x1860 [ 573.325027][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 573.325048][ C0] ? assign_work+0x3d5/0x5e0 [ 573.325068][ C0] worker_thread+0xa53/0xfc0 [ 573.325102][ C0] kthread+0x389/0x470 [ 573.325124][ C0] ? __pfx_worker_thread+0x10/0x10 [ 573.325140][ C0] ? __pfx_kthread+0x10/0x10 [ 573.325162][ C0] ret_from_fork+0x514/0xb70 [ 573.325182][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 573.325199][ C0] ? __switch_to+0xc79/0x1410 [ 573.325225][ C0] ? __pfx_kthread+0x10/0x10 [ 573.325247][ C0] ret_from_fork_asm+0x1a/0x30 [ 573.325283][ C0] [ 573.390384][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 573.390449][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 573.390512][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 573.390552][ T31] Call Trace: [ 573.390575][ T31] [ 573.390606][ T31] vpanic+0x56c/0xa60 [ 573.390689][ T31] ? __pfx___schedule+0x10/0x10 [ 573.390753][ T31] ? __pfx_vpanic+0x10/0x10 [ 573.390857][ T31] panic+0xc5/0xd0 [ 573.390912][ T31] ? __pfx_panic+0x10/0x10 [ 573.390977][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 573.391079][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 573.391192][ T31] watchdog+0x102c/0x1030 [ 573.391303][ T31] ? watchdog+0x1c9/0x1030 [ 573.391410][ T31] kthread+0x389/0x470 [ 573.391477][ T31] ? __pfx_watchdog+0x10/0x10 [ 573.391550][ T31] ? __pfx_kthread+0x10/0x10 [ 573.391632][ T31] ret_from_fork+0x514/0xb70 [ 573.391697][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 573.391780][ T31] ? __switch_to+0xc79/0x1410 [ 573.391868][ T31] ? __pfx_kthread+0x10/0x10 [ 573.391943][ T31] ret_from_fork_asm+0x1a/0x30 [ 573.392050][ T31] [ 573.829371][ T31] Kernel Offset: disabled [ 573.833837][ T31] Rebooting in 86400 seconds..