last executing test programs: 3m0.393395536s ago: executing program 3 (id=1140): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x1, 0xb}, {0x0, 0x9}, {0x3, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "a3b1ce122ce2c3a1c7c1be3af78e4a13"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040004) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=r1], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) (async) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) (async) setsockopt$inet_buf(r3, 0x0, 0x29, 0x0, 0xfcb5) (async) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f0000000000)={0x100, 0x0, 0x800, @remote, 'virt_wifi0\x00'}) 3m0.098005326s ago: executing program 3 (id=1144): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x2, 0x70bd09, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0xfff2, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000009c0)=ANY=[@ANYBLOB="d83900001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="18001a800c000200060000000000000008000200", @ANYRES32=0x0, @ANYBLOB="9f3937"], 0x39d8}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'tunl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x1, 0x20, 0x2, 0x9, {{0x7, 0x4, 0x3, 0x1b, 0x1c, 0x65, 0x0, 0x8, 0x2f, 0x0, @multicast2, @broadcast, {[@noop, @lsrr={0x83, 0x7, 0xaf, [@remote]}]}}}}}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000001040)=0x2a9, 0x4) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000200)={r5, @multicast2, @empty}, 0xc) 2m59.745727803s ago: executing program 3 (id=1147): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e23, 0x5, @local, 0x8001}, {0xa, 0x4e20, 0xfffffff7, @mcast1, 0x56}, 0xfffd, {[0x9, 0x6, 0x738b, 0x8, 0xffffff8c, 0xaa, 0x2, 0x80]}}, 0x5c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f00000006c0)='v', 0x1}], 0x1}, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, r3, 0x1, 0x70bd2b, 0x0, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000000c0)=0x1, 0x4) 2m59.336741005s ago: executing program 3 (id=1150): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x61, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x36, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000440)={r3, 0x7, 0x8, 0x5}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r6, r4, 0x25, 0x0, @void}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000500000018230000", @ANYRES32=r1, @ANYRES64=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000300)="b9630072a5f6fbd6c55d0fffff3356b7a51ac8d40b19", 0x0, 0xfe6, 0x60000000, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x2d, 0x0, 0xfe, 0xfffff038}, {0x28, 0xfc, 0xfd, 0x1}]}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000780)={'gretap0\x00', &(0x7f0000000740)={'syztnl1\x00', r4, 0x0, 0x8, 0xb5b, 0x6fe, {{0x6, 0x4, 0x2, 0x1d, 0x18, 0x67, 0x0, 0x5, 0x6, 0x0, @remote, @broadcast, {[@ra={0x94, 0x4}]}}}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f00000001c0), &(0x7f0000000380)='%-010d \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x61, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x36, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000440)={r3, 0x7, 0x8, 0x5}) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r6, r4, 0x25, 0x0, @void}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xf, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000500000018230000", @ANYRES32=r1, @ANYRES64=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000300)="b9630072a5f6fbd6c55d0fffff3356b7a51ac8d40b19", 0x0, 0xfe6, 0x60000000, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x2d, 0x0, 0xfe, 0xfffff038}, {0x28, 0xfc, 0xfd, 0x1}]}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000780)={'gretap0\x00', &(0x7f0000000740)={'syztnl1\x00', r4, 0x0, 0x8, 0xb5b, 0x6fe, {{0x6, 0x4, 0x2, 0x1d, 0x18, 0x67, 0x0, 0x5, 0x6, 0x0, @remote, @broadcast, {[@ra={0x94, 0x4}]}}}}}) (async) 2m59.109290191s ago: executing program 3 (id=1154): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000040)=',\\#\x00', 0x60100, &(0x7f00000000c0)={@_ha_fsid={[0x400, 0x2f]}, {0x6, 0x101, 0x9, 0x7f}}, 0xffffff45, &(0x7f0000000280), &(0x7f0000000300)=0x81}) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, @hci={0x1f, 0x0, 0x1}, @tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}, 0x3}}, @vsock={0x28, 0x0, 0xffffffff, @local}, 0x2, 0x0, 0x0, 0x0, 0x46, 0x0, 0x7dcf, 0xde48, 0x14}) r1 = socket$l2tp(0x2, 0x2, 0x73) getpeername(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x17, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x2c}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r6) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r7, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8800) connect$pptp(r3, &(0x7f0000000480)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000060a421e00"/18], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x58, 0x2, 0x6, 0x0, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5a53a1e67bf52f0e}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000340)=0x1) writev(r10, &(0x7f00000002c0)=[{&(0x7f0000000180)="55ff8ad072ddce1959", 0x9}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r11, @ANYBLOB="08000500", @ANYRES32=r11, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4) 2m58.700635708s ago: executing program 3 (id=1159): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x114, r1, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xb, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x2c, 0x0, &(0x7f0000000300)) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000003000000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0920000000000055090100411aa19f3d00000000000000dd00020000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94) (rerun: 32) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000140)={0x200000000000001, 0x2}, 0x38) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e0a, 0xb, @mcast2, 0x9}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11000000040000000400000010"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000000680)={{r5}, &(0x7f0000000540), 0x0}, 0x20) (async) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, 0x0, 0x0) (async) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) write(r7, &(0x7f0000000040)="54000000270001000000000000000000060100002000018008000200096370001400010002000801000000000000000000000000200001800800020074637000140001000200080200"/84, 0x54) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000000)='vegas', 0x5) 2m43.635204281s ago: executing program 32 (id=1159): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x114, r1, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xb, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x2c, 0x0, &(0x7f0000000300)) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000003000000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0920000000000055090100411aa19f3d00000000000000dd00020000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94) (rerun: 32) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000140)={0x200000000000001, 0x2}, 0x38) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e0a, 0xb, @mcast2, 0x9}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11000000040000000400000010"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000000680)={{r5}, &(0x7f0000000540), 0x0}, 0x20) (async) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, 0x0, 0x0) (async) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) write(r7, &(0x7f0000000040)="54000000270001000000000000000000060100002000018008000200096370001400010002000801000000000000000000000000200001800800020074637000140001000200080200"/84, 0x54) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000000)='vegas', 0x5) 2m41.384976424s ago: executing program 1 (id=1350): syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x6, 0xfffffff7) (async) syz_extract_tcp_res(&(0x7f0000000100)={0x41424344}, 0x6, 0xfffff3e4) syz_emit_ethernet(0x117, &(0x7f00000004c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @empty, @val={@void, {0x8100, 0x5, 0x0, 0x3}}, {@ipv4={0x800, @tcp={{0x11, 0x4, 0x3, 0x4, 0x105, 0x68, 0x0, 0x8, 0x6, 0x0, @remote, @local, {[@timestamp={0x44, 0xc, 0xd3, 0x0, 0x5, [0x4, 0x1]}, @ssrr={0x89, 0x23, 0x22, [@loopback, @remote, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @dev={0xac, 0x14, 0x14, 0x42}, @rand_addr=0x64010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x28}]}]}}, {{0x4e24, 0x4e22, r0, r1, 0x1, 0x0, 0xc, 0x1, 0x9d09, 0x0, 0x5, {[@window={0x3, 0xffffffffffffff4e, 0x2}, @mss={0x2, 0x4, 0x1000}, @eol, @mptcp=@capable={0x1e, 0x14, 0x8, 0x8, 0x2, 0x9, [0x9]}]}}, {"543b2f59a86dbbc507e30301bbc1ec493560a7ac6fb87aa33c0132cc6c7dbe515cfc3f327f0fcd970d11b6b704ebda6046b10165447f1c46bbad97d0fd04501e7bb02e0fcfef5b356d7af8ef6953251f6234b871fde4fedf4da66bd1c96c45cff3b1886749d10fcd15a8f43eb53aa5d21deee73e96bdbc2689d6b4fec5c6e66360a362345a6ead45a86d16847c46a85c51"}}}}}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="5400000020000100000000000000000006801000000000011800010014000100fc01000000000000000000000000000008000f00ffffffff140002002001000000000000000000000000e764778a6ae4320e9f122fd983a50000080017004e204e21"], 0x54}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000180)={0x9, 0x0, 0xf, 0xc}, &(0x7f00000001c0)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000180)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0x40}, @exit], &(0x7f00000001c0)='GPL\x00', 0x2, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r5 = socket(0x10, 0x3, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, 0x0, 0x0) (async) ioctl$int_in(r5, 0x5452, 0x0) sendmsg$AUDIT_LIST_RULES(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3f5, 0x200, 0x70bd28, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x502}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 2m40.901593187s ago: executing program 1 (id=1355): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000070000000100000021800300", @ANYRES32, @ANYBLOB="0010000800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000240), &(0x7f0000000340)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r4, r3, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000fc000000000000000000000000000000ff0200000000000000000000000000010000883e000890780daadf92d1a6ada29275e4bbbcd8cd88d3d2f4800e5ff26ec1923af6ef39632b5b4df277c861e3564399eaff09c1f2e0e65cbecb0363fc9f3e8e0cc7604b02c103bd338e73c26dfdcb46a351c75f464fc3027bf5f7ed2032d8c9676fd801ce7d4e2113289a6b684c91563d80262a935a377171efa23a1e5cb75df54ae02337643fc100b5c0e7017c25092d080914c2800fe1a692c2f45e11699183ae5db80ab22f2af313456f10c84b00"/231], 0x0) r5 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f00000000c0), 0x4) r6 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x0, 0x1, 0x9}, 0x10, 0x30d33, r8, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "0700567812080078", "12345678123456781234567812345678", "4aa45678", "0018f61d00"}, 0x28) sendto$inet(r1, &(0x7f0000000300)='\x00', 0xffffff5a, 0x40, 0x0, 0x0) 2m40.413106108s ago: executing program 1 (id=1357): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r1, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x12}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x4b4}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004801}, 0xc844) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@empty, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x482d, 0x4, 0x486f, 0x8, 0x5, 0x30, 0xc]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m39.507074336s ago: executing program 1 (id=1364): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) write$tun(0xffffffffffffffff, 0x0, 0x340a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100273d7000ffdb7132172f0000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x3f, 0x107, 0x70bd2b, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @pid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfbc, 0xe}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x54, r5, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x9}, {0x1}, {0x35, 0x2}, {0x8, 0x4}, {0x7, 0x2}, {0xfc, 0x6}, {0x5, 0x6}, {0x42, 0x6}], "8c4c3e90f5968962"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x1, 0x3}], "22d2e1916227ae64"}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$IP6T_SO_GET_REVISION_MATCH(r7, 0x29, 0x50, 0x0, &(0x7f0000000000)) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r8, 0x114, 0x5, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000640)="80", 0x1}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000840)="9c", 0x34000}], 0x1}, 0x4008010) 2m39.186713982s ago: executing program 1 (id=1368): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x2) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r1, 0x7ff, 0x6, 0x3}) ioctl$SIOCX25SENDCALLACCPT(r2, 0x89e9) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000100), 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000140)={0xc762, 0x7ff, 0x3347, @broadcast, 'macvlan1\x00'}) setsockopt$inet_tcp_int(r2, 0x6, 0x2c, &(0x7f0000000180)=0xcd05, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r3, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x10}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x40}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x24008810) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000380)={0x1, 0x0, 0x12, &(0x7f0000000340)=""/18}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001580)={r2, 0x0, 0xfc, 0x28, &(0x7f00000003c0)="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", &(0x7f00000004c0)=""/40, 0xb76, 0x0, 0x65, 0x1000, &(0x7f0000000500)="24ac4f4a1c2442eaaa107d1a6b42d306593877eb3523847aaf7fb094b3165bf0116cd22fe16589a902f40984d40c771827ca265123ab1d32bd15248cd7bd229cc3b3c5e37f88909cbae87d72331f56e2b4a95e8471dd5537f4a989bdf18e515f1096667390", &(0x7f0000000580)="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", 0x1, 0x0, 0x5}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001680)=@nat={'nat\x00', 0x1b, 0x5, 0x898, 0x160, 0x0, 0xffffffff, 0x0, 0x160, 0x7c8, 0x7c8, 0xffffffff, 0x7c8, 0x7c8, 0x5, &(0x7f0000001600), {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0x0, 0xffffffff, 0xff], [0xacb07ac7fe2b0a9b, 0xff, 0xffffffff, 0xffffffff], 'bond0\x00', 'pimreg\x00', {}, {}, 0x3c, 0x10, 0x3, 0x1}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@hbh={{0x48}, {0x6, 0x3, 0x1, [0x7, 0x400, 0x6, 0x7, 0x8000, 0x400, 0x1ff, 0x0, 0x6, 0x2, 0x13, 0x9, 0x2, 0x1, 0x6c, 0x2], 0x4}}, @common=@icmp6={{0x28}, {0x8, "9c3a"}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x6, @ipv6=@rand_addr=' \x01\x00', @ipv4=@loopback, @gre_key=0x9, @gre_key=0x99}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, [0x0, 0x0, 0xff000000, 0xffff00], [0xff, 0xffffff00, 0xffffffff, 0xffffffff], 'veth0_vlan\x00', 'pim6reg0\x00', {0xff}, {0x75b04482666407b3}, 0x32, 0x3, 0x4, 0x40}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@rt={{0x138}, {0xf, [0x5, 0x7], 0xf5, 0x30, 0x7, [@dev={0xfe, 0x80, '\x00', 0x36}, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1b}, @ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2], 0xa}}, @common=@hbh={{0x48}, {0x4, 0x4, 0x1, [0xa, 0x1, 0x8, 0x5, 0x8cc, 0x8, 0x100, 0x5, 0x0, 0x9, 0xb5ad, 0x3, 0x3, 0xfff, 0x9], 0xb}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x10, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@empty, @port=0x8, @icmp_id=0x66}}}, {{@ipv6={@rand_addr=' \x01\x00', @remote, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], [0xffffffff, 0x0, 0xff000000, 0xff], 'veth0_to_hsr\x00', 'ip6tnl0\x00', {}, {}, 0x72, 0x4d, 0x3, 0x14}, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@icmp6={{0x28}, {0x15, '0 ', 0x1}}, @common=@srh1={{0x90}, {0x89, 0x5, 0x1, 0xf, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xffffff00], [0xffffff00, 0xff, 0xff, 0xff000000], [0x0, 0xffffffff], 0xc4, 0x2020}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x6, @ipv6=@private2, @ipv6=@mcast2, @gre_key=0x2a, @gre_key=0x1000}}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x90, 0x8], 0x81a, 0x31, 0x1, [@private2={0xfc, 0x2, '\x00', 0x40}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @private0, @mcast1, @loopback, @local, @dev={0xfe, 0x80, '\x00', 0x3f}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'], 0x3}}, @common=@mh={{0x28}, {"f024", 0x1}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x16, @ipv4=@multicast1, @ipv4=@private=0xa010102, @icmp_id=0x66, @gre_key=0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x8f8) connect$pppl2tp(r2, &(0x7f0000001f80)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @multicast2}, 0x3, 0x1, 0x2}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = gettid() r7 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002000)={0x0}, &(0x7f0000002040)=0xc) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f00000021c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002180)={&(0x7f0000002080)={0xd4, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) setsockopt$MRT6_ASSERT(r2, 0x29, 0xcf, &(0x7f0000002200), 0x4) r9 = syz_genetlink_get_family_id$team(&(0x7f0000002280), r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000022c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000002300)={'ip6_vti0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000002340)=0x0, &(0x7f0000002380)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000002480)={'gre0\x00', &(0x7f00000023c0)={'sit0\x00', 0x0, 0x8, 0x20, 0x0, 0x7fffffff, {{0x1e, 0x4, 0x3, 0x11, 0x78, 0x67, 0x0, 0x3, 0x2f, 0x0, @empty, @broadcast, {[@ssrr={0x89, 0xb, 0xe4, [@rand_addr=0x64010102, @multicast1]}, @timestamp={0x44, 0xc, 0x18, 0x0, 0x6, [0xfffffd95, 0x400]}, @end, @rr={0x7, 0x7, 0x5b, [@broadcast]}, @timestamp_addr={0x44, 0x24, 0x80, 0x1, 0x9, [{@private=0xa010100, 0x2}, {@broadcast, 0xb}, {@empty, 0xbee0}, {@multicast2, 0x2}]}, @lsrr={0x83, 0x1f, 0xa6, [@rand_addr=0x1, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x39}, @empty, @multicast1, @broadcast]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000024c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000002500)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000029c0)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f0000002980)={&(0x7f0000002640)={0x30c, r9, 0x2, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r10}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x650e208a}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfe000000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4004}, 0x2004c804) 2m39.061669779s ago: executing program 1 (id=1369): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000400)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f00000002c0)=0x401, 0x4) sendto(r0, &(0x7f0000000540)="f6", 0xffa6, 0xd63a66976f7dfbe1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440d1}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="020320001300000000000000000000000400030003000000000000000000000000000000000000010000000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff00000000000000000000000000000000020001000000000000000000ce91912f030005000000000002004e21ffffffff0000000000000000010018"], 0x98}}, 0x40) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r3, 0x40786e88, &(0x7f00000004c0)={{&(0x7f0000000200)=[{0x29, 0x9, 0x2, {0x5, 0x1c9}, 0x9, 0xfffffffffffffffe, 0x9b2d}, {0x0, 0x8, 0x80000000, {0x8, 0xa76}, 0x1, 0x0, 0x4}], 0x2, 0x40, 0x4, 0x6}, {&(0x7f0000000340)=[{0x8, 0x44f}, {0x4c3, 0x3}, {0x1, 0xff}, {0x7, 0x6}], 0x4, 0x10, 0x8, 0xfffffffffffffffa}, {&(0x7f0000000380)=[0x1, 0x6, 0x2, 0x0, 0x3, 0xf], 0x6, 0x8, 0x9, 0xf26}, {&(0x7f00000003c0), 0x0, 0x28, 0xf801, 0x800}, {&(0x7f0000000440)=[0x5, 0x3, 0x2, 0x9, 0x6, 0x6, 0x0, 0x2, 0x80000001, 0xfffffffffffffffa], 0xa, 0x8, 0x9}}) 2m24.015547573s ago: executing program 33 (id=1369): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000400)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f00000002c0)=0x401, 0x4) sendto(r0, &(0x7f0000000540)="f6", 0xffa6, 0xd63a66976f7dfbe1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440d1}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="020320001300000000000000000000000400030003000000000000000000000000000000000000010000000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff00000000000000000000000000000000020001000000000000000000ce91912f030005000000000002004e21ffffffff0000000000000000010018"], 0x98}}, 0x40) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r3, 0x40786e88, &(0x7f00000004c0)={{&(0x7f0000000200)=[{0x29, 0x9, 0x2, {0x5, 0x1c9}, 0x9, 0xfffffffffffffffe, 0x9b2d}, {0x0, 0x8, 0x80000000, {0x8, 0xa76}, 0x1, 0x0, 0x4}], 0x2, 0x40, 0x4, 0x6}, {&(0x7f0000000340)=[{0x8, 0x44f}, {0x4c3, 0x3}, {0x1, 0xff}, {0x7, 0x6}], 0x4, 0x10, 0x8, 0xfffffffffffffffa}, {&(0x7f0000000380)=[0x1, 0x6, 0x2, 0x0, 0x3, 0xf], 0x6, 0x8, 0x9, 0xf26}, {&(0x7f00000003c0), 0x0, 0x28, 0xf801, 0x800}, {&(0x7f0000000440)=[0x5, 0x3, 0x2, 0x9, 0x6, 0x6, 0x0, 0x2, 0x80000001, 0xfffffffffffffffa], 0xa, 0x8, 0x9}}) 2m17.944511795s ago: executing program 4 (id=1598): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = socket$inet6(0xa, 0x2, 0x3a) writev(r0, &(0x7f0000000680), 0x1000000000000294) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000020000000000000001000079100000000000007a00e0ff0000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0xb8, &(0x7f00000002c0)=""/184}, 0x94) 2m17.71941235s ago: executing program 4 (id=1600): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x6}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) (async) r2 = openat$cgroup_procs(r1, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x30, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x1a, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0xb8}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2m17.428748332s ago: executing program 4 (id=1603): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r2, 0xaa0f4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10012, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002000000ad00feff000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 2m17.189383908s ago: executing program 4 (id=1605): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf250100000008000100030000000c00048005000100800000000800020003"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x20000040) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "ca191b2a0104b6a9", "404322cba02335d4c6d2d4fb43583cbce8ed367085d85317964322238ef204b2", "0ecc07cb", "4e0eac216e798a00"}, 0x38) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) shutdown(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="65cfeb0e03a97e7ae97d1413e586e23b8d38f547ab5a1eab12", 0x19}], 0x1}}], 0x1, 0x40008) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000002e00000008006301"], 0x44}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES64=r5], 0x0, 0x2006, 0x0, 0x0, 0x41000, 0x60}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 2m16.510046241s ago: executing program 4 (id=1611): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x36}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2, 0x4}, 0x6) 2m16.409196419s ago: executing program 4 (id=1612): unshare(0x20000400) r0 = epoll_create(0x3ff) epoll_pwait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xe373, &(0x7f00000003c0)={[0x800]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0xd8}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket(0x10, 0x803, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000b00)={0x1f, 0x0, @any, 0x8, 0x2}, 0xe) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r6, 0x209, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r9}]}, 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x4, 0xe, 0x0, 0x1, 0x47, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @empty, 0x60, 0x35a5aabf12eacd80, 0x7fff, 0x72}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="100029bd7000fedbdf2501000000050003001600000006000a004e210200140009000000000000000000000000000000000005000400010000001400071e000000000002000000000000000000000008000b00", @ANYRES32=r10, @ANYBLOB="050002000000000014000700fc020000000000000000000000000001"], 0xb9}, 0x1, 0x0, 0x0, 0x8008}, 0x20008060) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c80000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x80, r12}, 0x38) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x16, r13, 0x1, 0xff, 0x6, @broadcast}, 0x14) 2m1.24683017s ago: executing program 34 (id=1612): unshare(0x20000400) r0 = epoll_create(0x3ff) epoll_pwait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xe373, &(0x7f00000003c0)={[0x800]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0xd8}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket(0x10, 0x803, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000b00)={0x1f, 0x0, @any, 0x8, 0x2}, 0xe) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r6, 0x209, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r9}]}, 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x4, 0xe, 0x0, 0x1, 0x47, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @empty, 0x60, 0x35a5aabf12eacd80, 0x7fff, 0x72}}) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="100029bd7000fedbdf2501000000050003001600000006000a004e210200140009000000000000000000000000000000000005000400010000001400071e000000000002000000000000000000000008000b00", @ANYRES32=r10, @ANYBLOB="050002000000000014000700fc020000000000000000000000000001"], 0xb9}, 0x1, 0x0, 0x0, 0x8008}, 0x20008060) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c80000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x80, r12}, 0x38) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x16, r13, 0x1, 0xff, 0x6, @broadcast}, 0x14) 1m6.577980012s ago: executing program 2 (id=2229): syz_emit_ethernet(0x3e, &(0x7f0000000780)=ANY=[@ANYBLOB="ffffffffaaaa0180c20000000800470000300000000000019078ac1e0200000014aa94040000230200000d00902999edc3a8c3e539cc4901ff"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000201000008000300", @ANYRES32=r2, @ANYBLOB="08003f0000020000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="40030000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="24033300d0000000080211000001080211000000080211000000000004000000", @ANYBLOB='\x00'/782], 0x340}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x5e, 0x0}, 0x177f}], 0x1, 0x40000022, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x7}}, 0x14}}, 0x4040041) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffff9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}, 0x1c) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x4080) 1m5.573657206s ago: executing program 2 (id=2240): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000080850000009b000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000007b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m5.55282416s ago: executing program 2 (id=2242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000a00)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, {[@nop, @nop, @nop, @md5sig={0x13, 0x12, "ab519c9940eb739563a3c52b43aee4a2"}]}}}}}}}, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) writev(r1, &(0x7f0000000800)=[{&(0x7f0000000040)="2e9b3d0007e03dd65193dfb6c575963f6558", 0x12}, {&(0x7f0000000380)="a49d1aaf3ffd93dad503500000", 0xd}, {&(0x7f00000001c0)="25c115", 0x3}], 0x3) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000000000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LOG\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}, @NFT_MSG_DELFLOWTABLE={0x60, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x120}, 0x1, 0x0, 0x0, 0x4000850}, 0x4050) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000400000000000000daaa000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000a07b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000014000000850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m4.950256249s ago: executing program 2 (id=2247): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1ec, r1, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x17}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6428}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x33cd}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xd3c1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_AF={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x10}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x20000001}, 0x15) r2 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$inet(r2, &(0x7f0000000300)=""/4096, 0x1000, 0x40000103, &(0x7f0000001300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000001340)={0x0, 0xb}, &(0x7f0000001380)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000013c0)={r4, 0x5}, &(0x7f0000001400)=0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x14, r5, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008041}, 0x2000c841) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001680)={&(0x7f00000015c0)={0x9c, 0x1, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0x20, 0x6, "3de451e9459ec07508f60520853964b561e0112fb0e1841e160222e0"}, @NFTA_TABLE_USERDATA={0x68, 0x6, "0161664b04620bdd5315e97d5342c99d100651a0e78b6f9ecfcbf9b2c7e60ca60a57b49242882107adb3d877241cbada9a1b4889896e60de38bc4980e94778c47a320b109cf78bdb9364276b81156c31a05707c8b74e4084dd39791367d56d3128235500"}]}, 0x9c}, 0x1, 0x0, 0x0, 0x880}, 0x4) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000001740), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001780)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x24, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x3aa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20008951) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000001880)) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001900), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x24, r8, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x40800) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001a40)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r9, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x64, r6, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x64}}, 0x20048814) r11 = accept4$packet(0xffffffffffffffff, &(0x7f0000001b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001bc0)=0x14, 0x800) writev(r11, &(0x7f0000002cc0)=[{&(0x7f0000001c00)="def614aefd484693f14f9463efc1388629598351661be39a1937e8eed7052f71dc6fc6e82ea87ab99d7e1074ad045b2363c60f2e6cd9cfc408ad743ca6e3c954ddd5c879f3f9a0aa2376d0a207657f210570a64b353a02f106c3ce08f0790fad6f70627d22c83ca1fe0ca1b7a395c9734a94d876a8bb9144f583fdfea01763857737a84caec99f5aba86b235be5b35acccbc3041a507aac9d3f0acdad69ea1f9eb4f77e847ab1ccf6705271d3f8e070b004ba57ec8f33b779351bb22483970f5", 0xc0}, {&(0x7f0000001cc0)="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", 0x1000}], 0x2) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000002d00), 0x10000, 0x0) ioctl$TUNSETOFFLOAD(r12, 0x400454d0, 0x0) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002d80), r9) sendmsg$IEEE802154_DISASSOCIATE_REQ(r9, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x34, r13, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x2}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x810) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000002e80)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000002ec0)=0x2c) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000002f00)={0xc0002001}) epoll_create(0x85ef) connect$bt_sco(0xffffffffffffffff, &(0x7f0000002f40), 0x8) 1m4.949135114s ago: executing program 2 (id=2248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000040)=""/99, 0x63, 0x0, &(0x7f0000000100)=""/64, 0x40}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x5, &(0x7f0000000880)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0xffffffffffffff19) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b8a050000000000440012800b000100697036746e6c00003400028008000100", @ANYRES32=r3, @ANYBLOB="140003000000000000000000000000000000003414000200fe88"], 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x24008010) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b8a050000000000440012800b000100697036746e6c00003400028008000100", @ANYRES32=r3, @ANYBLOB="140003000000000000000000000000000000003414000200fe88"], 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x24008010) 1m4.896776254s ago: executing program 2 (id=2251): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e0000001080002"], 0x38}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x4) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$phonet(0x23, 0x2, 0x1) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r4], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x4}]}, {0x0, [0x2e, 0x61, 0x30, 0x61, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1, 0x3}, 0x28) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000300"], 0x2c}}, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b40000000109010100000000000000000a00000a500002002c000180140003002001000000000000000000000000000114000400200100000000000000000000000000010c00028005000100880000001400018008000100ac1414bb08000200ac14144208000640000000010800add0d8c28a36d6e8010073797a3000000000080005400000000f0c00048008000140000000f908000340000000010c00048008000140000000070900010073797a3100000000"], 0xb4}}, 0x840) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xe, &(0x7f0000000700)=@raw=[@alu={0xa8a713861d0b5f, 0x0, 0x6, 0x8, 0xa, 0x2, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @generic={0xff, 0x7, 0x5, 0xffff, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$EXT4_IOC_GETFSUUID(r5, 0x8008662c, &(0x7f00000002c0)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000068000000680000000a000000000000000100000d0a000000040000000000000006000000ada005e227d423712836183ba701e29006000013080000000000000108"], &(0x7f0000000f40)=""/4089, 0x8a, 0xff9, 0x1}, 0x28) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000000)={r10, 0x6, 0x42964110, 0x10}, 0x10) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000600)={r10, @in6={{0xa, 0x4e21, 0x7fff, @mcast2, 0x7}}}, &(0x7f00000006c0)=0x84) (async) write$cgroup_int(r7, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r7, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000cd190d8446ac6bcff10ecbdd2d08db243c08d6f589122eccd4fc5cb3fa0056e44e74a228e867fff3ebd12b437fcbada603d0", @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf2545000000"], 0x14}}, 0x80) (async) write(r0, &(0x7f0000000040)="54000000270001000000000000000000060100002000018008000200096370001400010002000801000000000000000000000000200001800800020074637000140001000200080200"/84, 0x54) 49.859109705s ago: executing program 35 (id=2251): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e0000001080002"], 0x38}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x4) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$phonet(0x23, 0x2, 0x1) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r4], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x4}]}, {0x0, [0x2e, 0x61, 0x30, 0x61, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1, 0x3}, 0x28) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000300"], 0x2c}}, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b40000000109010100000000000000000a00000a500002002c000180140003002001000000000000000000000000000114000400200100000000000000000000000000010c00028005000100880000001400018008000100ac1414bb08000200ac14144208000640000000010800add0d8c28a36d6e8010073797a3000000000080005400000000f0c00048008000140000000f908000340000000010c00048008000140000000070900010073797a3100000000"], 0xb4}}, 0x840) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xe, &(0x7f0000000700)=@raw=[@alu={0xa8a713861d0b5f, 0x0, 0x6, 0x8, 0xa, 0x2, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @generic={0xff, 0x7, 0x5, 0xffff, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$EXT4_IOC_GETFSUUID(r5, 0x8008662c, &(0x7f00000002c0)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000068000000680000000a000000000000000100000d0a000000040000000000000006000000ada005e227d423712836183ba701e29006000013080000000000000108"], &(0x7f0000000f40)=""/4089, 0x8a, 0xff9, 0x1}, 0x28) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000000)={r10, 0x6, 0x42964110, 0x10}, 0x10) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000600)={r10, @in6={{0xa, 0x4e21, 0x7fff, @mcast2, 0x7}}}, &(0x7f00000006c0)=0x84) (async) write$cgroup_int(r7, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r7, 0x0) (async) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000cd190d8446ac6bcff10ecbdd2d08db243c08d6f589122eccd4fc5cb3fa0056e44e74a228e867fff3ebd12b437fcbada603d0", @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf2545000000"], 0x14}}, 0x80) (async) write(r0, &(0x7f0000000040)="54000000270001000000000000000000060100002000018008000200096370001400010002000801000000000000000000000000200001800800020074637000140001000200080200"/84, 0x54) 7.780120821s ago: executing program 6 (id=2687): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000008ff000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509f8ff00000000dbaaf8fff1000000bf8620000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf98000000000000560800000000000085000000bf000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 7.52942921s ago: executing program 6 (id=2690): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x22}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) (async) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) (async) socket(0x2a, 0x2, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_ENCODED_READ(r2, 0x891a, 0x0) (rerun: 32) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f00000001c0)=0x1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="e0b9547e3987dbdd0000cf000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async, rerun: 32) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000100)) 6.338211717s ago: executing program 6 (id=2700): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000100)=0x6, 0x4) recvfrom(r0, 0x0, 0x0, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}}, 0x0) 6.214505813s ago: executing program 7 (id=2702): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000000580)=""/200, 0xc8}, {&(0x7f0000001880)=""/176, 0xb0}], 0x3}, 0x7}], 0x1, 0x10140, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x20000400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) (async) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r3], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000004500)={&(0x7f0000001340)="144abf9bab", 0x0, 0x0, 0x0, 0x5, r4}, 0x38) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000004500)={&(0x7f0000001340)="144abf9bab", 0x0, 0x0, 0x0, 0x5, r4}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@alu={0x7, 0x0, 0xd, 0x3, 0x3, 0x7fffffffffffffa6, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x13, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="750a00000000000061111400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 6.065655333s ago: executing program 0 (id=2703): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x18, 0x1411, 0x701, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}]}, 0x18}}, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) 6.049384964s ago: executing program 7 (id=2704): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x8, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000692c19c72fa9", @ANYRES32=r0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x181000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) r7 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x13}, 0x44) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x700, 0x20}}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r8, 0x890c, &(0x7f0000000100)="000000000000000000000000000000000f0000006c61706230") (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r11) (async) r12 = socket$unix(0x1, 0x5, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) 5.929955705s ago: executing program 0 (id=2706): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000240)="1564d7bdff1986225c10c46b3e0ddeb517a6afb194a6b5a4a7a6ece68e6ffab38f9409bb6f4681ccff252a4584e1cac14b40b315281fca93b8375fc4f0118a7e15b00fa0ab927519c54977a8ca40c0bbf962b4c90ed2160bf173f266a612afc994126ca2683c5c6289efe84c45f59cdd847b60e94ffbcf6eab334e3d5f53e50393eb27885a8b02993ba524c11e8a20e36ee2d78b31b7654aca0ba3152c300c8e355258f5607fbcae00cdb5cd9c07f63da7084307587f47f511074f37c227fd640b0fd273f90e1ea1274cdba2418654a7bdf60e2c3fd9ecefa2a0235832fec4a2539a", 0xe2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x404c014}, 0xd4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x64, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xe730d03272302fbd}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r6, 0x5, 0x0, @val=@perf_event={0x8000000000000001}}, 0x18) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r1, r6, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000080)='<', 0xfffffffffffffda9, 0x4894, 0x0, 0xfe8d) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES32=r3], 0x7c}, 0x1, 0x0, 0x0, 0x40050}, 0x40800) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x80800) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r11 = socket(0x11, 0x3, 0x0) bind$rxrpc(r11, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) listen(r12, 0x9) sendfile(r9, r10, 0x0, 0xffffffff000) bind$bt_l2cap(r10, &(0x7f00000000c0)={0x1f, 0x8, @any, 0x3, 0x1}, 0xe) 5.562963016s ago: executing program 8 (id=2707): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) r2 = socket$kcm(0x2b, 0x4, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f000000a2c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x9, 0x8, 0x6, 0xffffffff, 0x2}, &(0x7f000000a380)=0x98) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r2) sendfile(r1, r1, &(0x7f00000000c0)=0xc, 0x10000000038c6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES8=r1], 0x20) 5.371169493s ago: executing program 6 (id=2708): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000040095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYBLOB='.\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='&4`~'], 0x20) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x2c, 0x10, 0x801, 0x70bd2a, 0x8, {0x0, 0x0, 0x0, 0x0, 0x6c004, 0x2000}, [@IFLA_GROUP={0x8}, @IFLA_VF_PORTS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x40004) 5.007450316s ago: executing program 0 (id=2709): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x3f, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a38000000030a030000000000000000000a0000090c00024000000000000000010900030073790400000000000900010073797a310000000014000000110001"], 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x490) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r2, 0x0, 0xce, &(0x7f0000000100), &(0x7f0000000180)=0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000007000000040000000200000000000000", @ANYRES32, @ANYBLOB="2000000000000000000000007b5f2da8cac41494", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r6, &(0x7f0000000280)}, 0x20) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r8, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/144, 0x90}, {&(0x7f0000000f40)=""/217, 0xd9}, {&(0x7f0000001b40)=""/4103, 0x1007}, {0x0}], 0x4}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x100}], 0x6, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00'}) socket(0x10, 0x3, 0x0) r10 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0xffff, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x201}, 0x1c) bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e23, 0x6, @local, 0x400}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4.589270868s ago: executing program 8 (id=2710): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x118, 0x12, 0x100, 0x70bd26, 0x25dfdbfe, {0x1a}, [@nested={0x104, 0x5e, 0x0, 0x1, [@nested={0x4, 0x15}, @generic="3096ddcd47e5df95ab533688d4bd51fc1c1d2f8c42c74c7a1740faf6abf6248a6e047a3cc88a0bd73adb16a63c8b1e3b53e74c99966818f47d5835260dafeb8d71cc26137d7adf82c5985dd037819247aed86723c775711b4e4813075eed92fd1e4d2cbf858ebe814c38f1c0f518b3e399581b1880507124083e3a4d2010b7532abb3531969f3d147baabdb6f70463505aeee5503ecc8433e69cd5ebdfd6069d45964fce5454137af2fe42b58f3e21c9f86c74bb029aa45d5baa466c11ca49fbf89de3143ac3786f6f804a2446aa55d78d12dd7280cdfc675a5c3dd9ba5db0ffb0a98ac805415d54811e2e80f2af2bc96b89d88edb5aae6c", @nested={0x4, 0xc9}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000) r3 = socket(0x15, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000340)={'geneve1\x00', 0x7fff, 0x7f}) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="12000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000580)={@broadcast, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x40, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, {[], {{0x4e22, 0x4e22, 0x1000, 0x41424344, 0x0, 0x0, 0x6, 0x20, 0x3, 0x0, 0x3, {[@generic={0x2, 0x2}]}}}}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r6, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0x98, 0x11c0, 0x11c0, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd60000000000e3a0020010000080000000800c10000000000ff020000000000000000488b002000010103"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCDARP(r8, 0x8953, &(0x7f0000000040)={{0x2, 0x4e24, @local}, {0x306}, 0x8, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'ip6gre0\x00'}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1226, [{0xa00}, {0x800000000, 0x100000000000000}]}, 0xa50) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, 0x25d13}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) socket$netlink(0x10, 0x3, 0x0) 2.126464936s ago: executing program 6 (id=2712): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "615ba0b3f58aeba0", "a4ebff48c516bbbba2abac06caa5dd95", "9f9f8192", "61baea45e665ac6a"}, 0x28) (async) r2 = socket$igmp(0x2, 0x3, 0x2) (async) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x80800) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r0) r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r5, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x44001}, 0x80) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000380)={r0, &(0x7f0000000280)=']].\\\x00', 0x103400, &(0x7f00000002c0)={@align=0xd39, {0x7ff, 0x8, 0x5, 0x76d10d38}}, 0x8, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x7}) write$cgroup_subtree(r7, &(0x7f00000003c0)={[{0x2b, 'devices'}, {0x2d, 'pids'}]}, 0xf) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000400)={0x0, 0x9}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000480)={r8, 0x80}, &(0x7f00000004c0)=0x8) bind$inet(r2, &(0x7f0000000500)={0x2, 0x4e24, @multicast1}, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r7) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r9, &(0x7f0000000800)={&(0x7f0000000580)={0xa, 0x4e22, 0x7, @remote, 0x3b}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)="0c26a7c69917f369982fd0395a01085168eb42039c4d54fb753f0b0910784ece522d4a4d3721a8993e8fa375f2a7aa5abee24ce760", 0x35}], 0x1, &(0x7f0000000640)=[@hopopts_2292={{0x90, 0x29, 0x36, {0x2c, 0xe, '\x00', [@enc_lim, @jumbo={0xc2, 0x4, 0xfffffffa}, @pad1, @ra, @pad1, @hao={0xc9, 0x10, @empty}, @generic={0xf2, 0x4f, "73640197c50f82e1d5f33204cee1bd4f93c74e498bb8f0d514b5e98a043d47d5c1234ab99c738dd77af5eba23cf9399a8ebeca3a9ce256f5f597d2eef4a0f58528cc3b67782749127a6bf7a001b80a"}]}}}, @hopopts={{0x70, 0x29, 0x36, {0x2b, 0xa, '\x00', [@pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x40, {0x3, 0xe, 0x8, 0x5, [0x8001, 0x7, 0xc438, 0x1, 0x2c57, 0x3, 0x7]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @dontfrag={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @tclass={{0x14, 0x29, 0x43, 0x5}}], 0x190}, 0x1800) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000840)) (async) r10 = socket$nl_rdma(0x10, 0x3, 0x14) write$cgroup_devices(r7, &(0x7f0000000880)={'b', ' *:* ', 'r\x00'}, 0x8) (async) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r7, 0x110, 0x3) (async) close(r6) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'team_slave_0\x00'}) ioctl$SIOCX25GCALLUSERDATA(r7, 0x89e4, &(0x7f0000000900)={0x48, "dbb4b79e9f322938ed945ee21ce0e1d0690e943d847df383a350bba7a35331e43a8a456d00b3207d9fa078ec469e79a041861d2d732c05439e24fdfbc54de50574d23c8d88c2b91e53f9fc00b129d55f82cc8b0472777e16efeb6d3d196ac2be1f0326154746004b9451268e1c5a3a8b31b322dcaea47ad8f1b9958d98ad01a7"}) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r10, 0xc0385869, &(0x7f0000000ac0)={r7, &(0x7f00000009c0)='\x00', 0x42001, &(0x7f0000000a00)={@align=0x1, {0x9, 0x8, 0x5, 0xc}}, 0x8, &(0x7f0000000a40), &(0x7f0000000a80)=0x1}) socket$netlink(0x10, 0x3, 0x14) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b00)) (async) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b80), r4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r11, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x6198d3b4, @bearer=@udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 1.961990525s ago: executing program 8 (id=2713): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7fffda"], 0x34}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wrr\x00', 0x1, 0xa8a, 0x30}, 0x2c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="58010000100005000100440332e3d541a41a976972260f0000000000000000000000000000000000000000000100000000000000000001000000000000006022d78dd63c24e246da5a7ed275540000", @ANYRES32=0x0, @ANYRES32=0x80, @ANYBLOB="00000000000000000000000000000001000012343300000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000800000000000000048000100686d61632873686131290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001700010000000000000000000000000000000000000020000000"], 0x158}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="58010000100005000100440332e3d541a41a976972260f0000000000000000000000000000000000000000000100000000000000000001000000000000006022d78dd63c24e246da5a7ed275540000", @ANYRES32=0x0, @ANYRES32=0x80, @ANYBLOB="00000000000000000000000000000001000012343300000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000800000000000000048000100686d61632873686131290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001700010000000000000000000000000000000000000020000000"], 0x158}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0010000100000000000000000003"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r2 = socket(0x15, 0x5, 0x0) connect$unix(r2, &(0x7f00000003c0)=@abs={0xa}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) splice(r4, 0x0, r5, 0x0, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) write(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000400000000ea"], 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000400000000ea"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r8, r10, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x102b, &(0x7f0000001c00)=ANY=[], 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000b00)={{{@in=@local, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000c00)=0xe8) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000b00)={{{@in=@local, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000c00)=0xe8) sendmsg$nl_route_sched(r6, &(0x7f0000000840)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)=@newqdisc={0x114, 0x24, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x6, 0xa}, {0xc, 0x6}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x100}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1ac6d787}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff9}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x3, 0x72d2, 0xf4e1, 0x2, 0x6, 0x1, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x2, 0x18, 0x4c1, 0x8, 0x0, 0x2, 0x6, 0x7}}, {0x12, 0x2, [0x3, 0xff, 0x0, 0xd, 0x87c5, 0xcd4, 0x8]}}, {{0x1c, 0x1, {0x6, 0xe9, 0x6, 0x1, 0x1, 0xcf3, 0x5, 0x3}}, {0xa, 0x2, [0x9, 0x1000, 0x4]}}]}, @qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x2}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x22}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x5}]}}, @qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x49}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xb}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x4000840) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000840)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)=@newqdisc={0x114, 0x24, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x6, 0xa}, {0xc, 0x6}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x100}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1ac6d787}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff9}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x3, 0x72d2, 0xf4e1, 0x2, 0x6, 0x1, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x2, 0x18, 0x4c1, 0x8, 0x0, 0x2, 0x6, 0x7}}, {0x12, 0x2, [0x3, 0xff, 0x0, 0xd, 0x87c5, 0xcd4, 0x8]}}, {{0x1c, 0x1, {0x6, 0xe9, 0x6, 0x1, 0x1, 0xcf3, 0x5, 0x3}}, {0xa, 0x2, [0x9, 0x1000, 0x4]}}]}, @qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x2}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x22}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x5}]}}, @qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x49}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xb}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x4000840) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r5, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r5, 0x0) 1.960535825s ago: executing program 7 (id=2714): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, r1, 0x331, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0xee1df1e54d174fcc) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'ipvlan0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 1.903106464s ago: executing program 0 (id=2715): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40801}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40024000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x140, r3, 0x300, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6ab}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3413}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3ff}}]}, 0x140}, 0x1, 0x0, 0x0, 0x80}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) connect$inet6(r4, &(0x7f0000000440)={0xa, 0x4e01, 0x3, @empty, 0x10000004}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0xec, &(0x7f0000000700)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x1a, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r0}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1b, 0x3, 0x1, 0x8, 0x20020, r1, 0x4, '\x00', r6, r0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)={0x38, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @rand_addr=0x64010101}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x800) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="2903fcfffffffedbdf25160000000c000600010000"], 0x20}, 0x1, 0x0, 0x0, 0x10000860}, 0x400c014) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) 1.679866194s ago: executing program 5 (id=2716): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000040)={@rand_addr=0x64010101, @loopback}, 0x8) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000008, 0x32, r0, 0x8588d000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r0], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r0], &(0x7f0000002f40)=""/4079, 0x42, 0xfef, 0x8, 0xffffffff}, 0x28) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000014c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, 0x3}, 0x1c, 0x0}}], 0x1, 0x4040014) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r0, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x80) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r3, 0x400000) r5 = socket(0x2b, 0x5, 0xb9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@private2, 0x9, 0x1, 0xff, 0xb, 0xfffc, 0xd}, 0x20) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000040c0)=ANY=[@ANYBLOB="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"], 0x1148}}, 0x4004) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x0, 0x3, {}, [{0x4}]}, 0x18}}, 0x0) r9 = socket(0x19, 0x800, 0x4f) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x28, 0x5, 0x0) unshare(0x40000900) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x40, &(0x7f0000000140)=0x1, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x10000000000, 0x3, 0xfffffffffffffffd, 0x3ff, 0x401, 0x81, 0x4}, 0x0, &(0x7f0000000180)={0x77bfea01, 0x5, 0x8, 0x400000f, 0x1, 0x0, 0x101, 0xd70f912}, 0x0, 0x0) 1.56105945s ago: executing program 8 (id=2717): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast1, 0x4000}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) sendto$packet(r2, 0x0, 0x0, 0x80, &(0x7f0000000680)={0x11, 0x5, 0x0, 0x1, 0xb1, 0x6, @random="d95e786bbe90"}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xdc}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x2400c000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0xa, 0x5, 0x0) socket$pptp(0x18, 0x1, 0x2) sendmsg$inet_sctp(r6, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)='(', 0x1}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5}}], 0x18, 0x4008000}, 0x28008841) setsockopt$inet6_int(r6, 0x29, 0x4d, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000380)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x7}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000880)={r8, @in6={{0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00', 0x5}}, [0x7fffffffffffffff, 0x400, 0x4, 0x3f800000000, 0x5, 0x0, 0x10000, 0x5, 0x5, 0x4, 0xcd21, 0x6, 0x3, 0x100000001, 0xc7]}, &(0x7f0000000980)=0x100) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000003b00010324bd7022ffdbdf258a093bd3abe04a51afd67d2c01e9df326ef4c4b66f9bae6fc5c61d58c8f5015cf9a16753b2019300000000000000"], 0x14}}, 0x4044000) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x1c}}, 0x840) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xff, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132835}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x2, 0x3, 0x1, 0x2}}, @common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x100, 0x700000, 0x8, 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9c0000000001010400000000000000000a0000023c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000001010c0002800500010000000000080007400000000008001640000000008cf244178dde4c2780304a3556d78683129b0005a1937a200844c1fe1351cc83682e08dde1224cfd19c905536849fd8612b05ecc64417c747c8ef50194a9d1df8986d570a2892bfb76be"], 0x9c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x44, r11, 0x200, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0xc033f5d5d62c55d}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x44}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x18, 0x6, &(0x7f0000000140)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @jmp={0x5, 0x0, 0xa, 0x0, 0x7, 0xc, 0x10}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @generic={0x5, 0x2, 0x6, 0x9}], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x41000}, 0x94) 1.466701625s ago: executing program 0 (id=2718): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}, 0x2}}, 0x80, 0x0}, 0x20000800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffe8c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="540000000000000000000004000000000000000100000001001d0001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r3 = socket$netlink(0x10, 0x3, 0x0) preadv(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x3bc, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$rxrpc(0x21, 0x2, 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="11042abd700001dcdf251400000008000300", @ANYRES64=r4], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x200000010, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r8, 0x40085875) 1.400341986s ago: executing program 7 (id=2719): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0xf, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8ba4, 0x3, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtclass={0x24, 0x28, 0x300, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xe, 0x10}, {0x0, 0x10}, {0xfff1, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0x9}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x20000800) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="4d7e0000000001000000000000800504360000200000050037000000000008002f007c0000000c0005000203aaaaaaaaaaaa0a0001007770616e31000000"], 0x44}, 0x4, 0x700000000000000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x1411, 0xffffffffffffffff, 0x709d25}, 0x10}, 0x1, 0x0, 0x0, 0xc0}, 0x4044190) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="130004000000000000000800000008003a30303a31302e300000000008000300000000004dc35781e4c892e7babeb7b72dc523d8cd4df20635798b225a20c574241b8bd78b091f348f019ce8586a0057e116f0114f971ae754eff637d0761154de39c2c944ff10719322be1f61bea1f178350e8a0d7505716ace27ede7bf"], 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xffffbfff}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x28}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x19, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r11, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 1.399265057s ago: executing program 5 (id=2720): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400ecff0f00ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1724000021200000240012800c0001006d6163766c616ef314000280080003000300000008"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000002) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000070"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x4000040) sendmmsg(r0, &(0x7f0000002880)=[{{&(0x7f0000000040)=@phonet={0x23, 0x6d, 0x7f, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c5f575de6d74812fa629313b9cebe394c305222252d45b4c3a9f2da61375ae4dba04c1bfaea208da16776806f1265b09539d8ffc6be2ce3ffc0a484f6369f6cd6e22fb2d99cd2c03c1b693", 0x4b}], 0x1, &(0x7f0000000200)=[{0x78, 0x0, 0x0, "667c04868cc4f39fd4ae0e3458de032dda34650f806df16202e5c23050021e5d10f3518bc54e74271ff42a6b8fcca296ab1a32327827cc5c9606b2108894a6f43de222bcc9dc3f8519fa9a3808ea4f4524e6a0cffa8f062f986e69ec6413451663af36eb4af9"}, {0x1010, 0x3a, 0xffffffff, "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"}], 0x1088}}, {{&(0x7f00000012c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @loopback}, 0x1, 0x3, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001380)=';', 0x1}, {&(0x7f00000013c0)="7a5f9596091a04b10e62c4c378418ba9c11f21e02d964ca1a0905aab3bbd97747e7c15c0ec84ec861d494b8cc5472b8bc5d33c0cae70be885e1c4125a35910a71df0e619a44fce76b613e608f76032014eb413f228ab34075b3190be6293a1e9e48385c52629322e7fc3cc68f72036ac1e9ec92c8ec2aa7b916b299be753ada21f64e78cbb4657e3ae08ff10ec", 0x8d}, {&(0x7f0000001480)="29b7f6634e6703ff72e96b8d031b1e9b9e3f475ea3d253138a45f72b60bece3c7b2b1d5e0d69a9ff4ea78afdb5ab76c5db32818346e3b0140e61ff9781a8ce5a7cc8382a17eba9f3b7c9d59bde4b190423e5689f869142e0cb1f928baea1bba199f0aa712e0123a69cb717a19f7bc48ed5e00c8c2b", 0x75}], 0x3, &(0x7f0000001540)=[{0x1010, 0xc, 0xfffffc00, "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"}, {0x80, 0x110, 0x8, "59f8b08d9c2dfb7adf5e1b5e340d9353ecf7b95de63bfb20e196f5afcf52bbd65f22bf5ae22b5e9c7a75b60c897f9b830ee3f9e943837e041ae0d202c1a65da98a12ce1bb1eceefb9bbb10adbd2786228458df241ff473e50c2430b65167eba79ee8df429c31d2182b20a240f0bdcd"}, {0x40, 0x1, 0x6, "de1acd08a9ca1af6b6450a31094d33cd6b67f8c1f5d888b8a307d3ac533e88820e84f65ceb71531d6e71b2b375"}, {0xa8, 0x107, 0x1, "7e0081dd7f19ab52c429e68aaf442e86ae971fc9e58fca0165b3ee9a35b16efc9d4d5b3bd90e808572ad32caddc6955866799b1362b9680108b47ff2e4458c509147944751da3e72fa526863dfdf3bae13ee8245004e97c65bdc9dd1089caf643eb4f2675ad77ab97ec92322490daa57895751b88ad9a918bd022f8e64b2bb0dac87c6bba57b15e97bd98409c69a68f7143fcf761fca"}, {0xf8, 0x109, 0x40, "409966b70434a950b6dd8e59fb6983f055665f9ea28dbd3c88d9eb150c4ff9655e9190fa082c4c046c4a26afafcc104ed84b2814b27f0c710688501ba6bcd604737df5b53ea52c8d1ae58691a3eeee6e393d81131c6582202254f05d1ea5ec947b480735c97f1a675fda0e8b0a85bf4d256aa1291e55d404403f8d94e4720eec98f41001026fc3fdc8060fe2938a05516127d690f33196af7aa3bf54c59bac3d2f8b49f46846c2246b72608a8839cb9e5e5c07310ff74a7010862a266d1155fa3093804d80480ec226bd15b531c4ad8ff9d61ab91a6d56bedf154b10046b9b8bf0dba5d2524854c2"}, {0x98, 0x113, 0x9, "da7696d1bc7b5b0fb6bb51b87bc674e1e73b1275768ca0148faf5ce876ddc76131e392c5aeeaeb22ace7613c4e3ba15bbe8424b3ec572ca7eb6c72b8bf40bcee9782a10211f5c9c233beaf0a381ccfa618cd60df73c72eaec531cfa420256ae3b1da613c3ad80d0cb42847ce935932f4f82889b2d774bcdb04bc8dccd6187ada4df4a0bca75097"}], 0x1308}}], 0x2, 0x80) sendfile(r0, r0, 0x0, 0x50) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000002940), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x1c, r3, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x1c}}, 0x80) 1.228123495s ago: executing program 5 (id=2721): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a26441"], 0x120}}, 0x0) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) (async) r1 = socket$kcm(0x10, 0x400000002, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$inet_mptcp(0x2, 0x1, 0x106) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) (async) socket$kcm(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x9) (async) socket$netlink(0x10, 0x3, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r3], 0xfe33) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x8, 0x4, 0x1}) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x8, 0x4, 0x1}) pwritev(r4, &(0x7f00000000c0), 0x0, 0x3, 0xae7) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r6, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r6, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r6, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x48000) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x1, 0x0, 0x3, 0x8, 0x80, 0x0, 0x8}, 0xe) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) 1.179582599s ago: executing program 6 (id=2722): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000980)="00538c", 0x3}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e1e, @private=0xa010102}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000340)="062b94327d", 0x5}], 0x1}}], 0x3, 0x4000800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value, &(0x7f0000000000)=0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x6, 0x0) close(r6) write(r4, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fd3f00000000000009000000850000002e000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xfe79, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x8c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1af}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x200}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9a}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44000054}, 0x20004004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000100850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11, 0xffffffffffffffff, 0x2000000}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x40, r13, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x41, 0x5f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x30, r3, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x2, 0x66}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x1705d7f68c1c0ea4}, 0x4) 916.54391ms ago: executing program 5 (id=2723): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0xe, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000400)={0x3, {{0xa, 0x4e24, 0x0, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @empty, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) close(0x3) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0x2, 0x9, 0x200000, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x80, 0x1, 0x2}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x2, 0x9, 0x301, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x4004) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe8}}, 0x0) getuid() 854.388223ms ago: executing program 5 (id=2724): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nicvf0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='gretap0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x10000000, 0x0, 0xffffff81}, 0xe3, 0xfffffffe, 0x9, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x6, 0xffff, 0x6a1, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x15, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xfff3}, {0x0, 0xb}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x200, 0x8, 0x4, 0x40}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, 0xfffffffffffffffe, 0x4005) r9 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r9, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b0000000500000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r11 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r11, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@mask_cswp={0x58, 0x114, 0x9, {{0x1, 0xfffffff5}, &(0x7f0000000100)=0x8, &(0x7f0000000300)=0xfffffffeffffffff, 0x8, 0x8, 0x48, 0x9, 0x0, 0x7}}, @rdma_args={0x48, 0x114, 0x1, {{0x5, 0x4}, {&(0x7f0000000780)=""/251, 0xfb}, &(0x7f0000003380)=[{&(0x7f0000000880)=""/220, 0xdc}, {&(0x7f0000000a80)=""/233, 0xe9}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/86, 0x56}, {&(0x7f00000000c0)=""/54, 0x36}], 0x5, 0x0, 0x3}}], 0xa0}, 0x2000c004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) unshare(0x22020600) ioctl$BTRFS_IOC_INO_PATHS(r10, 0xc0389423, &(0x7f0000000240)={0x1000, 0x8, [0x9, 0x1, 0x5, 0x2], &(0x7f0000000140)=[0x0]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 761.889431ms ago: executing program 8 (id=2725): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x28000600) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000240)=0x1c) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x5, 0xe, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@remote, @in6=@mcast2, 0x26, 0x4}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty, 0x9}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x0, 0x3505}]}, 0x70}}, 0x0) shutdown(r1, 0x8c5d47e95537ac9b) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x4}]}, {0x0, [0x2e, 0x61, 0x30, 0x61, 0x2e, 0x20]}}, 0x0, 0x2c, 0x0, 0x1, 0x8}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4, 0x80000}, 0x50) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000280)=0x2) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r6, &(0x7f0000000040)='1', 0x1) write$6lowpan_enable(r6, &(0x7f0000000080)='1', 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000002500000000000000000000ffffac14140a00000000ce000000ad885625f0160000000100456dcda595b30590f0965e99e559d8379e015dc030dfcc4f5cb46aaf3cd7a19deadcc1a747f65bbaf4c970007f45e148e867a5942b99884c79c33933d04f004a84cf2f07000800003915a6988b55fcdad115fa93317fd179847e14c9083a07006924f4e7f6404a33e95bdfe8b595c63aa04200fafbbd9aafe72ee25df9b8c55cf5113d5de0e178bbbb6f06000000000000001300"/208, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffff000000000c0015000000000000000000"], 0x5c}}, 0x4004040) 652.251953ms ago: executing program 7 (id=2726): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) r0 = socket(0x10, 0x3, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0x90b}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d52000008008c00feffbfff"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026c170000400000027000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2048050}, 0x880) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r6, 0x3}, 0x18) (async) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @broadcast}, &(0x7f0000000100)=0xc) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe8, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xb0, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r7) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000480), 0x0) (async) r10 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r10, &(0x7f00000000c0)={0x1d, r11}, 0x8) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000580)={'erspan0\x00', 0x0}) (async) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r12, &(0x7f0000000080)={0x11, 0x1a, r13, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000040b708000000fff0007b8af8fe00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r14, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x40f00, 0x5}, 0x94) 594.717407ms ago: executing program 0 (id=2727): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xfd, 0x20000027}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180200000300000000000000000000008500000022000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x1e, 0x0, &(0x7f0000000440)="e0400000000d85ff9782762f88ca0ec8915ef32c4bdaf74d1bae70e0b8e0", 0x0, 0xadca, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r0}, 0x18) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x15, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5b5d17a9}, [@map_fd={0x18, 0x9, 0x1, 0x0, r2}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x960}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}]}, &(0x7f0000000300)='GPL\x00', 0x1000, 0xc4, &(0x7f0000000340)=""/196, 0x41000, 0x8, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000480)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x6, 0x3, 0xfffffff1}, 0x10, 0xd891, r1, 0x0, &(0x7f0000000500)=[r0], 0x0, 0x10, 0x3}, 0x94) 158.045834ms ago: executing program 7 (id=2728): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x30, 0x3, 0x7, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x17}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x5}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x24004000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000200)={r7, @in6={{0xa, 0x4e23, 0x6, @empty, 0xfffffffa}}, 0x4, 0x4100}, &(0x7f00000002c0)=0x90) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000001040)={r7, 0x8000}, &(0x7f0000001080)=0x8) ioctl$OCFS2_IOC_REFLINK(r3, 0x40186f04, &(0x7f0000001000)={&(0x7f0000000f80)='dvmrp0\x00', &(0x7f0000000fc0)='dvmrp0\x00', 0x2}) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r8, 0x0) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r2) socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) 796.383µs ago: executing program 8 (id=2729): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x20000000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x2a}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) 0s ago: executing program 5 (id=2730): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8993, &(0x7f0000000900)={'bond0\x00', @random="0000330c1100"}) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x4, "d30f388c52647600", 0x0, 0x5, 0x4000004, 0xffffffde}, 0x3c) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socket$inet6(0xa, 0xa, 0xb5) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@remote, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x2000000, 0x7c, 0x8, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000100)={@local, @multicast2, 0x1, "1215887e7ed31b5ada3ebfdf5b8bfe0c3b47ccb5331eee55df4f57cf11608e44", 0x6, 0x2bfd, 0x9, 0x7}, 0x3c) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000040)={0x1}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) kernel console output (not intermixed with test programs): 5623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 234.914114][ T5623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 234.931093][ T5623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 234.931729][ T5623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 235.270640][T12361] tipc: New replicast peer: 255.255.255.255 [ 235.271390][T12361] tipc: Enabled bearer , priority 10 [ 235.275865][T12361] netlink: 'syz.2.1550': attribute type 6 has an invalid length. [ 235.275882][T12361] netlink: 'syz.2.1550': attribute type 5 has an invalid length. [ 235.288016][T12361] netlink: 'syz.2.1550': attribute type 6 has an invalid length. [ 235.288035][T12361] netlink: 'syz.2.1550': attribute type 5 has an invalid length. [ 235.437973][ T6125] net_ratelimit: 28 callbacks suppressed [ 235.437995][ T6125] bond5: (slave bridge4): failed to get link speed/duplex [ 235.566455][ T6123] bond5: (slave bridge4): failed to get link speed/duplex [ 235.677197][ T6123] bond5: (slave bridge4): failed to get link speed/duplex [ 235.786990][ T42] bond5: (slave bridge4): failed to get link speed/duplex [ 235.897120][T11738] bond5: (slave bridge4): failed to get link speed/duplex [ 235.985035][T12388] xt_CT: You must specify a L4 protocol and not use inversions on it [ 236.126249][T12394] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 236.126499][T12400] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 236.136788][ T6123] bond5: (slave bridge4): failed to get link speed/duplex [ 236.147576][T12398] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 236.147576][T12398] Please contact the netfilter-devel mailing list or update your nftables rules. [ 236.179291][T12345] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.181940][T12345] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.182107][T12345] bridge_slave_0: entered allmulticast mode [ 236.185889][T12345] bridge_slave_0: entered promiscuous mode [ 236.201456][T12345] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.202869][T12345] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.203043][T12345] bridge_slave_1: entered allmulticast mode [ 236.210977][T12345] bridge_slave_1: entered promiscuous mode [ 236.267846][T12402] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 236.318838][T12345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.350192][T12345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.372544][T12407] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 236.490300][ T10] tipc: Node number set to 4048333740 [ 236.518411][T12345] team0: Port device team_slave_0 added [ 236.530846][T12345] team0: Port device team_slave_1 added [ 236.637804][T12411] macsec1: entered promiscuous mode [ 236.725391][T12345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.725409][T12345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.725430][T12345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.749420][T12345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.749438][T12345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.749460][T12345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.749939][T12419] __nla_validate_parse: 16 callbacks suppressed [ 236.749952][T12419] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1565'. [ 236.916065][T12426] nbd: socks must be embedded in a SOCK_ITEM attr [ 236.981571][T12345] hsr_slave_0: entered promiscuous mode [ 236.982577][T12345] hsr_slave_1: entered promiscuous mode [ 236.983290][T12345] debugfs: 'hsr0' already exists in 'hsr' [ 236.983309][T12345] Cannot create hsr debugfs directory [ 237.026779][ T5619] Bluetooth: hci6: command tx timeout [ 237.639990][T12457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1578'. [ 237.686592][T12456] tunl0: Caught tx_queue_len zero misconfig [ 237.686812][T12456] sch_fq: defrate 4294967293 ignored. [ 237.726821][T12462] netlink: 'syz.5.1579': attribute type 11 has an invalid length. [ 237.768791][T12456] Cannot find set identified by id 65535 to match [ 237.859582][T12345] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 237.863913][T12345] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 237.882575][T12345] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 237.909320][T12345] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 237.910815][T12345] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 237.934323][T12345] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 237.958209][T12345] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 237.977411][T12345] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 238.029784][T12475] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1582'. [ 238.072468][T12480] syzkaller1: entered promiscuous mode [ 238.072488][T12480] syzkaller1: entered allmulticast mode [ 238.244797][T12345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.253720][T12487] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1583'. [ 238.253753][T12487] validate_nla: 2 callbacks suppressed [ 238.253764][T12487] netlink: 'syz.2.1583': attribute type 4 has an invalid length. [ 238.253775][T12487] netlink: 'syz.2.1583': attribute type 1 has an invalid length. [ 238.339013][T12487] netlink: 'syz.2.1583': attribute type 16 has an invalid length. [ 238.339035][T12487] netlink: 'syz.2.1583': attribute type 17 has an invalid length. [ 238.423923][T12487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.425540][T12487] bridge0: port 3(bond0) entered blocking state [ 238.425662][T12487] bridge0: port 3(bond0) entered forwarding state [ 238.449752][T12487] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.454391][T12487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.500490][T12487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.503040][T12487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.505440][T12487] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 238.539388][T12487] veth1_vlan: left promiscuous mode [ 238.540599][T12487] veth0_vlan: left promiscuous mode [ 238.542340][T12487] veth0_vlan: entered promiscuous mode [ 238.545296][T12487] veth1_vlan: entered promiscuous mode [ 238.572961][T12487] veth1_macvtap: left promiscuous mode [ 238.574437][T12487] veth0_macvtap: left promiscuous mode [ 238.575590][T12487] veth0_macvtap: entered promiscuous mode [ 238.602624][T12487] veth1_macvtap: entered promiscuous mode [ 238.615450][T12487] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 238.618484][T12487] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 238.625644][T12487] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 238.633300][T12487] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 238.651616][T12487] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.654075][T12487] 8021q: adding VLAN 0 to HW filter on device bond2 [ 238.654752][T12487] 8021q: adding VLAN 0 to HW filter on device bond3 [ 238.670206][T12487] 8021q: adding VLAN 0 to HW filter on device bond4 [ 238.671326][T12487] 8021q: adding VLAN 0 to HW filter on device bond5 [ 238.672380][T12487] 8021q: adding VLAN 0 to HW filter on device bond6 [ 238.673412][T12487] 8021q: adding VLAN 0 to HW filter on device bond7 [ 238.674442][T12487] 8021q: adding VLAN 0 to HW filter on device bond8 [ 238.675474][T12487] 8021q: adding VLAN 0 to HW filter on device bond9 [ 238.684009][T12487] 8021q: adding VLAN 0 to HW filter on device bond10 [ 238.690601][T12487] 8021q: adding VLAN 0 to HW filter on device bond11 [ 238.694505][T12487] 8021q: adding VLAN 0 to HW filter on device bond12 [ 238.700847][T12487] 8021q: adding VLAN 0 to HW filter on device bond13 [ 238.703894][T12487] 8021q: adding VLAN 0 to HW filter on device bond14 [ 238.710726][T12487] 8021q: adding VLAN 0 to HW filter on device bond15 [ 238.714012][T12487] 8021q: adding VLAN 0 to HW filter on device bond16 [ 238.717378][T12487] 8021q: adding VLAN 0 to HW filter on device bond17 [ 238.718792][T12487] 8021q: adding VLAN 0 to HW filter on device bond18 [ 238.724937][T12487] 8021q: adding VLAN 0 to HW filter on device bond19 [ 238.730116][T12487] 8021q: adding VLAN 0 to HW filter on device bond20 [ 238.733418][T12487] 8021q: adding VLAN 0 to HW filter on device bond21 [ 238.738644][T12487] 8021q: adding VLAN 0 to HW filter on device bond22 [ 238.742247][T12487] 8021q: adding VLAN 0 to HW filter on device bond23 [ 238.744711][T12487] 8021q: adding VLAN 0 to HW filter on device bond24 [ 238.751319][T12487] 8021q: adding VLAN 0 to HW filter on device bond25 [ 238.755656][T12487] 8021q: adding VLAN 0 to HW filter on device bond26 [ 238.791529][T12487] 8021q: adding VLAN 0 to HW filter on device bond27 [ 238.820199][T12487] 8021q: adding VLAN 0 to HW filter on device bond28 [ 238.829452][T12487] 8021q: adding VLAN 0 to HW filter on device bond29 [ 238.832461][T12487] 8021q: adding VLAN 0 to HW filter on device bond30 [ 238.881978][T12487] 8021q: adding VLAN 0 to HW filter on device bond31 [ 238.883750][T12487] 8021q: adding VLAN 0 to HW filter on device bond32 [ 238.885495][T12487] vxlan0: left promiscuous mode [ 238.885508][T12487] vxlan0: left allmulticast mode [ 238.949167][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.949290][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.951446][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.951567][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.096370][ T5619] Bluetooth: hci6: command tx timeout [ 239.126957][T11737] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.126993][T11737] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.127101][T11737] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.127124][T11737] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.127297][T11737] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.127321][T11737] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.127960][T11737] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.127986][T11737] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.158202][T12345] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.184636][ T1006] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.184860][ T1006] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.207869][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.243230][T11737] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.243295][T11737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.291583][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.291722][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.425302][T12508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1589'. [ 239.455888][T12508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.647717][T12518] netlink: 'syz.5.1593': attribute type 11 has an invalid length. [ 239.657959][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.909886][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.938306][T12522] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1592'. [ 240.125585][T12538] batadv_slave_1: Caught tx_queue_len zero misconfig [ 240.125724][T12538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1592'. [ 240.502043][ T6123] net_ratelimit: 21 callbacks suppressed [ 240.502063][ T6123] bond5: (slave bridge4): failed to get link speed/duplex [ 240.605176][T12551] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 240.626471][T11737] bond5: (slave bridge4): failed to get link speed/duplex [ 240.713100][T12345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.738332][T11738] bond5: (slave bridge4): failed to get link speed/duplex [ 240.801135][T12558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1599'. [ 240.846772][T11737] bond5: (slave bridge4): failed to get link speed/duplex [ 240.959717][T11737] bond5: (slave bridge4): failed to get link speed/duplex [ 240.979359][T12567] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 241.022749][T12564] tipc: Resetting bearer [ 241.025223][T12568] netlink: 'syz.0.1601': attribute type 16 has an invalid length. [ 241.025243][T12568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1601'. [ 241.025287][T12564] tipc: Resetting bearer [ 241.176970][ T5619] Bluetooth: hci6: command tx timeout [ 241.277285][ T6123] bond5: (slave bridge4): link status up again after 0 ms [ 241.300985][T11737] bond5: (slave bridge4): link status up again after 0 ms [ 241.301014][T11737] bond5: (slave bridge4): failed to get link speed/duplex [ 241.387406][T12580] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1606'. [ 241.474497][T12581] netlink: 'syz.4.1605': attribute type 1 has an invalid length. [ 241.621497][T12345] veth0_vlan: entered promiscuous mode [ 241.650346][T12345] veth1_vlan: entered promiscuous mode [ 241.702239][T12345] veth0_macvtap: entered promiscuous mode [ 241.717815][T12345] veth1_macvtap: entered promiscuous mode [ 241.746387][T12345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.767286][T12345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.847199][ T6125] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.848330][ T6125] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.848527][ T6125] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.848555][ T6125] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.875153][T12599] __nla_validate_parse: 1 callbacks suppressed [ 241.875170][T12599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1610'. [ 242.088981][T11738] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.089002][T11738] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.175645][T12601] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1610'. [ 242.191052][T11738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.191074][T11738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.658618][T12633] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 242.998136][T12642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.039102][T12644] veth0_macvtap: left promiscuous mode [ 243.134391][T12649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.174888][T12659] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1622'. [ 243.174913][T12659] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1622'. [ 243.176908][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 243.256731][ T5619] Bluetooth: hci6: command tx timeout [ 243.500924][T12670] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1626'. [ 243.506620][T12670] ip6gre0: Caught tx_queue_len zero misconfig [ 243.506692][T12670] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 243.689316][T12679] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 243.703280][T12671] syzkaller0: entered promiscuous mode [ 243.703302][T12671] syzkaller0: entered allmulticast mode [ 243.901834][T12686] bridge0: port 3(bond0) entered disabled state [ 243.940776][T12686] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.958863][T12686] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.010455][T12703] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.010472][T12703] IPv6: NLM_F_CREATE should be set when creating new route [ 244.010594][T12703] IPv6: NLM_F_CREATE should be set when creating new route [ 244.095139][T12700] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1633'. [ 244.363676][T12714] tipc: Trying to set illegal importance in message [ 244.381326][ T5281] veth0_macvtap: entered promiscuous mode [ 244.472550][T12724] tipc: Trying to set illegal importance in message [ 244.601115][T12732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1636'. [ 244.989438][T12758] netlink: 63 bytes leftover after parsing attributes in process `syz.0.1640'. [ 245.108640][T12764] netlink: 'syz.2.1641': attribute type 10 has an invalid length. [ 245.115899][T12764] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 245.149442][T12764] team0: Port device netdevsim1 added [ 245.411189][T12776] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1643'. [ 245.581101][ T1006] net_ratelimit: 34 callbacks suppressed [ 245.581122][ T1006] bond5: (slave bridge4): failed to get link speed/duplex [ 245.606266][T12758] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1640'. [ 245.688928][T11737] bond5: (slave bridge4): failed to get link speed/duplex [ 245.798712][ T1006] bond5: (slave bridge4): failed to get link speed/duplex [ 245.871464][T12790] bridge0: port 3(veth0) entered blocking state [ 245.871663][T12790] bridge0: port 3(veth0) entered disabled state [ 245.871844][T12790] veth0: entered allmulticast mode [ 245.873752][T12790] veth0: entered promiscuous mode [ 245.874635][T12790] bridge0: port 3(veth0) entered blocking state [ 245.874769][T12790] bridge0: port 3(veth0) entered forwarding state [ 245.919635][T11737] bond5: (slave bridge4): failed to get link speed/duplex [ 246.029728][ T6125] bond5: (slave bridge4): failed to get link speed/duplex [ 246.139969][ T42] bond5: (slave bridge4): failed to get link speed/duplex [ 246.250029][ T1006] bond5: (slave bridge4): failed to get link speed/duplex [ 246.357742][T11737] bond5: (slave bridge4): failed to get link speed/duplex [ 246.457987][T12843] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 246.470856][T11738] bond5: (slave bridge4): failed to get link speed/duplex [ 246.512649][T12845] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 246.515289][T12845] bond1 (unregistering): Released all slaves [ 246.960098][T12879] netlink: 'syz.5.1666': attribute type 23 has an invalid length. [ 246.960121][T12879] netlink: 'syz.5.1666': attribute type 9 has an invalid length. [ 247.011737][T12879] bridge0: entered promiscuous mode [ 247.062239][T12883] sctp: [Deprecated]: syz.6.1669 (pid 12883) Use of int in max_burst socket option. [ 247.062239][T12883] Use struct sctp_assoc_value instead [ 247.119647][T12887] __nla_validate_parse: 1 callbacks suppressed [ 247.119668][T12887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1668'. [ 247.573498][T12910] syzkaller1: entered promiscuous mode [ 247.573521][T12910] syzkaller1: entered allmulticast mode [ 247.793125][T12923] netlink: 'syz.2.1679': attribute type 11 has an invalid length. [ 247.863451][T12925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1679'. [ 248.370618][T12944] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1688'. [ 248.420025][T12949] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1689'. [ 248.672766][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1692'. [ 248.922679][T12958] netlink: 'syz.5.1693': attribute type 1 has an invalid length. [ 249.012977][T12958] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.516831][T12965] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 249.536393][T12974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1697'. [ 250.884927][T13019] net_ratelimit: 30 callbacks suppressed [ 250.884949][T13019] ip_tables: iptables: counters copy to user failed while replacing table [ 250.908705][T13019] netlink: 'syz.0.1707': attribute type 4 has an invalid length. [ 251.176479][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 252.797111][T11738] bond5: (slave bridge4): failed to get link speed/duplex [ 252.907842][ T6123] bond5: (slave bridge4): failed to get link speed/duplex [ 252.957122][T13029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1710'. [ 253.010303][T13038] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 253.017780][T11738] bond5: (slave bridge4): failed to get link speed/duplex [ 253.128522][T11738] bond5: (slave bridge4): failed to get link speed/duplex [ 253.198145][T13048] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1717'. [ 253.199645][T13049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1717'. [ 253.238751][ T6123] bond5: (slave bridge4): failed to get link speed/duplex [ 253.288237][T13054] netlink: 'syz.5.1718': attribute type 1 has an invalid length. [ 253.330498][T13054] 8021q: adding VLAN 0 to HW filter on device bond3 [ 253.371915][T13054] bond3: (slave veth5): Enslaving as an active interface with a down link [ 253.399508][T13051] bond3: (slave dummy0): making interface the new active one [ 253.400817][T13051] dummy0: entered promiscuous mode [ 253.401395][T13051] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 253.420742][ T6125] bond5: (slave bridge4): failed to get link speed/duplex [ 253.505847][T13063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1721'. [ 253.566671][ T6125] bond5: (slave bridge4): failed to get link speed/duplex [ 253.590233][T13063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1721'. [ 253.594483][ T6123] IPVS: starting estimator thread 0... [ 253.595520][T13065] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 253.634510][T13065] netlink: 'syz.5.1722': attribute type 1 has an invalid length. [ 253.669493][T13065] 8021q: adding VLAN 0 to HW filter on device bond4 [ 253.677096][T13063] netlink: 'syz.2.1721': attribute type 25 has an invalid length. [ 253.692746][T13065] bond4: entered promiscuous mode [ 253.692772][T13065] bond4: entered allmulticast mode [ 253.696699][T13066] IPVS: using max 38 ests per chain, 91200 per kthread [ 253.855785][T13076] trusted_key: syz.0.1724 sent an empty control message without MSG_MORE. [ 253.857833][T13077] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1723'. [ 254.038267][T13085] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1728'. [ 254.317955][T13098] syzkaller0: entered promiscuous mode [ 254.317971][T13098] syzkaller0: entered allmulticast mode [ 254.372328][T13103] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1735'. [ 254.401740][T13102] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1735'. [ 254.452598][T13107] netlink: 'syz.2.1736': attribute type 2 has an invalid length. [ 254.871170][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1743'. [ 254.871201][T13133] bond0: Unable to set down delay as MII monitoring is disabled [ 257.443219][ T5623] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 257.444526][ T5623] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 257.459758][ T5623] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 257.471836][ T5623] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 257.489687][ T5623] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 258.301628][T13198] netlink: 'syz.0.1760': attribute type 12 has an invalid length. [ 258.306141][ T42] net_ratelimit: 23 callbacks suppressed [ 258.306159][ T42] bond5: (slave bridge4): failed to get link speed/duplex [ 258.322184][T13198] __nla_validate_parse: 2 callbacks suppressed [ 258.322202][T13198] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1760'. [ 258.417975][ T42] bond5: (slave bridge4): failed to get link speed/duplex [ 258.558745][ T42] bond5: (slave bridge4): failed to get link speed/duplex [ 258.668202][ T12] bond5: (slave bridge4): failed to get link speed/duplex [ 258.778025][ T12] bond5: (slave bridge4): failed to get link speed/duplex [ 258.890685][ T12] bond5: (slave bridge4): failed to get link speed/duplex [ 259.001021][ T6123] bond5: (slave bridge4): failed to get link speed/duplex [ 259.073696][T13236] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 259.102536][T13238] netlink: NAT attribute has 8 unknown bytes [ 259.102583][T13238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.379410][T13247] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1771'. [ 259.379444][T13247] netlink: 'syz.2.1771': attribute type 7 has an invalid length. [ 259.379456][T13247] netlink: 'syz.2.1771': attribute type 8 has an invalid length. [ 259.379466][T13247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1771'. [ 259.381942][T13243] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1770'. [ 259.434861][T13247] batadv0: entered promiscuous mode [ 259.463305][T13247] batadv0: left promiscuous mode [ 259.511552][T13246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1771'. [ 259.576387][ T5623] Bluetooth: hci7: command tx timeout [ 259.870499][T13265] bond6: entered promiscuous mode [ 259.870516][T13265] bond6: entered allmulticast mode [ 259.875643][T13265] 8021q: adding VLAN 0 to HW filter on device bond6 [ 259.920070][T13266] bond7: entered promiscuous mode [ 259.920094][T13266] bond7: entered allmulticast mode [ 259.920468][T13266] 8021q: adding VLAN 0 to HW filter on device bond7 [ 260.075014][T13273] bridge1: entered allmulticast mode [ 260.270496][T13284] bond5: Removing last ns target with arp_interval on [ 260.469047][T13284] bond6: Removing last ns target with arp_interval on [ 260.493914][T13306] netlink: 'syz.2.1781': attribute type 1 has an invalid length. [ 260.493936][T13306] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1781'. [ 260.559293][T13284] bond7: Removing last ns target with arp_interval on [ 260.634787][T13284] bond8: Removing last ns target with arp_interval on [ 260.674445][T13284] bond9: Removing last ns target with arp_interval on [ 260.700823][T13284] bond10: Removing last ns target with arp_interval on [ 260.728238][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1783'. [ 260.804157][T13284] bond11: Removing last ns target with arp_interval on [ 260.827706][T13284] bond12: Removing last ns target with arp_interval on [ 260.881204][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1783'. [ 260.881546][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1783'. [ 260.882179][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1783'. [ 260.999820][T13190] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.999910][T13190] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.000054][T13190] bridge_slave_0: entered allmulticast mode [ 261.001929][T13190] bridge_slave_0: entered promiscuous mode [ 261.053195][T13190] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.058826][T13190] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.058998][T13190] bridge_slave_1: entered allmulticast mode [ 261.061653][T13190] bridge_slave_1: entered promiscuous mode [ 261.135079][T13190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.148832][T13190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.221466][T13190] team0: Port device team_slave_0 added [ 261.224849][T13190] team0: Port device team_slave_1 added [ 261.270109][T13339] sit0: Caught tx_queue_len zero misconfig [ 261.387714][T13190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.387733][T13190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.387756][T13190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.391736][T13190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.391753][T13190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.391774][T13190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.569809][T13190] hsr_slave_0: entered promiscuous mode [ 261.573258][T13190] hsr_slave_1: entered promiscuous mode [ 261.582068][T13190] debugfs: 'hsr0' already exists in 'hsr' [ 261.582098][T13190] Cannot create hsr debugfs directory [ 261.656887][ T5623] Bluetooth: hci7: command tx timeout [ 261.804832][T13355] tipc: Enabling of bearer rejected, failed to enable media [ 262.174108][T13370] syzkaller0: entered promiscuous mode [ 262.174137][T13370] syzkaller0: entered allmulticast mode [ 262.245953][T13377] 8021q: VLANs not supported on ip_vti0 [ 262.255300][T13190] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 262.288612][T13190] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 262.289537][T13190] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 262.329852][T13190] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 262.342179][T13190] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 262.360765][T13190] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 262.362347][T13190] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 262.375107][T13190] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 262.447448][T13388] x_tables: duplicate entry at hook 1 [ 262.505502][T13190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.553491][T13190] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.580570][ T6123] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.580677][ T6123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.619764][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.619861][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.728714][T13396] tc_dump_action: action bad kind [ 263.325639][T13421] netlink: 'syz.6.1806': attribute type 12 has an invalid length. [ 263.426437][ T1006] net_ratelimit: 20 callbacks suppressed [ 263.426457][ T1006] bond5: (slave bridge4): failed to get link speed/duplex [ 263.440175][T13431] __nla_validate_parse: 5 callbacks suppressed [ 263.440193][T13431] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1806'. [ 263.529519][T13429] vlan3: entered promiscuous mode [ 263.547353][T13442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1811'. [ 263.618165][T13190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.630160][ T1006] bond5: (slave bridge4): failed to get link speed/duplex [ 263.736442][ T5623] Bluetooth: hci7: command tx timeout [ 263.739544][T11737] bond5: (slave bridge4): failed to get link speed/duplex [ 263.753121][T13449] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 263.847784][ T6123] bond5: (slave bridge4): failed to get link speed/duplex [ 264.039950][T13190] veth0_vlan: entered promiscuous mode [ 264.048254][ T6123] bond5: (slave bridge4): failed to get link speed/duplex [ 264.080843][T13190] veth1_vlan: entered promiscuous mode [ 264.149901][T13471] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1818'. [ 264.169190][T13469] netlink: 'syz.0.1817': attribute type 32 has an invalid length. [ 264.174888][T13471] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 264.179415][ T42] bond5: (slave bridge4): failed to get link speed/duplex [ 264.225363][T13190] veth0_macvtap: entered promiscuous mode [ 264.255713][T13190] veth1_macvtap: entered promiscuous mode [ 264.298140][T11737] bond5: (slave bridge4): failed to get link speed/duplex [ 264.321420][T13475] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1819'. [ 264.329983][T13190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.365596][T13190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.428449][ T1173] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.428499][ T1173] bond5: (slave bridge4): failed to get link speed/duplex [ 264.432731][T11737] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.433372][T11737] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.433405][T11737] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.519240][ T6123] dummy0: left promiscuous mode [ 264.664676][ T6123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.664696][ T6123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.727938][T13483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1824'. [ 264.763889][ T6123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.763909][ T6123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.219621][T13514] hsr0: entered promiscuous mode [ 265.792196][T13513] hsr0: left promiscuous mode [ 265.819706][ T5623] Bluetooth: hci7: command tx timeout [ 265.927800][T13544] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1835'. [ 266.884268][T13580] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1845'. [ 266.958830][T13580] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1845'. [ 266.958857][T13580] netlink: 'syz.5.1845': attribute type 1 has an invalid length. [ 267.062685][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1848'. [ 267.062708][T13587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1848'. [ 267.232526][T13598] netlink: 'syz.2.1848': attribute type 2 has an invalid length. [ 267.388157][T13587] bridge0: port 3(bond0) entered disabled state [ 267.398665][T13587] bond0: left allmulticast mode [ 267.398686][T13587] bond_slave_0: left allmulticast mode [ 267.398703][T13587] bond_slave_1: left allmulticast mode [ 267.398736][T13587] bond0: left promiscuous mode [ 267.398747][T13587] bond_slave_0: left promiscuous mode [ 267.398960][T13587] bond_slave_1: left promiscuous mode [ 267.399389][T13587] bridge0: port 3(bond0) entered disabled state [ 267.472595][T13587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.511806][T13587] bond34: (slave bond0): making interface the new active one [ 267.526794][T13587] bond34: (slave bond0): Enslaving as an active interface with an up link [ 267.561477][T13589] bond34 (unregistering): (slave bond0): Releasing active interface [ 267.585862][T13589] bond34 (unregistering): Released all slaves [ 267.851029][T13624] netlink: 'syz.5.1854': attribute type 1 has an invalid length. [ 267.930001][T13624] 8021q: adding VLAN 0 to HW filter on device bond14 [ 267.935445][T13624] bond13: (slave bond14): making interface the new active one [ 267.935900][T13624] bond13: (slave bond14): Enslaving as an active interface with an up link [ 268.014413][T13624] bond13: (slave gretap1): Enslaving as a backup interface with an up link [ 268.032162][T13624] 8021q: adding VLAN 0 to HW filter on device bond13 [ 268.052189][T13634] netlink: 'syz.5.1854': attribute type 1 has an invalid length. [ 268.259571][T13641] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 268.371021][ T30] audit: type=1804 audit(1790937111.615:6): pid=13646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1859" name="/newroot/6/cgroup.controllers" dev="tmpfs" ino=50 res=1 errno=0 [ 268.371069][ T30] audit: type=1800 audit(1790937111.615:7): pid=13646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1859" name="cgroup.controllers" dev="tmpfs" ino=50 res=0 errno=0 [ 268.532839][ T1109] net_ratelimit: 24 callbacks suppressed [ 268.532862][ T1109] bond5: (slave bridge4): failed to get link speed/duplex [ 268.648592][ T1109] bond5: (slave bridge4): failed to get link speed/duplex [ 268.698819][T13661] netlink: 'syz.7.1863': attribute type 1 has an invalid length. [ 268.795930][T13669] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 268.803151][T13671] netlink: 'syz.7.1863': attribute type 10 has an invalid length. [ 268.803171][T13671] __nla_validate_parse: 6 callbacks suppressed [ 268.803182][T13671] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1863'. [ 268.887739][ T12] bond5: (slave bridge4): failed to get link speed/duplex [ 268.912709][T13671] dummy0: entered promiscuous mode [ 268.998514][ T12] bond5: (slave bridge4): failed to get link speed/duplex [ 269.126086][ T1173] bond5: (slave bridge4): failed to get link speed/duplex [ 269.237827][ T1109] bond5: (slave bridge4): failed to get link speed/duplex [ 269.240787][T13691] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1869'. [ 269.332321][T13691] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 269.347766][ T1006] bond5: (slave bridge4): failed to get link speed/duplex [ 269.467321][ T6123] bond5: (slave bridge4): failed to get link speed/duplex [ 269.508749][T13704] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1874'. [ 269.580336][ T6123] bond5: (slave bridge4): failed to get link speed/duplex [ 269.740992][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888069b46000: rx timeout, send abort [ 269.846370][T13718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1878'. [ 269.848406][T13718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1878'. [ 270.097385][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1880'. [ 270.123943][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1880'. [ 270.240065][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888058ae2c00: rx timeout, send abort [ 270.241043][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888069b46000: abort rx timeout. Force session deactivation [ 270.337618][T13754] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1883'. [ 270.371651][T13754] vlan2: entered allmulticast mode [ 270.371672][T13754] bridge2: entered allmulticast mode [ 270.374466][T13754] bridge2: port 1(erspan0) entered blocking state [ 270.374650][T13754] bridge2: port 1(erspan0) entered disabled state [ 270.374804][T13754] erspan0: entered allmulticast mode [ 270.413419][T13754] erspan0: entered promiscuous mode [ 270.414879][T13754] bridge2: port 1(erspan0) entered blocking state [ 270.414988][T13754] bridge2: port 1(erspan0) entered forwarding state [ 270.570939][T13761] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1886'. [ 270.670014][T13765] netlink: 2136 bytes leftover after parsing attributes in process `syz.6.1887'. [ 270.740119][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888058ae2c00: abort rx timeout. Force session deactivation [ 272.984802][T13730] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 273.433883][T13793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.530706][T13793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.648403][T13778] net_ratelimit: 36 callbacks suppressed [ 273.648425][T13778] bond5: (slave bridge4): failed to get link speed/duplex [ 273.756719][ T6125] bond5: (slave bridge4): failed to get link speed/duplex [ 273.868455][T13775] bond5: (slave bridge4): failed to get link speed/duplex [ 273.941734][T13828] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1901'. [ 274.011217][T13828] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 274.028670][T13778] bond5: (slave bridge4): failed to get link speed/duplex [ 274.140098][T11740] bond5: (slave bridge4): failed to get link speed/duplex [ 274.192814][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1903'. [ 274.248039][T11740] bond5: (slave bridge4): failed to get link speed/duplex [ 274.293062][T13846] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1906'. [ 274.315623][T13846] ip6erspan0: entered promiscuous mode [ 274.319659][T13846] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1906'. [ 274.349670][T13850] netlink: 280 bytes leftover after parsing attributes in process `syz.6.1907'. [ 274.358003][T11740] bond5: (slave bridge4): failed to get link speed/duplex [ 274.512022][T13859] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 274.534730][T13859] bond8 (unregistering): Released all slaves [ 274.706243][T13778] bond5: (slave bridge4): failed to get link speed/duplex [ 274.819918][ T6125] bond5: (slave bridge4): failed to get link speed/duplex [ 275.040517][T13886] netlink: 'syz.2.1918': attribute type 1 has an invalid length. [ 275.040539][T13886] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1918'. [ 275.319460][T13902] syzkaller1: entered promiscuous mode [ 275.319483][T13902] syzkaller1: entered allmulticast mode [ 275.406874][T13907] netlink: 'syz.7.1923': attribute type 10 has an invalid length. [ 275.411954][T13907] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 275.413401][T13907] team0: Port device netdevsim1 added [ 275.414665][T13907] netlink: 'syz.7.1923': attribute type 10 has an invalid length. [ 275.519436][T13907] team0: Port device netdevsim1 removed [ 275.522014][T13907] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 275.523224][T13907] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 275.785656][T13928] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1929'. [ 276.638076][T13937] syzkaller0: entered promiscuous mode [ 276.638098][T13937] syzkaller0: entered allmulticast mode [ 276.788999][T13952] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1932'. [ 276.887592][T13952] tipc: Resetting bearer [ 276.887783][T13952] tipc: Resetting bearer [ 276.895060][T13954] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1932'. [ 276.983504][T13956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1934'. [ 277.110194][T13958] batman_adv: batadv0: Adding interface: dummy0 [ 277.110214][T13958] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.111068][T13958] batman_adv: batadv0: Interface activated: dummy0 [ 277.488187][T13978] netlink: 'syz.2.1942': attribute type 12 has an invalid length. [ 277.610256][T13971] sock: sock_timestamping_bind_phc: sock not bind to device [ 277.810569][T13986] bridge0: port 1(veth0) entered blocking state [ 277.812323][T13986] bridge0: port 1(veth0) entered disabled state [ 277.822158][T13986] veth0: entered promiscuous mode [ 278.155278][T14009] block nbd0: server does not support multiple connections per device. [ 278.155911][T14009] block nbd0: shutting down sockets [ 278.367389][T14016] ip6gre2: entered promiscuous mode [ 278.367412][T14016] ip6gre2: entered allmulticast mode [ 278.404679][T14016] lo: Caught tx_queue_len zero misconfig [ 278.497753][T13778] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 278.497986][T13778] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 278.531128][ T5721] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 278.675916][T14025] tipc: Enabling of bearer rejected, already enabled [ 278.678177][T11420] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 278.687281][T11740] net_ratelimit: 47 callbacks suppressed [ 278.687297][T11740] bond5: (slave bridge4): failed to get link speed/duplex [ 278.728396][T14036] netlink: 'syz.6.1957': attribute type 1 has an invalid length. [ 278.801581][ T1173] bond5: (slave bridge4): failed to get link speed/duplex [ 278.907225][T13775] bond5: (slave bridge4): failed to get link speed/duplex [ 278.964688][T14046] netlink: 'syz.6.1957': attribute type 1 has an invalid length. [ 278.964703][T14046] __nla_validate_parse: 10 callbacks suppressed [ 278.964709][T14046] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1957'. [ 279.067088][ T5721] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 279.126836][T11740] bond5: (slave bridge4): failed to get link speed/duplex [ 279.307152][T14067] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 279.366282][T13775] bond5: (slave bridge4): failed to get link speed/duplex [ 279.370694][T14069] xt_hashlimit: size too large, truncated to 1048576 [ 279.478268][ T6123] bond5: (slave bridge4): failed to get link speed/duplex [ 279.586207][T13775] bond5: (slave bridge4): failed to get link speed/duplex [ 279.696389][T13778] bond5: (slave bridge4): failed to get link speed/duplex [ 279.763348][T14085] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1968'. [ 279.790090][T14086] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 279.790330][T14086] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 279.816417][T11740] bond5: (slave bridge4): failed to get link speed/duplex [ 279.964416][T14091] ip6tnl0: Caught tx_queue_len zero misconfig [ 280.017989][T14101] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1970'. [ 280.065650][T14105] netlink: 'syz.0.1971': attribute type 11 has an invalid length. [ 280.080793][T14097] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1974'. [ 280.212833][T14111] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1974'. [ 280.264896][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1975'. [ 281.064704][T14142] netlink: 'syz.7.1985': attribute type 11 has an invalid length. [ 281.090233][T14144] ip6t_REJECT: ECHOREPLY is not supported [ 281.142685][T14144] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1987'. [ 281.143585][T14144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1987'. [ 281.202479][T14151] tipc: Resetting bearer [ 281.202841][T14151] tipc: Resetting bearer [ 281.252149][T14152] netlink: 'syz.6.1988': attribute type 1 has an invalid length. [ 281.529008][T14158] bond1: (slave veth3): Enslaving as an active interface with a down link [ 281.583966][T14152] bond1: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 281.683145][T14164] netlink: 'syz.2.1991': attribute type 2 has an invalid length. [ 282.296243][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 282.574288][T14194] netlink: 'syz.7.2000': attribute type 11 has an invalid length. [ 282.671786][T14203] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2004'. [ 282.675670][T14185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.691691][T14185] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.721273][T14185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.724687][T14206] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2002'. [ 282.850952][T14185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.854497][T14185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.890185][T14185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 282.890207][T14185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 282.930676][T14185] veth1_vlan: left promiscuous mode [ 282.932532][T14185] veth0_vlan: left promiscuous mode [ 282.934449][T14185] veth0_vlan: entered promiscuous mode [ 282.954710][T14185] veth1_vlan: entered promiscuous mode [ 282.970684][T14185] veth1_macvtap: left promiscuous mode [ 282.972213][T14185] veth0_macvtap: left promiscuous mode [ 282.973886][T14185] veth0_macvtap: entered promiscuous mode [ 282.975638][T14185] veth1_macvtap: entered promiscuous mode [ 283.008027][T14185] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 283.011185][T14185] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 283.012779][T14185] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 283.014495][T14185] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 283.105235][T14185] 8021q: adding VLAN 0 to HW filter on device bond4 [ 283.152077][T14185] 8021q: adding VLAN 0 to HW filter on device bond5 [ 283.165057][T14185] 8021q: adding VLAN 0 to HW filter on device bond6 [ 283.177144][T14185] 8021q: adding VLAN 0 to HW filter on device bond7 [ 283.180429][T14185] 8021q: adding VLAN 0 to HW filter on device bond8 [ 283.182581][T14185] 8021q: adding VLAN 0 to HW filter on device bond9 [ 283.210930][T14185] 8021q: adding VLAN 0 to HW filter on device bond10 [ 283.213870][T14185] 8021q: adding VLAN 0 to HW filter on device bond11 [ 283.233048][T14185] 8021q: adding VLAN 0 to HW filter on device bond12 [ 283.285495][T14206] gretap0: entered promiscuous mode [ 283.322191][ T1173] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 283.323758][ T1173] bond2: active interface up! [ 283.408609][T14211] 0ªî{X¹¦: renamed from gretap0 [ 283.424195][T14211] 0ªî{X¹¦: left promiscuous mode [ 283.424218][T14211] 0ªî{X¹¦: entered allmulticast mode [ 283.653782][T13775] bond3: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 283.668301][T14227] rds_bind: 23 callbacks suppressed [ 283.668318][T14227] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 283.757170][ T1173] net_ratelimit: 25 callbacks suppressed [ 283.757191][ T1173] bond5: (slave bridge4): failed to get link speed/duplex [ 283.916236][T13775] bond5: (slave bridge4): failed to get link speed/duplex [ 284.027724][ T1006] bond5: (slave bridge4): failed to get link speed/duplex [ 284.095134][T14240] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 284.136652][ T1006] bond5: (slave bridge4): failed to get link speed/duplex [ 284.247972][ T1006] bond5: (slave bridge4): failed to get link speed/duplex [ 284.311555][T14246] __nla_validate_parse: 9 callbacks suppressed [ 284.311568][T14246] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2013'. [ 284.311586][T14246] netlink: 'syz.5.2013': attribute type 7 has an invalid length. [ 284.311592][T14246] netlink: 'syz.5.2013': attribute type 8 has an invalid length. [ 284.311599][T14246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2013'. [ 284.333064][T14246] bond0: entered promiscuous mode [ 284.333086][T14246] bond_slave_0: entered promiscuous mode [ 284.333293][T14246] bond_slave_1: entered promiscuous mode [ 284.340263][T14246] bond0: left promiscuous mode [ 284.340286][T14246] bond_slave_0: left promiscuous mode [ 284.340494][T14246] bond_slave_1: left promiscuous mode [ 284.389372][ T1173] bond5: (slave bridge4): failed to get link speed/duplex [ 284.461093][T14256] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2016'. [ 284.499677][ T6125] bond5: (slave bridge4): failed to get link speed/duplex [ 284.555561][T14256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2016'. [ 284.716381][T13778] bond5: (slave bridge4): failed to get link speed/duplex [ 284.720603][T14262] Bluetooth: hci0: unsupported parameter 5135 [ 284.720622][T14262] Bluetooth: hci0: unsupported parameter 8192 [ 284.720633][T14262] Bluetooth: hci0: unsupported parameter 5135 [ 284.720644][T14262] Bluetooth: hci0: unsupported parameter 8192 [ 284.827487][ T6123] bond5: (slave bridge4): failed to get link speed/duplex [ 284.907836][T14275] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2021'. [ 284.909274][T14275] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2021'. [ 284.946782][T14273] xt_connbytes: Forcing CT accounting to be enabled [ 285.074354][T14283] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2023'. [ 285.122274][T14283] ip6gre1: entered promiscuous mode [ 285.122289][T14283] ip6gre1: entered allmulticast mode [ 285.135342][T14283] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2023'. [ 285.323505][ T1173] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 285.323710][ T1173] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 285.347242][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 285.526860][T11420] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 285.720027][T14280] netlink: 'syz.5.2022': attribute type 5 has an invalid length. [ 285.750042][T14305] sctp: [Deprecated]: syz.0.2028 (pid 14305) Use of int in maxseg socket option. [ 285.750042][T14305] Use struct sctp_assoc_value instead [ 286.078410][T14316] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2031'. [ 286.219461][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 286.582259][T14347] syzkaller0: left promiscuous mode [ 286.582281][T14347] syzkaller0: left allmulticast mode [ 287.032333][T14361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2043'. [ 288.796958][ T1006] net_ratelimit: 33 callbacks suppressed [ 288.796980][ T1006] bond5: (slave bridge4): failed to get link speed/duplex [ 288.908115][ T6123] bond5: (slave bridge4): failed to get link speed/duplex [ 289.018077][ T1006] bond5: (slave bridge4): failed to get link speed/duplex [ 289.126304][T13775] bond5: (slave bridge4): failed to get link speed/duplex [ 289.226594][T14324] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 289.247850][ T6123] bond5: (slave bridge4): failed to get link speed/duplex [ 289.352944][ T1173] bond5: (slave bridge4): failed to get link speed/duplex [ 289.457274][ T1006] bond5: (slave bridge4): failed to get link speed/duplex [ 289.577004][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 289.599621][T14396] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 289.606285][ T1173] bond5: (slave bridge4): failed to get link speed/duplex [ 289.632867][T14396] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 289.645823][T14390] __nla_validate_parse: 3 callbacks suppressed [ 289.645843][T14390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2050'. [ 289.658897][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 290.131603][T14402] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2050'. [ 290.134982][T14392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2050'. [ 290.167059][T14394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2050'. [ 290.170953][T14392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2050'. [ 290.181683][T14394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2050'. [ 290.191966][T14392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2050'. [ 290.197977][T14394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2050'. [ 290.198886][T14392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2050'. [ 290.199218][T14394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2050'. [ 291.170593][T14453] 8021q: adding VLAN 0 to HW filter on device bond15 [ 291.221021][T14460] bond15 (unregistering): Released all slaves [ 291.396988][T13775] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.397060][T13775] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.397092][T13775] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.397123][T13775] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.423517][T14474] xt_cgroup: no path or classid specified [ 291.583702][T14486] netlink: 'syz.0.2070': attribute type 1 has an invalid length. [ 291.698126][T14486] 8021q: adding VLAN 0 to HW filter on device bond8 [ 291.714997][T14487] netlink: 'syz.0.2070': attribute type 1 has an invalid length. [ 291.767692][T14489] bond8: (slave veth5): Enslaving as an active interface with a down link [ 291.933203][T14507] syzkaller0: entered promiscuous mode [ 291.933224][T14507] syzkaller0: entered allmulticast mode [ 292.119205][T14514] smbdirect: ib_dev[syz1] removed [ 292.172398][T14522] x_tables: duplicate entry at hook 1 [ 292.190007][T14520] syzkaller1: entered promiscuous mode [ 292.190032][T14520] syzkaller1: entered allmulticast mode [ 292.255803][T14520] syzkaller1: left promiscuous mode [ 292.255825][T14520] syzkaller1: left allmulticast mode [ 292.293617][T14520] syzkaller1: entered allmulticast mode [ 292.411570][T14527] batman_adv: batadv0: Interface deactivated: dummy0 [ 292.411661][T14527] batman_adv: batadv0: Removing interface: dummy0 [ 292.832485][T14547] netlink: 'syz.0.2085': attribute type 10 has an invalid length. [ 293.283172][T14567] x_tables: duplicate underflow at hook 2 [ 293.305872][T14570] netlink: 'syz.6.2092': attribute type 2 has an invalid length. [ 293.328976][T14570] : entered promiscuous mode [ 293.723820][T14590] bond39: entered promiscuous mode [ 293.724389][T14590] 8021q: adding VLAN 0 to HW filter on device bond39 [ 293.849407][T13775] net_ratelimit: 29 callbacks suppressed [ 293.849427][T13775] bond5: (slave bridge4): failed to get link speed/duplex [ 293.956117][ T1173] bond5: (slave bridge4): failed to get link speed/duplex [ 294.023122][T14612] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 294.066614][ T1006] bond5: (slave bridge4): failed to get link speed/duplex [ 294.186538][T11740] bond5: (slave bridge4): failed to get link speed/duplex [ 294.296917][T13778] bond5: (slave bridge4): failed to get link speed/duplex [ 297.406153][T13775] bond5: (slave bridge4): failed to get link speed/duplex [ 297.517127][T14682] __nla_validate_parse: 39 callbacks suppressed [ 297.517146][T14682] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2114'. [ 297.548269][T13775] bond5: (slave bridge4): failed to get link speed/duplex [ 297.634851][T14686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2117'. [ 297.635004][T14686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2117'. [ 297.635128][T14686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2117'. [ 297.635256][T14686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2117'. [ 297.635389][T14686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2117'. [ 297.635521][T14686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2117'. [ 297.635652][T14686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2117'. [ 297.657621][T14686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2117'. [ 297.657784][T14686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2117'. [ 297.668018][ T1173] bond5: (slave bridge4): failed to get link speed/duplex [ 297.772133][T14698] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 297.778597][T11740] bond5: (slave bridge4): failed to get link speed/duplex [ 297.838934][T14698] debugfs: '.PÑè'óG!DEÒSˆ' already exists in 'ieee80211' [ 297.896935][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 297.897492][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 298.535649][T14745] žÿ: renamed from team_slave_1 (while UP) [ 298.549174][T14743] netlink: 'syz.6.2128': attribute type 3 has an invalid length. [ 299.284051][T14755] bond0: (slave bond_slave_1): Releasing backup interface [ 299.313015][ T6125] net_ratelimit: 6 callbacks suppressed [ 299.313037][ T6125] bond5: (slave bridge4): failed to get link speed/duplex [ 299.422003][ T1173] bond5: (slave bridge4): failed to get link speed/duplex [ 299.532965][ T6123] bond5: (slave bridge4): failed to get link speed/duplex [ 299.585845][T14765] netlink: 'syz.7.2134': attribute type 30 has an invalid length. [ 299.602937][T14765] vxlan0: entered promiscuous mode [ 299.602959][T14765] vxlan0: entered allmulticast mode [ 299.677015][ T1173] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.677067][ T1173] bond5: (slave bridge4): failed to get link speed/duplex [ 299.677900][ T1173] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.677933][ T1173] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.677961][ T1173] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.684821][T14776] tipc: Started in network mode [ 299.684852][T14776] tipc: Node identity 1a530c37b4f5, cluster identity 4711 [ 299.685004][T14776] tipc: Enabled bearer , priority 10 [ 299.795943][T14775] tipc: Resetting bearer [ 299.850330][T14775] tipc: Disabling bearer [ 299.854851][T14783] netlink: ct family unspecified [ 299.854894][T14783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.919656][ T1006] bond5: (slave bridge4): failed to get link speed/duplex [ 300.026673][ T1006] bond5: (slave bridge4): failed to get link speed/duplex [ 300.065891][T14787] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 300.136377][ T1173] bond5: (slave bridge4): failed to get link speed/duplex [ 300.390025][T14795] 8021q: adding VLAN 0 to HW filter on device bond1 [ 300.392309][T14805] netlink: 'syz.7.2145': attribute type 2 has an invalid length. [ 300.427361][ T4947] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 300.571655][ T1006] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 300.571904][ T1006] bond1: (slave veth3): making interface the new active one [ 300.574620][ T1006] bond1: active interface up! [ 300.627165][ T6123] bond5: (slave bridge4): failed to get link speed/duplex [ 300.915585][T14820] xt_hashlimit: size too large, truncated to 1048576 [ 301.350350][T11425] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 301.398444][T14842] bridge_slave_0: left allmulticast mode [ 301.398471][T14842] bridge_slave_0: left promiscuous mode [ 301.398692][T14842] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.439740][T14842] veth0: left allmulticast mode [ 301.439768][T14842] veth0: left promiscuous mode [ 301.442308][T14842] bridge0: port 3(veth0) entered disabled state [ 301.465167][T14842] bridge_slave_1: left allmulticast mode [ 301.465196][T14842] bridge_slave_1: left promiscuous mode [ 301.465456][T14842] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.641933][T14851] syz.5.2159 (14851) used obsolete PPPIOCDETACH ioctl [ 301.866798][T14859] netlink: 'syz.6.2162': attribute type 12 has an invalid length. [ 304.306271][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 304.326788][ T1173] net_ratelimit: 35 callbacks suppressed [ 304.326810][ T1173] bond5: (slave bridge4): failed to get link speed/duplex [ 304.436169][ T1173] bond5: (slave bridge4): failed to get link speed/duplex [ 304.546197][ T1173] bond5: (slave bridge4): failed to get link speed/duplex [ 304.656826][T13780] bond5: (slave bridge4): failed to get link speed/duplex [ 304.826798][T13778] bond5: (slave bridge4): failed to get link speed/duplex [ 304.868526][T14890] __nla_validate_parse: 65 callbacks suppressed [ 304.868546][T14890] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2172'. [ 304.962991][T14894] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2171'. [ 304.971728][ T5623] Bluetooth: hci7: link tx timeout [ 304.971928][ T5623] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.105824][T14894] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2171'. [ 305.337204][T13780] bond5: (slave bridge4): failed to get link speed/duplex [ 305.446723][T13780] bond5: (slave bridge4): failed to get link speed/duplex [ 305.557845][ T1173] bond5: (slave bridge4): failed to get link speed/duplex [ 305.667422][T13780] bond5: (slave bridge4): failed to get link speed/duplex [ 305.777550][ T1006] bond5: (slave bridge4): failed to get link speed/duplex [ 305.944209][T14924] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2180'. [ 305.964444][T14919] syzkaller1: entered promiscuous mode [ 305.964466][T14919] syzkaller1: entered allmulticast mode [ 306.211614][T14933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2182'. [ 306.347157][T14941] bond3: (slave dummy0): Releasing active interface [ 306.352884][T14941] bond3: (slave veth5): making interface the new active one [ 306.390957][T14941] batman_adv: batadv0: Adding interface: dummy0 [ 306.390975][T14941] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.391002][T14941] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 306.477953][T14947] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2187'. [ 306.478158][T14947] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2187'. [ 306.478326][T14947] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2187'. [ 306.479875][T14948] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2188'. [ 306.496611][T14947] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2187'. [ 306.663729][T14955] 8021q: adding VLAN 0 to HW filter on device bond2 [ 306.668263][T14955] team0: Port device bond2 added [ 307.017138][ T5619] Bluetooth: hci7: command 0x0406 tx timeout [ 307.245096][T14970] netlink: 'syz.7.2193': attribute type 1 has an invalid length. [ 307.245113][T14970] netlink: 'syz.7.2193': attribute type 1 has an invalid length. [ 307.341384][T14972] bridge5: entered promiscuous mode [ 307.934584][T15000] wg2: Caught tx_queue_len zero misconfig [ 307.992762][T15000] macsec1: entered promiscuous mode [ 307.994211][T15003] C: renamed from veth1_to_team (while UP) [ 308.019074][T15003] netlink: 'syz.7.2205': attribute type 3 has an invalid length. [ 308.859985][ T1109] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 309.386875][T13775] net_ratelimit: 34 callbacks suppressed [ 309.386897][T13775] bond5: (slave bridge4): failed to get link speed/duplex [ 309.470998][T15082] syzkaller0: entered promiscuous mode [ 309.471020][T15082] syzkaller0: entered allmulticast mode [ 309.536141][T13780] bond5: (slave bridge4): failed to get link speed/duplex [ 309.646680][T13775] bond5: (slave bridge4): failed to get link speed/duplex [ 309.756419][ T94] bond5: (slave bridge4): failed to get link speed/duplex [ 309.817926][T13780] wlan1: Trigger new scan to find an IBSS to join [ 309.866814][T13780] bond5: (slave bridge4): failed to get link speed/duplex [ 309.976882][T11738] bond5: (slave bridge4): failed to get link speed/duplex [ 310.085896][ T30] audit: type=1800 audit(1790937153.325:8): pid=15095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2226" name=CB dev="tmpfs" ino=1011 res=0 errno=0 [ 310.086370][T11738] bond5: (slave bridge4): failed to get link speed/duplex [ 310.196213][ T9635] bond5: (slave bridge4): failed to get link speed/duplex [ 310.306904][T11738] bond5: (slave bridge4): failed to get link speed/duplex [ 310.416490][T13780] bond5: (slave bridge4): failed to get link speed/duplex [ 311.789141][T15050] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 312.113279][T11424] hid-generic 0005:0008:0009.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on aa:aa:aa:aa:aa:aa [ 312.160217][T15122] tipc: Enabled bearer , priority 0 [ 312.478623][T15127] fido_id[15127]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci7/hci7:200/report_descriptor': No such file or directory [ 312.588738][T15144] __nla_validate_parse: 68 callbacks suppressed [ 312.588756][T15144] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2234'. [ 312.629651][T15147] netlink: 'syz.7.2235': attribute type 1 has an invalid length. [ 312.629673][T15147] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2235'. [ 312.732015][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2237'. [ 312.732039][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2237'. [ 312.744813][T15157] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2238'. [ 312.744835][T15157] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2238'. [ 312.744858][T15157] netlink: 'syz.5.2238': attribute type 13 has an invalid length. [ 312.786992][ T94] wlan1: Trigger new scan to find an IBSS to join [ 313.193459][T15184] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2245'. [ 313.194143][T15184] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2245'. [ 313.544466][T15205] ip6tnl1: entered allmulticast mode [ 313.618973][T15212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2251'. [ 313.621005][T15212] netlink: 'syz.2.2251': attribute type 1 has an invalid length. [ 313.671998][T15212] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2251'. [ 313.866675][ T1109] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 313.866924][ T1109] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 313.897883][T11425] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 313.899904][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 314.616713][T11425] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 314.858705][T11425] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 315.829498][ T94] wlan1: Trigger new scan to find an IBSS to join [ 316.337316][T13780] net_ratelimit: 31 callbacks suppressed [ 316.337339][T13780] bond5: (slave bridge4): failed to get link speed/duplex [ 316.446960][ T94] bond5: (slave bridge4): failed to get link speed/duplex [ 316.556888][ T1109] bond5: (slave bridge4): failed to get link speed/duplex [ 316.669346][T13775] bond5: (slave bridge4): failed to get link speed/duplex [ 316.709652][ T94] wlan1: Creating new IBSS network, BSSID be:0e:70:8a:f9:80 [ 316.780724][T13780] bond5: (slave bridge4): failed to get link speed/duplex [ 317.028791][T13775] bond5: (slave bridge4): failed to get link speed/duplex [ 317.093709][T15282] netlink: 'syz.7.2265': attribute type 1 has an invalid length. [ 317.121927][T15281] syzkaller0: entered promiscuous mode [ 317.121951][T15281] syzkaller0: entered allmulticast mode [ 317.125275][T15282] netlink: 'syz.7.2265': attribute type 1 has an invalid length. [ 317.247912][T13780] bond5: (slave bridge4): failed to get link speed/duplex [ 317.344322][T15290] tipc: Resetting bearer [ 317.407528][T13780] bond5: (slave bridge4): link status up again after 0 ms [ 317.407558][T13780] bond5: (slave bridge4): failed to get link speed/duplex [ 317.553915][T15295] bond3: option lacp_active: invalid value (5) [ 317.562826][T15295] bond3 (unregistering): Released all slaves [ 317.576197][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 317.600426][T13775] bond5: (slave bridge4): failed to get link speed/duplex [ 317.682759][T15300] __nla_validate_parse: 6 callbacks suppressed [ 317.682773][T15300] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2270'. [ 317.682828][T15300] netlink: 'syz.6.2270': attribute type 1 has an invalid length. [ 317.871224][T15302] wg2 speed is unknown, defaulting to 1000 [ 317.871340][T15302] wg2 speed is unknown, defaulting to 1000 [ 317.871921][T15302] wg2 speed is unknown, defaulting to 1000 [ 317.875547][T15302] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 317.875570][T15302] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 317.875589][T15302] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 317.891350][T15302] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 317.937595][T15302] wg2 speed is unknown, defaulting to 1000 [ 317.940931][T15302] wg2 speed is unknown, defaulting to 1000 [ 317.942888][T15302] wg2 speed is unknown, defaulting to 1000 [ 317.944719][T15302] wg2 speed is unknown, defaulting to 1000 [ 317.950877][T15302] wg2 speed is unknown, defaulting to 1000 [ 317.952828][T15302] wg2 speed is unknown, defaulting to 1000 [ 317.960968][T15302] wg2 speed is unknown, defaulting to 1000 [ 317.972745][T15302] wg2 speed is unknown, defaulting to 1000 [ 319.879125][T15266] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 320.199447][T15333] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 320.201737][T15333] bond3 (unregistering): Released all slaves [ 320.251324][T15338] netlink: 'syz.0.2279': attribute type 1 has an invalid length. [ 320.251345][T15338] netlink: 'syz.0.2279': attribute type 1 has an invalid length. [ 320.535554][T15349] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2281'. [ 320.681144][T15366] netlink: 'syz.0.2285': attribute type 1 has an invalid length. [ 320.681158][T15366] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2285'. [ 320.898350][T15373] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2286'. [ 321.240543][T15356] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 321.269500][T15386] netlink: 292 bytes leftover after parsing attributes in process `syz.7.2291'. [ 321.269527][T15386] netlink: 292 bytes leftover after parsing attributes in process `syz.7.2291'. [ 321.459213][T15388] ªªªªªª: renamed from vlan0 (while UP) [ 321.487028][ T1109] net_ratelimit: 33 callbacks suppressed [ 321.487049][ T1109] bond5: (slave bridge4): failed to get link speed/duplex [ 321.598482][T13775] bond5: (slave bridge4): failed to get link speed/duplex [ 321.717065][ T1109] bond5: (slave bridge4): failed to get link speed/duplex [ 321.833762][ T94] bond5: (slave bridge4): failed to get link speed/duplex [ 321.897903][T15424] siw: device registration error -23 [ 321.898924][T15424] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2300'. [ 321.948517][T13775] bond5: (slave bridge4): failed to get link speed/duplex [ 322.060351][T13780] bond5: (slave bridge4): failed to get link speed/duplex [ 322.077602][T15433] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2303'. [ 322.077624][T15433] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2303'. [ 322.077635][T15433] tc_dump_action: action bad kind [ 322.099776][T15435] Cannot find add_set index 0 as target [ 322.125413][T15435] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 322.187397][T13780] bond5: (slave bridge4): failed to get link speed/duplex [ 322.297265][ T94] bond5: (slave bridge4): failed to get link speed/duplex [ 322.393588][T15453] syzkaller0: entered promiscuous mode [ 322.393610][T15453] syzkaller0: entered allmulticast mode [ 322.487915][T13780] bond5: (slave bridge4): failed to get link speed/duplex [ 322.555341][T15461] wg2 speed is unknown, defaulting to 1000 [ 322.988924][T15468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2312'. [ 323.084517][T15468] hsr_slave_1 (unregistering): left promiscuous mode [ 323.100035][T15473] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20002 [ 323.329648][T15479] dvmrp0: entered allmulticast mode [ 323.565133][T15492] syzkaller0: entered promiscuous mode [ 323.565156][T15492] syzkaller0: entered allmulticast mode [ 324.942790][T15533] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2329'. [ 324.962068][T15520] syzkaller0: entered promiscuous mode [ 324.962094][T15520] syzkaller0: entered allmulticast mode [ 325.416212][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 328.059318][T13775] net_ratelimit: 17 callbacks suppressed [ 328.059338][T13775] bond5: (slave bridge4): failed to get link speed/duplex [ 328.167799][T13780] bond5: (slave bridge4): failed to get link speed/duplex [ 328.251137][T15564] tipc: Enabling of bearer rejected, failed to enable media [ 328.287274][T13780] bond5: (slave bridge4): failed to get link speed/duplex [ 328.372516][T15570] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 328.391819][T15571] netlink: 'syz.5.2340': attribute type 1 has an invalid length. [ 328.442305][T15571] veth7: entered allmulticast mode [ 328.452173][T15571] bond16: (slave veth7): Enslaving as an active interface with a down link [ 328.474914][T15574] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 328.491671][T15571] bond16: (slave veth0_to_bond): making interface the new active one [ 328.494733][T15571] bond16: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 328.519208][T15571] macvlan2: entered promiscuous mode [ 328.519233][T15571] macvlan2: entered allmulticast mode [ 328.522839][T15571] bond16: entered promiscuous mode [ 328.522861][T15571] veth0_to_bond: entered promiscuous mode [ 328.525826][T15571] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 328.545346][T15571] bond16: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth7 [ 328.563503][T15571] bond16: left promiscuous mode [ 328.563524][T15571] veth0_to_bond: left promiscuous mode [ 328.629537][ T9635] bond5: (slave bridge4): failed to get link speed/duplex [ 328.682747][T15578] pim6reg: entered allmulticast mode [ 328.702647][T15578] team0: entered allmulticast mode [ 328.702670][T15578] team_slave_0: entered allmulticast mode [ 328.702687][T15578] team_slave_1: entered allmulticast mode [ 328.702701][T15578] bond2: entered allmulticast mode [ 328.740236][T13780] bond5: (slave bridge4): failed to get link speed/duplex [ 328.765656][T15578] pim6reg: left allmulticast mode [ 328.801040][T15585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2345'. [ 328.801061][T15585] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2345'. [ 328.847873][ T9635] bond5: (slave bridge4): failed to get link speed/duplex [ 328.853971][T15578] team0: left allmulticast mode [ 328.853993][T15578] team_slave_0: left allmulticast mode [ 328.854010][T15578] team_slave_1: left allmulticast mode [ 328.854023][T15578] bond2: left allmulticast mode [ 328.931565][ T5619] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 328.934797][ T5619] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 328.936291][ T5619] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 328.953543][ T5619] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 328.961829][ T5619] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 328.979568][T11738] bond5: (slave bridge4): failed to get link speed/duplex [ 329.087349][T11738] bond5: (slave bridge4): failed to get link speed/duplex [ 329.960135][T15588] wg2 speed is unknown, defaulting to 1000 [ 330.555603][T15666] netlink: 884 bytes leftover after parsing attributes in process `syz.5.2355'. [ 330.868706][T15686] FAULT_INJECTION: forcing a failure. [ 330.868706][T15686] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 330.868738][T15686] CPU: 0 UID: 0 PID: 15686 Comm: syz.7.2359 Not tainted syzkaller #0 PREEMPT(full) [ 330.868757][T15686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 330.868783][T15686] Call Trace: [ 330.868791][T15686] [ 330.868799][T15686] dump_stack_lvl+0xe8/0x150 [ 330.868827][T15686] should_fail_ex+0x410/0x560 [ 330.868937][T15686] _copy_from_user+0x2d/0xb0 [ 330.869014][T15686] __sys_bpf+0x2e7/0xd90 [ 330.869043][T15686] ? __pfx___sys_bpf+0x10/0x10 [ 330.869070][T15686] ? __fget_files+0x2a/0x420 [ 330.869110][T15686] ? ksys_write+0x242/0x270 [ 330.869138][T15686] ? __pfx_ksys_write+0x10/0x10 [ 330.869169][T15686] __x64_sys_bpf+0xba/0xd0 [ 330.869191][T15686] do_syscall_64+0x166/0x520 [ 330.869215][T15686] ? trace_irq_disable+0x3b/0x140 [ 330.869232][T15686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.869251][T15686] ? clear_bhb_loop+0x70/0xc0 [ 330.869273][T15686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.869291][T15686] RIP: 0033:0x7f3bfcb9e159 [ 330.869309][T15686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.869324][T15686] RSP: 002b:00007f3bfdb50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 330.869345][T15686] RAX: ffffffffffffffda RBX: 00007f3bfce25fa0 RCX: 00007f3bfcb9e159 [ 330.869359][T15686] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000009 [ 330.869371][T15686] RBP: 00007f3bfdb50090 R08: 0000000000000000 R09: 0000000000000000 [ 330.869382][T15686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.869392][T15686] R13: 00007f3bfce26038 R14: 00007f3bfce25fa0 R15: 00007ffc7def4118 [ 330.869416][T15686] [ 331.026081][ T5623] Bluetooth: hci8: command tx timeout [ 331.098377][T15588] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.098550][T15588] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.098692][T15588] bridge_slave_0: entered allmulticast mode [ 331.100448][T15588] bridge_slave_0: entered promiscuous mode [ 331.140895][T15689] geneve0: entered promiscuous mode [ 331.199237][T15689] batman_adv: batadv0: Adding interface: macvlan2 [ 331.199257][T15689] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.203431][T15689] batman_adv: batadv0: Interface activated: macvlan2 [ 331.204231][T15588] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.204408][T15588] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.204556][T15588] bridge_slave_1: entered allmulticast mode [ 331.234074][ T30] audit: type=1800 audit(1790937174.455:9): pid=15692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2361" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=1176 res=0 errno=0 [ 331.328037][T15588] bridge_slave_1: entered promiscuous mode [ 331.494348][T15588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.514940][T15588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.645641][T15588] team0: Port device team_slave_0 added [ 331.653588][T15588] team0: Port device team_slave_1 added [ 331.747788][T15588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.747805][T15588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.747825][T15588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.749861][T15588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.749875][T15588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.749897][T15588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.905778][T15588] hsr_slave_0: entered promiscuous mode [ 331.913519][T15588] hsr_slave_1: entered promiscuous mode [ 331.914020][T15588] debugfs: 'hsr0' already exists in 'hsr' [ 331.914039][T15588] Cannot create hsr debugfs directory [ 331.937899][T15714] Cannot find add_set index 0 as target [ 331.963919][T15714] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2364'. [ 332.149720][T15727] FAULT_INJECTION: forcing a failure. [ 332.149720][T15727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.149751][T15727] CPU: 1 UID: 0 PID: 15727 Comm: syz.7.2369 Not tainted syzkaller #0 PREEMPT(full) [ 332.149772][T15727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 332.149783][T15727] Call Trace: [ 332.149791][T15727] [ 332.149799][T15727] dump_stack_lvl+0xe8/0x150 [ 332.149830][T15727] should_fail_ex+0x410/0x560 [ 332.149857][T15727] _copy_to_user+0x31/0xb0 [ 332.149883][T15727] simple_read_from_buffer+0xe1/0x170 [ 332.149915][T15727] proc_fail_nth_read+0x1bb/0x230 [ 332.149941][T15727] ? common_file_perm+0x20e/0x2b0 [ 332.150076][T15727] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 332.150106][T15727] ? rw_verify_area+0x24a/0x4c0 [ 332.150134][T15727] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 332.150161][T15727] vfs_read+0x213/0xa80 [ 332.150306][T15727] ? __pfx___mutex_lock+0x10/0x10 [ 332.150332][T15727] ? __pfx_vfs_read+0x10/0x10 [ 332.150359][T15727] ? __fget_files+0x2a/0x420 [ 332.150387][T15727] ? __fget_files+0x3a2/0x420 [ 332.150416][T15727] ? __fget_files+0x2a/0x420 [ 332.150447][T15727] ksys_read+0x150/0x270 [ 332.150475][T15727] ? __pfx_ksys_read+0x10/0x10 [ 332.150509][T15727] do_syscall_64+0x166/0x520 [ 332.150531][T15727] ? trace_irq_disable+0x3b/0x140 [ 332.150547][T15727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.150564][T15727] ? clear_bhb_loop+0x70/0xc0 [ 332.150585][T15727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.150601][T15727] RIP: 0033:0x7f3bfcb5e98e [ 332.150617][T15727] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 332.150631][T15727] RSP: 002b:00007f3bfdb4ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 332.150650][T15727] RAX: ffffffffffffffda RBX: 00007f3bfdb506c0 RCX: 00007f3bfcb5e98e [ 332.150663][T15727] RDX: 000000000000000f RSI: 00007f3bfdb500a0 RDI: 0000000000000003 [ 332.150674][T15727] RBP: 00007f3bfdb50090 R08: 0000000000000000 R09: 0000000000000000 [ 332.150684][T15727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.150695][T15727] R13: 00007f3bfce26038 R14: 00007f3bfce25fa0 R15: 00007ffc7def4118 [ 332.150726][T15727] [ 332.591148][T15729] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2371'. [ 332.721679][T15738] macsec0: entered promiscuous mode [ 332.731967][T15738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2373'. [ 332.735548][T15738] veth1_macvtap: left promiscuous mode [ 332.755661][T15738] macsec0 (unregistering): left promiscuous mode [ 332.786622][T15739] ip_vti0: left promiscuous mode [ 332.790853][T15588] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 332.794357][T15588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 332.795211][T15588] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 332.801924][T15588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 332.817539][T15588] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 332.831546][T15588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 332.848483][T15588] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 332.854767][T15588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 333.013075][T15588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.048635][T15588] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.071337][ T9635] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.071443][ T9635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.096652][ T5623] Bluetooth: hci8: command tx timeout [ 333.107787][T13775] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.107900][T13775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.128963][ T9635] net_ratelimit: 16 callbacks suppressed [ 333.128983][ T9635] bond5: (slave bridge4): failed to get link speed/duplex [ 333.287244][ T9635] bond5: (slave bridge4): failed to get link speed/duplex [ 333.398430][ T9635] bond5: (slave bridge4): failed to get link speed/duplex [ 333.467554][T15755] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2378'. [ 333.467589][T15755] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2378'. [ 333.467602][T15755] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2378'. [ 333.511025][ T144] bond5: (slave bridge4): failed to get link speed/duplex [ 333.605375][T15770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2382'. [ 333.605463][T15770] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 333.605474][T15770] IPv6: NLM_F_CREATE should be set when creating new route [ 333.605500][T15770] IPv6: NLM_F_CREATE should be set when creating new route [ 333.618309][T11737] bond5: (slave bridge4): failed to get link speed/duplex [ 333.728397][T11737] bond5: (slave bridge4): failed to get link speed/duplex [ 333.812517][T11737] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 333.836411][T13775] bond5: (slave bridge4): failed to get link speed/duplex [ 333.869401][T15770] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 333.955835][ T144] bond5: (slave bridge4): failed to get link speed/duplex [ 334.057859][T13775] bond5: (slave bridge4): failed to get link speed/duplex [ 334.140403][T15796] netlink: 'syz.7.2385': attribute type 6 has an invalid length. [ 334.140544][T15800] netlink: 'syz.7.2385': attribute type 6 has an invalid length. [ 334.193113][T15588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.210611][ T144] bond5: (slave bridge4): failed to get link speed/duplex [ 334.376923][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 334.520799][T15819] xt_TCPMSS: Only works on TCP SYN packets [ 334.570248][T15819] __nla_validate_parse: 1 callbacks suppressed [ 334.570270][T15819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2388'. [ 334.586734][T15819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2388'. [ 335.080940][T15588] veth0_vlan: entered promiscuous mode [ 335.101836][T15588] veth1_vlan: entered promiscuous mode [ 335.170981][T15588] veth0_macvtap: entered promiscuous mode [ 335.177093][ T5623] Bluetooth: hci8: command tx timeout [ 335.192679][T15588] veth1_macvtap: entered promiscuous mode [ 335.214599][T15588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.231092][T15588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.171495][T11738] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.171867][T11738] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.172321][T11738] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.172731][T11738] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.258137][ T5623] Bluetooth: hci8: command tx timeout [ 337.421280][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.421300][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.535428][T15848] tc action pedit offset must be on 32 bit boundaries [ 337.535448][T15848] tc action pedit offset must be on 32 bit boundaries [ 337.535456][T15848] tc action pedit offset must be on 32 bit boundaries [ 337.535465][T15848] tc action pedit offset must be on 32 bit boundaries [ 337.535473][T15848] tc action pedit offset must be on 32 bit boundaries [ 337.535481][T15848] tc action pedit offset must be on 32 bit boundaries [ 337.535489][T15848] tc action pedit offset must be on 32 bit boundaries [ 337.535498][T15848] tc action pedit offset must be on 32 bit boundaries [ 337.535506][T15848] tc action pedit offset must be on 32 bit boundaries [ 337.535514][T15848] tc action pedit offset must be on 32 bit boundaries [ 337.536201][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.536218][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.835553][T15859] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2398'. [ 337.872913][T15859] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2398'. [ 337.908111][T15861] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2399'. [ 337.946184][T15863] netlink: 112 bytes leftover after parsing attributes in process `syz.8.2343'. [ 338.196116][ T94] net_ratelimit: 18 callbacks suppressed [ 338.196137][ T94] bond5: (slave bridge4): failed to get link speed/duplex [ 338.290722][T15882] netlink: 'syz.6.2405': attribute type 83 has an invalid length. [ 338.477242][T13780] bond5: (slave bridge4): failed to get link speed/duplex [ 338.485644][T15884] IPVS: set_ctl: invalid protocol: 576 0.32.0.0:8192 [ 338.587942][ T94] bond5: (slave bridge4): failed to get link speed/duplex [ 338.665811][T15901] netlink: 'syz.0.2410': attribute type 1 has an invalid length. [ 338.693479][T15894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.705442][T15901] 8021q: adding VLAN 0 to HW filter on device bond9 [ 338.713343][T15901] macvlan4: entered promiscuous mode [ 338.713363][T15901] macvlan4: entered allmulticast mode [ 338.714255][T15901] bond9: entered promiscuous mode [ 338.714974][T15901] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 338.731005][T15898] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2409'. [ 338.739193][T15903] xt_TCPMSS: Only works on TCP SYN packets [ 338.762466][T15906] netlink: 'syz.0.2410': attribute type 1 has an invalid length. [ 338.799837][T15901] bond9: left promiscuous mode [ 338.855472][T15911] macvlan4: entered promiscuous mode [ 338.855492][T15911] macvlan4: entered allmulticast mode [ 338.864113][T15911] bond9: entered promiscuous mode [ 338.865778][T15911] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 338.897968][T15911] bond9: left promiscuous mode [ 338.932768][ T5623] Bluetooth: hci6: SCO packet too small [ 338.938703][ T94] bond5: (slave bridge4): failed to get link speed/duplex [ 338.971252][T15920] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2412'. [ 339.046462][T13780] bond5: (slave bridge4): failed to get link speed/duplex [ 339.156507][T11738] bond5: (slave bridge4): failed to get link speed/duplex [ 339.267862][ T9635] bond5: (slave bridge4): failed to get link speed/duplex [ 339.371968][T15944] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2418'. [ 339.371990][T15944] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2418'. [ 339.386109][ T9635] bond5: (slave bridge4): failed to get link speed/duplex [ 339.420017][T15944] tipc: Enabling of bearer rejected, failed to enable media [ 339.499730][T11738] bond5: (slave bridge4): failed to get link speed/duplex [ 339.629842][T15954] __nla_validate_parse: 1 callbacks suppressed [ 339.629863][T15954] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2421'. [ 339.895461][T15960] netlink: 'syz.5.2422': attribute type 1 has an invalid length. [ 340.136157][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 340.387829][T11738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.387850][T11738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.414795][T15993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2430'. [ 340.414821][T15993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2430'. [ 340.650530][T16001] x_tables: duplicate underflow at hook 2 [ 340.650612][T16001] x_tables: duplicate underflow at hook 2 [ 340.650679][T16001] x_tables: duplicate underflow at hook 2 [ 340.650746][T16001] x_tables: duplicate underflow at hook 2 [ 340.650813][T16001] x_tables: duplicate underflow at hook 2 [ 340.650873][T16001] x_tables: duplicate underflow at hook 2 [ 340.650956][T16001] x_tables: duplicate underflow at hook 2 [ 340.651023][T16001] x_tables: duplicate underflow at hook 2 [ 340.651972][T16001] x_tables: duplicate underflow at hook 2 [ 340.652042][T16001] x_tables: duplicate underflow at hook 2 [ 340.758022][T16003] vlan5: entered promiscuous mode [ 340.758045][T16003] bridge0: entered promiscuous mode [ 340.948204][T16019] netlink: 'syz.6.2438': attribute type 4 has an invalid length. [ 341.077562][ T5623] Bluetooth: hci6: unexpected cc 0x2060 length: 9 > 7 [ 341.304498][T16040] netlink: 120 bytes leftover after parsing attributes in process `syz.6.2443'. [ 341.322355][T16040] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.2443'. [ 341.553206][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2442'. [ 341.553229][T16041] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2442'. [ 344.403046][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2442'. [ 344.403071][T16041] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2442'. [ 344.405885][T16065] : renamed from bridge_slave_1 (while UP) [ 344.450019][T11738] net_ratelimit: 18 callbacks suppressed [ 344.450039][T11738] bond5: (slave bridge4): failed to get link speed/duplex [ 344.558853][T13780] bond5: (slave bridge4): failed to get link speed/duplex [ 344.594677][T16070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2451'. [ 344.654358][T16075] netlink: 'syz.5.2454': attribute type 23 has an invalid length. [ 344.654982][T16070] netlink: 7 bytes leftover after parsing attributes in process `syz.6.2451'. [ 344.677312][T11738] bond5: (slave bridge4): failed to get link speed/duplex [ 344.716302][T16076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2455'. [ 344.718994][T16077] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2452'. [ 344.719019][T16077] netlink: 'syz.7.2452': attribute type 6 has an invalid length. [ 344.787891][T13780] bond5: (slave bridge4): failed to get link speed/duplex [ 344.897016][T11738] bond5: (slave bridge4): failed to get link speed/duplex [ 345.009480][T13780] bond5: (slave bridge4): failed to get link speed/duplex [ 345.014325][T16100] FAULT_INJECTION: forcing a failure. [ 345.014325][T16100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.014356][T16100] CPU: 0 UID: 0 PID: 16100 Comm: syz.0.2458 Not tainted syzkaller #0 PREEMPT(full) [ 345.014377][T16100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 345.014386][T16100] Call Trace: [ 345.014394][T16100] [ 345.014401][T16100] dump_stack_lvl+0xe8/0x150 [ 345.014431][T16100] should_fail_ex+0x410/0x560 [ 345.014459][T16100] _copy_from_user+0x2d/0xb0 [ 345.014482][T16100] __sys_bpf+0x2e7/0xd90 [ 345.014509][T16100] ? __pfx___sys_bpf+0x10/0x10 [ 345.014537][T16100] ? __fget_files+0x2a/0x420 [ 345.014576][T16100] ? ksys_write+0x242/0x270 [ 345.014602][T16100] ? __pfx_ksys_write+0x10/0x10 [ 345.014629][T16100] __x64_sys_bpf+0xba/0xd0 [ 345.014650][T16100] do_syscall_64+0x166/0x520 [ 345.014674][T16100] ? trace_irq_disable+0x3b/0x140 [ 345.014691][T16100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.014709][T16100] ? clear_bhb_loop+0x70/0xc0 [ 345.014732][T16100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.014750][T16100] RIP: 0033:0x7f011719e159 [ 345.014766][T16100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.014781][T16100] RSP: 002b:00007f0118113028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 345.014801][T16100] RAX: ffffffffffffffda RBX: 00007f0117425fa0 RCX: 00007f011719e159 [ 345.014812][T16100] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000009 [ 345.014824][T16100] RBP: 00007f0118113090 R08: 0000000000000000 R09: 0000000000000000 [ 345.014835][T16100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.014845][T16100] R13: 00007f0117426038 R14: 00007f0117425fa0 R15: 00007fffd1768cc8 [ 345.014871][T16100] [ 345.038493][T16098] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2459'. [ 345.038529][T16098] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2459'. [ 345.095795][T16101] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2459'. [ 345.095828][T16101] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2459'. [ 345.320071][T16107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2461'. [ 345.320102][T16107] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2461'. [ 345.336683][T13780] bond5: (slave bridge4): failed to get link speed/duplex [ 345.363292][T16106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.446783][T13780] bond5: (slave bridge4): failed to get link speed/duplex [ 345.499002][T16110] netlink: 67 bytes leftover after parsing attributes in process `syz.7.2463'. [ 345.566653][T11737] bond5: (slave bridge4): failed to get link speed/duplex [ 346.089645][T16121] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20003 [ 347.178581][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 347.591177][T16075] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 347.773489][T16126] erspan1: entered allmulticast mode [ 348.100943][T16155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.154568][T16155] bond2: option lacp_rate: invalid value (184) [ 348.156664][T16155] bond2 (unregistering): Released all slaves [ 348.264817][T16162] tipc: Enabling of bearer rejected, failed to enable media [ 348.525644][T16174] syzkaller1: entered promiscuous mode [ 348.525666][T16174] syzkaller1: entered allmulticast mode [ 348.579287][T16177] syzkaller0: entered promiscuous mode [ 348.579309][T16177] syzkaller0: entered allmulticast mode [ 348.979159][T16190] netlink: 'syz.8.2485': attribute type 3 has an invalid length. [ 349.100256][T13780] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 349.700575][T16203] __nla_validate_parse: 7 callbacks suppressed [ 349.700595][T16203] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2489'. [ 349.711045][T16204] netlink: 'syz.5.2489': attribute type 2 has an invalid length. [ 349.887029][T16209] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2490'. [ 349.887223][T16209] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2490'. [ 352.492051][T16209] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 352.508175][ T6125] net_ratelimit: 33 callbacks suppressed [ 352.508194][ T6125] bond5: (slave bridge4): failed to get link speed/duplex [ 352.617904][ T9635] bond5: (slave bridge4): failed to get link speed/duplex [ 352.689778][T16216] netlink: 'syz.6.2495': attribute type 1 has an invalid length. [ 352.689801][T16216] netlink: 248 bytes leftover after parsing attributes in process `syz.6.2495'. [ 352.716413][T16219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2494'. [ 352.728240][ T9635] bond5: (slave bridge4): failed to get link speed/duplex [ 352.747232][T16219] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 352.747269][T16219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.821785][T16231] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2497'. [ 352.838728][T16220] bond10 (unregistering): Released all slaves [ 352.903915][T16219] bond10 (unregistering): Released all slaves [ 352.946469][ T9635] bond5: (slave bridge4): failed to get link speed/duplex [ 353.056903][T13780] bond5: (slave bridge4): failed to get link speed/duplex [ 353.166659][ T6125] bond5: (slave bridge4): failed to get link speed/duplex [ 353.276180][T13775] bond5: (slave bridge4): failed to get link speed/duplex [ 353.329596][T16250] netlink: 'syz.5.2501': attribute type 2 has an invalid length. [ 353.346769][T16250] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2501'. [ 353.508709][T11737] bond5: (slave bridge4): failed to get link speed/duplex [ 353.735932][T16269] netlink: 'syz.7.2506': attribute type 1 has an invalid length. [ 353.843296][T16269] bond2: entered promiscuous mode [ 353.851718][T16274] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2506'. [ 353.851739][T16274] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2506'. [ 353.852019][T16269] 8021q: adding VLAN 0 to HW filter on device bond2 [ 354.096565][T16277] netlink: 'syz.7.2507': attribute type 23 has an invalid length. [ 354.258714][T16284] syzkaller0: entered promiscuous mode [ 354.258736][T16284] syzkaller0: entered allmulticast mode [ 354.337302][T16289] netlink: 'syz.6.2510': attribute type 2 has an invalid length. [ 354.478644][T16291] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2511'. [ 354.485584][T16295] syzkaller0: entered promiscuous mode [ 354.485605][T16295] syzkaller0: entered allmulticast mode [ 354.702774][T16303] batman_adv: batadv0: Interface activated: dummy0 [ 354.915605][T16303] 8021q: adding VLAN 0 to HW filter on device bond15 [ 354.931404][T16303] 8021q: adding VLAN 0 to HW filter on device bond16 [ 355.012610][ T9635] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 355.018209][ T5619] Bluetooth: hci5: command 0x0405 tx timeout [ 355.095014][ T6125] bond16: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 355.100130][T11738] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.225715][T16341] v: renamed from gre0 (while UP) [ 355.239835][T16341] v: entered allmulticast mode [ 355.242446][T16342] __nla_validate_parse: 1 callbacks suppressed [ 355.242464][T16342] netlink: 15678 bytes leftover after parsing attributes in process `syz.7.2526'. [ 355.299552][T16342] netlink: 'syz.7.2526': attribute type 21 has an invalid length. [ 355.299575][T16342] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2526'. [ 355.299645][T16342] netlink: 'syz.7.2526': attribute type 4 has an invalid length. [ 355.299657][T16342] netlink: 'syz.7.2526': attribute type 3 has an invalid length. [ 355.299669][T16342] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2526'. [ 355.403245][T16347] netlink: 'syz.8.2528': attribute type 1 has an invalid length. [ 355.469241][T16352] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2528'. [ 355.522966][T16347] 8021q: adding VLAN 0 to HW filter on device bond1 [ 355.590001][T16347] bond1: (slave bridge1): making interface the new active one [ 355.605404][T16347] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 355.642673][T16363] wg2 speed is unknown, defaulting to 1000 [ 355.651592][T16360] netlink: 240 bytes leftover after parsing attributes in process `syz.7.2531'. [ 355.784396][T16367] xt_check_table_hooks: 23 callbacks suppressed [ 355.784416][T16367] x_tables: duplicate underflow at hook 2 [ 355.839648][T16378] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2533'. [ 355.912829][T16383] netlink: 388 bytes leftover after parsing attributes in process `syz.7.2536'. [ 355.913925][T16383] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2536'. [ 355.914507][T16383] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2536'. [ 355.987753][T16375] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2533'. [ 356.143462][T16363] wg2 speed is unknown, defaulting to 1000 [ 356.190927][T16387] netlink: 'syz.6.2533': attribute type 4 has an invalid length. [ 356.222550][T16363] wg2 speed is unknown, defaulting to 1000 [ 356.665801][T16363] infiniband syz0: set active [ 356.665822][T16363] infiniband syz0: added wg2 [ 356.684278][T11416] wg2 speed is unknown, defaulting to 1000 [ 356.699688][T16363] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 356.704131][T16363] infiniband syz0: Couldn't open port 1 [ 356.704279][T16363] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 356.704296][T16363] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 356.704315][T16363] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 356.800656][T16363] RDS/IB: syz0: added [ 356.801369][T16363] smc: adding ib device syz0 with port count 1 [ 356.801505][T16363] smc: ib device syz0 port 1 has no pnetid [ 356.804168][ T4947] wg2 speed is unknown, defaulting to 1000 [ 356.834532][T16363] wg2 speed is unknown, defaulting to 1000 [ 356.955597][T16415] IPv6: NLM_F_CREATE should be specified when creating new route [ 356.955687][T16415] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 356.955698][T16415] IPv6: NLM_F_CREATE should be set when creating new route [ 356.955742][T16415] IPv6: NLM_F_CREATE should be set when creating new route [ 356.955768][T16415] IPv6: NLM_F_CREATE should be set when creating new route [ 357.294636][T16363] wg2 speed is unknown, defaulting to 1000 [ 357.581066][T11738] net_ratelimit: 26 callbacks suppressed [ 357.581095][T11738] bond5: (slave bridge4): failed to get link speed/duplex [ 357.689578][T11737] bond5: (slave bridge4): failed to get link speed/duplex [ 357.694203][T16448] netlink: 'syz.5.2551': attribute type 1 has an invalid length. [ 357.727066][T16448] 8021q: adding VLAN 0 to HW filter on device bond17 [ 357.729899][T16363] wg2 speed is unknown, defaulting to 1000 [ 357.797237][ T6125] bond5: (slave bridge4): failed to get link speed/duplex [ 357.907895][T13775] bond5: (slave bridge4): failed to get link speed/duplex [ 358.028624][ T6125] bond5: (slave bridge4): failed to get link speed/duplex [ 358.133014][T16463] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 358.138579][ T6125] bond5: (slave bridge4): failed to get link speed/duplex [ 358.171460][ T30] audit: type=1804 audit(1790937201.415:10): pid=16464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2552" name="/newroot/31/cgroup.controllers" dev="tmpfs" ino=175 res=1 errno=0 [ 358.178009][ T30] audit: type=1800 audit(1790937201.425:11): pid=16464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2552" name="cgroup.controllers" dev="tmpfs" ino=175 res=0 errno=0 [ 358.250025][T11738] bond5: (slave bridge4): failed to get link speed/duplex [ 358.255567][T16363] wg2 speed is unknown, defaulting to 1000 [ 358.357822][ T9635] bond5: (slave bridge4): failed to get link speed/duplex [ 358.469699][T11738] bond5: (slave bridge4): failed to get link speed/duplex [ 358.589592][T16363] wg2 speed is unknown, defaulting to 1000 [ 358.831792][T16479] netlink: 'syz.5.2559': attribute type 1 has an invalid length. [ 358.930471][T16363] wg2 speed is unknown, defaulting to 1000 [ 359.016526][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 359.405613][T16515] xt_policy: output policy not valid in PREROUTING and INPUT [ 359.662069][T13775] IPVS: starting estimator thread 0... [ 359.747235][T16525] IPVS: using max 34 ests per chain, 81600 per kthread [ 359.861574][T16363] wg2 speed is unknown, defaulting to 1000 [ 360.139224][ T5623] Bluetooth: hci6: command 0x0406 tx timeout [ 360.389839][T16538] __nla_validate_parse: 16 callbacks suppressed [ 360.389859][T16538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2570'. [ 360.389983][T16538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.434729][T16538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.630411][T16363] wg2 speed is unknown, defaulting to 1000 [ 360.777747][T16549] netlink: 'syz.6.2571': attribute type 1 has an invalid length. [ 360.972012][T16549] 8021q: adding VLAN 0 to HW filter on device bond3 [ 361.022316][T16363] wg2 speed is unknown, defaulting to 1000 [ 361.135678][T16569] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2575'. [ 361.166952][T16571] syzkaller1: entered promiscuous mode [ 361.166974][T16571] syzkaller1: entered allmulticast mode [ 361.248582][T16569] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2575'. [ 361.742191][T16554] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 361.756929][ T6125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.756949][ T6125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.150939][T16607] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2584'. [ 362.277542][T16612] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2584'. [ 362.503947][T16626] ipvlan2: entered allmulticast mode [ 362.503969][T16626] macvlan1: entered allmulticast mode [ 362.503980][T16626] veth1_vlan: entered allmulticast mode [ 362.528374][T16626] batman_adv: batadv0: Adding interface: ipvlan2 [ 362.528391][T16626] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.528419][T16626] batman_adv: batadv0: Interface activated: ipvlan2 [ 362.663197][T16632] x_tables: duplicate underflow at hook 1 [ 362.688978][T13775] net_ratelimit: 35 callbacks suppressed [ 362.689002][T13775] bond5: (slave bridge4): failed to get link speed/duplex [ 362.798820][ T1006] bond5: (slave bridge4): failed to get link speed/duplex [ 362.835683][T16637] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2592'. [ 362.913891][T16639] bond10 (unregistering): Released all slaves [ 363.016781][T16645] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 363.029723][T11738] bond5: (slave bridge4): failed to get link speed/duplex [ 363.138694][ T9635] bond5: (slave bridge4): failed to get link speed/duplex [ 363.180544][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 363.227135][T16660] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2598'. [ 363.259594][T13775] bond5: (slave bridge4): failed to get link speed/duplex [ 363.291226][T16660] netlink: 196 bytes leftover after parsing attributes in process `syz.8.2598'. [ 363.370329][T13775] bond5: (slave bridge4): failed to get link speed/duplex [ 363.483251][T13775] bond5: (slave bridge4): failed to get link speed/duplex [ 363.564552][T16677] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2604'. [ 363.585028][T16678] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2604'. [ 363.599994][ T1109] bond5: (slave bridge4): failed to get link speed/duplex [ 363.708766][ T1006] bond5: (slave bridge4): failed to get link speed/duplex [ 363.722804][T16683] netlink: 'syz.6.2605': attribute type 1 has an invalid length. [ 363.820079][ T1006] bond5: (slave bridge4): failed to get link speed/duplex [ 363.922069][T16687] netlink: 'syz.6.2607': attribute type 1 has an invalid length. [ 364.005009][T16687] 8021q: adding VLAN 0 to HW filter on device bond4 [ 364.139554][T16689] bond4: (slave veth0_to_bond): making interface the new active one [ 364.140781][T16689] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 364.291419][T16690] bond4: entered promiscuous mode [ 364.291442][T16690] veth0_to_bond: entered promiscuous mode [ 364.291634][T16690] bond4: entered allmulticast mode [ 364.291647][T16690] veth0_to_bond: entered allmulticast mode [ 364.335308][T16688] macvlan2: entered promiscuous mode [ 364.335330][T16688] macvlan2: entered allmulticast mode [ 364.351335][T16688] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 364.355463][T16688] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 364.484754][T16695] syzkaller1: entered promiscuous mode [ 364.484779][T16695] syzkaller1: entered allmulticast mode [ 364.649826][T16704] syzkaller0: entered promiscuous mode [ 364.649852][T16704] syzkaller0: entered allmulticast mode [ 364.652173][T16714] netlink: 'syz.6.2612': attribute type 1 has an invalid length. [ 364.985496][T16701] 8021q: adding VLAN 0 to HW filter on device bond18 [ 365.025636][ T9635] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.025672][ T9635] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.304019][T16740] netlink: 'syz.8.2621': attribute type 4 has an invalid length. [ 365.461204][T16747] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 365.513362][T16755] __nla_validate_parse: 6 callbacks suppressed [ 365.513382][T16755] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2625'. [ 365.695551][T16767] netlink: 292 bytes leftover after parsing attributes in process `syz.6.2630'. [ 365.921216][T16776] ovs-s!: entered promiscuous mode [ 366.202955][T16787] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2634'. [ 366.243120][T16787] netlink: 'syz.6.2634': attribute type 5 has an invalid length. [ 366.243143][T16787] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2634'. [ 366.620362][T16821] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2642'. [ 366.651009][T16812] IPVS: Scheduler module ip_vs_ not found [ 367.016449][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 367.155412][T16844] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2649'. [ 367.189833][T16844] team_slave_0: entered allmulticast mode [ 367.525267][T16865] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.532181][T16865] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.533970][T16870] netlink: 'syz.8.2653': attribute type 16 has an invalid length. [ 367.533994][T16870] netlink: 'syz.8.2653': attribute type 17 has an invalid length. [ 367.595897][T16871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2654'. [ 367.949770][T16870] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.949891][T16870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.953656][T16870] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.953780][T16870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.167227][T13780] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 368.167359][T13780] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 368.191658][T13780] net_ratelimit: 27 callbacks suppressed [ 368.191680][T13780] bond5: (slave bridge4): failed to get link speed/duplex [ 368.206581][T11424] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 368.326875][ T6125] bond5: (slave bridge4): failed to get link speed/duplex [ 368.438850][ T94] bond5: (slave bridge4): failed to get link speed/duplex [ 368.509411][T16941] syzkaller1: entered promiscuous mode [ 368.509434][T16941] syzkaller1: entered allmulticast mode [ 368.548296][ T94] bond5: (slave bridge4): failed to get link speed/duplex [ 368.666497][ T94] bond5: (slave bridge4): failed to get link speed/duplex [ 368.937894][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 368.939202][T11425] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 368.941014][ T6125] bond5: (slave bridge4): failed to get link speed/duplex [ 369.017893][ T4947] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 369.048424][ T6125] bond5: (slave bridge4): failed to get link speed/duplex [ 369.130861][T16964] IPVS: set_ctl: invalid protocol: 5678 172.20.20.187:0 [ 369.135284][T16966] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 369.154085][T16964] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2668'. [ 369.297154][T16969] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 369.327050][T13780] bond5: (slave bridge4): failed to get link speed/duplex [ 369.354123][T16974] xt_hashlimit: size too large, truncated to 1048576 [ 369.412803][T16973] team0 (unregistering): Port device team_slave_0 removed [ 369.419190][T16973] team0 (unregistering): Port device team_slave_1 removed [ 369.618046][T16982] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2673'. [ 369.645716][T16982] veth1_to_team: entered promiscuous mode [ 369.654119][T16982] veth0_to_team: entered promiscuous mode [ 369.655677][T16982] hsr1: entered promiscuous mode [ 370.087041][T17001] x_tables: duplicate underflow at hook 1 [ 370.148387][T17007] netlink: 'syz.8.2681': attribute type 96 has an invalid length. [ 370.150144][T17007] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2681'. [ 370.395045][T17015] tipc: Resetting bearer [ 370.430998][T17015] tipc: Resetting bearer [ 370.812800][T17025] veth0_to_team: entered allmulticast mode [ 370.822872][T11425] wg2 speed is unknown, defaulting to 1000 [ 371.141711][T16912] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 371.160171][T17058] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2691'. [ 371.406833][T16912] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 371.473494][T17067] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2692'. [ 371.484916][T17068] netlink: 112 bytes leftover after parsing attributes in process `syz.8.2693'. [ 371.501232][T17069] netlink: 112 bytes leftover after parsing attributes in process `syz.8.2693'. [ 371.542750][T17058] can: request_module (can-proto-0) failed. [ 371.751297][T17075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2696'. [ 372.136431][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 372.594211][T17108] syzkaller0: entered promiscuous mode [ 372.594235][T17108] syzkaller0: entered allmulticast mode [ 373.967904][T17135] net_ratelimit: 33 callbacks suppressed [ 373.967926][T17135] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 374.057506][ T5619] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 376.247729][T17112] tipc: Started in network mode [ 376.247747][T17112] tipc: Node identity , cluster identity 4711 [ 376.247759][T17112] tipc: Failed to obtain node identity [ 376.247785][T17112] tipc: Enabling of bearer rejected, failed to enable media [ 376.266877][T17116] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 376.267458][ T1109] bond5: (slave bridge4): failed to get link speed/duplex [ 376.307135][T17129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.411078][T17138] erspan1: entered promiscuous mode [ 376.499615][T13775] bond5: (slave bridge4): failed to get link speed/duplex [ 376.533071][T17143] syzkaller0: entered promiscuous mode [ 376.533087][T17143] syzkaller0: entered allmulticast mode [ 376.608063][ T94] bond5: (slave bridge4): failed to get link speed/duplex [ 376.613122][T17157] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2713'. [ 376.613209][T17154] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2713'. [ 376.626626][T17156] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 376.986200][T13775] bond5: (slave bridge4): failed to get link speed/duplex [ 377.059630][T17168] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2717'. [ 377.059653][T17168] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2717'. [ 377.097210][ T6125] bond5: (slave bridge4): failed to get link speed/duplex [ 377.187795][T17172] syzkaller0: left promiscuous mode [ 377.187856][T17172] syzkaller0: left allmulticast mode [ 377.208299][T13775] bond5: (slave bridge4): failed to get link speed/duplex [ 377.261303][T17172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2718'. [ 377.314482][T17172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2718'. [ 377.334361][T17178] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2721'. [ 377.375432][T17170] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2719'. [ 377.412320][T17178] netlink: 10623 bytes leftover after parsing attributes in process `syz.5.2721'. [ 377.439081][T17172] bond10: Invalid ad_actor_system MAC address. [ 377.439111][T17172] bond10: option ad_actor_system: invalid value (7) [ 377.443402][T17172] bond10 (unregistering): Released all slaves [ 377.699751][T17189] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 378.542001][ T31] INFO: task syz.1.1369:11700 blocked for more than 143 seconds. [ 378.542025][ T31] Not tainted syzkaller #0 [ 378.542034][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 378.542042][ T31] task:syz.1.1369 state:D stack:24504 pid:11700 tgid:11699 ppid:5622 task_flags:0x400140 flags:0x00080002 [ 378.542880][ T31] Call Trace: [ 378.542887][ T31] [ 378.542901][ T31] __schedule+0x17db/0x58f0 [ 378.542959][ T31] ? __pfx___schedule+0x10/0x10 [ 378.542993][ T31] ? schedule+0x90/0x2b0 [ 378.543019][ T31] schedule+0x164/0x2b0 [ 378.543045][ T31] schedule_preempt_disabled+0x13/0x30 [ 378.543067][ T31] __mutex_lock+0x7c1/0x1550 [ 378.543097][ T31] ? __mutex_lock+0x5d4/0x1550 [ 378.543126][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 378.543225][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 378.543260][ T31] ? kernel_text_address+0xa5/0xe0 [ 378.543283][ T31] ? __kernel_text_address+0xd/0x30 [ 378.543302][ T31] ? unwind_get_return_address+0x4d/0x90 [ 378.543327][ T31] nfsd_nl_rpc_status_get_d ** replaying previous printk message ** [ 378.543327][ T31] nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 378.543361][ T31] ? stack_trace_save+0xa9/0x100 [ 378.543386][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 378.543415][ T31] ? stack_depot_save_flags+0x33/0x7f0 [ 378.543476][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 378.543499][ T31] ? kasan_save_track+0x4f/0x80 [ 378.543517][ T31] ? kasan_save_track+0x3e/0x80 [ 378.543535][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 378.543553][ T31] ? __kmalloc_node_track_caller_noprof+0x4b4/0x720 [ 378.543571][ T31] ? __alloc_skb+0x2c1/0x7a0 [ 378.543591][ T31] ? netlink_dump+0x1e7/0xee0 [ 378.543616][ T31] ? __netlink_dump_start+0x589/0x7b0 [ 378.543641][ T31] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 378.543664][ T31] ? genl_rcv_msg+0x5e1/0x7a0 [ 378.543684][ T31] ? netlink_rcv_skb+0x226/0x4a0 [ 378.543709][ T31] ? genl_rcv+0x28/0x40 [ 378.543727][ T31] ? netlink_unicast+0x7bd/0x940 [ 378.543750][ T31] ? netlink_sendmsg+0x813/0xb40 [ 378.543766][ T31] ? sock_sendmsg_nosec+0x14e/0x190 [ 378.543791][ T31] ? ____sys_sendmsg+0x54e/0x850 [ 378.543812][ T31] ? ___sys_sendmsg+0x2a5/0x360 [ 378.543839][ T31] ? __x64_sys_sendmsg+0x1b1/0x290 [ 378.543861][ T31] ? do_syscall_64+0x166/0x520 [ 378.543884][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.543941][ T31] ? rcu_is_watching+0x16/0xb0 [ 378.543963][ T31] ? trace_kmalloc+0x2a/0xf0 [ 378.543994][ T31] ? __kmalloc_node_track_caller_noprof+0x4d2/0x720 [ 378.544015][ T31] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 378.544033][ T31] ? netlink_dump+0x1e7/0xee0 [ 378.544057][ T31] ? netlink_dump+0x1e7/0xee0 [ 378.544091][ T31] genl_dumpit+0x10b/0x1b0 [ 378.544118][ T31] netlink_dump+0x711/0xee0 [ 378.544158][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 378.544198][ T31] ? genl_start+0x497/0x6d0 [ 378.544228][ T31] __netlink_dump_start+0x589/0x7b0 [ 378.544263][ T31] genl_family_rcv_msg_dumpit+0x213/0x310 [ 378.544291][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 378.544313][ T31] ? genl_get_cmd+0x523/0x960 [ 378.544339][ T31] ? __pfx_genl_start+0x10/0x10 [ 378.544360][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 378.544380][ T31] ? __pfx_genl_done+0x10/0x10 [ 378.544407][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 378.544440][ T31] genl_rcv_msg+0x5e1/0x7a0 [ 378.544470][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 378.544492][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 378.544530][ T31] netlink_rcv_skb+0x226/0x4a0 [ 378.544559][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 378.544584][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 378.544628][ T31] ? down_read+0x2be/0x330 [ 378.544659][ T31] genl_rcv+0x28/0x40 [ 378.544680][ T31] netlink_unicast+0x7bd/0x940 [ 378.544718][ T31] netlink_sendmsg+0x813/0xb40 [ 378.544746][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.544774][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 378.544798][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.544815][ T31] sock_sendmsg_nosec+0x14e/0x190 [ 378.544858][ T31] ____sys_sendmsg+0x54e/0x850 [ 378.544888][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 378.544922][ T31] ? import_iovec+0x73/0xa0 [ 378.544949][ T31] ___sys_sendmsg+0x2a5/0x360 [ 378.544973][ T31] ? __lock_acquire+0x747/0x2de0 [ 378.544996][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.545024][ T31] ? futex_wait+0x2a2/0x390 [ 378.545082][ T31] ? __fget_files+0x2a/0x420 [ 378.545107][ T31] ? __fget_files+0x3a2/0x420 [ 378.545142][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 378.545169][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 378.545214][ T31] do_syscall_64+0x166/0x520 [ 378.545239][ T31] ? trace_irq_disable+0x3b/0x140 [ 378.545256][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.545274][ T31] ? clear_bhb_loop+0x70/0xc0 [ 378.545298][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.545323][ T31] RIP: 0033:0x7fc32119e159 [ 378.545340][ T31] RSP: 002b:00007fc322100028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.545361][ T31] RAX: ffffffffffffffda RBX: 00007fc321425fa0 RCX: 00007fc32119e159 [ 378.545375][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 378.545387][ T31] RBP: 00007fc32123506b R08: 0000000000000000 R09: 0000000000000000 [ 378.545398][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.545410][ T31] R13: 00007fc321426038 R14: 00007fc321425fa0 R15: 00007fff287604f8 [ 378.545442][ T31] [ 378.545528][ T31] [ 378.545528][ T31] Showing all locks held in the system: [ 378.545537][ T31] locks held by ksoftirqd/0/15: 1, last CPU#0: [ 378.545550][ T31] #0: ffffffff8ed5ca40 (rcu_callback){....}-{0:0}, at: rcu_core+0x8a8/0x1260 [ 378.545598][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 378.545611][ T31] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 378.545689][ T31] locks held by getty/5377: 2, on CPU#1: [ 378.545701][ T31] #0: ffff888028b5d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 378.545794][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 378.545859][ T31] locks held by syz.3.1159/10818: 2, on CPU#1: [ 378.545871][ T31] #0: ffffffff902b8e28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 378.545916][ T31] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 378.545966][ T31] locks held by syz-executor/11517: 4, last CPU#0: [ 378.545977][ T31] #0: ffffffff8ee36730 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 378.546021][ T31] #1: ffff8880768ea9f8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 378.546071][ T31] #2: ffff88807ee483b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 378.616712][ T31] #3: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 378.616849][ T31] locks held by syz.1.1369/11700: 3, on CPU#0: [ 378.616881][ T31] #0: ffffffff902b8e28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 378.623066][ T31] #1: ffff8880548156e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 378.623204][ T31] #2: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 378.623313][ T31] locks held by kworker/u8:18/11738: 2, last CPU#1: [ 378.623345][ T31] #0: ffff88802c482940 ((wq_completion)bond1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 378.623471][ T31] #1: ffffc9000399fc40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 378.646063][ T31] locks held by syz.4.1612/12612: 2, on CPU#1: [ 378.646083][ T31] #0: ffffffff902b8e28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 378.646136][ T31] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_unlock_filesystem_doit+0x2af/0x410 [ 378.646190][ T31] locks held by kworker/u8:21/13775: 5, last CPU#1: [ 378.646203][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 378.646251][ T31] #1: ffffc90003cb7c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 378.646298][ T31] #2: ffffffff8ebe9970 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 378.646339][ T31] #3: ffffffff8ee38ca0 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240 [ 378.646382][ T31] #4: ffffffff8ebff720 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 378.646434][ T31] locks held by syz.2.2251/15213: 2, on CPU#0: [ 378.646446][ T31] #0: ffffffff902b8e28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 378.646489][ T31] #1: ffffffff8f09f900 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 378.646534][ T31] locks held by syz-executor/15588: 4, last CPU#1: [ 378.646546][ T31] #0: ffffffff8ee36730 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 378.646591][ T31] #1: ffff8880358b5cf8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 378.646640][ T31] #2: ffff88807efd83b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 378.646693][ T31] #3: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 378.646746][ T31] locks held by syz.6.2722/17184: 1, last CPU#1: [ 378.646759][ T31] #0: ffff88802c7fa9f8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 378.646806][ T31] locks held by syz.0.2727/17206: 1, last CPU#0: [ 378.646826][ T31] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __update_page_owner_handle+0x5a/0x580 [ 378.646871][ T31] locks held by sed/17216: 2, last CPU#0: [ 378.646884][ T31] #0: ffff88807b6e0308 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 378.646932][ T31] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 378.646976][ T31] [ 378.646981][ T31] ============================================= [ 378.646981][ T31] [ 378.647002][ T31] NMI backtrace for cpu 1 [ 378.647020][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 378.647040][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 378.647050][ T31] Call Trace: [ 378.647058][ T31] [ 378.647065][ T31] dump_stack_lvl+0xe8/0x150 [ 378.647092][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 378.647112][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 378.647141][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 378.647163][ T31] sys_info+0x135/0x170 [ 378.647179][ T31] watchdog+0xfd7/0x1030 [ 378.647204][ T31] ? watchdog+0x1c7/0x1030 [ 378.647230][ T31] kthread+0x38b/0x480 [ 378.647247][ T31] ? __pfx_watchdog+0x10/0x10 [ 378.647261][ T31] ? __pfx_kthread+0x10/0x10 [ 378.647279][ T31] ret_from_fork+0x514/0xb70 [ 378.647308][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 378.647333][ T31] ? __switch_to+0xc89/0x1420 [ 378.647358][ T31] ? __pfx_kthread+0x10/0x10 [ 378.647376][ T31] ret_from_fork_asm+0x1a/0x30 [ 378.647416][ T31] [ 378.648362][ T31] Sending NMI from CPU 1 to CPUs 0: [ 378.648398][ C0] NMI backtrace for cpu 0 [ 378.648411][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 378.648432][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 378.648443][ C0] RIP: 0010:delay_tsc+0x62/0xd0 [ 378.648465][ C0] Code: 20 49 09 c7 4d 29 f7 49 39 df 73 55 bf 01 00 00 00 e8 c2 f6 b0 f5 65 48 8b 05 fa 28 b0 07 48 85 c0 74 1c f3 90 bf 01 00 00 00 59 f5 b0 f5 e8 24 7b 01 00 39 c5 75 0e 0f 01 f9 66 90 eb bb e8 [ 378.648482][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000082 [ 378.648498][ C0] RAX: 8000000000000001 RBX: 0000000000000899 RCX: ffffffff9a9d6501 [ 378.648513][ C0] RDX: 0000000000000001 RSI: ffffffff8c6dac60 RDI: 0000000000000001 [ 378.648525][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 378.648537][ C0] R10: dffffc0000000000 R11: ffffffff8be3f6c0 R12: 1ffffffff35a5ab5 [ 378.648551][ C0] R13: 00000000ffffffff R14: 000000c709838398 R15: 00000000000006e0 [ 378.648565][ C0] FS: 0000000000000000(0000) GS:ffff888124cde000(0000) knlGS:0000000000000000 [ 378.648580][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 378.648594][ C0] CR2: 00007f564b3ae000 CR3: 000000007abdc000 CR4: 00000000003526f0 [ 378.648610][ C0] Call Trace: [ 378.648617][ C0] [ 378.648626][ C0] wait_for_lsr+0x147/0x2f0 [ 378.648765][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 378.648802][ C0] serial8250_console_write+0xaa1/0x1200 [ 378.648827][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 378.648847][ C0] ? __schedule+0x17f1/0x58f0 [ 378.648878][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 378.648907][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 378.648930][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 378.648958][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 378.648982][ C0] nbcon_kthread_func+0x679/0x880 [ 378.649005][ C0] ? nbcon_kthread_func+0x163/0x880 [ 378.649023][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 378.649045][ C0] ? __kthread_parkme+0x71/0x1f0 [ 378.649072][ C0] ? __kthread_parkme+0x199/0x1f0 [ 378.649100][ C0] kthread+0x38b/0x480 [ 378.649117][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 378.649134][ C0] ? __pfx_kthread+0x10/0x10 [ 378.649151][ C0] ret_from_fork+0x514/0xb70 [ 378.649181][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 378.649209][ C0] ? __switch_to+0xc89/0x1420 [ 378.649235][ C0] ? __pfx_kthread+0x10/0x10 [ 378.649253][ C0] ret_from_fork_asm+0x1a/0x30 [ 378.649289][ C0] [ 378.660896][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 379.859596][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 379.868701][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 379.878787][ T31] Call Trace: [ 379.882064][ T31] [ 379.885013][ T31] vpanic+0x56d/0xa60 [ 379.889001][ T31] ? __pfx___schedule+0x10/0x10 [ 379.893905][ T31] ? __pfx_vpanic+0x10/0x10 [ 379.898419][ T31] panic+0xc5/0xd0 [ 379.902230][ T31] ? __pfx_panic+0x10/0x10 [ 379.906641][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 379.912098][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 379.917466][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 379.923654][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 379.929872][ T31] watchdog+0x1030/0x1030 [ 379.934214][ T31] ? watchdog+0x1c7/0x1030 [ 379.938634][ T31] kthread+0x38b/0x480 [ 379.942707][ T31] ? __pfx_watchdog+0x10/0x10 [ 379.947379][ T31] ? __pfx_kthread+0x10/0x10 [ 379.951965][ T31] ret_from_fork+0x514/0xb70 [ 379.956560][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 379.961675][ T31] ? __switch_to+0xc89/0x1420 [ 379.966356][ T31] ? __pfx_kthread+0x10/0x10 [ 379.970938][ T31] ret_from_fork_asm+0x1a/0x30 [ 379.975718][ T31] [ 379.978885][ T31] Kernel Offset: disabled [ 379.983228][ T31] Rebooting in 86400 seconds..